Oracle Analytics Cloud and Server

Home› Oracle Analytics› Oracle Analytics Forums› Oracle Analytics Cloud and Server› Oracle Analytics Cloud and Server

Categories

Welcome to the Oracle Analytics Community: Please complete your User Profile and upload your Profile Picture

Is it possible to have an OBIEE 12c user that only has access to one subfolder of Shared Folders?

Received Response
121
Views
4
Comments
AM_1
AM_1 Rank 4 - Community Specialist
edited Aug 13, 2024 5:04PM in Oracle Analytics Cloud and Server

Hi!

I need to organize catalog permissions as follows:

A certain role should not be able to access any folder in Shared Folders except one folder.

This role should be able to run any of the analyses existing in that one folder.

It would be possible if I could apply permissions on all the subfolders but for one role only while preserving all other permission of all folders intact.

Thanks

Alex

Answers

  • Gianni Ceresa
    Gianni Ceresa Mod

    Hi,

    Possible is possible, it's a fairly simple and common case.

    The things you have to define is what happen when a user has 2 roles: one being the restricted role and another not restricted: will the user be able to access any other directory?

    The answer to this will tell you what kind of approach you should take, if removing an app role from directories or you need to go full on with "no access" permissions (keep in mind that "no access" is stronger than anything else, you could even cut yourself out despite having an administrator role).

  • AM_1
    AM_1 Rank 4 - Community Specialist

    Gianni,

    Thanks for the prompt answer!!!

    Actually I tried to do this by giving a "restrictung role" no access on Shared Folders

    The user has 3 roles: "restrictung role", "BI Consumer", "Authenticated User"

    However when I log in with this user, I can see Shared Folders and all it's subfolders.

    How can this be?

    Thanks,

    Alex

  • Gianni Ceresa
    Gianni Ceresa Mod

    Shared Folders is a special thing, setting "No access" there isn't enforced.

    But set it to anything else and it will work.

    And you said that this role should have access to just one directory inside Shared Folder, so your test was anyway for something you weren't interested in ;-)

    Test it on one of the folders inside Shared Folder and you will see it does work as expected.


  • AM_1
    AM_1 Rank 4 - Community Specialist

    Gianni,

    This works for me.

    Thanks a lot!

    Alex