From the Reports menu, select Administration Advanced Configuration.

Administering Oracle Reports Services Using Oracle Enterprise Manager 7-11 As an example, imagine that there are 15 finance reports, for which you want to give access to the FINANCE role, and there are 12 Human Resources reports for which you want to give access to the HR role. Rather than specify 15 security policies for FINANCE role, and 12 policies for HR role one policy per report, you can collect all finance reports in one directory, and collect all the HR reports in another directory, then specify only 2 policies one per directory. Instead of specifying the report name, you will specify the directory name in the security policy. To define a security policy for directories: 1. Log in to Oracle Enterprise Manager. 2. Navigate to the Reports Server Home page see Section 7.3, Viewing the Component Topology .

3. From the Reports menu, select Administration Manage Reports Security

Policies Reports Policies. 4. Click Create or Edit. The Security Policy Configuration for Reports page is displayed. 5. Enter appropriate values for the elements on the page to define a security policy for directory access using the descriptions in the Help topic for the page. Click the Help icon on the page to access the page-level help. Perform the following to complete the elements on the page, ■ From the Server Name parameter checkbox, select one or more servers to which the security policy has to be applied. If you want to apply the security policy to all servers, select All. ■ In the Reports Definition Files or Directories parameter, enter one or more report definition file names or the directories for which you are defining security policies. For example, to specify a directory, enter: myreportsruntimereports. Separate multiple entries with a comma ,. ■ Click OK. All fields in this page require a restart to take effect. Now, to use the defined directory access control at the Reports Server level, refer to Section 7.8.1, Enabling and Disabling Security to confirm that security is turned on.

7.8.4 Defining Security Policies for Web Commands

You can also specify the Web commands to which a particular userrole has access by creating security policies for each Oracle Reports Servlet rwservlet Web command. The security policy is checked when the user provides the user name and password. To define security policies for Web commands:

1. Log in to Oracle Enterprise Manager.

2. Navigate to the Reports Application Home page see

Section 7.3, Viewing the Component Topology . Note: The security policies defined in Oracle Enterprise Manager are stored in the policy store configured by the user. The idstore contains information on the users and the policy store contains the security policies configured by the user.