Leila Fielding

Back to HCM AI Agents
Back to HCM AI AgentsBack

Share

ORACLE HCM · AI AGENT PROFILE

HCM Data Security Assistant

Helps IT security managers understand your HCM data security setup and fix users' access problems. It shows which roles and privileges give someone HCM access, compares security profiles between users or roles, previews a user's access, checks whether they can perform a quick action on another worker, and can regenerate a user's access control list. You can add your own security guidelines as documents.
HCM CommonAI agentGood first agent: MaybeTake careChanges dataRelease 26C

Where it helps

A manager can't see one of their team. The security manager asks the assistant how the manager gets access to that worker, spots the missing security profile, and fixes it in the Security Console.

My take

MY PRACTITIONER VIEW

A real time-saver for one of the most frustrating support tickets. It's also close to the keys, so keep it to your security team and check every fix it suggests.

Things you can ask

Give an overview of my security configuration.
Show security profiles assigned to user, TM-KLAW.
Verify if a user can perform certain quick actions on another user.
Differences between roles or security profile configurations for multiple users or roles.
Regenerate or review a user's access control list (ACL).

Examples based on Oracle's notes. What works depends on your setup.

What it won't do

  • It covers person-related objects only, not organisations or positions.
  • You need the user name, not the display name, and the user must have signed in recently.
  • Role names must match exactly.
  • Oracle's note doesn't say whether it can assign or change roles or security profiles.

Good first agent?

Maybe. Most of what it does is read-only, but it's for your security team only.

Risk level: Take care. It helps resolve who can see what, so a wrong fix can open up personal data.

Before you switch it on

  1. Who in your security team will use it?
  2. Do you have security guidelines to give it?

Next steps

Setup at a glance

Open Setup at a glance for the setup steps. Select the agent's type label to see what that type means.

Test it after each update

For Oracle Fusion Applications, non-production (test) quarterly updates follow the weekend after the first Friday of the update month; production follows the weekend after the third Friday. Run these checks after the test update and before production, and verify your tenant's exact dates in Oracle update notifications.

  • Ask for a known user's roles and security profiles and check them in the Security Console.
  • Ask whether a test manager can act on a worker outside their team and check the answer.

Watch out

Oracle's note doesn't describe an approval step before it regenerates an access control list.

How it's changed

26C arrived.

  1. 26C
    Resolve HCM Data Security Access using AI AssistanceOracle's note ↗

Related agents

Data loader advisors

Two advisors for bulk data loading. The Data Loader Advisor (26A) sits on the Import and Load Data page and answers questions about HCM Data Loader from Oracle's documentation and DAT file examples, and about your data sets, errors and metrics. From 26D it can also start HCM Data Loader processing from a plain-language request. The Spreadsheet Data Loader Advisor (26C) uploads CSV files and starts HCM Spreadsheet Data Loader, and from 26D answers questions about your data sets, errors and failed rows.

HCM Professional Concierge

One place for HR professionals to ask workforce questions and start actions. It passes each request to the right specialist agent behind it: team data, leave and absence, workforce structures, personal information, employment, compensation, reports, talent and HR policies. From 26D, a workflow-agent version (HCM Professional Concierge V2) also helps HR teams spot data-quality gaps and exceptions and open the related page, quick action or report. It's separate from the HCM Professional Concierge Workspace, an agentic application.

Last reviewed November 2026

This is an independent practitioner view, not Oracle documentation. Features, names and availability change each release and depend on your licences and setup; some agentic applications carry extra costs. Always check Oracle's own notes and your environment.