How-toOracle E-Business Suite R12Organization Structure / Security / Data Masking

Organization Structure in Oracle EBS: Ledger, Legal Entity, Operating Unit, Inventory Org

Question
organization structure in oracle ebs

Also searched as

  • oracle ebs ledger legal entity operating unit inventory organization
  • oracle ebs security issue
  • oracle ebs data masking
  • oracle ebs multi org access control

Short answer

Oracle EBS R12 organizes the enterprise as ledgers (accounting), legal entities (legal and tax), operating units (transactions for AP, AR, PO and OM) and inventory organizations (stock and manufacturing), usually under a business group for HR. Operating units are assigned to a ledger and a legal entity, and access is controlled through the MO security profile. Mask personal and financial data before copying production into test.

Applies to: Oracle E-Business Suite R12.1 and R12.2. Names are the same in both; some setup screens differ slightly.

How to review and set up the structure

  1. 1Draw the hierarchy first: ledger, legal entities, operating units, and inventory organizations, with the business group on top for HR.
  2. 2In Accounting Setup Manager, define the ledger, its chart of accounts, calendar and currency, then assign the legal entities and operating units to it.
  3. 3Define legal entities in the Legal Entity Configurator and register their legal address and tax details.
  4. 4Create operating units and link each to a ledger and a default legal entity; set up the HR organization classifications if required.
  5. 5Create inventory organizations under the operating unit with an organization code, and set their parameters (costing, calendar, locators, lot and serial control).
  6. 6Set MO: Operating Unit, MO: Security Profile and MO: Default Operating Unit at responsibility level so users see only the units they need.
  7. 7Verify the setup with SQL on the organization views and with a test user in each responsibility.

What each level is for

The ledger is the accounting book: chart of accounts, calendar, currency and accounting method. The legal entity is the company that owns assets and files returns. The operating unit is the level at which payables, receivables, purchasing and order management transactions exist; most transaction tables carry an ORG_ID. The inventory organization is where stock, items and manufacturing live, and it belongs to an operating unit.

Get the number of operating units right. Too many make reporting and approvals painful; too few make it hard to separate companies, currencies or tax regimes. A legal or tax boundary usually justifies a new operating unit, a location difference alone usually does not.

Checking the structure with SQL

The views below show the common relationships. HR_OPERATING_UNITS lists operating units with their ledger and default legal context, and ORG_ORGANIZATION_DEFINITIONS lists inventory organizations with their operating unit. Check column names in your release before relying on them.

Run these as a read-only user in a non-production instance first.

SELECT organization_id, name, set_of_books_id, default_legal_context_id
FROM   hr_operating_units
ORDER  BY name;
SELECT organization_id, organization_code, organization_name,
       operating_unit, set_of_books_id, legal_entity
FROM   org_organization_definitions
ORDER  BY organization_code;

Security issues to check

Most EBS security issues come from over-wide responsibilities, shared accounts, the APPS password known too widely, and operating unit access that exceeds a user's job. Review who holds system administrator, application developer and functional administrator responsibilities, and remove inactive users.

Use MO security profiles to limit a responsibility to specific operating units. Review function and menu exclusions so users cannot reach screens they should not. Keep up with Oracle's critical patch updates and the Secure Configuration guidance on My Oracle Support for your release.

Data masking for non-production

Copying production into test brings real employee, supplier, bank and customer data into less protected environments. Mask it after each clone: national identifiers on person records, bank account numbers on external bank account tables, contact emails and phones, and free-text notes.

Oracle offers a data masking pack for EBS through Enterprise Manager; many sites instead run scripted updates after clone, plus disabling outbound email and integrations so that test systems never contact real people. Whatever you choose, test that the masked data still supports your test scenarios, and keep the script under version control.

Try it here, free

Oracle EBS Inventory Organization Parameters Setup Template

Open full tool

Fill-in setup document for a new inventory organization with the decisions a business owner must sign off before configuration.

Common pitfalls

  • !Creating operating units for convenience instead of a legal, currency or tax boundary.
  • !Leaving MO profile options unset so users see all operating units or none.
  • !Cloning production to test without masking and without turning off outbound email.
  • !Sharing the APPS password across teams and tools.
  • !Changing the ledger or legal entity assignment after transactions exist.

How an ERP-grounded AI assistant handles this

Understanding which operating unit a transaction belongs to, and whether a user can see it, is a common support question. An assistant grounded in your EBS metadata can explain the structure, list users with access to each operating unit, and show the SQL it used, read-only. Netray runs it on-prem beside EBS, so security and organization data do not leave your network.

Frequently asked questions

What is the difference between a legal entity and an operating unit?

A legal entity is the company that is legally accountable and files returns. An operating unit is the level at which sub-ledger transactions are processed. One legal entity can have several operating units, and each operating unit is tied to a ledger and a default legal entity.

Where do inventory organizations fit?

Inventory organizations sit under an operating unit and represent a warehouse, plant or similar site. They hold items, stock and manufacturing data, and carry their own parameters such as costing and calendar.

How do I limit users to specific operating units?

Use MO: Security Profile with a security profile defined for the operating units the responsibility may access, and set a default operating unit with MO: Default Operating Unit. Test with a real user in that responsibility.

How should I mask EBS data in test?

After each clone, run a controlled masking script or use Oracle's data masking tooling to replace national identifiers, bank details, emails and phone numbers, and disable outbound email and integrations. Keep the script versioned and verify with sample queries.

Related

How-to

SQL to Find Responsibilities Assigned to a User in Oracle EBS

Join FND_USER to FND_USER_RESP_GROUPS on USER_ID, then to FND_RESPONSIBILITY_TL on RESPONSIBILITY_ID and APPLICATION_ID to get the responsibility name, filtering the END_DATE columns to show only currently active assignments. This is the standard query DBAs and support teams use instead of clicking through System Administrator > Security > User > Define for every user.

How-to

How to change the APPS password in Oracle EBS with FNDCPASS

Use FNDCPASS with the APPLSYS mode to change the APPLSYS and APPS passwords together, ORACLE mode for a product schema such as GL, and USER mode for a front-end user such as SYSADMIN. In R12.2 the APPS change must also be applied to the WebLogic data sources, or the application tier cannot connect.

How-to

Data Conversion in Oracle EBS: Interface Tables, Open Interfaces and Reconciliation

Data conversion in Oracle EBS means moving legacy data into EBS through supported paths only: open interface tables with their import concurrent programs, or public PL/SQL APIs. Never insert into base tables directly. The standard pattern is extract, stage, validate, load into the interface, run the import, fix rejects, and reconcile against the source.

CIO briefing

Oracle EBS 12.2: stay on-prem or move to Fusion in 2026

Oracle has committed to Premier Support for E-Business Suite 12.2 into the early 2030s, which is longer than many CIOs assume, so there is no forced 2027 cliff for EBS specifically (that date is commonly confused with SAP ECC's 2027 deadline). The real decision drivers for EBS customers are: how much the org depends on customizations that do not translate to Fusion's SaaS model, whether continuous quarterly Fusion updates fit the org's change-management capacity, and whether Fusion's standardized processes are an acceptable tradeoff for the customizations currently in EBS.

Error fix

Fix FRM-40735: WHEN-VALIDATE-RECORD Trigger Raised Unhandled Exception ORA-06508

FRM-40735 with ORA-06508 almost always means a PL/SQL package used by the form was recompiled while your session still held the old cached state, or the trigger's own exception handling does not trap a real data error. Exit the form completely and re-enter it; if the error repeats for all users, recompile invalid objects on the database and check for a bad custom trigger.

Error fix

Oracle EBS Concurrent Manager Will Not Start: How to Fix It

A concurrent manager that will not start in Oracle EBS is almost always one of three things: the node registered in FND_NODES no longer matches the actual hostname (common after cloning), stale OS processes are blocking a fresh start, or the database and listener the manager connects to are unreachable. Check the internal manager log, verify the node name, clear stale processes, and restart with adcmctl.sh.

AI for ERP

AI for Oracle E-Business Suite, Without Leaving On-Prem

Hosting Oracle EBS 12.2 on-prem or in a private cloud? Add a private LLM over concurrent programs, interface tables and AP/PO data without moving to Fusion.

Stuck on Oracle E-Business Suite R12?

Talk to engineers who work inside Oracle E-Business Suite R12 every week, and who build private AI that answers these questions from your own ERP data.

Keep exploring

Free tools

ERP fixes and how-tos

Runs with your ERP

AI on your ERP

Integrations

Software