Enhancements to GenAI Security Briefing Report

Oracle Fusion Cloud Access Certification enables your organization to perform reviews that determine whether roles are assigned appropriately to users. Within this process, certifiers use certifier worksheets to record judgments about a set of the user-role assignments included in the project.

For each user-role combination in the worksheet, a security-briefing feature was added in 25A. It displays information to assist with the certification decision, and it's now updated to identify: 

  • If the role is, is similar to, or includes an IT role that provides elevated access. If so, it identifies the IT role. The role being considered for certification is similar to an IT role if it includes 75 percent of that IT role's privileges.
  • If the role contains privileges that aren't usually assigned to users with the job title or position name of the person whose role assignment is being evaluated for certification.
  • If the user is a nonhuman user or a service account.

Business Benefit

Certifiers will have additional contextual information regarding the user-role combinations they're reviewing. This will inform their certification decisions better.

Steps to Enable

There are two versions of the certifier worksheet, original and enhanced. The security briefing is available in the enhanced worksheet, but not in the original worksheet. So to activate the security-briefing feature, first enable the enhanced certifier worksheet, if you haven’t already. (See Activate the Enhanced Worksheet for Access Certifications.) Then use Oracle Functional Setup Man­ager to update a profile option. Functional Setup Manager is available to users assigned the Application Implemen­tation Consultant job role.

  1. Click Navigator > My Enterprise > Setup and Maintenance.
  2. Expand the Tasks panel tab and click Search.
  3. In the Search Tasks field, enter Manage Administrator Profile Values. Click the Search icon.
  4. In the list returned by the search, click the Manage Administrator Profile Values item.
  5. The Search area of the Manage Administrator Profile Values page includes a Profile Option Code field. In it, enter ORA_GTR_ACERT_GENAI_ENABLED. Click the Search button.
  6. A record of the ORA_GTR_ACERT_GENAI_ENABLED profile value appears. In the row for the Site profile level, select Yes in the Profile Value field.
  7. Click Save and Close.