Currently if you schedule DV bursting to a distribution list the row level security is not applied.
If distribution lists could be defined within OAC then it would identify the individual users and apply row level security during bursting
Interesting idea in the idea lab. I wonder if it's more of a bug, security topic or enhancement. + @Alan Lee - Oracle-Oracle and @Adam Bloom-Oracle . In any case, I voted for it. Thank you @Victor H
+ @Sandeep S. Chauhan-Oracle
The bursting feature is only supported for users selected from OAC identity management system. Row level security is defined at the user level. Even though a distribution list may contain email addresses that are the same as users in the IDM, there is no explicit mapping. The best way to send to a group of users for bursting is to include these users in custom app roles that sit inside IDM.
We will make this more clear in the documentation.
@Alan Lee - Oracle-Oracle Thanks Alan.
Is this something that can be achieved in the current version?
How would we define these custom app roles? If the distribution list is defined in the client email server. how will OAC know the individual users for row level security?
Yes, this is supported in the current release. You can create a custom app role by following documentation here: https://docs.oracle.com/en/cloud/paas/analytics-cloud/acabi/configure-what-users-can-see-and-do.html#GUID-7547E519-07B5-414A-B664-771BA753B2FB
Assign users that you want for the scheduled delivery. Then you can specify the app role in the recipient field of the schedule.
Thanks Alan , this is a useful workaround but creating roles is usually done by totally different users.
I think it is still needed to add distribution lists in OAC as their one separate object, We already have many shell roles for folder structure access and would prefer to minimize them.
Right now, OAC offers pre-built pages and watchlists related to NSAW. At our University, we do not need these pages, and we want to delete them entirely. We've been told in response to our SR that all we can do is keep "Access" limited to only the default admin and sysAdmin roles. This prevents regular users from seeing…
It would be nice to have a way to right click on an object (subject Area, Column, Calculation, etc.) in the Data Panel and show where that object is referenced in a workbook = canvas, visualization, filter, calculation, data action, etc.) In Workbooks with multiple canvases and multiple subject areas, we are left to hover…
We want to automate the workbook export to .dva file and import this into another OAC instance using REST API, The goal is an OCI DevOps pipeline that can promote (a) a whole folder, (b) a single workbook, or (c) several workbooks in one run to another OAC instance, and print a status result at the end. Blocker: Export and…
When Oracle Analytics AI features find an anomaly, trend or key driver, let authors save those results as a dataset or subject area. Each run would add rows with the metric, the date found, the expected versus actual value, the severity, the main drivers and the filters applied. Authors could then build workbooks, schedule…
We use the snapshot to update AppRoles members. But we would like to disable catalog content to have smaller snapshots and create snapshots faster.
