Your client has implemented Oracle Cloud Applications with their United States business unit and United Kingdom business unit. After six months, they…

In Oracle Cloud Applications, data access is controlled by data roles, which combine a job role (functional access) with a security profile (data access). The project accountant has the correct job role but is missing data access for the new China business unit. This happens when the user's security profile, which specifies the business units they can access, has not been updated to include the newly created China BU. The user must be assigned a data role that grants access to the China BU's data.

A. Job roles (e.g., Project Accountant) are generally not business unit-specific; they grant functional permissions, which the user already has.

C. While different ledgers may exist, data access is primarily controlled by security profiles and data roles, not the ledger structure itself.

D. A user can be granted access to data across multiple legal entities; the LE association does not inherently block access if security is configured correctly.

1. Oracle Fusion Cloud Security, Securing Fusion Cloud Applications, 23D, Chapter 2: Role-Based Access Control. "Data roles combine a job or abstract role with a data security policy. A data role grants access to the data within a specific dimension, such as a business unit or legal entity."

2. Oracle Fusion Cloud SCM, Implementing Common Features for SCM, 23D, Chapter 3: Security. "To give a user access to data, you provision the user with a data role that includes the required function security privileges and the appropriate data security policies." This confirms that access to a new BU requires provisioning of a data role with an updated security profile.