Monday 3 August 2015

How Does the MOAC(Multi Org Access Control) Defaulting Rules Work in EBS R12




       How Does the R12 MOAC Defaulting Rules Work?

  1. If the profile option “MO: Security Profile” is not set, then “MO:
    Operating Unit” value is used as the default Operating Unit even if “MO:
    Default Operating Unit” profile is set to a different value.

  1. If the profile option “MO: Security Profile” is set and gives access to
    one Operating Unit, the default Operating Unit will return this value even if
    “MO: Default Operating Unit” is set to a different value.


  1. If the profile option “MO: Security Profile” is set and gives access to
    multiple Operating Units, then the profile value “MO: Default Operating Unit”
    if set is validated against the list of Operating Units in “MO: Security
    Profile”. If the Operating Unit is included in the security profile then it
    is returned as the default value. Otherwise there is no Operating Unit
    default. Moreover, if the Profile Option “MO: Default Operating Unit” is not
    set, then there is no default Operating Unit.

IMPORTANT PROFILE OPTIONS(MOAC) FOR HRMS, MO Units and GL i.e HR:User Type , HR: Security Profile , HR: Business Group, MO: Security Profile , MO: Operating Unit, MO: Default Operating Unit, GL: Data Access Set , GL Ledger Name & GL Ledger ID,




IMPORTANT PROFILE OPTIONS FOR HRMS, MO Units and GL



HR:User Type


It limits field access on windows shared between Oracle Human Resources and Oracle Payroll. If you do not use Oracle Payroll, it must be set to HR User for all responsibilities. This profile option must be set at responsibility level. If you are using Oracle Payroll then you need to choose HR with Payroll User. Below values can be assigned to this profile option:


  • HR User
  • HR with Payroll User
  • Payroll User

HR: Security Profile


This profile option restricts the access of the organization, positions and payrolls defined in the security profile. This option is predefined at Site Level with the view-all security profile created for the Setup Business Group.

In case of standard HRMS security “HR: Security Profile” profile option is used for each responsibility.

If the Security Groups Enabled security is used, you must not set up the “HR: Security Profile” profile option. This is set up automatically when you assign security profiles using the Assign Security Profile window.


HR:Business Group


“HR: Business Group “ profile option determines which business group linked to a responsibility. Default one is the Setup Business Group at Site level.

For Standard HRMS security this profile option is automatically set up when you enter the “HR: Security Profile” profile option. This profile option is set for each responsibility.


If the Security Groups are already enabled, then this option is not user-configurable. The business group is determined when you create a security profile assignment using the Assign Security Profile window.


MO: Security Profile


This profile option is set to a responsibility, so that a user can access  multiple operating units.

After the security profiles is defined and run the Security List Maintenance program, you can assign them to responsibilities or users using the “MO: Security Profile” profile option. If you set the “MO: Security Profile” profile option, you can also set the MO: Default Operating Unit profile option to specify a default operating unit.


If the MO: Security Profile is set, then the MO: Operating Unit profile is ignored.


MO: Operating Unit



This profile option is set at the application responsibility, so that user with this responsibility can access one operating unit.



MO: Default Operating Unit


This profile option is used to specify a default operating unit from the list of operating units assigned to your responsibility through the profile options  MO: Operating Unit or MO: Security Profile.


Note: If the MO: Operating Unit is set or you have assigned only one operating unit in the “MO: Security Profile” profile option, then that single operating unit will be your default operating unit.


GL: Data Access Set


The GL: Data Access Set profile option is used in Oracle General Ledger in order to determine the ledgers whose access is given. If you want users to access different ledgers from the same responsibility, you should define a data access set and then assign it to the GL: Data Access Set profile option for each General Ledger responsibility.Multiple ledgers can be grouped that shares the same chart of accounts, calendar, and period type in a data access set or a ledger set.


GL Ledger Name & GL Ledger ID 


This profile is used for assigning the Ledger to a responsibility. This profile option controls the ledger that each sub ledger will use for transaction processing. The ledger assigned to the GL Ledger Name profile option will automatically be assigned to the GL : Data Access Set profile option.