OBIEE 11G Note4

v  Impersonation is a feature used by Oracle Business Intelligence components to establish a session on behalf of a user without employing the user's password.( Impression/Impersonation/Cloning/Transformation)

v  A list of application roles that a user is a member of is available from the Roles and Groups tab in the  My Account dialog in Presentation Services(My Account/ User Securit/ Privileges/ Group Membership)

v  Oracle Business Intelligence 11g is tightly integrated with the Oracle Fusion Middleware Security architecture and delegates core security functionality to components of that architecture

v  If you log in to the Administration Tool in online mode, then you can view all users from the WebLogic Server. If you log in to the Administration Tool in offline mode, then you can only view users that are stored in the repository.

v  If you want to enable an employee called Fred to create dashboards and reports, you might create a new user called Fred and assign Fred to the default BIAuthors group.( BIAuthor/ BIDevelopers/ BIConsumer/ BIAuthors).

v  Groups are organized hierarchically, and inherit privileges from parent groups. In other words, the BIAdministrators group automatically inherits privileges from the BIAuthors and BIConsumers groups. Oracle recommends that you do not change this hierarchy.

v  If you want user Fred to be a Sales dashboard author, you might create an application role called Sales Dashboard Author that has permissions to see Sales subject areas in the repository and edit Sales dashboards.

v  Instead of defining the security policy in terms of users in groups in a directory server, Oracle Business Intelligence uses a role-based access control model

v  A placeholder for an Application Role definition can be created in the Administration Tool to facilitate offline repository development. But this is just a placeholder visible in the Administration Tool and is not an actual application role. You cannot created an actual application role in the Administration Tool. You can create an application role only in the policy store, using the administrative interface available for managing the policy store.

v  Oracle does not recommend using WebLogic Embedded LDAP Server in an environment with more than 1000 users.

v  The BISystem Role must exist (with the BIAdministrator role), for Oracle Business Intelligence to function correctly.

v  During installation an Oracle WebLogic Server domain is created and Oracle Business Intelligence is installed into that domain. The domain is named bifoundation_domain (in Simple or Enterprise installations), and is found under the WebLogic Domain folder in the Fusion Middleware Control navigation pane.

v  SUFFICIENT:  This LoginModule need not succeed. If it does succeed, return control to the application. If it fails and other Authentication providers are configured, authentication proceeds down the LoginModule list.

v  If you want to enable user Fred to perform BIAuthors and BIAdministrator duties, you might create a new application role called BIManager, which has both BIAuthors privileges and BIAdministrat; ors privileges

v  true or false:If a user belongs to two application roles or Catalog groups and both are granted permissions, then the least restrictive permissions are given to the user.  The exception to this is if one of the two application roles or Catalog groups is explicitly denied the permissions, in which case the user is denied.

v  The default application roles are  BIAdministrator, BIConsumer, and BIAuthor.

v  Oracle Business Intelligence components communicate with each other using TCP/IP by default. Configuring SSL between the Oracle Business Intelligence components enables secured network communication.

v  Correct answer: Embedded LDAP Server → Oracle WebLogic Server Administration Console , Policy Store, Credential Store → Oracle Fusion Middleware Control , RPD → Oracle BI Administration Tool , Webcatalog → Presentation Services Administration

Oracle WebLogic Server Administration Console : LDAP Server
Oracle Fusion Middleware Control : Policy Store, Credential Store
Oracle BI Administration Tool : RPD
Presentation Services Administration : Webcatalog

v  By default, an Oracle Business Intelligence installation is configured with an authentication provider that uses the Oracle WebLogic Server embedded LDAP server for user and group information. The Oracle Business Intelligence default policy store provider and credential store provider store Credentials, application roles and application policies in files in the domain.

v  If you are deploying the default Policy Store, then Oracle recommends that you make a copy of the original  system-jazn-data.xml  policy file and place it in a safe location.

v  The Oracle Business Intelligence default credential store is file-based, also known as being wallet-based, and is represented by the file cwallet.sso.

v  You use ________  in the Oracle BI Administration Tool to manage permissions for application roles, and set access privileges for objects such as subject areas and tables.

v  you use Identity Manager in the Oracle BI Administration Tool to manage permissions for application roles, and set access privileges for objects such as subject areas and tables.

v  What is the default port number for the Oracle WebLogic Server Administration Console and Fusion Middleware Control applications?.The deafult port is 7001

v  FMW_UPDATE_ROLE_AND_USER_REF_GUIDS parameter in NQSConfig.INI:

v  OPSS is the underlying platform on which the Oracle Fusion Middleware security framework is built.  What does OPSS stand for?- Oracle Platform Security Services

v  Oracle Business Intelligence Release 11g supports the use of SA System Subject Area, in combination with the BI Server initialization blocks, to access user, group and profile information stored in database tables.

v  true or false:In Oracle Business Intelligence Release 10g users and groups could be defined within a repository file using the Oracle BI Administration Tool. In Oracle Business Intelligence Release 11g users and groups can no longer be defined within a repository.

v  False. A suitable database schema containing the users, credentials and groups required for authentication, must be accessible from the WebLogic Server on which Oracle BI EE is running.

v  True or False: The Oracle BI Administration Tool displays application role data from the policy store data in real time

v  True or False: if you reconfigure Oracle Business Intelligence to use Oracle Internet Directory (OID), you can view and manage users and groups in Oracle WebLogic Server Administration Console. if you reconfigure Oracle Business Intelligence to use Oracle Internet Directory (OID), you can view users and groups in Oracle WebLogic Server Administration Console but you must manage them using the OID Console.

v  The BI Server and Presentation Services client support industry-standard security for login and password encryption. When an end user enters a user name and password in the Web browser, the BI Server uses the Hypertext Transport Protocol Secure (HTTPS) standard to send the information to a secure Oracle BI Presentation Services port. From Oracle BI Presentation Services, the information is passed through ODBC to the BI Server, using Triple DES (Data Encryption Standard). This provides a high level of security (168 bit), preventing unauthorized users from accessing data or Oracle Business Intelligence metadata.

v  To use Microsoft Active Directory for authentication, you must configure an  alternative authentication provider

v  After a user has been authenticated, the next critical aspect of security is ensuring that the user can do and see what they are authorized to do and see. Authorization for Oracle Business Intelligence Release 11g is controlled by a security policy defined in terms of application roles.

v  When a user acts as proxy user for a target user, which mode of access allows only read only access to the target user's objects?

The following list describes the proxy levels:

v  Restricted — Permissions are read-only to the objects to which the target user has access. Privileges are determined by the proxy user's account (not the target user's account).

For example, suppose a proxy user has not been assigned the Access to Answers privilege, and the target user has. When the proxy user is acting as the target user, the target user cannot access Answers.

Full — Permissions and privileges are inherited from the target user's account.

v  If Catalog groups and application roles are used in combination to manage Catalog permissions or privileges, the Catalog groups take precedence. For example, if a user is a member of a Catalog group that grants access to a Presentation Services object or feature and is also a member of an application role that denies access to the same object or feature, then this user has access. A Catalog group takes precedence over an application role.

v  In Oracle Business Intelligence Release 11g the entire repository is encrypted using a key derived from a user supplied password.

Note:

A Release 11g repository can only be opened with the password. There is no mechanism for recovering a lost password.

v  A GUID is typically a 32-character hexadecimal string that is system-generated to form a unique identifier for an object. In Oracle Business Intelligence a GUID is used to refer to individual users and groups.

v  True or False: Assigning an application role to be a member of a Presentation Services Catalog group  is considered a best practice.

v  In the Provider Specific tab you specify the SQL statements used to query, and authenticate against, your database tables.

v  PROXY — Use this variable to store the name of the proxy user.

Use the initialization block named ProxyBlock and include code such as the following:

select targetId

from Proxies

where 'VALUEOF(NQ_SESSION.RUNAS)'=targetId and ':USER'=proxyId

PROXYLEVEL — Use this optional variable to store the proxy level, either Restricted or Full. If you do not create the PROXYLEVEL variable, then the Restricted level is assumed.

Use the initialization block named ProxyLevel and include code such as the following:

select proxyLevel

from Proxies

where 'VALUEOF(NQ_SESSION.RUNAS)'=targetId and ':USER'=proxyId

v  Presentation Services privileges can be granted to users both explicitly and by inheritance. However, explicitly denying a Presentation Services privilege takes precedence over user access rights either granted or inherited as a result of group or application role hierarchy.

v  False: You may have your own LDAP directory (for example Oracle Internet Directory) that you may want to use as the default authenticator, and disable the WebLogic Server default authenticator. Having a single source authentication provider prevents user names and passwords being derived from multiple authentication sources, which could lead to multiple points of attack, or entry from unauthorizeed users.

v  knows how to access information about the users and groups accessible to Oracle Business Intelligence and is responsible for authenticating users. → authentication provider, provides access to application roles and application policies, which forms a core part of the security policy and determines what users can and cannot see and do in Oracle Business Intelligence. → policy store provider, is responsible for storing and providing access to credentials required by Oracle Business Intelligence. → credential store provider --- 

An authentication provider that knows how to access information about the users and groups accessible to Oracle Business Intelligence and is responsible for authenticating users.

A policy store provider that provides access to application roles and application policies, which forms a core part of the security policy and determines what users can and cannot see and do in Oracle Business Intelligence.

A credential store provider that is responsible for storing and providing access to credentials required by Oracle Business Intelligence.

v  An application stripe defines a subset of policies in the policy store. The Oracle Business Intelligence application stripe is named obi.

v  To enable high availability of the default embedded Oracle WebLogic Server LDAP identity store in a clustered environment, you configure the virtualize attribute. When you set the virtualize attribute value to true, Managed servers are able to use a copy of the embedded default Oracle WebLogic Server LDAP identity store.

v  Single Sign On (SSO) A method of authorization enabling a user to authenticate once and gain access to multiple software application during a single browser session

OBIEE 11g Note 3

•         To navigate to an analysis, a specific dashboard page, or dashboard, choose this type of action:. Navigate to BI Object(select one of these: Navigate to BI Object/Navigate to BI Content/Navigate to BI Path/Navigate to BI Analysis)
  ·         True or False: If you save the dashboard in the Dashboards subfolder directly under /Shared Folders/first level subfolder, then the dashboard is listed in the Dashboard menu in the global header. If you save it in a Dashboards subfolder at any other level (such as /Shared Folders/Sales/Eastern), then it is not listed
  ·         True or False:  After the user selects the prompt value for an inline prompt, the prompt fields disappear from the analysis and the only way for the user to select different prompt values is to re-run the analysis.- An inline prompt is an initial prompt, meaning that it only displays when the analysis is rendered. After the user selects the prompt value, the prompt fields disappear from the analysis and the only way for the user to select different prompt values is to re-run the analysis.
  ·         True or False:  The order of the columns as they are displayed in the view also affects conditional formatting.- The order of the columns as they are displayed in the view also affects conditional formatting. The order in the view affects the "grain" at which the values are displayed. You can think of "grain" as a level of aggregation. The conditional format applies when the column to format is displayed at a finer grain or the same grain as the column on which the format is based. If the column being formatted is of a higher grain than the column on which the format is based, then the format applies only if the condition is based on a measure column. If the format is based on an attribute column and the column to format is displayed at a higher grain, then the conditional format does not apply.
  ·         The dashboard prompt type that allows for selecting a range of numeric values is called a:-( slider prompt/choice prompt/choice prompt/range prompt)- You can use the Slider input option for numeric data values only. Depending upon the operator that you select, this option enables the user to select multiple values by specifying a range of values, or all values that are lesser than, greater than, or equal to a specified value
  ·         For a condition based on an analysis, the conditon is based on the _____  of the results of the analysis.( Boolean flag/aggregate value/row count/metric value)- For an analysis, the criteria is a row count and an operator to apply to the row count; for example, the row count equals 100.
  ·         True or false: A selection step can be overridden by a prompt value.
  ·         For a condtion based on a KPI, the criteria used to evaluate the condition is:( row count/KPI status/KPI range/KPI target value )- For a KPI, the criteria is a KPI status, for example, the KPI status is OK.
  ·         A briefing book is a collection of static or updatable snapshots of dashboard pages, individual analyses, and BI Publisher reports.( executive document/briefing book/published collection/stored snapshot)
  ·         A ________  captures the path to a dashboard page and a simplified presentation of the dashboard prompts, for example:
  o   ...Action=Navigate&col1=Products.Color&val1="Armory"+"Clear"&col2=Periods."Month"
  o   &op2=gt&val2="05/01/1998%2012:00:00%20AM"(generated link/prompted link/dashboard link/value link)- When you create a prompted link, you can manually or programmatically manipulate the link, such as by adding different values for the prompts.
  ·         Conditions are objects that return a single Boolean value based on the evaluation of an analysis or of a Key Performance Indicator (KPI).
  ·         For a prompt,  Auto-complete is only available for the choice list  prompt type when the prompt designer selected the "Enable User to Type Value" option.() Note that auto-complete is not available for hierarchical prompts.
  ·         he look of a dashboard, such as background colors and the size of text, is controlled by:
  o   Skins — Skins control the way the Oracle BI EE interface is displayed, such as background colors, corporate logos, and the style sheets to use. Skins can be automatically assigned to users when they log on. Administrators can customize the default skin and create new skins.
  ·         styles control how dashboards and results are formatted for display, such as the color of text and links, the font and size of text, the borders in tables, the colors and attributes of graphs, and so on. They are organized into folders that contain Cascading Style Sheets (files with a .css extension), images, and graph templates.
  ·         An inline condition is a condition that you define at the point of use and do not save by name in the catalog. Instead it is saved as part of the dashboard page or agent.
  ·         True or false:  Named objects are those objects (like filters, groups, and calculated items) that are saved within an analysis.
  o   As you work with certain objects, you can create other objects that are saved with those objects. When you save one object with another, that object is saved "inline." You can save filters, groups, and calculated items inline. For example, you can create a group as part of an analysis. When you save the analysis, the group is saved "inline" or along with the analysis.
  o   In addition to saving these objects inline, you can save them as individual objects with the subject area in the Oracle BI Presentation Catalog. When you save an object on its own, its becomes a "named" object. Named objects provide reusability, because you can create one object and use it multiple times with any analysis, dashboard (for filters), or dashboard page (for filters) that contains the columns that are specified in the named object. When the named object is updated and saved, those updates are immediately applied to all objects where the named object is used.
  ·         The look of a dashboard, such as background colors and the size of text, is controlled by:( select one of these:Skins, styles, cosmetic formatting/HTML, Javascript, and SQL/Enterprise Manager/individual user configuration)
  ·         The look of a dashboard, such as background colors and the size of text, is controlled by:
  ·         Skins — Skins control the way the Oracle BI EE interface is displayed, such as background colors, corporate logos, and the style sheets to use. Skins can be automatically assigned to users when they log on. Administrators can customize the default skin and create new skins.
  ·         Styles — Styles control how dashboards and results are formatted for display, such as the color of text and links, the font and size of text, the borders in tables, the colors and attributes of graphs, and so on. Styles are organized into folders that contain Cascading Style Sheets (files with a .css extension), images, and graph templates. Administrators can customize some style sheets and create new style sheets. Users can override some elements in style sheets, such as table borders and text size, when formatting results in the Results tab.
  ·         Cosmetic formatting — Cosmetic formatting affects the visual appearance of results and dashboards. You can apply it to results, columns, and sections.
  
  
  ·         For a dashboard prompt to be applied to an analysis, the analysis must include what type of filter on the associated column?(is filtered/is prompted)
  ·         The types of actions that are available are categorized into two groups: those that ______  to related content and those that ____ operations, functions, or processes in external systems.( select one of these: navigate, invoke/browse, execute/link, document/drill, disable)
  ·         True or False: Calculated items are always displayed at the top of the column list in the order in which they were added
  ·         You can specify which links (Analyze, Edit, Refresh, Print, Export, Add to Briefing Book, and Copy) are to be included with analyses at the dashboard level. Note that you can set these links at the dashboard page level and the analysis level, which override the links that you set at the dashboard level.
  ·         Which type of column prompt style only allows for the user to select a single item from a list of values?( select one of these: listbox/radio button/choice list/check box)- The Radio Buttons input option provides the user with a visible list of all prompt values where a Radio Button is displayed before each prompt value. This option type is useful for short lists of values where the user is to select only one prompt value. To select a prompt value, the user scans the list and selects the radio button that corresponds to a particular item.
  ·         True or False: After you select the Convert this filter to SQL box, you can no longer view and edit the filter in the Edit Filter dialog.-  After you convert the filter to SQL statements, you can only view and edit the filter item as SQL statements in the Advanced SQL Filter dialog.
  ·         On dashboards,  columns  are used to align content, while  sections   hold the actual content.( select one of these:  columns, sections/sections, columns/templates, containers/sections, object containers)- Columns are used to align content, while sections within columns hold the actual content.
  ·         To provide event-driven alerting, scheduled content publishing, and conditional event-driven action execution use this OBIEE 11g object:( select one of these: delivered action/ Ibot/ agent/ scheduled analysis)- Agent is the correct answer.  Ibot was the term used in OBIEE 10g.
  ·         True or False: Combining and grouping column filters with AND and OR and NOT  Boolean operators enables you to create complex filters- Combining and grouping column filters with AND and OR Boolean operators enables you to create complex filters without requiring you to know SQL statements.  There is no NOT operator.
  
  
  ·         True or false:  A dashboard always consists of a single page containing multiple objects.- A dashboard can contain multiple pages.
  ·         You can create a group or calculated item as a way to display data in a table, pivot table, trellis, or graph. Groups and calculated items allow you to add new "members" to a column, when those members do not exist in the datasource. These members are also known as "custom  member"(select one of these: selected/custom/specified members)
  
  
•  To create a calculated item on an analysis that obtains the current measure, such as dollar sales, of the item from the first, second, and third rows, and sums them together, use the following formula: sum($1,$2,$3)
•     To make an agent available for subscription, in the Agent Editor on the _____ tab , the Publish Agent for Subscription option must be selected, and users, and Catalog groups and Application roles that are allowed to subscribe must be identified.( select one of these: Subscribers/ Delivery/ Recipients/ Schedule)- To make an agent available for subscription, in the "Agent editor: Recipients tab", the Publish Agent for Subscription option must be selected, and users, and Catalog groups and Application roles that are allowed to subscribe must be identified.
•   Dashboard template pages   are dashboard pages that are used to populate the personal dashboards (My Dashboard) of new users on their initial login. This allows users to see one or more dashboard pages with content rather than an empty dashboard when they first log in.( select one of these:  Dashboard template pages/ Styles and skins/ Dashboard defaults/ Personal templates)
• Actions  provide functionality to:Navigate to related content. Invoke operations, functions, or processes in external systems(Drill Paths/Actions/KPI's/Conditions). You can include actions in analyses, dashboard pages, agents, scorecard objectives, scorecard initiatives, and KPIs.
•      Saved Customizations allow users to save and view later dashboard pages in their current state with their most frequently used or favorite choices for items such as filters, prompts, column sorts, drills in analyses, and section expansion and collapse.( User Preferences/Stored Values/Saved Customizations/Saved Selections)- Saved customizations allow users to save and view later dashboard pages in their current state with their most frequently used or favorite choices for items such as filters, prompts, column sorts, drills in analyses, and section expansion and collapse. By saving customizations, users need not make these choices manually each time that they access the dashboard page.
•    A  _________   captures the path to a dashboard page and all aspects of the page state, for example:

  o   http://localhost/10.1.3.2/saw.dll?Dashboard&_scid=7ndOC-SjmWo&PortalPath=%2Fusers

  o   %2Fadministrator%2F_portal&Page=p2&PageIdentifier=7fsg0r2sdssvgen4

  o   &BookmarkState=r78an1mbj0fj4lmqhdjfndvvai

        It is saved in the catalog as a hidden object and is accessible for a number of days, default is 30.-(select one of these: genertaed/book mark/saved/prompt link)- A bookmark link captures the path to a dashboard page and all aspects of the page state, for example:        http://localhost/10.1.3.2/saw.dll?Dashboard&_scid=7ndOC-SjmWo&PortalPath=

           %2Fusers%2Fadministrator%2F_portal&Page=p2&PageIdentifier=7fsg0r2sdssvgen4

           &BookmarkState=r78an1mbj0fj4lmqhdjfndvvai

      After you create a bookmark link, you can:
       Save the link as a bookmark so that you can return to the exact same page content at a later time.
       Copy and send the link to other users who then can view the exact same content that you are viewing, providing they have the same permissions as you and have access to the page.
  
  
  
  
       When you create a bookmark link, the state of a dashboard page is saved in the catalog as a hidden bookmark object for the amount of time that your organization specifies. The default is 30 days. See the administrator for the amount of time that your organization specifies. Because the state of a dashboard page is saved when you create a bookmark link, you can continue to modify the content of the page after you create the link