Why Accounts Payable Read Only Role With BU Specified Is Having Access To Create/Edit Invoices In A Different BU Specified For AP Manager/Supervisor Roles? (Doc ID 2532956.1)

Last updated on OCTOBER 15, 2019

Applies to:

Goal

The AP Invoice Read Only role by itself works fine. However, if the users have AP Manager/Supervisor with a different BU access than the BU listed for the AP Read only, they get full access to both BUs.

STEPS

1. Create custom role 'Payables Inquiry' per <Note 2308968.1>

2. Create user with the following roles:
Employee
Payables Inquiry
Accounts Payable Manager
Accounts Payable Supervisor

3. Run:
Import User and Role Application Security Data
Retrieve Latest LDAP Changes
Pending LDAP Requests

3. Give access from task Manage Data Access for Users:
Payables Inquiry - BU1
Accounts Payable Manager - BU2
Accounts Payable Supervisor - BU2

Results:
Create invoice showing access to both BUs
 

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.