12/19/2019 Document Display

Copyright (c) 2019, Oracle. All rights reserved. Oracle Confidential.

How To Audit Users Responsibility Changes? (Doc ID 747471.1)

In this Document

Goal
Solution
References

APPLIES TO:

Oracle Application Object Library - Version 12.0 to 12.2.5 [Release 12 to 12.2]

Information in this document applies to any platform.

GOAL

The following note will provide an answer to the following two questions:

1. How to audit the changes in responsibilities for a user?

2. What workflow table to audit to track user responsibility changes

SOLUTION

1. How to audit the changes in responsibilities for a user?

The security model of the Oracle E-Business Suite R12 has significantly changed since the 11.5.9 release. As of this release,
the responsibility assignments are stored within the Oracle Workflow Directory Service. The original
FND_USER_RESP_GROUPS table has been replaced by a view that retrieves its data from the tables
WF_USER_ROLE_ASSIGNMENTS and WF_LOCAL_USER_ROLES.

The FND_USER_RESP_GROUPS table no longer exists thus it should not be listed on the Define Audit Tables.

2. What workflow table to audit to track user responsibility changes.

The WF_USER_ROLE_ASSIGNMENTS table is not recommended nor supported for auditing purposed because making it
auditable could lead to unforeseen issues given its size and the number of times this table is updated. The intended design
prevents DB triggers from being created on table WF_USER_ROLE_ASSIGNMENTS for auditing purposes because of the
performance constraints they will impose.

WF_LOCAL_USER_ROLES table can be used for auditing purposes as it has the audit option enabled and it summarizes
wf_user_role_assignments so it can be used instead.

For more information check the following documentation:

For information on the Workflow Directory Service go to the Oracle Workflow Administrator's Guide
For User and Data Auditing go to section "Auditing and Monitoring" of manual Oracle E-Business Suite System
Administrator's Guide - Security
Setting up AuditTrail

https://support.oracle.com/epmos/faces/SearchDocDisplay?_adf.ctrl-state=pdsuypfzc_4#FIX 1/2
12/19/2019 Document Display

REFERENCES

BUG:7523670 - PRIMARY KEY NEEDED FOR TABLE WF_USER_ROLE_ASSIGNMENTS

Didn't find what you are looking for?

https://support.oracle.com/epmos/faces/SearchDocDisplay?_adf.ctrl-state=pdsuypfzc_4#FIX 2/2