Search Results jtf_auth_principals_b
Overview
The JTF_AUTH_PRINCIPALS_B table is a core repository for security principals within the Oracle E-Business Suite CRM Foundation (JTF) module. It serves as the master table for all entities—specifically users and roles—that can be granted permissions within the application's discretionary access control (DAC) framework. Every record in this table represents a unique security identity, which is a fundamental building block for the authorization model. Its primary role is to establish a normalized, central reference point for principals, enabling the complex mapping of users to roles, roles to permissions, and the inheritance of access rights across the CRM architecture.
Key Information Stored
The table's structure is designed to differentiate between user and role principals while maintaining a unified identifier. The most critical columns include the surrogate key JTF_AUTH_PRINCIPAL_ID, which uniquely identifies each principal record. The PRINCIPAL_NAME column holds the unique name of the principal, such as a role name or a username. The IS_USER_FLAG is a decisive indicator; when set to '1' (or 'Y'), it signifies the principal is a user, and the USER_ID column then holds a foreign key reference to the corresponding user in the FND_USER table. If the flag indicates a role, the USER_ID is null. The PRINCIPAL_DESC_ID column links to the translated description of the principal in the JTF_AUTH_PRINCIPALS_TL table.
Common Use Cases and Queries
This table is central to user authorization and security reporting. Common operational scenarios include querying all roles in the system, identifying which principals are mapped to a specific user, or validating a user's effective access by tracing role memberships. A typical query to list all role principals would be: SELECT principal_name FROM jtf_auth_principals_b WHERE is_user_flag = '0' ORDER BY principal_name;. To find the JTF principal record for a specific EBS user, one would join to FND_USER: SELECT p.principal_name, p.jtf_auth_principal_id FROM jtf_auth_principals_b p, fnd_user u WHERE p.user_id = u.user_id AND p.is_user_flag = '1' AND u.user_name = '&USERNAME';. This table is also frequently joined with mapping tables like JTF_AUTH_PRINCIPAL_MAPS to resolve role hierarchies.
Related Objects
The JTF_AUTH_PRINCIPALS_B table has extensive relationships, acting as a hub for the authorization schema. Key documented foreign key relationships include:
- JTF_AUTH_PRINCIPALS_TL: Joined via
PRINCIPAL_DESC_IDfor translated descriptions. - JTF_AUTH_PRINCIPAL_MAPS: Referenced twice, for both the child principal (
JTF_AUTH_PRINCIPAL_ID) and the parent principal (JTF_AUTH_PARENT_PRINCIPAL_ID), defining role membership and inheritance. - JTF_AUTH_ACCT_ROLE_MAPS, JTF_AUTH_READ_PERMS, JTF_AUTH_ROLE_PERMS, JTF_DAC_ROLE_PERM_CRIT: Joined via
JTF_AUTH_PRINCIPAL_IDto assign account access, read permissions, role permissions, and permission criteria. - JTF_UM_SUBSCRIPTIONS_B: Referenced by
AUTH_DELEGATION_ROLE_IDfor user management delegation roles. - JTF_UM_SUBSCRIPTION_ROLE & JTF_UM_USERTYPE_ROLE: Joined via
PRINCIPAL_NAMEfor subscription and user type role assignments.
-
Table: JTF_AUTH_PRINCIPALS_B
12.2.2
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_AUTH_PRINCIPALS_B, object_name:JTF_AUTH_PRINCIPALS_B, status:VALID, product: JTF - CRM Foundation , description: A principal will be a user or a role. If the principal is a user then the column IS_USER_FLAG is set to 1 and USER_ID points to a user in FND_USER. We will later use application id to stripe the data for hosting purposes. , implementation_dba_data: JTF.JTF_AUTH_PRINCIPALS_B ,
-
Table: JTF_AUTH_PRINCIPALS_B
12.1.1
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_AUTH_PRINCIPALS_B, object_name:JTF_AUTH_PRINCIPALS_B, status:VALID, product: JTF - CRM Foundation , description: A principal will be a user or a role. If the principal is a user then the column IS_USER_FLAG is set to 1 and USER_ID points to a user in FND_USER. We will later use application id to stripe the data for hosting purposes. , implementation_dba_data: JTF.JTF_AUTH_PRINCIPALS_B ,
-
Lookup Type: JTF_AUTH_OWNERTABLE_NAME
12.1.1
product: JTF - CRM Foundation , meaning: Ownertable Name , description: OWNERTABLE_NAME in JTF_AUTH_MAPS_SOURCES ,
-
Lookup Type: JTF_AUTH_OWNERTABLE_NAME
12.2.2
product: JTF - CRM Foundation , meaning: Ownertable Name , description: OWNERTABLE_NAME in JTF_AUTH_MAPS_SOURCES ,
-
Table: JTF_AUTH_PRINCIPAL_MAPS
12.1.1
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_AUTH_PRINCIPAL_MAPS, object_name:JTF_AUTH_PRINCIPAL_MAPS, status:VALID, product: JTF - CRM Foundation , description: This table will be used to grant roles to users by making users [JTF_AUTH_PARENT_PRINCIPAL_ID] parents of the roles [JTF_AUTH_PRINCIPAL_ID] on a domain basis [JTF_AUTH_DOMAIN_ID] , implementation_dba_data: JTF.JTF_AUTH_PRINCIPAL_MAPS ,
-
Table: JTF_AUTH_PRINCIPAL_MAPS
12.2.2
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_AUTH_PRINCIPAL_MAPS, object_name:JTF_AUTH_PRINCIPAL_MAPS, status:VALID, product: JTF - CRM Foundation , description: This table will be used to grant roles to users by making users [JTF_AUTH_PARENT_PRINCIPAL_ID] parents of the roles [JTF_AUTH_PRINCIPAL_ID] on a domain basis [JTF_AUTH_DOMAIN_ID] , implementation_dba_data: JTF.JTF_AUTH_PRINCIPAL_MAPS ,
-
Table: JTF_AUTH_PRINCIPALS_TL
12.1.1
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_AUTH_PRINCIPALS_TL, object_name:JTF_AUTH_PRINCIPALS_TL, status:VALID, product: JTF - CRM Foundation , description: Translation table , implementation_dba_data: JTF.JTF_AUTH_PRINCIPALS_TL ,
-
Table: JTF_AUTH_PRINCIPALS_TL
12.2.2
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_AUTH_PRINCIPALS_TL, object_name:JTF_AUTH_PRINCIPALS_TL, status:VALID, product: JTF - CRM Foundation , description: Translation table , implementation_dba_data: JTF.JTF_AUTH_PRINCIPALS_TL ,
-
Table: JTF_UM_USERTYPE_ROLE
12.2.2
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_UM_USERTYPE_ROLE, object_name:JTF_UM_USERTYPE_ROLE, status:VALID, product: JTF - CRM Foundation , description: Stores what roles are assigned to each usertype. , implementation_dba_data: JTF.JTF_UM_USERTYPE_ROLE ,
-
Table: JTF_DAC_ROLE_PERM_CRIT
12.2.2
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_DAC_ROLE_PERM_CRIT, object_name:JTF_DAC_ROLE_PERM_CRIT, status:VALID, product: JTF - CRM Foundation , description: Do not use , implementation_dba_data: JTF.JTF_DAC_ROLE_PERM_CRIT ,
-
Table: JTF_UM_SUBSCRIPTION_ROLE
12.1.1
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_UM_SUBSCRIPTION_ROLE, object_name:JTF_UM_SUBSCRIPTION_ROLE, status:VALID, product: JTF - CRM Foundation , description: Intersection table which defines what roles are attached to each enrollment. , implementation_dba_data: JTF.JTF_UM_SUBSCRIPTION_ROLE ,
-
Table: JTF_DAC_ROLE_PERM_CRIT
12.1.1
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_DAC_ROLE_PERM_CRIT, object_name:JTF_DAC_ROLE_PERM_CRIT, status:VALID, product: JTF - CRM Foundation , description: Do not use , implementation_dba_data: JTF.JTF_DAC_ROLE_PERM_CRIT ,
-
Table: JTF_UM_USERTYPE_ROLE
12.1.1
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_UM_USERTYPE_ROLE, object_name:JTF_UM_USERTYPE_ROLE, status:VALID, product: JTF - CRM Foundation , description: Stores what roles are assigned to each usertype. , implementation_dba_data: JTF.JTF_UM_USERTYPE_ROLE ,
-
Table: JTF_AUTH_READ_PERMS
12.2.2
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_AUTH_READ_PERMS, object_name:JTF_AUTH_READ_PERMS, status:VALID, product: JTF - CRM Foundation , description: Is the denormalized table that maps every user [JTF_AUTH_PRINCIPAL_NAME] to a permission [JTF_AUTH_PERMISSION_NAME] for a given domain [JTF_AUTH_DOMAIN_NAME] , implementation_dba_data: JTF.JTF_AUTH_READ_PERMS ,
-
Table: JTF_UM_SUBSCRIPTION_ROLE
12.2.2
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_UM_SUBSCRIPTION_ROLE, object_name:JTF_UM_SUBSCRIPTION_ROLE, status:VALID, product: JTF - CRM Foundation , description: Intersection table which defines what roles are attached to each enrollment. , implementation_dba_data: JTF.JTF_UM_SUBSCRIPTION_ROLE ,
-
Table: JTF_AUTH_ACCT_ROLE_MAPS
12.1.1
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_AUTH_ACCT_ROLE_MAPS, object_name:JTF_AUTH_ACCT_ROLE_MAPS, status:VALID, product: JTF - CRM Foundation , description: This table maps a type of user to a particular role and a particular application domain. , implementation_dba_data: JTF.JTF_AUTH_ACCT_ROLE_MAPS ,
-
Table: JTF_AUTH_ROLE_PERMS
12.1.1
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_AUTH_ROLE_PERMS, object_name:JTF_AUTH_ROLE_PERMS, status:VALID, product: JTF - CRM Foundation , description: This table groups roles [which are a type of principals] to permissions. Permissions can be positive or negative, based on the column POSITIVE_FLAG. , implementation_dba_data: JTF.JTF_AUTH_ROLE_PERMS ,
-
Table: JTF_AUTH_ROLE_PERMS
12.2.2
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_AUTH_ROLE_PERMS, object_name:JTF_AUTH_ROLE_PERMS, status:VALID, product: JTF - CRM Foundation , description: This table groups roles [which are a type of principals] to permissions. Permissions can be positive or negative, based on the column POSITIVE_FLAG. , implementation_dba_data: JTF.JTF_AUTH_ROLE_PERMS ,
-
Table: JTF_AUTH_ACCT_ROLE_MAPS
12.2.2
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_AUTH_ACCT_ROLE_MAPS, object_name:JTF_AUTH_ACCT_ROLE_MAPS, status:VALID, product: JTF - CRM Foundation , description: This table maps a type of user to a particular role and a particular application domain. , implementation_dba_data: JTF.JTF_AUTH_ACCT_ROLE_MAPS ,
-
Table: JTF_AUTH_READ_PERMS
12.1.1
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_AUTH_READ_PERMS, object_name:JTF_AUTH_READ_PERMS, status:VALID, product: JTF - CRM Foundation , description: Is the denormalized table that maps every user [JTF_AUTH_PRINCIPAL_NAME] to a permission [JTF_AUTH_PERMISSION_NAME] for a given domain [JTF_AUTH_DOMAIN_NAME] , implementation_dba_data: JTF.JTF_AUTH_READ_PERMS ,
-
Table: JTF_UM_SUBSCRIPTIONS_B
12.2.2
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_UM_SUBSCRIPTIONS_B, object_name:JTF_UM_SUBSCRIPTIONS_B, status:VALID, product: JTF - CRM Foundation , description: An enrollment usually gives access to some specific part of the system through roles, permissions, and the responsibility defined for the enrollment. , implementation_dba_data: JTF.JTF_UM_SUBSCRIPTIONS_B ,
-
Table: JTF_UM_SUBSCRIPTIONS_B
12.1.1
owner:JTF, object_type:TABLE, fnd_design_data:JTF.JTF_UM_SUBSCRIPTIONS_B, object_name:JTF_UM_SUBSCRIPTIONS_B, status:VALID, product: JTF - CRM Foundation , description: An enrollment usually gives access to some specific part of the system through roles, permissions, and the responsibility defined for the enrollment. , implementation_dba_data: JTF.JTF_UM_SUBSCRIPTIONS_B ,