nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Oracle Communities

Oracle AI and Analytics

Child Item

Role to Open/execute reports only

user11394485

Hi,

I am currenly using OBIEE 11.1.1.9 and bit new to OBIEE.

We have developed few reports and saved in one of the shared folders.We would like to develop one Application role so that user assigned to this role will able to run/execute report only.

We have created group with few users and assigned BI consumer role to the group in EM.My understading is ,users who are part of this group should be able to open/view report.But it is not working as expected.

Request you to guide me to make this work.

Regards,

Lak

Find more posts tagged with

Accepted answers

All comments

Kamna

Hi,

New role created should be given access to the required report/dashboard as "OPEN". With Open access , no user will be able to create/modify any report but only read/consume it.

Gianni Ceresa

Hi,

The BI consumer application role is supposed to be for users opening/viewing (but not editing or creating) reports.

But the role by itself is not enough ...

Is your security setup in a way to allow this app role to open reports where you saved them?

What is the current security setup you have? (it seems you kept the default app roles, but what did you defined as privileges and catalog permissions?)

[Deleted User]

user11394485 wrote:

But it is not working as expected.

Can you be more specific? What isn't working?

user11394485

When I click on open link of any report . I am getting an error "Access Denied".It is supposed to open and display the results.

user11394485

Hi,

Please find my coments

Is your security setup in a way to allow this app role to open reports where you saved them?

Ans : Not done.what to be done for this.Please give me some inputs.

What is the current security setup you have?

Ans : I am using out-of-box application roles .I have created a group and few users only.

Regards,

Laxman

user11394485

FYI...I did not create any new role just I am assigning my group to existing role "BI Consumer" in em.

I have tried to assign "Full Control" of report to "BI Consumer" role in Analytics application.but no luck.

Regards,

Lak

Gianni Ceresa

You say you saved few reports in a shared folder, how do you expect your users to open them? Will they open a dashboard containing the reports or do they have to go in the catalog and navigate to the folder containing the reports?

Before to start setting random permissions it's better if you start by making sure you understood the multiple places where security exist and what is done where etc.

[Deleted User]

+1 to @Gianni Ceresa - you should first make sure that you have your use case right from A to Z and understood the requirements and implications before you start modifying things.

user11394485

Hi Ceresa,

User will go in the catalog an navigate to the folder containing reports.I am not using any dashboards.

Please let me know what to be done.

Regards,

Lak

Gianni Ceresa

Ok,

the simple way is: set open permissions on all the folders from the top shared one till the one with your analysis and on your analysis as well, in OBIEE privileges make sure your app role can access the catalog.

Upcoming Event

Analytics - Fusion Data Intelligence: Semantic Model Extensions in FDI: Implementation Patterns, Security, and Best Practices
Build on the foundational concepts from Part 1 with a deeper look at implementation patterns for extending the FDI semantic model. This session covers common use cases such as modifying subject areas, creating custom subject areas, combining external application models, and supporting custom security requirements. It also…

Top Leaders