Introduction

In a typical organization data is of utmost importance and tremendous care and efforts are made by organizations to ensure that their data is safe and secure. The question becomes more vital if the ERP implementation is in a Cloud Deployment Model. It is for this primary reason that “Auditing” an ERP Implementation project becomes very important. As of now when this article is being written “Auditing” is achieved in Oracle HCM Cloud Application using either of the below mentioned four tools:

1. a) Auditing Business Objects

1. b) Standard Security Reports

1. c) Security Console

1. d) OTBI and BIP Reports

In this post we will focus on understanding some of the “Standard Security Reports” and one of the delivered security report which can be utilized is “Inactive Users Report”.

Purpose of Inactive Users Report

Inactive Users Report gives the list of all users along with the days since when a user is inactive. Say for example we want to find the list of all users who are inactive since say for last 30 days then we can run this report. But there are some pre-requisite before we can run this report and retrieve data.

Pre-requisites of running Inactive Users Report

It is mandatory to run the Import User Login History process. This process imports information that the Inactive Users Report process uses to identify inactive users.

Worked-Out Example

We would run the “Import User Login History” process.

Now, we will run the “Inactive Users Report”

When we run this process we will get two output files. The first output file displays the underlying SQL which was utilized to return data based on the input parameters passed in the scheduled process

Screen-shot of Output retrieved from the process

Summary

So this is how one can run the “Inactive Users Report” and get the required info from the application. Similar to this delivered report there are also “Locked Users Report” and “User Password Changes Audit Report” which can be used to find the list of all Locked Users as well as audit details of the user password changes related data. Both of these processes also have the similar pre-requisite of running “Import User Login History” process. Also, one more important point to note here is that in order to run “User Password Changes Audit Report” one must have the ASE_USER_PASSWORD_CHANGE S_AUDIT_REPORT_PRIV function security privilege to run this report. The predefined IT Security Manager job role has this privilege by default.

Ashish Harbhajanka

Add comment