Regarding assigning permission to dashboard to a catalog group in obiee 11g

Hi All,
i have a dashboard : trainee .
i have created one catalog group that is: GroupA
now i have assign some user to it.
now i want to assign permission to the trainee dashboard to the groupA.
i tried to do that but when i am doing login obieee by using any user that has assigned to group A.
but i am not able to see trainee dashboard.
can anyone tell me the steps for doing it.

Hi,
http://www.varanasisaichand.com/2011/03/obiee-11g-security-creating-users-and.html
hope it helps
Thanks,
satya

Similar Messages

Data and Dashboard Security using ROLES Variable in OBIEE 11g

Hi all,
I'm currently using OBIEE 11g. I'm wondering how to implement the security for data and dashboard in the 11g.
Below is the sample of how the security matrix requirement when I use the 10g version. In 10g, we usually use GROUP (for the data filter in RPD) and WEBGROUPS (for dashboard objects) variables in my initialization block to read from database. As we have 2 different variables, it is possible to control security separately for data and dashboard.
GROUP | Country
G1 | US
G2 | FR
G3 | UK
WEBGROUPS | Dashboard
WG1 | D1
WG2 | D1
WG3 | D1
WG1 | D2
WG2 | D2
WG1 | D3
WG3 | D3
WG3 | D4
Now, in 11g, the recommendation is to use ROLES variable (for application role). So, how would I apply the required security matrix above in 11g using just ROLES variable? Do I still create G1, G2, G3, WG1, WG2, and WG3 as application roles then only use G1-3 in the RPD to filter the data and only use WG1-3 in the analytics to serve as webgroups?
Any advice on this? Thank you very much.

"...Could you elaborate more?"
I mean that role creation and user->role assignment will be managed outside of to the obiee interface - whether that's via the database, LDAP, fmw etc.
Webgroup creation and assignment is managed within the obiee interface and I think that has a lot of benefits - generally you have people responsible for shared folders and dashboard creation, so having them responsible for webgroups and presentation permissions is preferable for me.
"are you saying that I use the role G1-3 only in the RPD, while using the role WG1-3"
Yes .. I'm assuming you have something like
G1 | US
G2 | FR
G3 | UK
WG1 | Finance
WG2 | Marketing
WG3 | Sales
Which becomes
R1 | US
R2 | FR
R3 | UK
R4 | Finance
R5 | Marketing
R6 | Sales
And John belongs to R1 and R4, Fred belongs to R2 and R4 etc. So you would set your data filters against R1-R3 and use R4-R6 like webgroups in the presentation services.
Regards,
Robert

Object Level security by creating catalog groups in OBIEE-10G

Hi All,
I have a requirement to display the dashboard based on the user login. Ex. Mike belongs to HR, Smith belongs to Accounts
When Mike logs in he should see only these three dashboards. HR View, Common data1, common data2. When Smith logs in he should see only these three dashboards. Accounts view, Common data1, commondata2.
The commondata1 and commondata2 dashboards has common reports for all the departments. The other dashboards are department specific with all different reports. How can I implement this?
From one of my earlier posts I was advised to do it using Object Level security by creating catalog groups. Can you please provide me end to end instructions on how to create Object level security based on catalog groups.
Thanks for your time and help.

Hi,
Mike to HR
Smit - Account
Yes, You achive by Object Level security by creating catalog groups
1) Create Catalog group and users in RPD part(Ex: Account_grp,HR_grp)
2)assign user to that particular group(let say Ex: Account_grp= Smith and HR_grp=Mike )
3) login (Admin user id ) into dashboard page and --->mange dashboard page -->add users to that particular
dashboard to relevent users and save it then
try to login that mike and smith user it will work
kindly refer below link
http://www.rittmanmead.com/2010/01/obiee-10g-web-catalog-best-practices/
http://www.rittmanmead.com/2007/05/obiee-and-row-level-security/
thanks
Deva

How to install only catalog manager in obiee 11g client

hi,
i have obiee 11.1.1.5 sever on linux & client on windows.
since obiee 11g client does not comes with catalog manager.
how to install only catalog manager on windows machine.
Just to access catalog manager, Do i need to install fresh DB & OBIEE on windows?
thanks,

Hi,
Download Client tool below link and also via BI Presentation Administration home page
http://www.oracle.com/technetwork/middleware/bi-enterprise-edition/downloads/bus-intelligence-11g-165436.html
Note: catalog manager is present in obiee11.1.1.6.0
Thanks
Deva
Edited by: Devarasu on Oct 24, 2012 3:41 PM

Cannot access catalog Manager in OBIEE 11g

When I used OBIEE 10g, I was able to access the Catalog Manager from windows if I installed the Admin Tools.
Now that I am using 11g and dowloaded the Admin Tools for 11g... I no longer see catalog Manager.
I use this often to move reports from one catalog to another. What can I do???
Environmet:
Application Server: Linux Oracle Linix R5U4
Database Linix Server Oracle 11g.2.0.3
OBIEE 11.1.1.5
Tyhank you
Steve Brault

It is also available in 11g also with server installation. you might need to navigate to the following folder
Windows: ORACLE_INSTANCE\bifoundation\OracleBIPresentationServicesComponent\coreapplication_obips1\catalogmanager\runcat.cmd
Linux : ORACLE_INSTANCE/bifoundation/OracleBIPresentationServicesComponent/coreapplication_obips1/catalogmanager/runcat.sh
Thanks
Jay.

Automate RPD and Catalog Patching in OBIEE 11G

Is it possible to automate the patching process with scripting? This would be the complete cycle: compare, generate xml patch and apply patch. I see that I can script the applying of the patch but need to be able to script the compare.

Yes, You could accomplish this using the OBIEE 11g scripts.
The one place you may want to reconsider the "complete cycle" is when it comes to actually patching the production RPD via automated fashion. I would leave that to remain as a manual redeployment after the patching to some stage folder/area, then manually deploy the RPD. This way you are certain to retain the incremental versioning that is now provided in the Fusion Console EM, etc.

What is Catalog Crawler in OBIEE?

I would like to know what is catalog crawler in obiee 11g. The reason I am looking for the details is there are couple of core dumps created by catalog crawler in obiee.
Thanks,
Anil

Hello,
In a last few days catalogcrawler created several core dumps in my 11.1.1.5 OBIEE installation , on AIX. Any input would be appreciated, Can not find much on that subject on oracle support site or on the web. Also, do not see any errors reported in EM.
Regards,
VK

Problem with dashboard prompt initial value (OBIEE 11g)

Hi alli,
I have a problem with dashboard prompt and session variable in OBIEE 11g.
I have declared a session non-system variable which I set/change with dashboard prompt. At login the variable is initialized in initialization block that gets a value from an SQL select statement.
When I change the value in prompt, the session variable changes accordingly, as it should (change is made by calling function NQSSetSessionValue() within javascript function). While I am in my dashboard, cruising around pages the variable stays the same, and when I return to the page that has prompt on it, the correct value is shown. Everything works fine.
The problem occures when I go to Catalog (in presentation services) to create some new Answers. When I return back to the same page in dashboard (which has a prompt), the prompt selected value and session variable are set back to the default value. It looks like the initialization block is executed again.
My prompt is configured like this:
- Choice List Values: SQL Results
- Default selection: Variable Expression (@{biServer.variables['NQ_SESSION.VariableName']} )
- Set a variable: Presentation Variable
Is there a way to stop the initialization block from executing again? Isn't it logical that the initialization block executes only at login, when the session variable is empty? I don't need it to execute every time i come to the dashboard.
Thanks in advance,
Marko
Edited by: markor on 14.3.2011 8:58

How and where do you use the nqssetvalue() function.
I tried it in several places but it doesn't work.
Can you help me, please!
Thanks

We can assign permission to the users in Secure Zone?

Hi BC Partners
I have a qestion about Secure Zone
For Secure Zone users we can assign permission to them, such as assign them upload or edit content in Secure Zone?
Regard
TY

Hey there,
It does not work like that.
A seurezone gains access to a zone area, and thus the landing page and content assigned to that zone. Nothing more nothing less. They can not upload or edit content to your site through the securezone. The only thing they can edit and update are their details or if they have submitted web app items and you have allowed them to edit these or submit them.

Role Assign Permission

I am trying to check programmatically if a user has Role assign permission for a Role. The below code returns false even if the user has Role assign permission.
IAclManager mgr = UMFactory.getAclManager();
mgr.hasPermission(iRole.getUniqueID(),iUser, "com.sap.portal.pcd.roleservice.roles.Assign")
Also, using getPermissionStatus() returns an undefined permission status.
In addition to the above if the user is an administrator then the above methods return true always.
Any help is appreciated.
Thanks.

Hi Raghav,
Thanks for your response.
The target user is a demand planner and would require to change alpha, beta and gamma factors based on changing sales trends.
In production system, it will be risky to give model configuration permission to such users.
Regards,
Aditya G

OBIEE 11g Permission Catalog

Hi guys,
I'm facing a problem to apply a permission on a catalog folder and the objects under. Let me specify the problem:
I created a new group, application role and a new user. Set the connection between them and that's ok so far. The problem consists on apply a permission to an application role, group or user on a folder on obiee. When apply full control the user or app role gets the permission ok and when apply no access it's ok either. When customize the permission on try to apply only read access or anything like that, the user/app-role still receive almost the full access and can delete the folder.
anyone have experienced this issue?
Thx in advance.
All

Hi,
http://www.varanasisaichand.com/2011/03/obiee-11g-security-creating-users-and.html
hope it helps
Thanks,
satya

Assigning permission to SharePoint 2013 group using REST API

Hi All,
I was trying to assign permission to a group using REST but it failing with error message "Bad Request". Below is my REST code to assign Contribute permission to group with ID 95, It would great help if someone can help me to fix this.
// Set permission on a specific group
$.ajax({
url: "<Site URL>/_api/web/roleassignments/addroleassignment(principalid=95, roledefid=1073741827)",
type: "POST",
contentType: "application/json;odata=verbose",
headers: { "Accept": "application/json; odata=verbose","X-RequestDigest": $("#__REQUESTDIGEST").val(),"X-HTTP-Method": "POST" },
success: function (data) {
// Returning the results
alert('Contribute permission set on group');
alert("Error: " + JSON.stringify(data));
error: function (data) {
alert("Error: " + JSON.stringify(data));
~Harish

Hi Harish,
I have same problem and I just find solution for this error.
You must set body/data to null value --> It's work for me !!! :)
See my code with RequestExecutor (I develop an SharePoint App)
// Set the new role assignment for the group on the list.
        this.setNewRoleForGroup = function (listTitle, newRoleDefId, groupId) {
            var deferred = $.Deferred();
            //First we must call the EnsureSetup method
            JSRequest.EnsureSetup();
            var hostweburl = decodeURIComponent(JSRequest.QueryString["SPHostUrl"]);
            var appweburl = decodeURIComponent(JSRequest.QueryString["SPAppWebUrl"]);
            //Tip to have a title formated to REST call
            var arrayTitle = decodeURIComponent(listTitle).split("'");
            var restQueryUrl = appweburl + "/_api/SP.AppContextSite(@target)/web/lists/GetByTitle('" + arrayTitle.join("''") + "')/roleassignments/addroleassignment(principalid=" + groupId + ",roledefid=" + newRoleDefId + ")?@target='" + hostweburl + "'";
            var executor = new SP.RequestExecutor(appweburl);
            executor.executeAsync({
                url: restQueryUrl,
                body: null,
                method: "POST",
                headers: {
                    "Content-Type": "application/json;odata=verbose",
                    "Accept": "application/json; odata=verbose",
                    "X-HTTP-Method": "POST"
                success: function (data, textStatus, xhr) {
                    deferred.resolve({ updated: true });
                error: function (xhr, textStatus, errorThrown) {
                    deferred.reject(JSON.parse(xhr.body).error.message.value);
            return deferred;

Assigning Role Assigner Permission

Hi,
I've been going through the Enterprise Portal APIs for a way to assign Role Assigner Permission on a Role to a User, but i haven't been able to find one.
Can someone please guide me on how to do it?
Thanks,
Mayank

Thanks Michael,
I tried with the following code:
initPcdCtx = new InitialContext(env);
initPcdCtx = BRUtil.GetPCDContext(csc.Persistence);
IPcdContext myPcdContext =(IPcdContext)
                         initPcdCtx.lookup(Role); // Loading the context with the Role
IAclHandle myHandle = myPcdContext.getAclHandle();
IAcl ownAcl = myHandle.getOwnAcl();
if (ownAcl == null)
     msg = "Currently no ACL - attempting to create it";
     myHandle.createAcl(LoginID,myHandle.getParentAclHandle().getOwnAcl());
     ownAcl = myHandle.getOwnAcl();
ownAcl.createAclEntry(LoginID, Role, "allow");
But it's failing in the createAcl statement. I get a java.lang.ClassCastException.
If I load the myPcdContext object with the user loginID instead of the role, then I get an exception saying "Child not found" .
Am I missing something here? Thanks for all your help.
- Mayank

Hiding Dashboard tab by user group

I have my users created and assigned to groups in my rpd only (under manage-security). I want to display a specific tab on my dashboard for a particular group only. All users in the other groups need to have that tab hidden. What is the best way to do this?

Create a group for example Group_DB_Hide and add all the users to this group.Remove permission for that particular folder for this Group_DB_Hide.
What you can do is place your reports for each tab in separate folders and assign access to the group as said.
goto settings-> Administration->Manage catalog-> assign permission

How to hide a dashboard in OBIEE 11g?

Hi All,
How do we hide a complete dashboard in OBIEE 11g? A particular dashboard page can be hidden by going to dashboard properties but there is no option to hide a complete dashboard. Also, in Administration, there is no 'Manage Interactive Dashboard' section like it was there in OBIEE 10g where we could hide a particular dashboard.
Thanks in Anticipation,
Karan
Edited by: kchadha2 on Sep 22, 2011 4:11 PM

Hi,
Go to your dashboard page --> there is catalog folder is available here you can restrict hiding dashboard users.
and dashboard folder under shared folder right click dashboard permission --> No Acess also set that dashboard property as "Hiden"
Thanks
Deva
Edited by: Devarasu on Sep 22, 2011 6:50 PM

Regarding assigning permission to dashboard to a catalog group in obiee 11g

Similar Messages

Maybe you are looking for