OBIEE 11G - BISystemUser

Obi Edition


BISystem User is an internal administrator user created during installation in the Weblogic LDAP store for trusted communication between components. The password is created at random.

It owns the Oracle BI Server system processes and is not exposed in any user interface.

BISystemUser is used for service-to-service authentication.

This is not an ordinary user account but rather a set of credentials used to authenticate services within the system to each other.

The credentials of this account (name and password) are stored in the Credential Store under the system.user key

Obiee Bisystemuser Credential Obiee 11g Bisystem Application Role

Key Configuration Steps


Administrator Group

The BISystemUser is an administrator.


With Weblogic Scripting Tool (WLST)

wls:/offline> connect('BISystemUser','myPassword','t3://di-obiee-02:7001')
Connecting to t3://di-obiee-02:7001 with userid BISystemUser ...
Successfully connected to Admin Server 'AdminServer' that belongs to domain 'bifoundation_domain'.

Warning: An insecure protocol was used to connect to the 
server. To ensure on-the-wire security, the SSL port or 
Admin port should be used instead.


If you can't log in, try to unlock the user:

Weblogic Unlock User

System.user credential key

The credentials of this account are stored in the Credential Store under the system.user key.

Obiee Bisystemuser Credential

BI System Role Application role

The user must belongs to the BI System Role Application role.

Obiee 11g Bisystem Application Role

OBIEE 11g: How to Recover the BI System Role if it has Been Accidentally Deleted?

Weblogic Global Admin Role

The final stage of configuring the new system user is to ensure they are part of the Weblogic Global Admin role.

  • Log into Weblogic Admin console
  • Select Security Realms from the left-hand menu, click on the link to your security realm in the main screen (e.g. myrealm), then select Roles and Policies from the tabs along the top
  • In the list of roles, click on the plus sign to expand Global Roles, then Roles, then click on the link marked View Role Conditions for the Admin Role.
  • Ensure the conditions specified will match your user, either directly, or by virtue of a group they belong to (e.g. condition may be User = bisystemuser or Group=Administrators

Obiee System User Global Role

  • If you have made any changes, click the Save button. Changes should be applied immediately

BIP Jms Module

Weblogic Service Jms Module Bip


Restart the BI Server and the BI Presentation service


User: BISystemUser, failed to be authenticated

wls:/offline> connect('BISystemUser','Password','t3://myHost:7001')
Connecting to t3://myHost:7001 with userid BISystemUser ...
Traceback (innermost last):
  File "<console>", line 1, in ?
  File "<iostream>", line 22, in connect
  File "<iostream>", line 646, in raiseWLSTException
WLSTException: Error occured while performing connect : User: BISystemUser, failed to be authenticated.

If you are sure of your password, the user may be locked.

Documentation / Reference

Discover More
Ldap Member Attribute
(Weblogic|OBIEE) - Active Directory (ADSI) Configuration

This article show how to configure Weblogic in order to let OBIEE authenticate against Active Directory. Once the AD domain is recognise as a valid user store to authenticate Oracle BI, users will be...
Obi Edition
OBIEE / Weblogic 11G - (Create|Recreate) a default authentication provider (with administrator, )

How to recreate a default OBIEE authentication provider with the following user: Weblogic Admin (Group: Administrators,BIAdministrators ) OracleSystemUser (Group: OracleSystemGroup ) BISystemUser...
Obiee11g Default Logging Level
OBIEE 10G/11G - Setting a Query Logging Level

The login level is a parameter which control the number of information that you will retrieve in the log file from nothing (level 0 - no_log_found) to a lot of information (level 5). You can enable logging...
Obiee 11g Bisqlprovider Schema
OBIEE 11G - BISQLProvider

A authentication provider called BISQLGroupProvider that provide the groups through database look-up. This group can then be linked to application role. The database just stores the groups to be associated...
Weblogic Global Role Admin
Weblogic - Administrator

A user is an administrator if it belongs to the Global Admin Role. The condition is usually to be a member of the Administrators group (Weblogic specific group). OracleSystemUser, BISystemUser....

Share this page:
Follow us:
Task Runner