Free Fusion SQLSecurityRead-only

Direct role assignments per user

Every role currently granted directly to a user (autoprovisioned + manual). High-volume — filter to specific user via :username.

Tables used

per_user_roles per_users per_roles_dn_vl

Bind parameters

Supply values for :username when you run it.

How to run it

Paste it into a BI Publisher data model as a SQL data set, or into QueryWell's Query Studio and run it against your pod with a reporting account. Results come back to a grid you can profile, chart and export with a SHA-256 hash.

SQLdba-sec-role-grants
SELECT u.username, rolt.role_name, rolt.role_common_name, ur.start_date, ur.end_date, ur.method_code, ur.created_by
FROM per_user_roles ur
JOIN per_users u ON u.user_id = ur.user_id
JOIN per_roles_dn_vl rolt ON rolt.role_id = ur.role_id
WHERE (:username IS NULL OR UPPER(u.username) = UPPER(:username))
ORDER BY u.username, rolt.role_name

A single read-only SELECT against Oracle Fusion Cloud's supported reporting surface. Column names and views can differ by release and by the roles your reporting account holds, so validate the result against a report you already trust before relying on it.

securityrolesgrants

Related

More Security queries

Run it without the template cycle

QueryWell runs this and 81 other curated scripts against your own Fusion pod from one signed desktop app — grid, charts, profiling and hashed exports included. Perpetual licence, 14-day trial.