Security on Subject Areas

All,
I've seen a direct way to limit access on Sub Areas in the RPD....but is there a way to do this making use of external tables to set up security?
Or do you always have to create the groups in the rpd as well and limit access to Sub Areas that way?
Txs for your help!
Kr,
A

If you want to make things easy then just follow the following rules:
For subject areas:
1) Create one group for each subject area in the security manager of the repository.
2) Assign explicit access for the group on the subject area in the presentation layer of the repository.
3) Set up a table which holds the relation between users and groups.
4) Use the GROUP session variable to assign users to groups, by using an external table.
For dashboards:
1) Create one webgroup for every dashboard in the Manage Presention Catalog on the Presentation server.
2) Assign explicit access for that webgroup on the dashboard.
3) Set up (another) table which holds the relation between users and webgroups.
4) Use the WEBGROUPS session variable to assign users to the webgroups.
In this case you have divided your security between subject areas and dashboards, but still both types of security can be maintained in external tables.
Regards,
Stijn

Similar Messages

  • Security for subject area in obiee 11.1.1.6

    Hi every one,
    I have installed obiee 11.1.1.6 and applied the patches 13794002,13884769,13887566,13892934,13916045,13926409,13932572
    Here the problem is when i am setting permission as denied to r subject areas for users,still they are able to view that subject area and able to fetch data.
    For rest of the components security is working fine. But for subject areas it is not working as expected.
    Do anyone else faced this problem or is there any other patch i need to apply to overcome this.
    Thanks in advance.

    Hi Devarasu,
    Thanks for your reply.
    I have waited for 3 hours and even restarted the obiee services.
    But even then users who are denied with permission for some subject areas can able to access them.
    Thanks you very much.
    Edited by: MKC on Jul 25, 2012 12:35 PM
    Edited by: MKC on Aug 8, 2012 7:18 AM
    Edited by: MKC on Aug 8, 2012 7:59 AM

  • Subject area security validating users and groups from external table

    Hi all.
    I don't have practice to put question here, but there is one problem, that seems don't work correctly in OBIEE.
    I'm trying to put users in groups within external table and this works fine.
    I put security on the subject area level like this:
    SA1 -> GroupA allow, Everyone not allow
    SA2 -> GroupB allow, Everyone not allow
    External table:
    User----------Group
    A---------GroupA;GroupB
    B---------GroupB
    Users A, B and GroupA, GroupB exists in the RPD, but I didn't put users inside them, I want this from table.
    From the init block, external table I'm taking users and join them in the group. Same name users and groups are also in the presentation service.
    When i connect with user A i don't see any subject area, when go to My Account i see in Group Membership/GroupA and GroupB, so it's readed from the external table.
    Why in this case the subject area permission is not working?
    It works if I explicitly put users in groups, in the RPD.
    I have read this blog entry http://kpipartners.blogspot.com/2009/07/groups-webgroups-and-delivers.html and it is said that this works, but I'm interested how.
    What should we have in the presentation part, administration, Manage Privileges -> Access within Oracle BI Answers option for those two subject area?
    This doesn't work or something is missing:
    Re: Security on Subject Areas
    Regards
    Goran
    http://108obiee.blogspot.com

    What should we have in the presentation part, administration, Manage Privileges -> Access within Oracle BI Answers option for those two subject area?Yes, you should remove Everyone and add the relevant groups to each Subject Area. You don't need to set privileges in the RPD, in fact that's probably why it doesn't work for you. Leave your RPD Presentation Catalog as "Everyone" = Read as you will controlling access from the Presentation Services and it should work.

  • 11g-Multiple subject area feature.

    Hi,
    I am new to 11g,In 11g we have anew feature like creating Analysis from multiple subject areas so,
    1)Is there any limitation on this Multiple subject areas usage.
    2)any configuration or settings needs to be done in RPD for querying related subject areas..
    3)what is the limit of using this subject areas.. maximum from How many SA we can build a report..
    any other limitation for this feature...
    please share your thoughts.

    Hi ,
    Its possible to add/remove subject areas , while creating a analysis , in OBIEE 11.1.1.6 .
    refer this link :
    http://www.rittmanmead.com/2012/03/obiee-11g-security-week-subject-area-catalog-and-functional-area-security-2/
    but , I'm not sure whether same is possible in 11.1.1.5 .
    Thanks .

  • Subject Areas are inaccessible in OBIEE 11g

    Hi,
    We are facing a peculiar issue in our OBIEE environment. Some times when we update RPD in online mode and check in the changes, other developers are not able to access few Subject Areas though they have Read access for Everyone group. Today we faced this issue even when RPD is not updated.
    Any help/suggestions on this will be helpful
    Thanks,
    Vijay

    ours is a simple security model. we had issue with some new roles created for POC purpose. After removing those roles we are not facing issue anymore

  • Presentation Layer model not appearing in Subject Area (OBIEE 11g)

    Hi All
    I have created the OBIEE metadata for an OLAP cube using the following steps:
    1. Created and Maintained a single OLAP cube using AWM (5 measures and 3 dimensions).
    2. Created new OBIEE metadata repository using BI Administrator.
    3. Exported CUBE metadata to OBIEE Administrator using OBIEE Plug-in for AWM.
    4. Saved the new repository after checking for global consistency.
    5. Uploaded the new repository to BI server using BI Enterprise Manager (http://localhost:7001/em).
    6. Restarting all BI services from Enterprise Manager for repository changes to take effect.
    7. Create a new user using Weblogic Console in Security Realm 'myRealm' and assigning it to group 'BIConsumers' using (http://localhost:7001/console).
    8. Logging into BI Analytics as new user using (http://localhost:9704/analytics)
    But for some reason, the cube is still not showing up under the 'Subject Area Contents'. Am I missing any step in between?
    My platform is as folllows:
    - Oracle Business Intelligence EE v. 11.1.1.3.0
    - AWM 11.1.0.7.0B
    - Windows 2008 Server (32-bit)
    Any assistance will be appreciated.

    This would be a better forum for this
    Business Intelligence Suite Enterprise Edition
    Business Intelligence Suite Enterprise Edition

  • Secure SIP lines are not supported on the CME

    Hi,
     I was looking for the configuration of Secure SIP lines on the CME and found in the link bellow that "Secure SIP lines are not supported on the Cisco Unified CME mode", only Secure SCCP lines is supported:
    http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucme/admin/configuration/guide/cmeadm/cmeauth.html
     In my opinion, security is an important subject nowadays and SIP is what Cisco is investing more and more ... it's awkward that Secure SIP lines is not supported on the CME.
     Does anyone knows if this will be implemented in future versions of CME?
    Thanks.

    Just to described the answer that I received from Cisco ... there is a roadmap for FY16.
    Regards.

  • Subject Area diable

    Hi
    I login administrator account only but i am not able to see subject area for all the report.(it shows Either you do not have permission to use the subject area CERSTA within Answers, or the subject area does not exist.)
    How to give privileges for that.I never implemented any RPD level security.
    Thanks
    Gram

    Hi,
    If you have not implemented any Subject area level security in the RPD,
    the problem might that the subject area has been renamed. Kindly log on to the RPD in online mode and check if the subject area is proper.
    Thanks,
    Vineeth

  • Restrict Subject Areas

    Hi,
    I am trying to restrict access to certain subject areas in answers. I would like specific groups/users to have access to certain subject areas.
    Is this performed in rpd or in answers?
    Thanks

    Hi ssk,
    Here are the steps to do define the security in RPD level security/groups/permissions and can give access as per your need.More you can ifnd out in this below link on 6th point screens are also provided http://www.biblogs.com/2010/01/18/obiee-10g-web-catalog-%E2%80%9Cbest-practices%E2%80%9D/
    hope helps you.
    Cheers,
    KK

  • Javax.security.auth.Subject and weblogic.security.acl.User

    Hello,
    We are trying to move some old authentication code (Weblogic 5.1) to JAAS
    which comes with Weblogic 6.1. Here is my problem:
    I can succesfully authenticate the Subject through my RDBMS Realm. But then, the rest of my code uses weblogic.security.acl.User
    and not javax.security.auth.Subject for authorization and other tasks. So, how can I extract weblogic.security.acl.User from javax.security.auth.Subject?
    I tried subject.getPrincipals(), since User indirectly implements Principal, but it comes back empty.
    Any suggestions?

    Hello,
    We are trying to move some old authentication code (Weblogic 5.1) to JAAS
    which comes with Weblogic 6.1. Here is my problem:
    I can succesfully authenticate the Subject through my RDBMS Realm. But then, the rest of my code uses weblogic.security.acl.User
    and not javax.security.auth.Subject for authorization and other tasks. So, how can I extract weblogic.security.acl.User from javax.security.auth.Subject?
    I tried subject.getPrincipals(), since User indirectly implements Principal, but it comes back empty.
    Any suggestions?

  • Historical Suibject Area & Reporting Subject Area

    Hi,
    At the Company Profile Level I can see the Option of Reporting Subject Area and Historical Suibject Area at the Company Profile level and also at the user profile level.
    However, not clear what these checkbox are used for, Are they being used for Reports (Available on Reports, Dashboard ) ?
    Thanks :)

    They are used with manager's visibilty and Book of Business security to help give or revoke access to the different subject areas.
    regards
    Alex

  • Google Map Issue in OBIEE - Subject area not getting associated

    Hi Gurus,
    We are trying to integrate Google map and OBIEE via mapviewer. We have done the following already - 
    1. Loaded World Sample data from Navteq.
    2. Configured mapviewer source and added Google map as a tile layer with the API KEY.
    3. Imported one layer (e.g. M_STATES_ABRV) in OBIEE and linked it with BI subject area (tried this step with importing other layers as well)
    4. Added background map.
    Now , in this step when we add the layer in the map, we select M_STATES_ABRV and change zoom levels. But Once we come back to main screen after Clicking OK, we see the background map is not associated with the subject area. Hence any map view report creation with this subject area fails.
    We have the tried the same theme with Oracle Maps (internal type like WORLD  MAP or DEMO MAP), it works fine. only Google Map gives this issue.
    This was not expected. Please suggest what we missed. We tried with cache clear, tile delete and recreation, service restart almost everything .
    We looked into other threads in this community, different oracle support documents - Doc ID 1485088.1,Doc ID 1346805.1 etc  and in different internet blogs -  where it's easy as child's play, but we are still out of luck.
    OBIEE version - 11.1.1.7.140527
    Environment- windows server 2008 R2
    Please suggest.
    Regards,
    Krish

    I have found the solution: You need to *select* zoom levels for the BI Layer.  When a BI Layer is added to a background map, by default no zoom layers are selected.  Once a zoom level is selected, the BI Layer will save.

  • Need Help to develop a Funnel Graph Report using Multiple Subject Areas.

    Hi Everybody,
    Did any body developed Funnel based graph report in Answers..
    Scenario: I need to develop a report which is based on 4 Facts(4 Subject Areas) Report is sectioned with 4 block one blovk with one Fact Metrics like this four blocks.
    If any idea on such scenario it will be huge benefit for me.
    Thanks in advance.
    Thanks,
    Govardhana

    Yes, i can see datatype and number of columns is same in both queries.
    i have challanges to copy message but Error message seems to general. Error says (near to FROM) and I checked there are three FROM in query and all seems to be ok
    Query is something like as below
    select SA1.col1 saw_0,
    SA1.col2 saw_1,
    SA2.col1 saw_2,
    SA2.col2 saw_3,
    FROM
    (select col1 saw_0, col2 saw_1 from "subject area1") SA1
    FULL OUTER JOIN
    (select col1 saw_0, col2 saw_1 from "subject area2") SA2
    ON SA1.col1 = SA2.col1
    I can't see any issue in the query...please comment.

  • Report using colmns from 2 subject areas

    Hi,
    I have to buld a report as below
    Product      ForecastRevenue(A)       ActualRevenue(B)       Variance
    A                200                                      100                           100
    B                200                                      200                            0
    ForecastRevenue(A) comes from 1 subject area and ActualRevenue(B) comes from another subject area. Using these 2 columns from different subject area I have to create
    a calculated column variance which is the difference of two columns. How can I create this report. Any idea?

    can be done in two ways;
    1. Using Union report
    Create a union report with two request.
    Request1 -          product               Forecast_Revenue     Actual Revenue
    Col expression     "product.name"     "Fact.Revenue"         0
    Request2 -          product               Forecast_Revenue     Actual Revenue
    Col expression      "product.name"    0                             "Fact.ACTUAL_Revenue"
    In the result tab create a pivote report and set the aggregation of fact column as sum.
    Add a calculated column and write the expression as
    Farecast_Revenue - Actual_Revenue
    You are done.
    2. Use the advance tab in the report and write a custom SQL to join these two subject area.
    eg.
    select product, A.forecast_reveneu, B.Forecast_Reveneue, A.forecast_reveneu-B.Forecast_Reveneue
    from SA1 A join SA2 B on (A.product=B.PRODUCT)
    You are done.
    Best of Luck,
    Kashi

  • How to find total report based on a particular subject area in OBIEE?

    Hi Everyone,
    I am new to OBIEE. I want to find out all the reports based on a particular subject area as there are many subject areas and lot of reports in OBIEE.
    Please help me out in this issue.
    Thanks
    Regards
    Sohail Dayer

    Sohail,
    Check out the catalogue manager reports :
    http://oraclebizint.wordpress.com/2007/11/19/oracle-bi-ee-catalog-reports/
    If you want this kind of thing automated, I personally am very fond of the ODI -> OBIEE Data lineage solution as provided in Oracle By Example tutorials :
    http://www.oracle.com/technology/obe/fusion_middleware/odi/OBI-ODI_Lineage/OBI-ODI_Lineage.htm

Maybe you are looking for