New Feature of Value Set Security in Oracle 12.2 and above version

New Value Set Security Feature available in 12.2 and above

Oracle has introduced a new value set security feature in 12.2 version which will disable accessing value set values to all users. This is default functionality and Business users are expected to give permissions either to specific value sets or all value sets to specific users or group of users.

In 12.2 version and above Users cannot access value set values by default. Users are allowed to create value sets but not value set values.
So here, by default security is enabled and we need to release the security for a group of people or responsibilities.

I will demonstrate how to provide access to all value sets to a specific user account as well as access of specific value set to a specific user account.

Access to all Value sets

Step 1:

Login as SYSADMIN user (any other user with same privileges)

Step 2:

Navigate to User Management Responsibility (If you don’t have this responsibility, assign it)

Click on “Users”

Following form will appear on your screen. Search the user Name to whom you want to give access

Step 3:

Update User Information

Following page will appear

Click on “Assign Roles”

Search “Flexfield Value Set Security: All privileges” and select the role.

Role will be granted to that user. You need to enter a justification against this addition as it is mandatory

Click “Save” and “Apply”

You need to run “Workflow Background Process” to make this role visible to that user.

After that all Value sets will be visible for that user.

Access to Specific Value Set

Step 1:

You first Need to Create a new Role.

Navigate to User Management Responsibility and open “Roles and Role Inheritance”

Click on “Create Role”

Fill the details as shown in picture below

Click on “Save”

Step 2:

Click on “Create Grant”

Fill the Name field and give “Flexfield Value Set Security Object” in Object field.

Click “Next”

Step 3:

Select “Instance Set” in Data Context Type.

Give “Value set” in Instance Set field and Click “Next”

Step 4:

You have 10 Parameters on the basis of which Predicate will filter the data.

Provide as many Value set IDs in parameters as you want to give access to user.

As I want to give access to only 1 value set that’s why I provide a value set ID in Parameter 1 only

Enter “Flexfield Value Set Security Insert/Update Set” in Set field if you want to allow Insertion as well as update to user. Click “Next”

After reviewing information shown in last screen click “Finish”

A new Role has been defined. Now Assign that Role to User as guided in “Access to all value set” part.