Create Application Policies

  1. Log in to Oracle Fusion Middleware Control Enterprise Manager.

  2. Go to WebLogic Domain > Security > Application Policies.

    The Application Policies screen appears.

  3. From the Application Stripe drop-down, select OBI.

  4. Click Create.

    The Create Application Grant dialog box appears.

  5. From the Grantee section, click +Add.

    The Add Principal dialog box appears.

  6. From the Type drop-down, select Application Role and click SearchSearch icon.

  7. From the list of Searched Principals, select FARAdminRole and click OK.

  8. From the Permissions section, click +Add.

    The Add Permission dialog box appears.

  9. Select the Resource Types radio button.

  10. From the Resource Type drop-down, select <Resource Type> and click Search.

  11. From the Search Results, select <Resource Name> and click Continue.

    The Add Permission dialog box appears.

    Note:

    If the Resource Name field is blank, enter it manually.

    For Principal, Resource Type, and Resource Name, see Table 20-1.

  12. For Permission Actions, select All (_all_) and click Select.

  13. When all the permissions are added, click OK.

  14. Repeat Steps 5-13 for other principals and their permissions. (See Table 20-1)

Table 20-1 List of Policies and their Permissions

Policy Name/Principal Resource Type Resource Name Permission Actions

FARAdminRole/EXPAdminRole

oracle.bi.catalog

*

manage

--

oracle.bi.server.permission

oracle.bi.server.manageRepositories

_all_

--

oracle.bi.presentation.catalogmanger.permission

oracle.bi.presentation.catalogmanger.manageCatalog

_all_

--

oracle.bi.delivers.job

oracle.bi.delivers.job

manage

--

oracle.bi.publisher.permission

oracle.bi.publisher.administerServer

_all_

--

oracle.bi.publisher.permission

oracle.bi.publisher.developReport

_all_

--

oracle.bi.publisher.permission

oracle.bi.publisher.developDataModel

_all_

--

oracle.bi.repository

oracle.bi.repository

manage

--

oracle.bi.scheduler.permission

oracle.bi.scheduler.manageJobs

_all_

FARSafetyAuthorRole/EXPSafetyAuthorRole

oracle.bi.publisher.permission

oracle.bi.publisher.developReport

_all_

--

oracle.bi.publisher.permission

oracle.bi.publisher.developDataModel

_all_

--

oracle.bi.tech.visualanalyzer.permission

oracle.bi.tech.visualanalyzer.generalAccess

_all_

--

oracle.bi.delivers.job

*

schedule

FARSafetyConsumerRole/EXPSafetyConsumerRole

oracle.bi.publisher.permission

oracle.bi.publisher.scheduleReport

_all_

--

oracle.bi.publisher.permission

oracle.bi.publisher.runReportOnline

_all_

--

oracle.bi.publisher.permission

oracle.bi.publisher.accessReportOutput

_all_

--

oracle.bi.publisher.permission

oracle.bi.publisher.accessOnlineReportAnalyzer

_all_

--

ESSMetadataPermission

oracle.bip.ess.JobDefinition.EssBipJob

Read,Execute

--

oracle.bi.publisher.permission

oracle.bi.publisher.accessExcelReportAnalyzer

_all_

Note:

For more details, refer to Section 2.8.3.2 Creating Application Policies Using Fusion Middleware Control from https://docs.oracle.com/middleware/1221/bip/BIPAD.pdf