OBIEE Permissions And Privileges Are Not Refreshed After Modifying Them And Log In (Doc ID 1586664.1)

Last updated on JANUARY 31, 2017

Applies to:

Business Intelligence Suite Enterprise Edition - Version 11.1.1.7.1 and later
Information in this document applies to any platform.

Symptoms

Oracle Business Intelligence Enterprise Edition (OBIEE) 11.1.1.7.1. using init blocks as security.

After modifying the Application Roles (adding or deleting) assigned to one user (in this case, using an Oracle Table), when you log in OBIEE, under My Account > Roles and Catalog Groups, it is properly reflected. However, the permissions and privileges are NOT 'refreshed' after some minutes.

You are currently upgrading OBIEE environment from 11.1.1.5.5 to 11.1.1.7.1.

You have setup authorization and authentication in the old 10g style, in the repository. You get the security for your users from an external database.

You have a repository file using initialization blocks for LDAP, for both Authentication (USER variable) with the check box 'Require for Authentication' and also Authorization.

You modified the application role associated to one user. For example: You remove the 'BIAdministrator' application role for one user.

When you log in and go to My Account- "Roles and Catalog Groups", the 'BIAdministrator' is NOT displayed, which is fine. However, the 'Administration' link is still available (with only the Marketing option) and also the 'Act As', and none of them should be available. You have to wait some minutes before these 2 options are NOT displayed.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms