OBIEE 12c: Unable to Assign Permissions to an Application Role (Doc ID 2443774.1)

Last updated on OCTOBER 26, 2020

Applies to:

Symptoms

You are assigning permissions for an application role in a subfolder in the catalog.  You have:

1. Opened the permissions window
2. Added an Application Role
3. Clicked on the Folder with a lock icon to assign Traverse Permissions upstream, the icon changes to folder with a green check
4. Clicked OK

At this point nothing happens.

However this message is seen on the browser console:

saw.ajax.Connection._handleNotification: Error retrieving user/group data from Oracle BI Server's User Population API.
Odbc driver returned an error (SQLExecDirectW).
State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. (HY000)
State: HY000. Code: 43113. [nQSError: 43113] Message returned from OBIS. (HY000)
State: HY000. Code: 13057. [nQSError: 13057] Error From BI Security Service: [BISecurity] [oracle.bi.security.centaurus.AssertUserAction::execute] [OBI-SEC-00018] Assertion of user "<role>" failed.. (HY000)
SQL Issued: {call NQSGetGroupMemberships('NAME=<role>')}

The same error is logged in the obips component log (<DOMAIN_HOME>/servers/obips<n>/logs/sawlog<n>.log)

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.