Oracle Cloud Infrastructure Documentation

Configure Data Security

As a security administrator, provide users with access to data using the custom-created data type application roles.

You can add filters to data retrieved from logical or presentation objects based on the data roles assigned to users. If you specify functional groups, Oracle Fusion Data Intelligence combines all the filters in the same functional group using the OR operator and combines all sets of filters in different functional groups using the AND operator.

You can add one customization step for each data role. The elements that you can secure are from the Main branch of the semantic model. Hence, if you need a newly added object to be secured, then you must ensure that the customization branch containing the newly added object is merged with the Main branch before configuring the security. If any of the custom-created role is no longer available, then the security configuration for that role is removed from the "Configure Data Security" step.

  1. Sign in to your service.
  2. In Oracle Fusion Data Intelligence Console, click Semantic Model Extensions under Application Administration.
  3. On the Semantic Model Extensions page, click Security Configurations.
    You see the existing security configurations, if any.
  4. In the Security Configurations region, click Add Configure Data Security Step.
  5. In step 1 of the wizard, enter a name for your step, select a data type application role, and then click Next.
  6. In step 2 of the wizard, from the Available Objects drop-down list, click either Presentation Objects or Logical Objects to select the objects that you want to secure with the selected data type application role.
    If you're viewing the presentation objects, then expand the subject area folders and double-click the objects. If you're viewing the logical objects, then double-click the logical table folders or expand the table folders and double-click the objects. You see the selected objects under Object to be secured in the right pane.
  7. Optional: In Functional Group, select a prebuilt functional group or enter a unique functional group name in the text box to create a custom functional group.
  8. For the Filter Argument, click the Function icon to define how the data filter gets applied.
    Use the Expression Editor to enter the filter, based on the session variables that you had created previously. To view an example, see Custom Security in Fusion Data Intelligence.
  9. Click Next.
  10. Click Finish.
  11. Optional: In the Security Configurations region, click Reapply Steps to validate the security configuration-related steps against the current state of the model.