You are currently viewing How to access PII Information secured using VPD from BI Report?
How to access PII Information secured using VPD from BI Report?

In this article, we will look into an interesting concept of Personally Identifiable Information (PII) from the BI Report.

Personally identifiable information (PII) data is secured at the database level using Virtual Private Database (VPD) policies. Only authorized users can report on PII data. This restriction also applies to Oracle Business Intelligence Publisher reports. PII data is protected using data security privileges that are granted by means of duty rules in the usual way.

Tables Containing PII Information

This table lists the PII tables and the privileges that are used to report on data in those tables.

TableData Security Privilege
PER_ADDRESSES_FReport Person Address
PER_CONTACT_RELSHIPS_FReport Person Contact
PER_DRIVERS_LICENSESReport Driver License
PER_EMAIL_ADDRESSESReport Person Email
PER_NATIONAL_IDENTIFIERSReport Person National Identifier
PER_PASSPORTSReport Person Passport
PER_PERSON_DLVRY_METHODSReport Person Communication Method
PER_PHONESReport Person Phone
PER_VISAS_PERMITS_FReport Person Visa

Note: Work email and phone aren’t protected.

All of these privileges are accessible using the Workforce Confidential Reporting duty role, which the Human Resource Analyst job role inherits.

image 5 - How to access PII Information secured using VPD from BI Report?

We can view the list of all Data Security Policies that this role Workforce Confidential Reporting contains.

image 6 1024x563 - How to access PII Information secured using VPD from BI Report?
image 7 1024x462 - How to access PII Information secured using VPD from BI Report?

The VPD Policies are attached to specific tables, and cannot be bypassed by any user. Whenever a query is run on the table, a predicate (where clause) is attached which further restricts access to the data. Unless the user has access to these privileges, he cannot access the data from the backend tables. He might be able to see the data from the front end if he has access to those specific pages, but not from the backend.

If you are unable to see the data from backend tables for any of the PII tables National Id/Address/Passport, try to add the Human Resource Analyst role and that should resolve the issue.

This is how the entire functionality works. Credits to the one who shared this on Cloud Customer Connect Post

image 8 1024x565 - How to access PII Information secured using VPD from BI Report?

Hope this helps. Please share it with your network if you find it useful.

If you like the content, please follow us on LinkedInFacebook, and Twitter to get updated with the latest content.