Job Requisition Security Details

The aggregate privilege View Job Requisition (ORA_IRC_VIEW_JOB_REQUISITION) is assigned by default to the Hiring Manager and Recruiter roles.

The ability to view job requisitions is also controlled by data security policies. There are two main dimensions to understand:

  • The job requisition's Hiring Team

    • If you're a direct member, sometimes called "ownership of the requisition".

    • If one of your subordinates is part of the Hiring Team.

  • The job requisition's security profile

    • This is an empty set by default, until a data role is created.

By default, the Hiring Manager role can only view job requisitions they own and job requisitions of their subordinates. This also applies to the Recruiter role, although that role should have a data role with a properly defined job requisition security profile so that additional requisitions should be visible through it.

Security profiles are defined differently depending on the business object. For job requisitions, the security profile is defined using these areas of responsibility dimensions:

  • Recruiting Organization

  • Recruiting Location

  • Job Family

  • Job Function

  • Recruiting Type

These dimensions are defined at the requisition security profile level. The values they cover are defined for each recruiter within their area of responsibilities. The data covered by the dimensions selected in the security profile is redirected to each user with this data role and relies on the user's areas of responsibility.

If the ORA_IRC_REQUISITION_UPDATE_DATA_SECURITY_ENABLED profile option is set to Y, then the other options for the role played in the job requisition, like recruiter, hiring manager, or collaborators, can be controlled as well as the visibility of subordinate requisitions.

The same data security applies to the privilege Update Job Requisition (ORA_IRC_UPDATE_JOB_REQUISITION) when the profile option is set to its default value N. This privilege is assigned to the Recruiter role by default. It's not assigned to the Hiring Manager role. A data role that has both the View Job Requisition (ORA_IRC_VIEW_JOB_REQUISITION) and Update Job Requisition (ORA_IRC_UPDATE_JOB_REQUISITION) privileges will edit the same set of job requisitions that they can view.

As soon as the profile option is set to Y, then the Update Job Requisition (ORA_IRC_UPDATE_JOB_REQUISITION) and Delete Job Requisition (ORA_IRC_DELETE_JOB_REQUISITION) function privileges are no longer sufficient; the system relies on the aggregate privileges of the same name and the requisition security profile. This allows to create a different set of updatable or deletable job requisitions.