Oracle Transactional Business Intelligence Idea Lab

Home› Oracle Analytics› Oracle Analytics Idea Labs› More Solutions Idea Labs› Oracle Transactional Business Intelligence Idea Lab

Categories

Welcome to the Oracle Analytics Community: Please complete your User Profile and upload your Profile Picture

Ability to view output of others ESS jobs without BI Administrator role

Submitted
490
Views
9
Comments
huronstevesmith
huronstevesmith Rank 1 - Community Starter
in Oracle Transactional Business Intelligence Idea Lab

Organization Name

Rotary

Description

We have followed the detailed instructions in:

How to View the Output of an ESS Jobs Submitted By Another User Based on Role? ( Doc ID 1980772.1 )

  • We created a condition that allows supervisors to view subordinates requests.
    • Supervisors can view output/logs/cancel jobs...
      • This works only for jobs submitted via tools/scheduled processes when the output is under attachments. 
      • This does not work for jobs submitted via tools/reports and analytics or when output is displayed as as a link (see attached screenshot)
  • We created SR 3-24761920631: I can view subordinates ESS jobs, and attachments but cannot view output.  This SR is now closed
    • ​This only solution was to also grant "BI Administrator" role to every Supervisor as instructed in "How to Add the BI Administrator Role to a user. ( Doc ID 2238277.1 )".
    • Having "BI Administrator" role gives too much access so it is not a solution for us.
    • We explored removing roles inside the overall BI Administrator role but we could not find a combination that gave us what we wanted without additional access we did not want.  It appeared to be all or nothing.

Use Case and Business Need

Having the ability of supervisors to view their subordinates requests:

  1. Allows both supervisor and subordinate to see the same output without saving a file or emailing output to each other
  2. Allows both supervisor and subordinate to see the same error and work through the resolution together.
  3. Allows supervisor to view output from subordinate if they are out of office.

More details

  1. Both supervisor and subordinate cannot see the same output without saving a file or emailing output to each other
  2. Both supervisor and subordinate cannot see the same error and work through the resolution together.
  3. Supervisor cannot view output from subordinate if they are out of office.

Original Idea Number: e2e530e5b4

6
Up
6 votes

Submitted · Last Updated

Comments

  • huronstevesmith
    huronstevesmith Rank 1 - Community Starter

    It would help Managers view subordinates request output and collaborate.

  • Bhavish
    Bhavish Rank 2 - Community Beginner

    Much required !

  • Sanoj Sudheera..
    Sanoj Sudheera.. Rank 1 - Community Starter

    Even with the BI administrator we can't view the output files and we can only see the log files related to ESS jobs. 

  • A.JOSH
    A.JOSH Rank 4 - Community Specialist

    This would be a good feature to have.

  • Jon Kelly
    Jon Kelly Rank 1 - Community Starter

    We have a small group of users who do system support, configuration, upgrades, etc., with high level access. One of them accidentally moved OTBI folders in production resulting in IT (who manages OTBI security) to want access removed from these users. Viewing all the output from scheduled processes is very important for many reasons - supervisors wanting to review, avoiding emailing reports outside the system, helping troubleshoot functional lead issues, etc. Wyoming would definitely like this access without needing to be full OTBI admin.


    Jon

  • Andrew_Thai
    Andrew_Thai Rank 1 - Community Starter

    University of California San Diego also needs similarly functionality. We have service accounts that import large amounts of data through API's with the Import Costs and Import Payables Invoices jobs. Our users don't have access to these accounts, so when these jobs hit errors, our users are unable to open the report outputs because ownership is with the service accounts.

    It is an enormous controls and risk issue to grant users BI Administrator just to view these report outputs, and it's not feasible for our existing administrators to constantly pull these reports for users on a daily basis.

  • Murthy Kodavati
    Murthy Kodavati Rank 2 - Community Beginner

    Much needed for reviewing and support Integration jobs/reports.

  • Ankit_Bhadja
    Ankit_Bhadja Rank 2 - Community Beginner

    It's been 3.5 years and still no update from Oracle. This is a serious concern now. Request Oracle to pay attention to this idea.

  • Ankit_Bhadja
    Ankit_Bhadja Rank 2 - Community Beginner

    Hi @huronstevesmith ,

    This required we can achieve without assigning "BI Administrator" role to users. Follow below steps:

    1. Using Security Console create a custom abstract role to allow an user to see all the ESS job processes by assigning the application role ESS Monitor Role.
    2. In same Custom Role, navigate to Data Security Policies tab and click on on Create Data Security Policy button.
    3. Give a name to Policy Name and choose Start Date.
    4. Search for Database Resource: ESS_REQUEST_HISTORY
    5. Choose for Data Set: All Values
    6. As Actions select: ESS_REQUEST_OUTPUT_READ
    7. Assign the role to the required users.
    8. Once the above abstract role changes are completed save it.
    9. Run the ESS process: Import User and Role Application Security Data
    10. Logout and login as the user which have assigned the abstract role and user should be able to see in Scheduled Processes all the logs and output files of the ESS jobs.

    Refer to below Oracle support note for more details.

    How to View the Output of an ESS Jobs Submitted By Another User Based on Role? (Doc ID 1980772.1)

    There was an error displaying this embed.