Monday 23 January 2017

How To Grant / Revoke Privileges For Multiple Discoverer Applications Users / Responsibilities In Batch Mode

In an Oracle Application mode EUL, privileges are usually granted or revoked using Discoverer Administration Edition.
The Discoverer Administration Edition will process one user or responsibility at a time.
Is is possible to grant or revoke the privileges for multiple users / responsibilities in batch mode?

Solution:

Privileges can also be granted or revoked using a Java Command Line utility called EULAPI.
This EULAPI utility is shipped with the Oracle Application Server and has to be executed from the Discoverer server / middle tier environment.

For more information, please refer to the following document:

Oracle Business Intelligence Discoverer EUL Command Line for Java User's Guide 10g Release 2 (10.1.2.1)
Part # B13919-03
Ch 2 Discoverer EUL Command Line for Java Reference

Example 1: To revoke save workbook to database from a responsibility:

$ORACLE_HOME/bin/eulapi \
-connect SYSADMIN/<sysadmin_password>@database \
-eul EUL_US \
-apps_user \
-apps_responsibility "System Administrator" \
-apps_gwuid "APPLSYSPUB/PUB" \
-apps_fndnam APPS \
-revoke_privilege \
-privilege save_workbook_database -role "Discoverer Workbook Management"

Example 2: To grant schedule privilege to users JOE and JCHAN

$ORACLE_HOME/bin/eulapi \
-connect SYSADMIN/<sysadmin_password>@database \
-eul EUL_US \
-apps_user \
-apps_responsibility "System Administrator" \
-apps_gwuid "APPLSYSPUB/PUB" \
-apps_fndnam APPS \
-grant_privilege \
-privilege schedule_workbook \
-user JOE \
-user JCHAN

Example 3: To revoke Save workbook to database, scheduling and sharing workbook in Applications mode EUL

$ORACLE_HOME/bin/eulapi \
-connect SYSADMIN/<sysadmin_password>@database \
-eul EUL_US \
-apps_user \
-apps_responsibility "System Administrator" \
-apps_gwuid "APPLSYSPUB/PUB" \
-apps_fndnam APPS \
-revoke_privilege \
-privilege save_workbook_database \
-privilege schedule_workbook \
-privilege grant_workbook  \
-user "Joe Smith"

NOTE:
1.The above commands need to be in one continuous line. or separated into multiple lines with continuation character "\" .

2. Roles and Responsibilities should be case sensitive and enclosed in double quotes as long as they have multiple words.

Ref Doc ID 420357.1

No comments:

Post a Comment