Unique privilege or grant identifies the primary user- Security Console

uyogi

A user with the "Application Implementation Consultant" role has permission to view all Business Unit information.
This role (ORA_ASM_APPLICATION_IMPLEMENTATION_CONSULTANT_JOB) can be copied and assigned to other users (secondary users).
Question:

What unique privilege or grant identifies the primary user (with the original role) compared to secondary users (with the copied role)?

John Hung-Oracle

Hi, Does this question be better serviced in the Fusion Application Administration forum or the Application Security forum?

Nathan CCC

Hi uyogi

Sorry but I do not understand what you mean by users who are "primary/secondary". You grant a role to users. There is no primary or secondary user. Just n users that are granted a role.

You may create role Y as a copy of a pre-defined out of the box role X with a new name such as XX_ASM_APPLICATION_IMPLEMENTATION_CONSULTANT_JOB "XX Application Implementation Consultant". If you go to the effort of making a copy then I expect you will grant/revoke one or more data security, function, inherited roles inside the custom version. You then grant that custom role to users. There is no primary or secondary user. Just n users who are granted custom role Y.

Typically if you create a custom role then it is because there is something in the original role you do not want people to do / something extra you added in the custom role you want users to do - so you revoke the original role X from all users then grant the custom role Y to all users that used to have the original role X.

The link from the custom role Y to the original role from which it was copied role X can I assume be inferred from the naming convention you use which you can setup on page Administration sub page Role with code/name suffix/prefix. When you copy role Y from role X in the security console on page Administration sub page "Role Status" you can see which custom role you created as which enterprise scheduler process identifier. So you may find a link between the 2 roles in the process run parameters table FUSION_ORA_ESS.REQUEST_HISTORY FUSION_ORA_ESS.REQUEST_PROPERTY.

uyogi

thank you for the information.