Oracle Fusion 26C · Risk & Compliance · Access Certification

Oracle Access Certification 26C Release Intelligence

10 feature changes for Oracle Access Certification in 26C (July 2026) — covering process logic, accounting rules, integration payloads, security policies and reporting outputs. 6 High/Critical items require prioritised regression validation; 4 Medium items should be sampled.

6 High/Critical
4 Medium
0 Low
16 pages
9 APIs
26C Access Certification Command Center
JUL 2026
Total Features
10
High Severity
6
Affected Pages
16
Affected APIs
9
High/Critical6
Medium4
Low0
RELEASE OVERVIEW

What Changed in Oracle Access Certification 26C

Oracle Fusion 26C (July 2026) delivers 10 feature changes for Oracle Access Certification — covering process logic, accounting rules, integration payloads, security policies and reporting outputs. 6 are High or Critical severity and require prioritised regression validation before production cutover. Below: every individual change with affected components, recommended test cases and business impact.

10
Total Changes
6
High / Critical
16
Pages Affected
9
APIs Affected
FEATURE-BY-FEATURE BREAKDOWN

All 10 Access Certification 26C Changes

Each card shows the change type, severity, affected pages and APIs, recommended test cases and business impact rationale.

Redwood Access Certification Dashboard

High
Type: UI / Process Opt-in: Opt-in

Redesigned Redwood UX for certification campaigns with enhanced filtering, reviewer delegation, and mobile responsiveness

Affected pages
Access Certifications Home, Review Access, Campaign Dashboard
Affected APIs
Risk Management REST APIs
ESS jobs
Access Certification Synchronization Job
Configuration
Redwood Profile Options, Security Console Config
Business processes
User Access Review Process
Data objects
12, 18, 22
RECOMMENDED TEST CASES

Launch campaign, delegate reviewer, approve/revoke access, verify UI rendering

WHY IT MATTERS

Redwood migration impacts reviewer productivity and navigation consistency

AI-Based Risk Prioritization

High
Type: AI / Data Opt-in: Opt-in

AI-assisted prioritization of high-risk entitlements and toxic combinations during review cycles

Affected pages
Certification Review Pages, Risk Insights Panel
Affected APIs
Advanced Access Controls APIs
ESS jobs
Generate User Access Snapshot
Configuration
AI Risk Scoring Rules, SoD Policies
Business processes
Quarterly Access Certification
Data objects
14, 27, 33
RECOMMENDED TEST CASES

Validate AI risk scores, certify risky roles, verify exception handling

WHY IT MATTERS

Helps reduce manual review effort and improves audit focus

Enhanced Reviewer Delegation

Medium
Type: Process / Security Opt-in: Enabled by Default

Temporary and rule-based delegation for campaign approvers with audit tracking

Affected pages
Delegation Setup, Certification Inbox
Affected APIs
User Security APIs
ESS jobs
Access Certification Notification ESS Job
Configuration
Delegation Rules, Workflow Configurations
Business processes
Access Approval Escalation
Data objects
9, 17
RECOMMENDED TEST CASES

Configure delegate, verify reassignment, audit trail validation

WHY IT MATTERS

Prevents campaign delays during reviewer absence

Continuous Access Monitoring Integration

High
Type: Integration / Security Opt-in: Opt-in

Real-time synchronization with Oracle Access Governance and role provisioning events

Affected pages
Continuous Monitoring Dashboard
Affected APIs
Oracle Access Governance APIs
ESS jobs
Import User and Role Access Data
Configuration
Access Governance Integration Setup
Business processes
Continuous Compliance Monitoring
Data objects
21, 25, 29
RECOMMENDED TEST CASES

Trigger role change, validate certification refresh, monitor alerts

WHY IT MATTERS

Improves continuous compliance and reduces stale certifications

Bulk Certification Actions

Medium
Type: UI / Productivity Opt-in: Enabled by Default

Mass approve/revoke actions with policy validation and reviewer comments enforcement

Affected pages
Review Access Page
Affected APIs
Risk Management REST APIs
ESS jobs
Bulk Access Update Process
Configuration
Approval Threshold Rules
Business processes
High Volume Access Review
Data objects
10, 19
RECOMMENDED TEST CASES

Bulk approve/reject entitlements, validate policy restrictions

WHY IT MATTERS

Reduces reviewer processing time for large organizations

Advanced Audit Evidence Export

Medium
Type: Reporting / Compliance Opt-in: Enabled by Default

Expanded export formats with reviewer history, comments, timestamps, and policy references

Affected pages
Audit Reports, Certification Reports
Affected APIs
BI Publisher APIs
ESS jobs
Generate Certification Audit Report
Configuration
BI Templates, Audit Retention Policies
Business processes
Internal and External Audit Support
Data objects
16, 28
RECOMMENDED TEST CASES

Export reports, verify audit evidence completeness

WHY IT MATTERS

Strengthens SOX and compliance audit readiness

Intelligent Access Scope Recommendations

High
Type: AI / UX Opt-in: Opt-in

Suggested user populations and role scopes based on prior campaign history

Affected pages
Create Certification Wizard
Affected APIs
AI Recommendation APIs
ESS jobs
Certification Scope Analysis Job
Configuration
Scope Templates, Role Hierarchy Rules
Business processes
Access Certification Planning
Data objects
11, 24, 30
RECOMMENDED TEST CASES

Create campaign using AI recommendations, validate role inclusion

WHY IT MATTERS

Improves campaign setup accuracy and reduces admin effort

REST API Expansion for Certifications

High
Type: Integration / API Opt-in: Enabled by Default

New APIs for campaign creation, reviewer updates, certification status tracking, and evidence extraction

Affected pages
REST API Catalog
Affected APIs
Access Certification REST Services
ESS jobs
Access Certification Data Sync Job
Configuration
API Security Policies
Business processes
Third-Party GRC Integrations
Data objects
13, 20
RECOMMENDED TEST CASES

Validate API authentication, create/update campaigns via API

WHY IT MATTERS

Supports automation and external compliance integrations

Policy-Based Auto Revocation

High
Type: Security / Automation Opt-in: Opt-in

Automatic access revocation for overdue or failed certification responses

Affected pages
Certification Exceptions Page
Affected APIs
User Provisioning APIs
ESS jobs
Auto Revoke Access ESS Job
Configuration
Revocation Policies, Escalation Rules
Business processes
Access Removal and Compliance Enforcement
Data objects
7, 15, 26
RECOMMENDED TEST CASES

Simulate overdue reviews, validate automated revocation

WHY IT MATTERS

Reduces lingering unauthorized access risks

Enhanced Certification Analytics

Medium
Type: Reporting / AI Opt-in: Enabled by Default

New analytics KPIs for reviewer turnaround, revocation trends, and compliance scoring

Affected pages
Analytics Dashboard, Compliance Insights
Affected APIs
OTBI Subject Areas
ESS jobs
Refresh Certification Metrics Job
Configuration
OTBI Configurations, KPI Thresholds
Business processes
Governance Reporting
Data objects
8, 18, 31
RECOMMENDED TEST CASES

Validate KPI calculations, reviewer metrics, trend analysis

WHY IT MATTERS

Improves governance visibility and executive reporting

AFFECTED COMPONENTS · DEDUPED

Components Touched by Access Certification 26C

Unique pages, APIs, ESS jobs, configurations and business processes across all 10 26C changes.

Affected Pages

16
Access Certifications Home Analytics Dashboard Audit Reports Campaign Dashboard Certification Exceptions Page Certification Inbox Certification Reports Certification Review Pages Compliance Insights Continuous Monitoring Dashboard Create Certification Wizard Delegation Setup REST API Catalog Review Access Review Access Page
+ 1 more

Affected APIs

9
AI Recommendation APIs Access Certification REST Services Advanced Access Controls APIs BI Publisher APIs OTBI Subject Areas Oracle Access Governance APIs Risk Management REST APIs User Provisioning APIs User Security APIs

ESS Jobs

10
Access Certification Data Sync Job Access Certification Notification ESS Job Access Certification Synchronization Job Auto Revoke Access ESS Job Bulk Access Update Process Certification Scope Analysis Job Generate Certification Audit Report Generate User Access Snapshot Import User and Role Access Data Refresh Certification Metrics Job

Configuration Objects

17
AI Risk Scoring Rules API Security Policies Access Governance Integration Setup Approval Threshold Rules Audit Retention Policies BI Templates Delegation Rules Escalation Rules KPI Thresholds OTBI Configurations Redwood Profile Options Revocation Policies Role Hierarchy Rules Scope Templates Security Console Config
+ 2 more

Business Processes

10
Access Approval Escalation Access Certification Planning Access Removal and Compliance Enforcement Continuous Compliance Monitoring Governance Reporting High Volume Access Review Internal and External Audit Support Quarterly Access Certification Third-Party GRC Integrations User Access Review Process

Data Objects

25
10 11 12 13 14 15 16 17 18 19 20 21 22 24 25
+ 10 more

Oracle Access Certification 26C FAQ

What changed in Oracle Access Certification 26C?

Oracle Fusion Access Certification 26C delivered 10 feature changes — 6 High/Critical severity, 4 Medium, 0 Low. Changes spanned UI updates, AI/automation enhancements, integration improvements and compliance updates. See the full breakdown above.

How many High-severity items are in Access Certification 26C?

6 items in Oracle Fusion Access Certification 26C are classified as High or Critical severity. These require dedicated regression testing before production rollout.

What pages and APIs are affected?

Affected components include 16 unique pages, 9 APIs, 10 ESS jobs, and 17 configuration objects across the 10 feature changes. See "Affected Components" section above.

When does Oracle 26C release for Access Certification?

Oracle Fusion 26C is the Q3 2026 quarterly update, scheduled for July 2026. Access Certification is among the impacted modules in this release with 10 feature changes.

How does SyntraFlow automate Access Certification 26C regression?

SyntraFlow Release Intelligence maps each 26C Access Certification feature against your live tenant configuration, identifies the ones that actually apply, and auto-composes a regression test pack covering only the relevant pages, APIs and business processes.

Validate Oracle Access Certification 26C Against Your Tenant

SyntraFlow Release Intelligence maps every 26C advisory against your live Access Certification configuration and auto-composes a regression test pack with SOX / GDPR audit evidence. Used by US, UK and EU enterprise Oracle teams.