# JD Edwards Security Workbench Worksheet > Source: https://netray.co/tools/jde-security-workbench-worksheet > Publisher: Netray (netray.co), AI and integration engineering for ERP and manufacturing systems. > Section: Free Tools ## Short answer Editable worksheet to record JD Edwards role security records by type, with the actions allowed, risk notes and approver for each. ## Category oracle ## Erp Oracle JD Edwards EnterpriseOne ## Audience - JDE security administrator - Internal auditor - JDE functional consultant ## Tool **Kind:** worksheet **Mode:** editable **Columns:** #### Role **Key:** role **Type:** text #### Security type **Key:** sec_type **Type:** select **Options:** - Application - Action - Row - Column - Exit - Processing option - Tab - External call - Solution Explorer #### Object or target **Key:** object **Type:** text #### Environment **Key:** env **Type:** text #### Run / view **Key:** run **Type:** select **Options:** - Y - N #### Add **Key:** add **Type:** select **Options:** - Y - N #### Change **Key:** change **Type:** select **Options:** - Y - N #### Delete **Key:** delete **Type:** select **Options:** - Y - N #### Segregation of duties note **Key:** risk **Type:** text #### Approved by **Key:** approver **Type:** text **Rows:** **Role:** AP_CLERK **Sec type:** Application **Object:** P0411 Standard Voucher Entry **Env:** PRD **Run:** Y **Add:** Y **Change:** Y **Delete:** N **Risk:** Must not also approve payments **Approver:** Controller **Role:** AP_CLERK **Sec type:** Row **Object:** Business unit range for own company **Env:** PRD **Run:** Y **Add:** Y **Change:** Y **Delete:** N **Risk:** Limits to own company **Approver:** Controller **Role:** BUYER **Sec type:** Application **Object:** P4310 Purchase Order Entry **Env:** PRD **Run:** Y **Add:** Y **Change:** Y **Delete:** N **Risk:** Must not receive goods **Approver:** Purchasing manager **Role:** STOREKEEPER **Sec type:** Application **Object:** P4312 Receipts (example) **Env:** PRD **Run:** Y **Add:** Y **Change:** N **Delete:** N **Risk:** Must not enter purchase orders **Approver:** Inventory manager **Role:** GL_SUPERVISOR **Sec type:** Action **Object:** Journal entry post (example) **Env:** PRD **Run:** Y **Add:** N **Change:** N **Delete:** N **Risk:** Posting separated from entry **Approver:** Finance director **Totals:** #### Security records **Key:** role **Agg:** count **Notes:** Object names and entries are examples. Security Workbench (P00950) stores records by role or user, security type, object and environment, and the most specific record wins. Record exactly what is configured, then review with business owners and internal audit. ## Content **Intro:** JD Edwards EnterpriseOne security is configured record by record in Security Workbench, and over the years those records pile up until nobody can say who can do what. This worksheet gives security administrators and auditors a simple table to document and review the records by role. **Sections:** #### How to use the worksheet **Body:** Create one row for each security record you configure or find: the role, the type of security, the object or target, the environment and the actions allowed. Use the segregation of duties column to write the conflict you are avoiding, and the approver column to show who agreed it. Export to Excel for audit review or change approval, and keep a dated copy after each review cycle. **Bullets:** - Prefer roles over individual users - Record the environment, since records can differ between dev and production - Write down conflicts explicitly, for example entry versus approval - Keep the approver name for evidence #### Types of security in JDE **Body:** Security Workbench covers many types: application security for who may run, add, change or delete in an application; action security for specific buttons; row security that limits which records are visible; column security that hides fields; exit security for menu exits; and others such as processing option, tab and external call security. Row and column rules are often the ones that protect sensitive financial and payroll data, so give them equal attention. #### Reviewing for segregation of duties **Body:** Compare roles in pairs that should never be combined: entering a purchase order and receiving goods, entering a voucher and releasing payment, creating a vendor and changing bank details. For each user, check the set of roles assigned, not just a single role. Also look for broad records such as access to all applications, and for old users who changed jobs but kept earlier roles. #### Common mistakes **Body:** The most common error is granting access by user instead of role, which makes reviews impossible. Another is turning security on in one environment and leaving another open. Remember that direct database access bypasses JDE security entirely, so control database accounts as well, and include orchestration and service accounts in the review. **Cta:** If you need to answer who can post journals or change vendor bank details from your live security tables, Netray can help build a read-only review assistant over your JDE data. **Faq:** #### Which application opens Security Workbench? **Answer:** Security Workbench is application P00950, reachable from the system administration menus. The records are stored in the security table F00950. Access to this program should itself be tightly restricted. #### What does row security do? **Answer:** Row security limits which records a user can see or change in a table, for example only certain business units or companies. It applies in applications that use the secured table and does not protect direct SQL access. #### Should security be set by user or by role? **Answer:** By role wherever possible. Roles make reviews, onboarding and offboarding simpler and let you reason about segregation of duties. Reserve user level records for rare exceptions and document them. #### Does this worksheet change security in JDE? **Answer:** No. It only documents the design in your browser and exports a file. All changes must be made in Security Workbench in your own environment with proper change control. ## Search terms jde security workbench, jd edwards security design, jde p00950, jde role security matrix, jde application security worksheet, jde segregation of duties, jde row security, jd edwards security audit excel --- Talk to an engineer: https://netray.co/contact?intent=erp_ai | Machine catalog: https://netray.co/agent/catalog.json