Manage Workers Security

The workers REST API is secured with various function security privileges and data security policies. These privileges and policies are delivered through predefined duty roles, which control access to person and employment objects. Depending on the roles assigned, and their level of access, users can access the workers REST API to view or manage data.

See these topics for detailed information.

Topic	Description
Security Privileges and Policies	Function security privileges, data security policies, and LOV roles and privileges that Oracle delivers for the workers API.
Predefined Duty Roles	Predefined duty roles and the privileges assigned to the roles based on the type of data.
Access Workers API	Role-based access to the workers API.
Set up Custom Roles	Examples to help you understand how different users with different set of privileges can access the workers API.

Quick Reference

For quick reference, here's an overview of the high level security role details for the workers API.

This table shows the predefined duty roles, the job roles they are assigned to, and the supported methods.

Duty Role	Method	Assigned To Job Role
Use REST Service - Worker Details ORA_PER_REST_SERVICE_ACCESS_WORKER_PERSON	GET, POST, PATCH, DELETE, and DESCRIBE	Human Capital Management Integration Specialist ORA_HRC_HUMAN_CAPITAL_MANAGEMENT_INTEGRATION_SPECIALIST
Use REST Service - Worker Sensitive Details ORA_PER_REST_SERVICE_ACCESS_WORKER_SENSITIVE	GET, POST, PATCH, DELETE, and DESCRIBE	Human Capital Management Integration Specialist ORA_HRC_HUMAN_CAPITAL_MANAGEMENT_INTEGRATION_SPECIALIST
Use REST Service - Worker PII ORA_PER_REST_SERVICE_ACCESS_WORKER_PII	GET, POST, PATCH, DELETE, and DESCRIBE	Human Capital Management Integration Specialist ORA_HRC_HUMAN_CAPITAL_MANAGEMENT_INTEGRATION_SPECIALIST
Use REST Service - Worker Employment ORA_PER_REST_SERVICE_ACCESS_WORKER_EMPLOYMENT	GET, POST, PATCH, DELETE, and DESCRIBE	Human Capital Management Integration Specialist ORA_HRC_HUMAN_CAPITAL_MANAGEMENT_INTEGRATION_SPECIALIST
Use REST Service - Person Identifiers for External Applications ORA_PER_REST_SERVICE_ACCESS_PERSON_IDS_FOR_EXTERNAL_APPS	GET, POST, PATCH, DELETE, and DESCRIBE	Human Capital Management Integration Specialist ORA_HRC_HUMAN_CAPITAL_MANAGEMENT_INTEGRATION_SPECIALIST
Use REST Service - Worker Details Read Only ORA_PER_REST_SERVICE_ACCESS_WORKER_PERSON_RO	GET, DESCRIBE	Human Capital Management Integration Specialist ORA_HRC_HUMAN_CAPITAL_MANAGEMENT_INTEGRATION_SPECIALIST
Use REST Service - Worker Sensitive Details Read Only ORA_PER_REST_SERVICE_ACCESS_WORKER_SENSITIVE_RO	GET, DESCRIBE	Human Capital Management Integration Specialist ORA_HRC_HUMAN_CAPITAL_MANAGEMENT_INTEGRATION_SPECIALIST
Use REST Service - Worker PII Read Only ORA_PER_REST_SERVICE_ACCESS_WORKER_PII_RO	GET, DESCRIBE	Human Capital Management Integration Specialist ORA_HRC_HUMAN_CAPITAL_MANAGEMENT_INTEGRATION_SPECIALIST
Use REST Service - Worker Employment Read Only ORA_PER_REST_SERVICE_ACCESS_WORKER_EMPLOYMENT_RO	GET, DESCRIBE	Human Capital Management Integration Specialist ORA_HRC_HUMAN_CAPITAL_MANAGEMENT_INTEGRATION_SPECIALIST
Use REST Service - Person Identifiers for External Applications Read Only ORA_PER_REST_SERVICE_ACCESS_PERSON_IDS_FOR_EXTERNAL_APPS_RO	GET, DESCRIBE	Human Capital Management Integration Specialist ORA_HRC_HUMAN_CAPITAL_MANAGEMENT_INTEGRATION_SPECIALIST
Use REST Service - Worker as Worker ORA_PER_REST_SERVICE_ACCESS_WORKER_AS_WORKER	GET, POST, PATCH, DELETE, and DESCRIBE	Orphan
Use REST Service - Worker as Manager ORA_PER_REST_SERVICE_ACCESS_WORKER_AS_MANAGER	GET, POST, PATCH, DELETE, and DESCRIBE	Orphan
Use REST Service - Worker as HR ORA_PER_REST_SERVICE_ACCESS_WORKER_AS_HR	GET, POST, PATCH, DELETE, and DESCRIBE	Orphan