Logical SQL report does not display values from one subject area for a user

BSHAN_LNER

We have built a report on "Costing - Receipt Accounting Uninvoiced Receipt Accruals Real Time" and "Procurement - Purchasing Real Time", to display project details against the POs. But, for some users the values are blank. On checking documentation, 'Receipt Accounting Transaction Analysis Duty' and 'Purchase Order Transaction Analysis Duty' are required for the respective subject areas. The user has these roles assigned via a custom role and data access also assigned for the BU. But, if the seeded job role 'Purchase Analysis' is assigned with data access provided, then the project details display for the records. This seeded role has extensive privileges, so cannot be assigned to the users. Can someone advise what the solution for this issue can be.

Nathan CCC

Hi Bshan,

Granting a user job roles and duty roles does NOT give access to data. All it does is make it so when a user query that subject area that the system does not throw a database connection error.

For many subject areas the default data security policies will mean that your expected result for a user granted the duty role via a job role is to get either no rows found or maybe a few rows since sometimes you can see like your own transactions by default. In the pre-defined job roles or custom role that you have built to access this subject area you need to review the data security policies in the roles or inherited roles.

Then because these are ERP/SCM not HCM subject areas go to navigation My Enterprise work area Setup and Maintenance task Manage Data Access for Users to grant to your user with that role a security context matching the data security policy used by the subject area for example, ledger or business unit or inventory organization.

To understand why you get no rows you need to ask your bi administrator to grant your user or a role your user is granted or inherit using page Manage Privileges /analytics/saw.dll?PrivilegeAdmin privilege Issue SQL Directly and Manage Sessions so you can go to pages Issue SQL /analytics/saw.dll?IssueRawSQL and Sessions /analytics/saw.dll?Sessions to View Log. To find out what where clauses the metadata repository added at runtime in the physical sql(s) when you query your subject areas to do data security.

My solution to make a "read only" role is to take a copy of the job role, for example, in your case maybe Purchase Analysis and Cost Accountant, keep the data security privileges, delete all the function security privileges, delete all the roles except the transaction duty roles (you may want to keep some others roles/privs if you want some read only functions in the front end not in analytics like being abele to run existing publisher reports in reporting folders etc but these are not required to query subject areas in analysis or report data model in OTBI).

Oracle Fusion Cloud SCM
Subject Areas for Transactional Business Intelligence in SCM
G17771-01 25A

https://docs.oracle.com/en/cloud/saas/supply-chain-and-manufacturing/25a/faosm/Costing--Receipt-Accounting-Real-Time-SA-8.html#Description

Oracle Fusion Cloud Procurement
Subject Areas for Transactional Business Intelligence in Procurement
G17718-01 25A

https://docs.oracle.com/en/cloud/saas/procurement/25a/faopb/Procurement--Purchasing-Real-Time-SA-6.html

BSHAN_LNER

Thanks, that helped.