My Oracle Support Banner

OBIEE 11g On Searching For Groups In An Application Role Receive Errors "Failed To Retrieve Roles" "Operations Error: entity=op=search mesg=Operations Error LDAP Error 1:" (Doc ID 1638982.1)

Last updated on SEPTEMBER 28, 2016

Applies to:

Business Intelligence Suite Enterprise Edition - Version and later
Information in this document applies to any platform.
March 2016


OBIEE has been upgraded from OBIEE to OBIEE These are the Security Provider: one Active Directory (AD) and several BISQLGroupProvider (to keep the groups).

After upgrade to OBIEE from OBIEE, the groups which normally were retrieved from an External Table using two BISQLGroupProvider are not shown in EM when trying to add them to an application role.


  WebLogic Domain
right click, Security-Application Roles

When you edit an application role and click to add a new group.

'Principal Name':

It displays the error message:

Failed to retrieve roles.
Operations error: entity=op=search mesg=Operations Error LDAP Error 1:
Operations Error
- Hide Additional Trace Information
{viewScope.emaspagemodel_security_EditAppRole. searchprindpal}: at
( at


  If you use 'Display Name', it does not fail but it does not display the groups from the BISQLGroupProvider.
Furthermore, it is not a good workaround because there are groups in AD without Display Name.

As workaround,you are using the 'Advanced Option', which finds the BISQLGroupProvider group. However, it deletes all previous users and groups in the application role (checked in the 'system-jazn-data.xml').


Upgraded from OBIEE to OBIEE


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.