Configuring AoR and DoR Security for HR Representatives in Oracle HCM

Step 1: Define the Area of Responsibility (AoR)

  1. Navigate to Setup and Maintenance → Manage Assignment Responsibility Lookups.
  2. Ensure the lookup code "HR_REP" is active.
  3. Go to My Client Groups → Person Management.
  4. Search for an employee, open their record, and go to Manage Employment → Manage Areas of Responsibility.
  5. Add a new responsibility:
    • Responsibility Type: Human Resource Representative
    • Scope: Country → United States
  6. Save and close the configuration.

Step 2: Configure the Person Security Profile Based on AoR

  1. Navigate to My Client Groups → Workforce Structures → Person Security Profiles.
  2. Click Create New Person Security Profile.
  3. Enable "Secure by Area of Responsibility".
  4. Set the following parameters:
    • Responsibility Type: Human Resource Representative
    • Scope of Responsibility: Country
  5. Save and close the profile.

Step 3: Restrict Access to Visa and Permit Documents (DoR Setup)

  1. Go to Setup and Maintenance → Document Types.
  2. Search for existing document types under the category "Visa and Permit".
  3. If needed, create a new document type and link it to the Visa and Permit category.
  4. Ensure that the document type is set to Active.
  5. Navigate to Workforce Structures → Document Type Security Profiles.
  6. Create a new Document Type Security Profile, including only Visa and Permit documents.

Step 4: Create a Custom HR Representative Role

  1. Navigate to Tools → Security Console → Roles Tab.
  2. Search for the existing role ORA_PER_HUMAN_RESOURCE_SPECIALIST_JOB.
  3. Click Copy Role and create a Shallow Copy.
  4. Go to Setup and Maintenance → Manage Data Role and Security Profiles.
  5. Create a New Data Role and link it to the copied HR Specialist job role.
  6. Assign:
    • Person Security Profile → The one created based on AoR.
    • Document Type Security Profile → The one created for Visa and Permit documents.
    • View All for any other necessary settings.
  7. Save and complete the role setup.

Step 5: Assign the Data Role to the HR Representative

  1. Navigate to Tools → Security Console → Users.
  2. Search for the HR Representative who requires access.
  3. Assign the newly created Data Role to the user.
  4. Save and apply the changes.

Step 6: Validate the Configuration

Login as the HR Representative and verify:

  • In Person Management, only employees under US legislation should be visible.
  • In Manage Employment → Manage Document of Records, the HR Representative should only see Visa and Permit documents, with no access to other document types.

Outcome & Benefits

🎯 Ensures data security by restricting access to sensitive employee records.
🎯 Provides controlled document access based on HR responsibilities.
🎯 Improves compliance with company policies and regulatory requirements.

I hope this blog post was helpful for you. If you have any questions or feedback, please leave a comment below.