Overview of Creating HCM Implementation Users

As the service administrator for the Oracle HCM Cloud service, you're sent sign-in details when your environments are provisioned. This topic summarizes how to access the service for the first time and set up implementation users to perform the implementation.

You must complete these steps before you release the environment to your implementation team. You're recommended to create implementation users in the test environment first. Migrate your implementation to the production environment only after you have validated it. With this approach, the implementation team can learn how to implement security before setting up application users in the production environment.

Accessing the Oracle HCM Cloud Service

The welcome or service-activation email from Oracle provides the service URLs, user name, and temporary password for the test or production environment. Refer to the email for the environment that you're setting up. The Identity Domain value is the environment name. For example, HCMA could be the production environment and HCMA-TEST could be the test environment.

Sign in to the test or production Oracle HCM Cloud service using the service home URL from the welcome or service-activation email. The URL ends with either AtkHomePageWelcome or HcmFusionHome.

When you sign in for the first time, use the password from the welcome or service-activation email. You're prompted to change the password. Make a note of the new password, which is the service administrator password for subsequent access to the service. You're recommended not to share your sign-in details with other users.

Creating Implementation Users

This table summarizes the process of creating implementation users and assigning roles to them.

Step

Task or Activity

Description

1

Run User and Roles Synchronization Process

You run the process Retrieve Latest LDAP Changes to copy data from your LDAP directory server to Oracle HCM Cloud.

2

Import Users and Roles into Application Security

You perform this task to initialize the Oracle Fusion Applications Security tables.

3

Create Implementation Users

You create the TechAdmin and HCMUser implementation users and assign required job roles to them if these users don't already exist in your environment.

You don't associate named workers with these users because your Oracle HCM Cloud service isn't yet configured to onboard workers. As your implementation progresses, you might decide to replace these users or change their definitions. However, these two are required initially.

4

Create Data Roles for Implementation Users

To enable implementation users to access HCM data, you create the following data roles:

  • HRAnalyst_ViewAll

  • HCMApplicationAdministrator_ViewAll

  • HR_Specialist_ViewAll

You create additional data roles if you have licensed the Oracle Fusion Workforce Compensation Cloud Service or the Oracle Fusion Global Payroll Cloud Service.

5

Assign Security Profiles to Abstract Roles

Enable basic data access for the predefined Employee, Contingent Worker, and Line Manager abstract roles.

You perform this task at this stage of the implementation so that implementation users with abstract roles have the required data access. However, all application users with abstract roles also benefit from this step.

6

Create a Generic Role Mapping for HCM Data Roles

Enable the HCM data roles created in step 4 to be provisioned to implementation users.

7

Assign Abstract and Data Roles to the HCMUser Implementation User

Assign roles to the HCMUser implementation user that enable functional implementation to proceed.

8

Verify HCMUser Access

Confirm that the HCMUser implementation user can access the functions enabled by the assigned roles.

Reset your service administrator password after completing these steps.