A user needs read-only access to the database (for example, through ODBC from Excel) but should have no access to the IFS application front end at all — is there a predefined user type for this, or a way to build one?

All FAQ questions / Security and access

Answer

Create a dedicated Permission Set with read-only grants to the specific database objects needed, set up on the permission set's Database tab, plus a grant to the FND_RUNTIME role for basic database connectivity — and make sure Company/Site (and any other row-level-security context the queried objects depend on) is properly set up for the user, so the read-only queries actually return data. To fully prevent that user from logging into the front-end application while still allowing the backend ODBC database connection, set the user's Directory ID to null or an arbitrary/unused value in the user creation screen — this blocks application login specifically without affecting their direct database access.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions