We need a way for non-admin users to view the backend/physical SQL queries executed by reports (via Session and Query Logs) without granting them full administrator access.
OAC's custom Application Role model (Console > Roles and Permissions) allows selecting fine-grained permissions instead of assigning predefined roles. However, "Session and Query Logs" (viewing active sessions, cursor cache, and SQL statements in Console > Administration) is not currently an individually selectable permission — it is bundled only into the full BI Service Administrator role, confirmed via Oracle SR 4-0003677533.
Business need:
Organizations with audit/compliance requirements often need to grant specific users read-only visibility into report-issued SQL for auditing purposes, without granting the broader administrative capabilities that come with BI Service Administrator (Database Connections, Roles and Permissions, Safe Domains, System Settings, Security Management, Snapshots). This creates an unnecessary segregation-of-duties conflict: teams must either over-provision access or forgo audit visibility entirely.
Request:
Add "Session and Query Logs" (or "Manage Sessions" / "View Query Logs") as a standalone selectable permission in the OAC custom Application Role permission catalog, so it can be assigned independently of full BI Service Administrator access.
