Manage Application Roles in the Semantic Model - Advanced Security Configuration Topic

Application role definitions are maintained in the policy store. The Administrator uses the Oracle Analytics Server Console to make any needed changes.

The semantic model maintains a copy of the policy store data to facilitate semantic model development. The Model Administration Tool displays application role data from the semantic model's copy; you aren't viewing the policy store data in real time. Policy store changes made while you are working with an offline semantic model aren't available in the Model Administration Tool until the policy store next synchronizes with the semantic model. The policy store synchronizes data with the semantic model copy whenever the BI Server restarts. If a mismatch in data is found, an error message is displayed.

While working with a semantic model in offline mode, you might discover that the available application roles do not satisfy the membership or permission grants needed at the time. A placeholder for an application role definition can be created in the Model Administration Tool to facilitate offline model development. But this is just a placeholder visible in the Model Administration Tool and isn't an actual application role. You can't create an actual application role in the Model Administration Tool.

An application role must be defined in the policy store for each application role placeholder created using the Model Administration Tool before bringing the semantic model back online. If a semantic model with role placeholders created while in offline mode is brought online before valid application roles are created in the policy store, then the application role placeholder disappears from the Model Administration Tool interface. Always create a corresponding application role in the policy store before bringing the semantic model back online when using role placeholders in offline semantic model development.