OBIEE 12C Security

Question

Hello All,

I need some tips on this issue. Please guide.

We have LDAP implemented to OBIEE 12C. We have a group called ASGUsers in which around 10k users are there. We have other groups called county state national. So the users who are in county should see only county data similarly to other state and national groups are also in the same manner.

Most of the users who are in ASG Group has consumer role and are able to see all the dashboards these users are not in any of the county,state,National groups. so if we keep denied access to ASGusers group it is even blocking county,state,National groups view dashboard access.

I even tried to copy some of the users from ASGusers group to county,State,National groups and try to block ASGusers group but no use. Please guide how to overcome this issue.

3310714 · Answer

Hi,

Maybe show us what you've done so far, with some screenshots.

[Deleted User] · Answer

user12058206 wrote:..."trying to block data permissions to the groups"...

1.) Data access control, content control and functional permissions are ALL based on Application Roles, not Groups. groups are authentication entities which get translated into Application roles in Enterprise Manager

2.) Data filtering should always happen in the RPD. If you're doing it in the front-end then you have to repeat is every single time you create a new object or are forced to include predefined filters in each object (which isn't much different as it is equally unhelpful). Always think and design reusable.

3.) If security was something you could answer with a half-line response here in the forum then it would be about 100 times less capable. You will need to make an effort on your side to actually grasp these concepts.

user12058206 · Answer

We are not blocking anything in RPD. trying to block data permissions to the groups. I gone through your document but don't see the info what I am looking for.