Global View-Only Access with Self-Service Exceptions (Fusion 25D)

Summary:

Global view-only access across Fusion with Self-Service exceptions (PR & Leave) + block Scheduled Processes

Content (please ensure you mask any confidential information):

We are on Oracle Fusion Cloud Applications 25D and we need a supported security design for a specific user group.

Target access model:

• Users should have global view-only access across Fusion (ERP/SCM/HCM/Setup). They can navigate and view all pages, but they must not be able to create/update/delete/approve/process/cancel any transactions.
• The only exceptions are self-service actions for their own transactions, such as:
  1. Submit their own Leave/Absence requests (employee self-service).
  2. Create and submit their own Purchase Requisitions (PR) as a requester (if applicable).