Setting Up ODI Security 1

Using the ODI Security Manager module, you can manage security in Oracle Data Integrator.
In this practice, you explore the security features of ODI Security Manager. You create a profile,grant 3 methods (actions) to the profile, and create a new ODI user to whom you assign that
profile.
You then assign the profile to your new user, and grant a specific method (View) for a specific object (Scheduling) for your new user. You also define user parameters that enable specific
functionality for your new user.
Finally, you define password policies that control the case sensitivity and length of user-defined passwords.
1. In ODI Security Navigator, expand the Profiles panel and duplicate the Repository Explorer profile, naming the new profile REVIEWER. You grant three methods to the REVIEWER
profile: “Compare with version,” “Duplicate,” and “Export from object Model.”
Note: You may need to click the View menu and open the Security Navigator.
2. Create a new ODI user, INT_PROJECT_REVIEWER.
3. Assign the new profile REVIEWER to your newly created user. To connect to ODI Master and Work repositories, assign the built-in profile CONNECT, to the new user INT_PROJECT_REVIEWER.
4. Grant the View method for the Scheduling object to user INT_PROJECT_REVIEWER.
5. Define user parameters to enable specific functionality for INT_PROJECT_REVIEWER.
6. Define password policies to enforce passwords to be uppercase and greater than 8 characters.


Your Tasks:
1. To define an ODI security policy, you need to create an appropriate profile for working methods used in your project.
a. Start Oracle Data Integrator and connect to the Master repository. For Login Name, enter Master Repository. Enter SUPERVISOR for user and SUNOPSIS for password. Click the Profiles tab.



b. From the View menu, open the ODI Security Navigator. Open the Profiles tab. Rightclick the generic REPOSITORY EXPLORER profile and select Duplicate Selection. Click Yes to confirm.



c. Double-click Copy of REPOSITORY EXPLORER to edit.
 
d. Rename your new profile REVIEWER. Click the Save button to save this profile. The profile REVIEWER appears in the Profiles tree structure.


2. Assign the appropriate authorizations to REVIEWER.
a. Open the Objects Tab. In the Profiles tab, expand REVIEWER > Model, as shown below. Only the View method is permitted for Model now.



b. In the Objects tab, expand Model and select the method Compare with Version.
Drag the Compare with Version method to the profile REVIEWER. In the Confirmation window, click Yes.




c. Repeat step c to add the methods Duplicate and Export... to the profile REVIEWER. In Profiles, expand REVIEWER > Model, and verify that the methods Compare with version, Duplicate, and Export... are added to the object Model, as shown in the following screen. Save the profile REVIEWER and close the tab.

 

3. Create a new ODI user.
a. Click the Users tab and select New user. The New User window opens.




b. Name the new user: INT_PROJECT_REVIEWER. Click Enter a password.

c. Enter the password (INTEGRATION), and then confirm this password. Do not select the “Allow expiration date” check box. Click OK. Click the Save button to save this new user. User INT_PROJECT REVIEWER is now displayed in the Users tree structure.

4. Assign the profile REVIEWER to user INT_PROJECT_REVIEWER.
a. Make sure that both the Profiles and Users panels are displayed together in ODI Security Navigator. Click the profile REVIEWER in the Profiles panel and drag it to user INT_PROJECT REVIEWER in the Users panel. Click Yes to confirm granting the profile.




b. In the Users panel, expand the INT_PROJECT REVIEWER > Profiles node and verify that profile REVIEWER was assigned to this user.

c. To connect to ODI Master and Work repositories and other objects, assign the built-in profile CONNECT to your new user. Select the profile CONNECT and drag it to user
INT_PROJECT REVIEWER. Click Yes to confirm granting CONNECT to your new user.



d. Verify that the profiles CONNECT and REVIEWER are added to your new user:

No comments:

Post a Comment