How to Restrict Sales Reps From Viewing All Organization Data From Analytics?

Last updated on APRIL 12, 2018

Applies to:

Goal

On : 11.12.1.0.0 version, Analytics

Sales Reps are able to view all Organization data from Analytics

Customer have noticed that almost all the Sales Rep in Organization currently have privilege to Create reports from Subject areas in analytics and also are then able to view all the Organization data without any restrictions.
For ex: Sales Rep are able to create report on Sales - Customer Overview subject area and see all Opp - other data for all customer.
This is major point of concern because the data security is compromised because of this full level access to Reps in analytics.

Here is customer analysis so far:
Currently almost all Sales Rep have ORA_CN_INCENTIVE_COMPENSATION_PARTICIPANT_ABSTRACT role, which in turn gives 'BI Author' role to the reps.
As they have BI Author, they are able to build ad-hoc reports from subject areas. On top of that, currently there is no data level security enforced for analysis requests from reps.
They checked for a couple of reps and could replicate the issue wherein they are able to view all data!

How to restrict Sales Reps from creating and viewing data from Analytics?
 

Solution