BI Security Report

Jerry Ursetti

Summary

Can we create a BI security report?

Content

Is it possible to create a report of BI security or export the data so that security reports can be created?

I'm just starting to set up a BI Cloud instance. I'm still trying to figure out security. It will be a major help to be able to report on security so that I can keep track of what each custom role I create can do and who is in each role.

Thanks.

Christian Berg

Hi Jerry,

There is no out-of-the-box solution for that, but if you are using OAC, then there are several approaches you can take. None "one-click-deploy-solutions that come with the product" though.

I'm pinging my friend Gianni as well so he can add some more details. (@ notations seem not to work in cloudcustomerconnect)

Gianni Ceresa

It all depends on what do you exactly expect to see in your BI security report.

Out of the box there isn't much, but there are ways to get almost everything out of your BI instance and then "pack" everything together based on your needs.

I do that for example for a GDPR compliance assessment using a graph storing all the relationships between application roles and their members (inheritance on multiple levels) and linking to the various aspects of OBIEE (catalog securtiy, privileges, RPD security etc.).

GlennS_3

Jerry,

I assume you are going to use IDCS If so, you can export the roles and users

Jerry Ursetti

This sounds like something I would want to do. Is this something you can share? Or give me some pointers on how to start?

Thanks.

Jerry Ursetti

We will be moving to IDCS. Being able to get users and roles for reporting will be helpful. But we'll also want to know what those roles are allowing a user to do and see.

Thanks.

Gianni Ceresa

I have a presentation which goes over that kind of content and 2 blog posts which are related to the same topic (cover pieces of the presentation).

https://speakerdeck.com/gianniceresa/gdpr-and-you-the-nightmare-of-ba

https://gianniceresa.com/2018/03/gdpr-analytics-challenge/

https://gianniceresa.com/2018/04/gdpr-analytics-solution/

Have a look and let me know if you have specific questions (as it's quite large as a topic).
For IDCS I didn't code the extract and loading into the graph for now as I had no need, but as said by Glenn there are ways to get info out if it, so could easily be added ....

Jerry Ursetti

I will check this out. Thanks a lot!