Hello,
We have a requirement in which we are to hide sensitive data (on the column level) from specific OBIEE users based on roles assigned in EBS.
Our current setup: EBS (ERP source, holds all users) > Singly Sign On to OBIEE 11g (used for reporting).
We want to mask/redact data at the database level. I know OBIEE stores SQL queries that are run against the application, but does each query also have User information? Do these reside in the logs? If we have user information, we should be able to apply Redaction on the database side, correct?
Wanted to ask the Community if anyone has applied anything similar in their environments. Feel free to share your approaches to masking/redacting data. Any thoughts are appreciated.
Thanks!