nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Oracle Communities

Oracle Analytics and AI

Child Item

How to hide catalog objects/analysis from dashboard users?

jepva

Is there a way to configure the catalog security so that users still have access to their dashboard, but cannot see the individual objects & analysis in the folders that make up the dashboard? We would rather users not see anything but the actual dashboard itself, as sometimes they get confused when they see the other objects availale and they go clicking on things they shouldn't, and it also would be a lot "cleaner" from an end-user perspective.

Find more posts tagged with

Accepted answers

All comments

[Deleted User]

You can just take the whole catalog interface away from them. Privilege administration:

[Deleted User]

Are you expecting more than that answer? Cause there isn't much more than this or actual catalog folder access management just like you would manage any file system structure.

jepva

The persmissions don't seem to work like that should. When I denied BI Consumer, it took away my Catalog link even though I'm an admin. I removed the deny and approved only Admins and Authors, but BI Consumers can still see the link that way. Why is it disabling it from admins as well if I deny BI Consumer?

[Deleted User]

Errr "Deny" means "Take it away from everyone who is BI Consumer". And your BI Admin IS also BI Consumer.

Gianni Ceresa

On OBIEE privileges Deny is stronger than Allow, so if Admin is allow and BI Consumer is deny and you are both you have a deny as a result.

If you remove BI Consumer (so no deny or allow) then by default they have a deny. If doing that and allowing only Admin and Author your BI Consumer still see it then you have inheritance issues in your security setup.

That's how it works.

Would be good if you first take full control of your security model and make sure which role inherit from which one etc. Then decide how to apply the privileges you need.

But it works, so if it isn't you are doing something not in the right way ...

EDIT: of course Christian was faster with just 1 sentence

[Deleted User]

Much more eloquent

jepva

BI Authors are a member of BI Consumer but this is set up by default, just as BI Admins are a member of BI Author. The only roles listed with approve for Access Catalog UI are BI Admin and BI Author, so it doesn't make any sense that it's still allowing BI Consumers catalog access