Oracle Communities

Oracle Analytics and AI

Child Item

Auditing or governance on DV Usage

User_AE3MI

Organization Name

Consolidated Edison Company Of New York

Description

Auditing or governance on DV Usage

We should have Auditing data like How many connection has been created in DV and who are all have access to those connections. the same way for Data sets and data flows. And even for Projects, and usage tracking for DV as same as Analytics.

Use Case and Business Need

Suppose, we have given BI Content Author to one of the user. He is pretty new to DV and he has few DB user accounts for different data based in organization, which no other authors will have. If he create a connection to one of the DB and shared with other user who should not have access to that DB through to system. There is no way that Admin team know what connection has been created and who is actually using it. These kinds of things will cause security violations in organizations.

Original Idea Number: 0f703b22d5

Find more posts tagged with

Delivered

Analysis and Data Visualization

Status: Delivered

Comments

Jean-Pierre Hoedenaeken

We also need to have audit data about usage of connections (which datasets are using each connection) and usage of datasets (which projects).

Amalia Sciutto

We also need security related logs, such as: who gives permissions on OAC resources, who modifies application roles.

Jerry Ursetti

I've been asking for this for a long time. this is a serious issue. We have reports using sensitive data. We need to be able to review who has access to what without logging in and clicking on things. we need to know how is creating reports, data sets, etc. Considering how security conscious companies are getting it's very hard to understand how an 'Enterprise' system does not provide this functionality.

Michal Zima

I am glad to see, that not only our organization (Czech National Bank - which is central bank in our country) is really missing those basic governance/admin features in product - we are crying for them for pretty long time (I have created several Ideas and also gave "thumbs up" to other similar ideas from this community), but for me it seems, that Product Development , instead of trying very hard to implement such very fundamental features of Analytics product, is chasing just for "shiny" features, which are visible at first glance and are very "sexy" (and evaluated by Gartner). Correct me , if I am wrong, but enterprise customers, are also expecting features , that allows to manage and govern analytics content provided by Analytics platform - here Product Development has a huge gap and should it solved ASAP. We are waiting for more than 1,5 year for API for DV to allow us management/governance of DV objects. I am still hearing promises, but nothing has appeared in quite frequent releases of OAC (for us, as on-premise customer, using OAS, the gap is then even bigger - we have to wait for yearly release of OAS). So I still hope, that Product Development will hear to those concerns and beside nice "augmented analytics" features will also concentrate on those not visible at first glance features (thus not that good for presenting in five minutes presentation) which are extremely important for customers, who choose governed and managed analytical approach.

Thanks and regards

Michal

Fernando Anaya

Hello... We recently moved from OBIEE 12c to OAC and same concern is with us... how to handle user content, especially datasets as they're free to upload any XLS/CSV file but we as Admin, is hard to handle governance. So this seems an open request for some time... any idea when this would be release as per note early CY2022? Already on Feb 2022, when and how would be released this DV governance model?

Michal Zima

Question to Product Mgmt: How this will be solved/delivered for OAS ? From referenced blog, this auditing functionality is solely available for OAC. Thanks

mgoswami

https://community.oracle.com/products/oracleanalytics/discussion/comment/48158#Comment_48158

While it would be great to have single solution working for OAC and OAS, i think OAS should be slightly simpler as being in control of the environment as owner in comparison to OAC where it is restrictive and dependency on Oracle to make various touch points available.

Overall, this is a good thread to follow and keep an eye for replies from product managment about the functionality.