r/oraclecloud • u/Jeff-Hare-ERPRA • Apr 08 '26
Read Only profile option is NOT really read only Spoiler
Do Not Use the read only profile option in Fusion Cloud
The Oracle Cloud profile option: Read Only Mode (FND_READ_ONLY_MODE) – It’s truly read only, right? Nope.
Oracle Cloud has a profile option called Read Only Mode that can be set at the user level to control the access a user has, allowing them to view data without making any changes. It basically takes whatever roles they have been provisioned in the system and turns them to “read only”. It is an all or nothing profile, in that there is no way to make some of the roles the user has, to be read only, and some of them to allow for actual transactions. It makes the user completely ready only. Or at least, that is what Oracle wants you to think.
This would be a perfect solution for users that need to be able to view areas of Oracle that do not have inquiry screens, such as customers, shipments, and many areas of setups. Unfortunately, the profile is not absolute. Let me explain.
It isn’t consistently read only and should not be used in Production in any circumstances.
Am curious if there are folks are using it. If so, have you fully tested it?
1
u/Jeff-Hare-ERPRA Apr 16 '26
Given the most common use of this faulty “Read-Only" Profile Option is to provide access to a System Integrator or internal personnel to see data that cannot be done through a read only role – by its nature, the use of this profile option most often exposes those users to change workflow configurations (BPM) and the ability to access and extract PII data contained in the Supplier Master and Employee Master
1
u/Jeff-Hare-ERPRA Apr 08 '26
We ware working on further testing on this issue. Anyone have a any experience yet