Give access to role to edit dashboards and reports but not to save them

User_IEX33

Hi,

How can i implement to Give access to Application role to edit dashboards and reports but not to save them in OBIEE 11g, what kind of access should be given to role and what not to give. so that users in that role can edit reports and dashboards but not save them.

Gianni Ceresa

Hi,

What's the point of being able to edit a dashboard but not save it?

For the analysis I can see a need for it, but for the dashboard a lot less (as a dashboard is a set of analysis, so why don't you create the required dashboard directly?).

At the catalog level they need to be able to open objects but not write them. In this kind of case users generally create a copy of the analysis or dashboard in their personal folder (or somewhere else where they are allowed to save content). So they open the original object and then it's "save as" in the analysis or copy/paste in the catalog for the dashboard.

So the important thing is to not give them a write permission on the original objects, so they act as "templates" in a way.

User_IEX33

Thanks for the reply, we are trying to implement in Prod so that developers can edit and not save the Reports and Dashboards this is for debugging issues in prod, so that they don't save them directly in prod. so trying to check anyway i could implement.

[Deleted User]

Not really because that doesn't make sense.

A proper process would be: they copy the object(s) to their own folder or a debugging folder and work there

Read rights on the prod objects+folders and write rights on the debugging/own folders. Pretty standard.

Gianni Ceresa

Let them save in their personal folder for their debugging needs or give them a folder in the catalog where they can do their things and then you delete the whole folder once debugging done.

The less you touch the security of your prod for that need, the safer it is.

User_IEX33

I follow what you said christian, even i think the same-thing  copying to Myfolder and work, Thanks for the suggestion. Let me work on that. Thought i could give edit access to role but not save the report.

User_IEX33

Thanks Gianni , thanks for the suggestion will follow and try to implement.

Gianni Ceresa

Good luck, remember to come back posting a feedback if you actually solved the thing (and with some hints on how if in a different way for others with similar needs) and then close the thread.

Venkata Yaswanth Ramisetty

Hi,

You can provide BI Author role to the existing group so that they can "edit" and do a "saveas" of the dashboard or report to their "My Folder".

Hope this helps.

Thanks,

Yaswanth

User_IEX33

Thanks Yaswanth, I have given BI Author role to Dev Role which has users and in Access to answers -  BI Author role has access.  But when i edit the report i get Access Prohibited You are not currently authorized to use Oracle BI Answers. What i am missing here so that users can edit the reports.

User_IEX33

Sure , i will provide the steps if i can resolve the issue. Thanks