nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Oracle Communities

Oracle AI and Analytics

Child Item

Can we apply data/row wise security to Weblogic user in Oracle analytics server

satya_nvs

Hi,

Is there a way to apply data level/row level security in Oracle analytics server. Can someone help with the steps.

Thanks in advance!!

Thanks,

Satya

Find more posts tagged with

Accepted answers

Steve F-2

To conclude and summarize this thread.

When Enabling row-levels security filters with OAS in the semantic layer (repository/RPD), the filters do not apply the the BIServiceAdminstrator role. This is only related to the "weblogic" user because you have assigned that specific user the BIServiceAdministator role explicitly, or implicitly (via groups).

You can implement and enforce row-level data security in both the repository and in the database, if you need.
In your case, you can also remove the role from the user (in OAS 2024, you can use fine grain permissions if necessary)

Resources

About Data Filters and Row-Level Security

https://blogs.oracle.com/analytics/post/best-practices-for-implementing-rowlevel-security-in-oracle-analytics-1

All comments

Sumanth V -Oracle

@satya_nvs - Applying data-level security to the WebLogic or admin user is not recommended. Here’s why:

Administrator Role: WebLogic and admin users are typically assigned superuser privileges, allowing them to have unrestricted access to all system components, configurations, and data. Restricting their access with data-level security could interfere with their ability to manage the environment effectively.
Best Practices: Instead of applying data-level security to WebLogic or admin users, it is better to ensure these users are limited to necessary roles and responsibilities. Data-level security should be applied to regular users who need access control over specific data.

Therefore, it's best to avoid applying data-level security to the WebLogic or admin user and instead focus on properly managing privileges for operational roles.

satya_nvs

Hi @Sumanth V -Oracle i totally agree with your points. But we have got a requirement for couple of our HR reports to apply the data security for weblogic as the weblogic password is available with the core development and prod support team.

Just wanted to check if the datalevel security can be applied to weblogic only for those reports or not.

Thanks for your suggestions.

Satya

BalagurunathanBagavathy-Oracle

@satya_nvs It is not possible as the user 'weblogic' has BI Administrator application role.

Steve F-2

Resources

About Data Filters and Row-Level Security

https://blogs.oracle.com/analytics/post/best-practices-for-implementing-rowlevel-security-in-oracle-analytics-1

Top Leaders

Gianni Ceresa 344

Malik Sikandar Hayat 155

Brendan T 105

bae15 105

User_TD15Q 90