OBIEE Essbase Security Integration

1977947

OBIEE 11.1.1.7 / Essbase 11.2.4

I would like to configure data level security in Essbase. OBIEE 11g and Essbase have been configured seperately. There are shared filters defined within EPM Shared Services that need to be leveraged for the purpose of data-level security on OBIEE reports.

Whats the best way to configure the security within OBIEE.

Cheers

cesar.advincula.o

Hello,

0. As a best practice you should have a table ( RDBMS / OLAP)

   which you have the mapping between user/ application role/ group and your right the data access (entity, account, etc),

1. Check my Entity Dimension:

  

  

2. Create an Initialization Blocks

3. Setting up your filter in your LTS (Logical Table Source) of your Essbase.

4. Check the Results

  

Kind Regards,

1977947

Hi Cesar,

Thank you kindly for the detailed answer. We had recommended a table similar to what your are describing above to be built but that solution was turned down. The concern is that the data level security should be defined within Essbase only and maintained within Essbase.

We would like to utilize SSO in the Essbase connection pool of the OBIEE physical layer, so that whatever security is defined in Shared Services for the authenticated user, still applies even when that user logs in from OBIEE.

Based on that I would  like to know if there is any further configuration in OBIEE that will be required to apply data level security for the users and groups coming from Shared Services.

Cheers

cesar.advincula.o

Hello,

Check out this link,

For Authorization and Integration HSS:

https://gerdpee.wordpress.com/2011/06/17/integration-sort-of-of-obiee-11-1-1-5-and-hyperion-shared-services-11-1-1-3/

And check:

https://docs.oracle.com/cd/E28280_01/bi.1111/e10541/essbase_intro.htm#BIESG9034

Kind Regards,

1977947

Thanks again Cesar! It looks like we might be able to do something similar to the first option for our solution. Thanks for sharing the information.

Cheers.