To grant a user access to run a specific shipped payroll process or report, which action is essential?

• A. Give the user the functional privilege to run the specific process or report through a job or abstract role
• B. Enable the process or report on the Manage Payroll Flow Pattern page
• C. Define a payroll flow security profile that includes the flow for the specific process or report, and then assign it to the data role attached to the user
• D. Regenerate the data role attached to the user

Answer: (C)

In Oracle Payroll Cloud, who can run a specific shipped payroll process or report is controlled by payroll flow security profiles that define the allowed flows, and these profiles are attached to the user’s data role. The essential step is to define a payroll flow security profile that includes the particular flow you want to grant access to, and then assign that profile to the data role associated with the user. This ties the user’s permissions to both the exact flow they can run and the data context they can access. Merely enabling the flow on the Manage Payroll Flow Pattern page doesn’t grant user-level execution rights. Regenerating the data role won’t introduce access to a specific flow unless the corresponding flow security profile is defined and attached to that role.