376 total views, 12 views today

How to configure BI Publisher Security model

Once we installed the Oracle BI Publisher, the common question arise is where am I going to save my credentials, which is usernames and passwords in BI Publisher. First, we need to check who are all the user going to access BI Publisher and where their information is used. In an enterprise level organization, the username and passwords are stored in an LDAP Server, Oracle database or an external application. In a smaller company, they directly add the credential information inside the application. Whatever case, Oracle BI Publisher both feature. The below table outlines the supported BI Publisher Security Model, that is where we can store credentials.

 

Security Configuration
Fusion Middleware
BI Server
BI Publisher
E-Business Suite
 Siebel Security 
LDAP

 

As you seen in the above table, we can save the BI login information either in an external application like LDAP or directly inside the application. In this section, we explain how to setup the default BI Publisher Security Model. The BI version I am using her is 12C.

 

1. Setup BI Publisher Security Configuration

1.1) Login into XMLPSERVER as BI Administrator (WebLogic), Click Administration on the top right corner and Click Security Configuration under Security Center

 

041217_0504_Howtosetup1 How to configure  BI Publisher Security Model

 

1.2) Make sure to Enable Local Superuser and input a username and password. This is a BI admin account and helpful in case if we do anything wrong.

 

041217_0504_Howtosetup2 How to configure  BI Publisher Security Model

 

1.3) If you want to setup SSO, enable it here on the same page

 

041217_0504_Howtosetup3 How to configure  BI Publisher Security Model

 

1.4) Scroll to the bottom of the page and select the Security Model. Default Fusion Middleware is selected. You can change theBI Publisher  Security model you want. BI must be restarted for the changes takes effect

 

Oracle Fusion Middleware => Input the usernames and passwords in WebLogic Security Realm and associate the BI roles in Fusion Middleware (/em)

Bi Publisher => Add the usernames and passwords directly inside XMLPSERVER. (After Restart, Login into BI, Administration, Security Configuration, User, and Roles )

BI Server => Add the username and password inside Analytics

LDAP => Input the LDAP server configuration where the credentials are stored

Oracle Database => Input the Oracle database connection where your credentials are stored

Oracle E-Business Suite => BI Publisher  will use credentials from E-Business Suite

Siebel Security => BI Publisher will Siebel credentials 

 

041217_0504_Howtosetup4 How to configure  BI Publisher Security Model

 

2. Security Model – Oracle Fusion Middleware

 

As you see in the above image, Fusion Middleware is the default security model in BI Publisher, so the question is where being I am going to add the username and passwords.

2.1) Login to the WebLogic console where the bi is running (URL: http://host:port/console, default username: WebLogic),

 

041217_0504_Howtosetup5 How to configure  BI Publisher Security Model

 

2.2) Click New to add a new user

 

041217_0504_Howtosetup6 How to configure  BI Publisher Security Model

 

2.3) Once the user added, Go to the enterprise manager (URL: http://host:port/em , User: WebLogic ), click on the WebLogic Domain, Security, and Security Configuration

 

On BI 11G: Expand the Weblogic domain on the left-hand side, Right click on the domain, Security and Application Roles

 

041217_0504_Howtosetup7 How to configure  BI Publisher Security Model

 

2.3) Search for obi in Application Stripe, Select BI Consumer or BI Service Administrator, Click Edit and add the add the user. Now the added user can login into BI Publisher

 

BI Consumer => User having access to run reports in BI Publisher 

BI Service Administrator => User can run & do administer BI Publisher 

 

041217_0504_Howtosetup8 How to configure  BI Publisher Security Model

 

That’s it. Please leave a comment below if you have any questions. 

govindan How to configure  BI Publisher Security Model
Connect me

Govind

Thank you for visiting my personal blog. Myself Govindan, Software Developer by profession since 2006 and hence I started this blog early in 2016 and ever since I've been writing about technologies experienced and learnings of everyday life.

The views expressed on this blog are my personal views and do not necessarily reflect the views of my employer.

Please feeling free to reach me on any comments and feedbacks you have. Would be more than glad to listen and reply šŸ™‚
govindan How to configure  BI Publisher Security Model
Connect me
By | 2017-04-12T00:21:04+00:00 April 12th, 2017|Categories: OBIEE|Tags: , , |3 Comments
  • Simone Henry

    I’m having trouble doing a custom SSO solution. I want to use “Other SSO Server” with my database for authorization. Is there a way to do this? There doesn’t seem to be much documentation for these other options.

    Thanks,

    Simone

  • Harshal Pawar

    Hi Govind,

    Thanks for great blog.

    We have done migration from obiee11g to obiee12c and also done post migration steps for bi publisher , but after that we able to run report in bipublisher but not able to schedule the report .

    In bipublisher log file we found below error message .

    [APP: b
    ipublisher] [partition-name: DOMAIN] [tenant-name: GLOBAL] [xdojobid: 2467] [essjobid: null] !!!!!!! BurstingJobProcessor.onMessage :: ::JOB_PROCESSOR_EXCEPTION::[INSTAN
    CE_ID=bip.bi_server1] [INSTANCE_JOB_ID=2467]::Error to reestablish global user:: USERNAME=[webadmin] INSTANCE_JOB_ID=[2467::Failed to impersonate user. USERNAME=webadmin
    INSTANCE_JOB_ID=2467::java.lang.Exception: Failed to impersonate user. USERNAME=webadmin INSTANCE_JOB_ID=2467[[
    at oracle.xdo.enterpriseScheduler.bursting.JobUserCache.getUser(JobUserCache.java:91)
    at oracle.xdo.enterpriseScheduler.bursting.BurstingJobProcessor.execute(BurstingJobProcessor.java:210)

    Regards,
    Harshal Pawar

  • Imran Khan

    Hi Govind,
    Great work Keep it up.
    Please share Primavera P6 Analytics installation steps.
    Many thanks
    Imran

Like us on Facebook.
Connect!