BAM 12c Security Concept by Carsten Wiesbaum

clip_image002

 

Oracle’s BI application Oracle Business Activity Monitoring (BAM) is the choice to provide Oracle Fusion Middleware (FMW) users with business insights of all running processes and applications. Due to the fact that in a standard Oracle FMW infrastructure multiple applications are hosted on which different user groups are operating one can imagine that not all information should be accessible by all users. At this point user roles and permissions become an important topic within enterprise applications. This article will provide an overview of Oracle BAM Security Concept which can be used to restrict user access to different data and dashboard categories.

Introduction to Oracle BAM Security Concept

BAM is a standard Java EE application. Therefore the same role and access right concepts apply to BAM as to any other Java EE application. When BAM is installed five standard BAM user groups are created in WebLogic standard security realm.

Each group grants a specific set of functionality to its members. The minimum requirement for a user in order to login to BAM is provided by BAMUsers group. All additional groups add more BAM functions for its users:

  • BAMContentViewer – Members can view dashboards in a project
  • BAMContentCreator – Members can create dashboards and other BAM artifacts in a project
  • BAMArchitect – Members can create new BAM Data Objects and Enterprise Message Sources
  • BAMAdministrator – Members can view and modify all resources in any project

Users can be added to user groups accord ing to the required access rights.

Adding additional BAM users

In order to add a new user to BAM one has to add the user to BAMUsers group. Afterwards the user can login. However he is not able to see any projects or access dashboards. Read the complete article here.

SOA & BPM Partner Community

For regular information on Oracle SOA Suite become a member in the SOA & BPM Partner Community for registration please visit www.oracle.com/goto/emea/soa (OPN account required) If you need support with your account please contact the Oracle Partner Business Center.

Blog Twitter LinkedIn image[7][2][2][2] Facebook clip_image002[8][4][2][2][2] Wiki

SOA Suite 11g Basics – Configuring multiple email addresses for use in BPEL email activity by Carsten Wiesbaum

soa-infra Workflow PropertiesWhen working on Oracle SOA Suite 11g solutions one might have the requirement to send out emails on various occasions. Within Oracle Fusion Middleware this capability is provided by the User Messaging Service (UMS) infrastructure. Nevertheless, some additional configuration is required in order to send emails from within a SOA composite application. This is especially true if one has to send emails from several email addresses. This article will describe how to setup SOA infrastructure in order to send emails from within BPEL processes using the email activity. The following topics will be covered:

  • Enable email communication channel
  • Configure Default email account
  • Configure additional email account using Enterprise Manager MBean Browser

This article will not cover setting up the required email server, general UMS configuration and sending mails using BPEL email activity.

Enable email communication channel and configuring Default email account

Even if UMS is setup properly, some additional steps are required in order to send emails from within BPEL processes. First of all, the workflow engine email communication channel has to be enabled. The configuration is executed within Oracle Enterprise Manager 11g. To begin with one has to enter EM, expand the SOA folder and open soa-infra context menu. Within the context menu Workflow Properties can be accessed. Read the complete article here.

SOA & BPM Partner Community

For regular information on Oracle SOA Suite become a member in the SOA & BPM Partner Community for registration please visit www.oracle.com/goto/emea/soa (OPN account required) If you need support with your account please contact the Oracle Partner Business Center.

Blog Twitter LinkedIn image[7][2][2][2] Facebook clip_image002[8][4][2][2][2] Wiki