Why You Assign Security Profiles to Abstract Roles

Users with abstract roles can sign in and open application pages. But they have no automatic access to data. To enable HCM data access for users with abstract roles, you assign security profiles directly to those roles.

These abstract roles are predefined in Oracle HCM Cloud:

• Employee (ORA_PER_EMPLOYEE_ABSTRACT)

• Contingent Worker (ORA_PER_CONTINGENT_WORKER_ABSTRACT)

• Line Manager (ORA_PER_LINE_MANAGER_ABSTRACT)

For example, employees can open the Directory but their searches return no results. Line managers can access My Team functions but can't see data for their organizations.

Predefined Security Profiles to Assign to Abstract Roles

This table identifies the predefined security profiles that you can assign directly to the Employee, Line Manager, and Contingent Worker abstract roles.

Security Profile Type	Employee	Contingent Worker	Line Manager
Person	View Own Record	View Own Record	View Manager Hierarchy
Public person	View All Workers	View All Workers	View All Workers
Organization	View All Organizations	View All Organizations	View All Organizations
Position	View All Positions	View All Positions	View All Positions
Legislative data group	View All Legislative Data Groups	View All Legislative Data Groups	View All Legislative Data Groups
Country	View All Countries	View All Countries	View All Countries
Document type	View All Document Types	View All Document Types	View All Document Types
Payroll	Not applicable	Not applicable	View All Payrolls
Payroll flow	Not applicable	Not applicable	View All Flows

After implementation, you may want to change aspects of this data access. For example, you may want to create your own security profiles and assign those directly to abstract roles.

Note: Such changes apply to all users who have the abstract role.

HCM Data Roles

Users who have abstract roles are likely to gain additional data access from the HCM data roles that you define for their job roles. For example, you may create an HCM data role for benefits representatives to access person records in a legal employer. Such data access is in addition to any access provided by abstract roles.