Answer
DBMS_RANDOM is specifically blocked in Quick Report SQL, since Quick Report SQL restricts which PL/SQL packages/functions can be called for security reasons. As a pseudo-random alternative that IS allowed, use REGEXP_SUBSTR(SYS_GUID(), '\d') to extract a pseudo-random single digit from a freshly generated GUID value — not cryptographically random, but simple to implement and sufficient for many practical Quick Report use cases that just need some variability rather than genuine randomness.