Create Roles and Policies
To create new application roles:
- Login to Oracle Fusion Middleware Control Enterprise Manager.
-
Go to WebLogic Domain > Security > Application Roles.
The Application Roles dialog box appears.
-
From the Application Stripe drop-down list, select OBI, and click Search
.
The default role available in clean slate installation appears.
-
Click Create.
The Create Application Role dialog box appears.
- In the Role Name field, enter AIAdminRole.
-
From the Members section, click +Add.
The Add Principal dialog box appears.
-
From the Type drop-down list, select Group, and click Search.
A list of principals appears.
- From the list of Searched Principals, select AIAdminGroup, and click OK.
-
From the Members section, click +Add.
The Add Principal dialog box appears.
-
From the Type drop-down list, select Application Role, and click Search.
A list of principals appears.
-
From the list of Searched Principals, select BIServiceAdministrator, and click OK.
The Membership for AIAdminRole appears.
-
To add AIAuthorRole, repeat from Step 4 to Step 11.
-
To add AIConsumerRole, repeat from Step 4 to Step 11.
Note:
For more details, refer Section 2.8.3.1 Creating Application Roles Using Fusion Middleware Control in https://docs.oracle.com/middleware/1221/bip/BIPAD.pdf
To create new application policy:
- Login to Oracle Fusion Middleware Control Enterprise Manager.
-
Go to WebLogic Domain > Security > Application Policies.
The Application Policies screen appears.
-
To create a new application policy, click Create.
The Create Application Grant dialog box appears.
-
From the Grantee section, click +Add.
The Add Principal dialog box appears.
- From the Type drop-down list, select Application
Role, and click Search
.
- From the list of Searched Principals, select AIAdminRole, and click OK.
-
From the Permissions section, click +Add.
The Add Permission dialog box appears.
- Select the Resource Types radio button.
- From the Resource Type drop-down list, select oracle.bi.publisher.permission, and click Search.
-
From the Search Results, select oracle.bi.publisher.permission (Oracle Analytics Publisher Administer Server), and click Continue.
The Add Permission dialog box appears.
- For Permission Actions, select All (_all_), and click Select.
-
Add Resource Name as oracle.bi.user with Impersonate permission.
The new AI Admin policy has all the permissions.
Note:
Make sure all the fields are either selected or entered manually.
-
Repeat from Step 4 to Step 12, to add the following:
Name Grantee Resource Permissions AI Author
AIAuthorRole
BIP Develop Report
BIP Develop Data Model
AI Consumer
AIConsumerRole
BIP Access Excel Report Analyzer
BIP Access Online Report Analyzer
BIP Access Report Output
BIP Schedule Report
Note:
For more details, refer to Section 2.8.3.2 Creating Application Policies Using Fusion Middleware Control from https://docs.oracle.com/middleware/1221/bip/BIPAD.pdf.