Business Intelligence Publisher and PII Data

Personally identifiable information (PII) data is secured at the database level using virtual private database (VPD) policies. Only authorized users can report on PII data. This restriction also applies to Oracle Business Intelligence Publisher reports.

PII data is protected using data security privileges that are granted by means of duty roles in the usual way. This topic identifies the tables that contain PII data and the data security privileges that are used to report on them.

Tables Containing PII Information

This table lists the PII tables and the reporting privileges that are used to report on data in those tables.

Table	Data Security Privilege
PER_ADDRESSES_F	Report Person Address
PER_CONTACT_RELSHIPS_F	Report Person Contact
PER_DRIVERS_LICENSES	Report Driver License
PER_EMAIL_ADDRESSES	Report Person Email
PER_NATIONAL_IDENTIFIERS	Report Person National Identifier
PER_PASSPORTS	Report Person Passport
PER_PERSON_DLVRY_METHODS	Report Person Communication Method
PER_PHONES	Report Person Phone
PER_VISAS_PERMITS_F	Report Person Visa

Note:

Work email and phone aren't protected.

All of these privileges are accessible using the Workforce Confidential Reporting duty role, which the Human Resource Analyst job role inherits.

The reporting privileges identified here aren't the only privileges that can provide access to PII data in Business Intelligence Publisher reports. If a user has the corresponding View or Manage privilege for the PII data, that privilege also provides access to the data. The Report privilege provides reporting access for users who don't otherwise have access through the corresponding View or Manage data privilege. For example, a user who has the View Person Phone privilege can access phone data in a BIP report even if the user doesn't have the Report Person Phone privilege.