Manage Catalog Permission
You may want to remove access to predefined catalog folders so that those associated with offerings you don't use aren't displayed. You can hide the entire predefined catalog or selectively display root catalog folders for offerings.
To control which offerings are available, create a custom role based on the Custom BI Web cat Reporting Duty role and its associated roles for each. Using custom roles, you can manage folder access in a number of ways, depending on requirements and previous modifications you have made.
-
Add duty roles for parent folders to the custom role so that all users see a subset of the predefined catalog. Add roles only for the offerings you want to retain access for.
-
Don't add any catalog reporting duty roles for any offerings to the custom role to hide the entire predefined catalog and display only /Shared/Custom folders. For example, you can remove BI catalog access for external users such as partners who have no access to reporting.
-
Delete all catalog reporting duty roles from the custom role. Also, add catalog reporting duty roles to a new or existing job role so that job roles with BI access get default access to the predefined catalog. For example, by default, Financial job roles have access to Financial reporting content but Human Capital Management job roles don't have access to the predefined HCM BI catalog. You can grant the Human Capital Management Folder Reporting Duty role to new job roles to allow access to predefined HCM reports.
Hide Predefined Catalog Folders
All authenticated users have the Custom BI Web cat Reporting Duty role, which inherits all of the folder reporting roles that determine access and visibility of root level catalog folders. Administrators with IT Security Manager privileges can hide predefined folders by creating custom roles based on this role and their associated roles from the duty role.
-
Open the Security Console.
-
Search for Custom BI Web cat Reporting Duty and review its duty roles to determine which to retain in your custom role.
- Create a custom role.
-
Click
. -
Click Next twice to navigate to the Role Hierarchy step.
-
To hide all folders, leave the hierarchy empty. Add any roles for offerings you want to retain access for.
-
Run the Import User and Role Application Security Data process to synchronize security changes.
-
Click Browse Catalog in the Reports and Analytics work area and click Administration. In the Maintenance and Troubleshooting section, select Reload Files and Metadata to refresh the BI cache.
BI Reporting Roles
This table shows the mapping between shared root catalog folders, folder reporting roles, and job roles.
Catalog Folder |
Duty Role |
Duty Role Name |
Associated Job Roles |
---|---|---|---|
/Shared/Common Content |
BI_COMMON_CONTENT_REPORTING_DUTY |
Common Content Folder Reporting Duty |
None |
/Shared/Customer Data Management |
BI_CDM_REPORTING_DUTY |
Customer Data Management Folder Reporting Duty |
None |
/Shared/Enterprise Contracts |
BI_OKC_REPORTING_DUTY |
Enterprise Contracts Folder Reporting Duty |
ORA_OKC_CUSTOMER_CONTRACT_ADMINISTRATOR_JOB, ORA_OKC_CUSTOMER_CONTRACT_MANAGER_JOB, ORA_OKC_CUSTOMER_CONTRACT_TEAM_MEMBER_ABSTRACT, ORA_OKC_ENTERPRISE_CONTRACT_ADMINISTRATOR_JOB, ORA_OKC_ENTERPRISE_CONTRACT_MANAGER_JOB, ORA_OKC_ENTERPRISE_CONTRACT_TEAM_MEMBER_ABSTRACT, ORA_OKC_SUPPLIER_CONTRACT_ADMINISTRATOR_JOB, ORA_OKC_SUPPLIER_CONTRACT_MANAGER_JOB, ORA_OKC_SUPPLIER_CONTRACT_TEAM_MEMBER_ABSTRACT |
/Shared/Extension |
BI_EXT_REPORTING_DUTY |
Extension Folder Reporting Duty |
None |
/Shared/Financials |
BI_FIN_REPORTING_DUTY |
Financials Folder Reporting Duty |
ORA_AP_ACCOUNTS_PAYABLE_INVOICE_SUPERVISOR_JOB ORA_AP_ACCOUNTS_PAYABLE_MANAGER_JOB, ORA_AP_ACCOUNTS_PAYABLE_PAYMENT_SUPERVISOR_JOB, ORA_AP_ACCOUNTS_PAYABLE_SPECIALIST_JOB, ORA_AP_ACCOUNTS_PAYABLE_SUPERVISOR_JOB, ORA_AR_ACCOUNTS_RECEIVABLE_MANAGER_JOB, ORA_AR_ACCOUNTS_RECEIVABLE_MANAGER_SOD_JOB, ORA_AR_ACCOUNTS_RECEIVABLE_SPECIALIST_JOB, ORA_AR_ACCOUNTS_RECEIVABLE_SPECIALIST_SOD_JOB, ORA_AR_BILLING_MANAGER_JOB, ORA_AR_BILLING_SPECIALIST_JOB, ORA_CE_CASH_MANAGER_JOB, ORA_EXM_EXPENSE_MANAGER_JOB, ORA_FA_ASSET_ACCOUNTANT_JOB, ORA_FA_ASSET_ACCOUNTING_MANAGER_JOB, ORA_FUN_INTERCOMPANY_ACCOUNTANT_JOB, ORA_GL_FINANCIAL_ANALYST_JOB, ORA_VRM_REVENUE_ANALYST_JOB, ORA_VRM_REVENUE_MANAGER_JOB, ORA_XCC_BUDGET_MANAGER_JOB |
/Shared/Higher Education |
BI_HED_REPORTING_DUTY |
Higher Education Folder Reporting Duty |
ORA_HEQ_ADMISSIONS_COORDINATOR_JOB, ORA_HEQ_ADMISSIONS_MANAGER_JOB, ORA_HER_ACADEMIC_COORDINATOR_JOB, ORA_HER_REGISTRAR_JOB, ORA_HES_BURSAR_JOB, ORA_HEY_STUDENT_SERVICES_MANAGER_JOB, ORA_HEY_STUDENT_SUPPORT_ADVISOR_JOB |
/Shared/Human Capital Management |
BI_HCM_REPORTING_DUTY |
Human Capital Management Folder Reporting Duty |
By default, predefined HCM job roles have no access to the predefined content. |
/Shared/Incentive Compensation |
BI_IC_REPORTING_DUTY |
Incentive Compensation Folder Reporting Duty |
ORA_CN_INCENTIVE_COMPENSATION_ANALYST_JOB, ORA_CN_INCENTIVE_COMPENSATION_MANAGER_JOB, ORA_CN_INCENTIVE_COMPENSATION_PARTICIPANT_ABSTRACT, ORA_CN_INCENTIVE_COMPENSATION_PARTICIPANT_MANAGER_ABSTRACT, ORA_CN_INCENTIVE_COMPENSATION_PLAN_ADMINISTRATOR_JOB |
/Shared/Loyalty |
BI_LOY_REPORTING_DUTY |
Loyalty Folder Reporting Duty |
ORA_LOY_LOYALTY_MARKETING_MANAGER_JOB, ORA_LOY_LOYALTY_PROGRAM_ADMINISTRATOR_JOB |
/Shared/Manufacturing |
BI_MFG_REPORTING_DUTY |
Manufacturing Folder Reporting Duty |
ORA_CSE_ASSET_ADMINISTRATOR_JOB |
/Shared/Marketing |
BI_MKT_REPORTING_DUTY |
Marketing Folder Reporting Duty |
ORA_MKL_SALES_LEAD_QUALIFIER_JOB, ORA_MKT_CORPORATE_MARKETING_MANAGER_JOB, ORA_MKT_MARKETING_ANALYST_JOB, ORA_MKT_MARKETING_MANAGER_JOB, ORA_MKT_MARKETING_OPERATIONS_MANAGER_JOB, ORA_MKT_MARKETING_VP_JOB |
/Shared/Partner |
BI_ZPM_REPORTING_DUTY |
Partner Folder Reporting Duty |
ORA_ZPM_CHANNEL_ACCOUNT_MANAGER_JOB, ORA_ZPM_CHANNEL_ADMINISTRATOR_JOB, ORA_ZPM_CHANNEL_OPERATIONS_MANAGER_JOB, ORA_ZPM_CHANNEL_PARTNER_MANAGER_JOB, ORA_ZPM_CHANNEL_PARTNER_PORTAL_ADMINISTRATOR_JOB, ORA_ZPM_CHANNEL_SALES_DIRECTOR_JOB, ORA_ZPM_CHANNEL_SALES_MANAGER_JOB |
/Shared/Procurement |
BI_PRC_REPORTING_DUTY |
Procurement Folder Reporting Duty |
ORA_AP_ACCOUNTS_PAYABLE_MANAGER_JOB, ORA_AP_ACCOUNTS_PAYABLE_SPECIALIST_JOB, ORA_AP_ACCOUNTS_PAYABLE_SUPERVISOR_JOB, ORA_PO_BUYER_JOB, ORA_PO_PROCUREMENT_APPLICATION_ADMIN_JOB, ORA_PO_PROCUREMENT_INTEGRATION_SPECIALIST_JOB, ORA_PO_PURCHASE_ANALYSIS_ABSTRACT, ORA_POQ_SUPPLIER_QUALIFICATION_DISCRETIONARY, ORA_POR_PROCUREMENT_REQUESTER_ABSTRACT, ORA_POZ_SUPPLIER_ADMINISTRATOR_ABSTRACT, ORA_POZ_SUPPLIER_MANAGER_ABSTRACT |
/Shared/Projects |
BI_PRJ_REPORTING_DUTY |
Projects Folder Reporting Duty |
ORA_OKC_CUSTOMER_CONTRACT_ADMINISTRATOR_JOB, ORA_OKC_CUSTOMER_CONTRACT_MANAGER_JOB, ORA_OKC_CUSTOMER_CONTRACT_TEAM_MEMBER_ABSTRACT, ORA_OKC_ENTERPRISE_CONTRACT_ADMINISTRATOR_JOB, ORA_OKC_ENTERPRISE_CONTRACT_MANAGER_JOB, ORA_OKC_ENTERPRISE_CONTRACT_TEAM_MEMBER_ABSTRACT, ORA_PJF_GRANTS_ACCOUNTANT_JOB, ORA_PJF_GRANTS_ADMINISTRATOR_JOB, ORA_PJF_GRANTS_DEPARTMENT_ADMINISTRATOR_JOB, ORA_PJF_PROJECT_ACCOUNTANT_JOB, ORA_PJF_PROJECT_ADMINISTRATOR_JOB, ORA_PJF_PROJECT_BILLING_SPECIALIST_JOB, ORA_PJF_PROJECT_EXECUTION_ABSTRACT, ORA_PJF_PROJECT_EXECUTIVE_JOB, ORA_PJF_PROJECT_INTEGRATION_SPECIALIST_JOB, ORA_PJF_PROJECT_MANAGEMENT_DUTY_ABSTRACT, ORA_PJF_PROJECT_MANAGER_JOB, ORA_PJF_PROJECT_TEAM_MEMBER_ABSTRACT, ORA_PJF_PROJECTS_APPLICATION_ADMINISTRATOR_JOB, ORA_PJF_RESOURCE_MANAGER_JOB, ORA_PJF_TEAM_COLLABORATOR_ABSTRACT |
/Shared/Public Sector |
BI_PSC_REPORTING_DUTY |
Public Sector Folder Reporting Duty |
ORA_PSC_AGENCY_STAFF_ABSTRACT, ORA_PSC_BUILDING_INSPECTOR_JOB, ORA_PSC_BUSINESS_ANALYST_JOB, ORA_PSC_CHIEF_BUILDING_OFFICER_JOB, ORA_PSC_ECONOMIC_DEV_OFFICER_JOB, ORA_PSC_FINANCE_ADMIN_JOB, ORA_PSC_INSPECTIONS_SUPERVISOR_JOB, ORA_PSC_PERMIT_TECHNICIAN_JOB, ORA_PSC_PERMITS_APPLICATION_ADMINISTRATOR_JOB, ORA_PSC_PERMITS_SUPERVISOR_JOB, ORA_PSC_PLAN_COORDINATOR_JOB, ORA_PSC_PLAN_REVIEWER_JOB, ORA_PSC_PRINCIPAL_PLANNER_JOB, ORA_PSC_SYSTEM_ADMINISTRATOR_JOB |
/Shared/Risk Management |
BI_GRC_REPORTING_DUTY |
Risk Management Folder Reporting Duty |
ORA_GTG_APPLICATION_ACCESS_AUDITOR_JOB, ORA_GTG_APPLICATION_CONTROL_MANAGER_JOB, ORA_GTG_COMPLIANCE_MANAGER_JOB, ORA_GTG_ENTERPRISE_RISK_AND_CONTROL_MANAGER_JOB, ORA_GTG_RISK_MANAGEMENT_AUDITOR_JOB, ORA_GTR_USER_ACCESS_CERTIFICATION_MANAGER_JOB |
/Shared/Sales |
BI_ZBS_REPORTING_DUTY |
Sales Folder Reporting Duty |
ORA_ZBS_SALES_ADMINISTRATOR_JOB, ORA_ZBS_SALES_MANAGER_JOB, ORA_ZBS_SALES_REPRESENTATIVE_JOB, ORA_ZBS_SALES_RESTRICTED_USER_JOB, ORA_ZBS_SALES_VP_JOB, ORA_ZPM_CHANNEL_ACCOUNT_MANAGER_JOB, ORA_ZPM_CHANNEL_ADMINISTRATOR_JOB, ORA_ZPM_CHANNEL_OPERATIONS_MANAGER_JOB, ORA_ZPM_CHANNEL_PARTNER_MANAGER_JOB, ORA_ZPM_CHANNEL_PARTNER_PORTAL_ADMINISTRATOR_JOB, ORA_ZPM_CHANNEL_SALES_DIRECTOR_JOB, ORA_ZPM_CHANNEL_SALES_MANAGER_JOB, ORA_ZSP_SALES_ANALYST_JOB |
/Shared/Service |
BI_SVC_REPORTING_DUTY |
Service Folder Reporting Duty |
ORA_CSO_KNOWLEDGE_ANALYST_JOB, ORA_CSO_KNOWLEDGE_MANAGER_JOB, ORA_SVC_CUSTOMER_SERVICE_MANAGER_JOB, ORA_SVC_CUSTOMER_SERVICE_REPRESENTATIVE_JOB, ORA_SVC_HUMAN_RESOURCE_HELP_DESK_ADMINISTRATOR_JOB, ORA_SVC_HUMAN_RESOURCE_HELP_DESK_AGENT_JOB, ORA_SVC_HUMAN_RESOURCE_HELP_DESK_MANAGER_JOB, ORA_SVC_INTERNAL_HELP_DESK_ADMINISTRATOR_JOB, ORA_SVC_INTERNAL_HELP_DESK_AGENT_JOB, ORA_SVC_INTERNAL_HELP_DESK_MANAGER_JOB, ORA_ZBS_SALES_ADMINISTRATOR_JOB, ORA_ZCA_CUSTOMER_RELATIONSHIP_MANAGEMENT_APPLICATION_ADMINISTRATOR_JOB |
/Shared/Subscription Management |
BI_OSS_REPORTING_DUTY |
Subscription Management Folder Reporting Duty |
ORA_OSS_SUBSCRIPTION_SPECIALIST_JOB |
/Shared/Supply Chain Management |
BI_SCM_REPORTING_DUTY |
Supply Chain Management Folder Reporting Duty |
ORA_ACD_PRODUCT_DESIGN_ENGINEER_JOB, ORA_ACD_PRODUCT_DESIGN_MANAGER_JOB, ORA_ACE_PRODUCT_MANAGEMENT_VP_JOB, ORA_ACE_PRODUCT_PORTFOLIO_MANAGER_JOB, ORA_CMF_FISCAL_DOCUMENT_SPECIALIST_JOB, ORA_CMF_RECEIVING_SPECIALIST_JOB, ORA_CMR_RECEIPT_ACCOUNTING_DISCRETIONARY, ORA_CSE_ASSET_ADMINISTRATOR_JOB, ORA_CST_COST_ACCOUNTANT_JOB, ORA_DOO_ORDER_ADMINISTRATOR_JOB, ORA_DOO_ORDER_MANAGER_JOB, ORA_EGI_PRODUCT_DATA_STEWARD_JOB, ORA_EGP_PRODUCT_MANAGER_JOB, ORA_ENQ_QUALITY_ANALYST_JOB, ORA_ENQ_QUALITY_ENGINEER_JOB, ORA_FOS_SUPPLY_CHAIN_CONTROLLER_JOB, ORA_INV_INVENTORY_MANAGER_JOB, ORA_INV_WAREHOUSE_MANAGER_JOB, ORA_MNT_MAINTENANCE_MANAGER_JOB, ORA_MNT_MAINTENANCE_TECHNICIAN_JOB, ORA_MSC_BACKLOG_MANAGER_JOB, ORA_MSC_DEMAND_AND_SUPPLY_PLANNER_JOB, ORA_MSC_DEMAND_PLANNER_JOB, ORA_MSC_MATERIALS_PLANNER_JOB, ORA_MSC_REPLENISHMENT_PLANNER_JOB, ORA_MSC_SALES_AND_OPERATIONS_PLANNER_JOB, ORA_MSC_SUPPLY_CHAIN_PLANNER_JOB, ORA_RCL_FIELD_SERVICE_ADMINISTRATOR_JOB, ORA_VCS_SUPPLY_CHAIN_COLLABORATION_PLANNER_JOB, ORA_WSH_SHIPPING_MANAGER_JOB |
/Shared/Functional Setup |
BI_FSM_REPORTING_DUTY |
Functional Setups Folder Reporting Duty *Not inherited by Custom BI Web cat Reporting Duty |
ORA_ASM_APPLICATION_IMPLEMENTATION_CONSULTANT_JOB |
/Shared/Security |
FBI_SECURITY_TRANSACTION_ANALYSIS_DUTY |
Security Transaction Analysis Duty *Not inherited by Custom BI Web cat Reporting Duty |
ORA_FND_IT_SECURITY_MANAGER_JOB |
Predefined Catalog Lockdown
If you try to modify the predefined catalog content including folder permissions, you get an alert indicating that you're not allowed to modify content and asking that you save your own content in the /Shared/Custom folder.
Here are a few things to know about catalog folders:
-
You must save all modified content in the /Shared/Custom folder or in new folders in the /Shared folder.
-
Existing modified content in the /Shared/Custom folder or custom folders in the /Shared folder and their subfolders is preserved. If you have modified the content in the predefined catalog folders, all changes are lost during any upgrade. To preserve content, archive your catalog content and unarchive it in the Shared/Custom folder after upgrade.
-
All existing content in parent folders in the /Shared folder is preserved.
-
You can't change folder or object permissions on the predefined catalog folders or content. For example, you can't change folder permissions to hide folders or objects.