OTBI - View only role to access GL subject area data

Warren N

We need to provide some non financial users the ability to view General Ledger data (gl balances and gl transactions) without giving functional access to the General Ledger. Just provide the user view only access to view GL information, without giving them privileges that invoke a Financial users license (GL_MANAGE_GENERAL_ACCOUNTING_ACTIVITIES_PRIV) OR (GL_MANAGE_PERIOD_CLOSE_ACTIVITIES_PRIV). Our goal is for these users to see General Ledger information in OTBI.

Nathan CCC

Hi Warren,

Yes you can create a custom read only role for any subject area in OTBI. Yes these read only roles will not need to include any of the privileges that are currently used in your metrics document to count towards a hosted named user subscription for a service in SaaS.

Step 1 read the user guide to find out what job role(s) and duty roles(s) are required for your subject areas.

https://docs.oracle.com/en/cloud/saas/financials/25a/faofb/Financial-Analyst-JR-7.html#Financial_Analyst_JR_7_d1e47372

For example,

job role Financial Analyst ORA_GL_FINANCIAL_ANALYST_JOB

has duty roles

• General Ledger Transaction Analysis Duty
• Inter Company Transaction Analysis Duty
• Payables to Ledger Reconciliation Transaction Analysis Duty
• Receivables to Ledger Reconciliation Transaction Analysis Duty

with access to query subject areas

• Financials Common Module - Intercompany Transactions Real Time
• General Ledger - Average Daily Balances Real Time
• General Ledger - Balances Real Time
• General Ledger - Journals Real Time
• General Ledger - Period Status Real Time
• General Ledger - Transactional Average Daily Balances Real Time
• General Ledger - Transactional Balances Real Time
• Payables Invoices - Installments Real Time
• Payables Invoices - Prepayment Applications Real Time
• Payables Invoices - Transactions Real Time
• Payables Invoices - Trial Balance Real Time
• Payables Invoices - Withholding Real Time
• Payables Payments - Disbursements Real Time
• Payables Payments - Payment History Real Time
• Receivables - Adjustments Real Time
• Receivables - Bills Receivable Real Time
• Receivables - Credit Memo Applications Real Time
• Receivables - Credit Memo Requests Real Time
• Receivables - Miscellaneous Receipts Real Time
• Receivables - Payment Schedules Real Time
• Receivables - Receipt Conversion Rate Adjustments Real Time
• Receivables - Receipts Details Real Time
• Receivables - Revenue Adjustments Real Time
• Receivables - Standard Receipts Application Details Real Time
• Receivables - Transactions Real Time
• Subledger Accounting - Journals Real Time
• Subledger Accounting - Payables Summary Reconciliation Real Time
• Subledger Accounting - Receivables Summary Reconciliation Real Time
• Subledger Accounting - Supporting References Real Time

Step 2 As IT Security Manager using Tools work area Security Console page Roles

create a copy the job role for example "xx Financial Analyst Read Only"

remove all inherit roles except the transaction analysis duty roles for the subject areas

keep all data security policies

delete all function security privileges

Step 3 grant you user(s) this custom role

Step 4 final step go to My Enterprise work area Setup and Maintenance task Manage Data Access for Users to grant this user with this custom role access to security context for example data access sets.