About Application Roles

An application role comprises a set of privileges that determine what users can see and do after signing in to Oracle Analytics Cloud. It’s your job as an administrator to assign people to one or more application roles.

There are two types of application role:

Type of Application Role Description

Predefined

Include a fixed set of privileges.

User-defined

Created by administrators. Include one or more predefined application roles. See Add Your Own Application Roles.

Predefined Application Roles

Oracle Analytics Cloud provides several predefined application roles to get you started. In many cases, these predefined application roles are all that you need.

This diagram illustrates the predefined application role hierarchy and how they map to the default application roles in Oracle Identity Cloud Service (ServiceAdministrator, ServiceUser, ServiceViewer). For example:

  • BI Service Administrator - the diagram shows that a member of the BI Service Administrator application role inherits membership of all the other predefined application roles, such as BI Data Model Author, BI Data Load Author, BI Consumer, and so on. This means, that if a user is a member of BI Service Administrator, they can automatically do everything that these individual application roles allow. If you add a new administrative user (for example, John), you don’t need to assign him to every application role. Instead, you simply add him to the BI Service Administrator application role.
  • DV Content Author - the diagram shows that a member of the DV Content Author application role automatically inherits memberships of the BI Content Author, DV Consumer, and BI Consumer application roles. So, if you give a user the DV Content Author application role, that user can create, share, explore, and view data visualizations, and they can also create, share, run, and view analyses and dashboards.
Predefined Application Roles in Oracle Analytics Cloud Description

BI Service Administrator

Allows users to administer Oracle Analytics Cloud and delegate privileges to others using the Console.

BI Data Model Author

Allows users to create and manage data models in Oracle Analytics Cloud using Data Modeler.

BI Data Load Author

Allows users to load data.

DV Content Author

Allows users to create visualization projects, load data for data visualizations, and explore data visualizations.

BI Content Author

Allows users to create analyses, dashboards, and pixel-perfect reports, and share them with others.

DV Consumer

Allows users to explore data visualizations.

BI Consumer

Allows users to view and run reports in Oracle Analytics Cloud (projects, analyses, dashboards, pixel-perfect reports).

Use this application role to control who has access to the service.

You can’t delete predefined application roles or remove default memberships.

Application roles can have users, roles, or other application roles as members. This means that a user who is a member of one application role might indirectly be a member of other application roles.

If you use Oracle Identity Cloud Service for identity management, the predefined application roles you see in Oracle Analytics Cloud map to a similar set of application roles in Oracle Identity Cloud Service.