2. Scenario 2:<\/strong> Restricted Access to HCM Data Loader based on Business Objects as introduced in 23D.<\/p>\n <\/p>\n <\/p>\n To give privilege to a user to access HCM data Loader functionality, the predefined role Human Capital Management Integration Specialist<\/a><\/strong>\u202fcould be given. However, this role has extreme potency which exposes the user to access multiple other features including HCM extracts and HDL Spread Sheet Loader even if it is not required. So, to restrict the access solely to HCM Data Loader, Oracle has newly introduced a duty role HCM Data Load<\/a><\/strong> in 23C. User assigned with this role could be given access exclusively to HCM data loading functionality under the \u2018Data Exchange\u2019 functional Area.<\/p>\n <\/p>\n <\/p>\n a)<\/strong> Navigate to the Home page> Tools> Security Console> Roles> Select an already existing role\/Create a custom job role.<\/p>\n <\/p>\n <\/p>\n b)<\/strong> In the function Security Policy, add the privilege \u2018Load HCM Security Data\u2019 if the business object to be loaded is security related such as Areas of Responsibility, Person\/Organization security profile, and so on. Click on next to continue.<\/p>\n <\/p>\n <\/p>\n c)<\/strong> Navigating to the role hierarchy<\/p>\n <\/p>\n <\/p>\n <\/p>\n d)<\/strong> Click \u2018Next\u2019 to save the role.<\/p>\n <\/p>\n Navigate to Home page> Tools> Security Console> Users> Select a user>Add Role>Done<\/p>\n <\/p>\n <\/p>\n Login as the new user. Navigate to My Client Groups> Data Exchange to view the HDL functionalities.<\/p>\n <\/p>\n <\/p>\n <\/p>\n The User can solely access the HDL functional area with full accessibility to view and load the data for all the business objects. The role hence imposes limits on other features in the \u2018Data Exchange\u2019 service.<\/p>\n <\/p>\n <\/p>\n <\/p>\n Oracle has introduced a new feature in 23D to restrict HDL data loading by business objects. Upon configuring this, the user would not have the privilege to load the business objects which are restricted to the role assigned to him.<\/p>\n <\/p>\n To achieve this, follow step 1 in Scenario 1 (eg: Custom Role Name: \u2018aa_HCM DATA LOAD_RESTRICTED CUSTOM ROLE\u2019)<\/p>\n To perform this step, navigate to Setup and Maintenance> Functional Area: HCM data Loader> Configure HCM Data Loader>Navigate to the following Parameters:<\/p>\n <\/p>\n a)<\/strong> Enable Configuration of Role-Based Business Object Access> Override the default value by choosing \u2018Yes\u2019.<\/p>\n b)<\/strong> Restrict Access to Security Related Business Objects\u202f> Set the Override value to \u2018Yes\u2019.<\/p>\n Note:<\/strong> This is required only if the access ought to be given for security-related business objects.<\/p>\n <\/p>\n <\/p>\n The configuration could proceed a) By Role and b) By Business Objects. Note that both the method results in the same outcome.<\/p>\n <\/p>\n <\/p>\n Navigate to Setup and Maintenance>HCM Data Loader Business Object Access>By Role. Under Job and Abstract Role >Navigate to the created custom role eg: \u2019aa_HCM DATA LOAD_RESTRICTED CUSTOM ROLE\u2019 > Assigned Business Object> Assign.<\/p>\n <\/p>\n Assign Individual Business Objects>Search and select the business object (eg: Worker) >Save and close.<\/p>\n <\/p>\n <\/p>\n Note:<\/strong> For the current example, the option \u2018Assign individual business Object\u2019 is utilized. The business object \u2018Worker\u2019 is selected. The employee assigned to this role will have the privilege to upload only worker business objects.<\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n Assign All Unrestricted Business Objects> Warning message pops up> Add >Save and close.<\/p>\n <\/p>\n <\/p>\n Assign All Business Objects, Including Security-Related Objects > Warning message pops up> Add >Save and close.<\/p>\n Note:<\/strong> To load security-related business objects, it is required to add the function security policy \u2018Load HCM Security Data\u2019 while creating the custom role in Scenario 1.<\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n Navigate to Home page> Tools> Security Console> Users> Select a user> Add role> Done<\/p>\n <\/p>\n <\/p>\n Log in as the user to the home page. Navigate to My Client Group> Data Exchange> View Business Objects> Download the template. DAT file. Under My Client Group> Data Exchange> Import and Load Data> Import File> Try to load multiple business objects. eg: \u2018Grade\u2019 and \u2018Worker\u2019.<\/p>\n <\/p>\n <\/p>\n Upon loading, the \u2018worker\u2019 completes import and load. However, \u2018Grade\u2019 shows a warning message and fails to import. An error appears in the data set stating the User does not possess the required privilege to load this business object.<\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n In conclusion, implementing controlled access to the HCM Data Loader via custom roles and business object restrictions provides significant advantages for organizations using Oracle’s HCM platform. This structured approach enhances security and operational efficiency by tailoring access permissions, ensuring users interact only with essential functionalities aligned with their roles. By creating custom roles and configuring access based on business objects, organizations can mitigate risks associated with unauthorized access while streamlining processes. However, it’s crucial to acknowledge limitations such as potential challenges in nuanced access permissions for similar roles and complexity in managing configurations at scale. Despite these challenges, continuous evaluation and refinement of access control mechanisms enable organizations to maintain a robust and secure HCM environment tailored to their evolving needs.<\/p>\n <\/p>\n Author: <\/strong>Reshma P Eldho, Associate Oracle HCM Consultant<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":" The document covers two relevant tasks required to provide controlled access to the users for HCM Data Loader. 1. Scenario 1: To create a custom role to access the HCM Data Loading Functionality as introduced in 23C. 2. Scenario 2: Restricted Access to HCM Data Loader based on Business Objects as introduced in 23D. […]<\/p>\n","protected":false},"author":1,"featured_media":24319,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[18],"tags":[],"class_list":["post-31357","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-oracle-hcm"],"acf":[],"_links":{"self":[{"href":"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-json\/wp\/v2\/posts\/31357","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-json\/wp\/v2\/comments?post=31357"}],"version-history":[{"count":1,"href":"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-json\/wp\/v2\/posts\/31357\/revisions"}],"predecessor-version":[{"id":31358,"href":"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-json\/wp\/v2\/posts\/31357\/revisions\/31358"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-json\/wp\/v2\/media\/24319"}],"wp:attachment":[{"href":"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-json\/wp\/v2\/media?parent=31357"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-json\/wp\/v2\/categories?post=31357"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-json\/wp\/v2\/tags?post=31357"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Scenario 1: Creation of a custom role to access HCM Data Loading Functionality<\/h2>\n
\n
To create a custom role:<\/h3>\n
![\"scenario-1-HCM-role-creation\"](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/1.-scenario1-HCM-role-creation-300x87.png\")
![\"scenario1-HCM-role-creation\"](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/2.-scenario1-HCM-role-creation-300x38.png\")
Add the roles below:<\/h3>\n
\n\n
\n \n HCM Data Load<\/td>\n Tasks within the HDL work area<\/td>\n<\/tr>\n \n Submit data for importing via file-based integration for Human Capital Management<\/td>\n HCM\/Dataloader\/(Import\/Export)directory\u202fin WebCenter Content server<\/td>\n<\/tr>\n \n HCM\/Dataloader\/(Import\/Export)directory\u202fin WebCenter Content server<\/td>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n ![\"scenario1-HCM-role-creation\"](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/3.-scenario1-HCM-role-creation-300x88.png\")
\n
![\"scenario1-HCM](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/4.-scenario1-HCM-role-assigning-to-user-300x141.png\")
\n
![\"scenario1-validating-result\"](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/5.-scenario1-validating-result-300x59.png\")
![\"scenario1-validating-result\"](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/6.-scenario1-validating-result-300x94.png\")
Business Benefits<\/h3>\n
\n
Limitations<\/h3>\n
\n
Scenario 2: Restricted Access to HCM Data Loader Based on Business Objects<\/h2>\n
\n
\n
![\"scenario2-HDL-restriction-activation\"](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/7.-scenario2-HDL-restriction-activation-300x90.png\")
\n
![\"scenario2-HDL](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/8.-scenario2-HDL-restriction-activation-300x35.png\")
Step 3 (a): Provide HCM Data Load access \u2018By Role\u2019<\/h4>\n
1. To assign selected business objects:<\/h5>\n
![\"scenario2-HDL-restriction-by-business-object\"](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/9.-scenario2-HDL-restriction-by-business-object-300x98.png\")
2. To assign Business objects from the selected product area<\/h5>\n
\n
![\"scenario2-HDL](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/10.-scenario2-HDL-restriction-by-product-area-300x98.png\")
\n
3. To Assign All Business Objects, restricting the security-related business objects<\/h5>\n
![\"scenario2-HDLall-unrestricted-business](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/11.-scenario2-HDLall-unrestrictedbusiness-objects-300x43.png\")
4. To Assign All Business Objects, Including Security-Related Objects<\/h5>\n
![\"scenario2-HDL-all-security-related-business-objects\"](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/12.-scenario2-HDL-all-security-related-business-objects-300x49.png\")
Step 3 b) Provide HCM Data Load access \u2018By Business Object\u2019<\/h4>\n
\n
![\"scenario2-HDL-based-on-business-objects\"](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/14.-scenario2-HDL-based-on-business-objects-300x27.png\")
\n
![\"scenario2-assigning-to-user\"](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/13.-scenario2-assgning-to-user-300x131.png\")
\n
![\"scenario2-HDLselecting](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/15.-scenario2-HDLselecting-business-objects-300x97.png\")
\n
![\"scenario2-Loading-Business-object-through-HDL\"](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/16.-scenario2-Loading-Business-object-through-HDL-300x65.png\")
![\"scenario2-validating](\"https:\/\/stage.kovaionplay.com\/stage-kovaion\/wp-content\/uploads\/2026\/01\/17.-scenario2-validating-the-result-300x74.png\")
Business Benefits<\/h3>\n
\n
Limitations<\/h3>\n
\n
Conclusion<\/h2>\n