OBIEE security was not coming to OAC

Naresh Gopavaram

Organization Name (Required - If you are an Oracle Partner, please provide the organization you are logging the idea on behalf of): Verint systems

Description (Required): When we are migrating the bar file from OBIEE to OAC, the users with the applications roles mapping are not coming to OAC, We have to do it manually now. This is really very bad behavior in OAC.

Use Case and Business Need (Required):When we are migrating the bar file from OBIEE to OAC, the users with the applications roles mapping are not coming to OAC, We have to do it manually now. This is really very bad behavior in OAC. So much of manpower we need while migrate to OAC from OBIEE

Enhancement Request / Service Request: Enhancement Request

BalaGuddeti-Oracle

@Naresh Gopavaram OAC authentication stays in IDCS/ IAM, hence the Bar file content can't interact with IDCS components. You can migrate the users and groups in bulk to IDCS, however, validation is required. As a best practice, you will assign Application Roles to the Groups, so that user will inherit the application roles. In this case, you need not to map individual users to application roles. It is well documented and also a one-time activity.

Refer Book: Migrating Oracle Business Intelligence Enterprise Edition to Oracle Analytics Cloud

Section: Migrate Users and Groups from Oracle BI Enterprise Edition

https://docs.oracle.com/en/cloud/paas/analytics-cloud/acmgb/prepare-migrate-oracle-bi-enterprise-edition.html#GUID-053E1633-CF3E-4155-8D85-113199AD845E

Refer Book: Configuring Oracle Analytics Cloud

Section: Manage What Users Can See and Do

https://docs.oracle.com/en/cloud/paas/analytics-cloud/acabi/configure-what-users-can-see-and-do.html#GUID-E4B58575-9AE3-4A04-8483-78ECD3674440

Naresh Gopavaram

@BalaGuddeti-Oracle We cant provide IDCS access to all team members to manage users/groups/application roles, because in IDCS there will be so many applications which are not related to OAC and we cant take separate IDCS for OAC to maintain groups/roles/users which is going to be additional cost.

Mapping users with roles by manually is not the good way, hence we have 1000users and 200 roles which is going to take huge time and more chances to get issues. And while moving to one-another instance will get again challenges.

We should get the map user with roles automatically with the bar file from OBIEE to OAC.