How to grant access to OTBI without granting access to datamodel

Summary:

Although a custom reporting role strictly restricts the user from creating or editing Data Models, a security gap allows them to delete existing Data Model objects within shared folders.

Content (please ensure you mask any confidential information):

We configured a custom reporting role, that allows users to

• Create and Edit OTBI Analyses
• Create, Edit and Delete Reports (BI)

but restricting them from creating, editing and deleting a data model.

The privileges given to the role are:

• BI Author Role
• BI Consumer Role
• Workforce Transaction Analysis Duty

While our custom role successfully restricts the user from creating and editing Data Models, it fails to prevent them from