Categories
- All Categories
- 15 Oracle Analytics Sharing Center
- 15 Oracle Analytics Lounge
- 208 Oracle Analytics News
- 41 Oracle Analytics Videos
- 15.7K Oracle Analytics Forums
- 6.1K Oracle Analytics Idea Labs
- Oracle Analytics User Groups
- 76 Oracle Analytics Trainings
- 14 Oracle Analytics Data Visualizations Challenge
- Find Partners
- For Partners
BIServiceAdministrator role is gone after migration
Hi experts,
I installed OBIEE 12.2.1.2.0 on our dev server. At that time, weblogic user had a role BIServiceAdministrator assigned to it.
After that, I did migration of catalog and rpd from 11g to 12c (using the normal process which is given here)
However, after the migration, I can't see the BIServiceAdministrator role in the em anymore. Because of this, the weblogic user has lost all the Administrative rights.
Can you guys please advise me what should I do to get the BIServiceAdministrator back? Or if you have any other advise, please let me know.
Thanks,
Vishal
Answers
-
In my experience when you perform a migration from 11g to 12c then out of the box BIEE 12c application role gets overwritten with BIEE 11g application roles.
But if your migration was successful and your 11g Catalog is in place now in 12c environment then you shouldn't be facing Administrative access missing issue as security on catalog now should be same as 11g given that you had followed below mentioned step post migration:
In below mentioned link under section "3 Post-Migration Steps for Oracle BI EE" Sub Section "3.6 Adding Roles and Permissions"
So in your OBIEE 12c environment
a) In Weblogic Console create Groups BIAdministrators, BIConsumers and BIAuthors
b) Now make sure that your Admin User 'Weblogic' is part of BIAdministrators(as this was the default Admin Application Role in 11g) along with Administrators Group and verify that this BIAdministrators Group is part of BIAdministrator Application Role
c) Restart your BIEE Services(OBIPS1,OBIS1,OBIJH1 etc) and retest your access.
0 -
I always found this suggestion supremely misleading. Why recreate the old names when going forward it's not "BIAdministrator" anymore but "BIServiceAdministrator".
You can use the runcat command to replace role names in the webcat and the BI server command line to do the same thing in the RPD. jazn-wise it can be a very simple rename inside the file (if you're doing it solidly) or otherwise WLST with aen export, rename and the re-grant.
This way you end up with a nice 12c-style security landscape.
0 -
There is no need to recreate old Application Roles only the Groups as it isn't taken care by the migration process.
Not completely my suggestion mentioned in Oracle Product Document
0 -
I know it's just something that bugs me
0 -
i think that recommandation of Syed are right
in your OBIEE 12c environment
a) In Weblogic Console create Groups BIAdministrators, BIConsumers and BIAuthors
b) Now make sure that your Admin User 'Weblogic' is part of BIAdministrators(as this was the default Admin Application Role in 11g) along with Administrators Group and verify that this BIAdministrators Group is part of BIAdministrator Application Role
c) Restart your BIEE Services(OBIPS1,OBIS1,OBIJH1 etc) and retest your access.
In your Admin tool
a) got to manage Identity
b) create application roles with same name of Console groups
0 -
Thanks Syed!
0 -
Thanks Christian... I did it the way you recommended and it's working!
0