OBIEE 11g: Application Roles, Groups and Users Management

In this post I am going to explain Groups and user management in OBIEE 11g.

Users can be created in Weblogic Server which is common with all Oracle Fusion Middleware 11g Based Products.

Application roles are nothing but collection of policies and it is defined in Fusion Middleware.

Application role defines the type of accesses given on various type of resources.

Groups and users are mapped with these application roles

 

 OBIEE comes with a pre created set of roles called, Application Roles.

BIAdministrator which has all administrative privileges. The BIAuthor is able to create dashboards and also create analyses. Finally, the BIConsumer is a role where the user can only view existing dashboards and analysis. There is also an additional role that can be created called BIAnalyst. This role enables the user to create an analyses, but not the dashboards and also has viewing privileges like the BIConsumer.

Following are the steps to create user and assign it to Groups and Application role.

1.     Goto Oracle WebLogic Server Administration Console, http://[localhost]:7001/console

2.     click on the Security Realms menu item in the Domain Structure navigation tree menu.

3.     Under Summary of Security Realms page, click on the myrealm.

4.      Click on the Users and Groups tab to create new user.

5.     Press the New button, and then enter the details for the new user:

6.     Similarly you can create new group as well.

7.     To add this user to one of the groups, and therefore grant them the corresponding application role, click on the user in the list of users that’s displayed, and then click on the Groups tab.

8.   Select any group, for example BIConsumer, from the Parent Groups Available pane, then move it across to the Chosen pane.

We have created a new user and added them to the BIConsumers group. The policies within Oracle Platform Security Services are granted to  this group as group is added to BIConsumer Role in background.

Steps to create the Application Roles in EM (http://[localhost]:7001/em),

          1.      Login to Enterprise Manager with Admin User.

          2.      Click on Business Intelligence and coreapplication

          3.      Go to Security tab and Single Sign on

          4.      Click on Configure and Manage Application Roles

          5.      Click on Create and Provide the Role name and OK

Steps to Add User’s or Groups on Application Role in EM,

1.      Click on Role and Edit the Created Application role

2.      Add the Existing User’s and Groups to Application Role and OK.

Thats the process to create application roles and assigning groups and users under it.