Content Section Access
To access the content for person profiles, you must give the required access for the content section to a role. You can specify the level of access as view, edit, or report for each role. For example, users in the line manager role can be given edit access to add and edit the Competencies content and view access to only read the Education content for their workers.
In addition, content section security secures user access to the various delivered talent ratings. The aggregate security privilege, View Talent Ratings, is required to gain access to the new Talent Ratings page.
Use the Profile Content Section Access task in the Profiles work area to secure access to content sections in person profiles. You must have the IT Security Manager role or privileges to perform this task. For a selected content section, you can:
- Identify the predefined or custom job roles and abstract roles that can access the content section in person profiles.
- Specify the level of access for each role. The levels are shown in this table.
| Access Level | Description |
|---|---|
|
View |
Users can view content-section data. |
|
Edit |
Users can edit content-section data. This access includes View and Report access. |
|
Report |
Users can include content-section data in Oracle Business Intelligence Publisher reports. |
When you map a content section to a role, a data security privilege is granted to the role automatically. For example, you could map the Leadership content section to the predefined Employee abstract role and set the access level to Edit. This table shows the resulting data security policy. The data security privilege shown in this data security policy would be generated and granted to the role.
|
Data Security Policy |
Data Resource |
Data Security Privilege |
Condition |
|---|---|---|---|
|
ORA_PER_EMPLOYEE_ABSTRACT, Grant on Profile Content Type LEADERSHIP |
Person Detail |
Manage Leadership Content Type |
HCM:PER:PER_ALL_PEOPLE_F:View Own Record |
These rules apply to the data security policy:
- The policy name is in the form:
role code, Grant on Profile Content Type content type code. The policy description is the same as the policy name. - The data resource is Person Detail.
- The data security privileges are in the form:
Manage | Report | View | content type name Content Type - The condition, which controls access to specific instances of person records, identifies the relevant person security profile.