Tuesday, April 21, 2020

How to give access only in OTBI Data Model for BI Developers without having Admin access in Oracle HCM Cloud environment

Create a Role with the below details. This Role will only give access to Data Model to query in the Oracle Database table. User will not be able to create Reports in this approach.


Step 1 : Navigate to Home --> Tools --> Security Console

Step 2 : Click on the "Create Role" button.

Step 3 : Provide the details as below in the "Basic Information" section. Details can be changed as
             per requirement. This is just a sample.

             Role Name         : BI Developer Custom
             Role Code          : BI_DEVELOPER_CUSTOM
             Role Category    : BI - Abstract Roles
             Description         : A custom BI Abstract Role for BI Developers

Step 4 : Navigate to "Function Security Policies" section and a Function Security Policy named 
             "Manage Reports and Analytics"

Step 5 : Navigate to "Data Security Policies" section and no need to add anything here.

Step 6 : Now navigate to "Role Hierarchy" section and add the role 
             "BI Publisher Data Model Developer" role here.

             Note : FYI "BI Publisher Data Model Developer" will provide access only to 
                        Data Models, not in Reports. To have access in Reports, we have to add 
                        "BI Platform Author Role" in the "Role Hierarchy" section. User will not 
                        have access in BI Administration from the OTBI in this approach.

                        If user wants to access everything in OTBI, then simply we have to add only one role
                        named "BI Administrator Role" in the "Role Hierarchy" section.

                       Modify accordingly as per requirement here.

Step 7 : Click on "Next" button and it will navigate to "Users" section. Users can be assigned this  
             new role to their User Profiles in this step (Check the "Add User" button). Otherwise we 
             can assign this role to the Users from the Security Console "Users" tab. 

Step 8 : Click again on the "Next" button and check the Summary of the new role. Then click 
             on "Save and Close". In this step the new custom role will be created.


Step 9 : If in the step 7 User was added then step 9 is optional, else navigate to 
             Home --> Tools --> Security Console --> Users.
             Search for a user who should have this role and assign this role (BI Developer Custom)
             to the user.

Step 10 : Now navigate to Home --> Tools --> Reports and Analytics --> Browse Catalog
               In the OTBI select the folder where this role should have full access or create a new folder 
               in OTBI.

Step 11 : Select the folder, go to "Permission" (More--> Permission or check at left hand bottom)
                add the new role with Permission as "Full Control" and also click on the Check Boxes to 
                give accesses in the Sub Folders as well.

Step 12 : Now login as the User, Navigate to "Reports and Analytics --> Browse Catalog --> OTBI"
               and try to access the "Data Model" and save it to that particular folder.

              Note : After logging in as the User, if you are not able to see the "Reports and Analytics" 
                         icon from UI, then login in or take help from Admin to run the process 
                         "Import User and Role Application Security Data" from 
                         "Home --> Tools --> Scheduled Processes". Once the process in completed then try
                         again to login as the user and to test the Data Model access.
                         





1 comment:

  1. Thanks for sharing such a wonderful information from this post. We are also providing the best services click on below links to visit our website.
    Oracle Fusion HCM Training
    Workday Training
    Okta Training
    Palo Alto Training
    Adobe Analytics Training

    ReplyDelete

How to create a Custom Role only having access to Setup and Maintenance

  To create a Custom Role only to have access in Setup and Maintenance, we need the below privileges: Please follow the below instructions t...