Oracle Fusion BIP AND OTBI Report Security Concept

Oracle Fusion BIP AND OTBI Report Security Concept


Hi Friends, In this post , we will discuss about BIP and OTBI reports security concept. How we can implement security in these reports so that we can control the access of these reports and their data to Business users in Oracle Fusion.

Subject Area :-

In Fusion , Our BIP and OTBI reports creates in the Standard Subject area folder given by Oracle fusion. In OTBI , we can also use the Standard Subject areas to create our Analysis reports. But how we can control the access of these subject areas in Fusion, like which subject area user can access and which cannot.

Subject areas are functionally secured using duty roles. The names of duty roles that grant access to subject areas include the words Transaction Analysis Duty. so by that way we can control which the access of subject area in fusion BIP and OTBI reports.

BIP and OTBI Report Security:- When you creates OTBI and BIP report you can also set permission to these report by right click on these reports. You can control the access of these reports by setting permission like which Role or Which user can access these reports. 

If you have not set permission then reports are secured based on the folders in which they're stored.

You can set permissions to Reports:

• Read, Execute, Write, or Delete
• Change Permissions
• Set Ownership
• Run Publisher Report
• Schedule Publisher Report
• View Publisher Output

Complete Tax Setups in Oracle Fusion

Reporting Data Duty Roles

 

The data that's returned in Oracle Fusion Transactional Business Intelligence (OTBI) reports can also be secured by Data Duty Roles.

 

Each of the Transaction Analysis Duty roles that grants access to subject areas and Business Intelligence Catalog (BI Catalog) folders inherits one or more Reporting Data Duty roles. These duty roles grant access to the data.

if you found this post helpful and you liked it then follow this blog to get notifications for the upcoming posts.

BI Roles For BIP and OTBI reports


BI roles uses for both BIP and OTBI reports. They grant access to Business Intelligence functionality, such as the ability to run or author reports

BI Consumer Role	Runs Business Intelligence reports.
BI Author Role	Creates and edits reports.
BI Administrator Role	Performs administrative tasks such as creating and editing dashboards and modifying security permissions for reports, folders, and so on.
BI Publisher Data Model Developer Role	Creates and edits Oracle Business Intelligence Publisher data models.

If you Want to Learn Oracle Fusion , Please Follow the Oracle Fusion Tutorial 

Oracle Fusion Roles : Detailed Discussion on Oracle Fusion Security roles

Oracle Fusion Roles : Detailed Discussion on Oracle Fusion Security roles

     
Oracle has provide these four Types of roles.

• Abstract role
• Job roles
• Duty roles
• Data roles

For example:- Procurement manager has procurement job roles in oracle fusion but to perform his procurement job he has to perform some duties and that come under duty roles. and this procurement manager can also employee so he have employee role also and that is abstract role.

Abstract role:-

Abstract role not related to any specific his or her Job. We can say abstract role are those which user need to perform his other duties beside his job roles. It means User need to perform the task associated with the duties of work not related to his particular job.

Abstract roles also inherit duty roles.


Job Roles :-

Job roles are a type of enterprise role which is specific to your job in your company.

Job roles inherit duty roles that one person need to perform the tasks associated with the duties of the job. Job roles are not assigned entitlement to access functions directly. You change job roles by changing their hierarchy of inherited abstract and duty roles. Job roles may inherit other job roles, abstract roles, and duty roles.


Duty Roles :

Duty roles are a type of application role. The reference implementation contains predefined duty roles.

For example, the Accounts Payable Manager job role inherits the Approving Payables Invoices Duty role.

Duty roles provide access to the application functions that users require to perform the tasks associated with the duty.

Data Roles :


Data roles are a type of enterprise role. This kind of roles to provide data access or grants. It may inherit abstract, duty or job roles

The access is explicit because the grant is defined based on the needs and data of the enterprise.



If you want to see Other OAF Related Posts , Please visit Below URL.https://rpforacle.blogspot.in/2013/03/oaf_10.html



If you want to see  Oracle Fusion Related Posts , Please visit Below URL.

https://rpforacle.blogspot.in/2018/01/oracle-fusion-learning-tutorial.html

If you want to Learn Oracle Workflow Builder, Please visit Below URL.

https://rpforacle.blogspot.in/2018/01/oracle-workflow-learning-tutorial-1.html

 

ESS Job Security in Oracle Fusion : How we can assign ESS Job access to Specific User in Fusion

ESS Job Security in Oracle Fusion : How we can assign ESS Job access to Specific User.

In friends , In this post I will show you step in Oracle Fusion to assign ESS job Access to Fusion Users.

In Oracle r12 , we create Request Group and then assign Concurrent program to the request group and then as per the responsibility we assign request group to Responsibility and in the last assign responsibility to users so in the end user can only run those reports which are assigned to his responsibility request group.


In Fusion , This Request Group structure is Totally changed. In Fusion We did not create request group to assign Reports. Here in Fusion we pronounce report as a ESS job , so fusion , create Privileges to each ESS job and then we assign ESS job to roles and then in the end we assign roles to Fusion User.


I am sharing you the steps for that.

As per Oracle Metalink Note Doc ID 2251561.1


Create the ESS job using the task Manage Custom Enterprise Scheduler Jobs for ...
For example using task 'Manage Custom Enterprise Scheduler Jobs for Payables and Related Applications' create ESS job
Display Name: 'Rel12 Custom ESS Job – Testing'
Name: XXRel12CustomESS
Path: Rel12

Run the ESS job 'Import User and Role Application Security Data'

Verify that the privilege 'Rel12 Custom ESS Job – Testing' have been created using the Security Console

if you found this post helpful and you liked it then follow this blog to get notifications for the upcoming posts.

For jobs created before Rel12 the privileges created in APM are not migrated automatically. Users need to edit the job definition which will create the privilege for that job. Then run ESS job 'Import User and Role Application Security Data' to see the privileges in Security Console.

 

 

 

 

Using same Security Console create a custom job role and add the privilege 'Rel12 Custom ESS Job – Testing' as function security policy

 

 

 

 

 

 

 

 

 

Assign the created job role to an user

Run again the ESS job 'Import User and Role Application Security Data'

Login as the user who has the given privilege and in Scheduled Processes schedule the new job created