Oracle Analytics Cloud and Server

Welcome to the Oracle Analytics Community: Please complete your User Profile and upload your Profile Picture

Privileges for datamodel command-line scripts

Received Response
131
Views
17
Comments
Boček Petr
Boček Petr Rank 4 - Community Specialist

Hi all,

   please does anybody know where to set up privileges for using commands downloadrpd, uploadrpd and all of those? It looks it works natively for weblogic but my account is set up in EM the same way and I can't run the commands under my account. Any idea where is this hidden?

Many thanks

Petr

Tagged:
«1

Answers

  • Joel
    Joel Rank 8 - Analytics Strategist

    Can you elaborate? These commands that you have mentioned are executed from the command line and they should be run by a BI Administrator user. Is your user setup as a BI Administrator?

  • [Deleted User]
    [Deleted User] Rank 10 - Analytics Guru

    Set up privileges for what exactly? Objects in the RPD? What are you trying to do precisely?

  • Boček Petr wrote:my account is set up in EM the same way and I can't run the commands 

    How?

    Where the account come from? (EM isn't a LDAP)

    What privileges / policies does your account have?

  • Boček Petr
    Boček Petr Rank 4 - Community Specialist

    thanks all for reacting. I'm running for example this command:

    datamodel.cmd downloadrpd -O {path} -SI ssi -U {user} -P {User pass} -W {rpd pass} -S {server} -N 9502

    If I run it under weblogic it is wroking. Running under my account is failing to

    Connection failed, the server processes may be down, the host name, port number, service instance, or protocol (http/https) may be incorrect. Please check server logs, such as bi-lcm-rest.log.0 and obis1-diagnostic.log..

    My account is imported by LDAP and set as administrator the same way like weblogic is. So in EM a canůt any diferences between my account and weblogic account.

  • [Deleted User]
    [Deleted User] Rank 10 - Analytics Guru
    Boček Petr wrote:My account is imported by LDAP and set as administrator the same way like weblogic is. 

    First question: Are you really sure about that? Is it really a full admin?

  • Boček Petr
    Boček Petr Rank 4 - Community Specialist

    Tricky question Christian :-) I think I'm sure, but OBI still ensures me I can't be ever sure :-)

    So my contra question would be how or where to check it? Something says me that to be a part of BI administrator role (where weblogic is) is not enough is it?

  • [Deleted User]
    [Deleted User] Rank 10 - Analytics Guru

    I know X-D

    The point is I managed to do this with accounts other than weblogic and it worked. So I'd say do the following:

    1.) Create 2 new test logins in the WLS security realm and call them "justEMadmin" and "fullWLSadmin"

    2.) "justEMadmin" - give him admin rights in enterprise manager by assigning him to BIAdministrator application role

    3.) "fullWlsadmin" - give him admin rights by making him a member of the WLS administrator group which is then also a memeber pf the BIAdministrator application role.

    see how that works for you

  • [Deleted User]
    [Deleted User] Rank 10 - Analytics Guru

    By the way the initial question remains: What are you trying to do?

  • Boček Petr
    Boček Petr Rank 4 - Community Specialist

    I created a specific system of MUD. Where I created scripts to downlad rpd, do some work (offline), create patch, patch rpd and upload online to dev and test environment. It works perfect for almost two months now but the scripts are using weblogic account. This scares me a bit. So I would like to change this to download and upload rpd on users accounts.

  • Boček Petr
    Boček Petr Rank 4 - Community Specialist

    Hm it looks it still doesn't work. I created those two new users and fullWLSadmin I added to the group Administrators in console. Second one justEMadmin I added only in EM to BIAdminstrators. None of those can run the command above. The error message changed (Connection failed: 401: Unauthorized) but I think the reason is that this is local account.

    Or am I doing something wrong?