Create new application policy

1. Login to Oracle Fusion Middleware Control Oracle Enterprise Manager.
2. Go to WebLogic Domain > Security > Application Policies.

   The Application Policies screen appears.

3. To create a new application policy, click Create.

   The Create Application Grant dialog box appears.

4. From the Grantee section, click +Add.

   The Add Principal dialog box appears.

5. From the Type drop-down list, select Application Role, and click Search .
6. From the list of Searched Principals, select PVAAdminRole, and click OK.
7. From the Permissions section, click +Add.

   The Add Permission dialog box appears.

   
8. Select the Resource Types radio button.
9. From the Resource Type drop-down list, select oracle.bi.publisher.permission, and click Search.
10. From the Search Results, select oracle.bi.publisher.permission (BIP Administer Server), and click Continue.

    The Add Permission dialog box appears.

11. For Permission Actions, select All (_all_), and click Select.
12. Repeat from Step 4 to Step 11, to add the following:

    Policy Name/Principal	Resource Type	Resource Name	Permission Actions
    PVAAdminRole	oracle.bi.catalog	*	manage
    PVAAdminRole	oracle.bi.repository	oracle.bi.repository	manage
    PVAAdminRole	oracle.bi.publisher.permission	oracle.bi.publisher.developDataModel	_all_
    PVAAdminRole	oracle.bi.scheduler.permission	oracle.bi.scheduler.manageJobs	_all_
    PVAAdminRole	oracle.bi.presentation.catalogmanager.permission	oracle.bi.presentation.catalogmanager.permission	_all_
    PVAAdminRole	oracle.bi.delivers.job	oracle.bi.delivers.job	manage
    PVAAdminRole	oracle.bi.server.permission	oracle.bi.server.manageRepositories	_all_
    PVAAdminRole	oracle.bi.publisher.permission	oracle.bi.publisher.developReport	_all_
    PVAAdminRole	oracle.bi.publisher.permission	oracle.bi.publisher.administerServer	_all_
    PVASafetyRole	oracle.bi.publisher.permission	oracle.bi.publisher.developReport	_all_
    PVASafetyRole	oracle.bi.delivers.job	oracle.bi.delivers.job	schedule
    PVASafetyRole	oracle.bi.publisher.permission	oracle.bi.publisher.developDataModel	_all_
    PVASafetyRole	oracle.bi.tech.visualanalyzer.permission	oracle.bi.tech.visualanalyzer.generalAccess	*
    PVASafetyConsumerRole	oracle.bi.publisher.permission	oracle.bi.publisher. runReportOnline	_all_
    PVASafetyConsumerRole	oracle.bi.publisher.permission	oracle.bi.publisher.accessReportOutput	_all_
    PVASafetyConsumerRole	ESSMetadataPermission	oracle.bip.ess.JobDefinition.EssBipJob	READ, EXECUTE
    PVASafetyConsumerRole	oracle.bi.publisher.permission	BIP Access Excel Report Analyzer	_all_
    PVASafetyConsumerRole	oracle.bi.publisher.permission	oracle.bi.publisher.accessOnlineReportAnalyzer	_all_
    PVASafetyConsumerRole	oracle.bi.publisher.permission	oracle.bi.publisher.scheduleReport	_all_

Note:

For more details, refer to Oracle® Fusion Middleware Security Guide for Oracle Business Intelligence Enterprise Edition > Section 2.4.3 Creating Application Policies Using Fusion Middleware Control from http://docs.oracle.com/middleware/1221/biee/BIESC/authentication.htm#BIESC767.