Access Output files from ESS jobs submitted by a different user without BI Administrator Role
Organization Name (Required - If you are an Oracle Partner, please provide the organization you are logging the idea on behalf of): Deloitte
Description (Required): Users should be able to access and download output files of scheduled processes submitted by a different user without having the BI Administrator Role. Example of such processes: Import AutoInvoice, Create Accounting, Print Receivables Transactions, etc. There should also be an option to schedule and deliver the output file of such processes to an email id.
Use Case and Business Need (Required): Users should be able to access and download output files of scheduled processes submitted by a different user without having the BI Administrator Role. Example of such processes: Import AutoInvoice, Create Accounting, Print Receivables Transactions, etc. There should also be an option to schedule and deliver the output file of such processes to an email id. There are number of users who would need to view the output and take corrective steps accordingly. Any user needing this access solely would need the BI Administration role (as per the current product functionality), which opens up a number of additional and sensitive access for the user. This should not be the case.
Enhancement Request / Service Request: 3-27719323701 : Access to review submitted processes and republish them
Comments
-
Yes, we would like this, too. Even those with BI Administrator Roles cannot see/download the ouputs, we can only download the logs and see the job was run and the parameters used.
0 -
Hi @User_D2ACY and @User_OJPL2 (@Jeff Hare CPA CISA CIA) - This idea has also been created making this a duplicate. Please see the URL: ESS Job Monitor Role should view BI output without BI administrator Role for Jobs submitted by other — oracle-ccc
Strongly agree with this idea though and upvoted.
Oracle! Please pay attention to this.
1 -
Yes, must have feature
0 -
Is there any update on this idea. This is very much required and is currently an audit concern now. How can we provide BI admin to large number of users just to download a report output. This is a basic functionality.
6 -
This is an essential feature from Security and Compliance point of view. We cannot assign the elevated access like access to BI Administrator Role to see or download the outputs. We need to adhere to least access concept. Please add this feature.
1 -
There are multiple incidents reported by users stating that they are unable to download the ESS job output. We need to have this feature implemented.
0 -
Users need download the ESS job output without BI admin, any update on this?
0 -
This feature will be very useful to download the reports without having BI admin access.
0 -
This feature will be very useful.
0 -
This feature will be very useful
0 -
Will be very helpful to have this at Kroger.
0 -
Oracle, this ER is over 2 years old. Please fix this security hole. The solution CANNOT be just giving users BI Administrator!
1 -
Will be very helpful indeed!
0 -
We need to give BI admin access to business users just for giving access to download the report output. This is big security concern.
Oracle, please address and resolve this issue.
0 -
It has been over 2 years since this issue was reported and is a major security and SOX compliance gap in Oracle ERP. This is a serious concern now. Request you to fix this as soon as possible.
0 -
It's been 2.5 years and still no update from Oracle. This is a serious concern now. Request Oracle to pay attention to this idea.
0 -
Hi @User_D2ACY,
This required we can achieve without assigning "BI Administrator" role to users. Follow below steps:
- Using Security Console create a custom abstract role to allow an user to see all the ESS job processes by assigning the application role ESS Monitor Role.
- In same Custom Role, navigate to Data Security Policies tab and click on on Create Data Security Policy button.
- Give a name to Policy Name and choose Start Date.
- Search for Database Resource: ESS_REQUEST_HISTORY
- Choose for Data Set: All Values
- As Actions select: ESS_REQUEST_OUTPUT_READ
- Assign the role to the required users.
- Once the above abstract role changes are completed save it.
- Run the ESS process: Import User and Role Application Security Data
- Logout and login as the user which have assigned the abstract role and user should be able to see in Scheduled Processes all the logs and output files of the ESS jobs.
Refer to below Oracle support note for more details.
How to View the Output of an ESS Jobs Submitted By Another User Based on Role? (Doc ID 1980772.1)
2
