Does anyone know what standard practice is for setting up roles using Oracle's Role Based Access Con

 Does anyone know what standard practice is for setting up roles using Oracle's Role Based Access Control functionality?

We came up with 2 options:

1 – Set roles up by job title.  Thus, if a new hire were to start, we would only need to set him/her up with one role - based on the title.

 

2 – Set roles up by function.  For example, Finance can have different functions – FP&A User, GL Non-Posting User, AP User, Web ADI, etc.  For each of these functions a role would be created and it would contain the various locations that we have.  Example:

 

GL FP&A Role