Oracle Analytics Cloud and Server

Home› Oracle Analytics› Oracle Analytics Forums› Oracle Analytics Cloud and Server› Oracle Analytics Cloud and Server

Categories

Welcome to the Oracle Analytics Community: Please complete your User Profile and upload your Profile Picture

OBIEE Essbase Security Integration

Received Response
1
Views
4
Comments
1977947
1977947 Rank 3 - Community Apprentice
edited Aug 13, 2024 7:05PM in Oracle Analytics Cloud and Server

OBIEE 11.1.1.7 / Essbase 11.2.4

I would like to configure data level security in Essbase. OBIEE 11g and Essbase have been configured seperately. There are shared filters defined within EPM Shared Services that need to be leveraged for the purpose of data-level security on OBIEE reports.

Whats the best way to configure the security within OBIEE.

Cheers

Answers

  • cesar.advincula.o
    cesar.advincula.o Rank 6 - Analytics Lead

    Hello,

    0. As a best practice you should have a table ( RDBMS / OLAP)

       which you have the mapping between user/ application role/ group and your right the data access (entity, account, etc),

    1. Check my Entity Dimension:

      

       Ent.png

    2. Create an Initialization Blocks

    Session2.png

    3. Setting up your filter in your LTS (Logical Table Source) of your Essbase.

    LTS.png

    4. Check the Results

       OBIEEEssbase.png

    Kind Regards,

  • 1977947
    1977947 Rank 3 - Community Apprentice

    Hi Cesar,

    Thank you kindly for the detailed answer. We had recommended a table similar to what your are describing above to be built but that solution was turned down. The concern is that the data level security should be defined within Essbase only and maintained within Essbase.

    We would like to utilize SSO in the Essbase connection pool of the OBIEE physical layer, so that whatever security is defined in Shared Services for the authenticated user, still applies even when that user logs in from OBIEE.

    Based on that I would  like to know if there is any further configuration in OBIEE that will be required to apply data level security for the users and groups coming from Shared Services.

    Cheers

  • cesar.advincula.o
    cesar.advincula.o Rank 6 - Analytics Lead

    Hello,

    Check out this link,

    For Authorization and Integration HSS:

    https://gerdpee.wordpress.com/2011/06/17/integration-sort-of-of-obiee-11-1-1-5-and-hyperion-shared-services-11-1-1-3/

    And check:

    https://docs.oracle.com/cd/E28280_01/bi.1111/e10541/essbase_intro.htm#BIESG9034

    Kind Regards,

  • 1977947
    1977947 Rank 3 - Community Apprentice

    Thanks again Cesar! It looks like we might be able to do something similar to the first option for our solution. Thanks for sharing the information.

    Cheers.