Policy Elements Descriptions Policies

5-14 Oracle Fusion Middleware Integrators Guide for Oracle Business Intelligence Enterprise Edition

5.3.8 siebelcrmconfig

The siebelcrmconfig element specifies that an Oracle Siebel CRM system is available. If this element is present in the configuration file, Oracle BI Presentation Services displays the menu option that allows users to create a Navigate to Siebel CRM action. Users must have the proper privileges to access Siebel CRM from Oracle BI Presentation Services. Note that the Oracle BI Server must be integrated with the Siebel CRM server before users can invoke a Navigate to Siebel CRM action type from Oracle BI Presentation Services. For more information about this integration, see Chapter 7, Embedding Oracle BI EE In Oracle’s Siebel CRM . The following example is a siebelcrmconfig entry. siebelcrmconfig visibletruevisible siebelcrmconfig

5.4 Overview of Action Security

Action Framework and actions security is determined by credentials, privileges, and permissions.

5.4.1 Oracle BI EE Credentials

Credentials are security-related attributes used to authenticate or authorize users and systems requesting access to Oracle BI EE resources such as actions. If you have configured one or more registries in the Action Framework to use credentials in the credential store for either browsing for actions targets or invoking actions namely, if you have specified account elements in the ActionFrameworkConfig.xml you need to enter a credential into the credential store to match each account element in the ActionFramworkConfig.xml file. For example, if you have the following account defined in the configuration file, you need to enter a credential for JNDIUser into a map called oracle.bi.actions. account nameWLSJNDIname descriptionAccount used to access WLS JNDI.description adminonlyfalseadminonly credentialkeyJNDIUsercredentialkey credentialmaporacle.bi.actionscredentialmap account For more information about how enter a credential into the credential store, see Section 5.5, Adding and Maintaining Credentials for Use With the Action Framework .

5.4.2 Oracle BI EE Privileges

Actions privileges control the rights that users have to access the actions features and functionality in Oracle BI Presentation Services. The Oracle BI EE Administrator grants or denies privileges to specific application roles, individual users, and Catalog groups. The actions privileges are: ■ Create Navigate Actions ■ Create Invoke Actions Using Actions to Integrate Oracle BI EE with External Systems 5-15 ■ Save Actions containing embedded HTML For more information about the action privileges, see Access to Oracle BI Enterprise Edition Actions in Oracle Fusion Middleware System Administrators Guide for Oracle Business Intelligence Enterprise Edition.

5.4.3 Oracle BI Presentation Catalog Permissions

Action permissions are authorizations that the action’s owner grants to users or roles. Permissions determine what tasks a user can perform on an action for example, execute the action. The Oracle BI EE Administrator must give an action’s owner the necessary privileges before the owner can assign permissions to action catalog objects. The action permissions are: ■ Delete ■ Execute ■ Read ■ Write For more information about assigning permissions to action object stored in the catalog, see Permission Definitions in Oracle Fusion Middleware Users Guide for Oracle Business Intelligence Enterprise Edition.

5.5 Adding and Maintaining Credentials for Use With the Action Framework

This section contains the following procedures: ■ Section 5.5.1, Adding a Credential Map and Credential Key to the Credential Store ■ Section 5.5.3, Configuring Oracle Web Services Manager ■ Section 5.5.2, Creating a Default Keystore Use these procedures to enter a credential into the credential store to match each account element in the ActionFrameworkConfig.xml file. For more information about setting up credentials with Action Framework, see Section 5.4.1, Oracle BI EE Credentials .

5.5.1 Adding a Credential Map and Credential Key to the Credential Store

Use the following procedure to add a credential map and credential key to the credential store. 1. Log into Oracle Enterprise Manager 11g Fusion Middleware Control. The default location is http:your host name:7001em. 2. Expand the tree menu to view your domain, and then right-click on the domain name. An options list displays.

3. Highlight the Security option and from the list, select Credentials. The

Credentials dialog displays.

4. Click Create Map and add a new map.

5. Click Create Key and add a key against the credential map you created.

6. Save the key and map.