X

News and Views: Drive Smart Decisions with Cloud Analytics, Machine Learning and More

Four Ways to Secure Projects in Oracle Analytics

Philippe Lions
Senior Director

Sharing a data analysis and visualizations with other team members in a safe and secure manner is a key requirement for any analytics solution. Oracle Analytics offers the capability for designers to completely control the way their projects are shared and leveraged with other users.

Data-level security defines what rows or columns are returned to a user inside an analysis or data visualization project view. The same view, when run by two different users, can bring up different data. The structure of the view is the same for all users unless a user does not have access to the subject area, in which case the report displays an error.

Subscribe to the Oracle Analytics Advantage blog and get the latest posts sent to your inbox

There are various situations in which a user can share a project with other users. We're going to explore four scenarios that you can apply. The brief video below illustrates how a user can share projects with other users, and how various rules define user privileges. 

 

Scenario 1: I don't want to share my project with anyone

There could be various instances where the data used for a project is confidential and cannot be shared with other users. In this scenario, the project should not be accessible to other users on the system. In order to achieve this, the owner of the project would save the project under My Folders instead of Shared Folders. All the objects under My Folders are accessible only to the owner; no one else can see them.

Scenario 2: I want selected other users to have read-only access to my project

The first prerequisite for sharing a project with other users is to have it saved in Shared Folders. Projects that reside under My Folders directory will not be visible to anyone other than their owner.

Once a project is under the Shared Folders directory, all users with the "DV Consumer" role in Oracle Analytics will be granted read-only access to it by default. The purpose of the "DV Consumer" role is to limit the access to users who can only consume content but not edit it, irrespective of any permission configuration for underlying projects.

Now, if I also want to grant other users with higher roles (like "DV Content Author") read-only access to my project, I need to edit the security configuration of the project using the Share Tab and Access Tab. Share and Access Tabs are accessed by clicking on the project properties and then on the Inspect menu.

  • Share Tab is used to specify how the project can be consumed, such as only viewing the results or being able to edit the queries and visualization definitions.
  • Access Tab is used to specify if a project can be opened in Read-Only mode or Read-Write mode (for example, can users save over your project, or can only save-as something else).

Four Ways to Secure Projects in Oracle Analytics

In order to make a project read-only, we need to specify these permissions: Share, View and Access, Read-Only. 
 

Four Ways to Secure Projects in Oracle Analytics

 

Four Ways to Secure Projects in Oracle Analytics

With that, when a user with a DV Content Author role opens the project, the project will open in Read-Only mode; no Save or Save As option will be displayed.

Four Ways to Secure Projects in Oracle Analytics

Two important notes:

  • Permissions can be granted to roles (groups of users), or to individual users. If a user belongs to a role with access rights, that user will be granted the permissions assigned to that role.
  • If a user is not listed in the permission tabs and doesn’t belong to any role that is listed in those tabs, that user will not see the project.

 

Scenario 3: I want users to be able to save as, but not save over

The access and share rules must be set to Share Tab: Edit, Access Tab: Read-Only for the project to be opened in edit mode but without Save being enabled. 

Users who open the project will have full experience mode but only with the Save-As option enabled. They can therefore not modify your project and will have to save edits under a different name.

Four Ways to Secure Projects in Oracle Analytics

Scenario 4: I let the user have full control of my project.

The access and share rules must be set to Share Tab: Edit, Access Tab: Read-Write for the project to be opened in full experience mode with both Save and Save As options enabled. 
 

Four Ways to Secure Projects in Oracle Analytics

One important point 

Even if a project is shared with other users, they will only be able to see results if the data sources of this project are objects they have access to as well. For example, if the project I just shared is using data I uploaded from an XSLX file, I may need to visit the inspect tab of this Oracle Analytics dataset and grant access to respective roles or users.

Securing Entire Folders

Catalog folders (under shared folders) containing multiple projects and sub-folders can be secured by configuring Access rules for that folder. Read-Only or Read-Write are the privileges that can be set against a folder. Read-Only will render all the projects in the folder as read-only, and Read-Write will provide edit access to all of the projects in the folder. By default, setting the privilege at the folder level trickles down the permission to all the sub-folders and its objects.

The default behavior can be altered by checking the box "Apply access permissions to this folder only." If this checkbox is checked, then only those projects directly under this folder are affected with the permission settings; the sub-folders and their projects are spared.

Four Ways to Secure Projects in Oracle Analytics

 

Controlling access to projects for other consumers of the analytics system is an important capability. It ensures smooth collaboration between teams and eliminates any unnecessary tampering with projects by other users. Oracle Analytics' security mechanism helps the users safely share projects with other users on the system, while at the same time collaborating in a secure manner.

To learn how you can benefit from Oracle Analytics, visit Oracle.com/analytics and follow us on Twitter @OracleAnalytics.

Join the discussion

Comments ( 1 )
  • Marcelo Thursday, April 16, 2020
    This is a great blog, easy to read and understand and appreciate the video and screen captures to better understand what is being said. Would like more elaboration on the Analytics side and how it integrates with that.
Please enter your name.Please provide a valid email address.Please enter a comment.CAPTCHA challenge response provided was incorrect. Please try again.