Note: | This topic applies to Essbase native security mode. If you are using Shared Services to manage security, see About Shared Services User Management. |
Essbase security addresses a wide variety of database security needs. Various levels of permissions can be granted to users and groups, or permissions can be defined at the server, application, or database level. You can apply security in the following ways:
Users and groups: You can grant permissions to individual users and to groups of users. When higher, these permissions take precedence over minimum permissions defined for applications and databases. Ordinary users have no inherent permissions. You can grant server-wide permissions when you create a user or group, and you can grant user and group permissions for specific applications and databases by editing user or group properties. For more information, see Managing Users and Groups.
Minimum permissions for applications and databases: To set a default level of access that applies to all users of an application or database, you can set minimum permissions for an application or database. Users and groups with equal or higher than the minimum permissions for the application or database gain access independent of their ability to access other items; users and groups with higher granted permissions are not affected. For more information, see Setting Minimum Permissions for Applications and Setting Minimum Permissions for Databases.
Server-wide permissions and settings: You can specify server-wide settings when you create a user or group; for example, you can grant permissions to a user that apply to the entire server, and you can set options for managing user names and passwords, login attempts, and user inactivity. You can view and terminate user sessions and requests that are running on an Essbase Server, or that are running only on particular applications and databases. You can also manage user locks on data at the server, application, or database level. For more information, see Managing Security at the Server Level.
Database filters: You can create filters for a database that define permissions that users and groups can have for particular members, down to an individual data value (cell). For more information, see Managing Filters.
“User Management and Security in Essbase Native Security Mode” in the Oracle Essbase Database Administrator's Guide