Why You Assign Security Profiles to Abstract Roles
Users with abstract roles can sign in and open application pages. But they have no automatic access to data. To enable HCM data access for users with abstract roles, you assign security profiles directly to those roles.
These abstract roles are predefined in Oracle HCM Cloud:
-
Employee (ORA_PER_EMPLOYEE_ABSTRACT)
-
Contingent Worker (ORA_PER_CONTINGENT_WORKER_ABSTRACT)
-
Line Manager (ORA_PER_LINE_MANAGER_ABSTRACT)
For example, employees can open the Directory but their searches return no results. Line managers can access My Team functions but can't see data for their organizations.
Predefined Security Profiles to Assign to Abstract Roles
This table identifies the predefined security profiles that you can assign directly to the Employee, Line Manager, and Contingent Worker abstract roles.
Security Profile Type |
Employee |
Contingent Worker |
Line Manager |
---|---|---|---|
Person |
View Own Record |
View Own Record |
View Manager Hierarchy |
Public person |
View All Workers |
View All Workers |
View All Workers |
Organization |
View All Organizations |
View All Organizations |
View All Organizations |
Position |
View All Positions |
View All Positions |
View All Positions |
Legislative data group |
View All Legislative Data Groups |
View All Legislative Data Groups |
View All Legislative Data Groups |
Country |
View All Countries |
View All Countries |
View All Countries |
Document type |
View All Document Types |
View All Document Types |
View All Document Types |
Payroll |
Not applicable |
Not applicable |
View All Payrolls |
Payroll flow |
Not applicable |
Not applicable |
View All Flows |
After implementation, you may want to change aspects of this data access. For example, you may want to create your own security profiles and assign those directly to abstract roles.
Such changes apply to all users who have the abstract role.
HCM Data Roles
Users who have abstract roles are likely to gain additional data access from the HCM data roles that you define for their job roles. For example, you may create an HCM data role for benefits representatives to access person records in a legal employer. Such data access is in addition to any access provided by abstract roles.