Oracle Fusion Cloud HCM Areas of Responsibility (AOR) Using custom contexts & custom security

Rajat Agarwal

We have a use case to implement data security in FDI Fusion HCM Analytics for recruitment related dashboards by leveraging area of responsibility assigned to users in Oracle Fusion Cloud HCM

Following job requisition security profiles have been created on Oracle Fusion Cloud HCM:

Secured by area of responsibility > Secure by Recruiting Type

Secured by area of responsibility > Secure by Recruiting Type & Secure by Location

Secure by Hiring Team Member Type

The requirement is to aor based data security in both Oracle Fusion Cloud HCM and FDI Fusion HCM Analytics based on aor security assignments in Oracle Fusion Cloud HCM

We are able to restrict data in FDI for “Secured by area of responsibility > Secure by Recruiting Type” job requisition security profile/aor assignment in Oracle Fusion HCM Cloud using the security assignment using the data security assignment security context " HCM Recruiting Type” in FDI

However, we are not able to secure data in FDI for the following job requisition security profile types as we don’t see any seeded/out of the data security assignment security contexts for these in FDI

Secured by area of responsibility > Secure by Recruiting Type & Secure by Location

Secure by Hiring Team Member Type

Based on this blog post (), it looks like we need to set up custom data security in Oracle Fusion HCM Analytics using Recruiting Location Hierarchy AOR and hiring manager data extracted from Cloud HCM. If that is the case, could you please your experience and thoughts with accomplishing similar requirement?https://blogs.oracle.com/analytics/post/overview-of-aor-custom-security-in-hcm-analytics

Martin Myers-Argano 4 Oracle

I have implemented custom security and when done its very nice because it just works and you don't have to worry about it. Many steps to get it to that point though. The documentation you reference does highlight all the steps. There are more detailed blogs when searching google.

Another option you can explore is a limited availability feature. It might work in situation.
https://blogs.oracle.com/analytics/post/implementing-custom-security-context-in-oracle-fusion-data-intelligence-fdi

JohnW-Oracle

Hi @Rajat Agarwal

To add to the earlier suggestion and documentation, you mentioned: "we are not able to secure data in FDI for the following job requisition security profile types as we don’t see any seeded/out of the data security assignment security contexts for these in FDI".

So, currently your security is too restrictive and you won't be able to overcome that by adding more security. The most restrictive security will take precedence.

Regards,

John

Rajat Agarwal

Thanks for sharing your thoughts. It looks like the link shared by Martin below is applicable for securing reports based on  cost segments and balancing segments and may not work for recruiting module(recruiting type location hierarchy and hiring manager type). A good security feature/resource regardless. Thanks.

Nupur Joshi-Oracle

@Rajat Agarwal @JohnW-Oracle - FDI HCM supports Recruiting Type as an OOTB context.

Depending upon your requirement - you can use this context or use Custom data role and configure data security based on any AOR attribute. AOR data is brought into the warehouse with OOTB pipeline OR Configurable Security Contexts ( this is LA feature and you need raise SR to get it enabled on your environment) .

Please refer to the blog - This has guidelines on how to enable AOR in FDI and guidelines for using AOR data in setting up Data security. We have 2 use cases solution blueprint documented in these blogs - and generic guidelines too.https://blogs.oracle.com/analytics/post/overview-of-aor-custom-security-in-hcm-analytics

Regards,

Nupur

Rajat Agarwal

Thanks @Nupur Joshi-Oracle. Does the custom security context LA feature support recruiting attributes? Based on documentation, it looks custom security context feature only supports  cost segments and balancing segments. Is that accurate?