Administering the Presentation Catalog

Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 Objectives

After completing this lesson, you should be able to:

• Navigate and work with objects on the Catalog page
• Describe the use of roles in administering permissions
• Administer Oracle Business Intelligence Presentation
Catalog permissions
• Administer system privileges

3-2 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.
 Administering Objects in the
Presentation Catalog
New Search

Toggle to
admin Refresh
view
Show quick Sort by name, type,
access modified date, and owner.
folders.
Folders
pane

Selected
object
Selected
object
Tasks
pane

Available tasks for

the selected object

3-3 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.
 Searching the Catalog

Search the catalog in one of two ways:

3-5 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.
 Security Goal: Access and Actions

• Users can access only the data that is appropriate for

them.
– Achieved by applying access control in the form of catalog
permissions
– Performed on the Catalog and Home pages
• Users can perform only those actions that are appropriate
to them.
– Achieved by applying user rights in the form of privileges
– Performed on the Administration page

3-6 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.
 Oracle BI Security and Catalog Security

• Users, groups, and roles control:

– Catalog object permissions
— For example, analyses and dashboards
– Privileges for BI feature access
• Login rights, user authentication, and groups and roles are:
– Governed through components in the Fusion BI Domain
– Provided with default groups and roles for most initial
security needs

3-7 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.
3-8 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.
 Default BI Roles

• Roles drive permissions and privileges.

• Oracle BI provides default roles and privilege settings.
Administrative user

Default application roles

3-9 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.
 Presentation Catalog
Folder and Object Permissions
• Permissions control access to shared information in
catalog objects and Interactive Dashboards.
• Permission types can be customized and include:
– Full Control
– Modify
– Open
– Traverse
– No Access

3 - 11 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 Permission Inheritance

• Permissions granted explicitly to a user have precedence

over privileges granted through application roles.
• Permissions granted explicitly to an application role take
precedence over any privileges granted through other
application roles.
• If security attributes conflict at the same level, a user or
application role is granted the least restrictive security
attribute.

3 - 12 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 Default Application Role Hierarchy Example

BI Consumers Group
BI Consumer App Role
User1, User2, User3 Permission: access analyses

B IAuthors Group B IAuthor App Role

User4, User5 Permission: create analyses

BI Administrators Group
BI Administrator App Role
User6, User7 Permission: manage repository

User Name Group Membership: Application Role Membership: Permission Grants:

Explicit/Inherited Explicit/Inherited Explicit/Inherited
User1
User2 BI Consumers: Explicit BI Consumers: Explicit Access analyses: Explicit
User3

User4 B IAuthors: Explicit B IAuthors: Explicit Create analyses: Explicit

User5 BI Consumers: Inherited BI Consumers: Inherited Access analyses: Inherited

User6 BI Administrators: BI Administrators: Explicit Manage repository: Explicit

User7 Explicit B IAuthors: Inherited Develop analyses: Inherited
B IAuthors: Inherited BI Consumers: Inherited Access analyses: Inherited
BI Consumers: Inherited

3 - 13 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 Setting Object Permissions

To set permissions on a catalog folder or object:

1. Click Permissions.
2. Add roles.
3. Set permissions.

3 - 14 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 1. Click Permissions

Select a folder or catalog folder and click Permissions.

Permissions toolbar
Owner and
location.

Assign owner.

3 - 15 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 2. Add Roles

Add users or roles to the Permissions list.

1 Search for users and roles.

Limit search to
users or roles. Show effective
permissions.
Selected role is added
3 to the Permissions list.
2

Default
application
roles

3 - 17 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 3. Set Permissions

Set object permissions

3 - 18 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 Viewing and Setting Properties

Properties control object attributes.

3 - 19 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 Setting System Privileges

To set system privileges:

1. Click Administration and Manage Privileges links.
2. Pick users and roles.

3 - 20 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 1. Click Administration and
Manage Privileges Links

3 - 21 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 2. Pick Users and Roles

Add Users/Roles button 2

3 - 22 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 Catalog Groups

Create and manage groups specific to the Presentation

Catalog.
Create new Group. Delete group.

Edit Group.

3 - 23 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 Archiving Catalog Items

Select an object in the catalog and click Archive.

3 - 24 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 Summary

In this lesson, you should have learned how to:

• Navigate and work with objects in the Catalog page
• Describe the use of roles in administering permissions
• Administer Oracle Business Intelligence Presentation
Catalog permissions
• Administer system privileges

3 - 26 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 Practice 3: Overview

This practice covers administering catalog objects and

permissions with users and roles.

3 - 27 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 Quiz: Overview

This quiz examines your knowledge of the Presentation

Catalog and managing permissions.

3 - 28 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 Quiz

Which of the following are ways to access the permission for an

object?
a. Use the Permissions task in the Tasks pane in the Catalog
page.
b. Click the More link for an object in the Home page and
select Permissions.
c. Click the object’s Edit link and open its properties in the
Analysis Editor.

3 - 29 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.

 Quiz

If security attributes conflict for an object, a user or an

application role is granted the least restrictive security attribute.
a. True
b. False

3 - 30 Copyright © 2011, Oracle and/or its affiliates. All rights reserved.