Monday, 5 August 2013

OBIEE Column Level Security

Some columns,such as Social Security Number(SSN) has sensitive information that should not be visible to all users or groups.We can restrict the visibility of this information/data with the help of Column level security.
To achieve this ,we need to make the changes in RPD in presentation layer.Below are the steps:

In Repository we need to modify the permissions of a particular column.
Right click on column->select "properties" 




Click permissions .By default,Everyone group will have read access.

Check "Show all users/groups" and then uncheck "Everyone" and check  the groups that should have read access rights on the column.





So now,Basic_users does not have permissions to view cust_id column but power_users does,so if there is any reports or dashboard that contains the cust_id column ,power_users will be able to run the report and view the cust_id data but basic_users will the not be able to run the report and will get an error message
"State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 27005] Unresolved column: "Employees"."SSN". (HY000)".

this error comes because the report contains the column which basic_user does not have read access to,so to fix this error we have to make a minor change in NQSConfig.ini file(C:\OracleBI\server\Config) change the parameter "PROJECT_INACCESSIBLE_COLUMN_AS_NULL" which is under security section.set the value "Yes" by default it is set to No. then restart the BI server and Presentation server services.

Now,  basic_user will be able to run the same report correctly , but cust_id column will not be displayed.

Please Share your Feedback and keep me posted.
Have a nice day.:)
Thanks 

No comments:

Post a Comment

A fatal error occurred while processing the request. The server responded with: FOProcessor cannot run without a valid TMP directory. Please check if TMP directory exist and write enabled.

When attempting to export a Dashboard to Excel the following error message in sawlog is found: A fatal error occurred while processi...