Users in OBIEE 11g RPD

Hi all ,
I have scenario where i need to apply data level security for few users.
And i am trying to redefine the permissions for that user in RPD in offline mode , i failed to see those users in IDENTITY window.
Can some one please tell me , how to come over this issue ,
Thanks

Hi Raj,
In data level security for users level, You have to implement external table authorization.
1. Create table in database.
2. create session variable in rpd.
If you want some more extend information.
Refer to following links:
Especially: http://www.rittmanmead.com/2012/03/obiee-11g-security-week-row-level-security/
http://www.dba-oracle.com/oracle_news/2005_4_28_Fine_Grained_Access_Control.htm
http://docs.oracle.com/cd/E14571_01/bi.1111/e10540/dataaccess.htm
Thanks,
satya

Similar Messages

  • Extract list of users in OBIEE 11g

    Can someone please tell me what is the way to extract the list of users using OBIEE 11g with their roles and permissions.
    Thanks in advance.

    Check this script
    '1: Make an UDML export of the RPD using nqgenudml.exe
    '2: Change the filename/location in this script
    '3: Run the script from the command line cscript Read_Usergroups.VBS > users.txt
    '4: Put the export in a XLS Pivot table
    Set objFSO = CreateObject("Scripting.FileSystemObject")
    'point this to your UDML EXPORT
    Set objFile = objFSO.OpenTextFile("E:\usergroup.txt", ForReading)
    Const ForReading = 1
    Dim arrFileLines()
    dim strRLine
    dim strTemp1
    dim strTemp2
    dim strTemp3
    dim intRoles
    intRoles = 0
    i = 0
    WScript.Echo "USER_NAME;FULL_NAME;ROLE;COUNT"
    Do Until objFile.AtEndOfStream
    strRline = objFile.ReadLine
    if left(strRline,12) = "DECLARE USER" then Redim Preserve arrFileLines(i)
    strTemp1 = MID(strRLine ,15 , 50)
    strTemp1 = MID(strTemp1 ,1 , instr(strTemp1, """")-1)
    IF instr(strRline,"}" ) >0 THEN
    strTemp2 = MID(strRLine , instr(strRline,"{")+ 1, (instr(strRline,"}") - (instr(strRline,"{")+ 1)))
    ELSE
    strTemp2 = ""
    END IF
    arrFileLines(i) = strTemp1 &";" & strtemp2
    intRoles = 1
    i = i + 1
    end if
    if intRoles >= 1 then
    if instr(strRline,"HAS ROLES (" ) >0 then
    intRoles =2
    end if
    if intRoles =2 and instr(strRline,"HAS ROLES (" ) =0 then
    strTemp3 = MID(strRline,instr(strRline, """")+1,50)
    strTemp3 = MID(strTemp3,1,instr(strTemp3, """")-1)
    WScript.Echo arrFileLines(i-1) &";" & strTemp3 &";1"
    end if
    if intRoles =2 and instr(strRline,")" ) >0 then intRoles = 0
    end if
    end ifLoop
    objFile.Close
    Source : Srinivasan Software Solutions Pvt.Ltd.: [OBIEE 11g] OBIEE Get All Users And Roles From RPD

  • OBIEE 11g RPD password reset and Hierarchy implementation

    HI All,
    How to get the forgot password in OBIEE 11g. Please refer the below link you will get one good Suitable  solution.
    http://satyaobieesolutions.blogspot.com/2013/06/how-to-reset-forgotten-obiee-11g-rpd.html
    How to reset the forgot password in OBIEE 10g. Please refer the below link.
    ttp://satyaobieesolutions.blogspot.com/2013/06/how-to-reset-forgotten-obiee-10g-rpd.html
    How to create Time Hierarchy in OBIEE 11g:
    http://satyaobieesolutions.blogspot.com/2013/06/dimension-hierarchy-111170.html
    Hope this help's
    Thanks,
    Satya Ranki Reddy

    looks like there is a way to recover the lost passwords for RPD's using listcred() method of wlst
    look at the following doc http://www.rittmanmead.com/2011/04/oracle-bi-ee-11g-migrating-security-credential-store-part-3/
    Listing the Credential in Dev Environment:
    All the Credential Keys are generally stored in an encrypted format (the passwords). So, to migrate we will need to first extract these passwords and then do the migration to Production. The passwords can be extracted through the listCred() method of WLST. We need to be connected to the Admin Server for this method to work. The exact command is given below
    connect(“weblogic”,”welcome1″,”localhost:7001″)
    listCred(“DevMap”,”DevKey”)
    This will show the encrypted password entered inside the key as shown below
    And this is what we see in the enterprise manager.
    As you see, with listCred we are able to extract the full credentials. Now, lets try to see what is the default password for the BISystemUser.
    listCred(“oracle.bi.system”,”system.user”)
    In the same way lets extract the passwords of the SampleAppLite repository.
    listCred(“oracle.bi.enterprise”,”repository.SampleAppLite”)
    With this we can even extract the lost Repository passwords."
    i am going to try it out now

  • Localization with welcome message to the respecitve user in OBIEE-11g

    How do we can acheive localization with welcome message along with time to the respecitve country user in OBIEE-11g.

    Raghav N wrote:
    How do we can acheive localization with welcome message along with time to the respecitve country user in OBIEE-11g.Refer to the documentation here for complete details: http://docs.oracle.com/cd/E14571_01/bi.1111/e10541/deploylocal.htm

  • Unable to import table or columns in OBIEE 11G RPD

    Hi All,
    We are unable to import table into the RPD using OCI 10G/11G to import the table then the import box open but we are unable to see the tables below the schema name. When we use ODBC 3.5 and created a DSN for the database then we are able to see all the tables and import them. But the problem here is that when we are using window server 7 64 bit to install client and then importing the table ODBC is not working fine as well.
    Please note that we are using OBIEE 11G which is installed on unix box and we connect to RPD using client installed on windows server.
    Appreciate all the help in advance.
    Thanks,
    Mohit

    Hi Sayak,
    This means we need to installed Oracle client to resolve this problem. Can you please share if you have some knowledge regarding the same.
    Thanks,
    Mohit

  • How to deploy obiee 11g RPD in unix environment

    Hi,
    We have installed OBIEE 11g in UNIX env,and we need to deploy new RPD.
    pls..could any one share the process and the list of commands that we wil use in while trouble shooting

    In OBIEE 11g, you can deploy the RPD via Enterprise Manager (EM). EM can be accessed from browser, EM is deployed on WebLogic.

  • Restricting  access to some of the LDAP users in obiee 11g.

    Hi Experts,
    I have successfully integrated LDAP with OBIEE 11g and user's are Authenticated to login to obiee using their LDAP credentials.
    But the case is All the employees in the company who have ldap are able to login(any way this is expected as we integrated ldap with OBIEE)
    Is there any way that we can restrict the access to users who don't need OBIEE. If so please suggest me the required steps.
    Edited by: MKC on Oct 5, 2012 7:43 AM

    Handle it in LDAP side, try to create a group in LDAP for BI users and use it in integration so that only this specific group uses sit in bi side.
    Pls mark if helps

  • Create a user in OBIEE 11g

    Hi,
    I am new to OBIEE 11g.Can any one help to create an user?I mean to say when he types that URL,the user login screen comes and he can use his own user ID and password to do the same.
    Regards,
    Mainak

    Mainak,
    To create a new user you have to use the weblogic server admin console.
    For example, http://hostname:7001/console.
    Here is a good link that explains how to do this.
    http://varanasisaichand.blogspot.com/2011/03/obiee-11g-security-creating-users-and.html
    Adil
    Please assign points if the answer is helpful

  • OBIEE 11g RPD and case study document required for practice

    Hi OBIEE guru's,
    Could you please help me by posting OBIEE 11g sample RPD and case study document for creating Answers and Dashboards.
    I need to brushup my skills on creating Answers and Dashboards.
    Thanks in advance.

    Satya,
    have you looked at the sample app. This has many different cases and you can "play" with the data yourself. Quite powerful:
    http://www.oracle.com/technetwork/middleware/bi-foundation/obiee-samples-167534.html
    have fun
    alex

  • Obiee 11g RPD

    Hi Frnds,
    I Recently installed obiee 11g (11.1.1.6.0) on my windows 7 o.s.
    RCU is 32 bit.
    Obiee11g is 64 bit.
    When, i open the rpd from start -> programs -> oracle business intelligence -> bi adminstration
    My Rpd opens, i was able to import data make joins everything.
    But, My Icons (Such as open file, open online, open offline, cut, copy, physical diagram, physical join, complex joins etc.. which are below 'File, Edit, View, Manage, Tools, Window, Help) are showing black in color.
    But, the tool tip are showing properly.
    Let me know how to resolve this issue.
    Thank you.

    I already tried to restart the system many times.
    I think memory wouldn't be the issue - if not they are many applications which wouldn't work isn't ?
    Is there any other way to resolve this issue
    Edited by: GRK on Aug 14, 2012 1:06 PM

  • Setting HOMEPAGE for USERs, rolewise OBIEE 11g

    Hi,
    I have OBIEE 11g Dashboards on top of an Essbase cube. I would like to have a default homepage set per user role.
    I have followed the below link: http://obieeelegant.blogspot.fi/2011/06/how-to-changing-theobiee11g-homepage.html , which suggests to have two tables in the database.
    But how do I capture the User ids in this case. My security model has got Nested Groups and Nested Roles.
    Any suggestion on how to proceed, please.

    Hi Kalyan,
    i referred this blog for adding tns entries for OBIEE 11g, for windows users.cmd has only one TNS_ADMIN, but in users.sh file there are many TNS_ADMIN and moreover all are are commented out, so i am not sure where and to what i should assign the path.
    Thanks,
    Sree

  • Hiding catalog link for a particular user in OBIEE 11g !!

    Hello,
    I have a requirement where I want to hide/disable catalog link at the top (in analytics) for a particular user !!
    This User can access Dashboard.
    This User cannot access Subject areas hence he cannot create analysis
    Let me know if this is possible in OBIEE 11g !! If yes, then how ?

    Hi,
    Steps to implement,
    Login to analytics (http://IP:9704/analytics)--> Administration-->Manage Privileges -->Home and Header ---> here u can set the privileges associated with various components of bi
    http://docs.oracle.com/cd/E23943_01/bi.1111/e10543/intro.htm#BIESC6086
    Thanks
    Deva

  • OBIEE 11g: RPD modeling question

    I am running into challenges thinking of a design for the following request and would love to get input from the forum users...
    I have a FactA and a FactB. Both join to a Site Dimension.
    Both Facts contain a Site_Key, Occurrence Number and a Metric.
    FactA has 3 rows for Site "New Jersey" with 3 Occurrences and the applicable Metric. FactB has 1 row for Site "New Jersey" with the applicable Metric.
    The ask was for Ad-Hoc users. When a user selects only Metric (FactA) and Site then the query hit FactA (Returns 3 rows). When a user selects only Metric (FactB) and Site then the query hit FactB (Returns 1 row). If a user selects both metrics then the query brings back the common rows, a join on the two facts betweeen Site_Key and Occurrence Number (In this case 1 row is returned for Occurrence 1 in both tables).
    I had tried with the Physical joins between Site and the two Facts. Then joining the two facts as well.
    I then set up a Logical Fact with 3 LTSs. One being FactA, one being FactB and the other being a join between FactA and FactB (Under the General tab and Joins). I mapped Metric (FactA) to the 2 applicable LTS and Metric (FactB) to the 2 applicable LTS.
    OBIEE will stick with one LTS or the other no matter how the metrics are pulled, whether the Priority Group is the same or different.
    I understand Fact to Fact join is not optimable, I was just hoping to get feedback on if this request is even acheivable from an RPD modeling perspective.
    Thanks in advance!

    In Physical layer:
    Fa Joins with Sites
    Fb Joins with Sites
    Create alias for Fa and Fb name them as Faa and Fbb join both tables, and also with Sites (any one Fact is enough to join with Sites)
    In BMM layer:
    Logical table Sites
    Logical Fact with sources:
    LT1-->Fa; Create metric this is for
    When a user selects only Metric (FactA) and Site then the query hit FactA (Returns 3 rows). LT2-->Fb; Create metric this is for
    When a user selects only Metric (FactB) and Site then the query hit FactB (Returns 1 row). LT3-->Pull Faa and then properties add Fbb, then Create metric this is for
    If a user selects both metrics then the query brings back the common rows, a join on the two facts betweeen Site_Key and Occurrence Number >(In this case 1 row is returned for Occurrence 1 in both tables).If this is not working send me email.
    ~
    http://cool-bi.com
    Edited by: Srini VEERAVALLI on May 30, 2013 3:09 PM

  • Obiee 11g RPD consistency check error after upgrade

    Hi,
    got below error in RPD consistency check after upgrading from obiee 10g to obiee 11.1.1.6.
    *ERRORS:
    Business Model Core:
    [38028] Logical column Dim - Contact.Age Range does not have a valid data type.*
    logical column Age=
    CASE WHEN "Core"."Dim - Contact"."Age" < 18 THEN 'A: <18' WHEN "Core"."Dim - Contact"."Age" < 25 THEN 'B: 18-25' WHEN "Core"."Dim - Contact"."Age" < 35 THEN 'C: 25-35' WHEN "Core"."Dim - Contact"."Age" < 45 THEN 'D: 35-45' WHEN "Core"."Dim - Contact"."Age" < 55 THEN 'E: 45-55' WHEN "Core"."Dim - Contact"."Age" < 65 THEN 'F: 55-65' WHEN "Core"."Dim - Contact"."Age" IS NULL THEN 'Unspecified' ELSE 'G: >65' END
    above is formula for logical column "Age" and data type for that is varchar in physical
    few more erros similar to above.
    how can I fix the issue? appreciate for your help.
    Thanks
    Jay.

    HI,
    As I said, Age has valid datatype in physical layer but datatype is showing as "Unknown" in logical layer after upgrade to 11g. many other columns got same issue just for this logical table. I rebuild the logical column mapped to physical sources but it didn't fix the issue.
    I hope you understand the issue.
    Thanks
    Jay.
    Edited by: Jay on Jul 23, 2012 11:02 AM

  • OBIEE 11g RPD and Weblogic Identity Management

    Hi,
    I have an issue where only users from one weblogic Provider (LDAPAuthenticator) can log into OBIEE.
    New users created using the default provider (DefaultAuthenticator) cannot log in (the exception is the Administrator user which was upgraded from 10g).
    If I open the RPD in online mode and connect to 'Identity Management', I do not see the new users above in the list (i.e. they have not been pulled down by OBI)
    Error message in the logs show "authentication passed, however use cannot be found in identity store" - which makes sense as I do not see them in the RPD. Any ideas?
    N.B: New application roles in weblogic are syncing with the the RPD correctly.

    Thanks for your reply Paul. That is quite a drawback if it is the case. I guess the fall back is to implement one authenticator and if that fails, it would pass on to the RPD authentication (like in 10g)? Have you by chance managed to implement the 'act as' obi functionality with the weblogic authenticator setup?

Maybe you are looking for