Fusion Security ERP CLOUD Oracle Financials for EMEA Oracle Financials for Asia Pacific Table of Contents 1. Purpose of the document... 1 2. Function Security... 2 3. Data Security... 6 4. Working Example... 7 1. Purpose of the document Fusion security methodology can be summarized with the simple statement WHO can do WHAT on WHICH data. The WHO is implemented as users, while WHAT is being modeled as job or abstract roles. Thus, the full implementation of the Fusion security methodology requires a three-way intersection between user, role, and data. In previous Fusion releases the common solution for WHICH data was the use of data roles. A data role is essentially a job / abstract role for a specific set of data, where the set of data is usually defined using an element within the enterprise structure, such as business unit, or a business object, such as ledger and asset book. An example of a data role is Accounts Payable Manager US Operations, which is an Accounts Payables Manager role with access to data in the US Operations business unit. By assigning 1
users to these data roles, the mappings between user, data and roles is created. These data roles are created using a utility known as data role template. In Oracle Fusion Release 11 we have simplified data security. This document describes new simplified security for Oracle Financials for EMEA features. 2. Function Security This section describes predefined function security for Financials for EMEA features, grouped by business areas. Table below shows predefined tax roles, policies and features secured. Job role Duty role Policy Feature Tax Manager, Tax Specialist Tax ing Run Tax Register Tax Register Interim Tax Register Run Tax ing Financial Tax Register Run Tax Audit Trail Tax Audit Trail Run Tax Reconciliation Tax Reconciliation Run Tax Reconciliation by Taxable Account Tax Reconciliation by Taxable Account Run U.S. Sales Tax Sales Tax Prepare EU Sales Listing European Sales Listing Create Yearly Tax Yearly Tax Prepare Tax Selection Processing Select Transactions for Tax ing Prepare Tax Box Allocation Rules Tax Allocation Rules Prepare Tax Allocations Tax Allocation Process Prepare Tax Allocations Tax Box Return Preparation Prepare Tax Allocation Listing Tax Allocations Listing Prepare Tax Allocation Listing Tax Allocation Exceptions Prepare Tax Final ing Finalize Transactions for Tax ing View Finalized History of Transaction Taxes Finalized History of Transaction Taxes Run Turnover ing Selection Process Select Transactions for Turnover ing Run Turnover Declaration Closure Process Finalize Transactions for Turnover ing Run Payables Tax Reconciliation with General Ledger Payables Tax Reconciliation with General Ledger 2
Table below shows predefined fixed asset roles, policy and feature secured. Job role Duty role Policy Feature Asset Accounting Manager Fixed Asset ing Prepare Asset Register Asset Balances Register Table below shows predefined general ledger roles, policies and features secured. Job role Duty role Policy Feature General Accounting General Ledger ing Run Global Subledger Detail Journal Subledger Detail Journal Manager, General Accountant Run Global Third Party Detail and Balances Third-Party Detail and Balances Run Global Journals and Third Party Journals and Third-Party Run Global Third Party Balances Summary Run Global Daily Journals Run General Ledger Journal Entry Run Global Journal Ledger Run General Ledger Journal and Balance Run General Ledger Trial Balance Create General Ledger and Subledger Accounting Account Analysis Create General Ledger and Subledger Accounting by Journal Lines Run Global Third party Account Balance Third-Party Balances Summary Daily Journals General Ledger Journal Entry Journal Ledger General Ledger Journal and Balance General Ledger Trial Balance General Ledger and Subledger Account Analysis General Ledger and Subledger Accounting by Journal Lines Third-Party Account Balance Table below shows predefined subledger accounting roles, policies and features secured. 3
Job role Duty role Policy Feature Accounts Payable Subledger Accounting Run Global Third Party Detail and Balances Third-Party Detail and Balances Manager, Accounts Manager Duty Run Global Third Party Balances Summary Third-Party Balances Summary Payable Supervisor, Run Global Third Party Account Balance Third-Party Account Balance Accounts Receivable Run Global Subledger Detail Journal Subledger Detail Journal Manager Run Global Journals and Third Party Journals and Third-Party All country specific features are secured by EMEA Financial ing duty role and APAC Financial ing duty role. Both duty roles are orphan duty roles, and if you want to give user access to country specific features, you need to assign EMEA Financial ing and/or APAC Financial ing to the user. Tables below show predefined duty roles: EMEA Financial ing and APAC Financial ing, and policies and features secured. Duty role Policy Feature EMEA Financial ing Prepare UK Receivables VAT ing Reverse Charge Sales List for UK Prepare Financial s for Audit for France France Prepare French DAS2 Contractor Letters DAS2 Contractor Letters for France Manage French DAS2 Information DAS2 Verification for France DAS2 Type 210 Updates for France Manage DAS2 Information for France UI Review French DAS2 Summary Manage DAS2 Summary for France UI Prepare French DAS2 ing DAS2 Extract File for France Prepare French Payables VAT ing Deductible VAT Declaration for France Manage Italian Exemption Limits Manage Letter of Intent Limits for UI Manage Italian Exemption Letters Exemption Letters Process for Manage Italian Exemption Letters Letter of Intent Register for Sales Invoices with Letter of 4
Prepare Italian Supplier Exemption Limit Consumption Create Turnover ing for Prepare Italian Payables VAT ing Prepare VAT Liquidation ing for Prepare Italian Receivables VAT ing Prepare Spanish Modelo ing Prepare Spanish Payables VAT ing Prepare Spanish Receivables VAT ing Prepare Spanish Inter-EU ing Prepare Italian Withholding Tax ing Prepare Spanish Withholding Tax ing Prepare Spanish Withholding Tax File Create Central Bank Z4 Register for Intent Register for Supplier Exemption Limit Consumption for European Purchase Listing of Services for European Sales Listing of Services for Trading Partner Declaration for Trading Partner Declaration Confirmation Number for Declarable Input VAT Register for Payables Sales VAT Register Self Invoices, EEC, VAT for Purchase VAT Register for VAT Liquidation for Declarable Output VAT Register for Receivables Sales VAT Register for Modelo Verification for Spain Modelo Electronic File Generation for Spain Input VAT Journal for Spain Output VAT Journal for Spain VAT Inter-EU Invoice Format for Spain VAT Inter-EU Invoice Journal for Spain Withholding Tax Letters for Withholding Tax Yearly for Withholding Tax Extract for Spain Withholding Tax for Spain Withholding Tax File for Spain Create Central Bank Z4 5
Germany Create Z5A Register and Reconciliation for Germany Create Journal Details for Germany Register for Germany Z5A Register and Reconciliation for Germany Z5A Sheet 2 for Germany Journal Details for Germany Duty role Policy Feature APAC Financial ing Create Tax s for Singapore Input Tax Gain/Loss for Singapore Output Tax Gain/Loss for Singapore Duty role Policy Feature Customer and Supplier Balance Netting Manage Netting Agreements and Batches Customer and Supplier Balance Netting 3. Data Security The Oracle Fusion Applications data security has been simplified starting with Release 11. The new security approach supports new Fusion implementations. If you are upgrading to Oracle Fusion Financials Release 11, you will continue to use roles, policies, and data role templates for generating data roles. Oracle Fusion Financials Release 11 new implementations come with predefined job roles and assignable data security context. During implementation process, you must assign data security contexts to users based on their intended job roles. Oracle Fusion Financials Release 12 and above, new implementations come with predefined job roles and assignable data security context. During implementation process, you must assign data security contexts to users based on their intended job roles. If you are upgrading to Oracle Fusion Financials Release 12 or above, your security setup will be upgraded to the new data security context. 6
The table below lists job roles and assignable data security context, which Financials for EMEA features use to get access to transactional data. Table 1: Roles and assignable data security context Reference Job Role Accounts Payable Manager Accounts Receivable Manager Asset Accounting Manager General Accounting Manager Tax Manager Tax Specialist Assignable Data Security Context Business Unit Business Unit Fixed Asset Book Data Access Set Business Unit Business Unit Fusion implementers assign the required data security contexts to users based on their role and the features they intend to use. The table below is just for reference. Table 2: Features and required data security context Feature Reference Job Role Required Data Security Context Setup General tax reporting, example: Tax Tax Manager, Tax Specialist Business Unit Reconciliation Country specific tax reporting, Tax Manager, Tax Specialist Business Unit example: Input VAT Register for Spain General ledger reporting, example: General Accounting Manager Data Access Set General Ledger Journal and Balance Country specific general ledger General Accounting Manager Data Access Set reporting, example: Audit File for France Subledger accounting reporting, Accounts Payable Manager, Business Unit example: Third Party Balances Summary Accounts Receivable Manager Asset reporting, example: Asset Balance Register Asset Accounting Manager Fixed Asset Book 4. Working Example Enterprise structure: Ledger: Global GLB IT Business Unit: Global Corp World IT 7
User: TAX_MGR_GLOBAL_CORP_ITALY Business scenario: User TAX_MGR_GLOBAL_CORP_ITALY as part of period end closing and tax reporting process needs to run general tax reports and specific tax reports. Data security setup: User Security context Security value TAX_MGR_GLOBAL_CORP_ITALY Business Unit Global Corp World IT Navigation: Setup and Maintenance > Manage Data Access for Users task > Action: Create 8
Oracle Corporation, World Headquarters Worldwide Inquiries 500 Oracle Parkway Phone: +1.650.506.7000 Redwood Shores, CA 94065, USA Fax: +1.650.506.7200 C O N N E C T W I T H U S blogs.oracle.com/oracle facebook.com/oracle twitter.com/oracle oracle.com Copyright 2017, Oracle and/or its affiliates. All rights reserved. This document is provided for information purposes only, and the contents hereof are subject to change without notice. This document is not warranted to be error-free, nor subject to any other warranties or conditions, whether expressed orally or implied in law, including implied warranties and conditions of merchantability or fitness for a particular purpose. We specifically disclaim any liability with respect to this document, and no contractual obligations are formed either directly or indirectly by this document. This document may not be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without our prior written permission. Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners. Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group. 1117 White Paper Title November 2017 9