11g, 12c, application policies, OBI, permissions, security

So we know that 12c made some small changes in the security area – the most well known being “BI Administrator” being renamed to “BI Service Administrator”.

This can cause some issues when importing 11g BAR files with old “BI Administrator” roles but set “security model=false” during import. Well this isn’t what this post is about but still something you may want to remember 😉

What this post IS about is the little weirdness which is happening in Application Policies and the Permissions you can grant to a policy and its principals.

Let’s look at the permissions granted to “BI Service Administrator”. There’s two set of rights which look suspiciously similar:

Can you spell “redundant”?

Ok let’s turn this upside down and create a new application grant for a “close to Admin”-type set of rights:

Searching by “Permission Class” oracle.security.jps.ResourcePermission yields 14 results.

Funny enough we don’t find all four of the permissions in the screenshot above. Two catalog permissions are present – “oracle.bi.presentation.catalogmanager.manage” and “*” for the oracle.bi.catalog permission type. “*” for oracle.bi-repository isn’t there though. Hmmm. Let’s search by “Resource Type” and try to find the four in question one by one.

Why hello there. Not only do we find all four but also a nice little remark on the two known ones: Legacy Permission from BI 11g

So it seems that those two are about to get dropped and be replaced by the new “*” resources. But why is only one of the two new permissions visible when searching by “Resource Class” when it seems to actually HAVE the correct resource class assigned to it?

Smells like something needing a little fix. Most important though: going through permissions by resource type and checking the ones labeled as “Legacy 11g” is a good idea in order to not be relying on things on their way out of the product…

community, kscope

The ODTUG KScope16 speaker evaluations just arrived in my inbox and I wanted to take a moment to express my gratitude to everyone who came to listen to my sessions and for their magnificent feedback.

Thank you from the bottom of my heart – this is why I do these conferences!

Thanks also to everyone from ODTUG and all my friends from the community. I hope to see you all next year in San Antonio for KScope17.

12c, dashboard, OBI, obiee

A new functionality has been introduced in the latest release of OBI – – which has gone a bit unnoticed since it hasn’t been included in the documentation anywhere. This is surprising since it’s been requested since a long time.

Dashboard subpages!

As of this release the usual 3-level dashboard hierarchy has been transformed into a 4-level one:

  • Dashboard group
  • Dashboard
  • Dashboard page
  • Dashboard subpage

dashboard sub-pages

Configuration is very straight-forward. Just click the usual “Add” button which will give you two options as of now:


admin, answers, OBI, obiee

Working on a system without full access can often be a pain and prevent you from being able to get information necessary for your work. One of those areas is access to system variables. Good thing is. that bits and pieces are flying around all over the web and can be found for example both Oracle’s own SampleApp or this little gist here from @rmoff.

I’ve started mixing and matching together as much as possible of “things you can potentially get out of the system” without having anything else than Answers access and combined it into a single analysis. You can find the gist here. To put it into your system all you need to do is create a new analysis, copy over the XML and reference any of your Subject Areas (two locations; top and bottom of the file). Doesn’t matter which one as long as it parses correctly. Not a single query against actual data sources is run.



I’ll keep adding to this and expand it with whatever hack I can find to circumvent the pesky “you’re not an Admin” situations.


event, kscope, obiee, odtug

Next week from June 26 to 30 it’s time again for the epic ODTUG KScope16 which is happening in Chicago, Illinois this time. After unfortunately missing last year’s KScope15 in Florida I am happy to be back with two presentation slots of my own plus a joint presentation.

You can find the full agenda here including my three sessions in the BI and Data Warehousing stream of the event:

  • 50 Shades of #Fail: OBI Worst Practices in Real Life
  • Back2Basics: A Day in the Life of an Oracle BI Query
  • OBIEE Security: It’s a Jungle Out There(joint presentation with @G_Ceresa)

This year I had the pleasure and privilege to be a member of the content committee for the BI/DWH stream in order to do my part of making the event as epic an experience as possible for all participants.

Looking forward to seeing all my friends and fellow Oracle ACEs again.


“If you have a tool and arn’t aware if what it can do, its dangerous. A jedi can do amazing things with a lightsaber. A roomful of chimps with lightsabers… would get messy. 


blog, general

I am currently in the process of moving all assets over from blogger and it seems that a miraculous multiplication of blog posts is happening – once with and once without images as it seems. Will clean up in the coming hours.

Update: So it seems that even after trying 3 different import tools not all images have made it over. A pity but that’s life – you’ll still be able to see the original posts including all images under the old URL: hekatonkheires.blogspot.com


Date: Monday 7th December – Wednesday 9th December
Location: ICC Birmingham
Agenda: http://bit.ly/Apps15_ag

UKOUG Apps15 is the must attend event for Oracle Apps professionals, with over 120 sessions there is something to suit everyone.

My session will take place on Wednesday, 9th from 10:00-10:50 and is entitled

    “50 Shades of #Fail – OBI worst practices in real life”

I look forward seeing you at Apps15!


Leaving some time between the trip home from OOW14 and finishing up the blog post on the 4 official days of the event has had an interesting effect: excellent write-ups of the news and announcements have already popped up, so it’s a pleasure to simply link to Mark Rittman’s “News and Updates” post for all your needs in that regard.

Session or rather content-wise over these four days there are a couple of things to point out:

1.) OakTableWorld

Not a session per se but rather OakTables concurrent event with brilliant presentation content from the likes of Kent Graziano, Alex Gorbachev, Jonathan Lewis etc. Full agenda of what happened this year can be found here.

What I really appreciated was the fact that OakTableWorld – in contrast to OOW itself – sports a host of 10min TED talks over lunch. The TED talk format can be loved or hated but mostly it depends on the content and the speaker. Listening to Jonathan “Breaking Exadata” is huge fun and he doesn’t need more than 10min to convince anyone that there’s sales&marketing talk and then there’s reality. Exadata’s great, but no holy grail and you CAN break it.

Another real “WOW” effect was Eric Grancher from CERN (“those guys” with the Large Hadron Collider and the Higgs Boson … maybe). Eric had a pretty neat TED talk about ASH to understand disk IO, but the killer was to see how they pipe that gathered information into Endeca to actually analzye their disk IOs through the Endeca engine. Very nice!

2.) Roadmap sessions

I sat in just about every roadmap session touching Business Analytics topics from the engineered systems over OBI 12c to the new Visual Analyzer and BI Mobile App Designer futures. Perfect place to catch up with the product managers and have some post-presentation chats with them. Looking forward to their upcoming initiatives and hopefully being an early adopter.

These sessions aren’t as detailled – technically – as the ones you may see at KScope, but they’re official, they’re sanctioned, they aren’t under NDA and they represent Oracles road into the future. If you plan on visiting OOW…pencil them in for the products you work with!

A special mention of the BI Apps roadmap session:
I was pretty surprised to see an almost total lack of reaction from the crowd when the slides reached the official declaration of the Informatica version of OBIA being discontinued and all OBIA projects having to move to ODI if they want to stay on the upgrade path. Maybe the message was too well hidden in marketing speech, but it should have been clear enough – so here it is again: there will be NO 11g release for BI Apps with Informatica and also none whatsoever in future versions. Informatica is out. OBIA customers will have to get onto the ODI train!

3.) Customer success stories

Not my thing. Tried sitting through one, but this is more for other end-clients to listen to and maybe get an idea or benchmarks.

All in all Oracle Openworld 2014 was an epic experience and I wouldn’t have missed it for the world. If you’re interested in another OOW-freshman’s experience report, look no further than my good friend Robin Moffatt’s write-up.

In terms of meeting people, tightening my community bonds with other Oracle ACEs, the OTN community and the superb ODTUG folks this event is definitely “up there” in the stratosphere called “that’s just about as good as it gets”!

BTW: Presentations are still not all up so bear with me.