OBIEE 11g-Need users and roles

Sulochana

How to get list of users and their assigned groups/roles in OBiee 11g?

Gianni Ceresa

It depends on your security setup.

If you use an external authentication provider the list of users isn't owned by OBIEE. The groups/role also depends on your security setup. It can come from the external provider or from a database table etc.

Sulochana

We are using LDAP Security

Sulochana

We are using LDAP Security

[Deleted User]

To be more specifc: "assigned groups/roles" are two completely different things so it's very unclear what you're actually asking for

- "groups" coming from the LDAP in your case and/or from the WebLogic-embedded LDAP

- users can be asssigned to groups as direct members

- groups can be assigned to groups and hence users inheriting them through thwir own groups

- application roles are the translation of external (in terms of OBIEE) security principals into the internal (again in terms of OBIEE) world

- application roles can be made up of users, groups and application roles

So a user can be a member of an effective OBIEE application roles because

- he is directly a named member of that application role OR

- becuase he is a direct member of an LDAP group which in turn is a member of that application role OR

- because he is a member of an LDAP group which in turn is a member of an LDAP group which is a member of that application role OR

- because he is a member of an LDAP group which in turn is a member of an LDAP group which is a member of an application role  which then is member of an LDAP group which in turn is a member of an LDAP group which is a member of that application role OR

- etc. etc.

You have to grasp the concepts and then think again about what you actually want to have and see. There is no magic "read my mind and give some output" configuration option.