3 Replies Latest reply: Oct 1, 2013 7:26 AM by $anty RSS

    Agent Privileges / Profiles

    650380

      Hi all,

      does anybody know what privileges / profiles an odi agent user requires. We try to avoid a user with "Supervisor Access Privileges" in our odiparams file.

      Regards,

      Jens

        • 1. Re: Agent Privileges / Profiles
          $anty

          I think you have to provide details of SUPERVISOR in odiparams file to start agent, but creating a user with proper administrative profile should be able to start the agent.

          The user should have atleast TOPOLOGY_ADMIN role. Have a read of this:

          Managing the Security in Oracle Data Integrator

           

          Regards,

          Santy

          • 2. Re: Agent Privileges / Profiles
            650380

            Hi all,

            it seems that the odi agent or the at least the "internal" ODI API requires "Supervisor Access Privileges". See below the error message from our agent.log.

            Regards,

            Jens

             

            [2013-09-24T16:47:02.751+02:00] [] [NOTIFICATION] [ODI-1128] [] [tid: 10] [ecid: 0000K5GS0jl7y0qTGMy0Sf1IGQNa000001,0] Agent ODIAGENT01 is starting. Container: STANDALONE. Agent Version: 11.1.1.7.0 - 02/03/2013. Port: 56101. JMX Port: 57101.

            [2013-09-24T16:47:05.764+02:00] [odi] [ERROR] [] [oracle.odi.core] [tid: 10] [ecid: 0000K5GS0jl7y0qTGMy0Sf1IGQNa000001,0] odi.core.security.SecurityManager.createAuthenthication(suservisor, pwd,runasuser) detected user: ODI_BATCH is not  supservisor

            [2013-09-24T16:47:05.777+02:00] [] [WARNING] [ODI-1436] [] [tid: 10] [ecid: 0000K5GS0jl7y0qTGMy0Sf1IGQNa000001,0] Error retrieving ID statistics for repository ODIREP22.[[

            oracle.odi.core.security.PermissionDeniedException: ODI-10164: Only supervisor user can invoke this API.

                    ...

            • 3. Re: Agent Privileges / Profiles
              $anty
              PermissionDeniedException: ODI-10164: Only supervisor user can invoke this API

                 Looks like only SUPERVISOR details can be accepted to start the agent.

               

              Regards,

              Santy