Oracle Cloud Infrastructure Documentation

Manage Application Roles

Application roles consist of duty roles for objects security and data roles for data access. You can create, update, and delete application roles and add or remove groups mapped to an application role.

You can map the ready-to use or custom application roles to groups to define the permissions associated with the group. You can configure a custom application role using the Security Configuration section on the Semantic Model Extensions page. See Configure Data Security.

Topics:

Create an Application Role

You can create custom duty and data roles to secure subject areas, front-end objects, and row-level data respectively when the predefined application roles don't meet your business needs.

  1. Sign in to your service.
  2. In Oracle Fusion Analytics Warehouse Console, click Security under Service Administration.
  3. On the Security page, click the Application Roles tab and then click New Application Role.
  4. In Create a New Application Role, enter the application role name and specify the role type as data or duty.
  5. Click Save.

Delete an Application Role

You can delete the custom application roles. Upon deletion of the custom application roles, Oracle Fusion Analytics Warehouse deletes the mappings to the groups.

  1. Sign in to your service.
  2. In Oracle Fusion Analytics Warehouse Console, click Security under Service Administration.
  3. On the Security page, click the Application Roles tab.
  4. Search for an application role or select from the displayed list of application roles.
  5. Click Remove Application Role.
  6. In the Delete Application Role? dialog, click Delete Role.

Assign Groups to Application Roles

Use these instructions to map application roles to groups.

  1. Sign in to your service.
  2. In Oracle Fusion Analytics Warehouse Console, click Security under Service Administration.
  3. On the Security page, click the Application Roles tab.
  4. Search for an application role or select from the displayed list of application roles.
  5. In the application role details region, click Assign Groups.
  6. In Add Group Mappings, search for a group and select it or select from the displayed list of groups.
  7. Click Save.

Remove a Group Mapped to an Application Role

Use these instructions to remove a group mapped to an application role.

  1. Sign in to your service.
  2. In Oracle Fusion Analytics Warehouse Console, click Security under Service Administration.
  3. On the Security page, click the Application Roles tab.
  4. Search for an application role or select from the displayed list of application roles.
  5. In the application role details region, select the check box for a displayed group or search for a group and select it, and then click Remove Group.
  6. In the Remove Group Mapping? dialog, click Remove Group.