Security hierarchy based in OBIEE

Hello

I have a simple request, but will have a hard time trying to figure it out.

I have a dimension store with the following levels: store - city - country

I have a single measure in the fact table: sale

I want to be able to allow users a specific group access sales grouped by country, but not being able to go into the details by city or store.

Other users would be able to see the sales by country and city and no stores.

A third group of users would be abe to see sales of all three surveys.

How can I achieve this in the security model for RPD?

Thank you

Joao Moreira

Hi João,.

It is possible. check these items. Looks like useful for this.

Security at the level of the handful of hierarchy OBIEE - function IndexCol | GerardNico.com (BI, OBIEE, data warehouse and OWB)

A different look at the hierarchy based security in OBIEE | Carpediemconsulting blog

Thank you
AJ

Tags: Business Intelligence

Similar Questions

  • restrict the application of hierarchy based on a given value at the leaf node level

    Is it possible to restrict a query of the hierarchy based on a test given at the leaf node level?

    For example, in the data presented below, I like to shoot the entire hierarchy for terminal nodes that have 'John' in the criteria:

    Parent value criteria
    Z
    A Z
    B HAS
    C B John
    D B Smith
    E Z
    F E
    John F G
    H F Neal
    I have F John

    Filertering on John I want to return together to resemble the following prints:
    A
    B
    C
    F
    G
    I have

    I tried the following, but it only gives me the nodes:
    SELECT
    LPAD (' ', (LEVEL) * 3,'.) ') || t.Valeur
    OF tbl_test t
    WHERE t.criteria = "John".
    START WITH t.valeur = "Z".
    CONNECT BY PRIOR t.valeur = t.parent;

    Rule return form the above query:
    C
    G
    I have

    Any help is greatly appreciated.

    It is possible, but not conventional =)

    Sys_connect_by_path allows you to concatenate the path and another request of the hierarchy of dividing a value generated in the rows.

    with t as (
    select 'Z' as  Val , null as  Par, null as  Criteria from dual union all
    select 'A' as  Val , 'Z' as  Par, null as  Criteria from dual union all
    select 'B' as  Val , 'A' as  Par, null as  Criteria from dual union all
    select 'C' as  Val , 'B' as  Par, 'John' as  Criteria from dual union all
    select 'D' as  Val , 'B' as  Par, 'Smith' as  Criteria from dual union all
    select 'E' as  Val , 'Z' as  Par, null as  Criteria from dual union all
    select 'F' as  Val , 'E' as  Par, null as  Criteria from dual union all
    select 'G' as  Val , 'F' as  Par, 'John' as  Criteria from dual union all
    select 'H' as  Val , 'F' as  Par, 'Neal' as  Criteria from dual union all
    select 'I' as  Val , 'F' as  Par, 'John' as  Criteria from dual
    )
    select distinct regexp_substr(path, '[^,]+', 1, level) as val
    from (  SELECT  sys_connect_by_path(val,',') as path , rownum as row_id
              FROM   t
            WHERE t.criteria = 'John'
            START WITH t.val = 'Z'
            CONNECT BY t.par = PRIOR t.val
         )
    connect by nocycle regexp_substr(path, '[^,]+', 1, level) is not null
    and prior row_id= row_id
    and prior dbms_random.value is not null
    
  • Problem creating hierarchy based on 2 physical dimension tables

    I'm having a problem create 1 dimension logic with a hierarchy of exploration, based on two separate physical dimension tables. The errors I get when navigating in the exploring hierarchy is:
    "Cannot find coverage source logical table to the columns of the logical" &
    "Missing join between the logical tables.

    I use OBIEE 10.1.3.4
    Here are the details of what I have set up as:

    Physical layer:
    Table DIM_ORG with the dimension columns:
    -dimension_key
    -org_total_code
    -org_total_description
    -org_detail_code
    -org_detail_description

    Dimension table DIM_DEPT with columns:
    -dimension_key
    -dept_total_code
    -dept_total_description
    -dept_detail_code
    -dept_detail_description

    FACT_SALES table with columns of facts:
    -fk_org
    -fk_dept
    -sum_sales

    Physical joins:
    FACT_SALES.fk_org = DIM_ORG_dimension_key
    FACT_SALES.fl_dept = DIM_DEPT.dimension_key

    Business model and the mapping of layer:
    I created a logical dimension ORG_DEPT. It contains two sources of logic table (DIM_ORG & DIM_DEPT) and the following logical columns:
    -All departments (mapped to dept_total_code)
    -Organization (mapped to org_detail_description)
    -Organisation number (mapped to org_detail_code)
    -Department (mapped to dept_detail_description)
    -Department Code (mapped to dept_detail_code)
    The logical key of the company is based on the combination of number of organization & Department Code

    The hierarchy, I need is: all departments-> organization-> Department so I created the following hierarchy for ORG_DEPT:
    -Total level containing: all departments
    -Organization level containing: company (defined as logical level key) number & Organisation (als defined the key level drill)
    / Department detail level containing: Department (defined as logical level key) Code and the Department (defined as key level drill).

    In the LTS of the ORG_DEPT dimension, I've set levels of content for sources:
    DIM_ORG: Level of organization
    DIM_DEPT: Level of detail Department
    The LTS non - joins inner - came against the associated physical tables.

    I created a logical fact table (based on the physical fact table) SALES and joined him on the ORG_DEPT logical dimension table.
    In the LTS, level of content for ORG_DEPT is part of the level of retail service. Non - joins inner were aded against related physical tables.

    When I create a report in response to test the hierarchy and select only "all departments' I get the value of the returned correct size. When I try to break through to the next level, I get the following ODBC error:
    "Could not find coverage source logical table for logical columns: [all of them]." "Please check more detailed level keys are correctly mapped.

    When I create a report in responses and select "Every department" and "Sales", I get the correct result. When I try to break through to the next level, I get a different ODBC error:
    "Lack of join between the logical tables DIM_DEPT and DIM_DEPT: there must be at least a physical link to join between the underlying physical tables.

    All suggestions are welcome!

    Thank you!

    You have no relationship defined between the Department and org.

    You can either:
    a. create a table of physical dimension with a composite key of org_id & dept_id if there is a relationship defined somewhere, then to obiee model as you have already done, but in the physical layer on the composite key join
    b. model your exisitng as two-dimensional and two hierarchies tables and set up a path of forest favorite between them according to your needs.

    Kind regards

    Robert

  • pulling a description field in a hierarchy based on an ID to a different hierarchy

    Hello

    I could use some help, I am a newbie of DRM and use it for the first time, picking up some old data for my company who have nobody to ask, and I am way over my head at the moment.

    I am shooting a description local property (testDescription) on a hierarchyA in a hierarchyB node node based on two different local properties that have the same value, call the testIDa to hierarchyA and testIDb for hierarchyB.

    I created a property called testPullDescription , with a derived formula that I hope to use the hierarchyB for this reason, the formula takes the 'empty' value now.

    HierNodePropValue (hierarchyA,testIDa,testDescription)

    Right now, when I look at hierarchyB, testPullDescription value is empty.

    I know it's fake because nowhere in the syntax can I specify testIDb to actually compare the two IDS, but I don't know enough about the DRM to know what is the right formula to get this working correctly?

    Thank you and best regards,

    Derek

    Hi Derek,.

    One of the challenges of DRM is keeping in mind when a local node attempts to access to a global node property and vice versa. Bugs will often result when not done properly. Rather than focus on forms of DRM, you should really start to pass to the Script, because they are more efficient, and that coding is easier to read and manage.

    TestPullDescription in order to become a property derived local, try to use the below in your script and see if it works for you:

    yesterday var is node. Version.HierByAbbrev ("hierarchyA");

    var / / desc = null;

    If (yesterday. NodeExist ("testIDa"))

    {

    Var NodeA is yesterday. NodeByAbbrev ("testIDa");

    DESC = nodeA.PropValue ("testDescription");

    }

    return of ESCR;

    Sonny

  • Security in APCC 12: OBIEE report access

    Hello

    We have configured the OBIEE for version 12 of the APCC. My question concerns the user access to reports and dashboards OBIEE. How we can configure user with only read access to dashboards.

    I know there are Supply Chain Analyst responsibility that is created by default, but if I create new responsibility how can I create a link that to OBIEE.

    Thank you and best regards,

    Ankit

    HT

    In the case of CCPA, I guess that you are authenticating by EBS, so the responsibilities in EBS are mapped to those you see in Enterprise manager (him must match with the exact same names)

    Now, if you need create a new responsibility only reading custom, you must go to the EBS > System Administration > Security > responsibility > Define > Test_RO create

    Go to EM and create the same called Test_RO and also to change the existing role of BIConsumer and make this Test_RO as a member of it.

    And connect on OBIEE and go to Administration > manage privileges > Restrict access what ever you don't want these read access only to users.

    The list of privileges and that you limit here: how to disable the privilege answer in APCC? (Doc ID 1451932.1)

    I hope this helps.

    Thank you

    SVS

  • Position hierarchy based on secondary assignments.

    Hello

    We have created a hierarchy of position. When you set the hierarchy for a position, which is a secondary assignment for one person, is visible.
    However, when we create a PO and transmit to the person from whom the secondary position in the hierarchy, does not come forward to the list.
    If we include position primary assignment in the hierarchy, that the person is available at the front to the list.
    Is there any sort of data security works behind?

    Abdul Wahid
    http://iwidi.org

    I understand what you are looking forward is an enhancement request
    Take a look on the underside of ER

    1351979: APPROVAL WORKFLOW ON THE ALLOCATION SECONDARY IN THE HIERARCHY OF THE POSITION

    Purchase uses only primary assignments for buying functions.
    To use the hierarchy of Position, it must be main Setup on the employee
    assignment.

  • Security of data in OBIEE

    Is there any mechanism for the authorization, which allows the user to see a specific subset of data from the fact table (for example user1 accesses for business unit1 and 2 sales data, user2 can access the sales data for the business unit 3 and 4)?

    (Something similar to private database virtual VPD settings but we want this layer OBIEE)

    Hello
    You can add filters data for some users or groups to the RPD. This feature is accessible from the Manage---> Security menu.

    Kind regards

  • Security using groups of OBIEE 10 g

    I managed to recover a user groups in the GROUPS of Session variables in my deposit.

    Now, how can I use these groups to enable security of data in the dashboards / responds, that is, how can I be sure that users see data only according to their groups in reports?

    You must create groups of Webcat manually as same as the groups created in the RPD.
    Use of below once the connection using the administrator of responses
    Settings-> administrator-> manage Presentation catalog users and groups-> create a new catalog group

    Let me know if you need info.

    If brand pls help

    Published by: Srini VIEREN on January 20, 2013 14:25

  • Enable or disable Secure Desktop based on customer/Clientless

    Is it possible to enable desktop set for connections without client while disabling the AnyConnect client connections it?

    Possibility to turn on/off the CSD by tunnel group (TG) / connection profile will come in future image.

    Then you should be able to put a TG for Clientless with / withour CSD; and anher TG for Client AnyConnect/with/without TG.

    Nelson

  • OBIEE and Oracle OLAP value based hierarchies

    Hello...

    I have a dimension of value based on Oracle OLAP and want to map on OBIEE Administration tool.
    I was using the link above as reference:
    http://www.Oracle.com/technology/OBE/olap_biee/CreateBIEEMetadata.htm


    There is no option to import from Oracle Database multidirectional. Either import/configure the view created by OLAP as Unballanced or Dimension shredded.

    I also checked this example, but it uses ESSBASE multidimensional source...
    http://www.rittmanmead.com/2008/08/27/ragged-hierarchy-handling-in-OBIEE/


    How to map this Ragged Dimension created in the workspace OLAP in OBIEE Any suggestions or guidance will be highly appreciated...

    Thanks in advance

    Marcos

    @Mark and Marcos:

    No, you don't 'stink' to OBIEE and you aren't big draws. OBIEE can not handle hierarchies measure today. Period. What you face Oracle OLAP is true to the CSG and Essbase as well. Are jagged, asymmetrical, etc, that no problem at all for normal dinemsional hierarchies, but you can forget about it in the hierarchies of the measure.

    Basically, it comes down to the fact that OBIEE needs a 'table' to act as the 'fact '. So if I have a cube with the 'Scénario' and 'Account' then I have to choose one as the measures dimension and the other as a normal dimension.
    If I choose "Account", then the members account will be flattened and becomes my fact table. The Scenario dimension becomes a dimension with the generations as the columns of the logic and the scenarios themselves appearing as members of dimension.
    If I "turn" the cube and do 'Scénario' my measure dimension, accounts become members in a dimension hierarchy and scenarios become columns in my table of facts.

    There is no work around in any version of 10g and the "rotation" is the only way you can create reports if you work with several measures on several levels of the hierarchy.

    See you soon,.
    C.

  • Question of hierarchy OBIEE 10 g

    Hi all


    I created a hierarchy (manually) in OBIEE 10 years G Level.For example, quarter, month, and day.

    All are workinig fine, but when break through us year quarter, it will take at the level of the child. Yet once the level of the year presents hyperlink in the cumulative process.

    I want yet rollup at the level of the year.

    Can you help me please on this.

    Thank you
    Sunil

    Take a good look and this expected behavior.
    Suppose that you pulled the year and click on it
    Quarter of the year
    both get hyperlink
    If you click on the year
    Year months Qtr

    If you click Qtr in above cases
    Year months Qtr

    Hope this is clear.

    Check if help

  • I'm unable to remove the protection, when I open the file - properties - security. I don't have an option to remove protection, how can I remove it?

    I'm unable to remove the protection, when I open the file - properties - security. I don't have an option to remove protection, how can I remove it?

    Hi aymana10507726,

    With player application you can not remove the protection.

    However, you can perform using Acrobat application.

    Remove password security

    You can remove security from an open PDF if you have the permissions to do so. If the PDF is secured with a security policy based on server, only the author of policy or a server administrator can change.

    Open the PDF file, and then click Tools > Protect > Encrypt > remove security.

    Your options vary depending on the type of password security attached to the document:

    If the document contains only a Document open password, click OK to delete the document.

    If the document contains a permissions password, type it in the box, enter the password, and then click OK. Click OK again to confirm the action.

    Kind regards

    Nicos

  • Build my own workflow security feature

    Hello everyone,

    I use JDev version 11.1.2.3.0

    Last week, I was doing the research to allow security J2EE applications. Of course, the ADF has its own security infrastructure (I learned is based on JAAS), but I'm testing with the essentials version in which security ADF is not included. No problems until now, I managed to set up a base of security (with JAAS) on my application server (Glassfish v3).

    But I noticed an interesting feature as part of the security of the ADF, "security on bounded task flows". It has some advantages, of course, working with several bounded task flows.

    So my question is, knowing that Glassfish uses JAAS to an area of safety and the ADF security is based on JAAS, is it possible to activate this function on my application server (or another programmatic approach may be using ordinary security J2EE)? It is said that BTF security checks the entry point for the BTF and given that the url inside it does not change, is it enough to allow the Security just for the view that represents the entry point?

    (Maybe I'm not very clear, so any suggestion/clarification will be greatly appreciated).

    Thank you in advance.

    Finally, I found something interesting. This post of Andrejus Baranovskis Blog: Security Essentials ADF for Glassfish Deployment implementation, describes a way to do this with a programmatic approach. It seems the perfect answer for what I was looking for. Except can be a thing: it uses the property TF 'activation' and I'm not sure of what its impact when it comes to security (on the documentation, I find nothing other than "it toggles the TF"). So, an update of the original question could be: "what happens when the Working Group is not active?" . He is still alive in the cycle of life demand? It is available in another way (to be noted that, instead of pageFlow scope as in the example Andrejus, I used view extended to bean that manages the navigation of the regions).

  • Secure area questions

    Hi BC community, I have a few questions Secure area that I need help:

    (1) is it possible to put an expiration of secure area date 30 days from the Date a shipment of form Secure area (via the secure payment area), without having to do it manually via the ADMIN of BC?

    (2) I have a customer who has 3 areas of Secure.  Each Secure area must have a basic text content shown.  The content is specific to this protected area.  Question - I know how to hide/show info Secure area based on the BC-0 {whoisloggedin} and {whoisloggedin} settings - 1, but is there a way to add an ID of the < div > tag to show only the content relevant to a specific area Secure ID?

    Thank you

    Aaron

    Hello

    You can put this in a form:

    Date - October 1, 2013

    There is currently no way to expose it that your request directly, BC in the live version of it has no area ID in the sense of what you use to. But you can look at to try to use:the Developer Reference

    (Javascript/css solution)

  • Hierarchy of basic level?

    Hello


    I have two dimension tables with a join relationship in the physical layer, and now I need on top of the 2 tables to create the hierarchy level in layer MDB database.

    By maintenance single logical table with all the columns required 2 tables (using multiple LTS) and the creation of hierarchy on this subject.

    I want to know is this is the right way to create the hierarchy level?

    or is there an alternative way to do it,

    Please need your suggestions.

    Thank you.

    Since you have 2 tables proceed as below:

    Suppose DimA and Edin are 2 tables and you want to create the hierarchy of basic level for Edin. In this case, another table DimA treat it as a fact and create aliases for this dim as FactDimA.

    Participates in the physical layer
    FactDimA-> DimA
    FactDimA-> Edin

    MDB: Pull these 3 tables and create the hierarchy based according to the needs and for another dim just create the default hierarchy

    Use the settings in FactDimA and descriptive or column of type char DimA

    If you have any questions; I guess you're not as I said.

    Finally mark it as correct ;)

Maybe you are looking for