# Oracle EBS Profile Options Reference

> Source: https://netray.co/tools/oracle-ebs-profile-options-reference
> Publisher: Netray (netray.co), AI and integration engineering for ERP and manufacturing systems.
> Section: Free Tools

## Short answer

A searchable lookup of the profile options EBS administrators change most: sign-on security, concurrent processing, multi-org, logging and session settings.

## Category

oracle

## Erp

Oracle E-Business Suite

## Audience

- Oracle EBS DBA
- Oracle apps administrator
- Finance systems analyst

## Tool

**Kind:** worksheet

**Mode:** reference

**Columns:**

#### Profile option (user name)

**Key:** name

**Type:** text

#### Internal name

**Key:** internal

**Type:** text

#### Area

**Key:** area

**Type:** text

#### What it controls

**Key:** controls

**Type:** text

**Rows:**

#### Sign-On:Audit Level

**Internal:** SIGNONAUDIT:LEVEL

**Area:** Security

**Controls:** How much sign-on activity is recorded: None, User, Responsibility or Form. Drives the Monitor Users and Sign-On Audit reports.

#### Signon Password Length

**Internal:** SIGNON_PASSWORD_LENGTH

**Area:** Security

**Controls:** Minimum number of characters for an EBS user password.

#### Signon Password Hard to Guess

**Internal:** SIGNON_PASSWORD_HARD_TO_GUESS

**Area:** Security

**Controls:** When Yes, enforces rules such as a letter and a number and no repeating characters.

#### Signon Password Failure Limit

**Internal:** SIGNON_PASSWORD_FAILURE_LIMIT

**Area:** Security

**Controls:** Number of failed logins before the account is locked.

#### Signon Password No Reuse

**Internal:** SIGNON_PASSWORD_NO_REUSE

**Area:** Security

**Controls:** Days before a previously used password can be reused.

#### Signon Password Case

**Internal:** SIGNON_PASSWORD_CASE

**Area:** Security

**Controls:** Whether passwords are case sensitive or insensitive.

#### ICX: Session Timeout

**Internal:** ICX_SESSION_TIMEOUT

**Area:** Session

**Controls:** Idle minutes before a Forms session is ended.

#### ICX: Limit time

**Internal:** ICX_LIMIT_TIME

**Area:** Session

**Controls:** Maximum hours a self-service session can stay active.

#### ICX: Limit connect

**Internal:** ICX_LIMIT_CONNECT

**Area:** Session

**Controls:** Maximum number of function accesses allowed per session.

#### ICX: Date format mask

**Internal:** ICX_DATE_FORMAT_MASK

**Area:** Session

**Controls:** Date display and entry format for the user.

#### ICX: Language

**Internal:** ICX_LANGUAGE

**Area:** Session

**Controls:** Session language for the user.

#### ICX: Numeric characters

**Internal:** ICX_NUMERIC_CHARACTERS

**Area:** Session

**Controls:** Decimal and group separators used for numbers.

#### MO: Operating Unit

**Internal:** ORG_ID

**Area:** Multi-Org

**Controls:** The operating unit a responsibility works in (single-OU access model).

#### MO: Default Operating Unit

**Internal:** DEFAULT_ORG_ID

**Area:** Multi-Org

**Controls:** The default operating unit when a user has access to several through a security profile.

#### MO: Security Profile

**Internal:** XLA_MO_SECURITY_PROFILE_LEVEL

**Area:** Multi-Org

**Controls:** The HR security profile that lists the operating units a responsibility can access.

#### GL: Data Access Set

**Internal:** GL_ACCESS_SET_ID

**Area:** General Ledger

**Controls:** Which ledgers and balancing segment values the responsibility can read or write.

#### HR: Security Profile

**Internal:** PER_SECURITY_PROFILE_ID

**Area:** HRMS

**Controls:** Which people, positions and organizations a responsibility can see.

#### HR: Business Group

**Internal:** PER_BUSINESS_GROUP_ID

**Area:** HRMS

**Controls:** The business group in force for the responsibility.

#### Concurrent: Active Request Limit

**Internal:** CONC_REQUEST_LIMIT

**Area:** Concurrent

**Controls:** Maximum number of requests a user may have running or pending at once.

#### Concurrent: Report Access Level

**Internal:** CONC_REPORT_ACCESS_LEVEL

**Area:** Concurrent

**Controls:** Whether users see only their own requests (User) or all requests for the responsibility.

#### Concurrent: Hold Requests

**Internal:** CONC_HOLD

**Area:** Concurrent

**Controls:** When Yes, new requests are submitted on hold.

#### Concurrent: Request Priority

**Internal:** CONC_PRIORITY

**Area:** Concurrent

**Controls:** Default priority for requests submitted by the user.

#### Concurrent: GSM Enabled

**Internal:** CONC_GSM_ENABLED

**Area:** Concurrent

**Controls:** Whether Generic Service Management is used to run services such as Service Manager.

#### FND: Debug Log Enabled

**Internal:** AFLOG_ENABLED

**Area:** Logging

**Controls:** Turns on the FND Logging framework for the level at which it is set.

#### FND: Debug Log Level

**Internal:** AFLOG_LEVEL

**Area:** Logging

**Controls:** Minimum severity logged: Statement, Procedure, Event, Exception, Error or Unexpected.

#### FND: Debug Log Module

**Internal:** AFLOG_MODULE

**Area:** Logging

**Controls:** Module name filter for log messages. A percent sign logs every module.

#### FND: Debug Log Filename

**Internal:** AFLOG_FILENAME

**Area:** Logging

**Controls:** Write log messages to a file instead of the FND_LOG_MESSAGES table.

#### Utilities:Diagnostics

**Internal:** DIAGNOSTICS

**Area:** Diagnostics

**Controls:** Allows a user to open Diagnostics menu entries such as Examine and trace.

#### Hide Diagnostics menu entry

**Internal:** FND_HIDE_DIAGNOSTICS

**Area:** Diagnostics

**Controls:** Hides the Diagnostics link on the self-service home page.

#### Flexfields:Validate on Server

**Internal:** FLEXFIELDS:VALIDATE_ON_SERVER

**Area:** Flexfields

**Controls:** Re-validates flexfield combinations on the server at save time.

#### Applications Web Agent

**Internal:** APPS_WEB_AGENT

**Area:** Web

**Controls:** Base URL of the Apache Web Listener for the instance.

#### Apps Servlet Agent

**Internal:** APPS_SERVLET_AGENT

**Area:** Web

**Controls:** Base URL used for servlet calls.

#### Site Name

**Internal:** SITENAME

**Area:** Site

**Controls:** Display name of the instance, often changed after a clone so users can tell TEST from PROD.

#### Default Country

**Internal:** DEFAULT_COUNTRY

**Area:** Site

**Controls:** Country used as the default on address and tax setups.

#### Printer

**Internal:** PRINTER

**Area:** Output

**Controls:** Default printer for the user's concurrent request output.

**Notes:** Names and internal names are as seen in Oracle E-Business Suite 12.x. Valid levels (Site, Application, Responsibility, User, Server, Org) differ per option and your release or patch level may add or retire options. Confirm in the System Profile Values form before changing production.

## Content

**Intro:** EBS profile options decide security rules, session behaviour, logging and which operating unit a user works in. This reference lists the options administrators search for most, with the internal name you use in SQL.

**Sections:**

#### How to use the table

**Body:** Type part of a user name or internal name into the search box, for example 'password' or 'AFLOG'. The internal name is what you use in FND_PROFILE.VALUE calls and in the FND_PROFILE_OPTIONS table. Then open the System Profile Values form (Profile, System in the System Administrator responsibility) and query by user name to see the value at each level. Export the filtered rows to Excel to build a controlled list for your hardening or audit sign-off.

**Bullets:**

- Search by user name or internal name
- Group by area to review one theme at a time
- Export filtered rows to Excel for audit evidence

#### Profile levels and precedence

**Body:** A profile option can be set at Site, Application, Responsibility, User and, for some options, Server or Organization level. When EBS evaluates an option it takes the most specific level that has a value, in the order User, Responsibility, Application, Site for normal options. That is why a setting at Site that seems to be ignored is usually overridden by a Responsibility or User value. Query the option and look at every level before assuming the Site value is active.

#### Worked example: tightening sign-on security

**Body:** A common audit finding is weak password rules. Review SIGNON_PASSWORD_LENGTH, SIGNON_PASSWORD_HARD_TO_GUESS, SIGNON_PASSWORD_FAILURE_LIMIT and SIGNON_PASSWORD_NO_REUSE at Site level, then set SIGNONAUDIT:LEVEL to a level that records enough to answer 'who logged in and when'. Test the changes in a cloned test instance first, because a strict failure limit can lock out service accounts used by integrations.

#### Common mistakes

**Body:** Changing an option at Site level without checking responsibility overrides, leaving AFLOG_ENABLED on in production after a debugging session, and forgetting to update SITENAME after a clone are the three problems seen most. Debug logging in particular can grow FND_LOG_MESSAGES quickly and slow the instance.

**Bullets:**

- Check every level, not just Site
- Turn debug logging off when finished
- Update SITENAME and web agent URLs after a clone
- Record the old value before any change

**Cta:** If you want users to ask questions about their EBS setup in plain language instead of hunting through forms, Netray can build a read-only assistant over your instance data.

**Faq:**

#### Where do I change a profile option in Oracle EBS?

**Answer:** Use the System Administrator responsibility and open Profile, System. Query by the user profile name, then enter a value at the level you need. End users can change a few personal options through Preferences or the Profile, Personal form where the option allows user level updates.

#### How do I find a profile option value with SQL?

**Answer:** Join FND_PROFILE_OPTIONS to FND_PROFILE_OPTION_VALUES on application_id and profile_option_id, filtering on the internal name. In PL/SQL, FND_PROFILE.VALUE with the internal name returns the value for the current context after the apps session is initialized.

#### Why does my Site level profile value not apply?

**Answer:** A more specific level, usually Responsibility or User, probably holds a different value and overrides Site. Query the profile in the System Profile Values form with no level restriction and check every level that has a value.

#### Is this list complete?

**Answer:** No. EBS has thousands of profile options across modules. This list covers the ones administrators and auditors ask about most. Always confirm names and valid levels against your own release in the Profile forms.

## Search terms

oracle ebs profile options list, oracle apps profile options, SIGNONAUDIT:LEVEL profile option, MO: Operating Unit profile option, oracle ebs system profile values, AFLOG_ENABLED profile, ICX session timeout oracle ebs, oracle ebs profile option internal name

---
Talk to an engineer: https://netray.co/contact?intent=erp_ai | Machine catalog: https://netray.co/agent/catalog.json