Limiting number of rows a user-role can download from dashboard/dv/analysis/answers and BI Publisher

User_OFZFK

it is good to have ability to enforce additional security by limiting number of rows a user-role can download.

we wanted the user-role to have ability to VIEW all the data within dashboards or answers without any restriction of data (not to be confused with data/row level security) but when the user is downloading, we wanted to enforce some restrictions to avoid data theft or sharing due to either cyber security issues like spam, phishing or something similar like unauthorized activity.

Aman Jain-Oracle

Hi @User_OFZFK , Thanks for posting your question.

It’s an interesting one! Based on my understanding, as of today, there is no native support available to limit the number of rows a user or role can download, while still letting users view all data in dashboards or analyses.

One possible workaround is to create a duplicate dashboard containing limited data and grant download/export privileges only for that version. In the main dashboard, you can restrict export/print/download privileges. This isn’t a perfect solution, but it does provide some additional control over data downloads.

You might also want to post this idea on the Oracle Analytics Idea Labs for review by the product development team.

RVohra

It is definitely not supported, and you might need to look at a custom solution. Please research and see if there is a BI Privilege Export provided by Oracle, you might be able to create a custom role without this privilege.

Assign this to the User whom you do not want to give the default Export functionality and then look at a BIP report where need to come up with a logic to limit the number of rows. Hope it helps!

Gianni Ceresa

Hi @User_OFZFK ,

Aman said it all in the first reply above… If a user can execute an analysis/workbook with access to the whole data, the download will follow the same rule. Aman gave you a possible workaround, which will require management work on your side to handle the double sources, unlimited and limited, all the time.

Or, as he said, you can post an idea explaining the feature you would like to have, and product management will evaluate it for future development.

SteveF-Oracle

Hi @User_OFZFK

Check if this helps for Analysis/Dashboard/Workbook datasets

In Oracle Analytics Cloud (OAC) since May 2023 > Restrict Data Export and Delivery
This is under 'Performance and Compatibility' in the Console > Advanced System Settings.

Restricts the maximum number of rows users can export or deliver by email in both formatted and unformatted content. Data export and delivery limits depend on the size of your Oracle Analytics service.

In Oracle Analytics Server (OAS) since OAS 2023 > About System Settings. (same setting). This would override any configuration in the Presentation Server configuration file.

I am pointing out the general feature of limiting export amount for the entire population, not specifically linking it to a role. The fine-grain privileges/permissions exist for disabling export all together for a role or user.

For limiting the amount of exported rows, per user or role would require an Ideas Lab request (enhancement)

Publisher may have other options, you can ask that question separately in the Publisher channel/forum.

User_OFZFK

Thank you each one of you for suggestions.

after brainstorming reg the requirement, it is understood that complete separation of reports download vs viewing, rpd data source(all three layers) and using the row limits in the one of the data source where is download is enabled and no row limit on the view only data source where download is disabled should do the work as workaround. but we are live and 1000+ reports. so its a project by itself.

i will post this idealab and update if i see a response

thank you

RVohra

Thanks for the update, sounds like a good plan.