Oracle Analytics Forum

Welcome to the Oracle Analytics Community: Please complete your User Profile and upload your Profile Picture

Application Role-Group-User-Dashboard

Received Response
19
Views
5
Comments
User_TTHXA
User_TTHXA Rank 1 - Community Starter

Hi All,

is there any option we can download in an excel /csv file.

Application role→Group→Users

Application role→Dashboard

Regards

Joji Gubili

Answers

  • Carter Beaton
    Carter Beaton Rank 3 - Community Apprentice

    Which analytics application are you using? OAC or FDI. I am not sure if the following will work with FDI, but for OAC what you are asking for can be done via the catalog manager. There used to be a Catalog Manager app that was part of the Admin Tool install. That would give you a csv extract of the permissions. Today I believe it's all handled via REST API. So you will not have a direct app csv export, but you will have the flexibility to grab the info you want and export as you would like.

    The OA team has a video on the new Catalog Manager API. https://www.youtube.com/watch?v=E7dn3NcyYNg

    Catalog Manager REST API doc - https://docs.oracle.com/en/cloud/paas/analytics-cloud/acapi/api-catalog.html

    Look for ACL

  • Chere-Oracle
    Chere-Oracle Rank 6 - Analytics & AI Lead

    Hi @User_TTHXA ,

    In OAC you can download a list of users, direct and indirect, for an application role in the following way:

    1. From the Console, go to Roles and Permissions.
    2. Select the Application Roles tab.
    3. In the left-hand column, select the desired application role.
    4. In the right-hand column, select the Members tab and the Users tab.
    5. Click the "Show Indirect Assignments" button, click the OK button at the confirmation prompt, then wait for the list of users to appear.
    6. Click the Export icon: image.png
  • Chere-Oracle
    Chere-Oracle Rank 6 - Analytics & AI Lead

    If you can download and install the Catalog Manager version 7.5 or lower, and if you can download a Snapshot and extract the \content\catalog folder using an unzip utility, then you can use Catalog Manager 7.5 to open the extracted catalog offline. From there, you can use the Tools > Create Report command to pull the ACL (permissions) for Dashboard objects.

    Or you can use the Catalog Manager CL version 8.1 to do the same using command lines from your terminal.

  • As mentioned above, OAC provides REST APIs that get catalog items and their Access Control List (ACL). You can format the data returned by these REST APIs and use the data to build a report or visualization in OAC.

    This blog describes how to get catalog items and permissions based on the item type and create a report in OAC using the OAC REST APIs.

    Hope it helps!

  • @User_TTHXA , keep in mind how the security implementation really work.

    You didn't provide a product name (and version), therefore a number of the answers above do not even apply to you.

    The Oracle Analytics platform only knows the users it "saw", mostly when you use an external authentication source, the product doesn't scan all the groups and users in there. It only knows what it was explicitly provided with (groups and users, but no groups inheritance and not all the users of any given group).

    Also, "Application Role → Dashboard" doesn't mean much. Mostly because you can have full access to a dashboard and see an empty page, because you don't have any access to the various elements of a dashboard (assuming a "dashboard" is a classic object and not a DV workbook).

    Provide more information, starting from the product you are using, and what your target is, to avoid a XY problem and just random guesses.