Configuring Resource Permission Definitions for Essbase Calculations

Before you can grant an application role permission to use Essbase calculations appropriate resource permission definitions must exist in the policy store.

See Enabling Users to Perform Specific Actions in Essbase and Associated Tools.

Use the examples in this section to understand how to configure resource permission definitions so that users can use Essbase calculations.

See Resource Permissions Reference for Essbase and Associated Tools.

Example 1 - To configure resource permission definitions to use default and inline calculations in /cluster/App1:

This example configures resource permission definitions to use default and inline calculations in /EssbaseCluster-1/App1. The following resource permission definition must exist in the policy store. For example:

• oracle.essbase.application, /EssbaseCluster-1, use_calculation

  In this example an application resource permission grants the use_calculation permission to all applications in the cluster.

  OR

• oracle.essbase.application, /EssbaseCluster-1/App1, use_calculation

  In this example an application resource permission grants the use_calculation permission to applications in App1.

Example 2 - To configure resource permission definitions to use all calculations in /cluster/App1:

This example configures resource permission definitions to use all calculation scripts in /EssbaseCluster-1/App1, you must ensure that the following permissions exist in the policy store. For example:

• oracle.essbase.application, /EssbaseCluster-1, use_calculation

  OR

  oracle.essbase.application, /EssbaseCluster-1/App1, use_calculation

  AND

• oracle.essbase.calculation, /EssbaseCluster-1/App1, all

  This calculation permission grants access permissions to use to all calculation scripts in App1.

Example 3 - Configuring resource permission definitions to use all calculations in the cluster:

This example configures resource permission definitions to use all calculations in the cluster, you must ensure that both of the following permissions exist in the policy store. For example:

• oracle.essbase.application, /EssbaseCluster-1, use_calculation

• oracle.essbase.calculation, /EssbaseCluster-1, all

Example 4 - Configuring resource permission definitions to use calculation scripts forcastQ1 and forcastQ2:

This example configures resource permission definitions to use specific calculation scripts in the cluster (for example, forcastQ1 and forcastQ2), you must ensure that the following permissions exist in the policy store. For example:

• oracle.essbase.application, /EssbaseCluster-1, use_calculation

  OR

  oracle.essbase.application, /EssbaseCluster-1/App1, use_calculation

• oracle.essbase.calculation, /EssbaseCluster-1/App1/Db1/forcastQ1, execute

  AND

• oracle.essbase.calculation, /EssbaseCluster-1/App1/Db1/forcastQ2, execute

Note:

A grant to a specific calculation script revokes cluster or application level access to all calculations. Consider specific grants to calculations scripts as restrictions.

For example:

A user with the following grants has access only to the forcastQ1 calculation script:

• oracle.essbase.application, /EssbaseCluster-1, use_calculation

• oracle.essbase.calculation, /EssbaseCluster-1, all

• oracle.essbase.calculation, /EssbaseCluster-1/App1/Db1/forcastQ1, execute

Note:

The presence of an oracle.essbase.calculation grant does not imply oracle.essbase.application calculate access. For example:

The user does not have access to any calculation, outline, inline, or script with any of following grants if there is no oracle.essbase.application calculate grant:

• oracle.essbase.calculation, /EssbaseCluster-1/App1, all

• oracle.essbase.calculation, /EssbaseCluster-1, all

• oracle.essbase.calculation, /EssbaseCluster-1/App1/Db1/forcastQ1, execute