The BITeamwork installation provides during the installation of the SQL script and assignment for the BIAdministrator application role to be granted all BITeamwork privileges.
This works perfectly in OBIEE 11g and environments where OBIEE 11g has been upgraded/migrated to OBIEE 12c. However, for net new OBIEE 12c installations depending on the security configuration, customers may need to run the following script(s) after the installation has completed.
First, verify using SQL that there is only on Application Role in the TW_APP_ROLES table,
SELECT * FROM TW_APP_ROLES;
Second, if there is only one application role, BIAdministrator, and you have confirmed that your Oracle BI 12c implementation has the BIServiceAdministrator application role instead of the BIAdministrator application role, then execute the following script to sync the new BIServiceAdministrator role so that it is given full privileges to all BITeamwork functions from the beginning:
INSERT INTO TW_APP_ROLES (CUSTOMERID, APPROLENAME, ISDELETED) SELECT 1, 'BIServiceAdministrator', 0 FROM DUAL
WHERE NOT EXISTS (SELECT 1 FROM TW_APP_ROLES WHERE LOWER(APPROLENAME) = 'biserviceadministrator');
INSERT INTO TW_SECURITY_MATRIX (CUSTOMERID, ACCESSID, USERID, APPROLEID)
SELECT CUSTOMERID, ACCESSID, USERID, (SELECT APPROLEID FROM TW_APP_ROLES WHERE LOWER(APPROLENAME) = 'biserviceadministrator') as APPROLEID
FROM TW_SECURITY_MATRIX WHERE APPROLEID = (SELECT APPROLEID FROM TW_APP_ROLES WHERE LOWER(APPROLENAME) = 'biadministrator');