Creating users in OBIEE 11g

User authentication is the important part in OBIEE security. For any user we need to assign some kind of security levels in the sense of read, write and modify application roles.

The default application roles are grouped into broad categories of functional usage: administrator (BIAdministrator), author (BIAuthor), and consumer (BIConsumer). 

Following are the default application roles provided by the OBIEE system:

1. BIAdministrator Role

              The BIAdministrator role grants administrative permissions necessary to configure and manage the Oracle Business Intelligence installation. Any member of the BIAdministrators group is explicitly granted this role and implicitly granted the BIAuthor and BIConsumer roles

2. BIAuthor Role

              The BIAuthor role grants permissions necessary to create and edit content for other users to use, or to consume. Any member of the BIAuthors group is explicitly granted this role and implicitly granted the BIConsumer role.

3. BIConsumer Role

              The BIConsumer role grants permissions necessary to use, or to consume, content created by other users.

4. BISystem Role

              The BISystem role grants the permissions necessary to impersonate other users. This role is required by Oracle Business Intelligence system components for inter-component communication.

5. Authenticated Role

               Oracle Business Intelligence uses the authenticated application role to grant permissions implicitly derived by the role and group hierarchy of which the Authenticated role is a member. The Authenticated role is a member of the BIConsumer role by default and, as such, all Authenticated role members are granted the permissions of the BIConsumer role implicitly.

You can see all these roles in em using following path:

Coreapplication --->Configure and Manage Application roles--->Application Roles

See screen shot for application roles:

Steps for creating new user and assigning application roles:

1. Login to the console using weblogic user credentials.

2. Select Security Realms from Services as marked in the screen shot.

3. Select Myrealms as shown in screenshot.

4. Select User and Groups, you will find total no of system users. For creating new user you have to select New option as marked in the screen shot.

5. Enter user details like user name, description and password and click OK.

6. New user is created admin with default authentication role. To assign new roles to user. Click on admin user. 

7. Assign new role and save changes i.e BIAdministrators and Administrators.

8. New user is created with administrator application role. To Verify user login to analytics with admin user name and it's password. Before login to the system restart services to get changes.

9. User is logged in successfully and we have observed assigned application roles are available for admin user.

In this way we learned to create new user. Keep visiting for new posts.

Thanks...!!

Upgrading the Oracle BI Repository and Catalog

To upgrade the Sample Sales repository and presentation catalog, perform the following steps by using the Upgrade Assistant. Please note that the WebLogic Administration Server and the Managed Server in the 11g environment must remain running during the upgrade process.

1. Navigate to the ORACLE_HOME\bin directory of the Oracle Fusion Middleware installation. In this example, the directory path is D:\bi\Oracle_BI1\bin.

2. Double-click ua.bat to open Upgrade Assistant in the graphical user interface mode. Refer screen shot:

3. On the Welcome screen, click Next.

4. On the Specify Operation screen, select Upgrade Oracle BI RPD and Presentation Catalog and click Next.

5. On the Specify Source Details screen, select Upgrade Repository (RPD).

6. Click Browse next to the RPD File field.

7. Browse to the location of the 10g version of the Sample Sales repository and click Open. In this example, the path is D:\SampleSales\samplesales.rpd.

 8. Enter the Administrator User Name and Administrator Password for the 10g samplesales repository. In this    example, the username and password are both Administrator.

9. Enter new password for rpd which doesn't match with the previous 10g rpd password.

10. Select Upgrade Catalog.

11. Browse to the location of the 10g version of the Sample Sales presentation catalog and click Open. In this example  the path is D:\SampleSales\Sample_Sales_V1.3_Webcat\samplesales.

12. The path to the Sample Sales presentation catalog is added to the Catalog Directory field. The path to  the deliveries directory is automatically added to the Catalog Deliveries Directory field.

13.Enter the weblogic admin server details. Port number, user name and password. 

14. Click Next to continue. On the Examining Components screen, wait until you see a succeeded message. During the examination process, Upgrade Assistant checks whether the source directory exists, the source directory is readable, and contains a file for upgrade.

15. Click Next to continue. On the Upgrade Summary screen, review the summary of the upgrade to be performed.

16. Click Next to continue. When the upgrade completes the status changes to succeeded.

17. Click Next to continue. n the Upgrade Success screen, review information related to the upgrade task and  click Close.

             In this way have upgraded rpd and catalog to 11g. Comment if it is helpful and keep visiting  for new posts.

Thanks....!!