Results for “include_top_organization_flag”

AI-generated from documented ETRM metadata — verify critical details on the linked pages.

Overview

PER_SECURITY_PROFILES is the core definition table for Oracle HRMS security profiles in Oracle E-Business Suite 12.1.1 and 12.2.2. It resides in the HR schema and stores the metadata that restricts user access to specific HRMS records, including people, assignments, organizations, positions, payrolls, and applicants. Each row represents a named security profile that can be assigned to one or more users via PER_SECURITY_USERS, and the profile's attributes determine whether a user can view all records, a subset defined by organization or position hierarchies, or an explicit list of organizations and positions.

The table is owned by the PER (Human Resources) product module and is marked VALID in the documented ETRM schema. Applying heuristic Data Vault modeling, PER_SECURITY_PROFILES is best classified as a hub: its surrogate primary key SECURITY_PROFILE_ID anchors a business key (SECURITY_PROFILE_NAME plus BUSINESS_GROUP_ID) and acts as the referenced parent for a large family of downstream list and assignment tables. This hub classification is a modeling suggestion derived from the foreign-key structure rather than an Oracle-defined constraint.

Key Information Stored

The table contains 42 documented columns spanning identifying attributes, inclusion flags, and hierarchy references. The most important columns include:

• SECURITY_PROFILE_ID — the surrogate primary key (PER_SECURITY_PROFILES_PK) that uniquely identifies each profile and is referenced by every dependent table.
• SECURITY_PROFILE_NAME and BUSINESS_GROUP_ID — the business-key candidate defined by the unique index PER_SECURITY_PROFILES_UK2; profile names are unique within a business group.
• ORGANIZATION_ID and POSITION_ID — foreign keys to HR_ALL_ORGANIZATION_UNITS and PER_ALL_POSITIONS that anchor the profile to a specific organization or position.
• ORGANIZATION_STRUCTURE_ID and POSITION_STRUCTURE_ID — references to PER_ORGANIZATION_STRUCTURES and PER_POSITION_STRUCTURES that define the hierarchy used to expand access.
• INCLUDE_TOP_ORGANIZATION_FLAG and INCLUDE_TOP_POSITION_FLAG — control whether the top of the selected hierarchy is included in the accessible set.
• VIEW_ALL_FLAG, VIEW_ALL_EMPLOYEES_FLAG, VIEW_ALL_ORGANIZATIONS_FLAG, VIEW_ALL_POSITIONS_FLAG, and VIEW_ALL_PAYROLLS_FLAG — the view-all controls that determine broad record visibility.
• INCLUDE_EXCLUDE_PAYROLL_FLAG — governs whether payroll scope is included or excluded.
• RESTRICT_BY_SUPERVISOR_FLAG and SUPERVISOR_LEVELS — enable supervisor-hierarchy-based restriction and set the number of levels.
• EXCLUDE_SECONDARY_ASGS_FLAG, EXCLUDE_PERSON_FLAG, and EXCLUDE_BUSINESS_GROUPS_FLAG — exclusion controls that remove specific records from the accessible set.
• CREATED_BY, CREATION_DATE, LAST_UPDATED_BY, LAST_UPDATE_DATE, LAST_UPDATE_LOGIN — the standard WHO audit columns.

Common Use Cases and Queries

Security profiles are typically investigated to determine why a user can or cannot see a given person or assignment, and to audit which profiles carry overly broad "view all" privileges. A common query lists profiles and their business group context:

SELECT p.security_profile_id, p.security_profile_name,
       p.business_group_id, p.view_all_flag,
       p.view_all_employees_flag, p.restrict_by_supervisor_flag
FROM   per_security_profiles p
WHERE  p.business_group_id = :p_bg_id;

To identify which users hold a profile, join to PER_SECURITY_USERS on SECURITY_PROFILE_ID. To audit broad access, filter on VIEW_ALL_FLAG = 'Y' or VIEW_ALL_EMPLOYEES_FLAG = 'Y'. To inspect organization-scoped profiles, join ORGANIZATION_ID to HR_ALL_ORGANIZATION_UNITS or inspect the PER_SECURITY_ORGANIZATIONS child table for the explicit organization list.

Related Objects

PER_SECURITY_PROFILES is referenced by many downstream objects through SECURITY_PROFILE_ID:

• PER_SECURITY_USERS — the primary assignment table linking profiles to users.
• PER_SECURITY_ORGANIZATIONS — the explicit list of organizations included in a profile.
• PER_SEC_PROFILE_ASSIGNMENTS — assigns security profiles to assignments.
• PER_PERSON_LIST, PER_PERSON_LIST_CHANGES, and PER_ASSIGNMENT_LIST — the resolved lists of people, changes, and assignments accessible under a profile.
• PER_ORGANIZATION_LIST and PER_POSITION_LIST — the resolved organization and position lists.
• PAY_PAYROLL_LIST and PAY_SECURITY_PAYROLLS — payroll-scope tables that extend security to the PAY module.

Parent references from the profile itself include HR_ALL_ORGANIZATION_UNITS (via BUSINESS_GROUP_ID and ORGANIZATION_ID), PER_ALL_POSITIONS, PER_ORGANIZATION_STRUCTURES, and PER_POSITION_STRUCTURES, all keyed on their respective IDs.