Extract User List by Specific Roles

3137494

HI All,

I'm researching ways to pull out a user list in OBIEE 12C and filter by specific group/roles. Right now, we use a script we got from OBIEE blog that pull out entire user list, but I want to pull only by specific groups. For example, we have groupA, groupB, and groupC for different groups of user. I want to pull out 3 different user lists by their specific security group. I don't know if there is a different script out there (that I can't find it from Google), or someone can help to modify the current script we have. Any help greatly appreciate!

Current user list script: https://obitechnical.wordpress.com/2015/05/28/obiee-11g-how-to-get-list-of-users-and-their-assigned-groupsroles/

Thanks,

Ying

[Deleted User]

First of all: What do you want? By ROLE or by GROUP? These are totally different things and concept and you seem to be using those words interchangeably which in itself is probably a big part of your problem: you are not calling the things by their proper name and so get mixed up.

Gianni Ceresa

+1'000 to what Christian said

There are some basic concepts in OBIEE security and in your post everything is mixed.

Also the concept of "extraction" would deserve some extra details : do you want a simple web page listing them on screen (the link you posted) or do you actually want a real extract (generating a file somewhere maybe in an automated way) ?

Also do not forget that asking users to OBIEE is often the wrong place as in OBIEE you have a LDAP group being member of an application role, and so you ideally have to ask the LDAP for which users are members of that group, as OBIEE doesn't impact that at all.

So ... what are you trying to achieve and why? What's the need making you look for this?

3137494

Ok. My apology, since in our applications, role and group have same assigned names when assigning for our tenants. In this question, I'm talking about security group in the weblogic. 

To answer the question, right now we have approximately 600 users in our system, and half of them are not active. We have to manually pull out the user list and filter them on an excel sheet by each tenant groups and send them out to each tenant group to review. (as in the post, I used the same method in the link that will display entire user list in a dashboard) We want to automate this process by having a list of all users by each tenant group so they can view the report themselves without manual labor.  We also have usage tracking in place. However, we realized usage tracking is not displaying all the users in the system. It only displays users that access specific subject area. For those that didn't log in, or logged in but didn't open dashboard, Usage Tracking is not displaying them. Ideally we want to integrate both, but for now, initially plan is to be able to pull out all user lists by tenant (include those inactive accounts).

And yes, I'm a junior OBIEE admin so I might confuse with all the exact term/idea/concepts. Any help/correction is appreciated.

Thanks,

Ying

[Deleted User]

Ok so next question: Are all your users and groups + their respective assignments (users to groups) stored inside the WLS LDAP? You're not using an external authentication mechanism like MS AD or a bespoke LDAP?

3137494

Hi Christian,

Yes, they are stored in the WLS LDAP. I believe that's where the script is pulling the user list from.

Ying

[Deleted User]

Then just use Michael's approach:

https://mverzijl.wordpress.com/2012/08/23/weblogic-wlst-get-users-and-groups/