Manage Catalog Permission

You may want to remove access to predefined catalog folders so that those associated with offerings you don't use aren't displayed. You can hide the entire predefined catalog or selectively display root catalog folders for offerings.

To control which offerings are available, create a custom role based on the Custom BI Web cat Reporting Duty role and its associated roles for each. Using custom roles, you can manage folder access in a number of ways, depending on requirements and previous modifications you have made.

  • Add duty roles for parent folders to the custom role so that all users see a subset of the predefined catalog. Add roles only for the offerings you want to retain access for.

  • Don't add any catalog reporting duty roles for any offerings to the custom role to hide the entire predefined catalog and display only /Shared/Custom folders. For example, you can remove BI catalog access for external users such as partners who have no access to reporting.

  • Delete all catalog reporting duty roles from the custom role. Also, add catalog reporting duty roles to a new or existing job role so that job roles with BI access get default access to the predefined catalog. For example, by default, Financial job roles have access to Financial reporting content but Human Capital Management job roles don't have access to the predefined HCM BI catalog. You can grant the Human Capital Management Folder Reporting Duty role to new job roles to allow access to predefined HCM reports.

Hide Predefined Catalog Folders

All authenticated users have the Custom BI Web cat Reporting Duty role, which inherits all of the folder reporting roles that determine access and visibility of root level catalog folders. Administrators with IT Security Manager privileges can hide predefined folders by creating custom roles based on this role and their associated roles from the duty role.

  1. Open the Security Console.

  2. Search for Custom BI Web cat Reporting Duty and review its duty roles to determine which to retain in your custom role.

  3. Create a custom role.
  4. Click Actions > Add Role.

  5. Click Next twice to navigate to the Role Hierarchy step.

  6. To hide all folders, leave the hierarchy empty. Add any roles for offerings you want to retain access for.

  7. Run the Import User and Role Application Security Data process to synchronize security changes.

  8. Click Browse Catalog in the Reports and Analytics work area and click Administration. In the Maintenance and Troubleshooting section, select Reload Files and Metadata to refresh the the BI cache.

BI Reporting Roles

This table shows the mapping between shared root catalog folders, folder reporting roles, and job roles.

Catalog Folder

Duty Role

Duty Role Name

Associated Job Roles

/Shared/Common Content

BI_COMMON_CONTENT_REPORTING_DUTY

Common Content Folder Reporting Duty

None

/Shared/Customer Data Management

BI_CDM_REPORTING_DUTY

Customer Data Management Folder Reporting Duty

None

/Shared/Enterprise Contracts

BI_OKC_REPORTING_DUTY

Enterprise Contracts Folder Reporting Duty

ORA_OKC_CUSTOMER_CONTRACT_ADMINISTRATOR_JOB, ORA_OKC_CUSTOMER_CONTRACT_MANAGER_JOB, ORA_OKC_CUSTOMER_CONTRACT_TEAM_MEMBER_ABSTRACT, ORA_OKC_ENTERPRISE_CONTRACT_ADMINISTRATOR_JOB, ORA_OKC_ENTERPRISE_CONTRACT_MANAGER_JOB, ORA_OKC_ENTERPRISE_CONTRACT_TEAM_MEMBER_ABSTRACT, ORA_OKC_SUPPLIER_CONTRACT_ADMINISTRATOR_JOB, ORA_OKC_SUPPLIER_CONTRACT_MANAGER_JOB, ORA_OKC_SUPPLIER_CONTRACT_TEAM_MEMBER_ABSTRACT

/Shared/Extension

BI_EXT_REPORTING_DUTY

Extension Folder Reporting Duty

None

/Shared/Financials

BI_FIN_REPORTING_DUTY

Financials Folder Reporting Duty

ORA_AP_ACCOUNTS_PAYABLE_INVOICE_SUPERVISOR_JOB ORA_AP_ACCOUNTS_PAYABLE_MANAGER_JOB, ORA_AP_ACCOUNTS_PAYABLE_PAYMENT_SUPERVISOR_JOB, ORA_AP_ACCOUNTS_PAYABLE_SPECIALIST_JOB, ORA_AP_ACCOUNTS_PAYABLE_SUPERVISOR_JOB, ORA_AR_ACCOUNTS_RECEIVABLE_MANAGER_JOB, ORA_AR_ACCOUNTS_RECEIVABLE_MANAGER_SOD_JOB, ORA_AR_ACCOUNTS_RECEIVABLE_SPECIALIST_JOB, ORA_AR_ACCOUNTS_RECEIVABLE_SPECIALIST_SOD_JOB, ORA_AR_BILLING_MANAGER_JOB, ORA_AR_BILLING_SPECIALIST_JOB, ORA_CE_CASH_MANAGER_JOB, ORA_EXM_EXPENSE_MANAGER_JOB, ORA_FA_ASSET_ACCOUNTANT_JOB, ORA_FA_ASSET_ACCOUNTING_MANAGER_JOB, ORA_FUN_INTERCOMPANY_ACCOUNTANT_JOB, ORA_GL_FINANCIAL_ANALYST_JOB, ORA_VRM_REVENUE_ANALYST_JOB, ORA_VRM_REVENUE_MANAGER_JOB, ORA_XCC_BUDGET_MANAGER_JOB

/Shared/Higher Education

BI_HED_REPORTING_DUTY

Higher Education Folder Reporting Duty

ORA_HEQ_ADMISSIONS_COORDINATOR_JOB, ORA_HEQ_ADMISSIONS_MANAGER_JOB, ORA_HER_ACADEMIC_COORDINATOR_JOB, ORA_HER_REGISTRAR_JOB, ORA_HES_BURSAR_JOB, ORA_HEY_STUDENT_SERVICES_MANAGER_JOB, ORA_HEY_STUDENT_SUPPORT_ADVISOR_JOB

/Shared/Human Capital Management

BI_HCM_REPORTING_DUTY

Human Capital Management Folder Reporting Duty

By default, predefined HCM job roles have no access to the the predefined content.

/Shared/Incentive Compensation

BI_IC_REPORTING_DUTY

Incentive Compensation Folder Reporting Duty

ORA_CN_INCENTIVE_COMPENSATION_ANALYST_JOB, ORA_CN_INCENTIVE_COMPENSATION_MANAGER_JOB, ORA_CN_INCENTIVE_COMPENSATION_PARTICIPANT_ABSTRACT, ORA_CN_INCENTIVE_COMPENSATION_PARTICIPANT_MANAGER_ABSTRACT, ORA_CN_INCENTIVE_COMPENSATION_PLAN_ADMINISTRATOR_JOB

/Shared/Loyalty

BI_LOY_REPORTING_DUTY

Loyalty Folder Reporting Duty

ORA_LOY_LOYALTY_MARKETING_MANAGER_JOB, ORA_LOY_LOYALTY_PROGRAM_ADMINISTRATOR_JOB

/Shared/Manufacturing

BI_MFG_REPORTING_DUTY

Manufacturing Folder Reporting Duty

ORA_CSE_ASSET_ADMINISTRATOR_JOB

/Shared/Marketing

BI_MKT_REPORTING_DUTY

Marketing Folder Reporting Duty

ORA_MKL_SALES_LEAD_QUALIFIER_JOB, ORA_MKT_CORPORATE_MARKETING_MANAGER_JOB, ORA_MKT_MARKETING_ANALYST_JOB, ORA_MKT_MARKETING_MANAGER_JOB, ORA_MKT_MARKETING_OPERATIONS_MANAGER_JOB, ORA_MKT_MARKETING_VP_JOB

/Shared/Partner

BI_ZPM_REPORTING_DUTY

Partner Folder Reporting Duty

ORA_ZPM_CHANNEL_ACCOUNT_MANAGER_JOB, ORA_ZPM_CHANNEL_ADMINISTRATOR_JOB, ORA_ZPM_CHANNEL_OPERATIONS_MANAGER_JOB, ORA_ZPM_CHANNEL_PARTNER_MANAGER_JOB, ORA_ZPM_CHANNEL_PARTNER_PORTAL_ADMINISTRATOR_JOB, ORA_ZPM_CHANNEL_SALES_DIRECTOR_JOB, ORA_ZPM_CHANNEL_SALES_MANAGER_JOB

/Shared/Procurement

BI_PRC_REPORTING_DUTY

Procurement Folder Reporting Duty

ORA_AP_ACCOUNTS_PAYABLE_MANAGER_JOB, ORA_AP_ACCOUNTS_PAYABLE_SPECIALIST_JOB, ORA_AP_ACCOUNTS_PAYABLE_SUPERVISOR_JOB, ORA_PO_BUYER_JOB, ORA_PO_PROCUREMENT_APPLICATION_ADMIN_JOB, ORA_PO_PROCUREMENT_INTEGRATION_SPECIALIST_JOB, ORA_PO_PURCHASE_ANALYSIS_ABSTRACT, ORA_POQ_SUPPLIER_QUALIFICATION_DISCRETIONARY, ORA_POR_PROCUREMENT_REQUESTER_ABSTRACT, ORA_POZ_SUPPLIER_ADMINISTRATOR_ABSTRACT, ORA_POZ_SUPPLIER_MANAGER_ABSTRACT

/Shared/Projects

BI_PRJ_REPORTING_DUTY

Projects Folder Reporting Duty

ORA_OKC_CUSTOMER_CONTRACT_ADMINISTRATOR_JOB, ORA_OKC_CUSTOMER_CONTRACT_MANAGER_JOB, ORA_OKC_CUSTOMER_CONTRACT_TEAM_MEMBER_ABSTRACT, ORA_OKC_ENTERPRISE_CONTRACT_ADMINISTRATOR_JOB, ORA_OKC_ENTERPRISE_CONTRACT_MANAGER_JOB, ORA_OKC_ENTERPRISE_CONTRACT_TEAM_MEMBER_ABSTRACT, ORA_PJF_GRANTS_ACCOUNTANT_JOB, ORA_PJF_GRANTS_ADMINISTRATOR_JOB, ORA_PJF_GRANTS_DEPARTMENT_ADMINISTRATOR_JOB, ORA_PJF_PROJECT_ACCOUNTANT_JOB, ORA_PJF_PROJECT_ADMINISTRATOR_JOB, ORA_PJF_PROJECT_BILLING_SPECIALIST_JOB, ORA_PJF_PROJECT_EXECUTION_ABSTRACT, ORA_PJF_PROJECT_EXECUTIVE_JOB, ORA_PJF_PROJECT_INTEGRATION_SPECIALIST_JOB, ORA_PJF_PROJECT_MANAGEMENT_DUTY_ABSTRACT, ORA_PJF_PROJECT_MANAGER_JOB, ORA_PJF_PROJECT_TEAM_MEMBER_ABSTRACT, ORA_PJF_PROJECTS_APPLICATION_ADMINISTRATOR_JOB, ORA_PJF_RESOURCE_MANAGER_JOB, ORA_PJF_TEAM_COLLABORATOR_ABSTRACT

/Shared/Public Sector

BI_PSC_REPORTING_DUTY

Public Sector Folder Reporting Duty

ORA_PSC_AGENCY_STAFF_ABSTRACT, ORA_PSC_BUILDING_INSPECTOR_JOB, ORA_PSC_BUSINESS_ANALYST_JOB, ORA_PSC_CHIEF_BUILDING_OFFICER_JOB, ORA_PSC_ECONOMIC_DEV_OFFICER_JOB, ORA_PSC_FINANCE_ADMIN_JOB, ORA_PSC_INSPECTIONS_SUPERVISOR_JOB, ORA_PSC_PERMIT_TECHNICIAN_JOB, ORA_PSC_PERMITS_APPLICATION_ADMINISTRATOR_JOB, ORA_PSC_PERMITS_SUPERVISOR_JOB, ORA_PSC_PLAN_COORDINATOR_JOB, ORA_PSC_PLAN_REVIEWER_JOB, ORA_PSC_PRINCIPAL_PLANNER_JOB, ORA_PSC_SYSTEM_ADMINISTRATOR_JOB

/Shared/Risk Management

BI_GRC_REPORTING_DUTY

Risk Management Folder Reporting Duty

ORA_GTG_APPLICATION_ACCESS_AUDITOR_JOB, ORA_GTG_APPLICATION_CONTROL_MANAGER_JOB, ORA_GTG_COMPLIANCE_MANAGER_JOB, ORA_GTG_ENTERPRISE_RISK_AND_CONTROL_MANAGER_JOB, ORA_GTG_RISK_MANAGEMENT_AUDITOR_JOB, ORA_GTR_USER_ACCESS_CERTIFICATION_MANAGER_JOB

/Shared/Sales

BI_ZBS_REPORTING_DUTY

Sales Folder Reporting Duty

ORA_ZBS_SALES_ADMINISTRATOR_JOB, ORA_ZBS_SALES_MANAGER_JOB, ORA_ZBS_SALES_REPRESENTATIVE_JOB, ORA_ZBS_SALES_RESTRICTED_USER_JOB, ORA_ZBS_SALES_VP_JOB, ORA_ZPM_CHANNEL_ACCOUNT_MANAGER_JOB, ORA_ZPM_CHANNEL_ADMINISTRATOR_JOB, ORA_ZPM_CHANNEL_OPERATIONS_MANAGER_JOB, ORA_ZPM_CHANNEL_PARTNER_MANAGER_JOB, ORA_ZPM_CHANNEL_PARTNER_PORTAL_ADMINISTRATOR_JOB, ORA_ZPM_CHANNEL_SALES_DIRECTOR_JOB, ORA_ZPM_CHANNEL_SALES_MANAGER_JOB, ORA_ZSP_SALES_ANALYST_JOB

/Shared/Service

BI_SVC_REPORTING_DUTY

Service Folder Reporting Duty

ORA_CSO_KNOWLEDGE_ANALYST_JOB, ORA_CSO_KNOWLEDGE_MANAGER_JOB, ORA_SVC_CUSTOMER_SERVICE_MANAGER_JOB, ORA_SVC_CUSTOMER_SERVICE_REPRESENTATIVE_JOB, ORA_SVC_HUMAN_RESOURCE_HELP_DESK_ADMINISTRATOR_JOB, ORA_SVC_HUMAN_RESOURCE_HELP_DESK_AGENT_JOB, ORA_SVC_HUMAN_RESOURCE_HELP_DESK_MANAGER_JOB, ORA_SVC_INTERNAL_HELP_DESK_ADMINISTRATOR_JOB, ORA_SVC_INTERNAL_HELP_DESK_AGENT_JOB, ORA_SVC_INTERNAL_HELP_DESK_MANAGER_JOB, ORA_ZBS_SALES_ADMINISTRATOR_JOB, ORA_ZCA_CUSTOMER_RELATIONSHIP_MANAGEMENT_APPLICATION_ADMINISTRATOR_JOB

/Shared/Subscription Management

BI_OSS_REPORTING_DUTY

Subscription Management Folder Reporting Duty

ORA_OSS_SUBSCRIPTION_SPECIALIST_JOB

/Shared/Supply Chain Management

BI_SCM_REPORTING_DUTY

Supply Chain Management Folder Reporting Duty

ORA_ACD_PRODUCT_DESIGN_ENGINEER_JOB, ORA_ACD_PRODUCT_DESIGN_MANAGER_JOB, ORA_ACE_PRODUCT_MANAGEMENT_VP_JOB, ORA_ACE_PRODUCT_PORTFOLIO_MANAGER_JOB, ORA_CMF_FISCAL_DOCUMENT_SPECIALIST_JOB, ORA_CMF_RECEIVING_SPECIALIST_JOB, ORA_CMR_RECEIPT_ACCOUNTING_DISCRETIONARY, ORA_CSE_ASSET_ADMINISTRATOR_JOB, ORA_CST_COST_ACCOUNTANT_JOB, ORA_DOO_ORDER_ADMINISTRATOR_JOB, ORA_DOO_ORDER_MANAGER_JOB, ORA_EGI_PRODUCT_DATA_STEWARD_JOB, ORA_EGP_PRODUCT_MANAGER_JOB, ORA_ENQ_QUALITY_ANALYST_JOB, ORA_ENQ_QUALITY_ENGINEER_JOB, ORA_FOS_SUPPLY_CHAIN_CONTROLLER_JOB, ORA_INV_INVENTORY_MANAGER_JOB, ORA_INV_WAREHOUSE_MANAGER_JOB, ORA_MNT_MAINTENANCE_MANAGER_JOB, ORA_MNT_MAINTENANCE_TECHNICIAN_JOB, ORA_MSC_BACKLOG_MANAGER_JOB, ORA_MSC_DEMAND_AND_SUPPLY_PLANNER_JOB, ORA_MSC_DEMAND_PLANNER_JOB, ORA_MSC_MATERIALS_PLANNER_JOB, ORA_MSC_REPLENISHMENT_PLANNER_JOB, ORA_MSC_SALES_AND_OPERATIONS_PLANNER_JOB, ORA_MSC_SUPPLY_CHAIN_PLANNER_JOB, ORA_RCL_FIELD_SERVICE_ADMINISTRATOR_JOB, ORA_VCS_SUPPLY_CHAIN_COLLABORATION_PLANNER_JOB, ORA_WSH_SHIPPING_MANAGER_JOB

/Shared/Functional Setup

BI_FSM_REPORTING_DUTY

Functional Setups Folder Reporting Duty *Not inherited by Custom BI Web cat Reporting Duty

ORA_ASM_APPLICATION_IMPLEMENTATION_CONSULTANT_JOB

/Shared/Security

FBI_SECURITY_TRANSACTION_ANALYSIS_DUTY

Security Transaction Analysis Duty *Not inherited by Custom BI Web cat Reporting Duty

ORA_FND_IT_SECURITY_MANAGER_JOB

Predefined Catalog Lockdown

If you try to modify the predefined catalog content including folder permissions, you get an alert indicating that you're not allowed to modify content and asking that you save your own content in the /Shared/Custom folder.

Here are a few things to know about catalog folders:

  • You must save all modified content in the /Shared/Custom folder or in new folders in the /Shared folder.

  • Existing modified content in the /Shared/Custom folder or custom folders in the /Shared folder and their subfolders is preserved. If you have modified the content in the predefined catalog folders, all changes are lost during any upgrade. To preserve content, archive your catalog content and unarchive it in the Shared/Custom folder after upgrade.

  • All existing content in parent folders in the /Shared folder is preserved.

  • You can't change folder or object permissions on the predefined catalog folders or content. For example, you can't change folder permissions to hide folders or objects.