Security Profile Seeting with in a Same Business Group

Hello,
With in one business group I have employee of multiple country. Now the concern is that I need to have two different responsibility through which I can restrict the employee as per the country.
The things which identify between countries are. 1. They have different GRE. 2. They have different Operating Units. I have tried to create a security profile it has the one option Secure organization by single Operating units, but I ma not able to see that working? Where exactly we need to declare the operating Unit i need to secure for? Can any one suggest me a suitable work around.
The version we are using is 11.5.10
Thanks

If you security profile is 'static', then you need to run the concurrent process 'Security List Maintenance'. This will identify all records which match the security profile rule and then allow the user to see those records when the use their 'secured' responsibility.
Regards
Tim

Similar Messages

  • How to setup Business Group with Global Legislation?

    Hi All,
    We are exploring possibility of creating International Business Group with no Legislation Code for our client. The client has operations in multiple geographies.
    I found following document in Metalink
    How an International Business Group be created with no Legislation Code? [Doc ID 851711.1] It mentions "Global legislation must be installed in order to set up a Global Business Group. The business group is created just like any other, but with Global legislation selected. You will need to use Global responsibilities to access it."
    When we tried to create a business group with Legislation Code as 'Global" we did not find any such Legislation Code in dropdown of *Business Group Info classification.
    Has anybody implemented Global Legislation before? Any information on Setup Steps, Challenges faced, bugs and issues faced with other modules especially OTL would be appreciated.
    Thanks in Advance,
    Amit
    Edited by: user10450466 on Jan 22, 2010 12:23 AM

    I wasn't aware there's any such thing as 'Global Legislation' in HRMS and I think the Metalink Note you mention is misleading. There are multiple concepts here being mixed up.
    hrglobal and Data Installer
    Oracle deliver legislative seed data through hrglobal and Data Installer. When a DBA runs this they pick the legislations they wish to install. That includes legislations such as US, GB and all legislations where Oracle HRMS deliver seed data (Fast Formulas, balances, etc). One of the options here is 'Global', which ensures that common seed data used across multiple legislations is installed. This process does not create new legislations - it just creates the seed data used by those legislations. 'Global' is not a legislation - it just means that the relevant seed data (Fast Formula, balances, etc) is typically delivered without the legislation_code column being populated.
    Business Groups and Legislations
    A Business Group is intrinsically tied to a Legislation Code - they have a one-to-one relationship. When you define a Business Group you have to pick a Legislation and that list of Legislations comes from fnd_territories_vl. The list in fnd_territories_vl has nothing to do with hrglobal or Data Installer. There is no 'global' territory.
    International HR & Payroll
    If you are implementing HRMS in a country where Oracle HRMS do not deliver any specific legislative seed data or functionality (ie, the legislation isn't listed in Data Installer) you have the option of using International HR & Payroll. This allows you to install generic seed data into the legislation of your choice, which is again a list from fnd_territories_vl. Again, there's no concept of 'global' legislation. Information on that is available here:
    International HR and Payroll [ID 261452.1]
    International Implementations
    Customers, like yours, who are rolling out Oracle HRMS to multiple countries have a big choice to make: single or multi Business Group. If you opt for one Business Group you create employees in multiple countries all within the same Business Group. That Business Group is tied to just one of those country's legislation codes - which you go for is up to you but that's generally the Legislation Code of the International HQ. The problem with this approach is that you can't leverage the legislative-specific functionality for each of the other countries.
    If you opt for multi-Business Group you typically define one Business Group for each country so that you leverage the legislative-specific functionality for each country. This is generally more popular but doesn't suit everyone: you can have problems with employees transferring from one country to another, etc.
    Global Structures
    Oracle HRMS has forced you to tie a Business Group to a legislation code for many years. As mentioned above, this causes a number of problems. To mitigate those, Oracle have delivered a number of enhancements that help you model global businesses:
    1. Global Organization Hierarchies
    2. Global Security Profiles
    3. Global Overseas Deployment functionality (nickname GOD/GOLD)
    4. Cross Business Group profile option
    5. etc
    I hope that helps.

  • URGENT - New business group

    I created a new BG, and LE,SOB ETC...., but my operating unit is still under old BG.
    CAN anyone help me out , how to c new BG

    Hi,
    Once you define the Business Group, you have to assign the Business Group to system profile values.
    Profile values are:
    1. HR: Business Group
    2. HR: Security Profile
    Then come back to HRMS responsibility and define the Operating unit. Now you can see your Operating Unit under your BG.
    Please go through the 'Multi-Org Structure' document to get the clear idea about it.
    Regards
    Jhansi

  • Individual Business Groups

    We have existing financials running with a Business Group (not the set up BG).
    Now we are implementing HR & Payroll. I know we should use the same business group.
    But is it something worng, if we define a separate new BG for HRMS implementation (Though we have sparate BG for Finacials & HRMS, the SOB is one & the same). What kind of impacts will it have considering the transfer to GL, approval process in Financials, etc.
    Thanks.

    First thing for one legislation it is advisable to use one BG
    Please let us know why you are planning to create the Separate Business Group and is there any specific business Reason for that..
    If you define a separate business group then all your transaction will reside in this New Business group only. You cannot use the employees in the new BG for any PO approvals or other transaction in a Different BG
    Yes you can see the employees across BG by enable cross Business Group
    Also Oracle recommends to have one BG per legislation
    Thanks
    Regards
    Ramesh Kumar S

  • Business group information

    Error when trying to save the business group information for a newly created business group , it says a duplicate record

    Query all your organizations with a classification of "Business Group".
    US HRMS Manager: Work Structures > Organization > Description
    Select the existing BG you wish to update. Or create a new organization, classify it as a BG and add the required "other" information.
    You may need to query the organization table and look at your BG IDs. I suspect you were trying to create an entity that already existed instead of selecting and updating it.
    Regards,
    Greg

  • Cross Business Group employees PO Approval?!

    Dear PO Experts,
    I have situation some thing like this. I have 3 business groups called BG-A and BG-B
    I have employees defined in BG-A as follows who are PO approvers(Who has authority to Approve PO)
    John
    Adam
    Smith
    I have employees defined in BG-B as follows, who makes PO.
    Nancy
    Maria
    Now my question is?
    Can John(BG-A) approve a PO made by Nancy(BG-B)? (note: these two employees are defined in Different BGs)
    Please let me know your views.
    At this point in time John, Adam and Smith names defined as employees in BG-B as well to fecilitate the approval process?
    Note: we are using Approval Workflow.
    Regards
    SK

    Hi,
    Employees are restricted at Business Group level and not at Operating Unit level. So only employees belonging to the same business groups can be used to form an approval list.
    So you cannot use employee from a different business group(A) to approve PO created by another employee from business group B.
    Let me know if this clears your doubt.
    Raajkumar

  • Issue implementing Business security profile in IDT

    Hi,
    BO 4.1 SP3
    I created a WebI Report with ADMIN privileges with 3 objects and published to Public Folder.
    Then I created a Business security profile in IDT and Denied USER1 access to ‘Display Data’ on one of the above 3 objects say Object3 (i.e. Granted ‘Create Query’ and Denied ‘Display Data’ access on that object3).
    Now when USER1 logs to WebI -> Public Folders and refresh the report, it says 'No privlilege..contact admin' message.
    Is it possible to display Certain Users to have all 3 columns and hide Object3 to USER1 in the same WebI report ?
    Appreciate if anyone can give some directions ?
    Thanks.

    I think you missed one more thing,
    IDT -> Business Layer -> Parameters -> AUTO_UPDATE_QUERY to YES
    Ref: xi4sp6_info_design_tool_en.pd Page: 225
    A user who is denied an object by a Display Data setting might refresh a report containing the denied object. You can specify what the refresh should do in this case by setting the SQL generation parameter AUTO_UPDATE_QUERY in the business layer.
    If this parameter is set to No, then refreshing the report generates an error message.
    If this parameter is set to Yes, then the denied objects are removed from the query and from any filters defined in the business layer. Data for other granted objects is retrieved and displayed to the user in a partial report.

  • Creating a NEW Business Group, NO Security Profile generated

    Platform : R12 running on Linux86 --> FRESH install ( NOT Vision db )
    Resp : Global HRMS Super User
    Problem : No Security Profile generated for NEWLY created Business Group
    After creating a NEW business group ( ie. BG1 )
    I am able to see both BG1 and Setup Business Group ( I an view both Business Groups via Organization screen)
    When I access the Security Profile screen using the same resp "Global HRMS Super User"...
    I can ONLY see the default security profile ( Setup Business Group )...
    I am NOT able to view the default security profile ( BG1 ) that should have been created when I created my new business group earlier.
    NOTE : If I use the VISION db, and do the exact same thing... I can see both Security Profiles.. and both Business Groups.
    If I use the FRESH db, I can see both Business Groups... BUT... only 1 Security Profile... ( Setup Business Group )
    WHY ??
    Someone please HELP !!
    Thank-you
    Charlie :)

    hi charlie i tried the same in my vision instance, i am able to view my BG at the security profile level,
    when you query the system profiles,have you enabled the display checkbox at the responsibility level and try, or create an new responsibility and try... let me know the navigation you done clearly,
    Raj

  • In R12.1.3, MO:Security Profile Vs HR:Cross Business Group precedence

    Hi All,
    In R12.1.3, Which profile option has higher precedence in MOAC structure.
    If i set the HR:Cross Business Group to NO at resp level and MO: Security Profile, which is associated to Global Security Profile which has two OUs of two different BGs.
    For example:
    I have BG1 - OU1
    BG2 - OU2
    Case 1:
    Global Security Profile - XXGSP has both OU1(BG1) and OU2(BG2) associated.
    HR:Cross Business Group - NO
    HR:Cross Business Group - BG1
    In Purchasing Responsibility, what could be the behavior when i create PO?. Will it show both OU1 and OU2? or OU1?
    Case 2:
    Global Security Profile - XXGSP has both OU1(BG1) and OU2(BG2) associated.
    HR:Cross Business Group - Yes
    HR:Cross Business Group - BG1
    In Purchasing Responsibility, what could be the behavior when i create PO?. Will it show both OU1 and OU2? or OU1?
    Case 3:
    Global Security Profile - XXGSP has both OU1(BG1) associated.
    HR:Cross Business Group - NO
    HR:Cross Business Group - BG2
    In Purchasing Responsibility, what could be the behavior when i create PO?. Will it show both OU1 and OU2? or OU1?
    Case 4:
    Global Security Profile - XXGSP has both OU1(BG2) associated.
    HR:Cross Business Group - Yes
    HR:Cross Business Group - BG1
    In Purchasing Responsibility, what could be the behavior when i create PO?. Will it show both OU1 and OU2? or OU2?
    Regards,
    Soorya

    Hi Soorya,
    We are in a similiar situation and I was wondering if you have received an answer or how you proceeded?
    Thanks,
    Cathy

  • Securing WebService with Basic Security Profile

    Hi,
    I'm trying to write a WebService on EJB 3.0 that is secured with Basic Security Profile. Every message is signed with x509 certificate.
    I'm new in Java WebServices and I really don't know how to do it. Can anybody help me?
    WebService will be deployed on JBoss 4.2.1 GA with java jdk 1.6

    Hi,
    I'm trying to write a WebService on EJB 3.0 that is secured with Basic Security Profile. Every message is signed with x509 certificate.
    I'm new in Java WebServices and I really don't know how to do it. Can anybody help me?
    WebService will be deployed on JBoss 4.2.1 GA with java jdk 1.6

  • HRMS APP-PER-52803:Your business group does not match your security profile

    I see this as a common problem, please guide me as to what should be done to rectify it.
    While opening \Payroll\Description, it gives message as under:
    HRMS APP-PER-52803:Your business group does not match your security profile
    Regards
    Nemo

    Hi,
    I feel that "HR: Security Profile" option is not set properly, BZ of that screen is errors out.
    Please check the following Profile Options
    HR: Security Profile -- Enter the sec profile name which is business Group name
    HR: Business Group -- Your Business Group Name
    Note: If you set the HR: Security Profile optional first, then system will sets the HR: Business Group profile option too automatically.
    I hope this will solves your problem.
    thanks
    Krishna Prasad Rapolu
    Oracle HRMS Consultant.

  • Am running Firefox 3.6.10. Am having problems with Firefox crashing after upgrading to Kaspersky Internet Security 2011. Anyone else having same problem. Oh, BTW am still using Windows XP operating system.

    Am running Firefox 3.6.10. Am having problems with Firefox crashing after upgrading to Kaspersky Internet Security 2011. Anyone else having same problem. Oh, BTW am still using Windows XP operating system.

    The latest flash player release is 11,0,1,152.
    Can you upgrade to this version and see whether the crash stil exists?
    Go to get.adobe.com/flashplayer to download and install flash player.
    In case you need direct link to installer/uninstaller, please go to http://forums.adobe.com/message/3952360#3952360 to find them.
    saranlee wrote:
    My computer crashes repeatedly and I get the message pages are not responding do you want to stop, and/or shockwave is not responding do you want to stop. I have Windows XP Service Pack 3, I am having the same issues whether I use Internet Explorer, Google Chrome, or Mozilla Firefox. My HP Pavilion Desktop has 504 MB of Ram and I am using high speed internet connection. Because it was crashing so much, I used the uninstall program for Flash player to uninstall Flash, I checked my registry and removed anything I saw that was Flash. I then uninstalled Google Chrome and Mozilla Firefox, then I reinstalled the most recent versions from their websites. I did the same for FlashPlayer and Shockwave Flash. I went to the Adobe website and had them check to see if it was working and it shows I have FlashPlayer 10.3.181.36. The page that shows  which version of flash player goes with Windows XP states that I should have 10.3.181.34 (This is what I thought I had before I updated, I was having the same problems). When I went into my computer to see what version I have, it shows 11.5.9.620 Activex and both Flash Player and Flash Player Object is listed as 10.3.181.34. My firewall for Windows is set to medium. I also am running Norton Internet Security. It takes anywhere from 3-6minutes for some of my games to load, and I have to refresh at least 3-4 times in order to play. When I do start to play it freezes frequently and I use escape to free it up. This has been going on for a month. I have no idea what to do. I am not very computer savy and I have been learning as I go.

  • Security Profile with Assignment-level Security limitations

    Hi, We are on an R12 installation, and have a security profile based on Organization Hierarchy (With Assignment-Level Security - i.e. 'Restrict on Individual Assignments' checkbox is ticked); this is based on a specific organisation as the 'Top Org' rather than the User's own Assignment.
    The profile option "HR: Access Non-Current Employee Data" is set to 'Yes', but the security profile still restricts access to Future-Dated Assignments and Ended Assignments. Is this expected behaviour, and is the only solution to develop a Custom security profile, and is this even feasible (to replicate organisation hierarchy security using SQL in the custom security tab), or would we have to use a different criteria, such as Payroll?
    Regards, Chris

    Further investigation reveals this is a limitation of the product - within security, the selection criteria which determines which individuals (or assignments) is handled seperately to Assignment-level security (i.e. whether individual assignments are restricted), it is not possible to get around this issue even using custom security, as that does not give one the power to determine how individual assignments are handled. Thus if assignment-level security is implemented, the user cannot see Ended or Future-Dated assignments, even if the profile option "HR: Access Non-Current Employee Data" is set to 'Yes'.
    The only workaround we have found for this is to:
    a) remove assignment-level security, and
    b) ensure that where an employee has multiple assignments that cross security groups, this individual is set up twice, as two separate employees.

  • SQL Query in Custom Security when creating Security Profile

    Hello all,
    I've created a security profile with Custom security and provided a simple query in Custom Security tab-
    PERSON.PERSON_ID = FND_GLOBAL.EMPLOYEE_ID
    Custom security option is "Restrict the people visible to each user using this profile"
    I am not able to see the record as expected.
    If I Hardcode the person ID "PERSON.PERSON_ID = 13449" with "Restrict the people visible to each user using this profile", I am able to see the record.
    If I Hardcode the person ID "PERSON.PERSON_ID = 13449" with "Restrict the people visible to this profile", I am able to see the record after running PERSLM and same is in PER_PERSON_LISTS.
    Am I correct in checking with FND_GLOBAL.EMPLOYEE_ID?
    (This was mentioned in system administrator guide :
    "+Oracle HRMS assesses the custom security when the user signs on. In addition, the custom security code can include references to user specific variables, for example, fnd_profile.value() and fnd_global.employee_id.+"
    docs.oracle.com/cd/E18727_01/doc.121/e13509/T2096T2098.htm).
    I have tried with FND_GLOBAL.USER_ID / FND_PROFILE.VALUE('USER_ID') / :ASG_ID (seeded query has a join with this bind variable) - not happening.
    I've given options as below :
    Employees = None
    Contingent Worker = Restricted
    Applicant = None
    Contacts = All
    Candidates = All
    All other options - Defaulted
    Thanks,
    Sumanth

    Resolved this - One cannot see self's employee record in the form for which this is setup.
    Hence the below query though correct in syntax did not show any data.
    PERSON.PERSON_ID = FND_GLOBAL.EMPLOYEE_ID
    My original requirement was that all employees belonging to one's Organization should be displayed, and this is working fine with an updated query for the same.
    Thanks,
    Sumanth

  • CS4 issues with Microsoft Office Small Business 2007? Other apps?

    I recently purchased the CS4 upgrade and a new laptop. Last night after nearly 7 hours I finally got it all installed and working correctly. I had the versioncue.dll error which caused most of my pain. Anyway... I've been lurking on the forums since CS3 launched but passed on it due to all the issues I had read about it's installer, finally I felt I needed to take the plunge and upgraded my software (from MX2004 suite). My question is this.
    Currently I have a very clean laptop with only:
    Kaspersky 2009 and CS4 installed.
    I'm looking to install Microsoft Office Small Business 2007 but I have a concern with the Small Business Manager SQL Server. From other post I've seen that the sql servers have conflicted with adobe applications, has anyone had any issues with this or should I be able to install it now without issue. I'm trying to pre-emptivly make sure I don't screw something up and have to install everything again from scratch.
    My end goal would be to have: Kaspersky security suite 2009, CS4, MS office Small Business 2007, Paragon back up application. At that point I want to create a restore and if anything happened I'd have the bulk set up easily again.
    Does anyone have any other no no's about what does and does not play well with CS4?
    My Setup:
    Gateway FX 7805u laptop
    dual core centreno 2 2.26
    4 gigs DDR3
    Geforce 9800m gts 1 gb
    320 gb 7200 harddrive - not sure on make
    Vista 64
    All drivers up to date except the new Nvidia drivers as they are still beta
    Thank you in advance.

    I should also have mentioned (ask) about the fact that when I first installed I had gotten all the way past the initial installer and to the updates so the suite had already been activated/registered.
    After getting the versioncue.dll error it has you remove the suite and many folders pertaining to it. So after I did all that and reinstalled it automatically put my info back in for me (obviously one of the folders it doesn't have you move) and I don't recall it re-registering it again. I'm assuming I am fine with my activations and it only counted it once as it was the same machine with an uninstall/reinstall? Everything seems to be working ok, i'm just curious as to what it actually did? Did it take another activation or no? I'm planning on installing to my desktop as well as soon as I get the board/proc replaced, so i'm just looking down the road for potential issues.
    Thanks again.

Maybe you are looking for

  • How to show the selected item in a drop-down box......

    hi, i m using the following code for selecting from the drop-down box... <html:select property="lddate" style="width:160"> <html:options collection="load_dt" name="AlmCurrencyRiskAnalysisBO" property="load_dt" labelProperty="load_dt"/> </html:select>

  • Runtime error while loading data in BI 7.0

    Hi All, While loading data in BI 7.0, I am getting Runtime Errors "TSV_TNEW_PAGE_ALLOC_FAILED" . No more space available for extending internal table. As per SAP BASIS SUPPORT comments: "This is NOT a space problem but rather a huge memory resource c

  • Regarding Changing Package

    Hai Guru's can any body please help me how to change package for Data Dictionary Objects and remote Enabled Function Modules Thanks in advance

  • Error Infoobject does not exists in Infoprovider

    Hi Friends, I am getting "Error Infoobject does not exists in Infoprovider" in Quality. Actually Fiscal Period and Variant are not showing up in Query designer left panel (where we can see infoprovider structure). This problem is only in Quality, the

  • Objects Shifting in File after opening saved document

    Hi, I'm having a problem with illustrator where I save a file, close it, and when i reopen it, my objects have shifted off the page in either directions. How do I stop it from doing that? I need help as soon as possible since I'm working in a print s