nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Oracle Communities

Oracle Analytics and AI

Child Item

BI publisher custom role

Abdul Karim OAMR

Summary

BI publisher custom role

Content

Can we create a custom role so the user can only have access to new data model for creating SQL queries and not able to edit existing data models, reports and templates?

This should only to query data from back end.

Thanks

Karim

Find more posts tagged with

Comments

Prateek Parasar - GTUK, ACE Pro

Check Data Model Developer role inherited by application developer role. If that role has individual privileges for create and edit then for sure otherwise you can’t. You van create custom role using the privileges from this role.

MandeepKGupta

Hi Abdul,

Please check below MOS, it has got the details you are looking for:

Unable To Access BI Reports With Custom Job Role (Doc ID 2110929.1)

Thanks.

Prateek Parasar - GTUK, ACE Pro

I don't think there is a way that you can only create new data model but not edit existing ones.

Tom Strudley

One potential way of doing this is to assign the BI Publisher Data Model Developer Role privilege to the custom role and then lock down every existing data model update access to BI Administrator Role only. If that does work you'd need a handover process between the custom role user and administrator to lock the new report down

Prateek Parasar - GTUK, ACE Pro

Good idea. Not sure how feasible it is. Dirty way but still can do the job

Tom Strudley

Yeah it's a tricky one, I'm not a big fan of this approach (although I do like objects to be locked down). But it's the only potential approach I can think of right now, I suppose the privileges were built in this design to leverage in similar situations to this

Prateek Parasar - GTUK, ACE Pro

I would hope they have seperate privileges for create, view and edit. Should do at most places