4/20/2012

row level security OBIEE Step by Ste

OBIEE Step by Step Guide

October 9, 2009
Hiding Stuff in OBIEE Based on User Profiles
Filed under: OBIEE Hiding Techniques Tags: column level security, hading sections in a dashboard, hiding dashboard tabs, obiee, OBIEE user profiles, row level security, security harikv @ 5:18 pm Having seen so many ways on how you can secure your presentation layer based on logged in user profile, I thought this would be a nice place to consolidate the list together and give you step by step guides on these implementations. Ways of hiding stuff .. one way I call it.. are 1. Column Level Security 2. Row Level Security 3. Hiding certain sections of the dashboard 4. Hiding certain tabs of the dashboard How do we implement each of these techniques and when is an interesting concept. Lets delve in further. For demo purposes, I am using the Famous free paint dashboard and creating two users into the rpd. One user is adminTest, who can see all the pieces of the dashboard and is member of Administrator group. Other is executiveTest, who can see only certain pieces of the dashboard and each of them being implemented using above hiding scenarios explained. Open rpd.. Go to Manage > Security > Security Manager pops up as below. To add a new user in Security Manager, go to Action > New > User and type in the new user name and password.

Column Level Security: Lets say you want to hide all dollar amounts from executiveTest user of Paint Subject area. Open up your rpd, go to presentation layer, choose Paint subject area, choose Sales Measures and columns corresponding to $ as shown below (all selected).

wordpress.com/tag/row-level-security/

1/8

4/20/2012

row level security OBIEE Step by Ste

Lets start with Dollars column. Right Click on it, Choose Properties and then click on Permissions button as hsown below.

When you click Permissions, a new window pops up. Check All Users button on the top and Uncheck EveryOne Read access.

wordpress.com/tag/row-level-security/

2/8

4/20/2012

row level security OBIEE Step by Ste

See the Above picture. Everyone except executiveTest user and its group have the access rights on this column. Click OK. Remeber that if there is no red cross mark or the checkbox is unchecked, it means its disabled. Lets repeat the same for all the column that we want to hide from this user. Now Click Ctrl +K for doing a consistency check. Or Click Ctrl + E for opening up the consistency checker window and click Check All Objects. Also, save the repository once the consistency checker has come up with no errors. Restart your services once the repository is saved. Go to the presentation layer as Administrator and create an answers query using Paint subject area and the dollars columns as shown below.

wordpress.com/tag/row-level-security/

3/8

4/20/2012

row level security OBIEE Step by Ste

Save the report. See the results as shown below.

Now Login using the adminTest account and you will see the same report with all columns visible to the user. When you select Paint subject area, and in the left pane, you will see all columns (including columns refering to $). Now Login using executiveTest and see at the left pane of Paint subject area. All the columns referring to $ have been invisible.

wordpress.com/tag/row-level-security/

4/8

4/20/2012

row level security OBIEE Step by Ste

Also, when you try to open the previously saved report with executiveTest user name, the answers throws in an error.

Now to fix this error, go to c:\Oracle BI\Server\Config\NQSConfig.ini file Look for the word POPULATE_AGGREGATE_ROLLUP_HITS inside this file. The default value for this parameter is NO. Change that to YES. Save the file. Now restart your services. Go back and login as executiveTest and open up the same answers report we saved before. This time, the report does not show up any errors.

wordpress.com/tag/row-level-security/

5/8

4/20/2012

row level security OBIEE Step by Ste

Also, see that all the $ columns we had before are invisible and the answers work perfectly. Now, lets see what happens if executiveTest is given exclusive access even if the Executive group access has been disabled as follows or vice versa.

In both these cases, there is no effect of security and the answers report works fine as if any other user has logged in. In essence, to implement column level security, the user and its group both should be restricted access to that column. Lets think of this in the real implementation. All

wordpress.com/tag/row-level-security/

6/8

4/20/2012
Until next time.. Kudos to all OBIEE evangelists..

row level security OBIEE Step by Ste

projects that I worked on always have users being part of some group rather than an individual.

Check out how sections of your dashboard can be hidden from certain users/groups of users As always, I appreciate your comments. Comments (2)

OBIEE Nerd

Search

Categories
BI Applications Data Model (3) BI Best Practices (1) Business Objects to OBIEE (3) DAC (1) OBIEE 11g Launch (1) OBIEE Answers Techniques (1) OBIEE Buzzwords (1) OBIEE Catalog Manager (1) OBIEE Errors (2) OBIEE FAQ (3) OBIEE Functions (1) OBIEE gskit (1) OBIEE Hiding Techniques (3) OBIEE Impersonator (1) OBIEE Installation (1) OBIEE metadata (1) OBIEE Organization (1) OBIEE Project Team setup (1) OBIEE Proxy (1) OBIEE Requirements Gathering (1) OBIEE Security (4) OBIEE Startup and Shutdown Scripts (3) oc4j windows service (2) Oracle BI Publisher (5) Oracle Business Intelligence Applications (1)

Nerds of OBIEE Tag Cloud

automatic startup and shutdown BI Best P ractices username and password column level security

BO to OBI BO to obiee Business Objects Universe to OBIEE Installing migrating bo universes to obiee

bypass

converting bo reports to obi converting bo reports to obiee Groups hading sections in a dashboard hide oc4j
obiee obiee best practices OBIEE Catalog Manager

window obiee hiding columns in answers request obiee hiding dashboard tabs hiding sections based on user obiee Hiding Sections in Dashboard Inheritance installation problems

OBIEE
OBIEE GS Kit

Merging obiee presentation catalog merging obiee web catalog

OBIEE interview questions

OBIEE sections hiding dashboard OBIEE Security P ermissions OBIEE Services sequence OBIEE shutdown OBIEE shutdown script OBIEE SSO

OBIEE startup OBIEE startup script OBIEE user profiles OBIEE windows authentication OBIEE Windows SSO integration oc4j window obiee oc4j windows service order of obiee services Priveleges row level security security Windows Vista

Recent Posts
2012 BI Magic Quadrant from Gartner DAC Server as a Windows Service OBIEE 11g Refreshing User GUIDs Process Flow Oracle Business Intelligence Applications 7.9.6.3 Release Buzz Words and Questions around OBIEE 11g and OBIEE 10g OBIEE Date Errors and Fixes OBIEE Interview Questions Continued Part 2 OBIEE 11g New Features, Launch Event

wordpress.com/tag/row-level-security/

7/8

4/20/2012
OBIEE Interview Questions OBIEE Gathering Business Requirements

row level security OBIEE Step by Ste

April 2012 M TW T F S S 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 Feb Theme: Silver is the New Black. Clone this site at WordPress.com

wordpress.com/tag/row-level-security/

8/8