Oracle Exalytics With Active Directory (AD) Authentication And Database Authorization Not Showing Expected Groups in OBIEE My Account Settings (Doc ID 1513032.1)

Last updated on JANUARY 05, 2015

Applies to:

Oracle Exalytics Software - Version 1.0.0.1.0 to 1.0.0.1.0 [Release 1.0]
Business Intelligence Suite Enterprise Edition - Version 11.1.1.6.0 to 11.1.1.6.4 [Release 11g]
Information in this document applies to any platform.

Symptoms

Environment includes Oracle Exalytics Patchset 1 (PS1) with OBIEE 11.1.1.6.4.  User Authentication is via Windows Active Directory (AD) and OBIEE authorization is being done via a database table.
The configuration is set up similar to that described in Section 3.4.3 Configuring a Database as the Authentication Provider of the Oracle Fusion Middleware Security Guide for Oracle Business Intelligence Enterprise Edition 11g Release 1 (11.1.1), Part Number E10543-06.

Custom templates (adapter_template_usergroup1.xml and adapter_template_usergroup2.xml) were created and copied to the <MW_HOME>/oracle_common/modules/oracle.ovd_11.1.1/templates/ directory on the Exalytics server.  A custom Web Logic authenticator (“MyBISQLGroupProvider”) was also created.  As part of this configuration, users and groups have been defined in the database tables and application roles have been mapped to the user groups.

When testing this setup, users are able to login to OBIEE Presentation Server but unable to see all the groups and roles that are expected.
For example, User A logs in and selects My Account and expects to see "AuthenticatedUser, BIAdministrator and BIConsumer" Role. However, only "AuthenticatedUser and BIConsumer" are displayed and BIAdministrator privilege is missing.

This security has been set up in a standalone OBIEE 11.1.1.6.4 environment and is working as expected. In the standalone system, User A logs in and checks My Account and sees all expected roles: "AuthenticatedUser, BIAdministrator and BIConsumer."

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms