# Integrating SailPoint with Oracle Fusion HCM Accounts

The Oracle Fusion HCM Accounts aggregates Oracle Fusion HCM account records from an Oracle Fusion HCM cloud system and performs provisioning operations, including creating and updating accounts, changing passwords, adding or removing roles, and enabling or disabling accounts.

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The Oracle Fusion HCM Accounts connector supports the following features:

### Account Management

- Manage Oracle Fusion HCM accounts as Accounts
- Aggregation

### Entitlement Management

- Manage Oracle Fusion HCM data role, abstract role, and job role as Entitlements
- Aggregate Roles

### Provisioning

- Create Account
- Update Account
- Enable, Disable
- Change Password
- Add or Remove Roles
- Delete Account

### Update Account Operation

The update account operation is supported for the following attributes:

- `userName`
- `active`
- `name.familyName`
- `name.givenName`
- `emails`

## Prerequisites

- An Oracle Fusion HCM administrator account and password for connecting to the given URL of the Oracle Fusion HCM tenant.

## Required Permissions

To perform all operations, complete the following and assign the required permissions:

1. Create a single Job Role with a unique name.
2. Add the following Functional Security Policy to the Job Role you created:

   - Reset Password
   - Use REST Service - Identity Integration
   - Use REST Service - User Accounts
   - Use REST Service - users and Roles Lists of Values
   - Link User Account
3. Assign the Job Role to a Service Account.