Infidox Technologies || Data Security In Oracle Fusion

|| Data plays to be a vital for any organisation and managing the data is not an easy task.||

We have list down some brief points on managing the data security policies in Oracle Fusion.

Managing Data Security Policies

A data security policy is a grant of a set of privileges to a principal on an object or attribute group for a given condition. A grant authorizes a role, the grantee, to actions on a set of database resources.  A database resource is an object, object instance, or object instance set. An entitlement is one or more allowable actions applied to a set of database resources.

The following table describes the ways through which data is secured.

Data security feature	Does what?
Data security policy	Defines the conditions in which access to data is granted to a role.
Role	Applies data security policies with conditions to users through role provisioning.
HCM security profile	Defines data security conditions on instances of object types such as person records, positions, and document types without requiring users to enter SQL code

Data Security Policies

Data security policies articulate the security requirement "Who can do what on which set of data."

The following table provides an example, accounts payable managers can view AP disbursements for their business unit.

Who	can do	what	on which set of data
Accounts payable managers	view	AP disbursements	for their business unit

A data security policy defines the grant by which a role secures business objects. The grant records the following.

·         Table or view

·         Entitlement (actions expressed by privileges)

·         Instance set (data identified by the condition)

HCM Security Profiles

You can use HCM security profiles to generate grants for a job role such as Manager. The resulting data role with its role hierarchy and grants operates in the same way as any other data role.

For example, an HCM security profile identifies all employees in the Finance division.

Applications outside of HCM can use the HCM Data Roles UI pages to give roles access to HR people.

Advanced Data Security: Explained

Advanced Data Security offers two types of added data protection. Database Vault protects data from access by highly privileged users and Transparent Data Encryption encrypts data at rest

* Oracle Database Vault:

Database Vault reduces the risk of highly privileged users such as database and system administrators accessing and viewing your application data. This feature restricts access to specific database objects, such as the application tables and SOA objects

* Transparent Data Encryption:

Transparent Data Encryption (TDE) protects Oracle Fusion Applications data which is at rest on the file system from being read or used.Data in the database files (DBF) is protected because DBF files are encrypted. Advanced security enables encryption at the tablespace level on all tablespaces which contain applications data. This includes SOA tablespaces which might contain dehydrated payloads with applications data.

P.S: If you like this content share it with your colleagues and friends.

Budget in Oracle Application.

Budget:

Budget concept is used for planning and controlling purpose. We can define budget up to maximum 60 periods. They are two types of budget. 

Planning Budget:

In this planning budget we just plan the expenditures but there will not be any 

control over it. It's is prepared for comparing the actual with budget figures to 

know the variance.

Funding Budget:

In this funding budget we can plan the expenditure or Revenue and 

also, we can keep the control on budget journal amount. Here, we required 

to create budget journal for defining budget amount.

It will control the actual transaction by using fund check methods 

(None, absolute, Advisory).

	Planning	Control	Budget Journal
Planning	Yes	No	No
Funding	Yes	No	No

Budget periods:

There are three types of periods. 

     
                 1. Open 

                 2. Current 

                 3. Freeze (Close) 

First period in the organization is with current Status when define the budget

next time you will get only Open Status. Freeze Status means closing of the

budget.

Fund Check levels:

There are three types for fund check level. 

        None - It is for planning budget 

        Absolute - We can’t enter amount beyond the budget amount. 

        Advisory – It will pop up a warning message when we enter amount 

                 

                        beyond budget amount. 

Setup Steps:

1. Create Reserve for encumbrance account and expenses accounts in account 

    

    segment values

2. Enable budgetary control at Ledger

3. Define Budget

4. Define Budget organization

5. Create Budget Journals

6. Query the budget journals and post

7. Create journal entry using budget account and test it.

   

Mass Allocation

Mass Allocations  

Mass allocation is a facility in Oracle Financials through which one can create journals that distribute and allocate revenues and expenses across a group of cost centers, departments, divisions, and so on. It is a very useful feature to properly distribute revenue and expenses amounts between accounts. For example, rent for the entire premises can be allocated to different cost centers based on the area occupied by each department. 

To define Mass Allocation formulas, you create a Mass Allocation batch that contains one or more Mass Allocation formula entries. 

You can also copy an existing Mass Allocation batch then modify it as needed for your new batch. By including parent values in allocation formulas, you can allocate to the child values referenced by the parent without having to enumerate each child separately.

You can create Mass Allocations in your functional currency, a foreign currency or statistical currency.

•        The Mass allocation journals in Oracle are handled in a step by step manner. The following steps are involved in created a Mass Allocation Journal Entry:

1.Create Mass Allocation Definition - First the user needs to define the mass allocation definition. The definition contains parameters as to how expenses etc would be distributed.

2.Validate the Mass Allocation definition - The second step is to validate the mass allocation definitions with valid account segments to ensure that same are correct and accurate.

3.Generate the Mass Allocation journals - Finally from journal entries already posted, mass allocation journals need to be passed so as to distribute or allocate the amounts to valid accounts based on proportion.

4.Review and post the entries - Once the mass allocation journals are generated, the last step in the process is to review the journals and post the entries to the Oracle General Ledger.