Profile options access levels

Profile options can be set at the following levels

Site
Application
Responsibility
User

The profile options can be set to be used only at certain levels, say only at Site level. Amongst these levels the User level has highest precedence. This means the user level value of the same profile option will override the all the other levels. Similarly if the value of a profile is set only at responsibility and application level, the responsibility level will take higher precedence.

We can also restrict profile options to be used at certain levels, say only at site level or application and site level, etc. This restriction can be set during profile option creation. Here’s how to set this restriction.

For our demonstration we shall use an existing profile option that we had created earlier, XX Test Profile.

Navigation: Profile

Query for User Profile Name = XX Test Profile

Notice that the section, Hierarchy Type Access Level.

This section tells Oracle at which level this profile option can be set.

Hierarchy Type decides which options in the section, Hierarchy Type Access Level can be used. Hierarchy Type has the following values,

Security
Server
Server –Responsibility
Organization

Note the various options that are enabled for each value of Hierarchy Type

We shall use the default Hierarchy Type, Security.

Let us see the profile option in action. Now go to System Administrator responsibility.

Navigation: Profile > System

Enter values for Site, Application, Responsibility and User.

Click on Find button.

Notice that the Profile option is enabled for Application, Responsibility and User levels. Let us set the values at all levels.

Save the form.

Now go back to Application Developer responsibility.

Navigation: Profile

Query for User Profile Option = XX Test Profile Option

Note the Hierarchy section

Uncheck Updatable box for Application, Responsibility and User.

Note:
When Access Level is modified at the User level, the User Access level on the right hand side of the form also is modified,

For the User Access level section becomes the following,

Save the form.

Go back to System Administrator responsibility, open the Profile form and query for the profile option.

Click on Find button.

Note that the value can only be modified at Site level and not at any other level. We can only view the values at the other levels. This is because we unchecked the Updatable property at these levels but kept the Visible property checked.

Let us uncheck the Visible property at these levels on the Profile in Application Developer responsibility.