1. 1 Introduction to OBIEE: Learning to Access, Navigate, and Find Data in the SWIFT Data Warehouse Lesson 3: SWIFT Data Warehouse Security This course, Introduction to OBIEE, provides a high-level overview of the basic elements and navigation in OBIEE, the SWIFT Data Warehouse query and reporting tool. OBIEE (Oracle Business Intelligence Enterprise Edition) provides State of Minnesota agencies the ability to retrieve and present financial and human resources data from the SWIFT Data Warehouse in a variety of formats including queries, reports and dashboards. OBIEE delivers a user-friendly business intelligence platform that makes it simple to access data, whether the user is running pre- built queries and reports or creating them from the ground up. This course is recorded as a PowerPoint presentation, allowing you to review it at your own pace. Click your mouse or use your keyboard arrow keys to advance slides. Red boxes shown in demonstrations are intended to simulate mouse clicks in OBIEE. NOTE: Many of the screenshots in this course were recorded in a demonstration environment. Data displayed in the examples provided does not reflect actual State of Minnesota data.

2. 2 Lesson 3: SWIFT Data Warehouse Security Users must have security clearance in order to access the SWIFT Data Warehouse/OBIEE. This Security is focused in two areas: 1.The OBIEE functionality (tool permissions) a user has access to 2.The types of data a user has clearance for This topic will explore the basic security requirements, and how to obtain the proper clearance in order to get up and running in OBIEE. Please keep in mind that this lesson is an overview and does not provide details on all required security elements. Please check with your agency security administrator if you have questions.

3. 3 OBIEE Users Your ability to retrieve data from the SWIFT Data Warehouse via OBIEE is governed by… SWIFT Admin Portal Lesson 3: Security

4. 4 OBIEE Users SWIFT Admin Portal = Security = …the security clearance that has been granted to you. Lesson 3: Security

5. 5 OBIEE Users SWIFT Admin Portal = Security = In order to use OBIEE, you must have security clearance established in two areas: Lesson 3: Security

6. 6 OBIEE Users SWIFT Admin Portal = Security = 1. Security for functionality, providing access to the OBIEE tool and defining the specific permissions you have within the tool and; Functionality Lesson 3: Security

7. 7 OBIEE Users SWIFT Admin Portal = Security = Functionality Data 2. Security to data, in order to pull information from the appropriate OBIEE subject areas. Lesson 3: Security

8. 8 OBIEE Users SWIFT Admin Portal = Security = Functionality Data Let’s take a closer look at these security elements and how they are assigned to users. Lesson 3: Security

9. 9 SWIFT Data Warehouse Security Functionality Provides access to the OBIEE tool and defines what you can (and can’t) do in OBIEE Lesson 3: Security

10. 10 SWIFT Data Warehouse Security Functionality Provides access to the OBIEE tool and defines what you can (and can’t) do in OBIEE Based on “General Warehouse Roles”. Lesson 3: Security

11. 11 SWIFT Data Warehouse Security Functionality Provides access to the OBIEE tool and defines what you can (and can’t) do in OBIEE Based on “General Warehouse Roles”. You must be assigned at least one “General Warehouse Role” in order to access OBIEE. Lesson 3: Security

12. 12 SWIFT Data Warehouse Security Functionality The “General Warehouse Roles” define the list of permissions or capabilities you have clearance to. There are four available roles, each with its own set of permissions. Your role is assigned to you by your agency security administrator. The following slide illustrates the permissions granted with each of the four roles. Provides access to the OBIEE tool and defines what you can (and can’t) do in OBIEE Based on “General Warehouse Roles”. You must be assigned at least one “General Warehouse Role” in order to access OBIEE. Lesson 3: Security

13. 13 This is the Security Role Matrix, which is one of the documents available on the OBIEE Support dashboard. It’s also available on the SWIFT Website: http://www.swift.state.mn.us/doc/data- warehouse/role-matrix.pdf Lesson 3: Security

14. 14 Note the four “General Warehouse Roles” at the top of the matrix. Permissions assigned to each of the roles are indicated below. Lesson 3: Security

15. 15 SWIFT Data Warehouse Security Functionality Data Determines which OBIEE subject area(s) you have clearance to Now, we’ll focus on the Data part of the security equation. In order to pull data from the warehouse, (whether you are developing an analysis, or simply viewing a report) you must have security clearance to that data first. The types of data you have clearance to within SWIFT and/or SEMA4 determine which subject areas you have access to in OBIEE. Lesson 3: Security

16. 16 SWIFT Data Warehouse Security Functionality Data Determines which OBIEE subject area(s) you have clearance to SWIFT data – based on SWIFT system module Inquiry roles Security clearance to SWIFT data is governed by the inquiry roles that are assigned to you. Each SWIFT module has an inquiry role associated with it. You must have the inquiry role for each SWIFT module’s data that you intend to access via OBIEE. Lesson 3: Security

17. 17 SWIFT Data Warehouse Security Functionality Data Determines which OBIEE subject area(s) you have clearance to SWIFT data – based on SWIFT system module Inquiry roles For example, if you need to access General Ledger and Accounts Payable information through OBIEE, you would need to be assigned: General Ledger Inquiry Only role And Accounts Payable Inquiry Only role Lesson 3: Security

18. 18 SWIFT Data Warehouse Security Functionality Data Determines which OBIEE subject area(s) you have clearance to SWIFT data– based on SWIFT system module Inquiry roles SEMA4 data – based on “SEMA4 Warehouse roles” Security clearance to SEMA4 data is governed by the set of SEMA4 Warehouse roles assigned to a user. These roles are categorized by data type. The roles assigned to a user determine the SEMA4-related OBIEE subject areas the user has clearance to. Lesson 3: Security

19. 19 SWIFT Data Warehouse Security Functionality Data Determines which OBIEE subject area(s) you have clearance to SWIFT data– based on SWIFT module “inquiry only” roles SEMA4 data – based on “SEMA4 Warehouse roles” Guidance on which SWIFT and SEMA4 data security roles are required for each of the available OBIEE subject areas is provided on the SWIFT website: http://www.swift.state.mn.us/obiee- subject-areas Lesson 3: Security

20. 20 SWIFT Data Warehouse Security Functionality Data Provides access to the OBIEE tool and defines what you can (and can’t) do in OBIEE Based on “General Warehouse Roles”. You must be assigned at least one “General Warehouse Role” in order to access OBIEE. Determines which OBIEE subject area(s) you have clearance to SWIFT data– based on SWIFT module “inquiry only” roles SEMA4 data – based on “SEMA4 Warehouse roles” Lesson 3: Security Note: There are additional security requirements that your Agency Security Administrator will establish for you in order to provide access to the data you need such as Business Unit security in SWIFT or Department security in SEMA4. Check with your Agency Security Administrator if you have questions.

21. 21 In order to establish or update a user’s security roles, the Request for Access to SWIFT Statewide Systems form must be completed and then submitted to Statewide Systems Security at MMB. Note: SWIFT Data Warehouse access is only one of many security components that are established via this form. Lesson 3: Security

22. 22 The form, as well as detailed instructions and role description documents are available on the MMB Statewide Systems Security webpage: http://www.mmb.state.mn.us/ system/security Lesson 3: Security

23. 23 Terminology Review

24. 24 Terminology Review Request for Access to SWIFT Statewide Systems form: Security Roles: General Warehouse role: SEMA4 Warehouse role: SWIFT Inquiry role: The MMB form that’s used to establish and maintain security clearance for users of the SWIFT Data Warehouse and other applications accessed through the SWIFT Administrative Portal. Determines the type of work that a user can perform in OBIEE. Four General Warehouse roles are available, each associated with its own set of specific permissions. An individual must be assigned at least one of these roles (along with appropriate data roles) in order to access OBIEE. Provides security clearance to SEMA4 (Human Resources /Payroll) - related data through OBIEE. Provides security clearance to Financial data through OBIEE. Each SWIFT module has its own SWIFT Inquiry role. Users need to be assigned the Inquiry role for each SWIFT module’s data that they need to access through OBIEE.