Privilege setting in Discoverer OLAP

Hi,
One of my customer has the following issue:
Powerful role OLAP_USER is assigned to the role D4OPUB, on first-time creation of a
Discoverer catalog. However OLAP_USERS has a lot of system privilege, like create table,
create dimension.
We have a number of Discoverer OLAP end users who would just read worksheets thru the Discoverer
Viewer (i.e. need to access the Discoverer catalog), and thus do not need those privilege of
OLAP_USERS. Our DBA will seperately grant select-only rights over the corresponding OLAP analytic
workspace to end users
So what can we do:
1) Any suggestions to accomplish this?
2) Can OLAP_USERS role (or D4OPUB role)be revoked from the user without any issue?
Thanks in advance,
Regards,
Padmanabh.

Hi Padmanabh
Chapter 16 of my Discoverer 10g Handbook is dedicated to using Discoverer with OLAP and if you don't have a copy I would urge you to get hold of one.
I have taken the following extract from my book:
You can add users to the Discoverer Catalog either using Oracle Enterprise Manager, or using the Java command-line utility. Users have to be added to the Discoverer Catalog before they can connect to Discoverer Plus for OLAP.
To add or remove a user from the Discoverer Catalog using Oracle Enterprise Manager 10g Application Control or Grid Control, use the following workflow:
1. Connect to the Discoverer Catalog home page within Oracle Enterprise Manager as before.
2. Click the Manage link.
3. Enter the connection details for the Discoverer Catalog.
4. Click Authorize Users and Roles.
5. You will then be presented with a list of available database users and roles, and a list of those users and roles that are currently authorized to access the Discoverer Catalog.
6. Select the users and roles that you want to access the Discoverer Catalog. If you add a role, all users with that role automatically have access to the Catalog. Any users or roles that you authorize for Discoverer Catalog use are assigned the D4OPUB role, which provides access to the objects stored in the catalog.
Reading between the lines then you can see that even if you assign another role for your end users they must also get the D40PUB role which means they will also get OLAP_USERS.
Best wishes
Michael
http://ascbi.com

Similar Messages

  • Blackberry Device Manager can't find 9320 Bluetooth device (even Bluetooth is switched on and set to Discoverable)

    I want to sync my Blackberry 9320 via Bluetooth to a Windows 7 Professional machine using a Bluetooth adapter. Syncing using USB cable works fine.
    I can Bluetooth pair with the 9320 and also send / receive files to /from the Windows 7 machine. Fantastic !
    HOWEVER, Blackberry Device Manager can not find the 9320 Bluetooth device (even Bluetooth is switched on and set to Discoverable) - see screen shots below.
    By the way I have already tried (amongst other things) “Manually Install RIM Virtual Serial Ports in Microsoft® Windows® 7” on http://www.youtube.com/watch?v=gK2n5dHxGHI  Unfortunately, this does now work - the drivers do load up OK and remove the warning signs when view in Windows Device Manager, but Blackberry Device Manager still can't see my 9320.
    Please help !

    I have the exact same problem with my 9360. I have also tried all the fixes I could find on the Internet with no luck. I have posted a request as well. I will let you know if I find a solution. What gets me though is that this appears to be a long standing issue with no obvious fix! Best of luck.

  • Discoverer OLAP 10gR2 Compatible with 11g OLAP?

    Hi
    I've been trying to create Discoverer OLAP 10gR2 worksheets by connecting to Oracle 11g database i.e. report on 11g OLAP measure folders.
    Nothing appears in Discoverer item selection list, even though I have created measure folders.
    Can anyone confirm if this is a no-go or if there is some way in which this configuration will work.
    The details are as follows:
    Oracle BI Discoverer version 10.1.2.54.25
    D4O Build 10.1.2.2.0.0010
    BI Beans Build 3.2.3.0.37
    JDK Version 1.6.0_01
    Oracle 11g Enterprise Edition : 11.1.0.6.0
    Thanks
    Greg

    No one knows the answer?
    I have the same problem. I've spent 3 days trying to get olap cubes visible in d40, but no success.
    awm: 11.1.0.7.0B
    database: 11.1.0.7.0
    olap cube types: either 10g or 11g
    I was pretty sure, that there must be info on OTN page, wich versions of Oracle goes with wich version of database. But i was wrong - i've searched probably everything - but there is no information on this topic.
    I guess that it is not normal business practice, that software vendor cannot say if its products goes together?
    Raf

  • About SAP Privilege Setting

    Hi,
    I have a question.
    Can I use ABAP programming to modify SAP privilege setting?
    If I can, how can I do to avert user to do this?
    Thanks a lot.

    u can change but it asks for a access key as it is a standard programme.after changing the initial programme is lost.If any problem arise u have to upload a note from service market.

  • Discoverer Olap remote speed

    Hello All,
    We are experiencing terrible performance problems with using discoverer olap at our remote offices. At our corporate office, performance is just fine, but remotely, our users are extremely unhappy. We have tried various sqlnet settings which had no positive effect, we have had our network provider (BT) monitor our network, which showed no issues. We even moved to a new bigger server. All of these things caused no significant improvement. Does anyone out their have any suggestions! They would be greatly appreciated.
    Thanks,
    Carl Petersen

    Hi Carl
    Discoverer OLAP is notorious for this. This is caused because once connected to the server, the Discoverer OLAP applet on the client interacts with the database direct. It does not use the power of the Discoverer middle tier. The server won't appear to be idling, it really will be.
    From the How does Discoverer Plus OLAP work? section of the Discoverer 10.1.2.1 Configuration Guide here is how OLAP works:
    1. The user launches a Web browser on a client computer and types the URL of the Discoverer Plus servlet.
    2. The Web browser accesses the Discoverer Plus servlet on the Discoverer Services tier, which forwards the request to the Discoverer servlet.
    3. The Discoverer servlet retrieves the Discoverer Connections page and returns this to the Discoverer Plus servlet, which in turn returns the page to the client.
    4. The user logs in (by connecting directly or using a Discoverer connection).
    5. The Discoverer Plus OLAP applet is transmitted to the client computer (if it is not present already).
    6. The Discoverer Plus OLAP connects directly to the database.
    This architecture is totally different to how Discoverer relational works. Discoverer relational always uses the power of the middle tier server to run the query. It never connects directly to the database.
    The further away from the database that your client machine is the slower will be the performance. Therefore, the important machines in the OLAP world are the database server and the client PC. You need to have as powerful a PC as you can in order to run Discoverer OLAP effectively. Putting resources into the Discoverer server is not the answer.
    Have you considered using something like a terminal server for your users to connect to? I've done this before, using Citrix, and got performance back to almost the same as being in the main office. I say almost because there is still an overhead in running anything remotely, but its a lot quicker than running the application from the local PC across the whole network to the database.
    Does this help?
    Regards
    Michael

  • Discoverer OLAP Colour Palette

    Hi. Does anyone know if it is possible to extend the colour palette that is offered in Discoverer OLAP. In relational Discoverer you can define custom colours by providing the hex code. But this does not appear to be an option in Disco OLAP. Anyone know a good workaround?

    It is currently not supported. I have filed an enhancement request. Thanks

  • Printing failure using Discoverer OLAP

    I've got a user who cannot print from Discoverer OLAP. When he attempts to print, he gets the print dialogue box, but when he selects OK, the dialogue box just disappears and nothing happens. It just doesn't seem to spool correctly. He can print from Discoverer relational just fine. Thanks.

    Dave.
    I just wanted to let you know that you're not being ignored (as you can see by the number of views to your thread), but IMO the problem is that Disco with OLAP has a much smaller audience due to it's new-ness (new word there) and many just haven't tried it yet.
    Russ

  • Change default setting on discoverer/plus

    Dear,
    when connecting to discoverer/plus or viewer. The first screen, we will see
    "Connect to" and the default for this one is "OracleBI Discoverer"
    I just wonder if i can set this default to the second option from the drop down box
    "Oracle Application"
    So anytime when i open discoverer plus it would show "Oracle Application" instead of "OracleBI Discoverer".
    Thanks in advance.
    Regards,
    Tom

    Also if you want to set Oracle Application as the default option to connect then
    1. Goto $BIHome\j2ee\OC4J_BI_Forms\applications\discoverer\discoverer\templates
    2. Open the file ConnectionAccessTypes.uit
    3. change the following
    <option value="RELATIONAL" text="${uix.data.nls['text.access.type.RELATIONAL']}"/>
    <option value="APPS" text="${uix.data.nls['text.access.type.APPS']}"/>
    <option value="OLAP" text="${uix.data.nls['text.access.type.OLAP']}"/>
    to
    <option value="APPS" text="${uix.data.nls['text.access.type.APPS']}"/>
    <option value="RELATIONAL" text="${uix.data.nls['text.access.type.RELATIONAL']}"/>
    <option value="OLAP" text="${uix.data.nls['text.access.type.OLAP']}"/>
    4. Restart the OC4J_BI_Forms instance for the changes to take effect
    Once you did these changes you will find that when connecting to discoverer/plus or viewer, the first screen
    "Connect to" shows the default value as "Oracle Application"
    Thanks,
    Sutirtha

  • Privilege issues in Discoverer 10g

    Hi All,
    For some weired reason, I am encountering these problems using discoverer 10g:
    1) two identically set up/privileged users one working (can see business areas) and one not (cannot see business areas) ?
    2) BA viewable in web client but not desktop?
    Please let me know if you have any more questions.
    Thanks.

    Thx for the response Tamir. Yes the security and the privileges have been set up as expected using Tool -> options.
    We use db users since its a stand alone set up. The BA's have been shared to both the users the same way but for some reason they dont work the same manner.
    The second issue is even weired. I was wondering if other users may have come across similar issue. Just wondering.
    Thanks.

  • Restricting access to Discoverer OLAP

    Hi,
    I am using Oracle BIDiscoverer for OLAP and would like to create two set of users i-e
    1- Powers Users who would have access to discoverer plus. These users would create reports for others.
    2- Simple Users who would have access to discoverer viewer only.
    In addition to this both set of users have D4OPUB role and select right on analytical workspace. Having D4OPUB role and select right on analytical workspace, even the simple users can access to discoverer plus and create reports.
    So, is it possible somehow to restrict simple users to access to discoverer plus ?
    Thanks in advance

    No, you cannot restrict users to only using Disco Plus or Disco Viewer (apart from not giving them the URL and threatening to shoot them if used).
    With privs you're limiting what they can do with the tools and with security you're limiting the data they can 'see'. However, there's no priv option for only running Viewer or Plus ( at least not in the version I'm presently running).
    Russ

  • Oracle discoverer olap and 11g olap

    Does anyone know if i can use disco plus olap against an 11g database cube. currently with my patch level it definately doesn't work as i cantwven select a catalog to report on but if i add patches will it work? and is it certified?
    i have read the following and it still isn't clear
    Doc ID: 808276.1
    and
    Doc ID: 727948.1
    please help
    Thanks

    Oracle makes it a general policy not to announce things in future releases, even bug fixes, without due approval from senior management. This puts Oracle developers in the unfortunate position of not being able to pass on information in forums like this, which is why you are not able to get a straight answer to your very reasonable question.
    It is true that full support and certification for D4O and the Excel Add-In did not make the 11.1 release. This was for two reasons.
    (1) On the OLAP Option side there were so many changes to the metadata layer in 11.1 that there simply was not time to fix all the bugs. As I said earlier, D4O basically works against 11.1, but the OLAP group did feel confidence in its stability and performance. I can say that many D4O related OLAP bugs were logged and targeted for 11.2 and that stability and quality is the number one goal for the 11.2 OLAP release.
    (2) The teams that worked on Discoverer classic, Discoverer for OLAP, and the Excel Add-In were moved on to new projects following the acquisition of Siebel. You can see the statement of direction here .
    Of these clearly the latter is the bigger problem. Oracle OLAP itself is committed to maintaining support for existing interfaces and the OLAP API (used by D4O) has not been deprecated. In fact it was the basis of much of the work in 11g.

  • USING CALCULATED MEMBERS IN DISCOVERER OLAP WORKSHEET

    How to sort the calculated members based on folders like the way saved selection is e.g.
    /root/Users/UserA/AccountDim
    As many users are creating and using shared calculated members its very hard to find the saved selection created by a particular user. We need a similar feature (folder view) for calc members as that of saved selection

    As this is an enhancement request I would post on the Discoverer Forum page and also open a TAR with Oracle Support and request the information be forwarded to product management.
    Keith Laker
    Oracle EMEA Consulting
    OLAP Blog: http://oracleOLAP.blogspot.com/
    OLAP Wiki: http://wiki.oracle.com/page/Oracle+OLAP+Option
    DM Blog: http://oracledmt.blogspot.com/
    OWB Blog : http://blogs.oracle.com/warehousebuilder/
    OWB Wiki : http://wiki.oracle.com/page/Oracle+Warehouse+Builder
    DW on OTN : http://www.oracle.com/technology/products/bi/db/11g/index.html

  • Discoverer OLAP

    Hello,
    We are using 11.2.0.2 database and building few cubes using OLAP. We would like to give access to the users to view data. I have been told that there is a tool from discoverer to view OLAP cubes. Could you please let us know where we can download it from?
    Regards
    Naveen.

    Discoverer 10g (10.1.2) includes Discoverer Plus for OLAP (applet). You can download Oracle Application Server 10g Release 2 (10.1.2.0.2) here.
    http://www.oracle.com/technology/software/products/ias/index.html
    Discoverer Configuration guide is here
    http://download-west.oracle.com/docs/html/B13918_03/toc.htm
    Regards

  • Error while Adding Discoverer OLAP to Porlet

    Hi there,
    I having this unspecified error. It during "Worksheet" step, when i try to select a worksheet it show a small error icon (x) on the workbook. What does it means? Anyone encounter this? pls help..
    PS: i didn't encounter this problem while connecting to a Discoverer Relational workbook

    Hi Manoj,
    I review the source code of the page, and there is the name of the repository:
    HREF="/DataServices/servlet/AwBatchJobHistoryREPOSITORY_NAME=BDDI&SHOWREPO=2&ACTIVE_VIEW=Repository+Schedules
    But when i click on the Apply Button, i get the error. I check the source code of the new page and the parameter REPOSITORY_NAME is:
    <Input type ="HIDDEN" Name = "REPOSITORY_NAME" value ="" >
    What is the problem on the parameter?
    Thanks in advance.
    Regards,
    Jorge Orozco

  • How to Import/Export Manage Privileges Setting

    Hi Everyone,
    I had implemented Security for Analytic object using "Administration>Manage Privileges",
    Now i want to move the settings to production environment , Is there any way through which i can do tht ?

    If it is 11g try the below for 10g do it manually.
    http://www.rittmanmead.com/2012/03/obiee-11g-security-week-managing-application-roles-and-policies-and-managing-security-migrations-and-deployments/
    If helps mark

Maybe you are looking for

  • END ROUTINE clarification

    Hi, I have seen below text in help Only fields that have a rule in the transformation are transferred from the end routine http://help.sap.com/saphelp_nw70/helpdata/en/20/a894ed07e75648ba5cf7c876430589/frameset.htm what does it mean..for ex if i popu

  • Modified Report required

    hi guys am new to ABAP, i have a report which prints information of a single customer for a particular period , can anybody modify my report and give me the code for displaying information of multiple customers at a time... and info of every customer

  • Import and Export Questions

    Trying to work out if final cut pro can do what we need. Our requirements are: 1. To be able to export .avi files with a indeo 5 codec from a .mov 2. To be able to import a muxed mpeg and export with separate audio and video track. (unmuxed?) Can we

  • ALV to another Drilldown ALV...???

    Hi.. I have a requirement in which i have to create an ALV report. Now if any particular cell is selected.... for example... Sales Organization cell is selected... Then what i need to do is to show another ALV report as a drilldown with that sales or

  • [java]compiling .java at runtime...illegal character: \0

    i have an RMI method call that receives a string with the name of the file and an array of bytes that contains the file. this method has to save the file,compile it if it's a .java or run it directly is it's a .class the file arrives completely,but i