In this article, we will look into an interesting concept of Personally Identifiable Information (PII) from the BI Report.
Personally identifiable information (PII) data is secured at the database level using Virtual Private Database (VPD) policies. Only authorized users can report on PII data. This restriction also applies to Oracle Business Intelligence Publisher reports. PII data is protected using data security privileges that are granted by means of duty rules in the usual way.
Tables Containing PII Information
This table lists the PII tables and the privileges that are used to report on data in those tables.
| Table | Data Security Privilege |
|---|---|
| PER_ADDRESSES_F | Report Person Address |
| PER_CONTACT_RELSHIPS_F | Report Person Contact |
| PER_DRIVERS_LICENSES | Report Driver License |
| PER_EMAIL_ADDRESSES | Report Person Email |
| PER_NATIONAL_IDENTIFIERS | Report Person National Identifier |
| PER_PASSPORTS | Report Person Passport |
| PER_PERSON_DLVRY_METHODS | Report Person Communication Method |
| PER_PHONES | Report Person Phone |
| PER_VISAS_PERMITS_F | Report Person Visa |
Note: Work email and phone aren’t protected.
All of these privileges are accessible using the Workforce Confidential Reporting duty role, which the Human Resource Analyst job role inherits.
We can view the list of all Data Security Policies that this role Workforce Confidential Reporting contains.
The VPD Policies are attached to specific tables, and cannot be bypassed by any user. Whenever a query is run on the table, a predicate (where clause) is attached which further restricts access to the data. Unless the user has access to these privileges, he cannot access the data from the backend tables. He might be able to see the data from the front end if he has access to those specific pages, but not from the backend.
If you are unable to see the data from backend tables for any of the PII tables National Id/Address/Passport, try to add the Human Resource Analyst role and that should resolve the issue.
This is how the entire functionality works. Credits to the one who shared this on Cloud Customer Connect Post
Hope this helps. Please share it with your network if you find it useful.
If you like the content, please follow us on LinkedIn, Facebook, and Twitter to get updated with the latest content.
