My Oracle Support Banner

OBIEE Permissions And Privileges Are Not Refreshed After Modifying Them And Log In (Doc ID 1586664.1)

Last updated on FEBRUARY 17, 2019

Applies to:

Business Intelligence Suite Enterprise Edition - Version and later
Information in this document applies to any platform.


Oracle Business Intelligence Enterprise Edition (OBIEE) using init blocks as security.

After modifying the Application Roles (adding or deleting) assigned to one user (in this case, using an Oracle Table), when you log in OBIEE, under My Account > Roles and Catalog Groups, it is properly reflected. However, the permissions and privileges are NOT 'refreshed' after some minutes.

You are currently upgrading OBIEE environment from to

You have setup authorization and authentication in the old 10g style, in the repository. You get the security for your users from an external database.

You have a repository file using initialization blocks for LDAP, for both Authentication (USER variable) with the check box 'Require for Authentication' and also Authorization.

You modified the application role associated to one user. For example: You remove the 'BIAdministrator' application role for one user.

When you log in and go to My Account- "Roles and Catalog Groups", the 'BIAdministrator' is NOT displayed, which is fine. However, the 'Administration' link is still available (with only the Marketing option) and also the 'Act As', and none of them should be available. You have to wait some minutes before these 2 options are NOT displayed.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.