Grant User Access to Business Analytics with Built-in Groups

Business Analytics Administration : Business Analytics Security : Authorization Policies and Permissions : Grant User Access to Business Analytics with Built-in Groups

All users in the Business Analytics User Repository automatically belong to the Presto_AuthenticatedUsers built-in group which has permission to access the Business Analytics AppDepot and work with any apps to which they also have been granted run permissions. To enable users to work in Business Analytics Hub to find, register or create mashables, mashups and apps, you must add them to the Presto_PowerUser, Presto_Developer or Presto_Administrator groups.

See the Built-In Business Analytics User Groups and Permissions topic for information on the specific access policies for these groups. Or use the Default User Accounts in Business Analytics to better understand the permissions for these groups.

If you are using the Default User Repository with Business Analytics, both groups and users are defined with the Admin Console. To grant users permissions with the Business Analytics built-in groups:

1. Add users to the Business Analytics Repository. See Create Users for instructions.

2. Assign users to the appropriate built-in groups. See Edit, Grant Permissions and other User Management Tasks for instructions.

3. If desired, you can also automatically add users as members to groups when you create users. See Automatically Assign New Users to Groups for instructions.

If you have configured Business Analytics to use your LDAP Directory as the User Repository, you relate users to the Business Analytics built-in groups in LDAP. To grant users permissions with the Business Analytics built-in groups:

1. Add Presto_Administrator, Presto_Developer and Presto_PowerUser as new groups in LDAP.

Note:

To map users and groups in LDAP to Business Analytics built-in permissions, you add these predefined names to your LDAP Directory. Mapping from configuration in Business Analytics based on LDAP attributes is possible. Or defining alias names for these built-in groups is also possible. For more information and assistance, please contact your sales representative.

2. Assign users to these new groups in LDAP.

Contact Support | Community | Feedback