# Roles of Implementation These are the roles that I recommend you assign to your implementation user. Of course, there should be more, but I believe this is the bare minimum required to begin your implementation tasks. | Role Name | Role Code | Description | | ----------------------------------------------- | ------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Application Implementation Consultant | ORA\_ASM\_APPLICATION\_IMPLEMENTATION\_CONSULTANT\_JOB | Has access to all setup tasks across all products. | | Application Implementation Manager | ORA\_ASM\_APPLICATION\_IMPLEMENTATION\_MANAGER\_JOB | Configures offerings, options and features and assigns resources to tasks. | | Application Implementation Administrator | ORA\_ASM\_APPLICATION\_IMPLEMENTATION\_ADMIN\_ABSTRACT | Performs all Oracle Fusion Functional Setup Manager duties. | | Application Administrator | ORA\_FND\_APPLICATION\_ADMINISTRATOR\_JOB | Provides enterprise-wide application administration. Collaborates with specific application administrators to maintain consistent enterprise application setup, architecture, information, rules, and access. | | Application Diagnostics Administrator | ORA\_FND\_DIAG\_ADMINISTRATOR\_JOB | Manages diagnostic tests and data. | | Application Developer | ORA\_FND\_APPLICATION\_DEVELOPER\_JOB | Provides enterprise-wide application administration needed for configuring and extending applications. | | Functional Setups User | ORA\_ASM\_FUNCTIONAL\_SETUPS\_USER\_ABSTRACT | Give access to the Functional Setups User to the Setup and Maintenance area. | | Financial Application Administrator | ORA\_FUN\_FINANCIAL\_APPLICATION\_ADMINISTRATOR\_JOB | Manages financial application administration. Collaborates with financial application users to maintain consistent financial application setup, rules, and access. (required to setup FDC & FDG). | | IT Security Manager | ORA\_FND\_IT\_SECURITY\_MANAGER\_JOB | Protects assets such as information technology systems, data, and networks. | | Sales Administrator | ORA\_ZBS\_SALES\_ADMINISTRATOR\_JOB | Rols required to import and export top-level objects. | | Human Resource Analyst | ORA\_PER\_HUMAN\_RESOURCE\_ANALYST\_JOB | Performs duties of a human resources analyst (useful in the creation of employees). | | Human Resource Specialist | ORA\_PER\_HUMAN\_RESOURCE\_SPECIALIST\_JOB | Performs duties of a human resources specialist (useful in the creation of employees). | | Human Resource Manager | ORA\_PER\_HUMAN\_RESOURCE\_MANAGER\_JOB | Performs duties of a human resources manager (useful in the creation of employees). | | Human Capital Management Integration Specialist | ORA\_HRC\_HUMAN\_CAPITAL\_MANAGEMENT\_INTEGRATION\_SPECIALIST\_JOB | The primary purpose of this role is to ensure seamless data exchange and synchronization between HCM systems and other Oracle Fusion applications, enabling organizations to streamline their HR processes, improve data accuracy, and enhance overall operational efficiency. | {% hint style="warning" %} ⚠️ These roles should be individually associated with the created user. It is not recommended to create a custom role with all of these roles, as the data access is not unique. {% endhint %} ### Jobs for synchronizing roles and users {% hint style="info" %} Don't forget to run these jobs after you've finished registering these roles to synchronize your access: * Retrieve Latest LDAP Changes * Import User and Role Application Security Data * Send Pending LDAP Requests * Send Personal Data for Multiple Users to LDAP {% endhint %} **Retrieve Latest LDAP Changes** It is critical that all User Account information be synced with the Cloud application from the LDAP directory; otherwise, you will encounter the issue of not seeing Roles and user accounts in the application. **Import User and Role Application Security Data** Is a key step for system security. This process imports user and role data from LDAP to the Fusion HCM Security Console tables. It creates a privilege with the job name preceded by "RUN\_", which is crucial for allowing users to execute specific jobs from the Scheduled Processes interface. Moreover, it's recommended to run this process periodically, at least twice a day, to ensure the latest changes in LDAP are reflected in the system, maintaining security data integrity and access control policies effectiveness. **Send Pending LDAP Requests** Help with many important functions in the Cloud Application, such as creating, suspending, and reactivating user accounts. **Send Personal Data for Multiple Users to LDAP** **All Users:** The process sends personal information for all users to the Identity Store, regardless of whether the information has changed since the last time it was sent. **Changed users only:** The process only sends personal information that has changed since the last time the information was sent to the Identity Store (regardless of how they were sent). This is the standard-setting.