Hi,

I have create a role called "App_Users" that allow all users within this role can access Adopter's to create synonyms. In this case I have Adopter for Oracle and MS SQL Server.

Is it possible for this "App_Users" role can access ONLY MS SQL Server adopter to create synonyms not from Oracle?

This message has been edited. Last edited by: nox,

Nox

I am 90% sure those permissions go for all adapters and you can't exclude one.

Thanks Chuck, so if I want to accomplish this goal do I need to split different Iway server or something? otherwise it make not much sense to have all user can access resources from adopters(the one configured) or inconvenience for admin to constantly remove adopter's connection after been use to avoid unnecessary usage for other users?

Nox

I talked to a person in NY and haven't had a chance to test this idea yet but wanted to pass it on. You could create a group profile for the SQL server admins and in that profile only have the SQL Server adapter connection in that profile and that should limit them to only be able to create synonyms for that data.

Hi Chuck,

Sound interesting, can you provides step by step of how you create a group that using another "edasprof.prf" ?

Nox

My PC with WebFOCUS on it is being repaired but I should have it back later today and I will provide the steps when I can get on my system. I don't know them off the top of my head

Thanks Chuck, I'll be waiting for your reply soon, hope your system is going well.

Nox

Are you using LDAP groups within your WebFOCUS security environment? If so on the reporting server console under the access control you can simply register that group that represents the application admins. Then under the Workspace / Configuration Files your can right mouse click on the User/Groups Profiles and create a new profile and copy and paste the SQL Server onnection info from the edasprof.prf file and save it with the name of the LDAP group. If you aren't using LDAP groups you will need to register the WebFOCUS security group the admin's are assigned to and create the group profile with that name.

I was also just thinking the down side to this is that they won't have any access to the Oracle data because that adapter is not defined in this profile. Not sure if that is an issue for you...

Let me know if you have questions...

This message has been edited. Last edited by: FP Mod Chuck,

sorry for late reply, Chuck, I'm not using LDAP, just regular PTH in security providers, can you elaborate more on security group as you mention?

quote:

If you aren't using LDAP groups you will need to register the WebFOCUS security group the admin's are assigned to and create the group profile with that name.

Nox

With PTH you need to still define the WebFOCUS security group these people are assigned to on the client side. (ie DomainDeveloper) under the Reporting Server access control group for the application adminstrators and then create a group profile based on that name as described above.

ok I'll give it a try.