OracleFree referencePDF, Excel, Word exportOracle E-Business Suite

Oracle EBS Profile Options Reference

EBS profile options decide security rules, session behaviour, logging and which operating unit a user works in. This reference lists the options administrators search for most, with the internal name you use in SQL.

Download:

Profile option (user name)	Internal name	Area	What it controls
Sign-On:Audit Level	SIGNONAUDIT:LEVEL	Security	How much sign-on activity is recorded: None, User, Responsibility or Form. Drives the Monitor Users and Sign-On Audit reports.
Signon Password Length	SIGNON_PASSWORD_LENGTH	Security	Minimum number of characters for an EBS user password.
Signon Password Hard to Guess	SIGNON_PASSWORD_HARD_TO_GUESS	Security	When Yes, enforces rules such as a letter and a number and no repeating characters.
Signon Password Failure Limit	SIGNON_PASSWORD_FAILURE_LIMIT	Security	Number of failed logins before the account is locked.
Signon Password No Reuse	SIGNON_PASSWORD_NO_REUSE	Security	Days before a previously used password can be reused.
Signon Password Case	SIGNON_PASSWORD_CASE	Security	Whether passwords are case sensitive or insensitive.
ICX: Session Timeout	ICX_SESSION_TIMEOUT	Session	Idle minutes before a Forms session is ended.
ICX: Limit time	ICX_LIMIT_TIME	Session	Maximum hours a self-service session can stay active.
ICX: Limit connect	ICX_LIMIT_CONNECT	Session	Maximum number of function accesses allowed per session.
ICX: Date format mask	ICX_DATE_FORMAT_MASK	Session	Date display and entry format for the user.
ICX: Language	ICX_LANGUAGE	Session	Session language for the user.
ICX: Numeric characters	ICX_NUMERIC_CHARACTERS	Session	Decimal and group separators used for numbers.
MO: Operating Unit	ORG_ID	Multi-Org	The operating unit a responsibility works in (single-OU access model).
MO: Default Operating Unit	DEFAULT_ORG_ID	Multi-Org	The default operating unit when a user has access to several through a security profile.
MO: Security Profile	XLA_MO_SECURITY_PROFILE_LEVEL	Multi-Org	The HR security profile that lists the operating units a responsibility can access.
GL: Data Access Set	GL_ACCESS_SET_ID	General Ledger	Which ledgers and balancing segment values the responsibility can read or write.
HR: Security Profile	PER_SECURITY_PROFILE_ID	HRMS	Which people, positions and organizations a responsibility can see.
HR: Business Group	PER_BUSINESS_GROUP_ID	HRMS	The business group in force for the responsibility.
Concurrent: Active Request Limit	CONC_REQUEST_LIMIT	Concurrent	Maximum number of requests a user may have running or pending at once.
Concurrent: Report Access Level	CONC_REPORT_ACCESS_LEVEL	Concurrent	Whether users see only their own requests (User) or all requests for the responsibility.
Concurrent: Hold Requests	CONC_HOLD	Concurrent	When Yes, new requests are submitted on hold.
Concurrent: Request Priority	CONC_PRIORITY	Concurrent	Default priority for requests submitted by the user.
Concurrent: GSM Enabled	CONC_GSM_ENABLED	Concurrent	Whether Generic Service Management is used to run services such as Service Manager.
FND: Debug Log Enabled	AFLOG_ENABLED	Logging	Turns on the FND Logging framework for the level at which it is set.
FND: Debug Log Level	AFLOG_LEVEL	Logging	Minimum severity logged: Statement, Procedure, Event, Exception, Error or Unexpected.
FND: Debug Log Module	AFLOG_MODULE	Logging	Module name filter for log messages. A percent sign logs every module.
FND: Debug Log Filename	AFLOG_FILENAME	Logging	Write log messages to a file instead of the FND_LOG_MESSAGES table.
Utilities:Diagnostics	DIAGNOSTICS	Diagnostics	Allows a user to open Diagnostics menu entries such as Examine and trace.
Hide Diagnostics menu entry	FND_HIDE_DIAGNOSTICS	Diagnostics	Hides the Diagnostics link on the self-service home page.
Flexfields:Validate on Server	FLEXFIELDS:VALIDATE_ON_SERVER	Flexfields	Re-validates flexfield combinations on the server at save time.
Applications Web Agent	APPS_WEB_AGENT	Web	Base URL of the Apache Web Listener for the instance.
Apps Servlet Agent	APPS_SERVLET_AGENT	Web	Base URL used for servlet calls.
Site Name	SITENAME	Site	Display name of the instance, often changed after a clone so users can tell TEST from PROD.
Default Country	DEFAULT_COUNTRY	Site	Country used as the default on address and tax setups.
Printer	PRINTER	Output	Default printer for the user's concurrent request output.

Names and internal names are as seen in Oracle E-Business Suite 12.x. Valid levels (Site, Application, Responsibility, User, Server, Org) differ per option and your release or patch level may add or retire options. Confirm in the System Profile Values form before changing production.

EBS settings review by an expert

Send your exported profile values and get a short review of the security and performance settings worth changing.

Optional. The tool and every export work without this. No spam.

How to use the table

Type part of a user name or internal name into the search box, for example 'password' or 'AFLOG'. The internal name is what you use in FND_PROFILE.VALUE calls and in the FND_PROFILE_OPTIONS table. Then open the System Profile Values form (Profile, System in the System Administrator responsibility) and query by user name to see the value at each level. Export the filtered rows to Excel to build a controlled list for your hardening or audit sign-off.

Search by user name or internal name
Group by area to review one theme at a time
Export filtered rows to Excel for audit evidence

Profile levels and precedence

A profile option can be set at Site, Application, Responsibility, User and, for some options, Server or Organization level. When EBS evaluates an option it takes the most specific level that has a value, in the order User, Responsibility, Application, Site for normal options. That is why a setting at Site that seems to be ignored is usually overridden by a Responsibility or User value. Query the option and look at every level before assuming the Site value is active.

Worked example: tightening sign-on security

A common audit finding is weak password rules. Review SIGNON_PASSWORD_LENGTH, SIGNON_PASSWORD_HARD_TO_GUESS, SIGNON_PASSWORD_FAILURE_LIMIT and SIGNON_PASSWORD_NO_REUSE at Site level, then set SIGNONAUDIT:LEVEL to a level that records enough to answer 'who logged in and when'. Test the changes in a cloned test instance first, because a strict failure limit can lock out service accounts used by integrations.

Common mistakes

Changing an option at Site level without checking responsibility overrides, leaving AFLOG_ENABLED on in production after a debugging session, and forgetting to update SITENAME after a clone are the three problems seen most. Debug logging in particular can grow FND_LOG_MESSAGES quickly and slow the instance.

Check every level, not just Site
Turn debug logging off when finished
Update SITENAME and web agent URLs after a clone
Record the old value before any change

Frequently Asked Questions

Where do I change a profile option in Oracle EBS?

Use the System Administrator responsibility and open Profile, System. Query by the user profile name, then enter a value at the level you need. End users can change a few personal options through Preferences or the Profile, Personal form where the option allows user level updates.

How do I find a profile option value with SQL?

Join FND_PROFILE_OPTIONS to FND_PROFILE_OPTION_VALUES on application_id and profile_option_id, filtering on the internal name. In PL/SQL, FND_PROFILE.VALUE with the internal name returns the value for the current context after the apps session is initialized.

Why does my Site level profile value not apply?

A more specific level, usually Responsibility or User, probably holds a different value and overrides Site. Query the profile in the System Profile Values form with no level restriction and check every level that has a value.

Is this list complete?

No. EBS has thousands of profile options across modules. This list covers the ones administrators and auditors ask about most. Always confirm names and valid levels against your own release in the Profile forms.

If you want users to ask questions about their EBS setup in plain language instead of hunting through forms, Netray can build a read-only assistant over your instance data.

Talk to an Expert Explore More Free Tools

Related Tools

Oracle

More Oracle tools

See all

Back to All Tools