A PL/SQL script that programmatically copies a user's roles to another user (via Fnd_User_Role_API.Set_Role in a loop, followed by Fnd_User_Role_API.Refresh__ and Security_SYS.Refresh_Active_List__) shows the roles correctly assigned in the application afterward, but the target user still doesn't have full access once they actually log in.

All FAQ questions / Security and access

Answer

Confirm the exact sequence of calls per role: Fnd_User_Role_API.Set_Role(user, role, TRUE) to grant it, Fnd_User_Role_API.Refresh__(user) to refresh that user's role cache, and Security_SYS.Refresh_Active_List__(1) to refresh the active session/security list — all three, run together, is the working pattern for programmatically granting a role and having it actually take effect for the user's next login, rather than assuming the grant alone (without both refresh calls) is sufficient.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions