1. Securing SCM
  2. Role Types

Role Types

Oracle Fusion Cloud Supply Chain Management (Oracle SCM) defines the following types of roles:

  • Job roles

  • Abstract roles

  • Duty roles

  • Aggregate privileges

This topic introduces the role types.

Job Roles

Job roles represent the jobs that users perform in an organization. Warehouse Manager and Inventory Manager are examples of predefined job roles. You can also create custom job roles.

Abstract Roles

Abstract roles represent people in the enterprise independently of the jobs they perform. Some predefined abstract roles in Oracle Applications Cloud include Employee and Transactional Business Intelligence Worker. You can also create custom abstract roles.

All users are likely to have at least one abstract role that provides access to a set of standard functions. You may assign abstract roles directly to users.

Duty Roles

Duty roles represent a logical collection of privileges that grant access to tasks that someone performs as part of a job. Inventory Transaction Management Duty and Inventory Count Management Duty are examples of predefined duty roles. You can also create custom duty roles. Other characteristics of duty roles include:

  • They group multiple function security privileges.

  • They can inherit aggregate privileges and other duty roles.

  • You can copy and edit them.

Job and abstract roles may inherit predefined or custom duty roles either directly or indirectly.

You don't assign duty roles directly to users.

Aggregate Privileges

Aggregate privileges are roles that combine the functional privilege for an individual task or duty with the relevant data security policies. Functions that aggregate privileges might grant access to include task flows, application pages, work areas, dashboards, reports, batch programs, and so on.

Aggregate privileges differ from duty roles in these ways:

  • You can't create aggregate privileges. They are all predefined.

  • You can't modify aggregate privileges.

  • You can't copy aggregate privileges.

  • They don't inherit any type of roles.

You can include the predefined aggregate privileges in your custom job and abstract roles. You assign aggregate privileges to these roles directly.

You don't assign aggregate privileges directly to users.