Results for “gl_defas_resp_assign”

AI-generated from documented ETRM metadata — verify critical details on the linked pages.

Overview

GL_DEFAS_RESP_ASSIGN is a General Ledger (GL) application table in Oracle E-Business Suite 12.1.1 and 12.2.2 that stores the assignment of definition access sets to responsibilities. Definition access sets are the mechanism by which Oracle EBS controls which General Ledger definitions — such as accounts, journals, budgets, and consolidations — a user can view, use, or modify. By mapping a definition access set to a specific responsibility, this table determines the security posture that applies whenever a user signs in under that responsibility.

The table resides in the GL schema and is classified as VALID in the ETRM metadata. Its documented physical schema in release 12.2.2 contains 31 columns, of which a subset carries the operative business meaning. Based on the foreign key structure — the table references FND_SECURITY_GROUPS and holds composite, multi-part keys that resolve relationships between definitions, responsibilities, and applications — a heuristic Data Vault classification of satellite-leaning is appropriate. In practice, the table behaves less like an independent hub and more like a link-satellite hybrid that binds access sets to responsibilities while carrying descriptive attributes such as status and default flags.

Key Information Stored

The primary key of GL_DEFAS_RESP_ASSIGN is composed of DEFINITION_ACCESS_SET_ID, RESPONSIBILITY_ID, APPLICATION_ID, and SECURITY_GROUP_ID. These four columns jointly identify each assignment row and define the scope of the grant: which access set is being applied, to which responsibility, within which application, and under which security group.

The unique index GL_DEFAS_RESP_ASSIGN_U1 (APPLICATION_ID, RESPONSIBILITY_ID, DEFINITION_ACCESS_SET_ID, STATUS_CODE, SECURITY_GROUP_ID) represents the principal business-key candidate, adding STATUS_CODE to the assignment tuple to distinguish active from inactive grants.

Several flag columns carry the substantive access-control semantics. DEFAULT_FLAG indicates whether the assignment is the default for the responsibility. DEFAULT_VIEW_ACCESS_FLAG, DEFAULT_USE_ACCESS_FLAG, and DEFAULT_MODIFY_ACCESS_FLAG specify the baseline privileges — view, use, and modify — granted through this assignment. STATUS_CODE records whether the row is enabled or disabled.

Standard EBS audit columns are present: CREATION_DATE, CREATED_BY, LAST_UPDATE_DATE, LAST_UPDATED_BY, and LAST_UPDATE_LOGIN. The columns REQUEST_ID and CONTEXT support concurrent request tracking and descriptive flexfield storage, while ATTRIBUTE1 through ATTRIBUTE15 provide the standard DFF segments. SECURITY_GROUP_ID serves both as a key component and as the foreign key to FND_SECURITY_GROUPS.

Common Use Cases and Queries

Administrators and auditors commonly query this table to determine which definition access set governs a given responsibility, to audit default privileges, and to reconcile definition security after an upgrade or responsibility change. A typical query joins to FND_RESPONSIBILITY to resolve the responsibility name and to GL_DEFAS (or the corresponding access-set definition table) to resolve the access set description.

• List all access sets assigned to a responsibility: filter by RESPONSIBILITY_ID and APPLICATION_ID, ordering by STATUS_CODE.
• Audit default access: isolate rows where DEFAULT_FLAG = 'Y' and inspect the three DEFAULT_*_ACCESS_FLAG columns.
• Detect duplicate or conflicting grants by grouping on the business-key columns and counting rows.
• Reconcile security group scoping by joining SECURITY_GROUP_ID to FND_SECURITY_GROUPS.

Related Objects

• FND_SECURITY_GROUPS — referenced via GL_DEFAS_RESP_ASSIGN.SECURITY_GROUP_ID; resolves the security group that scopes the assignment.
• FND_RESPONSIBILITY — resolves RESPONSIBILITY_ID and APPLICATION_ID to the responsibility definition.
• GL_DEFAS — the definition access set header that DEFINITION_ACCESS_SET_ID points to.
• FND_APPLICATION — resolves APPLICATION_ID to the owning application.
• FND_USER_RESP_GROUPS — links users to the responsibilities whose definition access is governed by rows in this table.
• GL_DEFAS_ACCESS_SETS (and related GL definition access set children) — define the individual definitions secured by each access set.