Advanced Security

R12.1 Oracle General Ledger Management

Fundamentals

Copyright © 2010, Oracle. All rights reserved.

 Objectives

After completing this lesson, you should be able to do the

following:
• Describe Data Access Set – How it is used for data
integrity and security:
– Setup and Process
— Define Data Access Set
• Describe Management Reporting and Security.

7-2 Copyright © 2010, Oracle. All rights reserved.

 Security with Data Access Sets

Data Access Sets

• Provide read-only and/or write access to data by ledger or
balancing segment values (BSVs) or management
segment values (MSVs)
– Full Ledger Access
— Access to all data in a ledger
– Specific BSV / MSV Access
— Access to only specific BSVs / MSVs in a ledger

7-3 Copyright © 2010, Oracle. All rights reserved.

 Security with Data Access Sets

Access Security for Multi-Ledger Processing

• Generate recurring journals for a subset of BSVs for
multiple ledgers in a ledger set
Access Security for Cross-Ledger Operations
• Run a report to aggregate data across a subset of BSVs
across multiple ledgers in a ledger set

7-4 Copyright © 2010, Oracle. All rights reserved.

 Security with Data Access Sets

Data Access Sets – Journals Example

• Creating a Journal Batch
– You can create a journal batch for the ledger, BSV and / or
MSV for which you have write access
• Viewing and Modifying a Journal Batch
– You can view journal batches for which you have read-only
or write access to the ledger, BSV and / or MSV
– You can modify journal batches only if you have write access
to all ledgers, BSVs and / or MSVs that are used in the batch

7-5 Copyright © 2010, Oracle. All rights reserved.

 Security with Data Access Sets

Access to Full Ledger

Access Level Read-Only to Full Ledger

Ledger US Corporate Ledger ($)

BSVs
US East US West US South
(Legal Entities)
(01) (02) (03)

Actions:
• View Journals
Journals
Balances • View Balances
Reports • View Reports

7-6 Copyright © 2010, Oracle. All rights reserved.

 Security with Data Access Sets

Access to BSVs

Access Level Read-Only Read/Write

Ledger US Corporate Ledger ($)

BSVs
US East US West US South
(Legal Entities)
(01) (02) (03)

Actions:
Journals • View Journals • View, Create, Post Journals
Balances • View Balances • View and Update Balances
Reports • View Reports • View and Run Reports

7-7 Copyright © 2010, Oracle. All rights reserved.

 Security with Data Access Sets

Access to MSVs

Access Level Read/Write

Ledger US Corporate Ledger ($)

MSVs Dept B
Dept A Dept C
(001) (002) (003)

Actions:
Journals • View, Create, Post Journals
Balances No Access • View and Update Balances
Reports • View and Run Reports

7-8 Copyright © 2010, Oracle. All rights reserved.

 Security with Data Access Sets

Access to Multiple Ledgers

Access Level Read/Write to Parts of

Multiple Ledgers
Ledger
EMEA Corporate Italy
BSVs
Statutory
(Legal Entities) UK Italy Italy
(11) (12) (12)

Actions:
Journals • View, Create and Post Journals
Balances • View and Update Balances
Reports • View and Run Reports

7-9 Copyright © 2010, Oracle. All rights reserved.

 Setup and Process

7 - 10 Copyright © 2010, Oracle. All rights reserved.

 Data Access Sets - Setup and Process

SETUP PROCESS

Journal Batch Creation

Log on and go to the

Define and Complete Manually Define
Accounting Setup Journal Forms UI
Data Access Set

Create journal batch for

Data Access Set a ledger in which you
Assign Data Access Set
Is Automatically have write access to the
Created To Responsibility
ledger or the entire set of
all BSVs contained in
Assign Data Access Set the journal lines
To Responsibility
(optional) Programs
submitted for
Journal creation

Automated process

7 - 11 Copyright © 2010, Oracle. All rights reserved.

 Setup - Define Data Access Set

7 - 12 Copyright © 2010, Oracle. All rights reserved.

 Management Reporting and Security

Management Segment
• Optionally assign a management segment
• Perform management reporting
• Secure read and write access to
Ledger/Management Segment Value combinations
using data access sets

Co CC Acct I/C

Balancing Cost Center Natural Intercompany

Management Account

7 - 13 Copyright © 2010, Oracle. All rights reserved.

 Management Reporting and Security

Cost Center Hierarchy

No Access
Director A Vice President
Read/Write
MSV Access
0683
X
Director A Director B Director C
OU97

• Create/Post Journals
• Update Balances
OS69
X X
OX53

• Run Reports
• View Data

7 - 14 Copyright © 2010, Oracle. All rights reserved.

 Management Reporting and Security

Cost Center Hierarchy

Read/Write to Parent CC 0683

Vice President
0683

Director A Director B Director C

OU97 OS69 OX53

• View Journals • Create/Post Journals

• View Balances • Update Balances
• View Reports • Run Reports

7 - 15 Copyright © 2010, Oracle. All rights reserved.

 Management Reporting and Security

LE
Management Ledger Set

Primary Ledger Management Ledger

Co CC Acct I/C Adjustments Only

Day-to-Day Transactions
OU97 OU97

OS69 OS69

OX53 OX53

7 - 16 Copyright © 2010, Oracle. All rights reserved.

 Management Reporting and Security Setup

SETUP

Designate
Management Segment
for Chart of Accounts

Define Data Access Set

To Secure Specific
Management
Segment Values

Assign Data Access

Set To Responsibility

Automated process

7 - 17 Copyright © 2010, Oracle. All rights reserved.

 Summary

In this lesson you should be able to:

• Describe Data Access Set Security:
– Setup and Process
— Define Data Access Set
• Describe Management Reporting and Security.

7 - 18 Copyright © 2010, Oracle. All rights reserved.

 Quiz

When modifying a journal batch, you must have write access to

all ledgers or BSVs that are used in that batch.
1. True
2. False

7 - 19 Copyright © 2010, Oracle. All rights reserved.

 Quiz

There are three options for the Access Set Type field, which of
the following is not one of these options:
1. Full Ledger
2. Limited Ledger
3. Balancing Segment Value
4. Management Segment Value

7 - 20 Copyright © 2010, Oracle. All rights reserved.

 Quiz

A management segment qualifier can be used to perform

management reporting and analysis.
1. True
2. False

7 - 21 Copyright © 2010, Oracle. All rights reserved.