1 Administrative Tasks

This chapter describes the processes for maintaining users and roles as well as batch processes. For information regarding standard end user activities like creating and viewing reports, please see the Oracle Retail Insights User Guide.

Oracle Support

It is considered to be a best practice to have all Oracle Retail Insights Cloud Service Suite supports requests submitted through a single point of contact for that customer environment; the client designated administrator is usually designated to perform this role.

The link to use when submitting Service Requests (SR) is:

https://support.oracle.com

User Creation

Before users can access the Oracle Retail Insights Cloud Service Suite applications it is necessary to provision each user access to the system, and assign roles to each user to control what functionality will be available to them. The access provisioning is done using Oracle Identity Management (OIM). The following steps explain how to define users, assign roles and revoke access for users when needed. The OIM Application URL and the login with the required administrator access would be needed to execute the below steps:

1. Log into the OIM application.

2. Under Administration, click Users.

   Figure 1-1 Select Users

   
   

3. Under Actions, click Create.

   Figure 1-2 Select Create

   
   

   The Create User screen appears.

4. Under Basic Information, enter the following:

   • First Name

   • Last Name

   • For Organization, enter Retail

   • For User Type, enter Full time employee

   • E-mail: Email address of the employee

5. Under Account Settings, enter:

   • User Login: <firstname>.<lastname>

   • Password:

   • Confirm Password

   Figure 1-3 Complete User Information

   
   

6. Click Submit.

Assigning Members to a Role

To assign members to a role, complete the following:

1. Log into the OIM application.

2. Click Users.

   Figure 1-4 Select Users

   
   

3. Click the oim.test user.

   Figure 1-5 oim.test User

   
   

4. Click the Roles tab.

   Figure 1-6 Roles Tab

   
   

5. Click the Request Roles button.

   Figure 1-7 Request Roles Button

   
   

6. Click the Add to Cart button next to the role you want to assign.

   Figure 1-8 Adding Roles to the Cart

   
   

7. Click Next.

   Figure 1-9 Add Access Request

   
   

8. Click Submit.

   Figure 1-10 Submit Access Request

   
   

   The role is now assigned to the User.

   Figure 1-11 User Details

   
   

Retail Insights Cloud Services Default Enterprise Roles

Retail Insights Cloud Services is built with role-based access. Permissions are associated with roles.

The following roles are available:

Table 1-1 Retail Insights Cloud Services Default Enterprise Roles

Application Module	Default Enterprise Roles	Corresponding Application Roles
ORMI/ORCI	RetailAnalysts	RetailAnalyst
ORMI/ORCI	RetailBuyers	RetailBuyer
ORMI/ORCI	RetailBuyerAnalysts	RetailBuyerAnalyst
ORMI/ORCI	RetailInventoryAnalysts	RetailInventoryAnalyst
ORMI/ORCI	RetailInventoryManagers	RetailInventoryManager
ORMI/ORCI	RetailMerchandiseExecutives	RetailMerchandiseExecutive
ORMI/ORCI	RetailMerchandiseFinancialPlanners	RetailMerchandiseFinancialPlanner
ORMI/ORCI	RetailPlanningExecutives	RetailPlanningExecutive
ORMI/ORCI	RetailPricingAnalysts	RetailPricingAnalyst
ORMI/ORCI	RetailPromotionalPlanners	RetailPromotionalPlanner
ORMI/ORCI	RetailAllocators	RetailAllocator
ORMI/ORCI	RIApplicationAdministrators	RIApplicationAdministrator

Assign the above roles to the user following the steps mentioned in the previous section as per your requirement.

Note: For additional information, see Appendix A, "Appendix: Roles and Permission Grants".

Revoking Role Membership

To revoke the membership of a member in a role:

1. Log into the OIM application.

2. Click Users.

   Figure 1-12 Select Users

   
   

3. Click the oim.test user.

   Figure 1-13 Select Role to Revoke Users

   
   

4. Click the Roles tab.

   Figure 1-14 Roles Tab

   
   

5. Select the Role you want to revoke and click the Remove Role button.

   Figure 1-15 Remove Roles Button

   
   

6. In the Remove Roles screen, click Submit.

   Figure 1-16 Remove Roles Screen

   
   

Deleting a User or Disabling User Privileges

To delete or disable a user

1. Log into the OIM application.

2. Under Administration, click Users.

   Figure 1-17 Select Users

   
   

3. Select the user and click Disable or Delete as necessary.

   Figure 1-18 Delete and Disable

   
   

4. You can also Lock or Unlock a particular user from the same screen if needed.

Resetting a User Password

To reset the password of a user:

1. Log into the OIM application.

2. Under Administration, click Users.

   Figure 1-19 Select Users

   
   

3. Click the Search tab and then select on the User you want to reset the password.

4. Click on Reset Password.

   Figure 1-20 Reset Password Button

   
   

5. In the Reset Password screen, make sure Auto-generate the Password is selected and Click on Reset Password. (The system will auto generate the password and will email it to the user.)

   Figure 1-21 Reset Password

   
   

Approve Requests from User

The users can also request for the Roles or revoke those that are available for him to access the RIS Service. Below are the steps to approve the request from the User.

1. Login into OIM Application.

2. Click Pending Approvals.

   Figure 1-22 Select Pending Approvals

   
   

3. Click on the Action that is assigned to you.

   Figure 1-23 Pending Approvals Tab

   
   

4. Click the Claim button.

   Figure 1-24 Claim the Pending Approval

   
   

5. Click Approve or Reject.

   Figure 1-25 Approve Pending Approval

   
   

6. Once done the request is completed.

Approve Requests from User for Multiple Roles

The users can also request for the multiple Roles or revoke them if they are available for him to access the RIS Service. Below are the steps to approve the request from the User.

1. Login into OIM Application.

2. Click Pending Approvals.

   Figure 1-26 Select Pending Approvals

   
   

3. Click on the Action that is assigned to you.

   Figure 1-27 Pending Approvals Tab

   
   

4. Click the Claim button.

   Figure 1-28 Claim the Pending Approval

   
   

5. Click Approve or Reject.

   Figure 1-29 Approve Pending Approval

   
   

6. Once done, if approved, the request is split into multiple requests, one for each role for each user. Approve all of them by following steps 3 to 5.

7. Once all the requests are approved, all the roles will be assigned to users.

Note: The customer administrator can request multiple roles for multiple users. Once this request is made, the customer administrator is required to approve the request using the Approve Requests from User for Multiple Roles process.

Importing a Batch of User Accounts

If you have batch of users that have to be created, the Oracle team can bulk load the users into the OIM Application. When users are bulk loaded their initial password will be set to the current password of a template user. The new users will be required to change their password on first login.

To request the creation of accounts by bulk loading, follow the below steps.

1. Create CSV file listing all users to create (see example below).

2. Create or identify a user to whose password will be used as the initial password for all created users.

3. Open an SR with Oracle support and provide the CSV file and user from steps 1 and 2.

   ##################
    filename.csv
   ###################
   ##########################################
   USR_LOGIN,USR_FIRST_NAME,USR_LAST_NAME,USR_EMAIL,ORG_NAME
   ce.admin1,ce,admin1,[e-mail],Retail
   ce.admin2,ce,admin2,[e-mail],Retail
   ce.admin3,ce,admin3,[e-mail],Retail
   ce.admin4,ce,admin4,[e-mail],Retail
   ce.admin5,ce,admin5,[e-mail],Retail
   ce.admin6,ce,admin6,[e-mail],Retail
   ce.admin7,ce,admin7,[e-mail],Retail
   ce.admin8,ce,admin8,[e-mail],Retail
   ce.admin9,ce,admin9,[e-mail],Retail
   ce.admin10,ce,admin10,[e-mail],Retail
   ##########################################
   

Bulk Role Membership Update (Optional)

If you have quite a few users that have roles to be assigned to, the Oracle team can bulk update the role membership into the OIM Application.

To update the membership of the by bulk update, follow the below steps.

1. Create CSV file with the user role mapping. Please note that the user name must be in upper case (see example below).

2. Open an SR with Oracle support and provide the CSV file and user from steps 1.

   ##################
    role.csv
   ###################
   ##########################################
   UGP_NAME,USR_LOGIN
   Role1,CE.ADMIN1
   Role2,CE.ADMIN1
   Role1,CE.ADMIN2
   Role3,CE.ADMIN3
   Role4,CE.ADMIN4
   Role5,CE.ADMIN5
   Role6,CE.ADMIN6
   Role7,CE.ADMIN7
   Role8,CE.ADMIN8
   Role2,CE.ADMIN8
   Role2,CE.ADMIN9
   ##########################################
   

Note: If you want more than one role attached to a particular user, add one more row with the role that you want the user to have and the user name. Refer to the CE.ADMIN1 in above table for example.

Nightly Batch File Uploads

The following is the file upload process. For details regarding file contents and formatting please refer to the Oracle Retail Insights Cloud Services Integration Guide. The Private/Public Keys must be generated and the public Key must be associated with your SFTP Account for the file uploads. The Adding Authorized Keys section describes the step-by-step method to generate the Keys (2048 bit RSA Keys).

Adding Authorized Keys

The following is the process to generate a 2048 bit RSA key and add the same to the SFTP server. This is done with the help of WinSCP tool on Windows. However the same can be done using ssh-keygen on Linux as well.

1. Launch WinSCP and select Tools -> Run PuttyGen.

2. Select "SSH-2 RSA" for the type of key to generate and enter "2048" for the number of bits in a generated key field and click Generate.

   Figure 1-30 Key Generator

   
   

3. Move the mouse over the blank space in the window until the key is generated.

   Figure 1-31 Key Generator Progress

   
   

4. Once the key is generated, click the Save public key button to save the public key to a file.

5. Click the Save private key button to save the Private key to a file. Confirm to save it with/without a passphrase.

6. Open an SR with Oracle Support, to associate the Public half of the Key with your SFTP account (attach the Key with the SR).

Steps – Login to WinSCP

The Upload steps uses the private key generated in the earlier section.

1. Launch WinSCP and connect to <SFTP Server> using port 22.

2. Enter the username and click Advanced.

3. Click Authentication.

4. In the Private Key File field, click the Browse button and select the private key created in the earlier section.

   Figure 1-32 Advanced Site Settings Dialog

   
   

5. After loading the private key file, click OK.

   Figure 1-33 Private Key File Loaded

   
   

6. Click Login. The window does not prompt for a password and logs into the SFTP server. Provide a passphrase if one has been set up.

Steps to Upload the Batch File

Login to the WinSCP by Following the Steps – Login to WinSCP section.

1. Transfer all data files to the directory /<SFTP User>.

2. Create a directory called COMMAND under /<SFTP User>if it does not already exist.

3. Change to the /<SFTP User>/COMMAND directory.

4. Transfer an empty file called COMPLETE.

Export File Downloads

Login to the WinSCP by following the Steps – Login to WinSCP section. The following is the download file process.

1. Change directory to /<SFTP User>/EXPORT.

2. Download all data files.

Archiving_Reports – Agent Creation and Execution

1. After creating an Analysis (report) that is needed to be refreshed and saved to a file for downloading, from the OBIEE home screen select New -> Agent.

   Figure 1-34 Create a New Agent

   
   

2. After setting the schedule for the Agent execution, go to the Delivery Content tab and select the analysis report, don't worry about the other settings on this tab such as format because these will be overridden by other selections on the Actions tab.

   Figure 1-35 Delivery Content Tab

   
   

3. Ignore the Recipients and Destinations tabs, go to the Actions tab and add a new Action that "Invokes a Java Method".

   Figure 1-36 Action Tab

   
   

4. Select "REPORT ARCHIVE EJBs / biserver / ArchiveReports / BIReportArchieveApplication-ArchiveReports-ArchiveReports / ArchiveReport".

   Figure 1-37 Select Java Method

   
   

5. Enter the filename that the report should be written into, and select "Delivery Content".

   Figure 1-38 New Action Window

   
   

6. Click the small black page icon with the turned corner and select the file format to be written, then click OK.

   Figure 1-39 Select File Format

   
   

7. Click Save Agent and give the Agent a name. At this point the Agent has been defined and will execute according to the defined schedule.

   Figure 1-40 Save the Agent

   
   

8. If you would like to do an immediate execution of the Agent you can click Run Agent Now.

   Figure 1-41 Execute the Agent

   
   

   The following dialog displays while the agent is running:

   Figure 1-42 Running Agent Dialog