OTBI Catalog object auditing.

Kali Paluri-Oracle

Organization Name

MTN Group Management Services (Pty) Lt

Description

OTBI Reporting is centralized. It has multiple custom reports and it has multiple folders which are spinned across multiple countries using the same instance. 

In some cases users are moving the reports /folders/dashboards from one custom folder to another custom folder. It is becoming very difficult to track who is doing that.

We need to have an auditing in place to identify who is moving the reports/folders/dashboards

Use Case and Business Need

Users are moving the reports /folders/dashboards from one custom folder to another custom folder. It is becoming very difficult to track who is doing that.

We need to have an auditing in place to identify who is moving the reports/folders/dashboards and who is deleting and changing the permissions at the dashboard/folder/report level

More details

Auditing report should be present to check who has moved/deleted/changed permissions on folders/BIP reports

Original Idea Number: daf52c0cb1

Cpalomin-Oracle

Auditing is always a good thing to have

Kali Paluri-Oracle

Auditing is required to track from the security standpoint.

Nick Holland

totally agree there's more to be done in this area - We would like to publish a listing of all our custom reports , dahsboard and alerts not just OTBI along with permissions and who changed what when. Once it's in Excel or some other tool, we can supplement this with links to Requirements, Functional Specs, Tech Specs and will help with maintaining configuration control. There are some other similar posts you might want to vote:

https://community.oracle.com/customerconnect/discussion/552882/auditing-reports-to-capture-changes-to-the-permissions-of-the-bi-catalog-objects

https://community.oracle.com/customerconnect/discussion/595650/otbi-catalog-object-auditing

https://community.oracle.com/customerconnect/discussion/41530/report-catalogs

Parag Hiremath

Upvoted -this is a required feature.

Andrew Mc

Much needed - need a way to audit who makes changes to reports and the folders. Upvoted.

User_IDS9I

Upvoted. This is a required feature in auditing.

MandeepGupta

Upvoted. This is required for auditing.

Anita Kiss

I agree we need some audit trail on this. At our company we did some safeguarding that in the "Custom Folder" only support team and few super user can modify reports even OTBI Analysis type of reports.
Users have access to play and discover only in their personal folders. If they have a report what they want to share they can contact support team and we can copy out to report from their personal folder and move it under the Custom Folder structure.

Ramprapanna Bhattacharya-Oracle

Hi,

The following should be followed from the Day 1 of project implementation and should be followed during entire project life cycle to avoid such scenario at the first place.

Using catalogue (Folder-Level Restrictions) Permissions judiciously.

Restricting Admin / Author privilege to only few users with proper training and guidelines on report amendment / catalogue management

Not providing everyone the “author” access in the shared folder, rather if anyone wants to amend, they will only do in a personal copy in their own folder.

Functional area-based application role driven restrictions in Shared folder (object level security) – example AP role wont access GL folder and content, Learning Team won’t have access to Payroll folder and content.

Link:

Creating Analyses and Dashboards in Oracle Transactional Business Intelligence

(Check the section: Assign Access Permissions)

Regards

Ramprapanna Bhattacharya