Fusion Budgetary Control Data Security Overview, Including How to Enforce Data Security for Budgetary Control Balances Cube in Essbase – Release 13 and Later (Doc ID 2653733.1)

Last updated on JUNE 10, 2020

Applies to:

Oracle Fusion Budgetary Control - Version 11.12.1.0.0 and later
Information in this document applies to any platform.

Goal

Fusion Budgetary Control can render securable budgetary control balances from Essbase. This includes Smart View, Financial Reporting, the Budget Monitor on the Budgetary Control dashboard, and the Review Budgetary Control Balances page.

Elsewhere, Fusion Budgetary Control renders securable budgetary control balances and the underlying transactions from the relational database. This includes BIP and OTBI reports, the Review Budget Entries and Review Budgetary Control Transactions pages.

Fusion Budgetary Control also renders miscellaneous data-securable tasks from the relational database. This includes Enter Budgets in Spreadsheet, Manage Budget Period Statuses, Carry Forward Funds Available, and similar operational tasks. Setup tasks for Fusion Budgetary Control are generally not data-securable.

For relational data source, budgetary control balances and the underlying transactions, as well as the miscellaneous data-securable tasks are always secured by control budget and can be optionally secured by segment value.

By default, users do not have access to control budgets unless they are implicitly granted by being the creator or the designated budget manager of the control budgets, or explicitly granted. To explicitly grant users control budget access, follow the instructions in How to Add Control Budget Access for Users – Release 12 and Later.
To secure by segment values, follow not only the Enabling Security on a Chart of Accounts: Worked Example section documented in Securing Oracle ERP Cloud, Chapter 11 Implementing Security in Oracle Fusion Financials, as listed in the first column of the following table, but also the additional steps listed in the second column of the following table. Perform only steps 1-5 and 7 from the table if you do not need to extend segment value security from relational data source to Essbase balances cubes.

Steps to Implement Segment Value Security in Fusion Financials and General Ledger Balances Cubes	Additional Steps to Implement Segment Value ¹ Security in Fusion Budgetary Control Balances Cubes
1. Define roles for segment value security rules
2. Enable segment value security for the value set
3. Define the conditions
4. Define the policies
5. Deploy the accounting flexfield	5. Deploy the budgeting flexfield
6. Publish the account hierarchies (this step is for Essbase data source)	6. Run the Create Budgetary Control Balances Cube or Rebuild Budget Chart of Accounts Dimensions process (this step is for Essbase data source)
7. Assign segment value security roles to users	7. Assign segment value security roles to users (if the users are different)
Source: Securing Oracle ERP Cloud, Chapter 11: Implementing Security in Oracle Fusion Financials, Section: Enabling Security on a Chart of Accounts: Worked Example

^1. When segment value security is enabled in budgetary control balances cubes, control budget security is enabled also, and vice versa.

It is important to point out that for Step 5, deploying the accounting flexfield only effectuates data security for the segment value set occurrences across charts of accounts in the accounting flexfield. To effectuate data security for the segment value set occurrences across budget chart of accounts in the budgeting flexfield (for Fusion Budgetary Control), deploy the budgeting flexfield.

For Essbase data source, an applicable process (step 6 in the table above) must be run to toggle security filter in Essbase balances cubes to observe the data security in relation data source.

It is important to point out that for Step 6, performing the Publish Account Hierarchies task from Setup and Maintenance only turns on the data security filter in General Ledger balances cubes to observe segment value security in the accounting flexfield. To turn on data security filter in Budgetary Control balances cubes to observe segment value security in the budgeting flexfield, run one of these processes from Scheduled Process: