AD Groups to OBIEE Roles - Data Level Security

How to assign AD groups to OBIEE Application Role: Here are the steps:1 2 3 &

Crea Create te an an appl applic icat atio ion n role role in in EM Assign Assign the require required d AD group group to this role role in WL Console Console Using Using !D" !D" s#nch s#nchro roni$ ni$e e applic applicati ation on rol roles% es% Appl# Appl# data data 'lters 'lters on this this role role in in the the !D% !D%

(n )rie*" +hen #ou setup AD authentication in We)logic We)logic console" #ou are a)le to see users , groups present in AD% o+" #ou need to create a role .a#)e" +ith the sa.e na.e and assign the group to it% /nce #ou s#nchroni$e !D" #ou are a)le to see these ne+ roles !D +here #ou can appl# data 'lters% Detailed Steps:

1- Login Login to We)log We)logic ic Console Console to see AD AD Users and group groups% s%

2- Let0s consider AD roup Appesters0 Appesters0 +hich +e +ant to lin4 lin4 to /5(EE ole% ole%

3- Login to We)logic Enterprise Manager and create a ne+ role" let0s sa# 5(6DE7EL/!E86ALL60% Assign AD group Appester0 to this role%

&- /pen !D in online .ode% o to Manager -9 (dentit# -9 Action -9 8#nchroni$e% ou +ill no+ see this ne+l# created role in !D%

;- 8elect this ne+ role on +hich #ou +ant to appl# 'lters%

<- Dou)le clic4 on selected role" clic4 !er.issions%

=- Clic4 on Data >ilters0 and press  +0 sign%

?- Here" #ou need to select the Di.@>act on +hich #ou +ant to appl# the 'lter" epand that ta)le and select right colu.n% Clic4 8elect0 on right pane% Ma4e sure the ta)le t#pe is !resentation a)le0

B- o+" #ou +ill return )ac4 to last pane and #ou +ill see the 'lter condition% Highlight 'lter condition" and clic4 on Edit Epression0 )utton%

1-Here #ou need to +rite the 'lter condition%

11-( +rote the *ollo+ing condition: -

A!!65(6DM%D< !roduct%!roduct  FA5CF / A!!65(6DM%D< !roduct%!roduct  FDE>F / A!!65(6DM%D< !roduct%!roduct  FGF

12-8i.ilarl#" sa.e 'lter is applied to the *act ta)le as +ell% his +ill ensure the 'lter is applied eIen +hen #ou are not selecting product data in ans+ers%

A*ter this setup" users +ithin a role +ill )e a)le to see data onl# *or products a)c0" de*0" #$0"