A Managing Catalog Permissions and Privileges

This appendix comprises the following sections:

• Creating Users and Groups

• Creating Application Roles and Assigning User Groups to Roles

• Maintaining Catalog Privileges

• Managing Permissions for Catalog Folders and Requests

Creating Users and Groups

To create users and groups, refer to the Creating Users and Groups in Oracle Argus Analytics section in this Installation Guide.

Creating Application Roles and Assigning User Groups to Roles

Follow the steps listed below, to create new application role(s):

1. Open a new browser window for the Enterprise Manager for Fusion Middleware Control and navigate to the Business Intelligence > coreapplication overview page, as shown below:

   
   

2. Invoke the Application Roles by choosing from the menu drop-down list at Business Intelligence Instance > Security > Application Roles, as shown below:

   
   

3. Click Create and provide the new role details to be created, as shown below: Example: Role Name: EnterpriseONEAdminRole Display Name: EnterpriseONEAdminRole Description: Role for Enterprise 1 Administration

   
   

4. Click Add Group and search for the Group. Example: EnterpriseONEAdminGroup On the search results, select the group and click the Move button.

   
   

5. Click OK.

   
   

6. Click OK.

Repeat the steps listed above, to create roles and assign the required user group(s) to the role(s).

Note: For further details, refer to the Managing Security Using the Default Security Configuration section in the Oracle® Fusion Middleware Security Guide for Oracle Business Intelligence Enterprise Edition 11g Release 1 (11.1.1). Click here to view the section referred above.

Maintaining Catalog Privileges

Follow the steps listed below, to maintain catalog privileges:

1. Login to the OBIEE application using any admin user credentials.

2. Click the Administration link and navigate to Security > Manage Privileges.

   
   

3. The Manage Privileges page is displayed, as shown below:

   
   

   This page lists all the privileges associated with various components of Oracle Business Intelligence. This page allows you to view and administer the listed privileges.

   Example: Modify the Access to Dashboards privilege, to provide EnterpriseONEAdminRole with Access privilege. To modify this privilege, execute the following steps:

   • Click the BI Consumer Role link adjacent to Access to Dashboard. This will open up the Privilege window, as shown below:

     
     

   • Click the + (Add) sign. This opens a selection window.

   • Enter the required application role, such as EnterpriseONEAdminRole. Select Application Role from the list and click Search. This will list the available application roles based on the entered criteria, as shown below:

     
     

   • Select the required role and click Move.

   • Select Set Permission to as Granted [Permission can either be Granted or Denied], as shown below:

     
     

   • Click OK. This system will return to the Privileges window with the newly added role. The following screen is displayed:

     
     

   • Click OK to complete. The following screen is displayed:

     
     

   • In this way, you can grant or deny privileges for any given role.

     
     

     Note: For further details, refer to the Managing Security for Dashboards and Analyses section in the Oracle® Fusion Middleware Security Guide for Oracle Business Intelligence Enterprise Edition 11g Release 1 (11.1.1). Click here to view the section referred above.

     
     

Managing Permissions for Catalog Folders and Requests

This section comprises the following sub-sections:

• Creating a New Catalog Folder under Shared Folders

• Managing Permissions for Catalog Folders or Saved Requests

Creating a New Catalog Folder under Shared Folders

Execute the following steps to create a new catalog folder:

1. Login to the OBIEE application using any administrator user credentials.

2. Navigate to Catalog.

3. Click Shared Folders under the Folders tree. Click New from the Folders toolbar.

   
   

4. Click Folder. Enter the required folder name, such as EnterpriseONE.

   
   

5. Click OK. The new folder is created, as per the given name.

   
   

Managing Permissions for Catalog Folders or Saved Requests

Execute the following steps to manage permissions for catalog folders or saved requests:

1. Login to the OBIEE application using any administrative user credentials.

2. Navigate to Catalog.

3. Click Shared Folders under the Folders tree. The right-hand panel lists all the catalog folders available under Shared Folders. [For the request, select the folder in which the request is saved. Click the More corresponding to the specific request]

   
   

4. Click More for the folder for which you need to manage the permissions, such as for the EnterpriseONE folder. Click Permissions.

   
   

5. The Permissions window is displayed, as shown below:

   
   

6. Click the + (Add) symbol to add the new Application Roles/Catalog Groups or Users. This will open up the Selection window. For example, to provide Full Control access to this folder for application role called EnterpriseONEAdminRole, enter the required Application Role. Select Application Role under List and click Search. This will list the available Application Roles for the given criteria.

   
   

7. Select the required Application Role and click Move. Select the Role and select Set Permission to as Full Control.

   
   

8. Click OK. The system will return to the Permissions window, listing the newly added role and the associated permissions.

   
   

9. To apply the same permissions to the sub-folders and items within the folders appropriately, select the checkboxes and click OK.