Solution Beacon, LLC
 

Solution Beacon Security Best Practice #8  - Properly Set Other Security-Related Profiles 

In addition to Signon and Timeout profile options, there are other security-related E-Business Suite profile options that should also be set:  

 

Profile

Default

Recommendation

Sign-On:Audit Level               

(none) 

FORM

Sign-on:Notification               

No      

Yes

Utilities:Diagnostics                

No      

No 

FND:Diagnostics                     

Yes     

No 

Hide Diagnostics               

No       

Yes   

Concurrent:Report Access Level

User

User

AuditTrail:Activate

No

Yes

  • Sign-On:Audit Level

This profile option defines what level (User, Responsibility or Form) the system will perform auditing for user navigation. Note that this ‘auditing’ content is only information about t what the user navigation was – it does not audit what occurs while a user is on a form, for example.

  • Sign-on:Notification

This profile option presents notifications to a user upon a successful login.

  • Utilities:Diagnostics

The Utilities:Diagnostics profile option allows Forms users to examine (and change) individual database records. Setting Utilities:Diagnostics to "No" requires the user to enter the APPS password prior to using the Diagnostics Examine, which should mitigate their ability to change data within the database.

  • FND:Diagnostics

Self Service has a similar profile option to the one above. If the profile option FND: Diagnostics is set to Yes, then anyone can use the Diagnostics Examine function which allows users to change database records.

  • Hide Diagnostics

The Hide Diagnostics profile option hides the diagnostics menu from users. The diagnostics menu should be hidden from most users. Set the Hide Diagnostics profile option to Yes, the default value is No.

  • Concurrent:Report Access Level

Set system profile option Concurrent:Report Access Level to ‘User’ to restrict a user from viewing other users' concurrent requests.

  • AuditTrail:Activate

This profile option needs to be set to Yes for the EBS auditing to function.