Setup Oracle eBS 2 Oracle BI SSO

I made several blogposts in the past. That’s why it could be useful to collect these posts into one document. This document covers all the steps needed to integrate Oracle eBS (R12) and Oracle BI (11g) with each other. SSO might be a little bit confusing. In this case it’s meant that you can log into Oracle BI via Oracle eBS without having to log in again and while maintaining context.

Oracle Business Analytics Version Releases

It has been a busy period over at Oracle with different Oracle Business Analytics software releases. For me personally the following releases attracted my attention:

As always, immediately after a new release of Oracle Business Analytics, there is a lot of buzz within the Oracle BA Community. What did impress me this time was that Oracle added some buzz as well in terms of various Youtube video’s. Next to that there is a lot of information online which should help you to get started. I will give an impression of some of the sources I have seen and used.

Oracle BI EE 11.1.1.7.0

There is lot of information online. There are two interesting links which are a little bit different than the others.

Oracle BIA 11.1.1.7.1

A few weeks ago Oracle BIA 11.1.1.7.1 has gone GA.

This is a completely new version of Oracle BIA. There are a few interesting blog postings on this release. I provided links to the different blogs. There are probably more postings so have a look around.

Oracle Endeca 3.0

  • Oracle Endeca Information Discovery v3.0 Screencast Series
  • Oracle Endeca 123

Feel free to add if you would like.

Completely off-topic, but nevertheless interesting to add is the following.

Last year I had the privilege to review the following; ‘Oracle Business Intelligence Enterprise Edition 11g: A Hands-On Tutorial’. For more details on this book, check here.

Another interesting book on Oracle BI 11g is the one from Mark Rittman; ‘Oracle Business Intelligence 11g Developers Guide’

Check the Siebel Essentials site for two reviews about the books above.

One other thing I am working on is translating BITeamwork to the Dutch language. BITeamwork is all about Oracle Business Intelligence Collaboration.

As of this weekend the presentations of the RittmanMead BI Forum 2013 (Brighton and Atlanta) are online.

That’s it for now.

Setup Oracle BIA 7963 – Data Security

Customer wants to secure their data based on things like Ledger, Company, Operating Unit, etc. All users who login via Oracle eBS should inherit (based on the current responsibility) the same security settings in Oracle BI. The following is a possible solution.

Environment

  • Oracle eBS R12.1.1
  • Oracle BI EE 11.1.1.6.0
  • Oracle BIA 7.9.6.3
Setup

The setup consists of a few different parts

Data Security

The Data Security is based on different Roles and a Profile Option assigned to the responsibilities in Oracle eBS

Oracle eBS

  • Create ‘BI Type User’-profile option
  • Assign ‘BI Type User’-profile option to Responsibility
  • Assign Responsibility to User

Each Responsibility has either a specific ‘BI Type User’-profile option or a ‘BI Type User’-profile option on Site level. A view (xx_obia_user_groups_v) in Oracle eBS ‘holds’ the profile option information.

select fpov.level_value responsibility_id
 , fpov.level_value_application_id application_id
 , 'OBIA '
 || fpov.profile_option_value autorisatierol_code
 , fl.meaning autorisatierol
 from applsys.fnd_profile_option_values fpov
 , apps.fnd_profile_options_vl fpo
 , apps.fnd_lookups fl
 where fpo.profile_option_id = fpov.profile_option_id
 and fpo.application_id = fpov.application_id
 and fpov.profile_option_value = fl.lookup_code
 and fl.lookup_type = 'BI_TYPE_GEBRUIKER'
 and fpo.profile_option_name = 'XXBI_TYPE_GEBRUIKER'
 and fpov.level_id = 10003

Oracle BI

In Oracle BI, there is a Initialization Block which populates the; ROLES Session Variable

select ( select sector
 from apps.xx_obia_user_groups_v
 where responsibility_key = 'VALUEOF(NQ_SESSION.OLTP_EBS_RESP_KEY)'
 and responsibility_id = valueof ( nq_session.oltp_ebs_resp_id ) )
 || ';'
 || ( select autorisatierol_code "ROLES"
 from apps.xx_obia_user_groups_v
 where responsibility_key = 'VALUEOF(NQ_SESSION.OLTP_EBS_RESP_KEY)'
 and responsibility_id = valueof ( nq_session.oltp_ebs_resp_id ) )
 || ';'
 || ( select responsibility_key "ROLES"
 from apps.xx_obia_user_groups_v
 where responsibility_key = 'VALUEOF(NQ_SESSION.OLTP_EBS_RESP_KEY)'
 and responsibility_id = valueof ( nq_session.oltp_ebs_resp_id ) )
 "ROLES"
 from DUAL

Oracle Enterprise Manager (EM)

In the EM ‘all’ the different Application Roles, related to the Data Security are created.

There are a few different Application Roles;

  • Out-of the box
  • Data Security
  • eBS Profile

Out-of-the-Box

  • BIAdministrators
    • Administration privileges.
  • BIAuthors
    • Create, use or consume content.
  • BIConsumers
    • Use / consume content,
    • Every authenticated user.
  • BISystem
    • Component connections between products.

Data Security & eBS Profile

Oracle BI Administrator (Identity Manager)

In the Identity Manager, the Business Model Filters are applied to the Data Security Application Roles

The Business Model Filters are based on the Initialization Blocks. Some out-of-the-box, others custom.

This setup should be sufficient to apply Data Security to all queries, which query the Logical Tables with the Business Model Filters applied to it.

Note: Application roles data filters won’t apply for users with BI Administrator role.

By definition the BIAdministrator application role is granted the “oracle.bi.server.manageRepositories” permission, which is equivalent to the 10g “Administrator” user who also had unrestricted access. Hence, data filters won’t affect users with BIAdministrator Role. (source: Oracle Support)

Integrating Oracle eBS R12 and Oracle BI 11g

I have made a blogpost in the past about integrating Oracle eBS R12 and Oracle BI 10g. In the course of an upgrade of Oracle BI Applications (OBIA) to OBIA 7.9.6.3, I came to the subject of integrating  Oracle eBS R12 and Oracle BI 11g. Of course you should start with the documentation. Next to that, Oracle provides a note on Oracle Support (ID 1343143.1). A lot of integration steps are equal to the 10g version.

In short:

There are two sides (Oracle eBS & Oracle BI) where you need to make some preparations.

Oracle eBS:

You need to define the link from to Oracle eBS to Oracle BI. This functionality hasn’t changed and I have described that process here. Combined with the ‘FND: Oracle Business Intelligence Suite EE base URL’-profile option in Oracle eBS, you now are ready to navigate from Oracle eBS to Oracle BI.

Oracle BI:

Now the Oracle eBS side is ready, you’ll have to prepare Oracle BI for accepting login requests from Oracle eBS. This parts differs a little from 10g. The changes in the Repository are still the same and consist of validation of the ICX-cookie in the Oracle eBS Connection Pool and the Authentication via Session variables. You can choose to either authenticate via the GROUP- system variable or directly via the new 11g ROLES-system variable.

After that you need to change the Oracle BI configuration;

  • authenticationschemas.xml (ORACLE_HOME/bifoundation/web/display)

authenticationschemas.xml (SchemaKeyVariable)

authenticationschemas.xml

  • instanceconfig.xml (ORACLE_INSTANCE/config/OracleBIPresentationServicesComponent/coreapplication_obips1)

instanceconfig.xml

Note: Don’t get mislead by the following sentence; ‘<!–This Configuration setting is managed by Oracle Enterprise Manager Fusion Middleware Control–>’. You must adjust these settings directly in the instanceconfig.xml itself.

This should (all) be sufficient to log into Oracle BI via a selected responsibility in Oracle.

In a following post I will cover the subject of applying Data Security in Oracle BI, based on the Oracle eBS Responsibility.

Patching in Oracle BI 11g 11.1.1.6

Last week the announcement came that there has been a Patch (13742915) released for Oracle BI EE 11.1.1.6.1. This Patch can be dowloaded via Oracle Support (Login required).

If you want to apply the Patch, you have to perform a few steps. These steps can differ, depending on which steps you may or may not already have executed.

Start by downloading the Patch first.

Download Patch 13742915
——————————–

1. Navigate to ‘Patches & Updates’
2. Search for Patch 13742915
3. Select the required OS (I installed on Windows 64-bit)
4. Dowload the Patch

When the Patch has been dowloaded, go to your Oracle BI environment for the installation of the Patch. The following steps have to be performed.

Patch Installation for server
——————————–
1. Stop all BI Services, including BI Server, BI Administration Tool, BI Javahost, BI Scheduler (Start->Programs->Oracle BI->Stop BI Services)
2. Backup ORACLE_HOME\bifoundation\server
3. Backup ORACLE_INSTANCE\bifoundation\OracleBIServerComponent\coreapplication_obis1\repository
4. Apply Patch using Opatch (See below)
5. Start all BI Services
6. Test the Patch
7. If needed, rollback the Patch (See below)

Apply Patch using Opatch
——————————–

Note: Make sure all BI Services have stopped

Check Oracle Support; ‘OBIEE 11g: How to Apply Patches Using Opatch’ (Id – 1220799.1)

1. Verify whether you have (the latest) version of Opatch installed

a) If needed install a new version of the Opatch utility (See below)
Make sure ….

… the ORACLE_HOME variable exists –> set ORACLE_HOME=MIDDLEWARE_HOME\Oracle_BI1

—-
Side-note from Oracle: “You are setting ORACLE_HOME for this command-prompt session only.
— This is set to only facilitate patch application/rollback/inventory, etc.
— Do not make this a permanent environment variable as it will affect other Oracle Products running
— on your system which may need a permanent ORACLE_HOME environment variable.”
—-

… the OPATCH-directory is in your PATH –> set PATH=%PATH%;ORACLE_HOME\OPatch

2. Read through the README.txt
3. Download the Patch to the PATCH_TOP directory (in my case; Z:\Oracle\FMW\OracleBIAdmin\PATCH_TOP)
4. CD to Patch directory (in my case; Z:\Oracle\FMW\OracleBIAdmin\PATCH_TOP\13742915)
5. Apply Patch
a) run “opatch apply” (without quotes)
— If you are running a 64-bit OS: Windows64bit / Linux 64bit / AIX 64bit
b) run “patch apply -jre %ORACLE_HOME%/jdk/jre” (without quotes)
6. OPatch succeeded
7. Verify the succesful installation
a) run “opatch lsinventory” (without quotes)
— If you are running a 64-bit OS: Windows64bit / Linux 64bit / AIX 64bit
b) run “opatch lsinventory -jre %ORACLE_HOME%/jdk/jre” (without quotes)
8. OPatch succeeded

Note: All BI Services can be started

Rollback the Patch using Opatch
——————————–
1. CD to Patch directory (in my case; Z:\Oracle\FMW\OracleBIAdmin\PATCH_TOP\13742915)
2 Rollback Patch
a) run “opatch rollback -id 13742915” (without quotes)
— If you are running a 64-bit OS: Windows64bit / Linux 64bit / AIX 64bit
b) run “opatch rollback -id 13742915 -jre %ORACLE_HOME%/jdk/jre” (without quotes)

How to install the Opatch utility
—————————————

1. Navigate to ‘Patches & Updates’
2. Search for Patch 6880880
3. Select the required OS (I installed on Windows 64-bit)
4. Dowload the Patch
5. Extract the zip file directly under the ORACLE_HOME (MIDDLEWARE_HOME\Oracle_BI1).
6. Backup ORACLE_HOME\OPatch
7. Make sure no directory ORACLE_HOME\OPatch exist
8. Unzip the OPatch downloaded zip into the ORACLE_HOME directory
9. check the version of the OPatch utility
a) ORACLE_HOME\OPatch
b) run “opatch version” (without quotes)

Good Luck!

Upgrading from 10g to 11g (Update)

In preparation of an Oracle BI Applications (OBIA) upgrade to OBIA 7.9.6.3, I have been running the Oracle BI 11.1.1.6 Upgrade Assistant. Just to see whether we could expect (serious) issues. On the other hand I was curious how the Oracle BI 10g Security Groups would upgrade to the Oracle BI 11g Application Roles. Application Roles are managed via the the Enterprise Manager (Policy Store – system-jazn-data.xml). Actually Rittman Mead are running a 5-part series on Oracle BI 11g Security at the moment.

The Oracle BI Application Security is configured as follows in Oracle BI 10g. The responsibilities in Oracle eBS are created as groups in Oracle BI. After upgrading to 11g these groups are created as Applications Roles. If you check the in the Oracle BI 11g Weblogic Console, you would see that the responsibilities are also created as groups. These groups are created for Authentication (confirming the identity of a user) purposes. The Application roles are created for the Authorization (specifying access rights).

I have been blogging about the upgrade from 10g to 11g earlier. There doesn’t seem to be any major difference in the Upgrade Assistant in 11.1.1.6. You basically have to follow the same steps as in the previous versions.

After the upgrade I ran the Consistency Checker. A few ‘Warnings’ caught my eye. I haven’t seen those before so I guess they are introduced in Oracle BI 11g.

–> NQSError 39051 (Warnings) – Application Role “*****” is not defined in the Enterprise Manager.

There are 2 options to solve these errors:

Remove the Application Role from ….

  • …. the Policy Store via the Enterprise Manager
  • …. the Reporsitory (RPD) via the Identy Manager in the Oracle BI Administration Tool.

–> NQSError 39062 (Warnings) Initialization Block ‘*****’ uses Connection Pool ‘”*****”.”*****”‘ which is used for report queries. This may impact query performance.

It’s common practice to create an additional Initialization Block for Session variables. Check Nicolas’ blog for more details on the Oracle BI Connection Pools.

Cheers.

Oracle Business Intelligence Enterprise Edition (OBIEE) 11.1.1.6.0

Although Oracle Business Intelligence Enterprise Edition (OBIEE) 11.1.1.6.0 has already been released a few weeks ago, I thought I would be nice to write some sort of wrap-up post with some interesting links to documents and various websites.

The latest version of Oracle BI 11g is available on OTN as well as on eDelivery.

Of course you should start by reading the documentation. The 11.1.1.6.0 docs have been duplicated compared to 11.1.1.5.0. Maybe because there is an additional part reserved for Oracle Exalytics. As always there is a lot of buzz around the Oracle BI Blogosphere. Christian has a nice up-to-date Link Library with a list of interesting websites with regards to 11.1.1.6 documentation and functionality posts/docs/etc.

Some interesting documents

Oracle BI 11.1.1.6.0 opens the door for Oracle Exalytics. When you want to get more information about Oracle Exalytics, check the following sites;

Happy Upgrading!