ContentasDeliveryChannelinOracleBIPublisherforFusionApplications AHelpGuidetoSwitchDeliveryfromSFTPtoWebCenterContent ORACLEWHITEPAPER|APRIL2018 TableofContents Introduction
2 PlanningtoChangetheDeliveryChannelforReports
3 UsingaProvisionedConnection
4 CreatingaCustomConnection
4 ConfiguringFileEncryption
5 UploadingPGPPublicKeyFiles
5 EnablingDeliveryofPGPEncryptedFiles
6 SchedulingaNormalJobtoDelivertoWebCenterContent
7 DefiningaBurstingQuerytoDelivertoWebCenterContent 10 SampleBurstingQuery 11 SchedulingaBurstingJob 11 UsingWebServicesforDeliveringDocuments 12 SampleScheduleReportServiceRequest 13 ExtractingtheDocumentsDeliveredtoWebCenterContent 15 UsingtheWebCenterContentUserInterfaceforExtractingDocuments 15 UsingtheWebCenterContentWebServicesforExtractingDocuments 16 TroubleshootingIssueswithConnectiontoWebCenterContent 21 FrequentlyAskedQuestions 24 Appendix 26 OverviewofOracleWebCenterContent 26 1|WebCenterContentasDeliveryChannelinOracleBIPublisherforFusionApplications Introduction OracleBusinessIntelligence(BI)Publisherisanenterprisereportingsolutionforauthoring,managing,anddeliveringallyourhighlyformatteddocuments,suchasoperationalreports,electronicfundstransferdocuments,governmentPDFforms,shippinglabels,checks,salesandmarketingletters,andmuchmore.BIPublishercandeliverreportstoavarietyofdestinationssuchasPrinter,Fax,Email,WebDAVservers,FTPServers,ContentServers,andOracleContentandExperienceCloud(earlierknownasDocumentCloudService). OracleFusionApplicationsusesOracleWebCenterContentasacontentrepository.ThecontentinWebCenterContentissecuredthroughuser,roles,privilegesandounts. FusionApplicationsusesBIPublishertogeneratepixel-perfectreportswithSFTPandemailmonlyuseddeliverychannels.InFusionApplicationsRelease13,BIPublishersupportsOracleWebCenterContent(earlierknownasUCM)asthemenddeliverychannelforcontentmanagement.YoucanusetheprovisionedconnectiontodeliverfilesfromBIPublishertoWebCenterContent,butifyouwanttodeliverPGPencryptedfilesfromBIPublishertoWebCenterContent,youmustuseacustomconnection.Youcan’tusetheprovisionedconnectiontodeliverPGPencryptedfilesfromBIPublishertoWebCenterContent. YoucansetupWebCenterContentasthedeliverychannelinBIPublisher.Thisdocumentexplainshowto: PlanthechangeinreportdeliverychannelUseaprovisionedconnectionCreateanewcustomconnectionConfigurefileencryptionSchedulejobstouseWebCenterContentasthedeliverychannelDefineaburstingqueryScheduleaburstingjobUsewebservicesfordeliveringfilesExtractthefilesdeliveredtoWebCenterContentTroubleshoottheWebCenterContentdeliverychannel WhenyouconfigureOracleWebCenterContentasthedeliverychannelinBIPublisher,seeOracleWebCenterContentSystemAdministrator'sGuideforContentServerformanagingsecurityanduseress. TheFrequentlyAskedQuestionssectionprovidesanswersmonlyaskedquestions.TheAppendixcontainsmoreinformationaboutOracleWebCenterContent. PlanningtoChangetheDeliveryChannelforReports Conceptually,theanizationandfileesspermissionsinanFTP/SFTPServerisdifferentfromthatinaContentServer.InFTP/SFTPservers,foldersareusedanizefilesandtocontrolfileess,butinWebCenterContentfoldersareoptionalandsecuritygroupandountsareusedtodefinefileess.Therefore,youmustplanbeforeswitchingyourdeliverychannelfromSFTPtoWebCenterContent.TounderstandOracleWebCenterContent,seeOracleWebCenterContentSystemAdministrator'sGuideforContentServer. Herearethemendationstoplanthechange:
A.FileOrganizationandFileSecurityTransition
1.YoucanmapthefolderbasedsecurityinSFTPtoSecurityGroupsinWebCenterContent.
2.IfthefolderessinSFTPishierarchical,thenyoucanuseountstocreateasimilarhierarchicalessinWebCenterContent.
3.YoucanoptionallyusefoldersinWebCenterContentanizethefilessimilartothefolderstructureinSFTP.However,keepinmindthatthefoldersinWebCenterContentislimitedtoholdamaximumof1000filesinafolder.Ifyouarecreatingmorethanthousanddocuments,don’tuseafoldertostorethedocumentsinWebCenterContent.
B.DeliverySetupTransition
1.YoucanusetheprovisionedWebCenterContent(FA_UCM_PROVISIONED)connectionifyoudon’trequireencryption.Toenableencryption,createacustomconnection.
2.IfyouwereusingPGPencryptionforSFTPdelivery,youcanusethesamePGPencryptionkeyforconfiguringPGPencryptioninWebCenterContent.
C.DeliveryDestinationTransitioninJobs/DataModels/WebServices
1.EditthescheduledjobstodeliverthereportstoWebCenterContent.
2.InaburstingJob,edittheburstingqueryinthedatamodeltochangethedeliverychannelandparameterstodeliverthereportstoWebCenterContent.
3.Ifyouareusingwebservicestosubmitjobs,editthewebservicestodeliverthereportstoWebCenterContent. StepArequireschangesinWebCenterContentanizefilesandsecurefileess.StepBandCrequirechangesinBIPublisher.BIPublisherchangesareexplainedindetailinthefollowingsections. UsingaProvisionedConnection Bydefault,aprovisionedWebCenterContentconnectionnamed“FA_UCM_PROVISIONED”isavailablewhenyougetBIPublisherinyourFusionApplicationspod.TheprovisionedconnectionusestheFUSION_APPS_OBIA_BIEE_APPIDsystemusertoconnecttoWebCenterContent.TheFUSION_APPS_OBIA_BIEE_APPIDsystemuserisassignedwithasetofpre-seededsecuritygroupsandountstosupportthemonusecases.IfyouhaveaspecificrequirementtoessWebCenterContentusingusercredentialsotherthantheFUSION_APPS_OBIA_BIEE_APPIDsystemusercredentials,oryouwanttousePGPkeyencryption,theBIPublisheradministratorcanaddacustomconnection. CreatingaCustomConnection WhenyoucreateacustomconnectionforWebCenterContent,theusernameandpasswordmustbedifferentfromtheoneusedbytheprovisionedconnection(FA_UCM_PROVISIONED),buttheURIforthecustomconnectionandtheprovisionedconnectionmustbesame.Tocreateacustomconnection:
1.NavigatetotheContentServertabintheDeliverysection,andclickAddServer.2.IntheURIfield,enterthesameURIusedbytheprovisionedFA_UCM_PROVISIONEDWebCenterContent server.
3.Entertheservername,URI,username,andpassword.4.LeavetheEnableCustomMetadataboxunchecked.CustommetadataisnotusedinFusionApplications
5.ClickTestConnectiontoensurethatyoucanconnecttoWebCenterContent.6.ClickApply. ConfiguringFileEncryption YoucanusePGPencryptiontosecurethefiledeliverytoWebCenterContent.PerformthesestepstousePGPencryption:
1.UploadthePGPpublickeystoimportthePGPkeysofWebCenterContent.SeeUploadingPGPPublicKeyFiles.
2.EnabledeliveryofPGPencryptedfilesinacustomconnectiontoWebCenterContent.SeeEnablingDeliveryofPGPEncryptedFiles. UploadingPGPPublicKeyFilesTouploadPGPPublicKeyFiles:
1.NavigatetotheSecurityCentersectionintheBIPublisherAdministrationpage.2.ClickPGPKeystoopenthePGPKeyspage.
3.InthePGPKeyssection,clickBrowseandselectthePGPkeyfileintheOpendialog.4.ClickUpload. TheuploadedfileisimportedintothekeystoreanditsdetailsarevisibleinthePGPKeystable.IfakeywiththesameIDisimportedagain,thefileisoverwritten.5.ClickDownloadcorrespondingtothekeyintheEncryptedTestOutputcolumnofthePGPKeystabletodownloadanddecryptatestoutputfileusingthesecretkeyoftheimportedpublickey.essfuldecryptionconfirmstheencryptionisworkingforyourkeys. EnablingDeliveryofPGPEncryptedFilesToenabledeliveryofPGPencryptedfiles:
1.MakesurethatyouhaveuploadedaPGPpublickeyfiletoaGPGkeystoreonthecloud.2.NavigatetotheContentServerpageunderDelivery.
3.Selectthecustomcontentserverconnectionyouwanttoconfigure.4.Selecttheimportedkey(byID)fromPGPKeysdropdownandverifythatmandispopulatedingreyed FilterCommandfield.
5.ClickApply. SchedulingaNormalJobtoDelivertoWebCenterContent ToscheduleanormaljobtodeliverdocumentstoWebCenterContent:
1.FromtheHomepage,underCreate,selectReportJob.2.InScheduleReportJob,ontheGeneraltab,clicksearchnexttotheReportfield.3.InOpen,navigatetoandselectthereport,andthenclickOpen.4.InScheduleReportJob,clicktheScheduletab.5.IntheFrequencylist,selecttheoptiontouseforthisreport.6.InScheduleReportJob,clicktheOutputtab. a.FromtheDestinationTypelist,chooseContentServer. b.ClickAddDestination. c.SelecttheserverfromtheServerdrop-downlist. d.SelecttheWebCenterContentsecuritygrouptoassigntothereport. e.(Optional)SelectanountwithintheSecurityGrouptoassigntothereport. Note:Thedrop-downlistcontainsonlytheSecurityGroupsandountsthattheuserconfiguredfortheWebCenterContentServerconnectionhaswriteessto.Therefore,ifyouusethedefaultFA_UCM_PROVISIONEDconnection,thelistmaybedifferentfromthatofacustomconnection. f.(Optional)SelecttheFolderPathtodeliverfilestoanexistingfolderinthecontentserver. g.(Optional)EnteravalueforAuthor.Ifyoudon’tenteranAuthor,yourusernameisusedfortheAuthormetadatafieldinWebCenterContent. h.(Optional)TypeaTitleforthereport.Ifyoudon’tenteraTitle,theLayoutnameisusedfortheTitleinWebCenterContent. i.Enterthefilenametoassigntothedelivereddocumentontheremoteserver,forexample,myreport.pdf. Ensurethatyoudon'tincludefileswiththesamenameinonefolder.TheFileNamefieldisusedastheNativeFileNameinWebCenterContent.Ifyoudon’tsupplyafilenamevalue,theOutputnameisused. j.(Optional)TypeadescriptiontoincludewiththedocumentinWebCenterContent. k.UncheckIncludeCustomMetadata.CustommetadataisnotusedinFusionApplications.
7.ClickSubmit.8.IntheSubmitdialog,typeanameintheReportJobNamefield,andclickOK.9.ClickonHomeandnavigatetotheReportJobHistorypagetoverifythereportdeliverystatus. DefiningaBurstingQuerytoDelivertoWebCenterContent Burstingisaprocessofsplittingdataintoblocks,generatingdocumentsforeachblock,anddeliveringthedocumentstooneormoredestinations.Thedataforthereportisgeneratedbyexecutingaqueryonceandthensplittingthedatabasedonakeyvalue.Foreachdatablock,BIPublishergeneratesanddeliversaseparatedocument.TheburstingqueryisaSQLquerythatyoudefinetoprovidetherequiredinformationtoformatanddeliverthereport.SeeDataModelingGuideforOracleBusinessIntelligencePublisher. TodeliverreportstoWebCenterContent,definetheburstingjobwithWCCasthedeliverychannel,andconfiguretheparametervaluesasshowninthetable. Parameter Value DEL_CHANNEL Deliverychannel.Specify‘WCC’forWebCenterContent. Parameter1 ServerName Parameter2 SecurityGroup Parameter3 Authorofthefile Parameter4 ount(Optional) Parameter5 Title Parameter6 Outputfilename Parameter7 Comments(Optional) Parameter8 ContentID(Optional)IfyouspecifytheID,itmustbeunique.Ifyoudon'tspecifytheID,thesystemgeneratesauniqueone. Parameter9 Custommetadata(true/false).Specify‘false’. Parameter10 FolderPath Note:
1.Ensurethatyoudon'tincludefileswiththesamenameinonefolder.2.ContentIDmustbeunique. SampleBurstingQueryThisisasamplequeryforburstingreportstoaspecificfolderinthecontentserver. selectdistinct product_statusas"KEY",'BurstTemp'TEMPLATE,'en-US'LOCALE,'PDF'OUTPUT_FORMAT,'WCC'DEL_CHANNEL,'Custom_UCM'PARAMETER1,'CRMStage'PARAMETER2,'hcm.user'PARAMETER3,''PARAMETER4,'Test_Burst'PARAMETER5,Product_Status||TestFile.pdf'PARAMETER6,Product_StatusPARAMETER8,'false'PARAMETER9,'/ContributionFolders/Test12311/Check'PARAMETER10fromproducts --SplitKeyfromdatamodelSQL--Reporttemplatename --Outputtype--Tosendtocontentserver--ContentServername--Securitygroup--Authorofthefiletobeshownincontentserver--ount(Optional)--Title--OutputFilename--ContentID(Optional)--Custommetadata(Optional)--Folderpathtodeliverfiles SchedulingaBurstingJob Toscheduleaburstingjob:
1.Makesurethereportisenabledforbursting.EnableareporttouseaburstingdefinitionontheReportPropertiesdialogoftheReportEditor.
2.SelectUseBurstingDefinitiontoDetermineOutput&DeliveryDestinationontheOutputtab. TheOutputandDestinationoptionsforthejobaredisabledbecausetheoutputanddestinationdetailsaresuppliedbytheburstingdefinition. UsingWebServicesforDeliveringDocuments Apartfromusingnormaljobsandburstingjobs,youcanusewebservicestodeliverdocumentsfromBIPublishertoWebCenterContent. Important!
IntherequestXMLcodethatyousendtoBIPublisher,makesureyouspecifytheWebCenterContentfolderpath(WCCFolderPath)insteadofthefoldername(WCCFolderName)fordeliveringthedocuments. KnownIssue(Bug27446781):The/xmlpserver/services/v2/ScheduleService?
wsdlschedulerserviceWSDLincorrectlycontainstheWCCFolderNameelementnameinsteadofWCCFolderPath.Asaworkaround,edittheWSDLtoreplacetheWCCFolderNameelementwithWCCFolderPathelementbeforegeneratingtheJavaclientcode. InthefollowingWSDL(v2/ScheduleService?
wsdl) plexTypename="WCCDeliveryOption"> Makethefollowingchange: plexTypename="WCCDeliveryOption"> TheSOAPrequesttoBIPublishermustcontaintheWCCFolderPathelementashighlightedinthesample ScheduleReportServicerequestcall. SampleScheduleReportServiceRequest Here’sasampleScheduleReportServicewebservicerequesttodeliverdocumentsfromBIPublishertoaWebCenter Contentfolder: --Zeroormorerepetitions:-->obia$/extractTransformLoad$administratortest /ContributionFolders/Test/childTest/falseCRMStageCustom_UCMtt pdftesttrue/~administrator/Interactive_Viewer/SH_Interactive_Report.xdotruetruedecjob11 TheReportJobHistorypagewillcontainthereportdeliverystatusandthereportjobID.ThedeliveryinformationintheReportJobHistorypagecontainsthecontentIDofthedocumentdelivered. ExtractingtheDocumentsDeliveredtoWebCenterContent YouneedFusionApplicationscredentialstousetheseWebCenterContentfeaturestoextractthedocumentsfromWebCenterContenttoyoursystem: WebCenterContentuserinterfaceWebCenterContentwebservicesUsingtheWebCenterContentUserInterfaceforExtractingDocumentsYoucanuseSearchorBrowseContenttolocatedocumentsinWebCenterContent.ThefollowingimageshowstheSearchpage. ThefollowingimageshowstheBrowseContentpage. UsingtheWebCenterContentWebServicesforExtractingDocumentsYoucanuseWebCenterContentwebservicestoextractdocumentsfromWebCenterContent.YouhavetospecifytheContentIDsofthedocumentsyouwanttoextract. ToextractthedelivereddocumentsfromWebCenterContent:
1.CheckthestatusofthedocumentdeliverytomakesurethedocumentsaredeliveredfromBIPublishertoWebCenterContent.Youcanconfirmthedeliverystatusbyusing:TheReportJobHistorypage,checktheReportJobStatusfield. ThegetScheduledReportStatus()methodtocheckthestatusofthejob.Forexample: JobStatusstatus=getScheduledReportStatus(submitJobId,username,password); wheresubmitJobIdistheIDofthejobusedtodeliverthedocuments.YoucangetjobIDfromtheresponseoftheScheduleReport()methodorfromtheReportJobIDfieldfromtheReportJobHistorypage.
2.GettheContentIDsofthedocumentsstoredinWebCenterContent.UsethefollowingBIPublisherservicestogetthecontentIDsofthedocumentsdeliveredfromBIPublishertoWebCenterContent. a.ScheduleareportandgetthejobID.Forexample:StringsubmitJobId=schedService.scheduleReport(); SeescheduleReport()Method. b.FetchtheinstanceIDsoftheessfuljobs.Forexample:String[]instanceIds=schedService.getAllJobInstanceIDs(submitJobId,username,password); c.UsethejobinstanceIDtogetthejoboutputIDforeachjobinstanceID.Forexample:JobOutputsListjobOutputInfo=schedService.getScheduledReportOutputInfo(instanceJobId,username,password]); SeegetScheduledReportOutputInfo()Method.d.UsethejoboutputIDtogetthedetailsofthejoboutput.Forexample: jodl=schedService.getScheduledReportDeliveryInfo(outputId.toString(),username,password);SeegetScheduledReportDeliveryInfo()Method.e.Fromthejoboutputdetails,gettheContentIDofthedocumentstoredinWebCenterContent.Forexample:byte[]b1=(JobOutputDelivery)jodl.getJobOutputDeliveryList()[0].getDeliveryParameters(); //Createabytearrayinputstreamwiththedeliveryparametersjava.io.ByteArrayInputStreamin=newjava.io.ByteArrayInputStream(b1);//LoadtheparametersintoaPropertiesobjectjava.util.Propertiespr=newjava.util.Properties();pr.load(in);//FetchthecontentIDusingthekey:d_d_contentidSystem.out.println("ContentID:"+pr.getProperty("d_d_contentid"));//d_d_contentid:UCMFA000001in.close() HereisasamplecodetolisttheWCCcontentID(s)ofdocumentsdeliveredbyaBIPublisherJob: .oracle.xmlns.oxp.service.v2; publicclassScheduleServiceTest{ publicstaticvoidmain(String[]args){ if(args.length>0){ System.out.println("FetchingUCMContentIDforJobID:"+args[0]);getContentId(args[0],args[1],args[2]);System.out.println("Done.");}else{ System.out.println("Pleasespecifyarguments:");System.out.println("Noargumentsspecified.Exiting...");}} publicstaticvoidgetContentId(StringsubmitJobId,Stringusername,Stringpassword){try{ScheduleServiceProxyschedService=newScheduleServiceProxy();//UsethesubmitjobIDtocheckthestatusofthejobasthecustomeriscurrentlydoingJobStatusstatus=schedService.getScheduledReportStatus(submitJobId,username,password);System.out.println("JobStatusforJobID:"+submitJobId+"is:"+status.getJobStatus());/**Waitforthejobpleteessfullyandcheckthestatus.**///Afterpletionofthejob,fetchtheinstanceIDcorrespondingtothejobSystem.out.println("FetchinginstancejobIds...");String[]instanceIds=schedService.getAllJobInstanceIDs(submitJobId,username,password); for(intid=0;id=null&&jol.getJobOutputList()!
=null){ JobOutput[]listoutput=jol.getJobOutputList();for(inti=0;i=null&&jodl.getJobOutputDeliveryList()!
=null){ JobOutputDelivery[]listdelivery=jodl.getJobOutputDeliveryList();for(intj=0;j3.UsetheWebCenterContentservicestoextractdocumentsfromWebCenterContent.YouhavetospecifytheContentIDsofthedocumentsyouneed. SeeConfiguringWebServiceswithWSDL,SOAP,andtheWSDLGeneratorandGetFileinDevelopingwithOracleWebCenterContent. TroubleshootingIssueswithConnectiontoWebCenterContent Youaren'tlikelytoexperienceissueswithconnectiontoWebCenterContent.Ifyouseeanyerrorsintheconfigurationpageorinthejobstatus,youastheBIAdministratorcanusevariousoptionsinBIPublishertoresolvetheissue. TestConnectionTesttheWebCenterContentconfigurationusingtheTestConnectionoptionintheContentServerconfigurationpage. DiagnosticLogsYoucanenablejobdiagnosticsintheDiagnosticstabintheScheduleReportJobpage,anddownloadthejobdiagnosticlogsfromReportJobHistory. SchedulerDiagnosticsCheckthestatusoftheJMSqueueandoftrafficinthechannelusingtheschedulerdiagnostics. TestEncryption.InthePGPKeyspageoftheSecurityCentersection,downloadthekeyanddecryptatestoutputfileusingthesecretkeyoftheimportedpublickey.Ifyouseeessfuldecryption,thentheencryptionisworkingforyourkeys. TestBurstingReportToensurethatthefilesaredeliveredcorrectlytotheintendedusersandtopreventunauthorizedessofreports,makesure:TheburstingqueryusesWCCasDEL_CHANNEL. Therearenospellingmistakesintheburstingqueryforanyoftheparameters.Thecontentservername,securitygroup,andountsarecorrect. FrequentlyAskedQuestions ThisreferenceprovidesanswersmonquestionsaskedbyadministratorsconfiguringBIPublisherfordeliveringreports.CanIchangethedeliverydestinationofanexistingscheduledjobthatisscheduledtorunonafuturedateandtime,orisarecurringjob?
Yes.YouneedtoeditthescheduledjobandchangethedestinationtoContentServer.Afterthepletes,youcanverifythatthefilesaredeliveredtoWebCenterContentinsteadofSFTPserver. CanIchangethedeliverydestinationinaburstingjobfromSFTPtoWebCenterContent?
Yes.EditthereportpropertiesandchangethedestinationtoContentServer.Afterthepletes,youcanverifythatthefilesaredeliveredtoWebCenterContentinsteadofSFTPserver. CanIchangethedeliverydestinationinaburstingqueryfromSFTPtoWebCenterContent?
Yes.EdittheburstingqueryinthedatamodeltochangeDEL_CHANNELtoWCC. CanexternaluserswithoutFusionApplicationscredentialsessthefilesdeliveredtoWebCenterContent?
No.OnlyuserswithFusionApplicationscredentialscanessthefilesinWebCenterContent.CanIaddPGPkeystothe“FA_UCM_PROVISIONED”provisionedWebCenterContentconnection?
No.Youcan’taddPGPkeystothedefault“FA_UCM_PROVISIONED”WebCenterContentconnection. CanIscheduleareporttodelivertomultipledestinations?
Yes.IntheScheduleReportJobpage,youcanscheduleareporttodelivertomultipledestinations. CanIgeneratePGPkeysinWebCenterContentandscheduleajobinBIPublishertodeliverafilewithPGPkeystoWebCenterContent?
Yes.Performthefollowingsteps:
1.CreatethePGPkeysinWebCenterContent.2.IntheSecurityCentersectionintheBIPublisherAdministrationpage,selectPGPKeysandclickUploadto importthePGPkeysofWebCenterContent.
3.ConfigureacustomconnectiontoWebCenterContenttousetheimportedPGPkeys.4.ScheduleajobtorunareportthatdeliversfilestoWebCenterContent.ArethereanylimitationstousingfoldersinWebCenterContent?
Yes.Ensurethatyoudon'tincludefileswiththesamenameinonefolderandthenumberoffilesinafolderislessthan1000.WhenadocumentisdeliveredtoWebCenterContent,howcanIgetthedocumentIDorURL?
ThedocumentIDandURLofthedocumentdeliveredtoWebCenterContentisavailablein:ReportJobHistorypage.DeliveryparameterswhenyoucallgetScheduledReportDeliveryInfo()withthejoboutputIDparameter. Appendix OverviewofOracleWebCenterContent OracleWebCenterContentmanagestheinformationyouuseeverydaysuchasinformationfoundinemails,reports,memos,andslidepresentations.OracleWebCenterContentstores,anizes,andsecuresinformationsothatonlyuserswiththerequiredprivilegescanesstheinformation.TodelivercontenttoWebCenterContent,BIPublisherusesthefollowingstandardmetadata: DocumentType(DocumentTypevaluehasbeensetto“Document”forBIPublisherreportdocuments)SecurityGroupounts(Optional)SecurityGroupAsecuritygroupisasetoffilesgroupedunderauniquename.EveryfileintheContentServerrepositorybelongstoasecuritygroup.Securitygroupsenableyoutogroupanizecontentfilesthatcanbeessedonlybyspecificusers.Forexample,filescanbeassignedtoasecuritygroupwiththenameHRDocsfordocumentsbelongingtotheHumanResourcesdepartment,andthesefilescanbeessedonlybyemployeesworkingintheHumanResourcesdepartment. ountsountsgiveyougreaterflexibilityandgranularityinyoursecuritystructurethanthesecuritygroups.Youcansetupountsinahierarchicalstructurethatenablesyoutogivesomeusersesstoallthebranchesofthestructure,andlimitpermissionsforotherusers,whoareassignedountsatalowerlevelinthestructure.Forexample,tohandlethefollowinghierarchicalsecuritystructure,createthefollowingounts: ountingounting/Payablesounting/Receivablesounting/Payables/Pastounting/Payables/Currentounting/Receivables/Pastounting/Receivables/Current RolesAroleisasetofpermissions(Read,Write,Delete,Admin)foreachsecuritygroup.Youcanthinkofaroleasauser'sjob.Userscanhavedifferentjobsforvarioussecuritygroups.Userscanalsohavedifferentjobstoidentifythedifferentteamsinwhichtheyparticipate.Forexample,thefollowingfigureshowsthreerolesandthepermissionsthoseroleshavetothesamesecuritygroup. Rolesareassignedtooneormoreusersbythesystemadministratortoprovideesstothesecuritygroups.ThefollowingfigureshowstheEngUsersrolewithonlyReadpermissiontotheHRDocssecuritygroup.However,thisroleprovidesRead,Write,andDeletepermissionstotheEngDocssecuritygroup.Thisprovidesanaddedmeasureofsecurity,ensuringthatonlyuserswhoneedesstocertaindocumentscanmodifythem. UsersUsersarecentrallymanagedforFusionApplicationsandauthenticatedusingOraclePlatformSecurityServices(OPSS). PermissionsEachroleallowsthefollowingpermissionsforeachsecuritygroup:Read(R),Write(W),Delete(D),orAdmin(A).Thepermissionthatauserhastoessthefilesinasecuritygroupisthehighestpermissiondefinedbyanyoftheuser'sroles.Ifauserhastheguestandcontributorroles,whereguestisgivenReadpermissionandcontributorisgivenWritepermissiontothePublicsecuritygroup,theuserwillhaveWritepermissiontocontentinthePublicsecuritygroup.Inthefollowingexample,JoeSmithandAnnWallacehavepermissionstotwosecuritygroups:JoeSmithhasRead,Write,andDeletepermissiontotheEngDocssecuritygroup,butonlyReadpermissiontotheHRDocssecuritygroup.AsamemberoftheEngUsersrole,hehasbeengivenRead,Write,andDeleteesstoEngineeringDocuments,butonlyReadesstoHumanResourcedocuments.AnnWallacehasRead,Write,andDeletepermissiontotheHRDocssecuritygroup,butonlyReadpermissiontotheEngDocssecuritygroup.AsamemberoftheHRUsersrole,shehasbeengivenRead,Write,andDeleteesstoHumanResourcedocuments,butonlyReadesstoEngineeringdocuments. Whenountsareused,theountestheprimarypermissiontosatisfybeforesecuritygrouppermissionsareapplied.Therefore,useresstoaparticulardocumentistheintersectionbetweentheirountpermissionsandsecuritygrouppermissions. WebCenterContentUsersWebCenterContentuserscanloginandessfilesbasedontheirRoles,SecurityGroup,ountsandPermissions.UserscansearchthedocumentssubmittedthroughBIPublisherbyauthor,title,andfilename. Thefollowingfigureshowsthesearchresult.Clicktheinfoicontoviewallthemetadatainformationforthedocument. Ifyouclickthelinktothedocument,youcanviewthereportwithintheWebCenterContentenvironment. CONNECTWITHUS/oracle/oracle/oracle OracleCorporation,WorldHeadquarters500OracleParkwayRedwoodShores,CA94065,USA WorldwideInquiriesPhone:+1.650.506.7000Fax:+1.650.506.7200 Copyright©2018,Oracleand/oritsaffiliates.Allrightsreserved.Thisdocumentisprovidedforinformationpurposesonly,andthecontentshereofaresubjecttochangewithoutnotice.Thisdocumentisnotwarrantedtobeerror-free,norsubjecttoanyotherwarrantiesorconditions,whetherexpressedorallyorimpliedinlaw,includingimpliedwarrantiesandconditionsofmerchantabilityorfitnessforaparticularpurpose.Wespecificallydisclaimanyliabilitywithrespecttothisdocument,andnocontractualobligationsareformedeitherdirectlyorindirectlybythisdocument.Thisdocumentmaynotbereproducedortransmittedinanyformorbyanymeans,electronicormechanical,foranypurpose,withoutourpriorwrittenpermission. OracleandJavaareregisteredtrademarksofOracleand/oritsaffiliates.Othernamesmaybetrademarksoftheirrespectiveowners. IntelandIntelXeonaretrademarksorregisteredtrademarksofIntelCorporation.AllSPARCtrademarksareusedunderlicenseandaretrademarksorregisteredtrademarksofSPARCInternational,Inc.AMD,Opteron,theAMDlogo,andtheAMDOpteronlogoaretrademarksorregisteredtrademarksofAdvancedMicroDevices.UNIXisaregisteredtrademarkofTheOpenGroup.0418 WebCenterContentasDeliveryChannelinOracleBIPublisherforFusionApplicationsApril2018