# Fix The Oracle Fusion "You Don't Have Access To This Data" Error > Source: https://netray.co/erp-help/fusion-you-dont-have-access-security-role-fix > Publisher: Netray (netray.co), AI and integration engineering for ERP and manufacturing systems. > Section: ERP Help ## Short answer This generic Oracle Fusion security message means the function privilege and the data security scope did not both line up for that user on that record - most often the job role is assigned but the matching data role, security profile, or business unit and ledger context in Manage Data Access for Users is missing. Fix it by checking data access setup for the user's role, not by re-granting the same job role again. ## Kind error ## System oracle-fusion ## Erp Oracle Fusion Cloud ERP ## Module Security Console / Data Security / Role Provisioning ## Query You don't have access to this data. Contact your help desk ## Alternate Queries - Oracle Fusion you don't have access to view this page - Fusion Cloud missing data access error - Oracle Fusion security error contact help desk - why can't I see records I should have access to Fusion ## Applies To Oracle Fusion Cloud ERP and HCM, role-based access control (RBAC), all editions ## Steps ### Troubleshoot a missing data access security error **Items:** Confirm the user actually has the expected job role assigned via Tools > Security Console, search the user, then review Roles. Separate the two failure types: no function privilege at all, where the menu item or button is missing, versus function privilege exists but a specific record or business unit is invisible, where the error only appears when opening that record. For the second case, open Manage Data Access for Users in Setup and Maintenance to check whether the user has a data security context, such as a business unit, ledger, or asset book, tied to that role. Compare against a peer user who can see the record and diff their role assignments and data access contexts side by side. If a custom data role was built for this implementation, check its security profile definition, which business units and ledgers it includes, rather than assuming it covers everything the base job role would. Have the user sign out and back in after any role or data access change - security context is cached in the session. If access still fails after correct role and data context, check whether the record itself is in a status, such as a closed period or a different ledger, that the security profile deliberately excludes. ## Sections ### Function Security Versus Data Security **Body:** Oracle Fusion access control has two independent layers: function security, which decides whether a role lets you open a page or action at all, and data security, which decides which specific rows, such as business units, ledgers, or cost organizations, you can see once you are on the page. This error usually means function security passed, since you reached the page or transaction, but data security did not, so a specific record or list is empty or blocked. ### Where Data Access Actually Gets Assigned **Body:** For most Financials and Procurement roles, data access is granted by pairing a job role with a specific business unit or ledger through Manage Data Access for Users, not by editing the role definition itself. Two users can have the identical job role and still see different data because their data access context differs. ### Custom Data Roles **Body:** Implementations that build custom data roles on top of Oracle's predefined job roles need to define or reuse a security profile scoping exactly which business units, ledgers, or cost organizations the role covers. A common cause of this error after a role redesign project is a new custom role whose security profile was scoped narrower than the original predefined role it replaced. ### Session Caching **Body:** Role and data access changes do not always take effect mid-session. Users who were provisioned access while logged in, or shortly before, should sign out completely and sign back in before you conclude the fix did not work. ## Pitfalls - Re-adding the same job role repeatedly, assuming the error means the role itself is missing, when the real gap is the data access context. - Editing a predefined Oracle job role directly instead of copying it and customizing the copy, which is unsupported and gets overwritten on upgrade. - Granting overly broad data access, such as all business units, just to make the error disappear quickly, which creates a genuine security exposure. - Forgetting to have the user sign out and back in after a role or data access change and concluding the fix failed. - Not checking whether the record belongs to a business unit or ledger that was intentionally excluded from the user's security profile. ## Ai Angle ERPray grounded on your Fusion security setup can compare a blocked user's actual roles and data access contexts against a peer who has working access, and point to the specific missing security profile or business unit assignment - turning a vague contact-your-help-desk message into a precise, one-line fix instead of a multi-step manual role audit. ## Faq ### Does this error always mean a security setup problem? **Answer:** In the overwhelming majority of cases yes, but occasionally it also appears for records in an unusual status, such as a period closed to that role or a record moved to a different business unit, that the security profile is correctly excluding by design - so confirm expected access before changing any role. ### How do I tell function security from data security quickly? **Answer:** If the user cannot open the page, menu, or button at all, it is function security, a missing role or privilege. If they can get into the page or transaction but a specific record, list, or business unit is empty or blocked, it is data security, a missing profile or context. ### Who can grant data access - the security admin or the functional admin? **Answer:** Typically whoever holds the IT Security Manager or a similarly privileged role handles Security Console role assignment, while a functional Financials or SCM administrator with access to Manage Data Access for Users often handles the business unit and ledger context. In smaller teams the same person does both. ### Can I test data access without waiting for the real user? **Answer:** Yes, use a role comparison or impersonation feature where available, or replicate the exact role and data access context on a test user to confirm the scope resolves correctly before telling the requester to sign back in. ## Search terms you don't have access to this data Oracle Fusion, Oracle Fusion security error contact help desk, Manage Data Access for Users Fusion, Oracle Fusion data security profile, Fusion Security Console role troubleshooting, Oracle Fusion function security vs data security, Fusion custom data role missing access, Oracle ERP Cloud role provisioning error --- Talk to an engineer: https://netray.co/contact?intent=erp_ai | Machine catalog: https://netray.co/agent/catalog.json