BIP Cloud - Deployment role missing

Shrujal Patel

Organization Name (Required - If you are an Oracle Partner, please provide the organization you are logging the idea on behalf of):

CFA

Description (Required):

Please note this idea is related to deployment of BIP reports on "BIP Cloud"

Problem Description

---------------------------------------------------

Currently inorder to deploy a report to BIP Cloud, we need to ensure " deploy user" has "BI Administrator Role".

We have 2 types of reports

1. Sensitive Report - Report that returns sensitive financial data

2. Non Sensitive report

We have noticed that we are not able to deploy the reports using SOAP AI (from our CICD process) https://<erp_host>.us6.oraclecloud.com/analytics-ws/saw.dll?SoapImpl=webCatalogService "pasteItem2" endpoint if the BasicAuth user (used to invoke this API) doesn't have "BI Administrator Role"

Our security team is concerned about granting "Admin Role" to a deployment user as we want to restrict "Run" access to our sensitive BIP reports for functional users only and want to ensure the deploy user has bare minimum privileges and doesn't have access to actual data generated by these reports or has copy/run report access.

Use Case and Business Need (Required):

Security - We need to limit access granted to deployment user.

Enhancement Request / Service Request: 3-31032865601