2. Effectively Deploying and Managing Business Intelligence Implementations
SESSION: CON7576
Oracle Business Intelligence Enterprise Edition 11g offers many powerful capabilities for managing your BI systems. This session focuses on the four key pillars of the BI lifecycle: (1) commissioning BI, (2) maintaining service levels, (3) maintaining the security policy, and (4) commissioning applications. It examines all major lifecycle operations, from installation/upgrade through configuring systems for high availability and disaster recovery.
Nick Tuson
Senior Director
Oracle BI Product Management
October, 2014
Copyright © 2014, Oracle and/or its affiliates. All rights reserved. |

3. This is a Safe Harbor Front slide, one of two Safe Harbor Statement slides included in this template.
One of the Safe Harbor slides must be used if your presentation covers material affected by Oracle’s Revenue Recognition Policy
To learn more about this policy,
For internal communication, Safe Harbor Statements are not required. However, there is an applicable disclaimer (Exhibit E) that should be used, found in the Oracle Revenue Recognition Policy for Future Product Communications. Copy and paste this link into a web browser, to find out more information.  
For all external communications such as press release, roadmaps, PowerPoint presentations, Safe Harbor Statements are required. You can refer to the link mentioned above to find out additional information/disclaimers required depending on your audience.

4. Program Agenda 1
Product Architecture Commissioning BI Maintaining BI Service Levels Maintaining BI Security Policy Commissioning Applications 2 3 4 5

5. Reference: Possible Meanings for “I don’t know” …
I may use it a lot …
I don’t know … probably the least likely
I do know the answer, but I’m not going to tell you … because
you won’t like it
I’ll get in trouble
It’ll open up a can of worms
all of the above
I don’t understand the question
I know where this is going and I don’t want to go there
I’m hungry, sleepy, tired, irritable (pick one)
Oracle Confidential – Restricted

6. Oracle Business Intelligence 11g
Architecture
Commission
Commission Applications
Maintain Service Levels
BI Platform
Maintain Security Policy

7. BI 11g Product Architecture
Significant TCO Improvements
Extensive use of Oracle technology stack
WebLogic used as application server
Enterprise Manager used for systems management
Introduction of OPMN for BI System components
Centralized configuration management
Modify on central server, propagate to other servers
Horizontal and vertical scale out procedures
Security – Oracle Platform Security Services (OPSS)
Scriptable systems management and control

8. Oracle BI 11g Architecture
Oracle BI Domain
Oracle Confidential – Internal/Restricted/Highly Restricted

9. Oracle BI 11g Architecture
Oracle BI Domain
This term is used to refer to the overall Oracle BI install
Oracle Confidential – Internal/Restricted/Highly Restricted

10. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Oracle BI System Components
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

11. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
This is the Java application server – Oracle BI components written in Java run here
Oracle BI System Components
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

12. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Admin Server
Managed Server
These Java components run in two servers known as the ‘Admin’ and ‘Managed Servers’
Oracle BI System Components
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

13. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Node Manager
Admin Server
Managed Server
A component called ‘Node Manager’ controls these servers
Oracle BI System Components
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

14. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Node Manager
Admin Server
Managed Server
Admin Console
Enterprise Mgr
Specific administration services run in the ‘Admin Server’
Oracle BI System Components
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

15. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Node Manager
Admin Server
Managed Server
Admin Console
Enterprise Mgr
JMX MBeans
Administration capability is also available using Mbeans..
WLST
Oracle BI System Components
..and the WebLogic command line for scripted administration
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

16. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Node Manager
Admin Server
Managed Server
Admin Console
Enterprise Mgr
JMX MBeans
WLST
Oracle BI System Components
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

17. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Node Manager
Admin Server
Managed Server
Admin Console
Enterprise Mgr
JMX MBeans
WLST
Oracle BI System Components
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

18. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Node Manager
Admin Server
Managed Server
Admin Console
Action Service
BI Office
BI Publisher
Enterprise Mgr
Web Service SOA
Analytics
Security
JMX MBeans
The ‘Managed Server’ hosts the Java services that support the Oracle BI functionality
WLST
Oracle BI System Components
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

19. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Node Manager
Admin Server
Managed Server
OPSS
Admin Console
Action Service
BI Office
BI Publisher
Credential Store cwallet.sso
Enterprise Mgr
Web Service SOA
Analytics
Security
Policy Store
system-jazn-data.xml
JMX MBeans
Oracle BI makes use of core Fusion Middleware components within it’s architecture.
For security services, Oracle Platform Security Services (OPSS) is used
WLST
Oracle BI System Components
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

20. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Node Manager
Admin Server
Managed Server
OPSS
Admin Console
Action Service
BI Office
BI Publisher
Credential Store cwallet.sso
Enterprise Mgr
Web Service SOA
Analytics
Security
Policy Store
system-jazn-data.xml
JMX MBeans
The WebLogic identity store is available ‘out of the box’ but an alternative LDAP provider is recommended for production deployments
Identity Store
WLST
Oracle BI System Components
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

21. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Node Manager
Admin Server
Managed Server
OPSS
Admin Console
Action Service
BI Office
BI Publisher
Credential Store cwallet.sso
Enterprise Mgr
Web Service SOA
Analytics
Security
Policy Store
system-jazn-data.xml
JMX MBeans
Identity Store
DMS
WLST
Monitoring of key Oracle BI system metrics is taken care of by the Oracle DMS service
Oracle BI System Components
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

22. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Node Manager
Admin Server
Managed Server
OPSS
Admin Console
Action Service
BI Office
BI Publisher
Credential Store cwallet.sso
Enterprise Mgr
Web Service SOA
Analytics
Security
Policy Store
system-jazn-data.xml
JMX MBeans
Identity Store
ODL
DMS
WLST
Troubleshooting using log files across all the Oracle BI components is facilitated and made easier by the Oracle ODL service
Oracle BI System Components
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

23. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Node Manager
Admin Server
Managed Server
OPSS
Admin Console
Action Service
BI Office
BI Publisher
Credential Store cwallet.sso
Some of the key Oracle BI services are not written in Java and are called ‘System Components’
Enterprise Mgr
Web Service SOA
Analytics
Security
Policy Store
system-jazn-data.xml
JMX MBeans
Identity Store
ODL
DMS
WLST
Oracle BI System Components
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

24. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Node Manager
Admin Server
Managed Server
OPSS
Admin Console
Action Service
BI Office
BI Publisher
Credential Store cwallet.sso
The Oracle BI System components make up the key querying, scheduling and display generation functionality in addition to ‘backend’ services such as Java Host and the Cluster Controller
Enterprise Mgr
Web Service SOA
Analytics
Security
Policy Store
system-jazn-data.xml
JMX MBeans
Identity Store
ODL
DMS
WLST
Oracle BI System Components
BI Server
BI Scheduler
BI Presentation Server
BI Java Host
Cluster Controller
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

25. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Node Manager
Admin Server
Managed Server
OPSS
Admin Console
Action Service
BI Office
BI Publisher
Credential Store cwallet.sso
Enterprise Mgr
Web Service SOA
Analytics
Security
Policy Store
system-jazn-data.xml
JMX MBeans
Identity Store
ODL
DMS
WLST
Oracle BI System Components
OPMN
BI Server
BI Scheduler
BI Presentation Server
BI Java Host
Cluster Controller
The Oracle Fusion Middleware component ‘OPMN’ manages the Oracle BI System Components with start, stop, restart capabilities
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

26. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Node Manager
Admin Server
Managed Server
OPSS
Admin Console
Action Service
BI Office
BI Publisher
Credential Store cwallet.sso
Enterprise Mgr
Web Service SOA
Analytics
Security
Policy Store
system-jazn-data.xml
JMX MBeans
The database schemas created by the RCU provide a supporting infrastructure for the Oracle BI Domain
Identity Store
ODL
DMS
WLST
Oracle BI System Components
OPMN
BI Server
BI Scheduler
BI Presentation Server
BI Java Host
Cluster Controller
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

27. Oracle BI 11g Architecture
Oracle BI Domain
WebLogic Domain
Node Manager
Admin Server
Managed Server
OPSS
Admin Console
Action Service
BI Office
BI Publisher
Credential Store cwallet.sso
Enterprise Mgr
Web Service SOA
Analytics
Security
Policy Store
system-jazn-data.xml
JMX MBeans
Identity Store
ODL
DMS
WLST
Oracle BI System Components
OPMN
BI Server
BI Scheduler
BI Presentation Server
BI Java Host
Cluster Controller
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

28. Oracle BI 11g Architecture
How does this look on disk?

29. Oracle BI 11g Architecture
Middleware Home
This is the top level location for installation and consists of the Oracle WebLogic Server home, and, optionally, one or more Oracle homes e.g. Oracle_BI1
A Middleware home can reside on a local file system or on a remote shared disk that is accessible through NFS

30. Oracle BI 11g Architecture
Oracle BI Home
An Oracle home contains installed files necessary to host a specific product.
The Oracle BI ‘Oracle home’ (Oracle_BI1) contains a directory that contains binary and library files for Oracle BI Enterprise Edition.
An Oracle home resides within the directory structure of the Middleware home.

31. Oracle BI 11g Architecture
The Oracle Common home contains the binary and library files required for the Oracle Enterprise Manager Fusion Middleware Control and Java Required Files (JRF).
There can be only one Oracle Common home within each Middleware home
Oracle Common

32. Oracle BI 11g Architecture
A WebLogic Server home contains installed files necessary to host a WebLogic Server.
The WebLogic Server home directory is a peer of Oracle home directories and resides within the directory structure of the Middleware home.
WebLogic Home

33. Oracle BI 11g Architecture
BI system Components
Contains subdirectories that hold the Oracle BI system components, OPMN control, configuration files (e.g. NQSConfig.INI and instanceconfig.xml), RPD, Webcat and diagnostic logfiles.

34. Oracle BI 11g Architecture
Contains the WebLogic Admin and Managed Servers that host the Oracle Java components
BI WebLogic Domain

35. Oracle BI 11g Architecture
Oracle BI Domain
Key Configuration Files
WebLogic Domain
Node Manager
Admin Server
Managed Server
OPSS
Admin Console
Action Service
BI Office
BI Publisher
Credential Store cwallet.sso
Enterprise Mgr
Web Service SOA
Analytics
Security
Policy Store
system-jazn-data.xml
JMX MBeans
Key Config Files
biee-domain.xml topology.xml config.xml jps-config.xml
Identity Store
ODL
DMS
WLST
Oracle BI System Components
OPMN
BI Server
BI Scheduler
BI Presentation Server
BI Java Host
Cluster Controller
Key Config Files
nqsconfig.ini instanceconfig.xml
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

36. Oracle BI 11g Architecture
Oracle BI Domain
Key Log Files
WebLogic Domain
Node Manager
Admin Server
Managed Server
OPSS
Admin Console
Action Service
BI Office
BI Publisher
Credential Store cwallet.sso
Enterprise Mgr
Web Service SOA
Analytics
Security
Policy Store
system-jazn-data.xml
JMX MBeans
Key Config Files
biee-domain.xml topology.xml config.xml jps-config.xml
Identity Store
Key Log Files
Adminserver.log bi_server<n>.log
ODL
DMS
WLST
Oracle BI System Components
OPMN
BI Server
BI Scheduler
BI Presentation Server
BI Java Host
Cluster Controller
Key Config Files
nqsconfig.ini instanceconfig.xml
Key Log Files
nqserver.log sawlog.log opmn.log
RCU Schemas
Oracle Confidential – Internal/Restricted/Highly Restricted

37. Oracle BI 11g Clustering Architecture
Oracle BI Domain
Server 1
Server 2
WebLogic Domain
Managed Server | Cluster Node 1
Node Manager
Managed Server | Cluster Node 2
Node Manager
Action Service
BI Office
BI Publisher
Action Service
BI Office
BI Publisher
Web Service SOA
BI Plugin
Security
BI Plugin
Security
Web Service SOA
Admin Server
Admin Server
Admin Console
Enterprise Mgr
Admin Console
Enterprise Mgr
BI System Component Cluster
Oracle BI System Components
Oracle BI System Components
BI Server
BI Scheduler
Presentation Server
Java Host
BI Server
BI Scheduler
Presentation Server
Java Host
OPMN
Cluster Controller
OPMN
Cluster Controller

38. Oracle BI Architecture - Summary
The Oracle BI architecture consists of Java components that run in WLS servers and non-Java system components
Oracle BI makes use of some key Fusion Middleware components such as OPSS, ODL and DMS and OPMN
The directory structures where the Oracle BI files reside have specific names
Knowledge of this architecture and terminology is essential for Oracle BI system administrators and can help when working with Oracle Support services
Oracle Confidential – Internal/Restricted/Highly Restricted

39. 12c

40. Oracle Business Intelligence 11g
Lifecycle
Commission BI
Commission Applications
Maintain Service Levels
BI Platform
Maintain Security Policy

41. Oracle BI Releases and Recommendationsx x
Get on latest x release or when available
12c
12c
12c
Plan now for 12c

42. Installation Process And Options
Roadmap to installation
Read the release notes and doc (twice)
Is machine DHCP?
If YES, then install loopback adapter
Download files (‘shiphome’)
Unpack to required location
Run RCU to create schemas
Run installer
Install required files
Configure

43. Installation Process And Options
Repository Creation Utility (RCU)
This is used to create the supporting database schemas required by Oracle Fusion Middlware
Oracle BI EE has a single schema that is prompted for during install. This includes the scheduler and BI scorecard schemas and others. RCU also selects an MDS schema to be created.
Independent of the main Oracle BIEE install process
Unzip distribution file and run : \bin\rcu.bat (Win) or \bin\rcu script (Linux)

44. Repository Creation Utility

45. Installation Procedure and Options
Install Options
Simple
Easiest way to install Oracle BIEE – WLS Admin Server Only
Enterprise
Adds more options, e.g. Ports and Oracle Home names
Used for creating a new install
Performing a horizontal scale out to another machine
Software Only
Used for advanced configuration, only ‘file copy’ of install
Separate configuration phas
Used with Exalytics and BI Apps Installations

46. Install Technology Oracle Inventory Oracle Universal Installer (OUI)
Unified installer across Oracle products.
Sophisticated framework
Pre-req checks
Supports Inventory
Supports silent install
Supports ‘standalone’ and ‘advanced’ install
Operates in an ‘Interview’ style

47. Oracle Universal Installer

48. Oracle Universal Installer

49. Configuration Utility – Scale Out

50. Configuration Utility – Scale Out

51. Configuration Phase

52. 12c Installation Some key changes
Based on Next-Generation Oracle Universal Installer (OUI)
Three models
Compact Install (Quick Start)
Single download (~2GB), No External DB (RCU) Adminserver only
Used for Trial / Evaluation / Development
Enterprise Install (Base Domain)
Simpler production level install (RCU optionally run by installer)
Full Advanced Model
Leveraging WLS Templates and advanced configuration options
All Installs complete quickly (no WLS restarts)
Compact Install 12 minutes, Enterprise Install about 20 minutes
Install will optionally deploy BAR file instead of SampleApp

53. Oracle Business Intelligence 11g
Lifecycle
Commission BI
Commission Applications
Maintain Service Levels
BI Platform
Maintain Security Policy

54. “Oracle BI Baseline Validation Tool”
This slide can also be used as a Q and A slide
New – not yet available … soon … name may change

55. Oracle BI Baseline Validation Tool
Lifecycle operations such as patching and upgrade usually require some form of rigorous testing that nothing has broken or regressed
These are time consuming and can delay such operations due to the time required for testing
There is a need for an automated way to perform this testing to help customers move to later patches / releases
Oracle Confidential – Internal/Restricted/Highly Restricted

56. Oracle BI Baseline Validation Tool
A tool that automates the creation of a baseline set of data that is able to be compared with data from another (or the same) system that may be the result of
Patch
Upgrade
Migration
Any significant change.
A way to perform regression testing on any two compatible Oracle BIEE environments
A way to instill confidence when performing an upgrade or migration of an existing environment
Oracle Confidential – Internal/Restricted/Highly Restricted

57. What it does.. Provides a pluggable based implementation
The following modules will be available:
Data verification
Compare result output (i.e. actual numbers or text) from different versions
Visual verification
Capture screenshots of reports to check they are visually the same
BI catalog verification
Capture object and metadata and compare with the target system
Logical query verification
Capture logical query definitions and compare with the target system
Oracle Confidential – Internal/Restricted/Highly Restricted

58. Pre-Upgrade / Existing OBIEE Environment
A Pluggable Model
Validation Tool
Data
Visual
Catalog
Logical Query
Pre-Upgrade / Existing OBIEE Environment
Post-Upgrade /
New OBIEE Environment
Oracle Confidential – Internal/Restricted/Highly Restricted

59. Create BAR file with utility and import into 12c
Workflow
Create BAR file with utility and import into 12c
12c
11g
Create 11g Baseline
Apply Patch
Run Upgrade Tooling
Evaluate Results
Roll Out System
Migrate Environment
Correct / Modify
Oracle Confidential – Internal/Restricted/Highly Restricted

63. Virtualization

64. Deployment Options
This slide can also be used as a Q and A slide

65. Deployment Options Active / Active Admin Server Failover Option
For BI Availability
Active / Active
Admin Server Failover Option
Active / Passive (CFC)
Enterprise Deployment Guide
Disaster Recovery

66. High Availability for Oracle BI
Oracle BI EE achieves high availability through
Process replication
Highly available storage (database and shared file system)
To provide a highly available system, BI EE requires the following external services:
A fault tolerant HTTP load balancer
A highly available shared file system
A highly available database for Oracle BI Scheduler and fact tables
The following system components must be replicated (have at least two instances):
Presentation Services
Cluster Controller
Oracle BI Scheduler
BI Server
JavaHost

67. High Availability for Oracle BI
The following persistent data sources must be placed on the highly available shared file system:
RPD publishing directory:
The server metadata is contained in the repository file (.rpd file) that is local to each BI Server. One BI Server is designated as a Master. Online changes to the rpd file are made on the Master BI Server, and these changes are replicated to other members of the cluster.
Oracle BI Presentation Catalog
Global cache (optional, but advisable for higher performance).
The global cache capability offers support for a common query cache that stores cache seeding and purging events. The global cache is visible to all BI Servers in the cluster.
Scheduler scripts

68. High Availability for Oracle BI
A WebLogic cluster with at least two members is required to host the Oracle BI EE Java components such as the Oracle BI Presentation Services Plug-in and the authentication service.

69. WebTier
WLS Java Components
OBIEE System Components

70. Active - Active
An Active-Active system deploys two or more active system instances
All instances handle requests concurrently
Advantages:
Provides High Availability
Minimal System Downtime
Highly Scalable Architecture
Disadvantages:
Requires a Load Balancer
Requires Shared Storage

71. Active – Active WLS Admin Server Failover
Default deployment as a singleton
Not essential for WLS managed server availability
Can be deployed on shared storage to enable failover
Procedure documented in Enterprise Deployment Guide

72. Active - Passive (Cold Failover Cluster)
An Active-Passive system deploys an active instance that handles requests and a passive instance that is on standby. Also known as a Cold Failover Cluster
Advantages:
Increased Availability over Single Instance
Less Costly than Active-Active
Load Balancer not required
Disadvantages:
Not as scalable as Active-Active
Longer Downtime than Active-Active

73. Active / Passive (Cold Failover Cluster)

74. Enterprise Deployment Guide
The Enterprise Deployment Guide (EDG) defines an architectural blueprint that captures Oracle's recommended best practices for a highly available and secure Oracle Business Intelligence deployment
The best practices described in this blueprint use Oracle products from across the technology stack, including Oracle Database, Oracle Fusion Middleware, and Oracle Enterprise Manager Fusion Middleware Control

75. Enterprise Deployment Diagram (EDG)
Documented Best Practice
Database
Security
Middle tier Cluster
Firewall Configuration
Tested by Oracle

76. Disaster Recovery It is different to High Availability
Protection of services in cases of natural disaster
Typically at an alternative geographic location
May be fewer services or resources at standby site
Relies on shared storage and replication
Synchronize the Application Tier after changes and patching
Synchronize the DB Tier (RCU schemas)

77. Disaster Recovery

78. Enterprise Management and Lifecycle Comprehensive Support in Enterprise Manager
Unified systems management
Across all components / entire lifecycle
Performance monitoring & tuning
Diagnostics & troubleshooting
Across single instance & clusters
1-click scale-out & online clustering
Dynamic capacity management
Lifecycle and Management
Develop, test, deploy
Scale-out & tune
Patch & upgrade cycles
HA Advisor
Large-scale enterprise BI systems must deliver mission-critical scalability and performance, and this typically means multiple physical servers to manage.
Operational system management for Oracle BI 11g is delivered through Oracle Enterprise Manager. This enables consistent diagnostics and troubleshooting, and easy configuration management of the distributed system topology over its complete lifecycle, including patching.
With Enterprise Manager, you can manage not only Oracle BI, but also Oracle database, Fusion Middleware and Oracle applications.

80. Oracle BI EE Management Pack
Key benefits
Automated discovery and tracking of Business Intelligence components and configurations
Reduce mean time to resolution
Reduce Costs
Proactive monitoring of end-user performance and availability
Monitor key performance indicators and metrics
Improve Service Levels
Make optimization decisions based on clearly defined KPI’s
Create Service Level Agreements and Dashboards
Align with Business Demands

81. Oracle BI EE Management Pack
Manage your OBIEE11g/Exalytics environment
New OBIEE11g target types with home pages
BI Instance, BI Presentation Server, BI Cluster Controller, BI Java Host, BI Scheduler, BI Server
Essbase Server, Essbase Application
Guided discovery for Stand-alone or Exalytics deployments
Process Control for Instances & Components
HA recommendations based on current setup

82. Oracle BI EE Management Pack
Track and Diagnose
Log viewer integration
Search and diagnose across your BI or Exalytics instance
Log file monitoring
Set thresholds on custom patterns in BI log files
Configuration Management
View, Search and compare configurations between components and across instances
Dashboards reports for usage and failures
Scheduler reports for failed and scheduled jobs

83. Oracle Business Intelligence 11g
Lifecycle
Commission BI
Commission Applications
Maintain Service Levels
BI Platform
Maintain Security Policy

84. Oracle BI Security Integration with Identity Management
Strong security
Comprehensive SSL
Encrypted metadata catalog
Report encryption, watermarking & signing
Authentication & Single Sign-On
Integrates with corporate directories / SSO
Externalizes authentication
Easy to configure & setup
Application roles & authorization
Comprehensive set of application roles
Externalized for all metadata & data
Flexible authorization model
Oracle BI enforces strong security based on whatever authentication/authorization systems you deploy.
Between internal components, SSL (Secure Sockets Layer) can be easily configured between distributed components with really on only one click in Enterprise Manager. New in Oracle BI 11g, the metadata catalog is now encrypted.
Privileges for Application roles can be sourced from corporate directories, Oracle Identity Management, or other vendors’ solutions, ensuring quick implementation and conformance to enterprise security standards.

85. Oracle Platform Security Services (OPSS)
Standards-based, portable, integrated, enterprise-grade security framework for Java applications
Underlying security platform that provides security to Oracle Fusion Middleware
Abstraction layer in the form of standards-based programming interfaces (APIs) that insulate applications from security infrastructure
OPSS provides enterprise product development teams, systems integrators, and independent software vendors with a standards-based, portable, integrated, enterprise-grade security framework for Java SE and Java EE applications.
OPSS is the underlying security platform that provides security to Oracle Fusion Middleware including WebLogic Server, Server Oriented Architecture (SOA) applications, Oracle WebCenter, Oracle Application Development Framework (ADF) applications, and Oracle Entitlement Server. OPSS is designed to be portable to third-party application servers, so developers can use OPSS as the single security framework for both Oracle and third-party environments, thus decreasing application development, administration, and maintenance costs.
OPSS provides an abstraction layer in the form of standards-based application programming interfaces (APIs) that insulate developers from security and identity management implementation details. With OPSS, developers do not need to know the details of cryptographic key management or interfaces with user repositories or other identity management infrastructures. Using OPSS, in-house developed applications, third-party applications, and integrated applications benefit from the same, uniform security, identity management, and audit services across the enterprise.
For OPSS-related news, including FAQs, a whitepaper, and code examples, and forum discussions, see

86. What security mechanisms do we support?
<Insert Picture Here>
What security mechanisms
do we support?

87. Application Roles / Policies
Oracle
Business
Intelligence
LDAP
Identity
Store
Roles
Application Roles / Policies
Groups
Users
Users

88. Application Role Mappings in EM

89. Multi-Tenancy
This slide can also be used as a Q and A slide

90. The High-Level Vision for Multi-Tenancy Functionality in Oracle BI
Enable Oracle BI customers to provide Oracle BI as part of a SaaS offering to their own internal or external customers.
Customers need to be able to service multiple, distinct tenants through one deployment of BI.
These deployments typically have very large numbers of end users (sometimes hundreds of thousands) and service a large number of ‘tenant’ customers (sometimes hundreds of thousands).
In a multi-tenant deployment, each tenant should have access to end-user BI functionality whilst being unaware and unaffected by the presence of other tenants within their environment.

91. Different Categories of Multi-Tenant Usage and Requirements
Per -Tenant BI
Centrally Provisioned Departmental BI
Per-Tenant Analytics
Oracle Product Development teams and BI Platform customers providing basic, standardized BI as a service (or part of another service) to their own external customers
Oracle Product Development teams and BI Platform customers providing a BI service including report authoring and tenant-specific data models to their own external customers
BI Platform customers providing autonomous
environments of BI as a service to their own internal customers

92. Multi-Tenancy Support in BI 11.1.1.7 - What it does do
The webcat is made ‘Tenant-aware’ meaning that tenants can be provisioned - a special Tenant folder is created that only members of that tenant (plus global administrators) can see.
The TENANTGUID session variable can be used as necessary (e.g. to provide context for data-level security in the RPD)
Front-end functionality is isolated by tenant

93. Multi-Tenancy In The Web Catalog

94. 11.1.1.7.0 Multi-Tenancy Functionality
A Global Administrator is provisioned as well as a Tenant Administrator
Use of Answers, Dashboards and Delivers isolated by Tenant
Tenant provisioning functionality
Tenant audit logs
Tenant backup and restore
Set query limits by tenant
Tenant-specific global header and getting started sections
Provide the ability to disable functionality in the user interface options while retaining the ability to access the same functionality programmatically through API

95. 11.1.1.7.0 Multi-Tenancy Limitations
No tenant access to RPD and limited access to admin functionality
No tenant functionality in Essbase, RTD, BI Publisher, Scorecard or Market Segmentation
No tenant access to direct database requests
Limited methods for selecting tenant-specific data sources or credentials to connect to data sources
No tenant-specific Application Roles
No Catalog Groups

96. Oracle Business Intelligence 11g
Lifecycle
Commission BI
Commission Applications
Maintain Service Levels
BI Platform
Maintain Security Policy

97. Oracle BI 12c Operations Vision
Multi-Tenant – always Multi-Service Instance (MSI) enabled
Effectively ‘Plugable BI’
Zero downtime
All system and application operations supported on-line
No requirement for downtime of end-user functionality
Support offline configuration
First class support for configuration and metadata customization
Radically simple and robust upgrade from 11g
Removal of all significant 11g ‘Hot Spots’

98. Oracle University – The Oracle BI Lifecycle Series

99. Questions 99 99

101. Graphic Section Divider