Results for “pay_security_payrolls”

AI-generated from documented ETRM metadata — verify critical details on the linked pages.

Overview

PAY_SECURITY_PAYROLLS is a payroll-module security table owned by the HR schema in Oracle E-Business Suite 12.1.1 and 12.2.2. It defines which payrolls are accessible through a given security profile, effectively acting as the intersection between payroll definitions and the security model delivered by Oracle HRMS. Each row associates a specific payroll with a specific security profile, allowing an administrator to grant or restrict payroll-level access for a user or responsibility without exposing the full enterprise payroll list.

The table operates within the standard Oracle EBS multi-tenant convention, where every row is scoped to a BUSINESS_GROUP_ID. This ensures that payroll security configurations remain partitioned by business group, consistent with the broader HR security architecture. The table also carries the standard WHO columns (LAST_UPDATE_DATE, LAST_UPDATED_BY, CREATED_BY, CREATION_DATE, etc.) and an OBJECT_VERSION_NUMBER for optimistic locking.

From a dimensional modeling perspective, the metadata heuristic classifies PAY_SECURITY_PAYROLLS as a link table. This is a reasonable suggestion: the table resolves a many-to-many relationship between payrolls and security profiles, and its two foreign keys — BUSINESS_GROUP_ID to HR_ALL_ORGANIZATION_UNITS and SECURITY_PROFILE_ID to PER_SECURITY_PROFILES — define the associative grain. A data vault implementation would typically model this as a link between the payroll hub and the security profile hub.

Key Information Stored

The table contains 13 documented columns. The most operationally significant are:

• BUSINESS_GROUP_ID — Foreign key to HR_ALL_ORGANIZATION_UNITS; identifies the business group that owns the security grant.
• SECURITY_PROFILE_ID — Foreign key to PER_SECURITY_PROFILES; identifies the security profile to which payroll access is being granted.
• PAYROLL_ID — Identifies the payroll being secured. This is the core business attribute linking the row to a payroll definition.
• REQUEST_ID — The concurrent request that created or last modified the record, useful for auditing batch security updates.
• PROGRAM_APPLICATION_ID, PROGRAM_ID, PROGRAM_UPDATE_DATE — Identify the concurrent program and its last run date that produced the row.
• LAST_UPDATE_DATE, LAST_UPDATED_BY, LAST_UPDATE_LOGIN — WHO audit columns tracking the most recent modification.
• CREATED_BY, CREATION_DATE — WHO audit columns capturing row creation.
• OBJECT_VERSION_NUMBER — Optimistic locking counter for concurrent updates.

The metadata does not document a single surrogate primary key column. In practice the business key is the combination of BUSINESS_GROUP_ID, SECURITY_PROFILE_ID, and PAYROLL_ID, which enforces uniqueness for each security grant. The foreign keys to HR_ALL_ORGANIZATION_UNITS and PER_SECURITY_PROFILES are the only explicitly documented referential constraints.

Common Use Cases and Queries

This table is most commonly queried when auditing payroll security configuration, troubleshooting "payroll not visible" issues, or migrating security profiles between environments.

A typical audit query joins payrolls to their assigned security profiles:

• SELECT psp.security_profile_id, psp.payroll_id, psp.business_group_id FROM pay_security_payrolls psp WHERE psp.business_group_id = :p_bg_id;

To identify which payrolls a specific security profile grants access to, filter by SECURITY_PROFILE_ID and join to the payroll definition table. To find orphaned grants, anti-join against PER_SECURITY_PROFILES. Reporting use cases include security certification reviews, separation-of-duties analysis, and provisioning reports that must enumerate payroll access by profile.

Related Objects

• PER_SECURITY_PROFILES — parent table defining the security profile; joined on SECURITY_PROFILE_ID.
• HR_ALL_ORGANIZATION_UNITS — business group definition; joined on BUSINESS_GROUP_ID.
• PAY_ALL_PAYROLLS_F — payroll definitions referenced via PAYROLL_ID.
• PER_SECURITY_PROFILE_ORGS — organization-level security grants, a parallel security table.
• FND_CONCURRENT_REQUESTS — audit trail for the REQUEST_ID column.
• FND_CONCURRENT_PROGRAMS — resolution of PROGRAM_ID and PROGRAM_APPLICATION_ID.