HR secure user in Release 11
Date: Tue, 15 Jun 1999 17:41:29 -0700
From: "Ashwin Ayancha" Ashwin.Ayancha@xilinx.com
Subject: HR secure user in Release 11
Hi,
Has anyone created separate secure user ids in the Oracle HR system
which allows restricted data access? we are currently upgrading from
10.6SC to release 11 and are experiencing problems with this set up.
In 10.6 SC, we were able to restrict data access by payroll, by
definining this restriction in the security profile. In release 11, the
security profile does not have a link for secure_id. This seemed to be
the cause for the problem where a new secure_id has complete acces to
all data!! We are working with oracle support on this but have not
gotten too far on the solution. Please reply if you would be able to
share any info in this topic. Thanks.
Ashwin
Date: Wed, 16 Jun 1999 08:12:31 -0500
From: "Logan, Ernie" Ernie_Logan@bmc.com
Subject: RE: HR secure user in Release 11
R11 does not use the HR Secure ID's. It works in an entirely different
manner. Restricted access responsibilities connect to APPS user in R11.
That's why there is a documented post-upgrade step to drop those obsolete
user IDs. The details of this implementation are documented in the HRMS
Implementation Guide in Appendix A (A-25).
Secure departmental access to information
Date: Thu, 24 Jun 1999 11:59:36 +0400
From: IjlalR@mashreqbank.com
Subject: HR: Secure User
Hi,
We are currently implementing Oracle HR and Payroll (11.0.2) and have the
following security requirement:
Department heads should only see records for employees belonging to their
organization and any organizations which fall under this top organization.
Same goes for division heads etc...
What is the best way to go about this? If using Secure User Id's is the best
way, then could someone provide me with details as to what steps need to be
followed to implement this?
Any help would be appreciated,
Ijlal
Date: Thu, 24 Jun 1999 16:49:49 +0530
From: GopalaKrishna_Surapaneni GopalaKrishna_Surapaneni@hts.satyam.com
Subject: RE: Secure User
Create separate security profiles for all the department heads and division
heads with the corresponding organization /payroll access and assign these
security profiles to the respective responsibilities in the 'HR:Security
Profile' profile option.
GopalaKrishna
Satyam
Date: Mon, 28 Jun 1999 16:24:18 +0400
From: IjlalR@mashreqbank.com
Subject: RE: HR: Secure User
Below are the steps I followed:
Created Security Profile:
Selected view all employees, applicants.
Selected organization hierarchy and the required
organization (e.g. Org1) as the top organization.
Selected position hierarchy and a top position.
Assigned this profile to a particular responsibility through
SysAdmin, System, Profile.
The problem is that when I logon using this responsibility,
I can view ALL employees that are attached to my business group and not only
those employees that belong to the particular organization (Org1) which is
what I want to achieve.
Is there some step that I am missing?
Thanks in advance,
Ijlal
Date: Mon, 28 Jun 1999 17:36:46 +0400
From: IjlalR@mashreqbank.com
Subject: RE: HR: Secure User
Something I forgot to mention below: The manual says to uncheck View All
Employees, View All Applicants, but if I do that then NO records are
displayed even though I have entered employees belonging to that particular
organization.
Date: Mon, 28 Jun 1999 15:02:28 +0100
From: "Goodyear, Michael" Michael.Goodyear@ncp.co.uk
Subject: RE: HR: Secure User
Hi, Ijlal
Under 10.7 16.1 your run 'LISTGEN' 'Security List Maintenance' to generate
and maintain the data each secure user is allowed to access. I don't know if
this is still the same under 11. ???
Mick.
Date: Tue, 29 Jun 1999 11:24:49 +0400
From: IjlalR@mashreqbank.com
Subject: RE: HR: Secure User
First I'd like to say thanks GopalaKrishna and Mick. Running the Security
List Maintenance process did the trick. Unfortunately the problem is not
completely fixed. What is happening is that records for employees belonging
to a particular organization are showing up PLUS all employees who have the
default assignment (in which they are assigned to the very top organization
in our organization hierarchy). When the system goes live there will be no
employees assigned to this organization but nevertheless is there a way to
stop these records showing up?
Address structure
Date: Tue, 22 Jun 1999 11:34:22 +0400
From: IjlalR@mashreqbank.com
Subject: HR: Address structure
Hi,
We are currently implementing Oracle HRMS and Payroll 11.0.2 and can't seem
to fix this little problem:
We want to use our own address structure and have defined this structure in
the Personal Address Descriptive Flexfield as well as the Location Address
Descriptive Flexfield. What steps must be followed to get this new structure
to appear in the LOV for the Address Style field (on the Location form) and
on the Style field (on the Address form)? Is the form NLS Territories the
right form to use to add a new territory?
Thanks in advance,
Ijlal
Creating DataBase Item for DFF
From: Bijus@mashreqbank.com [SMTP:Bijus@mashreqbank.com]
Sent: Sunday, June 20, 1999 8:46 AM
To: orahrms-l@mail-list.com
Subject: [orahrms-l]
Difficulty in creating DataBase Item for DFF:
HR manager -
Process and Reports -
Submit process $ reports -
Single request -
Create Descriptive Flex field database item
-
Parameters
Here the LOV is enabled but if I click on that, an error message box
comes
up saying
'no entries found for list of values'
Even though the DFF is already been created.
Value set for DFFs is PER_DF_TITLES with a table validation. The
table used
is FND_DESCRIPTIVE_FLEXS_VL. If I go thru sql I can see the names of
all the
DFFs in this table.
Any feedback would be greatly appreciated.
Thanks & Regards,
Biju Sebastian
From: Pat Keeley PKeeley@amctheatres.com
To: orahrms-l@mail-list.com
Date: Mon, 21 Jun 1999 14:02:27 -0500
You didn't say what release you're on, but based on the error, I'd say 11
something. There is a patch. Call Oracle support.
Good Luck!
Pat Keeley
Business Group
From: "Barnett, Janet L." jlbarnet@mountaineergas.com
To: "'OraHRMS-L@mail-list.com'" OraHRMS-L@mail-list.com
Date: Tue, 22 Jun 1999 07:38:55 -0400
Subject: [orahrms-l] Business Group
If I want only one Business Group, is it recommended to use the Setup
Business Group that is seeded or to set up a new Business Group. If I
set up a new Business Group, what are the implications?
Janet Barnett
Mountaineer Gas Co.
Charleston, WV
From: "Schwartz, Ken" kschwar@rwjf.org
To: "'Barnett, Janet L.'" jlbarnet@mountaineergas.com
"'OraHRMS-L@mail-list.com'" OraHRMS-L@mail-list.com
Subject: RE: [orahrms-l] Business Group
Date: Tue, 22 Jun 1999 08:08:17 -0400
Janet:
The easiest thing to do is to just rename the 'Setup Business Group' with
whatever name is appropriate. You may want to review the Business Group
setup options for things like 'Employee Number Generation', Key Flexfield
definitions and the other options to insure that they are in line with the
business requirements of your implementation.
Please contact me directly if you have additional questions.
Regards,
Ken Schwartz
Site: 609-720-7529
Cell: 404-226-6334
From: "Kuoppala, Beverly A" bkuoppala@kpmg.com
To: "'Schwartz, Ken'" kschwar@rwjf.org
"'Barnett, Janet L.'"
jlbarnet@mountaineergas.com
Subject: RE: [orahrms-l] Business Group
Date: Tue, 22 Jun 1999 08:33:22 -0400
According to Oracle Support, Oracle reserves the right to overlay the Setup
Business Group during product upgrades. Therefore, it is their
recommendation that you create a unique Business Group. This has been the
subject of much controversy; Oracle seems not to be able to take a firm
stand on this issue. On one hand they say you can use it and its default
definitions but they also qualify their statement.
To be safe, setting up a new business group appears to be the most prudent
decision. I would like to hear the pros and cons or from anyone who has had
a problem either using the default or setting up a new, unique business
group.
Beverly Kuoppala
Content Development Team-Oracle HRMS
Direct: 214/758-8459 Fax: 214/754-2207
Email: bkuoppala@kpmg.com bkuoppala@kpmg.com
X-Originating-IP: [153.37.145.188]
From: Thaddeus Inekuku tinekuku@hotmail.com
To: kschwar@rwjf.org, jlbarnet@mountaineergas.com, OraHRMS-L@mail-list.com
Subject: RE: [orahrms-l] Business Group
Date: Tue, 22 Jun 1999 06:47:24 PDT
Janet,
Using the seeded business group is not advisable if you are going to use
some Oracle's APIs for loading your data into the application. Unless this
has been rectified, we found a problem loading grade details a while back as
it terminated the load if the business group id was 0 (Oracle provided). We
had to customise the code in order to make this load possible.
I would suggest creating another BG using the seeded one as a starting
point.
Thaddeus Inekuku
Answerthink Consulting Group
Client - 203 373 3439
pager - 888 894 9584
From: "Scott L. Frost" sfrost@noblestar.com
To: "Barnett, Janet L." jlbarnet@mountaineergas.com
Subject: Re: [orahrms-l] Business Group
Date: Tue, 22 Jun 1999 09:00:49 -0400
Janet-
It is highly recomended to create a new business group and not use the
default. You can run into problems down the road if a setting in the setup
business group is not properly performed.
Also, it will help provide a unique sounding name to the organization and
make it more enterprise specific.
Good luck!
Scott
HRMS Consultant
Noblestar Systems Corporation
703.464.4000 x2549
Reply-To: "Ken Conway" ken.conway@bosscorporation.com
From: "Ken Conway" ken.conway@bosscorporation.com
To: "Barnett, Janet L." jlbarnet@mountaineergas.com,
Subject: Re: [orahrms-l] Business Group
Date: Tue, 22 Jun 1999 09:54:59 -0500
Organization: BOSS Corporation
Janet:
There have been several good responses to this posting so please let me
straddle the fence on this one! We have brought clients live with
HR/Payroll using the Setup Business Group as well as with a unique Business
Group. My overall summary is that I prefer a unique Business Group but
don't think you will hurt anything long-term based on your decision either
way.
Beverly's point that Oracle reserves the right to overlay the Setup Business
Group is important. I would never want to be told "I told you so" years
down the road when my system has suddenly been trashed from a future patch
or upgrade. Even if this statement originated from someone within Oracle
who wanted to be overly cautious, I would consider the warning closely and
see if another Business Group can be used. Also the point that Thaddeus
made about the APIs is important. Sure, it won't kill you to rewrite a
particular API but it is pain and does cost extra if you are paying
consultants. My hope on this one is that Oracle will have created a patch
for the API by the time you are ready for conversion.
Having said all this, Oracle Support has told me that it is OK to reuse the
Setup Business Group. I have had situations where I am bringing a client
live with HR/Payroll after Financials was already implemented (which was
inspiration for my upcoming OAUG paper this fall "Challenges Implementing
Oracle HR/Payroll after Financials"). If Financials was using the Setup
Business Group already, I was concerned with forcing them into another
Business Group after they were in production.
The bottom line is that it probably will not matter long term what you
choose; however, if you have a choice, use a different Business Group.
Hope this helps,
Ken
Ken Conway
BOSS Corporation
Better Organization Service Solutions
214-495-7654 (Voice)
214-495-7653 (Fax)
770-622-5500 (Headquarters)
Email: ken.conway@bosscorporation.com
http://www.bosscorporation.com
From: Sandy Honigsberg Sandy.Honigsberg@orange.co.il
To: "'Kuoppala, Beverly A'" bkuoppala@kpmg.com,
Subject: RE: [orahrms-l] Business Group
Date: Tue, 22 Jun 1999 16:03:08 +0200
Don't forget about the Legislation issue.
If you are planning to use HR anywhere other than the US, UK (or anywhere
else
Oracle may have already created Legislation for) you MUST create a new BG
that
specifies the new (local) legislation.
Otherwise, on the People (Enter & Maintain) form, you get blocks like
Employment Information
(which differs from US & UK) and format restrictions on your National
Identifier. (There are
probably all sorts of other goodies as well that I cannot recall.)
Save yourself the grief; invest 10 minutes and set up a new BG. Just don't
forget to update the
System Profile Option.
Sandy
From: "John Parker" jiparker@mindspring.com
Subject: RE: [orahrms-l] Business Group
Date: Tue, 22 Jun 1999 17:13:52 -0700
Janet: I guess I'll go against the grain here and recommend that you
recycle the setup business group, that is, rename it appropriately (as in
Mountaineer Gas Co. Business Group) (not to worry as profiles, shared stable
setups, etc update magically), and update the classification and
classification rules appropriately. If the standard setup Business Group
is not used there may (will) be problems with Org Hierarchies, the
purchasing, inventory, fixed assets and project accounting applications.
Good luck. John Parker
From: "Barnett, Janet L." jlbarnet@mountaineergas.com
Date: Tue, 22 Jun 1999 14:12:25 -0400
Subject: [orahrms-l] Bus Group & Locations
Thanks everyone for your input.
Janet Barnett
Mountaineer Gas Co.
Multiple Business Groups in MultiOrg environment
Subject: [orahrms-l] Creating Multiple Business Groups in a multi-org environment
From: sena@enoc.co.ae (SENAPATHY SRINIVASAN (GTS))
Date: Mon, 01 Mar 1999 11:45:57 +0400
Hi,
We are on 10.7SC GUI. We are implementing all the financial modules + HR and
Payroll. We will be using multi-org environment, since our group has 18
companies, each of which is in a different area of operations. We would also
like to maintain HR and Payroll information separate for each of the 18
companies, since all employee numbering, payroll and HR information is done
separately for each of the 18 subsidiaries.
We were advised to create multiple business groups, i.e one per company, to
achieve the HR and Payroll segregation. Our queries are as follows.
(a) If we are creating multiple business groups, is it enough if you name each
group differently. All the additional org information that we have entered is
the same as what is contained in the Setup Business Group that is provided with
the installation. Is this O.K., or do we need to enter any other information in
order to maintain each Business Group as a water tight conpartment.
We will be of course assigning each business group to its respective
responsibilities, through the profile, HR : Business Group, before commencing
the multi-org setup.
(b) Once we do the multi-org setup, can we add more business groups at a later
stage.
(c) Do the HRMS flexfields support multiple structures.
(d) Are there any precautions that we need to take while doing the multi-org
setup as we have installed HR and Payroll. Any inputs will be certainly welcome.
Thanks Senapathy
Change SOB association to Bus. Group
X-Lotus-FromDomain: COPELCO
From: "Kevin Jarrett" kejarr@copelco.com
cc: "Bill Carr" bicarr@copelco.com, kfain@us.oracle.com
Date: Thu, 1 Jul 1999 22:27:28 -0400
Subject: [orahrms-l] Business Groups, Sets of Books, Key Flexfields
Here's one for all you HR/Financials integration gurus and guruettes...
We're a full install of Financials and HR, 10.7SC/16.1. We have two Orgs
that are business groups, USA and Canada. Both have org classifications of
Inventory Org and are associated with the appropriate set of books (USA and
Canada respectively). The US HR system is live, the Canadian ops are not.
Here's the situation.
The org that serves as our Canadian BizGrp was given key flexfield
structures identical to those for the US operation (this was done before my
time). The US Cost Allocation Flexfield uses structures that map to the US
GL Accounting Flexfield. This is not acceptable for Canada, as we want to
have the Candian Cost Allocation Flexfield segments in HR map to the
Canadian GL accounting flexfield.
No problem so far. We built and compiled a new Canadian CAKFF with the
structures that map to the Canadian GLAFF. The value sets were already
there, built by the financials folk. We created a new Canadian org to use
as a BG, and gave it the KFF structures as appropriate, including the nifty
new Canadian CAKFF.
Here's the problem. When I try to assign this new org a Set of Books in the
Accounting Info LOV, there are none. As I understand it, this is because
the "live" Canadian set of books is already "taken."
Oracle WWS says that once the association of SOB is made via the Inventory
Org classification, it cannot be changed.
So...I cannot create a new Canadian Org to use as a business group and have
both the Canadian CAKFF and the tie to the existing Canadian SOB, which I
believe the Canadian Financials folks are now using.
Am I screwed or what?
Kevin Jarrett Copelco Capital, Inc.
Project Manager Mount Laurel, NJ USA
kejarr@copelco.com http://www.copelco.com
Canadian & USA EEs in Single Business Group
Subject: [orahrms-l] HR: Canadian & USA EEs in Single Business Group?
From: "Kevin Jarrett" kejarr@copelco.com
Date: Mon, 15 Mar 1999 08:57:33 -0500
Hi everyone,
We are an HR-only install soon to be interfacing with Ceridian payroll. We
have a small Canadian operation (60 employees) that currently is not on
Oracle HR. We are debating the pros and cons of single vs. separate
business groups and would like your opinion.
The Situation: Canadian HR data is currently kept in our legacy HR app
(Abra/DOS). Salaries are recorded in US$ (a translation to Canadian $
occurs before payroll info is posted to the Canadian GL). We believe
Canadian business requirements to be virtually identical to the USA's (we
are verifying this now). EEs are paid via ADP/Canada and there is little
chance of them moving to Ceridian Source100 (do they even have a Windows
product for Canada?). In summary, we believe we have no 1) Currency 2)
Legislative or 3) Business Requirement issues preventing us from using a
single BG. Since we are using Payroll Security, we would just set up a
'Canada' payroll (for use on the assignment form) and the other required
Secure User stuff. We'd also dedicate Canada its own dedicated
organization, w/GRE, to keep things clean. I believe any payroll/government
compliance reporting is generated out of the payroll system now.
The Objective: Consolidated headcount and other HR reporting/analysis. We
currently kludge reports together manually and find the process awkward at
best.
It sounds too easy to just build the structures I'm describing. What am I
missing? Your comments would be sincerely appreciated!
Thanks in advance,
Security for Update record
From: "Winn, George H." gwinn@Mail.Donaldson.com
To: "'Oracle List Service'" OraHRMS-L@mail-list.com
Date: Wed, 30 Jun 1999 08:00:12 -0500
Subject: [orahrms-l] HRMS Security
We are implementing 10.7SC, Prod 16.1 and have the following security issue:
1. We have approximately 35 HR and 5 Payroll employees that will have
update capabilities within the application. Our requirement is that each
employee is not allowed to update their own record. Is it possible to
restrict an employee from updating their own record? I have not be able to
figure out a way to do this.
2. Along the same lines as number one above, we have an HR employee with
update access, that is married to an employee from the IS department. We
also we like to prevent her from updating her husband's record. Is this
possible?
We have one suggestion of using Alerts to indicate when this activity
occurs.
Has anyone encountered this situation?
thanks
George Winn
Donaldson Company, Inc
email: gwinn@mail.donaldson.com
voice: 612.887.3833
fax: 612.887.3148
From: pkandra@civicdevelopment.com
To: gwinn@Mail.Donaldson.com, OraHRMS-L@mail-list.com
Subject: RE: [orahrms-l] HRMS Security
Date: Wed, 30 Jun 1999 09:17:51 -0400
George,
I think Alerts would be the best way. When you define your users, make sure
to assign each user to a Person on the define users screen. That way you'll
have a PERSON_ID in the FND_USER table to connect to the USER_ID who does
the update. I'm sure most people would be interested in your final outcome.
Peter Kandra
Civic Development Group
(888) 800-7637 x2518
Security Profiles
Date: Tue, 22 Jun 1999 12:02:53 -0500
To: OraHRMS-L@mail-list.com
From: Jenine Knight jknight@se-tech.com
Subject: [orahrms-l] Security Profiles
We want to setup security at the different Business Unit levels. We
created a security profiles, associated it with our Business Group and
assigned it to our Business Units (Top organization). We ran the ran the
secure user process. We signed on as the user associated with this profile
and it is still allowing us to see all the employees. What are we missing????
Hope anybody can help.
Regards
Jenine Knight
SE Technologies Inc.
Date: Tue, 22 Jun 1999 09:22:07 -0700
To: Jenine Knight jknight@se-tech.com, OraHRMS-L@mail-list.com
From: Lewis R Cunningham lcunning@popmail.lmu.edu
Subject: Re: [orahrms-l] Security Profiles
Have you run listgen? You need to run secgen and then listgen and listgen
needs to run periodically depending on how often you add or move employees.
Lewis
From: Thaddeus Inekuku tinekuku@hotmail.com
To: jknight@se-tech.com, OraHRMS-L@mail-list.com
Subject: Re: [orahrms-l] Security Profiles
Date: Tue, 22 Jun 1999 11:03:26 PDT
jenine,
Be sure to use the current date for the ListGen process.
Using any other date has been known to produce the problem you are
encountering.
Thaddeus Inekuku
Answerthink Consulting Group
Client - 203 373 3439
Pager - 888 894 9584
Problems in setup of Business Group
Subject: [orahrms-l] problems with business group
From: "H Krishna" nsvn84@hotmail.com
Date: Wed, 19 May 1999 00:07:03 PDT
Hi Everybody!
I have been trying to link my set of books,inventory organisation,Operating
unit,Business group and so far having less sucess.
These are the steps I followed.
Created an inventory organization from define organization form.
Attached it to Gre/Legal unit and operating unit.
Created a business group from the define organization form.
My Inventory organization is attached to the business group I created..This
I was able to check through the HR_Organization_Units table where my
inventory Organization ID and My business group ID are one and same.
I checked the profiles and attached My business group to the HR Busines
group profile and HR Security profile and HR User type is user.
I set the profile options at the responsiblity level for the User who is
also attached to my business group.
I have also set the MO operating unit profile for my organization .
Now I face the following problems
I am not able to naviagte to the documents screen in purchasing as I get a
warning saying that the user is not setup as an employee...
I did check to see that my user is an employee and attached to the business
group
And strangely when I came back to the Define organizations form and
requeried my inventory organization..I got an error saing that value 123 is
invalid which is my Inventory organization and Business group ID
Dont know whether Iam missing a vital link....
Iam on APPS 11.02
Digital Unix 4.0D
Would appreciate your help on this
Thanks
Subject: [orahrms-l] Business group
From: "H Krishna" nsvn84@hotmail.com
Date: Sat, 22 May 1999 06:05:06 PDT
Hi All!
I would like to thank all those who had helped me on the Business Group
issue which I had raised on the fourm.
But the problem Iam facing is still continuing..
I have defined all my organizations under setup business group but when I
try to open then the requisitions screen in purchasing I get an unhandled
exception error.
Same is the case when I try to define positions..I get a When- Validate-
record trigger error.
The Documents in purchasing is also not visible as a result..
Iam sure that there is a missing link which might be in the business group
attachment ..
Would appreciate all help on this.
Thanks and regards
krishna