How to update user permissions memberships immediately with new role

Question

Working purely with WLS security for users and groups in OBIEE 12c, and roles in Fusion Middleware.  Nothing extraneous, nothing out of the ordinary.  Plain vanilla security.

Yesterday, we created an OBIEE user, and assigned him to roles A and B.  He signed in and out several times, and everything was working as expected.  Today, we also assigned that user to role C (in addition to A and B) .

Also today, we created a new user, and assigned roles A, B, and C to that user.

When User #2 signs in, he sees that he is a member of all 3 roles.  The OBIEE experience reflects what we should see with all 3 roles in place.

But User #1 still only sees that he is a member of roles A and B.  We wait an hour, two hours, he signs out, signs back in ... still only roles A and B are reflected in his OBIEE experience.  In Fusion Middleware, we can see that we have indeed assigned him to Role C, but OBIEE doesn't recognize it.

Why is this happening and what can be done about it?

User_HHQJ3 · Answer

Gianni, I'm going to cancel this post and rewrite it with greater clarity.

User_HHQJ3 · Answer

Hold on, I think I reported incorrectly.  Here is what my QA is telling me, and this is what I have also experienced in the past:  "We add a new permission to a role.  That role is assigned to a new user.  The permissions work fine for that new user.  But existing users who were already members of the role are not getting the updated permissions right away.  Seems to be some kind of caching mechanism that is preventing the immediate update to an existing user."

User_HHQJ3 · Answer

In the past, I've seen it on my OBIEE systems on Windows.  Now I'm working for a different company, using Linux, and we're seeing the same behavior that I've seen for years in Windows.