MOAC

Multi Organization Access Control

January 29 th 2011
Definition
Multiple Organizations Access Control is an
enhancement to the Multiple Organizations
feature of Oracle Applications.
Basic Business Needs
• Use a single installation of any Oracle Applications
product to support any number of organizations,
even if those organizations use different ledgers.
• Support flexible organizational models.
• Secure access to data so that users can only
access relevant information.
• Access one or more operating units using a single
responsibility.
• Enhanced reporting capability using the Reporting
Level parameter.

120funmo
Major Features
• Multiple Organizations in a Single Installation 
can be ledgers, business group, legal entities,
operating units, or inventory organizations.
• Secure Access  multiple operating units are
assigned to the security profile, then a user can
access data for multiple operating units from a
single responsibility.
– Data Security
– Inventory Organization Security by Responsibility
– Access to Operating Units
– Receive Goods Into Any Inventory Organization
– Multiple Organizations Reporting
True Multi-Org Access Control
• R12 Offers True Multi-Org Access
• Responsibilities are assigned a Security Profile which
is a group of Operating Units
• Assignment is through the profile option ‘MO:
Security Profile’ set at the Responsibility Level.

Responsibility

Operating Units
True Multi-Org Access Control
(cont’d)
• So from one responsibility you can perform
transactions and report on transactions from
multiple operating units
• Desirable in a share services environment
• Users have to be very careful and disciplined while
using MOAC
• Even though MOAC is available changing
responsibilities to change operating units has some
benefits
Types of Organizations
BUSINESS GROUP
• Highest level in the organization structure,
such as the consolidate enterprise, a major
division, or an operation company.
• Secures human resources information. E.g, when
you request a list of employees, you see all
employees assigned to the business group of which
your organization is a part.
• Multiple ledgers can share the same business
group if they share the same business group
attributes, including HR flexfield structures.
Types of Organizations
LEGAL ENTITY
• A legal company for which you prepare fiscal or
tax reports. You assign tax identifiers and other
legal entity information to this type of organization.

HR Organization
• represent the basic work structure of any
enterprise. They usually represent the functional
management, or reporting groups that exist within a
business group. In addition to these internal
organizations, you can define other organizations
for tax and government reporting purposes, or for
third party payments.
Types of Organizations
OPERATING UNIT
• An organization that uses Oracle subledgers, such
as Oracle Cash Management, Order Management
and Shipping Execution, Oracle Payables, Oracle
Purchasing, Oracle Receivables, and related
products.
• It may be a sales office, a division, or a
department.
• Operating units are not associated with legal
entities. Operating units are assigned to ledgers
and a default legal context.
Types of Organizations
OPERATING UNIT
• Information is secured by operating unit for these
applications using responsibilities.
• Each user can access, process, and report on data
only for the operating units assigned to the MO:
Operating Unit or MO: Security Profile profile
option.
• The MO: Operating Unit profile option only
provides access to one operating unit.
• The MO: Security Profile provides access to
multiple operating units from a single
responsibility.
Types of Organizations
INVENTORY ORGANIZATION
• An organization for which you track inventory
transactions and balances, and/or an organization that
manufactures or distributes products
• Examples include (but are not limited to) manufacturing
plants, warehouses, distribution centers, and sales
offices.
• The following applications secure information by
inventory organization: Oracle Inventory, Bills of
Material, Engineering, Work in Process, Master
Scheduling/MRP, Capacity, and Purchasing receiving
functions.
• To run any of these applications, you must choose an
organization that has been classified as an inventory
organization.
Setups: Security Profiles
• The Security Profiles form allows you to group
together Operating Units
• Global HRMS – Define Security Profile
Run Security List Maintenance
• The Security List Maintenance concurrent program
must be run each time you add or change Security
Profiles.
Setups: Profile Options
• There are three Profile Options you need to be
aware of related to Multi-Org that should be set at
the Responsibility Level.
• The R12 profile option ‘MO: Security Profile’ is
always evaluated first.
• The pre-R12 profile option ‘MO: Operating Unit’
still works in R12. It is just a secondary priority
being evaluated after ‘MO: Security Profile’.
• The R12 profile option ‘MO: Default Operating
Unit’ sets the default Operating Unit for
transactions when running under a Security
Profile.
Setups: Profile Options (Cont’d)
Pre-R12 ‘MO: Operating Unit’
• Many R12 applications modules do not work with
‘MO: Security Profile’ set for a given
responsibility.
• They must only use ‘MO: Operating Unit’.
• Some even require all three Profile Options set.

Examples:
– CRM Modules
– Certain GL Drill Down Functions
(trial and error determination of setups, no clear
direction)
Concurrent Programs
• Oracle has implemented a new parameter on the
System Administration : Concurrent Parameters
form to control how to handle Operating Units.
Concurrent Programs (cont’d)
• Yes that’s the System Administration Responsibility
Concurrent Programs (cont’d)
• The Operating Unit Mode parameter does not show
up in the System Administrator : Define Concurrent
Programs form.
Concurrent Programs (cont’d)
• The Operating Unit Mode parameter is not always
set properly by Oracle Development during an
upgrade.

• This setting has three values:

– NULL – default setting
– Single – run only for a specific Operating Unit specified by ‘MO:
Operating Unit’ profile option
– Multi – run for multiple Operating Units based on the ‘MO:
Security Profile’ profile option

• Change this setting from the default NULL setting to

Single to see if this resolves report execution errors.
Concurrent Programs (cont’d)
• This Operating Unit Mode parameter is used to
identify:
– How the program executes the multiple organizations
initialization
– When to display Operating Unit prompt in the Submit
Requests window and Schedule Requests window.

• This impacts how the Submit Requests form

evaluates Concurrent Request Parameter List of
Values. If you don’t see what you want try changing
this setting.