nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Oracle Communities

Oracle Analytics and AI

Child Item

Efficient way to assign FDI licenses to Users

Sawrub

Hello All,

What is the most efficient approach to assigning FDI access to several thousand users, given the complexity of our role structure? The main challenge lies in the fact that we use 'Custom Roles' which must be mapped to 'Application Roles'. Additionally, each user may be associated with multiple custom roles, making the assignment process non-trivial."

thanks,

Find more posts tagged with

FDI

Fusion AI Data Platform

Accepted answers

JohnW-Oracle

Hello @Sawrub,

Hopefully, you have SSO enabled and you have setup the sync between FDI and FA. That is the most important factor in efficiently managing user security. However, some setup remains and you would need to create job-specific Group in FDI. Users would be assigned to these groups. The Groups are made up of Application roles which consist of duty and data roles. You can assign the license application roles to your custom groups if required.

If each user requires a unique combination of custom roles, you may end up with a lot of Groups.

The documentation on this is here:

https://docs.oracle.com/en/cloud/saas/analytics/25r3/fawag/manage-users-groups-application-roles-data-access.html

Hope that helps.

Regards,

John

All comments

JohnW-Oracle

Hello @Sawrub,

If each user requires a unique combination of custom roles, you may end up with a lot of Groups.

The documentation on this is here:

https://docs.oracle.com/en/cloud/saas/analytics/25r3/fawag/manage-users-groups-application-roles-data-access.html

Hope that helps.

Regards,

John

Soonam

https://community.oracle.com/products/oracleanalytics/discussion/comment/70926#Comment_70926

Hi JohnW,

Thanks for explaining it nicely.

I have some questions related to the access, that is given through the default configuration.

Based on this this guideline, a system group now controls the login and also the specific application roles for duty and data. My question is if a system role is given to a user does it mean by default he/she will be able to access all the subject areas. Eg. FAW Licensed ERP Author, the system role is an Author and by default there will be many application role attached to it. Once one user is added to this group in OCI, the user will be able to login to FDI with SSO and will also be able to see the subject areas.

Will not that be a concern? Because by default the user will be able to see everything in ERP(with the default application roles attached to FAW Licensed ERP Author).

One more question is does Fusion role also has direct impact on FDI data access?

System Groups

Regards,

Soonam

Silvio Garber-Oracle

As you mentioned, a system group controls the login. But without appropriate application roles for duty and data, the user won´t be able to access any subject areas. When you assign the FAW Licensed ERP Author group to a user, by default there won´t be any additional application roles assigned.