nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Oracle Communities

Oracle Analytics and AI

Child Item

oracle weblogic admin console 12c : assigning users to groups

mia101

Hi ,

I am trying to set up different security permissions for users when accessing obiee 12c. I have read about it in various documentations and other discussions, but for some reason I am running into trouble. I know that when setting up the permissions you have to first assign the user to a group on web logic ( ie: BI_Admin) , and than assign that group to the admin role on enterprise manger in order for the user the inherit admin permissions on BI . However, I am unable to add an user to a new group on weblogic which is where I am facing a problem. When I click on an user and than the groups tab to assign them , it does not present me with the option to add the user to a group instead it just displays the parent group(s) they already belong to. Is there away around this or is there another way to assign security permissions to users?

** Also as background knowledge OBIEE is configured using Active Directory, which is where it is getting all of the users from.

Thanks in advance.

Find more posts tagged with

Accepted answers

All comments

ArijitC

IF OBIEE is configured using Active Directory then how you can expect to add user using weblogic. Add users to active directory group and those users will show up in weblogic.

Thanks

Arijit

ArijitC

One More thing please update your profile add a name to it. Replying to 13f24b9f-ed83-46e3-964c-fb39dcd56bcb feels like replying to robot

Arijit

mia101

Hi Arijit,

I am not trying to add users but edit the permissions of the users in BI by adding the existing users to a new group because currently everyone that logs in is defined as a consumer. From my understanding and readings it said that you have to first define a group in web logic to add the users to and than define the permissions of that group on enterprise manger.

In essence I am trying to update the permissions of select users in BI without having to change the configuration active directory.

Hope that makes it clear.

Mia

ArijitC

So, You have only one group set up in AD and everyone of them in that group gets consumer access?

I guess better option is create different groups in AD. like say

Then in EM add that group to specific application role.

Thomas Dodds

"In essence I am trying to update the permissions of select users in BI without having to change the configuration active directory."

Rather it is a better approach to add users to AD groups that represent their BI roles then import into WLS and map to application roles in EM. @ArijitC has shown you the proper way. This way you can use your corporate access request process to have people added to appropriate groups and thus roles without another step in the process. Less likelihood for error.

Gianni Ceresa

You already got the best answers above, so I just want to point out few details.

You don't have to add a user in a group and than assign that group to an application role. You could directly assign the user to the application role if you want, but as they said above using a group is a good practice (because users can join or leave or change role in your organization, so managing it directly in AD is easier).

If you can't (for organizational reasons) add users in AD you can consider also using a database to provides the mapping between users and roles (keeping authentication of the user on AD).

But the best practice is what they posted above

mia101

Thank You