OBIEE Security -Part 2 - Object Level Security

Object Level Security:

Object level security deal with access restriction to various obiee objects for different application roles and users. Object level security is achieved by granting or denying access to application roles or user.

We can restrict access to following objects using object level security:

• Repository Objects
• Presentation Tables
• Presentation table columns
• Subject area
• Webcatalog objects
• Reports
• Dashboards
• Dashboard Pages
• Catalog Folders

Repository Level: you can set object level security at repository on presentation layer.you can grant/deny access to user/application roles to access subject area, table or column

In presentation layer go to properties of a subject area, Table or Column.

Select permissions.

Select ‘Show all users/application roles’

Here you can see all the users and application roles and properties such as read, read/write, no access and default.

Web Catalog Level: We can set object level security at web catalog level on folders, dashboards, dashboard pages and reports. User can only see object for which it possess authorization.

Similar to object level security on repository level, we can set permissions for application role or users.

Select any folder, dashboard, dashboard page or report.  

Go to its Permissions.

We can also set the custom permissions