Fusion Applications

Introduction

Copyright © 2014 Tata Consultancy Services Limited 1

 Agenda
Fusion Apps Introduction General Ledger Setup

- Architecture of fusion apps • Legal Entity Creation

- Navigation • Create Legal Address
- Security • Create Legal Entity
- Fusion Product families, Offerings, Implementation Project • Manage Legal Entity Registration task
• Define Chart of Accounts
• Create Value Sets
• Create COA Structure
• Manage Structure Instances
• Deploy the flexfield
• Enter Value Set Values
• Manage Calendars
• Create Primary Ledger
• Assign Legal Entities
• Specify Ledger Options
• Review and submit Accounting Configurations
• Manage Data Access Sets
• Assign Data Roles
• Open Period
• Enter Journals

2
 What is Fusion Applications
Oracle Fusion Applications is Enterprise Resource Planning
(ERP) software applications from Oracle Corporation

Product Families
• Financial management
• Human capital management
• Supply chain management
• Procurement
• Project portfolio management

• Versions
• 11.1.9
• 11.1.11
3
Product Families

4
Architecture

5
Navigation

6
 Functional Setup Manager (FSM)
Functional Setup Manager is a one-stop planning-to-deployment
application that enables a rapid start of Oracle Fusion applications
implementation

• Single interface for all of the setup and maintenance phases across the complete life cycle.
• Guided processes that make it easy to navigate through planning, implementation, deployment,
and ongoing maintenance.
• Configurability of the Oracle Fusion offerings to mold the offerings to fit the business needs.
• Predefined, guided list of tasks for full end-to-end visibility to all setup requirements enabling
business users with the ability to implement quickly what they need and when they need it.
• Export and import capability to let enterprises set up one instance and move the setup and
task lists to other instances.
• Set of comprehensive reports to give full visibility to setup at any time

Job Roles
Application Implementation Manager
Application Implementation Consultant

7
Setup Objects

8
 Setup Data Export and Import

The Export and Import Application Setup activity enables an

Implementation Manager to easily move the setup data between
instances to reduce implementation time between project phases
and instances

Setup data can be exported from the source instance and imported into
another instance by creating a Configuration Package using Oracle
Fusion Functional Setup Manager.

A Configuration Package consists of the implementation project structure

plus the setup data. The package can be exported then imported into
another instance using Oracle Fusion Functional Setup Manager
9
 Documentation

http://docs.oracle.com/cloud/latest/financialscs_gs/index.html

10
 Security - Authentication vs. Authorization

Authentication
The process of verifying that you are who you claim to be
applied to Users, Automated Agents or Web Services
credentials are checked at login
access is then granted or denied
Authorization
The process of granting or revoking a privilege to interact with one or more
protected system resources.
The ‘system resource’ could be a data object like opportunities or contacts or
clinical information, or functional objects like menus, pages, workflows,
buttons, reports, dashboards, tasks, jobs, web services etc.

11
 Role-Based Security Model

Oracle Fusion Applications use a role-based access control

security model. Users are assigned roles through which they
gain access to functions and data within the applications

12
 Role-Based Access Control

Role-based security in Oracle Fusion Applications controls who

can do what on which data.

13
 RBAC cont..

Who is a role assigned to a user.

What is a function that users with the role can perform.
Which Data is the set of data that users with this role can access
when performing this function. "Which Data" is defined using
security profiles.

14
 Role Types

Oracle Fusion Applications uses four types of roles for security management:

Data Roles are a combination of a worker's job and the data instances that users with the role need to access. For
example, the HCM data role Payroll Administrator Payroll US combines a job (Payroll Administrator) with a data
scope (Payroll US). Data roles are not delivered as part of the reference implementation. They are defined by
customers and are assigned directly to users.

Abstract Roles represent a worker's role in the enterprise, independently of the job the worker is hired to do. Three
abstract roles are delivered with Oracle Fusion HCM: Employee, Line Manager, and Contingent Worker. You can also
create custom abstract roles. You assign abstract roles directly to users.

Job roles align with the job a worker is hired to perform. Examples of predefined job roles are Human Resource Analyst
and Payroll Manager. You can create custom job roles. Typically, you include job roles in data roles, and assign those
data roles to users. (The IT Security Manager and Application Implementation Consultant job roles are exceptions,
because they are not considered HCM job roles and don't restrict data using security profiles.)

Duty roles align with the individual duties that users perform as part of their job. They grant access to work areas,
dashboards, task flows, application pages, reports, batch programs, and so on. They may carry both function and
data security grants. Duty roles are inherited by job and abstract roles, and can also be inherited by other duty roles.
Duty roles are delivered as part of the reference implementation, and can be used as building blocks when creating
your own job and abstract roles. You do not assign duty roles directly to users.

15
Job and Duty example

16
Roles cont..

17
Roles cont..

18
 Payables Roles example
Accounts Payable Specialist Duty

Payables Invoice Creation Duty

Payables Invoice Inquiry Duty

PRIVILEGE_TITLE PRIVILEGE_NAME DESCRIPTION

Apply or Unapply Payables Prepayments AP_APPLY_OR_UNAPPLY_PAYABLES_PREPAYMENTS Allows application of prepayments.

Correct Payables Import Validation Errors AP_CORRECT_PAYABLES_IMPORT_VALIDATION_ERRORS Allows correction of import validation errors.

Create Payables Invoice AP_CREATE_PAYABLES_INVOICE Allows creation of Oracle Fusion Payables invoices.

Delete Payables Invoice AP_DELETE_PAYABLES_INVOICE Allows deletion of Oracle Fusion Payables invoices.

Edit Payables Invoice AP_EDIT_PAYABLES_INVOICE Allows editing of invoices.

Hold Invoice from Approval Task Flow AP_HOLD_INVOICE_FROM_APPROVAL_TASK_FLOW Allows holding invoices from the approval task flow.
Import Payables Invoice AP_IMPORT_PAYABLES_INVOICE Allows importing of invoices into Oracle Fusion Payables invoice interface.

Initiate Payables Invoice Approval Task Flow AP_INITIATE_PAYABLES_INVOICE_APPROVAL_TASK_FLOW Allows initiating the Oracle Fusion Payables invoice approval task flow.

Manage Payables Invoices Activities AP_MANAGE_PAYABLES_INVOICES_ACTIVITIES Allows access to Oracle Fusion Payables invoice work area.

Modify Payables Invoice Tax Drivers AP_MODIFY_PAYABLES_INVOICE_TAX_DRIVERS Allows modification of invoice tax details.

Validate Payables Invoice AP_VALIDATE_PAYABLES_INVOICE Allows validation of Oracle Fusion Payables invoices.

View Payables Invoice AP_VIEW_PAYABLES_INVOICE Allows viewing of Oracle Fusion Payables invoices without performing a search.

View Payables Invoice Holds AP_VIEW_PAYABLES_INVOICE_HOLDS Allows viewing of Oracle Fusion Payables invoice holds.

View Payables Invoice Installments AP_VIEW_PAYABLES_INVOICE_INSTALLMENTS Allows viewing of Oracle Fusion Payables invoice installments.

View Scanned Payables Invoices AP_VIEW_SCANNED_PAYABLES_INVOICES Allows viewing of scanned invoices.

View Payables Invoice AP_VIEW_PAYABLES_INVOICE Allows viewing of Oracle Fusion Payables invoices without performing a search.

19
 Security Reference Implementation

Seeded “common denominator” Implementation

Starting point to make changes.
Manuals for each product describe details.
Manuals Accessible via OER.
Excel spreadsheet format of “Roles, Duties & Privileges” available
via Metalink Note 1460486.1
Menu to privilege mapping currently available as a spreadsheet
via Metalink Note 1459828.1

20
Tools

21
 Tools Used to Perform Security Tasks

Oracle Identity Management (OIM)

Create Implementation Users (not mapped to HR people)
Provision Roles to Implementation Users
Manage Job Roles
Authorization Policy Manager (APM)
Manage Duties
View Role Hierarchies
Manage Role Hierarchies
View Permission Grants
View Data Security Policies

22
Fusion vs EBS

23
 Thank You

IT Services
Business Solutions
Consulting