To ensure that questions get required attention from community members and are NOT left unanswered, it’s important for the author to indicate (by selecting “Yes” or “No” when prompted) whether the question was answered. (newly added) Please note that it is also important to respond to EACH comment your question receives. Your Yes or No response ensures an accurate status for your question.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
Applications Security
Discussion List
-
Unsuccessful Login Audit Report & Sign-on Responsibilities Audit ReportSummary Oracle Fusion seeded report/ Bi-report that matches to our audit requirements.Content Hi All, We would like to know if there is a fusion seeded report that can g… -
Ability to end-date a role via Rest APIContent Has anyone done any testing of what happens if you try to disable a role via the Rest API? See attached screen shot. As of 21A, this can't be done through the UI… -
Employee role has access to Load interface file for import on schedule processContent Upon testing Employee role for a different purpose I came across these jobs below on the schedule process where this role user can execute. 1. Load file to inter… -
EL Expression based on Legal EntitySummary EL Expression based on Legal EntityContent Is it possible to have an EL expression based on Employee's Legal Entity ? We are using the same custom role for all t… -
User account creation that do not consume a licenseSummary User account creation that do not consume a licenseContent Hi Team, Anyone have idea or document "how to setup the Oracle User accounts so that they do not consu… -
Disable Instance link during refreshContent Anyone know if there is a way to disable the link to a test instance while it is being refreshed from production or another test instance until all post-refresh …
-
Under what conditions will a keystore be created?Summary We are seeing keystore creation in OPSS audit reports but did not use any of the tools that are identified in documentationContent We are seeing the following in…
-
Role Assignment history of usersSummary Role Assignment history of usersContent is it possible to get audit history of user that when roles are assigned and when was removed from the user ID
-
A tool in Oracle to Automate Security Role Access & Entitlement ReviewsContent We were wondering if there was a tool in Oracle to help with our security audit process for Access and Entitlement reviews? Currently we have a manual process to…
-
Locked Users Report - custom role and burstingSummary Can we make a custom role with access to run the Locked Users Report? Can we do email bursting of the output?Content We have two needs around the Locked Users re…
-
Setup and maintenance tasks in a RoleSummary How to find the setup and maintenance tasks available under a roleContent How to find the setup and maintenance tasks available under a role. Is there any naming…
-
What other capabilities does ASE_ADVANCED_USER_MANAGEMENT enable?Summary We have been advised to enable the ASE_ADVANCED_USER_MANAGEMENT user profile option for the sign-in sign-out REST api but would like to ensure that we are not cr…
-
Self Service Role ProvisioningSummary Self Service Role ProvisioningContent Hi Group, I am trying to find solutions for below and hoping to get some responses from you. This is related to secuiry con… -
How to terminate/kill end-users' Oracle SaaS ERP sessionContent I am looking for advice on how an IT Security Manager or user with elevated privileges could 1) find all active users within the SaaS and then 2) terminate those…
-
Audit Policy over Core Audit Policies - partially delivered Idea! Read for the details.Summary Partially delivered Enhancement Request regarding Idea 81c53ece43Content Many of you have supported our Idea calling for Oracle to track disabling and changes to…
-
SSO Authentication fails several times at TESTContent Hi Team, We have configured the SSO for our new HCM environment. After configuring the IDP and SP, when we are clicking on TEST from Security Console->Single Sig… -
Solution on creating two different Sign In URL for login - SSO configurationSummary Solution on creating two different Sign In URL for login - SSO configurationContent Hello Team, We have currently enabled SSO and all employees land in the home …
-
Creating an Accounts Payable View Only Role with restricted view access to one cost centreContent Hi there, Has anybody had any experience creating an accounts payable view only role which restricts data access to invoices coded to a specific cost centre ? Ju…
-
No visibility to failed logins for web servicesContent My understanding is there is no visibility to failed logins for users using web services. How could Oracle ERP Cloud possibly be FEDRAMP or DoD certified without…
-
Need help on customizing Oracle HCM Sign in pageContent Hi Team, We need urgently to customize the Oracle HCM Sign In page for users. How can we achieve this? Is there any way to customize the Oracle HCM Sign in page?…
-
Report showing when a user has had a role removed from their user accountContent When business users have roles assigned to their account for a period of time and then these roles are removed, we lose track of what they had access to from an …
-
Moving the HCM Cloud to Europe after Schrems II?Summary US Privacy Shiled is invalid: Moving the HCM Cloud to Europe?Content Dear all The US Privacy Shield is not valid anymore after the decision of the Court of Justi… -
Reports does not show in RolesContent Dear , I created some reports but it does not shows in role when we want to add our created reports in roles. It does not show all reports in roles function secu… -
DOR attachment missing in UCMContent Hello - While searching for contentId in Content Server, we are unable to see any relevant documents related to Document of Records. We are able to see only thos… -
IP Whitelisting solution for SaaS apps with IDCS in placeSummary IP Whitelisting solution , IDCS and LBACContent For security point of view our customer wants to use IP Whitelisting. Thinking of this, we have IDCS for IP white…
-
Remove BI Author role from ORA_FBI_PERFORMANCE_MANAGEMENT_TRANSACTION_ANALYSIS_DUTY_HCM duty in HCMSummary Remove BI Author role from ORA_FBI_PERFORMANCE_MANAGEMENT_TRANSACTION_ANALYSIS_DUTY_HCM duty in HCMContent As part of some customization to the VRT Employee role…
-
Security Audit: Best way to show listing of privileges?Content Hi all, Auditors are requesting a complete list active security roles and their associated privileges. Is the Security Reference Manual (link below) the best way…
-
Employee is getting error when try to access OTBI report from ESSSummary Employee is getting error when try to access OTBI report from ESSContent We created an OTBI Talent Rating Report for Employee, created a new tab next to 'Me' and…
-
Ideas raised re: HCM Data Loader auditing - impacts on ERP/Purchasing Cloud tooSummary Weaknesses in auditing of high risk security changes performed via HCM Data LoaderContent A number of ideas have been raised around issues with HCM Data Loader a… -
Got this popup after submitting an idea todaySummary Interesting...Content It seems total votes don't count - only Unique Organization Vote Counts. At least according to this message. We have three ideas that have …