About Application Roles

An application role comprises a set of privileges that determine what users can see and do after signing in to Oracle BI Cloud Service. It’s your job as an administrator to assign people to one or more application roles.

There are two types of application role:

Type of Application Role Description

Predefined

Include a fixed set of privileges.

User-defined

Created by administrators. Include one or more predefined application roles.

Predefined Application Roles

Oracle BI Cloud Service provides several predefined application roles to get you started. In many cases, these predefined application roles are all that you need.

Tip:

You can also create your own application roles. See Adding Your Own Application Roles.

Predefined Application Role Description Default Members

BI Service Administrator

Allows users to administer Oracle BI Cloud Service and delegate privileges to others.

Identity Domain Administrator

BI Data Model Author

Allows users to manage the data model in Oracle BI Cloud Service.

BI Service Administrator

BI Data Load Author

Allows users to load data using Oracle BI Cloud Service REST API and Oracle BI Cloud Service Data Sync.

BI Service Administrator

BI Content Author

Allows users to create analyses and dashboards in Oracle BI Cloud Service.

BI Data Model Author

BI Discovery Content Author

BI Advanced Content Author

Allows users to perform more advanced content management tasks, such as add data sources for analyses and dashboards, and export dashboards.

BI Service Administrator

BI Discovery Content Author

Allows users to create visualization projects, explore data using Visual Analyzer, and add data sources for visualizations.

BI Advanced Content Author

BI Consumer

Allows users to view and run reports in Oracle BI Cloud Service (projects, analyses, dashboards).

Use this application role to control who has access to the service.

BI Content Author

You can’t delete predefined application roles or remove default memberships.

Application roles can have users, roles, or other application roles as members. This means that a user who is a member of one application role might indirectly be a member of other application roles.

For example, a member of the BI Service Administrator application role inherits membership of other application roles, such as BI Data Model Author and BI Consumer. Any user that is a member of BI Service Administrator can do and see everything that these other application roles can do and see. Therefore you don’t need to add a new user (for example, John) to all these application roles. You can simply add the user to the BI Service Administrator application role.

Application Role Hierarchy

This diagram illustrates the application role hierarchy in Oracle BI Cloud Service. It also shows you how predefined user roles assigned through My Services map to the application roles.

Why Is the Administrator Application Role Important?

You need the BI Service Administrator application role to access administrative options in the Console.

There must always be at least one person in your organization with the BI Service Administrator application role. This ensures there is always someone who can delegate permissions to others. If you remove yourself from the BI Service Administrator role you’ll see a warning message. Consider adding yourself back to the this application role before you sign out. After you sign out, you won’t be allowed to manage permissions through the Console to reinstate yourself.

No Users With the BI Service Administrator Application Role?

If no one has administrative privileges, ask your identity domain administrator to add you or another user to the <serviceInstanceName>.BICloudServiceAdministrator role through My Services security pages. This role is a member of the Administrator application role and enables access to the user management pages in the Console.