OAC User Policy 

OAC Adding or Updating New Content

OAC Folder Administrators are granted full access to folders under their Site folder for directly making changes in production. There is no automated deploy of content between BETA OAC and PROD OAC.

OAC Folder Administrators can freely deploy their content between BETA OAC and PROD OAC.

Manual Content Deploy (Folder Administrators have rights in OAC to do this on their own.)

1. Archive file on source system (IE: From /analytics Catalog | right click the file | archive and select Keep Timestamps and not Keep Permissions.

2. Unarchive file on target system (IE: From /analytics Catalog | click the folder that the file should be placed in | click Unarchive under Tasks in the lower left

3. Select the catalog file you saved in step 2 by Browsing for it.

4. Select a Replace option, generally use Force or All depending on needs

    a. Force- Pastes all files, overwriting even those that have the read-only attribute set.

    b. All- Pastes all possible files, overwriting only those that do not have the read-only attribute set.

    c. Old- Pastes all possible files, but does not overwrite any existing files unless they are older than the source.

    d. None- Pastes all possible files, but does not overwrite any existing files. (Default)

5. Select an ACL option, generally always use Inherit as the other options can mess up security. You can customize the permissions as desired after unarchiving the file if they need to change to something other than what the parent folder has.

    a. Inherit - inherits the object's permissions (ACL) from its new parent folder. (Default)

    b. Preserve - Preserves the object's permissions (ACL) as it was in the original, mapping accounts as necessary.

    c. Create - Preserves the object's permissions (ACL) as it was in the original, creating and mapping accounts as necessary, depending on the mode and type of owner.

OAC Security

Security in OAC is divided into the sections below. Note that catalog and dataset permissions are also set by Site Folder Administrators and Content Authors respectively. Everything else is done by VUIT DataOps Administrators.

DataOps Responsibility

VUIT DataOps can assist groups with the following areas:

•     Create new groups
•     Add users to groups
•     Get user group lists
•     Assist with OAC environment issues (server down problems should be emailed to Platform.Support@Vanderbilt.Edu)
•     Permissions assistantce on folders

Content Authors Responsibility

Content Authors are responsible for the following:

•     Datasets created/maintained by Content Authors are their responsibility and are not maintained by VUIT DataOps. It's incumbent on the dataset owner to grant security to the appropriate application roles.
•     All dataset owners should always grant BI Service Administrator full control as well as to the connection, otherwise we cannot assist with any dataset issue.
•     If a dataset owner leaves VU and Full permissions haven't been granted to any other user/group the only way to recover the dataset is to impersonate the user.
•     Catalog Permissions on folders

How to set up permissions

    1. Sign into Oracle Analytics Cloud OAC Production Or OAC Test

    2. Select Catalog at the top of the screen to navicate to the catalog screen.

    3. Select the folder for your group (EX: Conflict of Interest)

    4. Once the group is selected, under Tasks select Permissions



    5. At the top of the permission screen, select the + button



    6. Search for the name of the role you are seeking to add * the name of the role* (ex:*coi*)



    7. Select the role, once the role is selected use the single error button to add the new role

    8. Set the permission the role you are adding and select ok

    9. On the permissions screen select the box "Apply permissions to sub folders" if the role should have access to the sub folders within the top level folder



    10. Select the box "Apply permissions to items within the folder"

    11. Under replace options, keep replace all

    12. Click the ok button