Step 1: Define the Area of Responsibility (AoR)
- Navigate to Setup and Maintenance → Manage Assignment Responsibility Lookups.
- Ensure the lookup code "HR_REP" is active.
- Go to My Client Groups → Person Management.
- Search for an employee, open their record, and go to Manage Employment → Manage Areas of Responsibility.
- Add a new responsibility:
- Responsibility Type: Human Resource Representative
- Scope: Country → United States
- Save and close the configuration.
Step 2: Configure the Person Security Profile Based on AoR
- Navigate to My Client Groups → Workforce Structures → Person Security Profiles.
- Click Create New Person Security Profile.
- Enable "Secure by Area of Responsibility".
- Set the following parameters:
- Responsibility Type: Human Resource Representative
- Scope of Responsibility: Country
- Save and close the profile.
Step 3: Restrict Access to Visa and Permit Documents (DoR Setup)
- Go to Setup and Maintenance → Document Types.
- Search for existing document types under the category "Visa and Permit".
- If needed, create a new document type and link it to the Visa and Permit category.
- Ensure that the document type is set to Active.
- Navigate to Workforce Structures → Document Type Security Profiles.
- Create a new Document Type Security Profile, including only Visa and Permit documents.
Step 4: Create a Custom HR Representative Role
- Navigate to Tools → Security Console → Roles Tab.
- Search for the existing role ORA_PER_HUMAN_RESOURCE_SPECIALIST_JOB.
- Click Copy Role and create a Shallow Copy.
- Go to Setup and Maintenance → Manage Data Role and Security Profiles.
- Create a New Data Role and link it to the copied HR Specialist job role.
- Assign:
- Person Security Profile → The one created based on AoR.
- Document Type Security Profile → The one created for Visa and Permit documents.
- View All for any other necessary settings.
- Save and complete the role setup.
Step 5: Assign the Data Role to the HR Representative
- Navigate to Tools → Security Console → Users.
- Search for the HR Representative who requires access.
- Assign the newly created Data Role to the user.
- Save and apply the changes.
Step 6: Validate the Configuration
✅ Login as the HR Representative and verify:
- In Person Management, only employees under US legislation should be visible.
- In Manage Employment → Manage Document of Records, the HR Representative should only see Visa and Permit documents, with no access to other document types.
Outcome & Benefits
🎯 Ensures data security by restricting access to sensitive employee records.
🎯 Provides controlled document access based on HR responsibilities.
🎯 Improves compliance with company policies and regulatory requirements.
I hope this blog post was helpful for you. If you have any questions or feedback, please leave a comment below.