Oracle ERP Testing Tool > Test Library > Security
Syntra Standard Oracle Test Library

Oracle Fusion Access After Termination Test Cases

Validate that application login, employee and manager self-service, payroll, HR admin, procurement, financials, SCM, recruiting and sensitive-data access are correctly removed following worker termination, that delegated approvals and scheduled jobs are correctly handled, and that rehire restores only the access a new assignment requires — a comprehensive catalog of 20 individual Access After Termination test scenarios, the seventh family page of the Security cluster.

Test IDORCL.SEC.ACCESS.TERMINATION
ApplicationOracle Fusion Cloud
ProductSecurity
ModuleSecurity
ProcessAccess After Termination
Business FlowTerminate-to-Revoke
Scenario TypePositive / Negative / Security / Integration
Test UsageFunctional Testing / Regression Testing / UAT Sign-Off
PriorityHigh
AutomationSyntraFlow Ready
LibrarySyntra Standard

Note on test design: SyntraFlow executes the detailed Oracle Fusion termination processing, login verification, module-access verification and delegated-approval reassignment interactions automatically while presenting the scenario as business-readable test steps for documentation, review and reporting. This scenario is presented as 8 business-readable test steps; SyntraFlow's automation executes approximately 31 underlying Oracle Fusion UI actions to complete it.

Test Objective

This test validates that application login, self-service, manager, payroll, HR admin, procurement, financials, SCM, recruiting and sensitive-data access are correctly removed following worker termination, and that delegated approvals, scheduled jobs, active sessions and rehire access are correctly handled, using masked/synthetic test data and without assuming a universal termination workflow.

The scenario should confirm that:

  • application login is correctly blocked for a terminated ${WORKER}'s ${USER} account as of ${TERMINATION_DATE}, and not before an effective future-dated termination
  • employee self-service and manager self-service access are correctly removed for the terminated ${USER}, along with any role tied directly to the worker's employment
  • payroll, HR admin, procurement, financials, SCM, recruiting and sensitive-data access previously granted by ${ROLE} are correctly removed once employment ends
  • delegated approvals pending with the terminated ${USER} are correctly reassigned to ${DELEGATE_APPROVER}, and scheduled jobs owned by ${USER} are correctly reviewed, where the customer's workflow configuration requires it
  • an active session for a user terminated mid-session, and a future-dated termination, are correctly handled according to the customer's configured session and effective-dating rules
  • rehiring ${WORKER} via ${REHIRE_DATE} correctly restores only the access defined by the new assignment, without retaining unintended prior access
  • historical HR records for a terminated worker remain visible to an authorized HR user, while the terminated worker cannot access another worker's data
  • role-removal actions taken during termination are correctly captured as audit evidence
  • post-termination access-removal behavior reflects the customer's own configured security and termination workflow rather than a universal Oracle behavior

A negative or security Access After Termination scenario passes when Oracle correctly enforces the expected access-removal rule; this test does not attempt to certify a specific Oracle application defect. This page catalogs 20 individual Access After Termination scenarios as a single comprehensive reference rather than as separate indexable pages. All worker, user, role and date values referenced throughout are ${PLACEHOLDER} tokens or explicitly masked test data, never real access grants.

When to Use This Test

  • Functional testing of application login, self-service and module access removal during a new Oracle Fusion HCM and security implementation
  • Regression testing of post-termination access removal after an Oracle quarterly update affecting HCM or security
  • UAT sign-off for login removal, module access removal, delegated-approval handling and rehire regression across the Security scenario catalog
  • Security validation referenced by Access After Transfer, User Access and Sensitive Data Access within the same Security cluster
  • Comprehensive scenario coverage for teams standardizing on a single Access After Termination regression pack instead of dozens of near-duplicate scripts

Where This Test Fits in the Terminate-to-Revoke Process

Process Termination Event
Revoke Login & Module Access
Reassign Delegated Approvals
Rehire & Security Regression

Access After Termination is the seventh scenario family in the Security cluster. It exercises application login and self-service removal, module and functional-area access removal, delegated-approval and scheduled-job handling, active-session and future-dated termination behavior, and rehire access regression, and connects to Access After Transfer, User Access and Sensitive Data Access within the same cluster. Exact termination workflow steps, effective-dating rules and reassignment behavior depend entirely on customer-specific Oracle Fusion HCM and security configuration — no universal termination model is assumed.

Preconditions

  1. Oracle Fusion Security Console and HR administration access is available to a test user with role administration and worker-termination privileges.
  2. A representative ${WORKER} with an active ${USER} account and assigned ${ROLE} is available or can be constructed in the target Oracle Fusion environment.
  3. A ${TERMINATION_DATE} and, where applicable, a future-dated termination and a ${REHIRE_DATE} can be applied to the test worker record.
  4. A ${DELEGATE_APPROVER} is available to receive reassigned approvals where the customer's workflow configuration requires reassignment.
  5. Payroll, procurement, financials, SCM, HR admin, recruiting and sensitive-data modules relevant to the test worker's prior ${ROLE} are documented for the environment under test.
  6. A second worker record and an authorized HR user are available to test cross-worker access denial and historical-record visibility.

Exact termination workflow steps, effective-dating behavior, session-handling policy and rehire access rules vary by Oracle Fusion implementation and customer-specific configuration; no universal termination model is assumed. All worker, user, role and date values used in testing are masked/synthetic DataVault data.

Sample Test Data

Worker${WORKER}
User${USER}
Role${ROLE}
Termination Date${TERMINATION_DATE}
Rehire Date${REHIRE_DATE}
Delegate Approver${DELEGATE_APPROVER}
Manager Hierarchy${MANAGER_HIERARCHY}
Module${MODULE}

Sample values are illustrative ${PLACEHOLDER} tokens, not real worker, user or date data. Replace them with valid worker, user, role and date data from the target Oracle Fusion TEST or UAT environment; not every field applies to every scenario. All worker, user and access data are masked/synthetic — never real access grants.

Test Steps

8 business-readable steps. SyntraFlow's automation executes ~31 underlying UI actions to complete these steps — see How SyntraFlow Automates This Test.

#User ActionExpected Result
1
Sign In as Security Administrator
Sign in to Oracle Fusion Cloud with a user account that has Security Console and HR administration access.
The Oracle Fusion Cloud home page loads successfully for the authenticated security administrator.
2
Establish Baseline Access for Active Worker
Confirm ${WORKER}'s ${USER} account is active with ${ROLE} assigned, and that the assigned role grants the module, self-service and functional access expected prior to termination.
${WORKER} / ${USER} / ${ROLE}
The baseline active-worker access is confirmed and granted correctly prior to termination.
3
Process Worker Termination Event
Process a termination event for ${WORKER} effective ${TERMINATION_DATE}, including a future-dated termination scenario where applicable.
${WORKER} / ${TERMINATION_DATE}
The termination event is recorded successfully against the worker record.
4
Verify Application Login and Self-Service Access BlockedBusiness assertion
As ${USER}, attempt to sign in to Oracle Fusion Cloud and access employee self-service and manager self-service functions on or after ${TERMINATION_DATE}.
${USER} / ${TERMINATION_DATE}

Correctly blocking login and self-service access exactly as of the termination date is the core business assertion across this catalog.

Application login and self-service access are correctly blocked for the terminated worker as of the termination date, and remain available before a future-dated termination takes effect.
5
Verify Module and Functional Access RemovedBusiness assertion
Confirm that payroll, HR admin, procurement, financials, SCM, recruiting and sensitive-data access previously granted to ${USER} by ${ROLE} is removed.
${ROLE} / ${MODULE}

This is the main access-removal assertion tested across the catalog's module-specific scenarios.

Module and functional-area access tied to the terminated worker's employment is correctly removed.
6
Verify Delegated Approvals and Scheduled Jobs ReassignedBusiness assertion
Confirm that approvals pending with ${USER} are reassigned to ${DELEGATE_APPROVER} and that scheduled jobs owned by ${USER} are reviewed, where the customer's workflow configuration requires it.
${USER} / ${DELEGATE_APPROVER}
Delegated approvals and owned scheduled jobs are correctly reassigned or reviewed according to the customer's configured workflow.
7
Verify Active Session, Historical Records and Cross-Worker AccessBusiness assertion
Confirm the behavior of an active session for ${USER} terminated mid-session, that historical HR records for ${WORKER} remain visible to an authorized HR user, and that the terminated worker cannot access another worker's data.
${WORKER} / ${USER}
Active sessions are handled according to the customer's configured session policy, historical records remain available to authorized HR, and the terminated worker is correctly blocked from another worker's data.
8
Verify Rehire Restores Required Access OnlyBusiness assertion
Rehire ${WORKER} effective ${REHIRE_DATE} with a new ${ROLE} assignment and confirm the resulting access.
${WORKER} / ${REHIRE_DATE} / ${ROLE}

Access regression after rehire is the final business assertion validating full-cycle termination and rehire behavior in this catalog.

Rehire correctly restores only the access required by the new assignment, without retaining unintended prior access.

Expected Results

  • Application login and self-service access are correctly blocked for a terminated worker as of the termination date.
  • Payroll, HR admin, procurement, financials, SCM, recruiting and sensitive-data access tied to employment are correctly removed.
  • Delegated approvals and scheduled jobs owned by the terminated user are correctly reassigned or reviewed.
  • Active sessions and future-dated terminations are correctly handled according to configured policy.
  • Historical HR records remain visible to authorized HR, and a terminated worker cannot access another worker's data.
  • Rehire correctly restores only the access required by the new assignment, without unintended residual access.

Key Validation Checkpoints

  • Application login and self-service access correctly blocked as of the termination date.
  • Payroll, HR admin, procurement, financials, SCM, recruiting and sensitive-data access correctly removed.
  • Delegated approvals and scheduled jobs correctly reassigned or reviewed where configured.
  • Active-session and future-dated termination behavior correctly enforced.
  • Historical records remain visible to authorized HR; cross-worker access correctly blocked.
  • Rehire correctly restores only required access without residual prior access.
Core Business Scenario
Access After Termination
Scenario Catalog
20 Scenarios
Business Steps
8
Test Data
DataVault-Driven
Execution
On-Demand / Scheduled / Batch
Automation
SyntraFlow Ready
Jarvis AI

Go Beyond the Standard Test with Jarvis AI

The Syntra Standard Test Library defines the core Access After Termination scenario. Jarvis AI can extend this scenario by systematically generating additional Positive, Negative, Security and Integration variations using customer-specific worker, user, role and date data available through Syntra DataVault.

Teams do not need to manually construct dozens of near-identical post-termination scenarios to cover every module, persona and timing combination. Jarvis follows a consistent pipeline: it starts from a Standard Test such as Verify Application Login Blocked, combines it with DataVault dimensions — Worker + User + Role + Termination Date + Manager Hierarchy — and produces an Access Removed, Access Retained or Timing-Boundary outcome for the customer's own configuration, without creating additional indexable pages. This is a strong differentiator for SyntraFlow: post-termination coverage expands automatically as DataVault data grows, rather than requiring a new test to be written and published for every module and persona combination.

From Standard Test to Executed Regression Pack

01
Security
Oracle Fusion Security test area.
02
Security Module
Scenario cluster covering User Access, Role Assignment, Data Role Security, Privilege Validation, Segregation of Duties, Access After Transfer, Access After Termination and Sensitive Data Access.
03
Scenario Family — Access After Termination
Application login and self-service removal, module and functional-area access removal, delegated-approval handling, session behavior and rehire access regression.
04
Standard Test Scenarios
20 Syntra Standard Access After Termination scenarios covering login removal, module access removal, delegated approvals, session and timing behavior, and rehire regression.
05
DataVault Personas & Data
Terminated Worker / Unauthorized User Test Persona and supporting dimensions — User, Role, Data Role, Privilege, Business Unit, Legal Employer, Department, Manager Hierarchy, Security Scope, Sensitive Field.
06
Jarvis AI Variations
Positive, Negative, Security and Integration variations generated from the standard scenarios.
07
Regression Packs
Selected variations grouped into an executable Access After Termination regression suite.
08
Scheduled Execution
Execute on demand or schedule the regression pack for unattended batch execution.
09
Failure Intelligence
Execution evidence classified into DATA_ERROR, CONFIGURATION_ERROR, SECURITY_ERROR, EXPECTED_VALIDATION, INTEGRATION_ERROR, AUTOMATION_ERROR, ENVIRONMENT_ERROR or APPLICATION_ERROR rather than assumed as an Oracle defect.

Rather than maintaining a separate test for every possible worker, role, module and timing combination, SyntraFlow maintains one core Access After Termination scenario and allows Jarvis AI to generate Positive, Negative, Security and Integration variations using the customer's available worker, user and role test data.

AI-Generated Test Variations

The same Access After Termination business scenario can produce many test variations without creating separate public library pages. Below is a real slice of SyntraFlow's Build Scripts library, filtered to Security.

Positive Scenarios
  • Application login and self-service access correctly blocked after termination
  • Payroll, HR admin, procurement, financials, SCM, recruiting and sensitive-data access correctly removed
  • Delegated approvals and scheduled jobs correctly reassigned or reviewed
  • Future-dated termination correctly taking effect on the intended date
  • Rehire correctly restoring only the access defined by the new assignment
  • Historical HR records remaining correctly visible to authorized HR
Negative Scenarios
  • Terminated worker attempting application login
  • Terminated worker attempting self-service, manager, payroll, procurement or sensitive-data access
  • Terminated worker attempting to access another worker's record
  • Active session incorrectly persisting full access after termination (correctly prevented)
  • Rehired worker incorrectly retaining pre-termination access (correctly prevented)

These are representative examples only. Termination workflow steps, effective-dating rules, session-handling policy and rehire access behavior can depend on the customer's Oracle Fusion configuration and security setup — not every Oracle configuration behaves identically, and not every role or module shown here exists for every customer.

Generated Using Your DataVault Test Data

Generic test data rarely represents every worker, role, module and timing combination in a real Oracle Fusion termination workflow. Where connected, Jarvis can use approved test data available through Syntra DataVault — Worker, User, Role, Termination Date, Rehire Date, Delegate Approver, Manager Hierarchy and Module — to construct realistic Access After Termination variations relevant to the customer's actual implementation.

Standard Library Definition

Worker              ${WORKER}
User                ${USER}
Role                ${ROLE}
Termination Date    ${TERMINATION_DATE}
Rehire Date         ${REHIRE_DATE}
Delegate Approver   ${DELEGATE_APPROVER}
Manager Hierarchy   ${MANAGER_HIERARCHY}
Module              ${MODULE}

DataVault

Workers and Users
  Workers with active, terminated and rehired status, and users with and without residual role assignments
Termination Timing
  Same-day, future-dated and mid-session termination events used to test timing and session behavior
Module Access
  Payroll, HR admin, procurement, financials, SCM, recruiting and sensitive-data permission mappings before and after termination
Delegated Approvals
  Pending approvals and scheduled jobs owned by the terminated user, with and without a configured delegate
Rehire Events
  Rehire dates and new role assignments used to test access-regression on rehire
Security
  Terminated users attempting restricted access, and authorized HR users viewing historical records

Jarvis AI Generates

Scenario 01 — Positive/Security: Application Login Blocked After Termination
Scenario 02 — Negative/Security: Terminated Worker Attempts Payroll Access
Scenario 03 — Positive/Integration: Delegated Approvals Reassigned
Scenario 04 — Positive: Future-Dated Termination Takes Effect On Date
Scenario 05 — Positive/Security: Rehire Restores Only New Role Access
Scenario 06 — Negative/Security: Terminated Worker Attempts Cross-Worker Access
...

All worker, user, role and date data used in Access After Termination testing are masked/synthetic via DataVault — never real access grants. This follows the same masked-only standard used across Security testing, including Access After Transfer and Sensitive Data Access — see /datavault/data-masking/ for how DataVault protects worker, user and role data used to generate variations across the Access After Termination catalog.

Example Test Variations

A comprehensive catalog of 20 individual Access After Termination test scenarios spanning application login and self-service removal, module and functional-area access removal, delegated-approval handling, session and timing behavior, and rehire access regression. Filter or search below.

IDVariationTypeKey DifferenceExecution
SEC-TERM-001User Access After Worker TerminationPositive/SecurityTerminate ${WORKER} effective ${TERMINATION_DATE}; Oracle Fusion correctly removes the access previously granted to the worker's ${USER} account.SyntraFlow Ready
SEC-TERM-002Application Login Blocked Where ExpectedNegative/SecurityAs the terminated ${USER}, attempt to sign in to Oracle Fusion Cloud on or after ${TERMINATION_DATE}; Oracle Fusion correctly blocks the login attempt where the customer's configuration requires immediate login removal.SyntraFlow Ready
SEC-TERM-003Employee Self-Service Access RemovedPositive/SecurityAs the terminated ${USER}, attempt to access employee self-service functions; Oracle Fusion correctly removes self-service access following termination.SyntraFlow Ready
SEC-TERM-004Manager Access RemovedPositive/SecurityAs a terminated manager ${USER}, attempt to access manager self-service and direct-report data via ${MANAGER_HIERARCHY}; Oracle Fusion correctly removes manager access following termination.SyntraFlow Ready
SEC-TERM-005Payroll Access RemovedPositive/SecurityAs the terminated ${USER}, attempt to access payroll data or functions previously granted by ${ROLE}; Oracle Fusion correctly removes payroll access following termination.SyntraFlow Ready
SEC-TERM-006HR Admin Access Role Removed Where Tied to EmploymentPositive/SecurityAs the terminated ${USER} with an HR admin ${ROLE} tied to active employment, attempt HR administration functions; Oracle Fusion correctly removes the HR admin role where it is configured to depend on employment status.SyntraFlow Ready
SEC-TERM-007Procurement Access RemovedPositive/SecurityAs the terminated ${USER}, attempt to access procurement or purchasing functions previously granted by ${ROLE}; Oracle Fusion correctly removes procurement access following termination.SyntraFlow Ready
SEC-TERM-008Financials Access RemovedPositive/SecurityAs the terminated ${USER}, attempt to access financials data or functions previously granted by ${ROLE}; Oracle Fusion correctly removes financials access following termination.SyntraFlow Ready
SEC-TERM-009SCM Access RemovedPositive/SecurityAs the terminated ${USER}, attempt to access supply chain management data or functions previously granted by ${ROLE}; Oracle Fusion correctly removes SCM access following termination.SyntraFlow Ready
SEC-TERM-010Recruiting Access RemovedPositive/SecurityAs the terminated ${USER}, attempt to access recruiting or candidate data previously granted by ${ROLE}; Oracle Fusion correctly removes recruiting access following termination.SyntraFlow Ready
SEC-TERM-011Sensitive Data Access RemovedPositive/SecurityAs the terminated ${USER}, attempt to access sensitive data fields previously visible under ${ROLE}; Oracle Fusion correctly removes sensitive-data access following termination.SyntraFlow Ready
SEC-TERM-012Delegated Approvals Reassigned Where ConfiguredPositive/IntegrationTerminate ${USER} with approvals pending in their queue; Oracle Fusion correctly reassigns the pending approvals to ${DELEGATE_APPROVER} where the customer's workflow configuration requires reassignment.SyntraFlow Ready
SEC-TERM-013Scheduled Jobs Owned by User Reviewed Where RelevantPositive/IntegrationTerminate ${USER} who owns one or more scheduled jobs or processes; the scheduled jobs are correctly reviewed, reassigned or disabled according to the customer's configured job-ownership rules.SyntraFlow Ready
SEC-TERM-014Active Session Behavior After TerminationPositive/SecurityTerminate ${USER} while an active Oracle Fusion Cloud session is in progress; the active session is correctly handled according to the customer's configured session-termination policy.SyntraFlow Ready
SEC-TERM-015Future-Dated Termination Access TimingPositiveProcess a termination for ${WORKER} with a future ${TERMINATION_DATE}; ${USER}'s access correctly remains available until the termination date and is correctly removed exactly as of that date.SyntraFlow Ready
SEC-TERM-016Rehire Restores Required Access OnlyPositive/SecurityRehire ${WORKER} effective ${REHIRE_DATE} with a new ${ROLE}; Oracle Fusion correctly grants only the access defined by the new role, without restoring the worker's pre-termination access.SyntraFlow Ready
SEC-TERM-017Historical HR Records Remain Visible to Authorized HRPositiveAs an authorized HR ${USER}, view the historical HR record of a terminated ${WORKER}; Oracle Fusion correctly retains visibility of historical records for authorized HR users.SyntraFlow Ready
SEC-TERM-018Terminated Worker Cannot Access Another WorkerNegative/SecurityAs the terminated ${USER}, attempt to view or act on a different worker's record; Oracle Fusion correctly blocks the terminated worker from accessing another worker's data.SyntraFlow Ready
SEC-TERM-019Role-Removal Audit EvidencePositiveTerminate ${WORKER} and remove ${ROLE} from ${USER} as part of the termination workflow; Oracle Fusion correctly captures the role-removal action as audit evidence.SyntraFlow Ready
SEC-TERM-020Security Regression After TerminationPositive/Security/IntegrationTerminate a worker previously within another user's granted population or manager hierarchy; access to the terminated worker correctly re-scopes according to the customer's configured post-termination access rules.SyntraFlow Ready

Positive and Negative Security Testing

Positive Testing

Jarvis generates scenarios designed to confirm that Oracle Fusion correctly removes application login, self-service, module and functional-area access when a worker is terminated, and correctly restores only intended access on rehire.

Terminated Worker + Termination Date Reached + Configured Termination Workflow → Login and Module Access Correctly Removed

Negative Testing

Jarvis can also generate scenarios that deliberately attempt access a terminated worker should no longer have, to confirm Oracle correctly rejects or blocks the condition rather than silently allowing it.

  • Terminated Worker Login Attempt → Access Prevented
  • Terminated Worker Payroll Access Attempt → Access Prevented
  • Terminated Worker Procurement Access Attempt → Access Prevented
  • Terminated Worker Sensitive Data Access Attempt → Access Prevented
  • Terminated Worker Cross-Worker Access Attempt → Access Prevented
  • Rehired Worker Retaining Pre-Termination Access → Correctly Prevented

A negative security scenario passes when Oracle correctly denies unauthorized access, blocks an unauthorized action, or restricts visibility exactly as the customer's security configuration requires.

ScenarioOracle OutcomeTest Result
Terminated worker attempts login after termination dateAccess deniedPASS
Active worker signs in before termination dateAccess grantedPASS
Terminated worker attempts sensitive-data accessAccess deniedPASS
Authorized HR user views historical recordAccess grantedPASS
Unexpected application exceptionUnexpected failureFAIL

Turn AI-Generated Variations into a Regression Pack

Users can select generated Access After Termination scenarios and group them into reusable execution packs.

Access After Termination Regression Pack

  • User Access After Worker Termination
  • Application Login Blocked Where Expected
  • Employee Self-Service Access Removed
  • Manager Access Removed
  • Payroll Access Removed
  • Sensitive Data Access Removed
  • Delegated Approvals Reassigned Where Configured
  • Rehire Restores Required Access Only
  • Terminated Worker Cannot Access Another Worker
  • Security Regression After Termination
Add Selected to Regression Pack(coming soon)Run Now(coming soon)Schedule(coming soon)

Run On-Demand or Schedule Automated Batch Execution

SyntraFlow can execute selected Access After Termination scenarios individually or as a batch. Users can schedule regression packs according to their testing cycle.

Once scheduled, SyntraFlow executes the selected Access After Termination scenarios unattended and records the outcome of each test and business assertion.

Run immediatelyNightly regressionWeekly regressionBefore releaseAfter configuration changesAfter environment refreshQuarterly Oracle update testingPre-UAT validation
PackAccess After Termination Regression Pack
ScheduleWeekly Regression
Tests20 scenarios
ExecutionBatch Mode
Start9:00 PM
EnvironmentOracle Fusion TEST
StatusScheduled

Illustrative example — not a live schedule.

Review Results Across the Entire Test Pack

Users can drill from the regression pack into a scenario, its business steps, the underlying automation actions, and the evidence captured for each.

Illustrative example data — not actual production metrics.

20
Total Scenarios
18
Passed
1
Failed
1
Exceptions
13
Positive Tests
7
Negative Tests
150
Business Assertions

Regression Pack → Scenario → Business Step → Automation Action → Evidence

DataVault HCM Persona

Rather than generating variations from disconnected field values, Jarvis can draw on a DataVault persona built specifically for post-termination testing — a coherent worker whose employment has ended, so that Access After Termination scenarios exercise a realistic, internally consistent access-removal condition rather than an arbitrary or malformed input. A terminated worker is treated as analogous to the Unauthorized User persona once the termination date is reached.

Persona: Terminated Worker / Unauthorized User Test Persona
User${USER}
Role${ROLE}
Data Role${DATA_ROLE}
Privilege${PRIVILEGE}
BU${BUSINESS_UNIT}
Legal Employer${LEGAL_EMPLOYER}
Department${DEPARTMENT}
Worker Population${WORKFORCE_POPULATION}
Manager Hierarchy${MANAGER_HIERARCHY}
Security Scope${SECURITY_SCOPE}
Sensitive Field${SENSITIVE_FIELD}

DataVault personas keep worker, user, role and organization dimensions coherent, so Jarvis constructs realistic, internally consistent post-termination access-removal scenarios without relying on arbitrary or conflicting field combinations.

Post-Termination Access Variations

Oracle Fusion role and security configuration is customer-specific, so SyntraFlow can exercise post-termination access testing under different approved DataVault personas to confirm the customer's own termination workflow removes access as expected, rather than assuming a universal Oracle behavior.

PersonaActionExpectedSyntra Result
EmployeeAttempt Application Login After TerminationAccess preventedPASS
Line ManagerAttempt Manager Self-Service Access After TerminationAccess preventedPASS
Payroll SpecialistAttempt Payroll Access After TerminationAccess preventedPASS
Procurement BuyerAttempt Procurement Access After TerminationAccess preventedPASS
RecruiterAttempt Recruiting Access After TerminationAccess preventedPASS
HR SpecialistView Historical Record of Terminated WorkerAllowedPASS

Understand Why a Test Failed

SyntraFlow execution evidence can help distinguish business-data failures, configuration issues, automation problems and potential application defects.

DataConfigurationSecurityAutomationApplicationEnvironmentExpected Validation
Jarvis Failure Intelligence — Coming Soon

From Business Scenario to Execution Evidence

Business teams get readable test documentation; automation teams retain detailed execution traceability.

Standard Business Scenario
AI-Generated Variation
Regression Pack
Business Test Step
Automation Actions
Business Assertion
Screenshot / Evidence
Execution Result

Meet Jarvis — SyntraFlow's AI Testing Engine

Jarvis extends the Syntra Standard Test Library by analysing the Access After Termination scenario, available DataVault test data and expected business outcomes to systematically generate Positive, Negative, Security and Integration coverage for the customer's environment.

Generate
Positive, Negative, Security and Integration variations.
Parameterize
Use relevant worker, user and role data from DataVault.
Assemble
Build reusable regression packs.
Execute
Run scenarios autonomously.
Schedule
Execute unattended test batches.
Validate
Evaluate expected business outcomes.

How SyntraFlow Automates This Test

The Standard Test defines the scenario; DataVault, Jarvis AI and SyntraFlow's execution engine take it from a single reusable business definition to executed, evidenced regression coverage.

Standard Library — Access After Termination, 8 Business Steps
DataVault — Security Persona-Specific Test Data
Jarvis AI — Generate Positive/Negative/Security/Integration Variations
Regression Pack — Select Relevant Coverage
SyntraFlow Execution — Each Variation
Detailed UI Actions
Business Assertions
Evidence
PASS / FAIL

Business Step → Underlying UI Actions

Business Step
Process Worker Termination Event
May internally include
Navigate to Person Management → Search ${WORKER} → Actions → Terminate → Enter ${TERMINATION_DATE} → Submit
Business Step
Verify Application Login and Self-Service Access Blocked
May internally include
Sign In as ${USER} → Capture Sign-In Response → Attempt Self-Service Navigation → Capture Access-Denied Response

What SyntraFlow Captures Per Run

Parameterised input valuesReusable navigationAutomation action traceScreenshots / evidence captureExecution timingPass / fail statusBusiness assertionsEnvironment-independent test data

Action Status vs. Business Validation

A successful termination event does not automatically prove that login, self-service and module access were actually removed — this is illustrative of how SyntraFlow separates action success from business validation; it does not reflect a specific live execution. Because this page aggregates 20 individual scenarios across login/self-service removal, module and functional-area access removal, delegated-approval handling, session behavior and rehire regression, evidence-based failure classification matters most here. When a step or business assertion fails, SyntraFlow's evidence is intended to help classify the likely cause into one of eight categories — DATA_ERROR, CONFIGURATION_ERROR, SECURITY_ERROR, EXPECTED_VALIDATION, INTEGRATION_ERROR, AUTOMATION_ERROR, ENVIRONMENT_ERROR or APPLICATION_ERROR — rather than assuming a defect. For example: a terminated worker retains unexpected access — Likely category: SECURITY_ERROR or CONFIGURATION_ERROR — Evidence: the ${ROLE} previously assigned to ${USER} was not fully removed by the termination workflow, or a separately provisioned ${ROLE} was not tied to employment status — Recommended action: verify the termination workflow and role-to-employment configuration before treating the result as an Oracle defect. A failure should not be labeled as an Oracle application defect until data, configuration, security, automation and integration causes have been eliminated.

StepAction StatusBusiness Validation
Process Worker Termination EventPass
Verify Application Login and Self-Service Access BlockedPassPass
Verify Module and Functional Access RemovedPassPass

Related Security Tests

Access After Termination is the seventh scenario family in the Security cluster, covering 20 individual scenarios that connect to Access After Transfer, User Access and Sensitive Data Access within the same cluster.

Turn This Standard Test into Your Oracle Fusion Access After Termination Regression Suite

Start with the Syntra Standard Access After Termination test, use DataVault to provide environment-specific worker, user and role data, let Jarvis generate additional Positive, Negative, Security and Integration variations, and execute the resulting regression pack automatically with SyntraFlow.

Use This Oracle Fusion Test Case

Download Test Case

Excel, CSV or JSON export.

Coming soon

Automate with SyntraFlow

Run this script against your own tenant today.

Frequently Asked Questions

What is the difference between Access After Termination and Access After Transfer testing?
Access After Termination confirms that access is fully removed when a worker's employment ends — login, self-service, payroll, procurement and other module access should no longer be reachable. Access After Transfer instead confirms that access correctly re-scopes when a worker remains employed but moves to a new department, manager, Business Unit or location — some access should change while the worker otherwise keeps working. Both families use the same underlying role and organization-scoping concepts, so results are cross-referenced between the two catalogs.
Which modules and functional areas does this catalog confirm lose access after termination?
Scenarios SEC-TERM-003 through SEC-TERM-011 cover employee self-service, manager access, payroll, HR admin roles tied to employment, procurement, financials, SCM, recruiting and sensitive-data access. Exact module-to-role mapping depends entirely on the customer's own Oracle Fusion security configuration — not every role or module shown here exists for every customer.
How are delegated approvals and scheduled jobs handled when a user is terminated?
Scenario SEC-TERM-012 confirms that approvals pending with the terminated user are reassigned to a ${DELEGATE_APPROVER} where the customer's workflow configuration requires reassignment, and scenario SEC-TERM-013 confirms that scheduled jobs owned by the terminated user are reviewed where relevant. Whether reassignment happens automatically or requires manual intervention depends on the customer's configured approval and job-scheduling setup.
What happens to a terminated user's active session, and can they still see their own historical records?
Scenario SEC-TERM-014 confirms how an already-active session behaves for a user terminated mid-session, according to the customer's configured session policy. Scenario SEC-TERM-017 confirms that a terminated worker's historical HR records remain visible to an authorized HR user, and scenario SEC-TERM-018 confirms that the terminated worker themselves cannot access another worker's data.
Does rehiring a terminated worker restore their previous access?
No — scenario SEC-TERM-016 deliberately tests that a rehired worker receives only the access defined by their new assignment, not the access they held before termination. Any retained prior access on rehire is treated as a security finding requiring investigation, not an assumed defect.
How does SyntraFlow classify a failed Access After Termination test?
When a step or business assertion fails, SyntraFlow's evidence is intended to help classify the likely cause into one of eight categories — DATA_ERROR, CONFIGURATION_ERROR, SECURITY_ERROR, EXPECTED_VALIDATION, INTEGRATION_ERROR, AUTOMATION_ERROR, ENVIRONMENT_ERROR or APPLICATION_ERROR — along with supporting evidence and a recommended action. For example, a terminated worker retaining unexpected access is likely a SECURITY_ERROR or CONFIGURATION_ERROR. A failure should not be labeled as an Oracle application defect until data, configuration, security, automation and integration causes have been eliminated.