Configure What Users Can See and Do
Administrators assign application roles to determine what other users can see and do in Oracle Analytics Cloud.
Get Started with Application Roles
Administrators configure what users see and do in Oracle Analytics Cloud from the Users and Roles page in the Console. This page presents user information in 3 different views:
Users and Roles Page | Description |
---|---|
Users |
Shows users from the identity domain associated with your instance. You can assign users one or more application roles in Oracle Analytics Cloud. From Users, you can:
|
Groups |
Shows groups from the identity system associated with your instance. |
Application Roles |
Shows application roles for Oracle Analytics Cloud along with your custom application roles. From Application Roles, you can:
|
Add Members to Application Roles
Application roles determine what people are allowed to see and do in Oracle Analytics Cloud. It’s the administrator’s job to assign appropriate application roles to all users and to manage the privileges of each application role.
You can make individuals (users) and groups of users (roles) from your identity domain members of an application role.
Remember:
- Members inherit the privileges of an application role.
- Application roles inherit privileges from their parent (application roles).
You select members for an application role or change parent privileges using the Console.
Why Is the Administrator Application Role Important?
You need the BI Service Administrator application role to access administrative options in the Console.
There must always be at least one person in your organization with the BI Service Administrator application role. This ensures there is always someone who can delegate permissions to others. If you remove yourself from the BI Service Administrator role you’ll see a warning message.
Assign Application Roles to Users
The Users page lists all the users who can sign in to Oracle Analytics Cloud. The list of names comes directly from the identity domain associated with your instance. It’s the administrator’s job to assign users to appropriate application roles.
Assign Application Roles to Multiple Users Through Roles
The Roles page shows you all the roles that people signing in belong to in their identity domain. The list of roles comes directly from the identity domain associated with your instance. It’s often quicker to assign privileges to multiple users through their predefined identity domain roles, than it is to assign privileges to users one by one.
You can assign application roles from the Roles page. You can also see who belongs to each role.
Add Your Own Application Roles
Oracle Analytics Cloud provides a set of predefined application roles. You can also create application roles of your own to suit your own requirements.
For example, you can create an application role that only allows a select group of people to view specific folders or projects.
Add One Predefined Application Role to Another (Advanced)
Oracle Analytics Cloud provides several predefined roles: BI Service Administrator, BI Data Model Author, BI Data Load Author, BI Content Author, DV Content Author, DV Consumer, BI Consumer. There are very few, advanced use cases where you might want to permanently include one predefined application role in another.
Any changes that you make to predefined application roles are permanent, so don’t perform this task unless you need to.