BIServiceAdministrator role is gone after migration

Vishal NL

Hi experts,

I installed OBIEE 12.2.1.2.0 on our dev server. At that time, weblogic user had a role BIServiceAdministrator assigned to it.

After that, I did migration of catalog and rpd from 11g to 12c (using the normal process which is given here)

However, after the migration, I can't see the BIServiceAdministrator role in the em anymore. Because of this, the weblogic user has lost all the Administrative rights.

Can you guys please advise me what should I do to get the BIServiceAdministrator back? Or if you have any other advise, please let me know.

Thanks,

Vishal

Christian Berg-0racle

I always found this suggestion supremely misleading. Why recreate the old names when going forward it's not "BIAdministrator" anymore but "BIServiceAdministrator".

You can use the runcat command to replace role names in the webcat and the BI server command line to do the same thing in the RPD. jazn-wise it can be a very simple rename inside the file (if you're doing it solidly) or otherwise WLST with aen export, rename and the re-grant.

This way you end up with a nice 12c-style security landscape.

Syedsalmancs110

In my experience when you perform a migration from 11g to 12c then out of the box BIEE 12c application role gets overwritten with BIEE 11g application roles.

But if your migration was successful and your 11g Catalog is in place now in 12c environment then you shouldn't be facing Administrative access missing issue as security on catalog now should be same as 11g given that you had followed below mentioned step post migration:

In below mentioned link under section "3 Post-Migration Steps for Oracle BI EE" Sub Section "3.6 Adding Roles and Permissions"

https://docs.oracle.com/middleware/12212/lcm/BIMIG/GUID-5C43110F-0009-426B-83E5-1586215A174E.htm#BIMIG-GUID-A25792E5-38C…

So in your OBIEE 12c environment

a) In Weblogic Console create Groups BIAdministrators, BIConsumers and BIAuthors

b) Now make sure that your Admin User 'Weblogic' is part of BIAdministrators(as this was the default Admin Application Role in 11g) along with  Administrators Group and verify that this BIAdministrators Group is part of BIAdministrator Application Role

c) Restart your BIEE Services(OBIPS1,OBIS1,OBIJH1 etc) and retest your access.

Christian Berg-0racle

I always found this suggestion supremely misleading. Why recreate the old names when going forward it's not "BIAdministrator" anymore but "BIServiceAdministrator".

You can use the runcat command to replace role names in the webcat and the BI server command line to do the same thing in the RPD. jazn-wise it can be a very simple rename inside the file (if you're doing it solidly) or otherwise WLST with aen export, rename and the re-grant.

This way you end up with a nice 12c-style security landscape.

Syedsalmancs110

There is no need to recreate old Application Roles only the Groups as it isn't taken care by the migration process.

Not completely my suggestion mentioned in Oracle Product Document

Christian Berg-0racle

I know it's just something that bugs me

3365160

i think that recommandation of Syed are right

in your OBIEE 12c environment

a) In Weblogic Console create Groups BIAdministrators, BIConsumers and BIAuthors

b) Now make sure that your Admin User 'Weblogic' is part of BIAdministrators(as this was the default Admin Application Role in 11g) along with  Administrators Group and verify that this BIAdministrators Group is part of BIAdministrator Application Role

c) Restart your BIEE Services(OBIPS1,OBIS1,OBIJH1 etc) and retest your access.

In your Admin tool

a) got to manage Identity

b) create application roles with same name of Console groups

Vishal NL

Thanks Syed!

Vishal NL

Thanks Christian... I did it the way you recommended and it's working!