Multiple Organization Access Control
Setting Up Multiple Organization
Access Control
You can assign operating units to a
security profile and then assign the security profile
to responsibilities or users. If
multiple operating units are assigned to the security
profile, then a user can access data
for multiple operating units from a single
responsibility. This ensures that
users can only access, process, and report on data for
the operating units they have access
to. You can limit users to information relevant to
their organization. For example, you
can limit accounts payables clerks to enter invoices
associated exclusively with their
operating unit.
Your responsibility determines which
operating units you can access when you use
Oracle Applications. If you only
want a responsibility to access only one operating unit,
then set the MO: Operating Unit
profile option. If you want a responsibility to access
multiple operating units, then set
the MO: Security Profile option and assign multiple
operating units to it. You can also
set the MO: Default Operating Unit profile option to
specify a default operating unit
that will default in transaction entry pages.
You can run your reports at the
ledger level, or operating unit level. If you run reports
at the ledger level, then the report
will submit data for all operating units assigned to
that ledger that you have access to
as defined by the MO: Security Profile option.
Reference:
Oracle E-Business Suite Multiple
Organizations Implementation Guide
Example:
Setting Up Multi Org Access Control for OM Responsibility:
The Security Profile Form allows you
to group together Operating Units
Define the security profile for the Order
Management Responsibility:
1. HRMS Manager> Security>
Profile
2. Verify Security Profile is
defined for the OM Responsibility.
3. If the Security Profile is not
yet setup, enter it and attach operating units.
4. Save.
The Security List Maintenance
Program Must be run each time you add or change Security Profiles.
There are three Profile Options you
need to be aware related to Multi-Org that should be set at Responsibility
Level.
- The R12 profile option 'MO:
Security Profile' is always evaluated first.
- The pre- R12 option 'MO: Operating
Unit' still works in R12. It's just a secondary priority being evaluated after
'MO: Security Profile'.
- The R12 profile option 'MO:
Default Operating Unit' sets the default operating unit for transactions when
running under a Security Profile.
Many R12 application modules do not
work with 'MO: Security Profile' set for a given responsibility.
- They must use 'MO: Operating Unit'
- Some even require all three
profile options set.
Examples:
-
CRM Modules
-
Certain GL Drilldown Functions
(Trial and error determination of
setups, no clear direction)
Now check Operating Units field in
order screen.
Vision Operation defaults as
operating unit in the form per profile
option setting for 'MO: Default Operating Unit' at responsibility level.
Comments
Post a Comment