We want only the HR users to be able to access the HCM reports that are delivered by Oracle. Currently we were unable to change any permissions for Shared Folders. How to achieve this please
Hi,
Why do you state that non HCM users can access HCM Reports? Do you have an example? I think that out of the box only HCM users can see HCM reports. That security is already in place. Do you agree?
I guess we need to agree on what is you definition of a human resources user? The reason I seek clarity is because security is implemented by roles. 2 users of hcm may have completely different user experience becasue they are granted different job roles or the same job roles but have different data access setup (in HCM with data roles security profiles).
So we can talk about the experience of a user with a particular job role and data role?
For example, a HR user might be defined as a user with
1) a job role listed in Oracle Fusion Cloud HCM Security Reference for HCM F77732-01 23B https://docs.oracle.com/en/cloud/saas/human-resources/23b/oawpm/index.html#COPYRIGHT_0000
2) and has data acess setup as per chapter HCM Data Roles and Security Profiles https://docs.oracle.com/en/cloud/saas/human-resources/23b/ochus/hcm-data-roles.html#s20029787
If you view the permissions on the shared folders you can see that some folders are secured by role, whether a user can see a folder in the catlaog with permission Read,Traverse or not, is implemented by pre-defined roles. For example, you need a job role that inherits role Human Capital Management Folder Reporting Duty to see folder /Shared Folders/Human Capital Management/. So if you create a user with a role that does not inherit this, a "non HR user", then in your testing assume that already out of the box that user can not see the HCM folder, such that "only the HR users to be able to access the HCM reports that are delivered by Oracle".
See the following guide regards how to make customizations to folder security suing the provided role
Custom BI Web Cat Reporting Duty
Oracle Fusion Cloud HCM
Administering Analytics and Reports for HCM
F77766-01 23B
Manage Permissions
Manage Predefined Catalog Permission
https://docs.oracle.com/en/cloud/saas/human-resources/23b/fahca/manage-predefined-catalog-permission.html#s20071170
You may want to remove access to predefined catalog folders so that those associated with offerings you don't use aren't displayed. You can hide the entire predefined catalog or selectively display root catalog folders for offerings.
Futhermore we then get into data access security. Assume you are using the wider term "report" to refer to all objects in the otbi catalog both otbi analysis and otbi reports (publisher). With the analytics data access row/column security is built into the subject areas in the metadata repository database. So even if 2 users can see to open the same file in the catalog but each user will get different data results depending on their data access setup becasue the system will look up at runtime what setup they have then append where clauses to filter data in their session.
Hi Farouq Ali,
Please review the below document.
Oracle Fusion BI: Starting 19D, You Can Configure New BI Reporting Duty Roles to Hide the Factory Catalog Folders (Doc ID 2596730.1)
Thanks,
Praveen
@Praveen Kumar Akkala-Oracle this appears to be an all or nothing approach though, right? We can't limit for say baseline employees, but allow others?
@Praveen Kumar Akkala-Oracle This appears to be an all or nothing approach, correct? We can't say hide only for employees, but allow HR specialists to see more?
Check this , If it helps:
View Reporting Roles and Permissions
Explore how to build agents using code in AI Data Platform. We'll create an agent that examines and analyzes the contents of a Github repository and reports its findings. The session demonstrates how to use different developer tools to create agents including the AIDP extension for VS Code and Codex. Using these tools we…
Our Requisition OTBI analysis is having many values Requisition Number Requisition Title Requisition Status Hiring Manager Full Name Recruiter Full Name am able to see values for all. When am passing Prompt(Hiring Manager Full Name or Recruiter Full Name) am not able to see the data. Am sure we have values/data for passed…
Hi Experts, We are using Oracle BI Publisher Email Bursting to distribute reports via email. Currently, one of our bursting outputs generates a report of approximately 20 MB, and we are trying to understand whether there are any size limitations that could impact email delivery. Scenario: Report Delivery Method: Email…
Team, We have a requirement to select below PVOs HcmTopModelAnalyticsGlobalAM.ProfileAM_ProfileItemPVO HcmTopModelAnalyticsGlobalAM.ProfileAM_ProfilePVO HcmTopModelAnalyticsGlobalAM.ProfileAM_ContentItemPVO HcmTopModelAnalyticsGlobalAM.ProfileAM_ContentTypePVO Do we have any documentation around these?
We have a requirement of enabling OTBI report in Purchase Requisition Redwood page similar to classic UI.How can that be done?
