Oracle Fusion AI Data Platform Forum

Home› Oracle Analytics and AI› Oracle Analytics and AI Forums› Oracle Fusion AI Data Platform Forum

Categories

Welcome to the Oracle Analytics Community: Please complete your User Profile and upload your Profile Picture

How to apply segment value security in FDI?

Received Response
37
Views
3
Comments
User_BB57H
User_BB57H Rank 1 - Community Starter
in Oracle Fusion AI Data Platform Forum

Hi,

Where segment value security is enabled in the chart of accounts, what is the best approach to mirror this within FDI? We have users who are restricted on cost centre segments within all business functions and we want to replicate this access to reports ran in FDI.

Thanks,

Adam

Tagged:

Answers

  • RVohra
    RVohra Mod

    You might want to use Oracle Fusion’s Access Control Framework (ACF) and Data Roles

    • The Access Control Framework (ACF) governs data security in Fusion Applications including segment value security.
    • Assign users to Data Roles that restrict access to particular cost center segments.
    • FDI can consume these roles and ACF context via security predicates or user attribute mappings to filter data accordingly.

    Hope it helps!

  • Victor H
    Victor H Rank 6 - Analytics & AI Lead

    You will need custom security contexts:

    https://blogs.oracle.com/analytics/post/implementing-custom-security-context-in-oracle-fusion-data-intelligence-fdi

    FDI can automatically bring security assignments from Fusion but only for a predefined subset that includes Business units, ledgers, asset books.

    This subset does not include GL segments, this leaves you with 2 options:

    1 - Custom security using session variables, init blocks and ADW tables: Configuring Custom Data Security in Fusion Analytics Warehouse in Nine Steps

    2- Using the recent Custom Security Context feature (first link)

    Option #2 is easier to maintain. However, you would also require a manual effort to bring the user-to-cost-center relationships, you could use the autosync tables to upload them into FDI:
    https://docs.oracle.com/en/cloud/saas/analytics/25r3/fawag/update-security-assignments-automatically.html

  • RMJ-kpmg
    RMJ-kpmg Rank 6 - Analytics & AI Lead
    https://community.oracle.com/products/oracleanalytics/discussion/comment/71667#Comment_71667

    Option 1 does not appear to be available in the latest FDI releases. The +Data Security Step is removed, and CSC does not give the ability to apply filter logic to specific objects (i.e. referencing a variable or adw lookup table).

    While CSC appears easier to setup and maintain, it seems limited/not applicable for cases like securing on ranges or conditional logic.