7 Implementing Security

This chapter contains the following topics:

• About Security in Oracle Argus Analytics

• Setting Up User Authentication

About Security in Oracle Argus Analytics

Oracle Argus Analytics spans several applications:

Oracle Argus Safety is the data source.

Informatica ETL Execution plans and transforms Oracle Argus Safety data structures into the star schemas required by Oracle Business Intelligence Enterprise Edition (OBIEE).

OBIEE reads from the star schemas and provides the user interface, where end-users can view and analyze data through dashboards and reports.

Oracle Argus Analytics security includes:

• Authentication Oracle Argus Analytics user accounts are maintained in WLS Embedded LDAP. A customer who is using OAM to authenticate the source system access can also configure it for OBIEE authentication.

• Authorization You assign user accounts to user groups in WLS Embedded LDAP. On login, OBIEE ascertains the authenticated user's user group, where user groups with the same name determine which parts of Oracle Argus Analytics the user can use.

  Predefined OBIEE user groups determine the privileges allowed to users and allow access to the shipped Oracle Argus Analytics dashboards and reports. You can create additional user groups as needed in OBIEE.

• Data Access In Oracle Argus Analytics, access is also performed at row level. This is done by extracting the access records for studies, products and sites from the source system.

Example

This section describes how to set up security for the following basic types of users as an example.

• Oracle Argus Analytics End Users are people who can view Oracle Argus Safety data in Oracle Argus Analytics through dashboards and reports. The specific dashboards and reports they can view is determined by the user groups they belong to.

• Oracle Argus Analytics Programmers are people who are authorized to create their own reports in the Answers component of Oracle Business Intelligence Enterprise Edition/Oracle Argus Analytics, which does not require any programming skills. You can distinguish between people who can simply create ad hoc reports and those who can save the reports they create to a dashboard so that other people can use them.

• INFA Programmers are people who can modify the functionality of Oracle Argus Analytics by modifying the predefined ETL Programs that Oracle Argus Analytics uses to transform transactional source data in Infa repository for use in Oracle Argus Analytics. They may also create new ETL Programs to support custom dashboards and reports in Oracle Argus Analytics.

• Oracle Argus Analytics Schedulers are people who schedule Oracle Argus Analytics jobs, including the data loading job and the user data access jobs. They need privileges similar to INFA Programmers.

• DAC/INFA Administrators are people who set up DAC, including Informatica Setups, and grant privileges to other users.

Setting Up User Authentication

DAC handles creation and maintenance of users for ETL administration of Oracle Argus Analytics. OBIEE handles reports related user authentication for Oracle Argus Analytics .

Creating User Accounts in DAC

You can create user accounts in the following way:

• Create users in DAC. For more information, refer to the Oracle® Business Intelligence Data Warehouse Administration Console Guide.

Creating Users and Groups for Oracle Argus Analytics

Refer to the Oracle Argus Analytics Installation Guide for instructions on creating users and groups.

Implementing Security using OAM and Configuring SSL for Oracle Argus Analytics

Refer to the Oracle Argus Analytics Installation Guide for instructions on SSO installation to implement security using OAM, and on configuring SSL for Oracle Argus Analytics.