BOE310 - SAP BusinessObjects Business Intelligence Platform - Administration and Security

SAVE OFFLINE

BOE310 SAP BusinessObjects Business Intelligence Platform: Administration and Security SAP BusinessObjects - Business Intelligence

Date Training Center Instructors Education Website

Participant Handbook Course Version: 96 Course Duration: 2 Day(s) Material Number: 50103388

An SAP course - use it to learn, reference it for work

Copyright Copyright © 2011 SAP AG. All rights reserved. No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP AG. The information contained herein may be changed without prior notice. Some software products marketed by SAP AG and its distributors contain proprietary software components of other software vendors.

Trademarks •

Microsoft®, WINDOWS®, NT®, EXCEL®, Word®, PowerPoint® and SQL Server® are registered trademarks of Microsoft Corporation.

•

IBM®, DB2®, OS/2®, DB2/6000®, Parallel Sysplex®, MVS/ESA®, RS/6000®, AIX®, S/390®, AS/400®, OS/390®, and OS/400® are registered trademarks of IBM Corporation.

•

ORACLE® is a registered trademark of ORACLE Corporation.

•

INFORMIX®-OnLine for SAP and INFORMIX® Dynamic ServerTM are registered trademarks of Informix Software Incorporated.

•

UNIX®, X/Open®, OSF/1®, and Motif® are registered trademarks of the Open Group.

•

Citrix®, the Citrix logo, ICA®, Program Neighborhood®, MetaFrame®, WinFrame®, VideoFrame®, MultiWin® and other Citrix product names referenced herein are trademarks of Citrix Systems, Inc.

•

HTML, DHTML, XML, XHTML are trademarks or registered trademarks of W3C®, World Wide Web Consortium, Massachusetts Institute of Technology.

•

JAVA® is a registered trademark of Sun Microsystems, Inc.

•

JAVASCRIPT® is a registered trademark of Sun Microsystems, Inc., used under license for technology invented and implemented by Netscape.

•

SAP, SAP Logo, R/2, RIVA, R/3, SAP ArchiveLink, SAP Business Workflow, WebFlow, SAP EarlyWatch, BAPI, SAPPHIRE, Management Cockpit, mySAP.com Logo and mySAP.com are trademarks or registered trademarks of SAP AG in Germany and in several other countries all over the world. All other products mentioned are trademarks or registered trademarks of their respective companies.

Disclaimer THESE MATERIALS ARE PROVIDED BY SAP ON AN "AS IS" BASIS, AND SAP EXPRESSLY DISCLAIMS ANY AND ALL WARRANTIES, EXPRESS OR APPLIED, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THESE MATERIALS AND THE SERVICE, INFORMATION, TEXT, GRAPHICS, LINKS, OR ANY OTHER MATERIALS AND PRODUCTS CONTAINED HEREIN. IN NO EVENT SHALL SAP BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES OF ANY KIND WHATSOEVER, INCLUDING WITHOUT LIMITATION LOST REVENUES OR LOST PROFITS, WHICH MAY RESULT FROM THE USE OF THESE MATERIALS OR INCLUDED SOFTWARE COMPONENTS.

g201191401653

About This Handbook This handbook is intended to complement the instructor-led presentation of this course, and serve as a source of reference. It is not suitable for self-study.

Typographic Conventions American English is the standard used in this handbook. The following typographic conventions are also used. Type Style

Description

Example text

Words or characters that appear on the screen. These include field names, screen titles, pushbuttons as well as menu names, paths, and options. Also used for cross-references to other documentation both internal and external.

2011

Example text

Emphasized words or phrases in body text, titles of graphics, and tables

EXAMPLE TEXT

Names of elements in the system. These include report names, program names, transaction codes, table names, and individual key words of a programming language, when surrounded by body text, for example SELECT and INCLUDE.

Example text

Screen output. This includes file and directory names and their paths, messages, names of variables and parameters, and passages of the source text of a program.

Example text

Exact user entry. These are words and characters that you enter in the system exactly as they appear in the documentation.



Variable user entry. Pointed brackets indicate that you replace these words and characters with appropriate entries.

© 2011 SAP AG. All rights reserved.

iii

About This Handbook

BOE310

Icons in Body Text The following icons are used in this handbook. Icon

Meaning For more information, tips, or background

Note or further explanation of previous point Exception or caution Procedures

Indicates that the item is displayed in the instructor's presentation.

iv

© 2011 SAP AG. All rights reserved.

2011

Contents Course Overview ............................................................................. vii Course Goals.................................................................................vii Course Objectives ...........................................................................vii

Unit 1: What is SAP BusinessObjects Business Intelligence Platform ............1 Describing SAP BusinessObjects Business Intelligence Platform ..................... 3 Working in BI launch pad .................................................................. 26 Working in the Central Management Console .......................................... 47

Unit 2: Managing Content and Objects in SAP BusinessObjects Business Intelligence Platform ......................................................................... 59 Adding Objects to the Repository......................................................... 60 Managing objects in SAP BusinessObjects Business Intelligence Platform ........ 67

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform ......................................................................... 79 Managing Users and Groups.............................................................. 81 Administering Rights in SAP BusinessObjects Business Intelligence Platform ... 106

Unit 4: Managing Applications Security ...............................................159 Securing your applications in SAP BusinessObjects Business Intelligence Platform ................................................................................. 160

Unit 5: Distributing Content using Scheduling and Alerting ......................187 Scheduling objects ........................................................................ 189 Managing instances ....................................................................... 216 Managing Calendars ...................................................................... 223 Managing Events .......................................................................... 233 Working with Alerting...................................................................... 243

Unit 6: Publishing and Publications ....................................................265 Publishing personalized reports ......................................................... 266

2011

© 2011 SAP AG. All rights reserved.

v

Contents

BOE310

Appendix 1: Determining effective rights Appendix 2: Breaking inheritance

vi

........................................... 311

....................................................313

© 2011 SAP AG. All rights reserved.

2011

Course Overview This two-day instructor-led course explains how to perform the key administrative tasks in SAP BusinessObjects Business Intelligence platform. These tasks involve supporting users and groups so they can manage and secure data, content, and applications in SAP BusinessObjects Business Intelligence platform. The business benefit of this course is that it provides a foundation for System Architects/Administrators to effectively manage both users and content on SAP BusinessObjects Business Intelligence platform

Target Audience This course is intended for the following audiences: •

System architects/administrators who are new to SAP BusinessObjects Business Intelligence platform and will be responsible for maintaining SAP BusinessObjects Business Intelligence platform users, groups, and objects in their organization.

Course Prerequisites Required Knowledge • • •

Windows conventions Familiarity with Windows Server 2000/2003 administration and security concepts (global/local groups, and directory structure) Basic computer skills

Course Goals This course will prepare you to: •

Explains how to perform key administrative tasks in SAP BusinessObjects Business Intelligence platform to manage users, groups, objects, and distribute contents to users.

Course Objectives After completing this course, you will be able to:

2011

© 2011 SAP AG. All rights reserved.

vii

Course Overview

• • • • • •

viii

BOE310

Explain what is SAP BusinessObjects Business Intelligence platform Manage content and objects in SAP BusinessObjects Business Intelligence Platform Organize objects Secure users and groups Manage and secure applications Distribute content to users

© 2011 SAP AG. All rights reserved.

2011

Unit 1 What is SAP BusinessObjects Business Intelligence Platform Unit Overview This unit describes what is SAP BusinessObjects Business Intelligence platform.

Unit Objectives After completing this unit, you will be able to: • • • • • • • • • • • • • • • •

2011

Define Business Intelligence and how SAP BusinessObjects provides it. Describe how SAP BusinessObjects Business Intelligence platform fits into the Business Intelligence solutions. Describe the responsibilities of a system administrator working with SAP BusinessObjects Business Intelligence platform. Describe the architecture in SAP BusinessObjects Business Intelligence platform Describe the functions of BI launch pad Access BI launch pad Differentiate content types Differentiate the various ways to access content View and schedule objects Personalize BI launch pad Configure BI launch pad options Describe the purpose of the Central Management Console Navigate in the Central Management Console View content and properties Work with folders Set Central Management Console preferences

© 2011 SAP AG. All rights reserved.

1

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Unit Contents Lesson: Describing SAP BusinessObjects Business Intelligence Platform .... 3 Lesson: Working in BI launch pad ................................................. 26 Procedure: Set general preferences .......................................... 35 Exercise 1: Personalize your BI launch pad ................................. 39 Lesson: Working in the Central Management Console ......................... 47 Procedure: Log into the Central Management Console .................... 48

2

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Describing SAP BusinessObjects Business Intelligence Platform

Lesson: Describing SAP BusinessObjects Business Intelligence Platform Lesson Overview This lesson describes what is SAP BusinessObjects Business Intelligence platform.

Lesson Objectives After completing this lesson, you will be able to: • • • •

Define Business Intelligence and how SAP BusinessObjects provides it. Describe how SAP BusinessObjects Business Intelligence platform fits into the Business Intelligence solutions. Describe the responsibilities of a system administrator working with SAP BusinessObjects Business Intelligence platform. Describe the architecture in SAP BusinessObjects Business Intelligence platform

Business Example SAP BusinessObjects Business Intelligence (BI) platform supports the entire range of end-user reporting, query and analysis, and performance management uses. Understanding this infrastructure will help you successfully administer SAP BusinessObjects Business Intelligence (BI) platform.

What is Business Intelligence? By understanding Business Intelligence (BI), you will better comprehend how SAP BusinessObjects Business Intelligence (BI) solutions address the BI product spectrum.

Gartner defines Business Intelligence Gartner Inc., a research and advisory firm that helps clients leverage technology, coined the term “Business Intelligence” in the late 1980s. Business Intelligence, as defined by Gartner, is an iterative user-centered process that includes accessing and exploring information, analyzing this information, and developing insights and understanding that lead to improved and informed decision making. BI usage crosses the spectrum of users, both internally and externally throughout any enterprise, and includes rank-and-file workers, executives, analysts, and knowledge workers.

2011

© 2011 SAP AG. All rights reserved.

3

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Examples of internal and external BI applications include: • • • •

Generating a class list for a training session Creating an employee performance review Scheduling in a health care setting Manufacturing computer parts

Benefits of Business Intelligence Business Intelligence can help organizations to: • • • • • • • • •

Identify and track key performance metrics against their direct competitors and the overall market Improve customer service and target high yield accounts Streamline operations and improve supplier and warehouse operations Identify successful marketing campaigns Improve response time to market trends and customer requests Decrease query and reporting time Reduce cost and anxiety over compliance Deliver true cost of goods and services Reduce strain on IT departments

Business Intelligence provides insights that enable business managers to make tactical decisions, as well as to establish, modify, or tune business strategies and processes in order to gain competitive advantage and improve business operations and profitability.

Describing SAP BusinessObjects Business Intelligence platform SAP BusinessObjects Business Intelligence platform supports a range of performance management (Dashboard and Analytics), reporting, querying, and analysis applications. It also provides an industry-standard, proven architecture and platform-support for semantic layers, data integration, and security. SAP BusinessObjects Business Intelligence platform provides for web-based administration and configuration of the entire system.

4

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Describing SAP BusinessObjects Business Intelligence Platform

Figure 1: Introducing SAP BusinessObjects Business Intelligence platform

Figure 2: BI Suite

2011

© 2011 SAP AG. All rights reserved.

5

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Figure 3: BI Needs

Architecture in SAP BusinessObjects Business Intelligence Platform SAP BusinessObjects Business Intelligence platform infrastructure The infrastructure in SAP BusinessObjects Business Intelligence platform provides the basic messaging mechanism needed for SAP BusinessObjects Business Intelligence platform components to communicate with one another. The Infrastructure is a series of services that are designed to communicate via CORBA (Common Object Request Broker Architecture), which runs over TCP/IP. Note: The Infrastructure establishes connections between clients and servers.

SAP BusinessObjects Business Intelligence platform service groups and servers SAP BusinessObjects Business Intelligence platform can be installed on a single machine, spread across different machines in an intranet, or separated over a wide area network (WAN).

6

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Describing SAP BusinessObjects Business Intelligence Platform

Architecture The architecture of SAP BusinessObjects Business Intelligence platform is designed to meet the needs of virtually any BI deployment, and is flexible enough to grow from several users with a single tool, to tens of thousands of users with multiple tools and interfaces. Developers can integrate SAP BusinessObjects BI platform into your organization's other technology systems by using web services, Java, or .NET application programming interfaces (APIs).

Figure 4: Architecture

Tiers SAP BusinessObject Business Intelligence platform can be thought of as a series of conceptual tiers:

2011

© 2011 SAP AG. All rights reserved.

7

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Client

Figure 5: Client

Group BI Client

Tool Analysis, edition for MS Office (Excel and PPT plugin) SAP BusinessObjects Analysis, edition for Microsoft Office, is a plugin that integrates into Microsoft Excel and Microsoft PowerPoint to be used as an online analytical processing (OLAP) tool. It provides access to a range of OLAP data sources, and also allows users to combine information from different systems within a single workspace. Analysis, edition for OLAP (web client) SAP BusinessObjects Analysis, edition for OLAP (formerly Voyager) is an online analytical processing (OLAP) tool for working with multi-dimensional data. It provides access to a range of OLAP data sources, and can also combine information from different OLAP data sources within a single workspace. BI launch pad (web client)

8

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Describing SAP BusinessObjects Business Intelligence Platform

Group

Tool BI launch pad (formerly InfoView) is the main web interface for business users to view, schedule, and keep track of published business intelligence (BI) documents. BI launch pad can access, interact with, and export, any type of business intelligence including reports, analytics, dashboards, scorecards, and strategy maps. It simplifies information delivery and delivers secure access to BI content and tools, such as BI workspaces, SAP BusinessObjects Web Intelligence, SAP BusinessObjects Explorer, and SAP BusinessObjects Analysis, edition for OLAP. BI workspaces (web client) BI workspaces (formerly Dashboard Builder) helps you track your business activities and performance using modules (templates for data) and Business Intelligence (BI) workspaces (for viewing data in one or more modules). Modules and BI workspaces provide information needed to adjust business rules as conditions change. It helps you track and analyze key business data. It also supports group decision-making and analysis via integrated collaboration and workflow capabilities. BI workspaces enables you to organize content in pages, create mash ups of Business Intelligence (BI) content, and present the information in a way that is tailored to the role of the user, either for personal use or for sharing with others Business View Manager Business View Manager allows users to build semantic layer objects that simplify underlying database complexity. Business View Manager can create data connections, dynamic data connections, data foundations, business elements, business views, and relational views. It also allows detailed column and row-level security to be set for the objects in a report. Designers can build connections to multiple data sources, join tables, alias field names, create calculated fields, and then use the simplified structure as a Business View. Report designers and users can then use the business view as the basis for their Crystal reports, rather than building their own queries from the data directly. Crystal Reports 2011 SAP Crystal Reports 2011 is a Windows-based report design tool used to create powerful reports that can be published in the SAP BusinessObjects Business Intelligence platform.

2011

© 2011 SAP AG. All rights reserved.

9

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

Group

BOE310

Tool Crystal Reports for Enterprise SAP Crystal Reports for Enterprise is a Java-based report design tool used to create and integrate powerful reports in the SAP BusinessObjects Business Intelligence platform. Crystal Reports Viewer 2011 SAP Crystal Reports Viewer 2011 is a Java-based tool to view Crystal reports. Dashboards SAP BusinessObjects Dashboards (formerly Xcelsius) is a tool for data visualization and the creation of dynamic, interactive dashboards. Data can be updated dynamically from the SAP BusinessObjects Business Intelligence platform, and exported to a variety of different formats that can be viewed by data consumers in standard formats, such as PowerPoint, PDF, or Flash. Explorer SAP BusinessObjects Explorer is an information-discovery tool that empowers everyone in an organization with fast, easy access to information, so they can explore data, spark new ideas, and find new insights. Information Design Tool The Information Design Tool is an SAP BusinessObjects metadata design environment that enables a designer to extract, define, and manipulate metadata from relational and OLAP sources to create and deploy UNX universes. Live Office SAP BusinessObjects Live Office integrates with the Microsoft Office environment, allowing dynamically updated data to be embedded within Microsoft PowerPoint, Excel, and Word documents. In addition, you can share your documents with others over the web for collaborative decision-making. Web Service Query Tool

10

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Describing SAP BusinessObjects Business Intelligence Platform

Group

Tool The Web Service Query Tool (formerly Query as a Web Service) allows Business Intelligence (BI) queries to be used in custom web applications. Business users create their own queries from a universe connection and publish them as web services so they can be incorporated into client applications. Universe Design Tool The Universe Design Tool (formerly Universe Designer) allows data designers to combine data from multiple sources in a semantic layer (UNV universe) that hides database complexity from end users. It abstracts the complexity of data by using business rather than technical language to access, manipulate, and organize data. Universe design tool provides a graphical interface to select and view tables in a database. The database tables are represented as table symbols in a schema diagram. Designers can use this interface to manipulate tables, create joins between tables, create alias tables, create contexts, and solve loops in a schema. You can also create universes from metadata sources. Universe design tool is used for the universe generation at the end of the creation process. Web Intelligence Desktop SAP BusinessObjects Web Intelligence Desktop is an ad-hoc analysis and reporting tool for business users with or without access to the SAP BusinessObjects Business Intelligence platform. It allows business users to access and combine data from relational, online analytical processing (OLAP), spreadsheet, or text file sources, using familiar business terms in a drag-and-drop interface.Workflows allow very broad or very narrow questions to be analyzed, and for further questions to be asked at any point in the analysis workflow. Web Intelligence Desktop users can continue working with Web Intelligence document files (.wid) even when unable to connect to a Central Management Server (CMS). Web Intelligence (web client) SAP BusinessObjects Web Intelligence is an ad-hoc analysis and reporting tool for business users with access to the SAP BusinessObjects Business Intelligence platform. It allows business users to access and combine data from relational, online analytical processing (OLAP), spreadsheet, or text file

2011

© 2011 SAP AG. All rights reserved.

11

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

Group

BOE310

Tool sources, using familiar business terms in a drag-and-drop interface.Workflows allow very broad or very narrow questions to be analyzed, and for further questions to be asked at any point in the analysis workflow. Widgets SAP Widgets are mini-applications that allow easy and fast access to frequently used functions and provide visual information from your desktop. SAP Widgets allow your organization to provide access to existing Business Intelligence (BI) content on the SAP BusinessObjects Business Intelligence platform. Or you can add Web Dynpro applications, that are registered as Extensible Business Client Markup Language (XBCML) widgets on the SAP NetWeaver Application Servers, as desktop widgets

Admin Client

Central Configuration Manager The Central Configuration Manager (CCM) is a server troubleshooting and node management tool provided in two forms. In a Microsoft Windows environment, the CCM allows you to manage local and remote servers through its graphical user interface (GUI) or from a command line. In a Unix environment, the CCM shell script (ccm.sh) allows you to manage servers from the command-line. The CCM allows you to create and configure Server Intelligence Agent (SIA) nodes and start or stop your web application server. On Windows, it also allows you to configure network parameters, such as Secure Socket Layer (SSL) encryption. These parameters apply to all servers within a node. Note: Most server management tasks are now handled through the Central Management Console (CMC), not through the CCM. The CCM is now used for troubleshooting and node configuration. Central Management Console (web client). The Central Management Console (CMC) is the main web interface to perform administrative tasks in the SAP BusinessObjects Business Intelligence platform, including user, content, and server management. It also allows you to publish and organize content, and configure security settings. Data Federation Administration Tool

12

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Describing SAP BusinessObjects Business Intelligence Platform

Group

Tool The Data Federation Administration Tool (formerly Data Federator) is a rich client application that offers easy-to-use features to manage your data federation service. Tightly integrated in the SAP BusinessObjects Business Intelligence platform, the data federation service enables multi-source universes by distributing queries across disparate data sources, and lets you federate data through a single data foundation. The Data Federation Administration tool lets you optimize data federation queries and fine-tune the data federation query engine for the best possible performance. Lifecycle Management Console (web client) The Lifecycle Management Console provides a centralized view to monitor the progress of the entire lifecycle process. It is used to move content from one SAP BusinessObjects Business Intelligence platform to another of the same version. Report Conversion Tool The Report Conversion Tool converts Desktop Intelligence reports to Web Intelligence format, and publishes them to a Central Management Server (CMS). The Report Conversion Tool also lets you audit your converted reports. This helps identify reports that cannot be fully converted, and explains why Repository Diagnostic Tool The Repository Diagnostic Tool scans, diagnoses, and repairs inconsistencies that may occur between the Central Management Server (CMS) system database and the File Repository Servers (FRS) filestore. It can also report the repair status and completed actions. Translation Management Tool The Translation Management Tool defines multilingual universes and manages translation of universes and their Web Intelligence documents and prompts. Upgrade Management Tool The Upgrade management tool guides administrators through the process of importing users, groups, and folders from previous versions of the SAP BusinessObjects Business Intelligence

2011

© 2011 SAP AG. All rights reserved.

13

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

Group

BOE310

Tool platform (formerly known as SAP BusinessObjects Enterprise). It also allows you to import and upgrade objects, events, server groups, repository objects, and calendars. WDeploy WDeploy is a tool to assist in deploying SAP BusinesObjects Business Intelligence platform web applications, such as BI launch pad and the Central Mangement Console, to target application servers. Note: Key administrative tools for administrators are Central Management Console (CMC), Central Configuration Manager (CCM), Repository Diagnostic Tool, and Upgrade management tool.

Web

Figure 6: Web

14

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Describing SAP BusinessObjects Business Intelligence Platform

Web Server The web server receives HTTP requests sent from the web client. The web server holds and manages static content such as .html and .js files that may be part of a SAP BusinessObjects Business Intelligence suite web application. Web Application Server A web application server acts as the translation layer between a web browser or rich application, and the SAP BusinessObjects Business Intelligence platform. The web application server hosts web applications, web services and Software Development Kits (SDK). Various web application servers running on Windows, Unix, and Linux are supported. Note: If you do not have a web application server in place for use with the SAP BusinessObjects Business Intelligence platform, the installation program can install and configure a Tomcat 6 web application server for you. Web Application Container Server The Web Application Container Server (WACS) is an SAP BusinessObjects Business Intelligence platform server that allows SAP BusinessObjects Business Intelligence platform web services and web applications, such as the Central Management Console (CMC) and BI launch pad, to run without the need for a previously installed Java web application server. Web Applications Web applications run in the web application server to process requests from the web client. SAP BusinessObjects Business Intelligence suite web applications include: • • • • • • •

2011

Central Management Console Lifecycle Management Console BI launch pad BI workspaces SAP BusinessObjects Web Intelligence SAP BusinessObjects Analysis, edition for OLAP SAP BusinessObjects Explorer

© 2011 SAP AG. All rights reserved.

15

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Web Services Web services run in the web application server to process requests from client applications. Web services can be called remotely using the Simple Object Access Protocol (SOAP) for exchanging information that is not dependent on a specific platform, object model, or programming language. SAP BusinessObjects web services include logic to understand and direct requests to the appropriate SAP BusinessObjects Business Intelligence platform server. SAP BusinessObjects web services can be accessed by rich clients such as Live Office and Crystal Reports, and also by custom-built web service consumer applications. SAP BusinessObjects Business Intelligence platform web services include: • • • • • • • • • • • • •

16

Session BIPlatform ReportEngine QueryService SaveService BICatalog Publish LiveOffice managequeryasaservice Federator XcelsiusWebServices BicsRemote Gopher

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Describing SAP BusinessObjects Business Intelligence Platform

Management

Figure 7: Management

Central Management Server The Central Management Server (CMS) maintains a database of information about your SAP BusinessObjects Business Intelligence platform (in the CMS system database) and audited user actions (in the Auditing Data Store). All platform services are managed by the CMS. The CMS also controls access to the system files where documents are stored, and information on users, user groups, security levels (including authentication and authorization), and content. Event Server The Event Server monitors the system for events, which can act as a trigger for running a report. When you set up a event trigger, the Event Server monitors the condition and notifies the CMS that an event has occurred. The CMS can then start any jobs that are set to run upon the event. Explorer Master Server Explorer Master Server manages all of the Explorer processing servers, including: Explorer Exploration Server, Explorer Indexing Server, and Explorer Search Server

2011

© 2011 SAP AG. All rights reserved.

17

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Server Intelligence Agent A Server Intelligence Agent (SIA) manages and monitors all of the servers on a node, ensuring they operate properly. Note: A node is a group of SAP BusinessObjects Business Intelligence platform servers that run on the same host. All of the servers on a node run under the same user account. One machine can contain many nodes, so you can run processes under different user accounts.

Storage

Figure 8: Storage

Crystal Reports Cache Server The Crystal Reports Cache Server intercepts report viewing requests sent from clients to the Crystal Reports Processing Server. If the Cache Server cannot fulfill the request with a cached report page, it passes the request on to the Crystal Reports Processing Server, which runs the report and returns the results. The Cache Server then caches the report page for potential future use

18

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Describing SAP BusinessObjects Business Intelligence Platform

Dashboard Design Cache Server The Dashboard Design Cache Server determines if a previously served dashboard viewing request would satisfy the current dashboard viewing request. If the request cannot be fulfilled by the Dashboard Design Cache Server, it forwards the request to the Dashboard Design Processing Server. The Dashboard Design Cache Server will try to share previous data results as much as possible Input File Repository Server The Input File Repository Server stores all of the documents and program objects that have been published to the SAP BusinessObjects Business Intelligence platform. It can store a large variety of file types Output File Repository Server The Output File Repository Server stores all of the instances generated by scheduled jobs for all object types including Crystal Reports, Web Intelligence, and programs. It also manages instances generated by the Web Intelligence Processing Server. It can store a large variety of file types.

Processing

Figure 9: Processing

2011

© 2011 SAP AG. All rights reserved.

19

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Adaptive Job Server The Adaptive Job Server is a generic server that processes scheduled jobs for a variety of object types. Services that can be hosted on this server include: Authentication Update Scheduling Service, Crystal Reports 2011 Scheduling Service, Crystal Reports Scheduling Service, Destination Delivery Scheduling Service, Lifecycle Management Scheduling Service, Platform Search Scheduling Service, Probe Scheduling Service, Program Scheduling Service, Publication Scheduling Service, Replication Service, Security Query Scheduling Service, Visual Difference Scheduling Service, Web Intelligence Scheduling Service, Adaptive Processing Server The Adaptive Processing Server is a generic server that hosts services responsible for processing requests from a variety of sources. Services that can be hosted on this server include: Adaptive Connectivity Service, BEx Web Application Service, Client Auditing Proxy Service, Custom Data Access Service, Data Federation Service, Document Recovery Service, DSL Bridge Service, Excel Data Access Service, Lifecycle Management ClearCase Service, Lifecycle Management Console Service, Monitoring Service, Multi Dimensional Analysis Service, Platform Search Service, Publishing Post Processing Service, Publishing Service, Rebean Service, Security Token Service, Translation Service, Visual Difference Service, Visualization Service, Web Intelligence Monitoring Service, Connection Server The Connection Server provides database access to source data. It supports relational databases, as well as OLAP and other formats. The Connection Server is responsible for handling connection and interaction with the various data sources and providing a common feature set to clients. Connection Server 32 The Connection Server 32 is responsible for 32-bit database connectivity to access data. Crystal Reports 2011 Processing Server The Crystal Reports 2011 Processing Server responds to Crystal Reports page requests by processing reports and generating encapsulated page format (EPF) files. The key benefit of EPF is that it supports page-on-demand access, so only the requested page is returned, not the entire report. This improves system performance and reduces unnecessary network traffic for large reports. The Crystal Reports 2011 Processing Server retrieves data for the report from the latest instance or directly from the data source. After it generates the report, it converts the requested data to one or more EPF files. These EPF files are then sent to the Crystal Reports Cache Server

20

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Describing SAP BusinessObjects Business Intelligence Platform

Crystal Reports 2011 Report Application Server The Crystal Reports 2011 Report Application Server (RAS) provides ad-hoc reporting capabilities that allow users to create and modify Crystal reports via the SAP Crystal Reports Server Embedded Software Development Kit (SDK). Crystal Reports Processing Server The Crystal Reports Processing Server responds to Crystal Reports for Enterprise page requests by processing reports and generating encapsulated page format (EPF) files. The key benefit of EPF is that it supports page-on-demand access, so only the requested page is returned, not the entire report. This improves system performance and reduces unnecessary network traffic for large reports. The Crystal Reports Processing Server retrieves data for the report from the latest instance or directly from the data source. After it generates the report, it converts the requested data to one or more EPF files. These EPF files are then sent to the Crystal Reports Cache Server. Dashboard Analytics Server The Dashboard Analytics Server is used by BI workspaces to create and manage corporate and personal BI workspace module content. Dashboard Design Processing Server The Dashboard Design Processing Server responds to Dashboards requests by processing dashboards and generating the results. Dashboard Server The Dashboard Server is used by BI workspaces to create and manage corporate and personal dashboards. Explorer Exploration Server Explorer Exploration Server provides and manages the Information Space exploration and analysis capabilities including search on data, filtering and aggregation. Explorer Indexing Server Explorer Indexing Server provides and manages the indexing of Information Space data and metadata. Explorer Search Server Explorer Search Server processes search queries and returns search results.

2011

© 2011 SAP AG. All rights reserved.

21

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Web Intelligence Processing Server The Web Intelligence Processing Server is responsible for generating Web Intelligence documents. The Web Intelligence Processing Server obtains document creation requests from the Web Application Server and then communicates with the Input File Repository Server in order to obtain a copy of the Web Intelligence document (WID) file and the universe definition. When viewing an existing instance of a WID, the Web Intelligence Processing Server communicates with the Output File Repository Server to obtain an existing historical instance of a WID.

Data

Figure 10: Data

CMS system database The CMS system database is used to store SAP BusinessObjects Business Intelligence platform information, such as user, server, folder, document, configuration, authorization, and authentication details. It is maintained by the Central Management Server (CMS), and is sometimes referred to as the system repository.

22

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Describing SAP BusinessObjects Business Intelligence Platform

Auditing Data Store The Auditing Data Store (ADS) is used to store information on trackable events that occur in SAP BusinessObjects BI platform. This information can be used to monitor the usage of system components, user activity, or other aspects of day-to-day operation. Lifecycle Management database The Lifecycle Management database tracks configuration and version information related to an SAP BusinessObjects Business Intelligence platform installation, as well as updates. Monitoring database The Monitoring database is an embedded Java Derby database to store system configuration and component information for SAP supportability in the SAP BusinessObjects Business Intelligence platform. Universes (UNV) UNV Universes are identified by the .unv file extension. They are the legacy type of universe based on the semantic layer in previous versions of the SAP BusinessObjects Business Intelligence platform (formerly SAP BusinessObjects Enterprise). They are built using the legacy Universe Design Tool. A universe is an organized collection of metadata objects that enables business users to analyze and report on corporate data in non-technical language. These objects include dimensions, measures, hierarchies, attributes, pre-defined calculations, functions, and queries. The metadata object layer is built on a relational database schema or an OLAP cube, so the objects map directly to the database structures. A universe includes connections to the data sources so that users of query and analysis tools can connect to a universe and run queries and create reports using the objects in a universe without needing to know about the underlying data structures in the database. Universes (UNX) UNX Universes are identified by the .unx file extension. They are the new type of universe based on the new semantic layer in the SAP BusinessObjects Business Intelligence 4.0 platform. They are built using the new Information Design Tool. A universe is an organized collection of metadata objects that enables business users to analyze and report on corporate data in non-technical language. These objects include dimensions, measures, hierarchies, attributes, pre-defined calculations, functions, and queries. The metadata object layer is built on a relational database schema or an OLAP cube, so the objects map directly to the database structures. A universe includes connections to the data sources so that users of query and analysis tools can connect to a universe and run queries and create reports using the objects in a universe without needing to know about the underlying data structures in the database.

2011

© 2011 SAP AG. All rights reserved.

23

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Business Views Business Views simplify report creation and interaction by abstracting the complexity of data for report developers. Business Views help separate the data connections, data access, business elements, and access control. Business Views can only be used by Crystal Reports and are designed to simplify the data access and view-time security required for Crystal report creation. Business Views support the combination of multiple data sources in a single view. Flat files Flat files include .txt, .csv, and .xls files Relational databases Relational databases store data in two-dimensional tables. OLAP data sources OLAP data sources store data in multi-dimensional cubes. SAP Business Warehouse SAP NetWeaver Business Warehouse (BW) is the OLAP data source from SAP. SAP Business Explorer queries SAP Business Explorer (BEx) queries are used to analyze data in SAP NetWeaver Business Warehouse. BEx queries are built in the BEx query designer.

24

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Describing SAP BusinessObjects Business Intelligence Platform

Lesson Summary You should now be able to: • Define Business Intelligence and how SAP BusinessObjects provides it. • Describe how SAP BusinessObjects Business Intelligence platform fits into the Business Intelligence solutions. • Describe the responsibilities of a system administrator working with SAP BusinessObjects Business Intelligence platform. • Describe the architecture in SAP BusinessObjects Business Intelligence platform

2011

© 2011 SAP AG. All rights reserved.

25

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Lesson: Working in BI launch pad Lesson Overview This lesson describes how to work in BI launch pad.

Lesson Objectives After completing this lesson, you will be able to: • • • • • • •

Describe the functions of BI launch pad Access BI launch pad Differentiate content types Differentiate the various ways to access content View and schedule objects Personalize BI launch pad Configure BI launch pad options

Business Example BI launch pad runs within your web browser and is your main interface for working with objects in SAP BusinessObjects Business Intelligence platform. BI launch pad allows you to view different types of objects such as Crystal reports and Web Intelligence documents, organize them, and work with them to suit your needs.

Navigating in BI launch pad. Header panel The Header panel displays the logo and the user name of the account that you used to log on to BI launch pad. It also provides the following options:

26

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Working in BI launch pad

Option

Description

Applications

Lets you access various applications that plug into BI launch pad such as BI workspace. Depending on your rights and license, the applications that you have access to may vary.

Preferences

Allows you to set how your information is displayed.

Help

Lets you access the online help for BI launch pad, or the "About" page which contains information about the product.

Log Off

Logs the user off.

Home tab The default Home tab contains modules that let you better manage the documents and BI launch pad features you work with most.

Figure 11: User interface - Home tab

2011

© 2011 SAP AG. All rights reserved.

27

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Analytic

Description

My Recently Viewed Documents

Shows the last ten documents that you have viewed recently. The list is sorted by view date with the most recently viewed document at the top.

Unread Messages in My Inbox

Shows the last ten unread messages in your BI Inbox.

My Recently Run Documents

Shows the last ten documents in the repository that you scheduled or ran recently along with the status of each document instance. You can view successful instances or details of failed instances by clicking the instance link.

Unread Alerts

Shows the last ten unread alert notifications. To view all alert notifications, click the See More link.

My Applications

Provides quick access to applications from within BI launch pad.

Note: Administrators can also specify custom Home tabs for different users and groups using different objects. For example, a custom Home tab can be a customized dashboard, a Crystal report that the user views frequently, or a customer website. If you have the appropriate rights, you can also override the custom Home tab that the administrator has set by editing your Home tab setting in Preferences.

Documents tab The Documents tab lets you view and manage repository objects.

28

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Working in BI launch pad

Figure 12: User Interface - Document tab

Toolbar The toolbar contains menus and controls that let you view and manage objects. Toolbar Menu

Description

View

Lets you view objects, the latest instances of objects, and object properties.

New

Lets you upload documents and create the following types of new objects • • • •

Organize

2011

publications hyperlinks folders categories

Lets you manage object shortcuts and cut, copy, paste, and delete objects.

© 2011 SAP AG. All rights reserved.

29

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Menu

Description

Send

Lets you send objects to different destinations.

More Actions

Lets you perform the following tasks: • • • • •

Details

Schedule objects Add objects to categories View categories that objects belong to Create OpenDocument links to objects View the History of an object

Shows and hides the "Details" panel, which also includes Discussions.

Navigation panel The Navigation panel provides a top-level view of the folders and categories in the system and lets you browse for specific objects. Drawers Drawers are expandable panes in the Navigation panel that enable you to browse objects in different ways. Drawers Drawer

Description

My Documents

Displays the user's Favorites folder, BI Inbox, alert notifications, and personal categories.

Folders

Displays a folder view of the repository.

Categories

Displays a category view of the repository.

Search

Displays search options and results. Note: Depending on your rights, you may be unable to view certain objects.

List panel

30

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Working in BI launch pad

The List panel displays a list view of the objects in a folder or category. Details panel The Details panel displays additional information about an object. To view the details for an object, select it and click the Details button in the toolbar. The "Details" panel opens on the right side of the Documents tab and displays the following information: • • • • •

Owner Description Object type Number of instances Last run date (for objects that can be scheduled) Note: The Details panel also displays Discussions. Discussions is disabled by default and system administrator must enable it.

Tabs Tabs display multiple pages and documents in one web browser window. BI launch pad has two default tabs, the Home tab and the Documents tab. Applications such as SAP BusinessObjects Web Intelligence, and any objects you choose to view or edit, also open in separate tabs. Note: If you set your document viewing preferences to open objects in new windows, these objects will open in separate windows instead of tabs. Hint: If you want to view the document in a larger viewing area, in the upper right corner of the tab, click Open in a new window

Viewing objects BI launch pad uses tabs to display the main navigation interfaces, the Home tab and the Documents tab, and any objects that you open for viewing or editing. When you select a document in the Documents tab for viewing or editing, it opens in its own tab. From the tab, you can launch the document in its own window if necessary. •

If you view a dynamic content document (for example, a Crystal report or a Web Intelligence document) by double-clicking the object in the List panel, the latest instance of the document opens. If the latest instance is unavailable, the object itself opens.

• •

2011

If you view an object by clicking View → View, the object opens. If you click View → View Latest Instance, the latest object instance opens.

© 2011 SAP AG. All rights reserved.

31

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

• •

• •

BOE310

If you view a publication or program object, BI launch pad will display the object properties if the latest instance is unavailable. If the object is a dynamic content document (for example, a Crystal report or a Web Intelligence document), the latest instance of the document opens. If the latest instance is unavailable, the object itself opens.. To view the object on demand, click Refresh in the object viewer. To view an older instance, select the object and click More Actions → History, then double-click the instance that you want to view.

Searching content There are several ways to search your content in BI launch pad: • •

Browse folders and categories Platform Search

Platform Search Platform Search looks for matches between your input and the keyword, title, description, owner information, and content of objects. After you perform a search, it is displayed in the Search drawer. The Search drawer lets you refer back to your search results at any time during your BI launch pad session. Hint: You can search using techniques similar to those used in other search engines. The system suggests an alternate spelling if a search input is misspelled or yields no results. The suggestion is made by substituting words in the original input with words from the system that are similar in spelling to the original one. For example, if you search for “Euroe sales trent”, the system recognizes the misspelled words and provides a suggestion of “Europe sales trend”. Facets and search results grouping Some searches may return too many results to look at all of them easily. Search uses information in and about the results to classify them into groups, or “facets”. The various facets that search results can be classified by include document type, public category, data in reports, and aspects of the report content. You can select a group, and see the search results that are part of that group. Search result ranking Each object on the search result page is assigned a score ranging from 1 to 5 bars depending on its relevance to the search input. A score of five bars indicates the object is a strong match, while a score of 1 bar indicates a weak match.

32

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Working in BI launch pad

Searchable document types The following table describes searchable content for each object type. Searchable document types

2011

Object type

Searchable content

Crystal reports

Titles Descriptions Selection formulas Saved data Text fields Parameter values Sub-reports

Web Intelligence documents

Titles Descriptions Universe filter names Saved data Constants in the filter conditions defined in the document Universe measure names Universe object names Data in record set Static text in cells

Microsoft Excel files

Data Document properties (title, subject, author, company, category, keywords, and comments) Header and footer text Calculation or formula values Number and date/time values

Word documents

Text Document properties (title, subject, author, company, category, keywords, and comments) Header and footer text Numerical values

© 2011 SAP AG. All rights reserved.

33

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

Object type

Searchable content

RTF, PDF, PowerPoint, and TXT files

Text

BOE310

Metadata Agnostic objects Analysis views BI workspaces Dashboard Design and Xcelsius objects Discussions Events Flash objects Hyperlinks Life Cycle Management Console jobs Metadata (from Information Designer) Modules Object packages Profiles Program objects Publications Queries (from Query as a Web Service) Universes Widgets Workspaces (created in SAP BusinessObjects Analysis, edition for OLAP)

Customizing Home tab and other preferences for a group of users Preferences determine how you log onto BI launch pad and what view is displayed when you do. They also determine specific settings for the various objects that you view, such as viewers for Crystal reports and view formats for Web Intelligence documents. Hint: As the system administrator you can restrict users to set your their user preferences.

34

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Working in BI launch pad

Set general preferences 1.

Log onto BI launch pad.

2.

On the Header panel, click Preferences. The Preferences dialog box appears

3.

Ensure General is selected. If you want to keep the default settings defined by your administrator, ensure Use Default Settings (Administrator defined) is selected; otherwise, clear this check box and proceed to step 4. Note: If you choose not to use the default settings, any updates that the administrator implements for your user group will not be reflected in your view of BI launch pad. However, you can select Use Default Settings (Administrator defined) at any time to switch from your custom preferences to the default settings, which include any updates implemented since you last used the administrator-defined defaults.

4.

Set your initial view. •

If you want the Home tab to be displayed when you first log on, click Home tab and choose one of the following options: Default Home tab Displays the default view that your administrator has configured. If your administrator has not configured a default, the Home tab provided with SAP BusinessObjects Business Intelligence platform will be used.

•

Select Home tab Displays a repository object that you select. Click Browse Home tab. In the Select a Custom Home tab window, select a repository object and click Open. If you want the Documents tab to be displayed when you first log on, click Documents, and then specify which drawer and node are open by default.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

35

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

5.

BOE310

Under Choose columns displayed in Documents tab, select the summary information that you want to see for each object in the List panel: • • • • • • • • •

Type Last Run Instances Description Created By Created On Location (Categories Received On (Inbox) From (Inbox)

6.

Under Set document viewing location, choose how you want to view your documents. You can open documents for viewing in new tabs or in new web browser windows.

7.

Enter a number in the Set the maximum number of items per page field to specify the maximum number of objects that you want to see displayed per page when you view lists of objects.

8.

Click Save & Close.

Organizing objects in folders Folders provide you with the ability to organize and facilitate content administration. In BI launch pad, you can copy and move reports to folders, and create shortcuts to reports in folders. You can create new folders and subfolders, copy folders and objects, and create shortcuts to folders and objects only as long as you have the necessary rights.

36

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Working in BI launch pad

As the Administrator, you determine the rights to provide the end user. You also have rights to view the contents of user folders. • •

• • • •

•

2011

The copy command creates another copy of the report object in a different location. When you copy objects to your personal folders, you can schedule and view them independently of other users. You can copy objects individually, or you can copy an entire folder to your Favorites folder. The new copy of the report inherits all object rights from its new parent folder. The move command changes the location of the report objects from one folder to another. The report object retains its original set of object rights when it is moved. The create shortcut command enables you to give users access to the report when you do not want them to access the folder in which the actual report object is located. The shortcut inherits object rights from its parent folder, but does not overwrite the rights applied on the report itself.

© 2011 SAP AG. All rights reserved.

37

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

38

© 2011 SAP AG. All rights reserved.

BOE310

2011

BOE310

Lesson: Working in BI launch pad

Exercise 1: Personalize your BI launch pad Exercise Objectives After completing this exercise, you will be able to: • Define a custom Home tab • Set preferences for a group of users • Override administrators' defined preference

Business Example Administrators can customize the interface for groups of users. This can help simplify the interface for novice users while maintain the more advanced functionality for power users. Administrators can also personalize the home page to target content to groups of users.

Task 1: Define a custom Home tab and set preferences for a all users For all users of the BI Launch Pad, show the World Sales Report in the Home tab and define the columns Type, Instances and Description for the document list. 1.

Launch SAP BusinessObjects Business Intelligence Platform and log on to Central Management Console (CMC) with the following information: Field Name

Value

System

:6400

Username

Administrator

Password



2.

Select the User and Groups area of the CMC and open the preferences for users in the Everyone group.

3.

Define a custom Home tab and set preferences for this group of users with the following information:

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

39

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

4.

BOE310

Field Name

Value

Home tab

World Sales Report

Columns displayed

Type Instances Description

Check the changes by logging on to BI launch pad with the following information: Field Name

Value

Username

Train-##

Password



Result Home tab displayed is World Sales Report and the columns displayed in Documents are: Title, Type, Instances and Description.

Task 2: Override administrators' defined preferences For your user, show the Comparative Income Statement in the Home tab and define the columns Type and Instances for the document list. 1.

Logon to SAP BusinessObjects BI launch pad with the following information: Field Name

Value

Username

train-##

Password



2.

Open the user preferences page

3.

Enter your personal preferences using the following information:

Continued on next page

40

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Working in BI launch pad

4.

2011

Field Name

Value

Home tab

Comparative Income Statement

Columns displayed

Type Instances

Check the changes to the Home and Documents tab in the BI launch pad.

© 2011 SAP AG. All rights reserved.

41

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Solution 1: Personalize your BI launch pad Task 1: Define a custom Home tab and set preferences for a all users For all users of the BI Launch Pad, show the World Sales Report in the Home tab and define the columns Type, Instances and Description for the document list. 1.

2.

Launch SAP BusinessObjects Business Intelligence Platform and log on to Central Management Console (CMC) with the following information: Field Name

Value

System

:6400

Username

Administrator

Password



a)

Click Start → Programs → SAP BusinessObjects BI platform 4.0 → SAP BusinessObjects BI platform → Custom Link to CMC home page

b)

Log on with your username and password.

Select the User and Groups area of the CMC and open the preferences for users in the Everyone group. a)

In the CMC Home, click Users and Groups.

b)

Navigate to Group Hierarchy → Everyone.

c)

Right-click Everyone and select BI launch pad Preferences. The BI launch pad Preferences action is opened to allow you to define the preferences for the selected group.

3.

Define a custom Home tab and set preferences for this group of users with the following information:

Continued on next page

42

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Working in BI launch pad

Field Name

Value

Home tab

World Sales Report

Columns displayed

Type Instances Description

a)

Uncheck No Preferences Defined. This enables the rest of the page so that you can define the preferences for the selected group.

b)

Under the Set BI Launch pad start page: area, click Select Home tab:.

c)

Click Browse Home tab....

d)

Navigate to Folders → Public Folders → Report Samples → Demonstration and select World Sales Report. Click Open.

e)

Under the Choose columns displayed in Documents tab section, deselect Last Run and select Description. Hint: "Received on (Inbox)" and "From (Inbox)" are not part of the document list but the Inbox. Keep them unchanged.

f) 4.

Click Save & Close to save your settings for the group.

Check the changes by logging on to BI launch pad with the following information: Field Name

Value

Username

Train-##

Password



a)

Click Start → Programs → SAP BusinessObjects BI platform 4.0 → SAP BusinessObjects BI platform Client Tools → Custom Link to BI Launchpad

b)

Click the Home tab and check the World Sales Report.

c)

Click the Document tab and check the list columns.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

43

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Result Home tab displayed is World Sales Report and the columns displayed in Documents are: Title, Type, Instances and Description.

Task 2: Override administrators' defined preferences For your user, show the Comparative Income Statement in the Home tab and define the columns Type and Instances for the document list. 1.

2.

Logon to SAP BusinessObjects BI launch pad with the following information: Field Name

Value

Username

train-##

Password



a)

Click Start → Programs → SAP BusinessObjects BI platform 4.0 → SAP BusinessObjects BI platform Client Tools → Custom Link to BI Launchpad.

b)

Log on with your username and password.

Open the user preferences page a)

3.

Click the Preferences link at the top to open the preferences page

Enter your personal preferences using the following information:

Continued on next page

44

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Working in BI launch pad

Field Name

Value

Home tab

Comparative Income Statement

Columns displayed

Type Instances

a)

Deselect the Use Default Settings (Administrator defined) check box. This enables the rest of the page so that you can define your own preferences. Note: When Use Default Settings (Administrator defined) is unchecked the user’s preferences are considered to be custom. Administrator updates to the preferences of your group are not reflected for users with custom preferences.

4.

b)

Click Browse Home tab....

c)

Navigate to Folders → Public Folders → Report Samples → Demonstration and select Comparative Income Statement. Click Open.

d)

Under the Choose columns displayed in Documents tab section, deselect Description.

e)

Click Save & Close to save your preference settings.

Check the changes to the Home and Documents tab in the BI launch pad. a)

Reload the BI launch pad.

b)

Click the Home tab and check the Comparative Income Statement.

c)

Click the Document tab and check the list columns. The Comparative Income Statement report is displayed. Note: To revert back to administrator defined preferences, select Preferences link again and check the option for Use Default Settings (Administrator defined).

2011

© 2011 SAP AG. All rights reserved.

45

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Lesson Summary You should now be able to: • Describe the functions of BI launch pad • Access BI launch pad • Differentiate content types • Differentiate the various ways to access content • View and schedule objects • Personalize BI launch pad • Configure BI launch pad options

46

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Working in the Central Management Console

Lesson: Working in the Central Management Console Lesson Overview This lesson describes how to work in the Central Management Console.

Lesson Objectives After completing this lesson, you will be able to: • • • • •

Describe the purpose of the Central Management Console Navigate in the Central Management Console View content and properties Work with folders Set Central Management Console preferences

Business Example The Central Management Console (CMC) is a web-based tool which offers a single interface through which you can perform almost every day-to-day administrative task, including user management, content management, and server management.

What is Central Management Console The Central Management Console (CMC) is a web-based tool which offers a single interface through which you can perform almost every day-to-day administrative task, including user management, content management, and server management. Any user with valid credentials to SAP BusinessObjects Business Intelligence platform can log onto the CMC and set his or her preferences. However, users who are not members of the Administrators group cannot perform any of the available management tasks unless they have been granted rights to do so. Note: Because the CMC is a web-based application, you can perform all of these administrative tasks remotely.

2011

© 2011 SAP AG. All rights reserved.

47

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Log into the Central Management Console 1.

In Windows, click Start → Programs → SAP BusinessObjects XI 4.0 → SAP BusinessObjects BI platform → Central Management Console The Log On page appears.

2.

When the Log On page of the Central Management Console appears, select Enterprise in the Authentication Type list. Hint: Windows AD, and LDAP authentication also appear in the list; however, you must map your third-party user accounts and groups to SAP BusinessObjects BI platform before you can use these types of authentication.

3.

Type your User Name and Password.

4.

Click Log On.

Result The CMC Home page appears.

Navigating within the Central Management Console Because the CMC is a web-based application, you can navigate through it in a number of ways. • •

Click the links on the Home page or context tabs on the left of your screen to go to specific management areas (contexts). Select the same management areas from the Navigation list.

When you are navigating among objects that have many child objects, there may be too many children to display in the tree view. When this happens, you can use the paginated object listing to navigate to the child objects with which you are concerned.

Viewing content properties In the Properties page of an object, you can view its file name, its location, and the date it was created. For objects that can be scheduled (reports, programs, and object packages), you can see the last time the object was modified and/or run. You can modify an object’s title and description. To finalize any property changes, click Update. Note that once you have clicked Update, you cannot click Reset to undo changes.

48

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Working in the Central Management Console

Similarly, for report objects, a Preview button appears. The Preview button enables you to view a report on demand with all of your current report settings. SAP BusinessObjects BI platform connects to the report’s data source(s) if no cached pages are available. To use the Preview function, the user needs to have rights at the View on Demand level or higher. (To preview a report with saved data, the user needs to have rights at the View level or higher.) By default, administrators have rights at the Full Control level (the highest rights setting) for all report objects. Aside from the Properties tab, there are several other tabs located at the top of the page. The tabs that appear vary by object type. You will learn more about the different tabs in subsequent lessons.

Setting Central Management Console Preferences The Preferences area of the CMC allows you to customize your administrative view of SAP BusinessObjects BI platform. Central Management Console Preferences CMC Preference option

Description

Product Locale

This list sets the default language options for SAP BusinessObjects Business Intelligence platform.

Preferred Viewing Locale

This list sets the default formatting options for date, time, and numbers in the CMC.

Maximum number of objects per page

This option limits the number of objects listed on any page or tab in the CMC. This setting does not limit the number of objects displayed, simply the number displayed per page.

Time Zone

2011

If you are managing SAP BusinessObjects Business Intelligence platform remotely, use this list to specify your time zone. SAP BusinessObjects Business Intelligence platform synchronizes scheduling patterns and events appropriately. For instance, if you select Eastern Time (US & Canada), and you schedule a report to run at 5:00 a.m.

© 2011 SAP AG. All rights reserved.

49

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

CMC Preference option

Description every day on a server that is located in San Francisco, then the server will run the report at 2:00 a.m. Pacific Time.

Prompt for Unsaved Data

This setting controls whether you are prompted for confirmation when you close a dialog box without saving your work by clicking Cancel, or by clicking the close button in the top right-hand corner. You have the following options: • • •

On: The prompt behavior is enabled. Off: The prompt behavior is disabled. Default: The prompt behavior is determined by settings configured in the CmcApp.properties file located in the custom or default folder of C:\Program Files (x86)\SAP BusinessOb jects\Tomcat6\webapps\BOE\WEB-INF\config\.

Figure 13: Central Management Console Preferences

50

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Working in the Central Management Console

Web Intelligence You can specify the viewing options for Web Intelligence under preferences. There are four viewing formats to choose from: • • • •

Web (no download required) Rich Internet Application (download required) Desktop (windows only) (installation required) PDF

There are three modifying options to choose from: • • •

Web (no download required) Rich Internet Application (download required) Desktop (installation required)

You can also specify a default universe. There are also several other options for drilling.

Crystal Reports You can specify the viewing options for Crystal Reports under preferences. There are three viewing formats to choose from: • • •

Web (no downloading required) Web ActiveX (ActiveX required) Web Java (Java required)

There are also several options for printing and rendering.

BI workspaces You can also specify several options for BI workspaces under preferences.

2011

© 2011 SAP AG. All rights reserved.

51

Unit 1: What is SAP BusinessObjects Business Intelligence Platform

BOE310

Lesson Summary You should now be able to: • Describe the purpose of the Central Management Console • Navigate in the Central Management Console • View content and properties • Work with folders • Set Central Management Console preferences

52

© 2011 SAP AG. All rights reserved.

2011

BOE310

Unit Summary

Unit Summary You should now be able to: • Define Business Intelligence and how SAP BusinessObjects provides it. • Describe how SAP BusinessObjects Business Intelligence platform fits into the Business Intelligence solutions. • Describe the responsibilities of a system administrator working with SAP BusinessObjects Business Intelligence platform. • Describe the architecture in SAP BusinessObjects Business Intelligence platform • Describe the functions of BI launch pad • Access BI launch pad • Differentiate content types • Differentiate the various ways to access content • View and schedule objects • Personalize BI launch pad • Configure BI launch pad options • Describe the purpose of the Central Management Console • Navigate in the Central Management Console • View content and properties • Work with folders • Set Central Management Console preferences

2011

© 2011 SAP AG. All rights reserved.

53

Unit Summary

54

BOE310

© 2011 SAP AG. All rights reserved.

2011

BOE310

Test Your Knowledge

Test Your Knowledge 1.

Name the various SAP BusinessObjects BI platform service components or tiers in the architecture.

2.

BI launch pad can be customized to suit a company’s standards? Determine whether this statement is true or false.

□ □ 3.

True False

What tool does the system administrator use to manage content in SAP BusinessObjects Business Intelligence platform? Choose the correct answer(s).

□ □ □ □ □

2011

A B C D E

Universe? BI launch pad? The Central Management Console (CMC)? Report Conversion Tool? Translation Management Tool?

© 2011 SAP AG. All rights reserved.

55

Test Your Knowledge

BOE310

Answers 1.

Name the various SAP BusinessObjects BI platform service components or tiers in the architecture. Answer: Client, Web, Management, Storage, Processing, Data.

2.

BI launch pad can be customized to suit a company’s standards? Answer: True BI launch pad can be customized to suit a company’s standards.

3.

What tool does the system administrator use to manage content in SAP BusinessObjects Business Intelligence platform? Answer: C The Central Management Console (CMC).

56

© 2011 SAP AG. All rights reserved.

2011

Unit Summary

57

BOE310

© 2011 SAP AG. All rights reserved.

2011

Unit Summary

58

BOE310

© 2011 SAP AG. All rights reserved.

2011

Unit 2 Managing Content and Objects in SAP BusinessObjects Business Intelligence Platform Unit Overview This unit describes how to manage content and objects in SAP BusinessObjects Business Intelligence platform.

Unit Objectives After completing this unit, you will be able to: • • • • •

Describe the different methods of adding objects to the repository Add an object View object properties Describe other objects you can add and configure Perform common object management tasks

Unit Contents Lesson: Adding Objects to the Repository ....................................... 60 Procedure: Add an object with the CMC ..................................... 62 Procedure: View or modify the properties of an object ..................... 65 Lesson: Managing objects in SAP BusinessObjects Business Intelligence Platform ............................................................................... 67 Procedure: Copy an object in the CMC ...................................... 68 Procedure: Move an object in the CMC ...................................... 69 Procedure: Delete an object in the CMC ..................................... 70 Procedure: Create an object shortcut......................................... 71

2011

© 2011 SAP AG. All rights reserved.

59

Unit 2: Managing Content and Objects in SAP BusinessObjects Business Intelligence Platform

BOE310

Lesson: Adding Objects to the Repository Lesson Overview This lesson discusses the process of adding objects to the SAP BusinessObjects Business Intelligence platform and making them available to authorized users.

Lesson Objectives After completing this lesson, you will be able to: • • • •

Describe the different methods of adding objects to the repository Add an object View object properties Describe other objects you can add and configure

Business Example You need to understand the process of adding objects to the SAP BusinessObjects Business Intelligence platform environment and making them available to authorized users.

Adding objects You can add many different types of objects to SAP BusinessObjects BI platform, including the following: • • • • • • • •

Reports (from SAP Crystal Reports) Documents (from SAP BusinessObjects Web Intelligence) Flash objects Programs Microsoft Excel/Word/PowerPoint files PDFs Text files Rich text format files

You can add objects to SAP BusinessObjects BI platform through the CMC or by saving objects directly to the CMS.

60

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Adding Objects to the Repository

Figure 14: Adding objects

2011

© 2011 SAP AG. All rights reserved.

61

Unit 2: Managing Content and Objects in SAP BusinessObjects Business Intelligence Platform

BOE310

Add an object with the CMC Hint: You can add objects over the Web from within the CMC. Use the CMC to add single objects or to perform administrative tasks remotely. 1.

Go to the Folders management area of the CMC.

2.

Browse for the folder that you want to add an object to and select it.

3.

On the Manage menu, point to Add and click the appropriate option. Options Option

Description

Program File

Adds a program object.

Local Document

Adds other types of objects.

A dialog box appears and lets you specify the properties of the object. This dialog box varies depending on the option you selected. 4.

Specify the properties of the object. Note: The properties fields are summarized in this table: Object properties Object type

Property

Notes

Crystal reports and other object types

Filename

Enter the name of the object you want to add, or click Browse to find the object.

Title

Enter the name of the object.

Description

Enter a description for the object.

Keywords

Enter keywords for the object.

Keep saved data

Select this option if you want the report to keep its saved data.

Use description from report

Select this option if you want to preserve the report's summary information.

Crystal reports only

Continued on next page

62

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Adding Objects to the Repository

Object type

Property

Program files only

Enter the name of the program Browse for an existing Program object you want to add, or click Browse to find the object. object Program type

Notes

Click one of the options below Program type to define the type of program you are adding. The options are: • • •

Other object types

MIME

Executable (binary, batch, shell script) Java Script (VBScript, JavaScript)

Specify the MIME extension for the object if needed.

5.

If you want to assign the object to a category, select the category from the list.

6.

Click OK. The dialog box closes, and the CMC refreshes to display the object and the other contents of the folder. If necessary, you can modify properties such as title, description, database logon information, scheduling information, user rights, and so on for the object after it is published to the CMC.

Modifying the properties of an object When you add any object to SAP BusinessObjects BI platform, it is stored in the Input FRS. Meta information for this object—such as object properties, data source information, and selection formulas—is also copied to the CMS system database. Objects have the following configurable properties in the Central Management Console: • • • • • •

2011

Default Settings Properties Schedule User Security History Limits

© 2011 SAP AG. All rights reserved.

63

Unit 2: Managing Content and Objects in SAP BusinessObjects Business Intelligence Platform

BOE310

Default Settings In the Default Settings section of a report object, you can specify the default values for a report object.

Properties In the Properties section of a report object, you can: • • •

Add or change the report title Add or change the report description Add keywords to help when searching for the report

Schedule In the Schedule section of a report object, you can set values such as instance title, format, destination, recurrence, notification and caching. The settings available depend on the object type.

User Security In the User Security section of a report object, you can: • •

Assign group-level access and rights to the object Assign user-level access and rights to the object

History In the History section of a report object, you can view: • • • • • •

Instance Time Title Run By Parameters Format Status

Limits In the Limits section of a report object, you can specify how object instances will be managed. You can: • • •

64

Delete instances when there are more than N instances of an object Delete excess for users / groups Delete instances after N days for users / groups

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Adding Objects to the Repository

View or modify the properties of an object Use You can view the properties of any object within the CMC using the following procedure. You can also modify the properties.

Procedure 1.

In the Folders management area of the CMC, select an object.

2.

Click Manage → Properties. The Properties dialog box appears.

2011

3.

Make your modifications.

4.

When you are finished, click Save & Close.

© 2011 SAP AG. All rights reserved.

65

Unit 2: Managing Content and Objects in SAP BusinessObjects Business Intelligence Platform

BOE310

Lesson Summary You should now be able to: • Describe the different methods of adding objects to the repository • Add an object • View object properties • Describe other objects you can add and configure

66

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Managing objects in SAP BusinessObjects Business Intelligence Platform

Lesson: Managing objects in SAP BusinessObjects Business Intelligence Platform Lesson Overview This lesson explains how to work with content objects in SAP BusinessObjects Business Intelligence (BI) platform.

Lesson Objectives After completing this lesson, you will be able to: •

Perform common object management tasks

Business Example After adding objects to SAP BusinessObjects Business Intelligence platform, you manage them through the Central Management Console (CMC) by going to the Folders management area

General object management Many types of objects can exist in SAP BusinessObjects BI platform. Examples of objects include: • • • • • • • • •

2011

Reports Web Intelligence documents Programs Microsoft Excel/Word/PowerPoint files PDFs RTF files Text files Hyperlinks Object packages

© 2011 SAP AG. All rights reserved.

67

Unit 2: Managing Content and Objects in SAP BusinessObjects Business Intelligence Platform

BOE310

Copy an object in the CMC 1.

In the Folders area, browse for the object that you want to copy and select it.

2.

Click Organize → Copy To. The Copy dialog box appears.

3.

In the Select destination(s) area, browse for the destination folder you want to copy the object to, and click > to move it to the Destinations list. Hint: Use SHIFT + click or CTRL + click to select multiple folders.

4.

68

Click Copy to complete the process. The object will appear in the destination folder.

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Managing objects in SAP BusinessObjects Business Intelligence Platform

Move an object in the CMC 1.

In the Folders area, browse for the object that you want to copy and select it.

2.

Click Organize → Move To. The Move dialog box appears.

3.

Select the destination folder. Note: In order to move the destination folder, you must select that folder in the details pane on the right. Hint: Use SHIFT + click or CTRL + click to select multiple folders.

4.

2011

Click Move to complete the process. The object moves from the origin folder to the destination folder.

© 2011 SAP AG. All rights reserved.

69

Unit 2: Managing Content and Objects in SAP BusinessObjects Business Intelligence Platform

BOE310

Delete an object in the CMC

70

1.

Click Folders to display the folder tree and the objects and navigate the folder tree to the desired folder.

2.

Right-click the object and select Manage → Delete.

3.

Click OK to confirm the object deletion.

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Managing objects in SAP BusinessObjects Business Intelligence Platform

Create an object shortcut Use Shortcuts are useful for granting a user access to an object without giving that user access to the entire folder in which the object is located. After you create the shortcut, users who have access to the folder where the shortcut is located can access this object and its instances.

Procedure 1.

In the Folders area, browse for the object that you want to create a shortcut for and select it.

2.

Click Organize → Create Shortcut In.

3.

In the Select destination(s) window, browse for the folder you want to create a shortcut in, and click> to move the folder to the Destinations list. Note: In order to move the destination folder, you must select that folder in the details pane on the right.

4.

Click Create Shortcut to complete the process. A shortcut to the object appears in the folder you specified.

2011

© 2011 SAP AG. All rights reserved.

71

Unit 2: Managing Content and Objects in SAP BusinessObjects Business Intelligence Platform

BOE310

Lesson Summary You should now be able to: • Perform common object management tasks

72

© 2011 SAP AG. All rights reserved.

2011

BOE310

Unit Summary

Unit Summary You should now be able to: • Describe the different methods of adding objects to the repository • Add an object • View object properties • Describe other objects you can add and configure • Perform common object management tasks

2011

© 2011 SAP AG. All rights reserved.

73

Unit Summary

74

BOE310

© 2011 SAP AG. All rights reserved.

2011

BOE310

Test Your Knowledge

Test Your Knowledge 1.

2011

Why are shortcuts useful?

© 2011 SAP AG. All rights reserved.

75

Test Your Knowledge

BOE310

Answers 1.

Why are shortcuts useful? Answer: Shortcuts are useful for granting a user access to an object without giving that user access to the entire folder in which the object is located.

76

© 2011 SAP AG. All rights reserved.

2011

Unit Summary

77

BOE310

© 2011 SAP AG. All rights reserved.

2011

Unit Summary

78

BOE310

© 2011 SAP AG. All rights reserved.

2011

Unit 3 Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform Unit Overview This unit describes how to secure users and groups in SAP BusinessObjects Business Intelligence platform.

Unit Objectives After completing this unit, you will be able to: • • • • • • • •

Explain user management Explain group management Manage users and groups Manage categories Describe how rights work in SAP BusinessObjects Business Intelligence platform Manage security settings for objects Work with access levels List the inheritance rules

Unit Contents Lesson: Managing Users and Groups ............................................ 81 Procedure: Enable the Guest account........................................ 85 Procedure: Create users ....................................................... 87 Procedure: Modify a user account ............................................ 89 Procedure: Create groups...................................................... 90 Procedure: Modify a group's properties ...................................... 91 Procedure: Add subgroups..................................................... 92 Procedure: Specify group membership....................................... 93

2011

© 2011 SAP AG. All rights reserved.

79

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Procedure: Delete a user or group ............................................ 95 Procedure: Add a user to one or more groups .............................. 96 Procedure: Add one or more users to a group .............................. 97 Procedure: Create a folder ..................................................... 98 Procedure: Move or copy folders.............................................. 99 Procedure: Create a category ................................................ 101 Procedure: Assign an object to a category ................................. 102 Procedure: Delete categories................................................. 103 Procedure: Move a category.................................................. 104 Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform .............................................................................. 106 Procedure: Viewing rights for a principal on an object .................... 112 Exercise 2: Administer Rights in SAP BusinessObjects Business Intelligence Platform............................................................ 127

80

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Managing Users and Groups

Lesson: Managing Users and Groups Lesson Overview This lesson explains how to perform key tasks to manage users and groups in Central Management Console (CMC).

Lesson Objectives After completing this lesson, you will be able to: • • • •

Explain user management Explain group management Manage users and groups Manage categories

Business Example Account management involves all of the tasks related to creating, mapping, changing, and organizing user and group information. After the user accounts and groups have been created, you can add objects and specify rights to them. When the users log on, they can view the objects using BI launch pad or their custom web application.

User management In the Users and Groups management area, you can specify everything required for a user to access SAP BusinessObjects Business Intelligence platform. You can also view the two default user accounts summarized by the following table.

2011

© 2011 SAP AG. All rights reserved.

81

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

User accounts Account Name

Description

Administrator

This user belongs to the Administrators and Everyone groups. An administrator can perform all tasks in all SAP BusinessObjects Business Intelligence platform applications (for example, the CMC, CCM, Publishing Wizard, and BI launch pad).

Guest

This user belongs to the Everyone group. This account is enabled by default, and is not assigned a password by the system. If you assign it a password, the single sign-on to BI launch pad will be broken.

SMAdmin

This is a read-only account used by SAP Solution Manager to access SAP BusinessObjects Business Intelligence platform components.

Figure 15: User accounts

Role-based licensing Under the user-role based licensing scheme, there are two roles which can be assigned to SAP BusinessObjects Business Intelligence platform users: • •

82

BI Analyst BI Viewer

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Managing Users and Groups

Each role is bundled with specific access levels to SAP BusinessObjects Business Intelligence platform applications. You cannot modify or override the access level to either user role. User roles apply to new user accounts created in SAP BusinessObjects Business Intelligence platform or existing users imported from third party directory services such as Windows AD or LDAP. Note: Click License Key in the CMC for more information on your licensing scheme. BI Analyst role The BI Analyst role is designed for users who create content in the SAP BusinessObjects Business Intelligence platform. Users who edit or create reports, design and manage universes, or perform any administrative tasks in the CMC should be assigned the BI Analyst role. BI Viewer role The BI Viewer role is designed primarily for content consumers. These users only view reports but do not modify content. Users assigned to the BI Viewer role will be prevented by the system from creating content, modifying reports and performing general administrative tasks in the system. The BI Viewer role should not be assigned to users who need to: • • •

Create reports Update or modify reports Perform administrative tasks using the CMC Caution: BI Viewer users cannot access the CMC.

Group management Groups are collections of users who share the same account privileges; therefore, you may create groups that are based on department, role, or location. Groups enable you to change the rights for users in one place (a group) instead of modifying the rights for each user account individually. Also, you can assign object rights to a group or groups. In the Users and Groups area, you can create groups that give a number of people access to the report or folder. This enables you to make changes in one place instead of modifying each user account individually. You can also view the several default group accounts summarized by the following table. Note: To view available groups in the CMC, click Group List in the Tree panel. Alternatively, you can click Group Hierarchy to display a hierarchal list of all available groups.

2011

© 2011 SAP AG. All rights reserved.

83

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Group hierarchy Account name

Description

Administrators

Members of this group can perform all tasks in all of the SAP BusinessObjects Business Intelligence platform applications (CMC, CCM, Publishing Wizard, and BI launch pad). By default, the Administrators group contains only the Administrator user.

Everyone

Each user is a member of the Everyone group.

QaaWS Group Designer

Members of this group have access to Query as a Web Service.

Report Conversion Tool Users

Members of this group have access to the Report Conversion Tool application.

Translators

Members of this group have access to the Translation Manager application.

Universe Designer Users

Users who belong to this group are granted access to the Universe Designer folder and the Connections folder. They can control who has access rights to the Designer application. You must add users to this group as needed. By default, no user belongs to this group.

Figure 16: Group hierarchy

84

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Managing Users and Groups

Enable the Guest account Use The Guest account is disabled by default to ensure that no one can log on to SAP BusinessObjects Business Intelligence platform with this account. This default setting also disables the anonymous single sign-on functionality of SAP BusinessObjects Business Intelligence platform, so users will be unable to access BI launch pad without providing a valid user name and password.

Procedure 1.

Go to the Users and Groups management area of the CMC.

2.

Click User List in the Navigation panel.

3.

Select Guest.

4.

Click Manage → Properties. The Properties dialog box appears.

5.

Clear the Account is disabled check box.

6.

Click Save & Close.

7.

If you are prompted for confirmation, click OK.

Result The Guest account is now enabled.

Creating users and groups New users and groups are created in the CMC. When you create a new user account in the CMC, you first must specify the user’s properties, before you configure group memberships for the user. Groups are collections of users who share the same account privileges. For instance, you may create groups that are based on department, role, or location. Groups enable you to change the rights for users in one place (a group) instead of modifying the rights for each user account individually. Also, you can assign object rights to a group or groups.

Creating and modifying a user account After a user account has been created, you can modify the account properties. The properties that can be modified include: •

2011

Account Name

© 2011 SAP AG. All rights reserved.

85

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

The account name is the unique identifier for a user account and is the user name entered when logging into SAP BusinessObjects Business Intelligence platform. •

Full Name This optional field is used to capture the user’s full name. It is recommended that you use this field, particularly when managing many users.

•

Email This optional field is used to add the user’s email address. This is for reference only. For example, if the user forgets their password sometime in the future, you can get their email address from this field to send them their password.

•

Description This optional field is used to add information about the user, such as their position, department, or geographic location.

•

Enterprise Password Settings User password settings allow you to change the password and password settings for the user. Global password settings can be configured in the Authentication area of the Central Management Console.

•

Connection Type This option specifies how the user connects to the SAP BusinessObjects Business Intelligence platform based on the license agreement.

•

Account is disabled This check box allows the Administrator to deactivate the user account, instead of permanently deleting the account. This is useful when administering users who will be temporarily denied system access, such as employees taking parental leave. Select the Account is disabled check box to disable the Guest account. This makes it unavailable for use.

•

Assign Alias. If a user has multiple accounts within SAP BusinessObjects Business Intelligence platform, use this feature to link the accounts. This results in the user having multiple SAP BusinessObjects Business Intelligence platform login credentials that map to one SAP BusinessObjects Business Intelligence platform account. You can also use the New Alias. button to create a new alias.

86

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Managing Users and Groups

Create users 1.

In the CMC home page, click Users and Groups.

2.

Click Manage → New → New User. The New User dialog box appears.

3.

Select the Authentication Type. •

To create an Enterprise user, Select Enterprise from the Authentication Type list. Type the account name, full name, email, and description information. Use the description area to include extra information about the user or account. 3. Specify the password information and settings. To create a user that will logon using a different authentication type, select the appropriate option from the Authentication Type list, and type the account name. 1. 2.

•

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

87

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

4.

BOE310

Specify how to designate the user account according to options stipulated by your SAP BusinessObjects Business Intelligence platform license agreement. •

If your license agreement is based on user roles, select one of the following options: –

•

BI Viewer: access to SAP BusinessObjects Business Intelligence platform applications for all accounts under the BI Viewer role is defined in the license agreement. Users are restricted to access application workflows that are defined for the BI Viewer role. Access rights are generally limited to viewing business intelligence documents. This role is typically suitable for users who consume content through SAP BusinessObjects Business Intelligence platform applications. – BI Analyst: access to SAP BusinessObjects Business Intelligence platform applications for all accounts under the BI Analyst role is defined in the license agreement. Users can access all applications workflows that are defined for the BI Analyst role. Access rights include viewing and modifying business intelligence documents. This role is typically suitable for users who create and modify content for SAP BusinessObjects Business Intelligence platform applications If your license agreement is not based on user roles, specify a connection type for the user account. – –

5.

Choose Concurrent User if this user belongs to a license agreement that states the number of users allowed to be connected at one time. Choose Named User if this user belongs to a license agreement that associates a specific user with a license. Named user licenses are useful for people who require access to BusinessObjects Business Intelligence platform regardless of the number of other people who are currently connected. that are defined for the BI Analyst role. Access rights include viewing and modifying business intelligence documents. This role is typically suitable for users who create and modify content for SAP BusinessObjects Business Intelligence platform applications

Click Create & Close.

Result The user is added to the system and is automatically added to the Everyone group. An inbox is automatically created for the user, as is an Enterprise alias. You can now add the user to a group or specify rights for the user.

88

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Managing Users and Groups

Modify a user account Use Use this procedure to modify a user's properties or group membership. The user will be affected if they are logged on when you are making the change.

Prerequisites The user account must already exist before it can be modified.

Procedure 1.

In the CMC home page, click Users and Groups.

2.

Select the user whose properties you want to change.

3.

Click Manage → Properties. The Properties dialog box for the user appears.

4.

Modify the properties for the user. In addition to all of the options that were available when you initially created the account, you now can disable the account by selecting the Account is disabled check box. Any changes you make to the user account do not appear until the next time the user logs on.

5.

Click Save & Close.

Creating and modifying a group account Once a group is created, you can modify its membership to include other groups. Groups can include other groups as subgroups. Group names must be unique. After a group is created, you can modify the properties. Properties can include: • • • • • • •

2011

Group Name Description Users Subgroups Member of Profiles Rights

© 2011 SAP AG. All rights reserved.

89

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Create groups 1.

In the CMC home page, click Users and Groups.

2.

Click Manage → New → New Group. The Create New User Group dialog box appears.

3.

Enter the group name and description.

4.

Click OK.

Result After creating a new group, you can add users, add subgroups, or specify group membership so that the new group is actually a subgroup. Because subgroups provide you with additional levels of organization, they are useful when you set object rights to control users' access to your SAP BusinessObjects Business Intelligence platform content.

90

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Managing Users and Groups

Modify a group's properties Use You can modify a group's properties by making changes to any of the settings. Note: The users who belong to the group will be affected by the modification the next time they log on.

Procedure 1.

In the Users and Groups management area of the CMC, select the group.

2.

Click Manage → Properties. The Properties dialog box appears.

3.

Modify the properties for the group. Click the links from the navigation list to access different dialog boxes and modify different properties. • • • •

4.

If you want to change the title or description for the group, click Properties. If you want to modify the rights that principals have to the group, click User Security. If you want to modify profile values for group members, click Profile Values. If you want to add the group as a subgroup to another group, click Member Of.

Click Save.

Creating subgroups It is useful to create subgroups when you need to further classify groups of users. For example, users can be grouped on location (such as London), and then further divided according to their department (such as the London Finance Team).

2011

© 2011 SAP AG. All rights reserved.

91

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Add subgroups Use You can add a group to another group. When you do this, the group that you added becomes a subgroup. Note: Adding a subgroup is similar to specifying group membership.

Procedure 1.

In the Users and Groups management area of the CMC, select the group that you want to add as a subgroup to another group.

2.

Click Actions → Join Group. The Join Group dialog box appears.

92

3.

Select the group that you want to add the first group to from the Available Groups list, and click > to move it to the Destination Group(s) list.

4.

Click OK.

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Managing Users and Groups

Specify group membership Use You can make a group a member of another group. The group that becomes a member is referred to as a subgroup. The group that you add the subgroup to is the parent group. A subgroup inherits the rights of the parent group.

Procedure 1.

In the Users and Groups management area of the CMC, click the group that you want to add to another group.

2.

Click Actions → Member Of. The Member Of dialog box appears.

3.

Click Join Group. The Join Group dialog box appears.

4.

Select the group that you want to add the first group to from the Available Groups list, and click > to move it to the Destination Group(s) list. Any rights associated with the parent group will be inherited by the new group you have created.

5.

Click OK. You return to the Member Of dialog box, and the parent group appears in the parent groups list.

2011

© 2011 SAP AG. All rights reserved.

93

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Deleting a user or group account Accounts that you have created in SAP BusinessObjects Business Intelligence platform can easily be deleted from the Users and Groups management area in the CMC. Note: •

•

•

94

The user might receive an error if they are logged on when their account is deleted. When you delete a user account, the Favorites folder, personal categories, and inbox for that user are deleted as well. If you think the user might require access to the account again in the future, select the Account is disabled check box in the "Properties" dialog box of the selected user instead of deleting the account. Deleting a user account won't necessarily prevent the user from being able to log on to SAP BusinessObjects Business Intelligence platform again. If the user account also exists in a third-party system, and if the account belongs to a third-party group that is mapped to SAP BusinessObjects Business Intelligence platform, the user may still be able to log on.

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Managing Users and Groups

Delete a user or group Use You can delete a user or group when that user or group is no longer required. Note: • • •

You cannot delete the default groups Administrator and Everyone. The users who belong to a deleted group will be affected by the change the next time they log on. The users who belong to the deleted group will lose any rights they inherited from the group.

Procedure 1.

Go to the Users and Groups management area of the CMC.

2.

Select the user or group you wish to delete.

3.

Click Manage → Delete. The delete confirmation dialog box appears.

4.

Click OK. The user or group is deleted.

Adding users to groups Once you have created a group structure, you will need to add users to the groups. You can add users to groups in the following ways: • • •

2011

Select the group, and then click Actions → Add Members to Group. Select the user, and then click Actions → Member Of. Select the user, and then click Actions → Join Group.

© 2011 SAP AG. All rights reserved.

95

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Add a user to one or more groups 1.

In the Users and Groups management area of the CMC.

2.

Select the user that you wish to add to a group.

3.

Click Actions → Join Group. Note: All SAP BusinessObjects Business Intelligence platform users of the system are part of the Everyone group. The Join Group dialog box appears.

4.

Select the group that you want to add the user to from the Available Groups list, and click > to move it to the Destination Group(s) list. Use SHIFT + click or CTRL + click to select multiple groups.

5.

Click OK.

Result The user is added to the group(s).

96

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Managing Users and Groups

Add one or more users to a group 1.

In the Users and Groups management area of the CMC, select the group.

2.

Click Actions → Add Members to Group. The Add dialog box appears.

3.

Click User list. The Available users/groups list refreshes and displays all user accounts in the system.

4.

Select the user that you want to add to the group from the Available users/groups list, and click >to move it to the Selected users/groups list. Note: • • •

5.

To select multiple users, use the SHIFT + click or CTRL + click combination. To search for a specific user, use the search field. If there are many users on your system, click the Previous and Next buttons to navigate through the list of users.

Click OK.

Result The user(s) is added to the group.

Creating folders To create a logical structure in which to store an organization's content you must create folders. Folders store objects and are used to organize documents. You can use folders to separate content into logical areas. Every report or document must reside in a folder. Because you can set security at the folder level, you can use folders as a tool for controlling access to information. Object-level rights are either set explicitly for the object or inherited from the folder in which the object resides. Creating and managing folders is typically the responsibility of the SAP BusinessObjects BI platform administrator, but end users can be given the option to create their own folders and control the objects within their folders in BI launchpad. Managing folders in SAP BusinessObjects BI platform is done in the Folders management area of the Central Management Console.

2011

© 2011 SAP AG. All rights reserved.

97

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Create a folder Note: To create a top-level folder, ensure that you are viewing All Folders when you create your new folder. To create a subfolder, navigate to the folder in which you would like to create the new folder and then create it. 1.

Go to the Folders management area in the CMC.

2.

Navigate to where you want to create the folder.

3.

Click Manage → New → Folder.

4.

Enter a name for the folder and click OK. The folder is created.

98

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Managing Users and Groups

Move or copy folders Use When you copy or move a folder, the objects contained within it are also copied or moved. SAP BusinessObjects BI platform treats the folder’s object rights differently, depending upon whether you copy or move a folder. •

•

When you copy a folder, the newly created folder does not retain the object rights of the original. Instead, the copy inherits the object rights that are set on its new parent folder. For instance, if you copy a private Sales folder into a Public folder, the contents of the new Sales folder will be accessible to all users who have rights to the Public folder When you move a folder, all of the folder's object rights are retained. For instance, if you move a private Sales folder into a publicly accessible folder, the Sales folder will remain inaccessible to most users.

Procedure 1.

Go to the Folders management area in the CMC.

2.

Select the folder you wish to move or copy. If the folder you want to copy or move is not at the top level, locate its parent folder. Then make your selection on the parent folder contents.

3.

Click Organize → Copy to or Organize → Move To.

4.

Select the destination folder to copy or move your object.

5.

Click Copy or Move to complete the task.

Result The folder you selected is copied or moved, as requested, to the new destination.

Creating Categories Categories provide an alternative way of organizing objects, and therefore an alternative way for users to navigate to them. For example, you could organize your content into departmental folders, and then use categories to create an alternate filing system that divides content according to different roles in your organization, such as managers or VPs. This organizational model allows you set security on groups of documents based on department or job role. There are two types of categories: corporate and personal. Corporate categories are created and administrated by

2011

© 2011 SAP AG. All rights reserved.

99

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

administers with the appropriate rights, and are only visible to groups and users who have the rights to view them; personal categories are created by individual users, and are only visible to themselves. There are two types of categories: •

•

Corporate categories are created and administrated by administers with the appropriate rights, and are only visible to groups and users who have the rights to view them. Personal categories are created by individual users, and are only visible to themselves. Note: While all objects must reside in folders, category assignment is optional; therefore, it is important to note that: •

• •

100

While you can assign rights to a category as an object (that is, grant groups and users rights to it), the objects within the category cannot inherit rights set on the category itself. An object in a category retains its affiliation with the folder it resides in. An object can reside in multiple categories.

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Managing Users and Groups

Create a category 1.

Go to the Categories management area of the CMC.

2.

Click Manage → New → Category.

3.

Type a name for your cateogry.

4.

Click OK. The new category is added to the system. You can now click Manage → Properties to change settings for this category.

2011

© 2011 SAP AG. All rights reserved.

101

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Assign an object to a category

102

1.

Go to the Folders management area of the CMC.

2.

Navigate to the object you would like to add to a category and select it.

3.

Click Manage → Properties.

4.

Under Properties, in the Categories section, select the categories to which you want to add the object.

5.

Click Save & Close.

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Managing Users and Groups

Delete categories Use You can either remove or delete objects from a category. When you remove an object, you remove it from the category only. When you delete an object, you remove it from the category and also delete it from the system.

Procedure 1.

Go to the Categories management area of the CMC.

2.

Double-click the category from which you want to remove or delete an object. If the category you want to delete is not at the top level, locate its parent category. Then make your selection. To select multiple categories, hold down the CTRL or Option key and click each category, so that you can delete several categories simultaneously.

3.

Select the object or objects you want to remove or delete.

4.

Remove the object from the category or delete the object. • •

2011

Click Actions → Remove From Category to remove the object from the category only. In this case, the object continues to exist in the system. Click Manage → Delete to remove the object from the category and at the same time delete it from the system.

© 2011 SAP AG. All rights reserved.

103

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Move a category Use When you move a category, any object assigned to the category maintains its association with it. All of the category's object rights are retained. For example, you may have a South American Sales category that is accessible only by sales people in that region. You also have a World Sales category that contains worldwide sales reports needed by all sales people. For more intuitive organization, you want to move the region categories into the World Sales category. When you move the South American Sales category into the World Sales category, it retains its rights settings and associated objects, even though it has become a subcategory of the World Sales category.

Procedure 1.

Go to the Categories management area of the CMC.

2.

Select the category that you want move. If the category you want to move is not at the top level, locate its parent category. Then make your selection. Hint: To select multiple categories, hold down the CTRL and click each category, so that you can move several categories simultaneously.

3.

Click Organize → Move To.

4.

Select the Destination category and add it to the Destinations list. If there are many categories on your system, use the Search title field to search, or click Previous, Next, and + to browse the category hierarchy.

5.

Click Move. The category you selected is moved to the new destination.

104

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Managing Users and Groups

Lesson Summary You should now be able to: • Explain user management • Explain group management • Manage users and groups • Manage categories

2011

© 2011 SAP AG. All rights reserved.

105

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform Lesson Overview This lesson explains how rights work in SAP BusinessObjects Business Intelligence platform.

Lesson Objectives After completing this lesson, you will be able to: • • • •

Describe how rights work in SAP BusinessObjects Business Intelligence platform Manage security settings for objects Work with access levels List the inheritance rules

Business Example Rights play an important role in SAP BusinessObjects Business Intelligence platform because they allow you to control access to your SAP BusinessObjects Business Intelligence platform content, rights enable you to delegate user and group management to different departments, and to provide your IT people with administrative access to servers and server groups.

Terminology Access levels Access levels are groups of rights that users frequently need. They allow administrators to set common security levels quickly and uniformly rather than requiring that individual rights be set one by one. SAP BusinessObjects Business Intelligence platform comes with several predefined access levels. These predefined access levels are based on a model of increasing rights: Beginning with View and ending with Full Control, each access level builds upon the rights granted by the previous level. Inheritance

106

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Top-level folder security Top-level folder security is the default security set for each specific object type (for example Universes, Web Intelligence Application, Groups and Folders). Each object type has its own top-level folder (root folder) that all the objects below inherit rights from. If there are any access levels common to certain object types that apply throughout the whole system, set them at the top-level folder specific to each object type. For example, if the Sales group requires the View access level to all folders, you can set this at the root level for Folders. Folder-level security Folder-level security enables you to set access-level rights for a folder and the objects contained within that folder. While folders inherit security from the top-level folder (root folder), subfolders inherit the security of their parent folder. Rights set explicitly at the folder level override inherited rights. Object-level security Objects in SAP BusinessObjects Business Intelligence platform inherit security from their parent folder. Rights set explicitly at the object level override inherited rights.

Setting Rights How rights work in SAP BusinessObjects Business Intelligence platform Rights are the base units for controlling user access to the objects, users, applications, servers, and other features in SAP BusinessObjects Business Intelligence platform. They play an important role in securing the system by specifying the individual actions that users can perform on objects. Besides allowing you to control access to your SAP BusinessObjects Business Intelligence platform content, rights enable you to delegate user and group management to different departments, and to provide your IT people with administrative access to servers and server groups. It is important to recognize the difference between rights set on objects or folders, and rights set on principals (the users and groups) who access them. For example, to give a manager access to a particular folder, in the Folders area, you add the manager to the access control list (the list of principals who have access to an object) for the folder. You cannot give the manager access by configuring the manager's rights settings in the "Users and Groups" area. The rights settings for the manager in the Users and Group area are used to grant other principals (such as delegated administrators) access to the manager as an object in the system. In this way, principals are themselves like objects for others with greater rights to manage.

2011

© 2011 SAP AG. All rights reserved.

107

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Each right on an object can be granted, denied, or unspecified. The SAP BusinessObjects Business Intelligence platform security model is designed such that, if a right is left unspecified, the right is denied. Additionally, if settings result in a right being both granted and denied to an user or group, the right is denied. There is an important exception to this rule. If a right is explicitly set on a child object that contradicts the rights inherited from the parent object, the right set on the child object overrides the inherited rights. This exception applies to users who are members of groups as well. If an user is explicitly granted a right that the user's group is denied, the right set on the user overrides the inherited right.

Advanced rights settings To provide you with full control over object security, the CMC allows you to set advanced rights. These advanced rights provide increased flexibility as you define security levels for objects at a granular level. Use advanced rights settings, for instance, if you need to customize a principal's rights to a particular object or set of objects. Most importantly, use advanced rights to explicitly deny a user or group any right that should not be permitted to change when, in the future, you make changes to group memberships or folder security levels. The following table summarizes the options that you have when you set advanced rights. Advanced rights

108

Rights option

Description

Granted

The right is granted to a principal.

Denied

The right is denied to a principal.

Not Specified

The right is unspecified for a principal. By default, rights set to Not Specified are denied.

Apply to Object

The right applies to the object. This option becomes available when you click Granted or Denied.

Apply to Sub Objects

The right applies to sub-objects. This option becomes available when you click Granted or Denied.

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Type-specific rights Type-specific rights are rights that affect specific object types only, such as Crystal reports, folders, or access levels. Type-specific rights consist of the following: •

General rights for the object type These rights are identical to general global rights (for example, the right to add, delete, or edit an object), but you set them on specific object types to override the general global rights settings.

•

Specific rights for the object type These rights are available for specific object types only. For example, the right to export a report's data appears for Crystal reports but not for Word documents.

The diagram Type-specific rights example illustrates how type-specific rights work. Here right 3 represents the right to edit an object. Blue Group is denied Edit rights on the top-level folder and granted Edit rights for Crystal reports in the folder and subfolder. These Edit rights are specific to Crystal reports and override the rights settings on a general global level. As a result, members of Blue Group have Edit rights for Crystal reports but not the XLF file in the subfolder.

Figure 17: Type-specific rights example

2011

© 2011 SAP AG. All rights reserved.

109

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Type-specific rights are useful because they let you limit the rights of principals based on object type. Consider a situation in which an administrator wants employees to be able to add objects to a folder but not create subfolders. The administrator grants Add rights at the general global level for the folder, and then denies Add rights for the folder object type. Rights are divided into the following collections based on the object types they apply to: •

General These rights affect all objects

•

Content These rights are divided according to particular content object types. Examples of content object types include Crystal reports, and Adobe Acrobat PDFs.

•

Application These rights are divided according to which SAP BusinessObjects Business Intelligence platform application they affect. Examples of applications include the CMC and BI launch pad.

•

System These rights are divided according to which core system component they affect. Examples of core system components include Calendars, Events, and Users and Groups.

Type-specific rights are in the Content, Application, and System collections. In each collection, they are further divided into categories based on object type.

Troubleshooting user rights Troubleshooting user rights can be a laborious undertaking for a systems administrator. The SAP BusinessObjects Business Intelligence platform contains two tools which are aimed at negating this challenge. •

Permissions Explorer The Permissions Explorer is aimed at making it easier to pinpoint the source of inherited user rights.

•

Security Query The Security Query tool enables an administrator to list which objects a user can access and why. It also enables the administrator to interactively make changes to the security settings from the query result.

110

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Managing security settings for objects in the CMC You can manage security settings for most objects in the CMC with the security options on the Manage menu. These options let you assign principals to the access control list for an object, view the rights that a principal has, and modify the rights that the principal has to an object.

2011

© 2011 SAP AG. All rights reserved.

111

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Viewing rights for a principal on an object Use You can view the rights for a principal on an object using the Permissions Explorer tool. The Permissions Explorer saves time when trying to determine where inherited rights originate from in SAP BusinessObjects BI platform.

Procedure 1.

Select the object for which you want to view security settings.

2.

Click Manage → User Security to display the access control list for the object. The User Security dialog box appears and displays the access control list for the object.

3.

Select a principal from the access control list, and click View Security. The Permissions Explorer dialog launches and displays a list of effective rights for the principal on the object. In addition, the Permissions Explorer lets you do the following: • •

•

Browse for another principal whose rights you want to view. Filter the rights displayed according to these criteria: – assigned rights – granted rights – unassigned rights – from access level – object type – the name of the right Sort the list of rights displayed in ascending or descending order according to these criteria: – – – –

collection type right name right status (granted, denied, or unspecified)

Additionally, you can click one of the links in the Source column to display the source of inherited rights.

112

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Checking security settings for a principal In some cases, you may want to know the objects to which a principal has been granted or denied access. You can use a security query to do this. Security queries let you determine which objects a principal has certain rights to and manage user rights. For each security query, you provide the following information: •

Query Principal You specify the user or group that you want to run the security query for. You can specify one principal for each security query.

•

Query Permission You specify the right or rights you want to run the security query for, the status of these rights, and the object type these rights are set on. For example, you can run a security query for all reports that a principal can refresh, or for all reports that a principal cannot export.

•

Query Context You specify the CMC areas that you want the security query to search. For each area, you can choose whether to include sub-objects in the security query. A security query can have a maximum of four areas.

Access level Access levels are groups of rights that users frequently need. They allow administrators to set common security levels quickly and uniformly rather than requiring that individual rights be set one by one. You can do the following with access levels: • • • • • • •

2011

Copy an existing access level, make changes to the copy, rename it, and save it as a new access level. Create, rename, and delete access levels. Modify the rights in an access level. Trace the relationship between access levels and other objects in the system. Trace the relationship Replicate and manage access levels across sites. Use one of the predefined access levels in SAP BusinessObjects Business Intelligence platform to set rights quickly and uniformly for many principals.

© 2011 SAP AG. All rights reserved.

113

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Predefined access levels SAP BusinessObjects Business Intelligence platform comes with several predefined access levels. These predefined access levels are based on a model of increasing rights: Beginning with View and ending with Full Control, each access level builds upon the rights granted by the previous level. The following table summarizes the rights that each predefined access level contains. Predefined access levels

114

Access level

Description

Rights involved

View

If set on the folder level, a principal can view the folder, objects within the folder, and each object's generated instances. If set at the object level, a principal can view the object, its history, and its generated instances.

• •

Schedule

A principal can generate instances by scheduling an object to run against a specified data source once or on a recurring basis. The principal can view, delete, and pause the scheduling of instances that they own. They can also schedule to different formats and destinations, set parameters and database logon information, choose servers to process jobs, add contents to the folder, and copy the object or folder.

View access-level rights, plus:

© 2011 SAP AG. All rights reserved.

• • • • • • • •

View objects View document instances

Schedule the document to run Define server groups to process jobs Copy objects to another folder Schedule to destinations Print the report's data Export the report's data Edit objects that the user owns Delete instances that the user owns

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Access level

Description

Rights involved •

View On Demand

Full Control

A principal can refresh data on demand against a data source.

Schedule access-level rights, plus:

A principal has full administrative control of the object.

All available rights, including:

•

• • • • •

No Access

Pause and resume document instances that the user owns

The user or group is not able to access the object or folder.

Refresh the report's data

Add objects to the folder Edit objects Modify rights users have to objects Delete objects Delete instances

No rights

Hint: The following rights are required when using these access levels. Access level task

Rights required

Create an access level Add right on the Access Levels top-level folder View granular rights in an access level

View right on the access level

Assign an access level View right on the access level to a principal on an Use the Access Level for Security Assignment object right on the access level Modify Rights right on the object, or Securely Modify Rights right on the object and the principal

2011

© 2011 SAP AG. All rights reserved.

115

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

Access level task

Rights required

Modify an access level

View and Edit rights on the access level

BOE310

Delete an access level View and Delete rights on the access level Clone an access level

View right on the access level Copy right on the access level Add right on the Access Levels top-level folder

Custom access levels In addition to the predefined access levels, you can also create and customize your own, which can greatly reduce administrative and maintenance costs associated with security. Consider a situation in which an administrator must manage two groups, sales managers and sales employees. Both groups need to access five reports in the SAP BusinessObjects Business Intelligence platform system, but sales managers require more rights than sales employees. The predefined access levels do not meet the needs of either group. Instead of adding groups to each report as principals and modifying their rights in five different places, the administrator can create two new access levels, Sales Managers and Sales Employees. The administrator then adds both groups as principals to the reports and assigns the groups their respective access levels. When rights need to be modified, the administrator can modify the access levels. Because the access levels apply to both groups across all five reports, the rights those groups have to the reports are quickly updated.

Inheritance Rights are set on an object for a principal in order to control access to the object however, it is impractical to set the explicit value of every possible right for every principal on every object. Consider a system with 100 rights, 1000 users, and 10,000 objects: to set rights explicitly on each object would require the CMS to store billions of rights in its memory, and, importantly, require that an administrator manually set each one. Inheritance patterns resolve this impracticality. With inheritance, the rights that users have to objects in the system come from a combination of their memberships in different groups and subgroups and from objects which have inherited rights from parent folders and subfolders. These users can inherit rights as the result of group membership; subgroups can inherit rights from parent groups; and both users and groups can inherit rights from parent folders.

116

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

By default, users or groups who have rights to a folder inherit the same rights for any objects that are subsequently published to that folder. Consequently, the best strategy is to set the appropriate rights for users and groups at the folder level first, then publish objects to that folder. SAP BusinessObjects Business Intelligence platform recognizes two types of inheritance: 1. 2.

Group inheritance Folder inheritance

Group inheritance Group inheritance allows principals to inherit rights as the result of group membership. Group inheritance proves especially useful when you organize all of your users into groups that coincide with your organization's current security conventions.

Figure 18: Group inheritance example 1

In Group inheritance example 1, you can see how group inheritance works. Red Group is a subgroup of Blue Group, so it inherits Blue Group's rights. In this case, it inherits right 1 as granted, and the rest of the rights as unspecified. Every member of Red Group inherits these rights. In addition, any other rights that are set on the subgroup are inherited by its members. In this example, Green User is a member of Red Group, and thus inherits right 1 as granted, rights 2, 3, 4, and 6 as not specified, and Right 5 as denied. When group inheritance is enabled for a user who belongs to more than one group, the rights of all parent groups are considered when the system checks credentials. The user is denied any right that is explicitly denied in any parent group, and the user is denied any right that remains completely not specified thus, the user is granted only those rights that are granted in one or more groups (explicitly or through access levels) and never explicitly denied.

2011

© 2011 SAP AG. All rights reserved.

117

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

In Group inheritance example 2, Green User is a member of two unrelated groups. From Blue Group, he inherits rights 1 and 5 as "granted" and the rest as not specified; however, because Green User also belongs to Red Group, and Red Group has been explicitly denied right 5, Green User's inheritance to right 5 from Blue Group is overridden.

Figure 19: Group inheritance example 2

Folder inheritance Folder inheritance allows principals to inherit any rights that they have been granted on an object's parent folder. Folder inheritance proves especially useful when you organize SAP BusinessObjects Business Intelligence platform content into a folder hierarchy that reflects your organization's current security conventions. For example, suppose that you create a folder called Sales Reports, and you provide your Sales group with View On Demand access to this folder. By default, every user that has rights to the Sales Reports folder will inherit the same rights to the reports that you subsequently publish to this folder. Consequently, the Sales group will have View On Demand access to all of the reports, and you need set the object rights only once, at the folder level. In Folder inheritance example, rights have been set for Red Group on a folder. Rights 1 and 5 have been granted, while the rest have been left unspecified. With folder inheritance enabled, members of Red Group have rights on the object level identical to the rights of the group on the folder level. Rights 1 and 5 are inherited as granted, while the rest have been left unspecified.

118

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Figure 20: Folder inheritance example

Rights override Rights override is a rights behavior in which rights that are set on child objects override the rights set on parent objects. Rights override occurs under the following circumstances: • •

In general, the rights that are set on child objects override the rights that are set on parent objects. In general, the rights that are set on subgroups or members of groups override the rights that are set on groups.

You do not need to disable inheritance to set customized rights on an object. The child object inherits the rights settings of the parent object except for the rights that are explicitly set on the child object. Also, any changes to rights settings on the parent object apply to the child object. Rights override example 1 illustrates how rights override works on parent and child objects. Blue User is denied the right to edit a folder's contents; the rights setting is inherited by the subfolder. However, an administrator grants Blue User Edit rights to a document in the subfolder. The Edit right that Blue User receives on the document overrides the inherited rights that come from the folder and subfolder.

2011

© 2011 SAP AG. All rights reserved.

119

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Figure 21: Rights override example 1

Rights override example 2 illustrates how rights override works on members and groups. Blue Group is denied the right to edit a folder; Blue Subgroup inherits this rights setting. However, an administrator grants Blue User, who is a member of Blue Group and Blue Subgroup, Edit rights on the folder. The Edit rights that Blue User receives on the folder override the inherited rights that come from Blue Group and Blue Subgroup.

120

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Figure 22: Rights override example 2

Complex rights override illustrates a situation where the effects of rights override are less obvious. Purple User is a member of subgroups 1A and 2A, which are in Groups 1 and 2, respectively. Groups 1 and 2 both have Edit rights on the folder. 1A inherits the Edit rights that Group 1 has, but an administrator denies Edit rights to 2A. The rights settings on 2A override the rights settings on Group 2 because of rights override. Therefore, Purple User inherits contradictory rights settings from 1A and 2A. 1A and 2A do not have a parent-child relationship, so rights override does not occur; that is, one sub-group's rights settings do not override another's because they have equal status. In the end, Purple User is denied Edit rights because of the “denial-based” rights model in SAP BusinessObjects Business Intelligence platform.

2011

© 2011 SAP AG. All rights reserved.

121

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Figure 23: Complex rights override

Rights override lets you make minor adjustments to the rights settings on a child object without discarding all inherited rights settings. Consider a situation in which a sales manager needs to view confidential reports in the Confidential folder. The sales manager is part of the Sales group, which is denied access to the folder and its contents. The administrator grants the manager View rights on the Confidential folder and continues to deny the Sales group access. In this case, the View rights granted to the sales manager override the denied access that the manager inherits from membership in the Sales group.

Scope of rights Scope of rights refers to the ability to limit the extent of rights inheritance. To define the scope of a right, you decide whether the right applies to the object, its sub-objects, or both. By default, the scope of a right extends to both objects and sub-objects. Scope of rights can be used to protect personal content in shared locations. Consider a situation in which the finance department has a shared Expense Claims folder that contains Personal Expense Claims subfolders for each employee. The employees want to be able to view the Expense Claims folder and add objects to it, but they also want to protect the contents of their Personal Expense Claims subfolders. The administrator grants all employees View and Add rights on the Expense Claims folder, and limits the scope of these rights to the Expense Claims folder only. This means that the

122

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

View and Add rights do not apply to sub-objects in the Expense Claims folder. The administrator then grants employees View and Add rights on their own Personal Expense Claims subfolders. Scope of rights can also limit the effective rights that a delegated administrator has. For example, a delegated administrator may have Securely Modify Rights and Edit rights on a folder, but the scope of these rights is limited to the folder only and does not apply to its sub-objects. The delegated administrator cannot grant these rights to another user on one of the folder's sub-objects.

Guidelines for planning security Use the following principles as a guide for planning security in SAP BusinessObjects Business Intelligence plaform.

General Rules •

• • •

•

•

Each right is also referred to as an Access Control Entry (ACE) in SAP BusinessObjects BI platform and can be set to one of three states: Explicit Denial (D), Explicit Grant (G), Not Specified (NS). A list of all ACEs is referred to as an Access Control List (ACL). A combination of ACEs and states (for example Right to Schedule - G, Right to View - G, Right to Modify - D, and so on) makes up an Access Level. There are predefined Access Levels: No Access (Not Specified state for all rights), Full Control, View, Schedule, View On Demand, and there are also Custom Access Levels that administrators can create on their own. Groups and users in the system are also referred to as principals. In SAP BusinessObjects BI platform you give rights to principals on objects (folder, document, application) If a user belongs to more than one group, and there is a conflict in rights assignments between the groups to which the user belongs to, the Denied (D) right wins over a Granted (G) right, and the Granted (G) right wins over a Not Specified (NS) right (Deny > Grant > Not Specified). – – – –

2011

G + NS = G G+D=D G + D + NS = D D + NS = D

© 2011 SAP AG. All rights reserved.

123

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Hierarchical Rules •

•

•

•

• • • • •

124

A more specific assignment typically wins over a less specific assignment, such as a user over a group, a subgroup over a parent group, and a sub-object over a parent object. Groups may contain subgroups and/or users. Subgroups and users are treated as members of the parent group. In other words, if a parent group is given an explicit Grant right to view the folder, the user who is a member of a subgroup of the parent group will have the right to view the folder as well. In this case only the parent group is listed in the User Security dialog box on the folder while the subgroup is not. The rights given to the group closest to the user take precedence (without breaking inheritance). In other words, if a user is a member of a subgroup and is not added to the parent group, the user's effective rights will come from the subgroup, and not from the parent group. In this case both the parent group and the subgroup are listed in the access rights dialog box on the folder. The rights between the parent group and the subgroup may be the same or conflicting, but rights assigned to the subgroup will take precedence. If a user is added to both the subgroup and to the parent group, the calculation of effective rights is the same as if a user belonged to two groups on the same level. Refer to the rule G + D + NS = D. User rights are of explicit type on the object, but of inherited type on sub-objects. Group rights are always of inherited type. Explicit rights (the user's rights) on an object overwrite inherited rights (the group's rights) on the same object. Security rights can be overridden on lower levels in folder hierarchy without breaking inheritance. The administrator can combine access levels for a principal which can result in a conflict. In these cases, refer again to the rule G + D + NS = D.

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Summary of recommendations for rights administration Keep these considerations in mind for rights administration: • •

•

•

• •

•

2011

Use access levels wherever possible. These predefined sets of rights simplify administration by grouping together rights associated with common user needs. Set rights and access levels on top-level folders. Enabling inheritance will allow these rights to be passed down through the system with minimal administrative intervention. Avoid breaking inheritance whenever possible. By doing so, you can reduce the amount of time it takes to secure the content that you have added to SAP BusinessObjects Business Intelligence platform. Set appropriate rights for users and groups at the folder level, then publish objects to that folder. By default, users or groups who have rights to a folder will inherit the same rights for any object that you subsequently publish to that folder. Organize users into user groups, assign access levels and rights to the entire group, and assign access levels and rights to specific members when necessary. Create individual administrator accounts for each administrator in the system and add them to the Administrators group to improve accountability for system changes. By default, the Everyone group is granted with limited rights to top-level folders. After installation, it is recommended that you review the rights of Everyone group members and assign security accordingly.

© 2011 SAP AG. All rights reserved.

125

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

126

© 2011 SAP AG. All rights reserved.

BOE310

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Exercise 2: Administer Rights in SAP BusinessObjects Business Intelligence Platform Exercise Objectives After completing this exercise, you will be able to: • Create users and groups • Assign users to groups • Create folders and add objects to folders • Create custom access levels • Modify rights in a custom access level • Assign customer access levels for groups on the folders • Create categories and assign rights to categories • Use the Security Query tool to verify which folders a user has access to

Business Example You are required to build a security model for a company that has two divisions. All users should see the Company folder and then the division folder to which they belong. For example, a user in Division A should see the Company folder, Division A folder. However the user should not be able to see the Division B folder. There will be content (report/document objects) available on the division folder level.

Task 1: Create Groups Create the three groups Company Group, Division A Group and Division B Group in SAP BusinessObjects Business Intelligence Platform. 1.

Launch SAP BusinessObjects Business Intelligence Platform and log on to Central Management Console (CMC) with the following information. Field Name

Value

System

:6400

Username

train-##

Password

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

127

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

2.

Create a group called Company Group.

3.

Create a group called Division A Group.

4.

Create a group called Division B Group.

BOE310

Task 2: Define Subgroups Add Division A Group and Division B Group as subgroups under Company Group. 1.

Select Division A Group and add it as a subgroup under Company Group.

2.

Select Division B Group and add it as a subgroup under Company Group.

Task 3: Create Users Create two new users: DivisionA and DivisionB. 1.

Create the user DivisionA.

2.

Create the user DivisionB.

Task 4: Add Users To Groups Add users DivisionA and DivisionB to their respective groups. 1.

Add DivisionA user to Division A Group.

2.

Add DivisionB user to Division B Group.

Task 5: Create a Folder Structure Create folders for each group you created. Division A Folder and Division B Folder should be subfolders of Company Folder. 1.

Create Company Folder at the root of the All Folders level.

2.

Create Division A Folder as subgroup of Company Folder. Hint: Folders can be moved into other folders via Organize → Move to.

3.

Create Division B Folder at the root of the All Folders level.

Result Now both Division A Folder and Division B Folder appear as subfolders of Company Folder. Continued on next page

128

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Task 6: Copy an Object in the CMC Add the sample report World Sales Report to both Division A Folder and Division B Folder. 1.

Locate the World Sales Report in the CMC.

2.

Copy the World Sales Report to Division A Folder and Division B Folder.

Task 7: Create Custom Access Levels Create the custom access levels ViewThisLevelOnlyCAL and ViewScheduleCAL. 1.

Create the custom access level ViewThisLevelOnlyCAL

2.

Create the custom access level ViewScheduleCAL

Task 8: Modify Rights in an Access Level Modify the rights for ViewThisLevelOnlyCAL so that it only allows access to view the parent object, but does not allow users to view any subobjects (for example a sub folder or document within the folder, or instances under the document). Modify the rights for ViewScheduleCAL so that it allows access to view the parent object and subobjects and also allows users to schedule objects within the parent folder and subfolders. 1.

2.

Modify the rights for the ViewThisLevelOnlyCAL level to have the following: Rights Collections

Rights

General

View objects

Modify the rights for the ViewScheduleCAL access level to have the following: Rights Collections

Rights

General

Schedule document to run View objects

Task 9: Apply Top-level Folder Rights to Folders Ensure that the Everyone group and its subgroups can view the Top-level folder (root folder). This is referred to as Public Folders in BI launch pad. 1.

Launch SAP BusinessObjects BI launch pad and logon with the following information. Continued on next page

2011

© 2011 SAP AG. All rights reserved.

129

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

Field Name

Value

System

:6400

User name

DivisionA

Password



BOE310

2.

Check if your user can view the Public Folders in BI launch pad.

3.

Grant the view rights for the Everyone group on the top-level folder so your user can see the Public Folders.

4.

Launch BI launch pad and verify if your user can view the Public Folders. Field Name

Value

System

:6400

User name

DivisionA

Password



Task 10: Specify Rights for a Folder Ensure that your Company Group users and members of all the divisional subgroups can see the Company Folder located underneath the top-level folder. In addition, grant rights for the divisional groups to the divisional folders. 1.

In the CMC, enable your Company Group users to see the Company Folder.

2.

Log into BI launch pad and verify that your user has access to the company folder. Field Name

Value

System

:6400

User name

DivisionA

Password



3.

Assign rights for the divisional groups to divisional folders.

4.

Log into BI launch pad and verify that DivisionA has access to the company folder.

Continued on next page

130

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Field Name

Value

System

:6400

User name

DivisionA

Password



5.

Grant the ViewScheduleCAL custom access level to Division B Group on Division B Folder.

6.

Log into BI launch pad and verify that DivisionB has access to the company folder. Field Name

Value

System

:6400

User name

DivisionB

Password

password

Task 11: Manage Categories Create two categories and then use them to create an alternate filing system within the organization. 1.

Create a new folder Various Items Folder on the same level as your Division A folder and Division B folder.

2.

Add an existing SAP Crystal Reports object to Various Items Folder (for example Comparative Income Statement).

3.

Give your Company Group the ViewScheduleCAL access level to the Various Items Folder.

4.

Create a new category with the name: Financial Category.

5.

Rename existing documents in the divisional folders.

6.

Assign documents to the Financial Category

7.

Create the category Financial Category 2and add the same objects to this category as you added to Financial Category. Hint: You can right-click on the category and select the Add to Category option. This allows you to select multiple document to add at once. Continued on next page

2011

© 2011 SAP AG. All rights reserved.

131

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

8.

Give your Company Group the ViewThisLevelOnlyCAL access level to the root level for categories.

9.

Give your Company Group the ViewScheduleCAL access level to Financial Category and Financial Category 2.

10. Log into BI launch pad and verify that DivisionA has access to the categories. Field Name

Value

System

:6400

User name

DivisionA

Password



11. Log into BI launch pad and verify that DivisionB has access to the categories. Field Name

Value

System

:6400

User name

DivisionB

Password



Task 12: Create a Security Query Use the Security Query tool to check what rights the user DivisionA has on various objects.

132

1.

Launch the Security Query tool for user DivisionA.

2.

Create the query so it shows all the folders where Division A has the right to View objects granted.

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Solution 2: Administer Rights in SAP BusinessObjects Business Intelligence Platform Task 1: Create Groups Create the three groups Company Group, Division A Group and Division B Group in SAP BusinessObjects Business Intelligence Platform. 1.

2.

3.

Launch SAP BusinessObjects Business Intelligence Platform and log on to Central Management Console (CMC) with the following information. Field Name

Value

System

:6400

Username

train-##

Password



a)

Click Start → Programs → SAP BusinessObjects BI platform 4.0 → Custom Link to CMC home page

b)

Log on with your username and password.

Create a group called Company Group. a)

In the CMC Home, click Users and Groups.

b)

Click Manage → New → New Group.

c)

Enter the group name Company Group.

d)

Click OK.

Create a group called Division A Group. a)

4.

Repeat the steps of the previous subtask using Division A Group.

Create a group called Division B Group. a)

Repeat the steps of the previous subtask using Division B Group.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

133

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Task 2: Define Subgroups Add Division A Group and Division B Group as subgroups under Company Group. 1.

Select Division A Group and add it as a subgroup under Company Group. a)

In the CMC Home page, click Users and Groups.

b)

Select Group List from the left pane and then select Division A Group.

c)

Click Actions → Join Group. The Join Group dialog box appears.

d)

Select Company Group from the Available Groups list and click > to move it to the Destination Group(s) list.

e)

Click OK. Division A Group is added to Company Group.

2.

Select Division B Group and add it as a subgroup under Company Group. a)

Repeat the steps of the previous subtask using Division B Group. Division B Group is added to Company Group.

Continued on next page

134

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Task 3: Create Users Create two new users: DivisionA and DivisionB. 1.

Create the user DivisionA. a)

In the CMC Home page, click Users and Groups.

b)

Click Manage → New → New User. The New User dialog box appears

c)

Keep the Authentication Type as Enterprise.

d)

Type DivisionA in the Account Name field. Hint: Normally you would enter the full name, email, and description information. Use the description area to include extra information about the user or account.

e)

Enter a password in the Password field and enter the same password in the Confirm field.

f)

Deselect User must change password at next logon. Note: You are deselecting this option so you do not need to change the password, as you will later log on as this user to test your security settings.

g)

Click Create. The user is added to the system and is automatically added to the Everyone group. An inbox is automatically created for the user, as well as an Enterprise alias.

2.

Create the user DivisionB. a)

Repeat the steps of the previous subtask using DivisionB. The user is added to the system and is automatically added to the Everyone group. An inbox is automatically created for the user, as well as an Enterprise alias.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

135

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Task 4: Add Users To Groups Add users DivisionA and DivisionB to their respective groups. 1.

Add DivisionA user to Division A Group. a)

In the CMC Home page, click Users and Groups.

b)

Click User List and select your DivisionA user.

c)

Click Actions → Join Group. The Join Group dialog box appears.

d)

Select Division A Group from the Available Groups list, and click > to move it to the Destination Group(s) list.

e)

Click OK. The user DivisionA is added to Division A Group.

2.

Add DivisionB user to Division B Group. a)

Repeat the steps of the previous subtask using Division B Group. The user DivisionB is added to Division B Group.

Task 5: Create a Folder Structure Create folders for each group you created. Division A Folder and Division B Folder should be subfolders of Company Folder. 1.

Create Company Folder at the root of the All Folders level. a)

Go to the Folders area in the CMC.

b)

Select All Folder.

c)

Click Manage → New → Folder.

d)

Name the folder Company Folder and click OK. Company Folder is created at the root of the All Folders level.

Continued on next page

136

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

2.

Create Division A Folder as subgroup of Company Folder. Hint: Folders can be moved into other folders via Organize → Move to. a)

Select Company Folder.

b)

Click Manage → New → Folder.

c)

Name the folder Division A Folder and click OK. Division A Folder is created under Company Folder.

3.

Create Division B Folder at the root of the All Folders level. a)

Repeat the steps of the previous subtask using Division B Folder. Division B Folder is created under Company Folder.

Result Now both Division A Folder and Division B Folder appear as subfolders of Company Folder.

Task 6: Copy an Object in the CMC Add the sample report World Sales Report to both Division A Folder and Division B Folder. 1.

2.

Locate the World Sales Report in the CMC. a)

Go to the Folders area in the CMC..

b)

Navigate to All Folders → Report Samples → Demonstration.

Copy the World Sales Report to Division A Folder and Division B Folder. a)

Click the World Sales Report.

b)

Click Organize.

c)

Click Copy To.

d)

Navigate to All Folders → Company Folder.

e)

Select Division A Folder and click >.

f)

Select Division B Folder and click >.

g)

Click Copy. The report World Sales Report is copied to the destination folders. Continued on next page

2011

© 2011 SAP AG. All rights reserved.

137

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Task 7: Create Custom Access Levels Create the custom access levels ViewThisLevelOnlyCAL and ViewScheduleCAL. 1.

Create the custom access level ViewThisLevelOnlyCAL a)

Go to the Access Levels area in the CMC.

b)

Click Manage → New → Create Access Level. The Create New Access Level dialog box appears.

c) 2.

Name the access level ViewThisLevelOnlyCAL and click OK.

Create the custom access level ViewScheduleCAL a)

Repeat the steps of the previous subtask using ViewScheduleCAL.

Task 8: Modify Rights in an Access Level Modify the rights for ViewThisLevelOnlyCAL so that it only allows access to view the parent object, but does not allow users to view any subobjects (for example a sub folder or document within the folder, or instances under the document). Modify the rights for ViewScheduleCAL so that it allows access to view the parent object and subobjects and also allows users to schedule objects within the parent folder and subfolders. 1.

Modify the rights for the ViewThisLevelOnlyCAL level to have the following:

Continued on next page

138

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Rights Collections

Rights

General

View objects

a)

In the Access Levels area, select the ViewThisLevelOnlyCAL access level.

b)

Click Actions → Included Rights. The Included Rights dialog box appears and displays a list of effective rights.

c)

Click Add/Remove Rights. The Included Rights dialog box displays the rights collections for the access level in the navigation list. The General Global Rights section is expanded by default.

d)

Under General Global Rights, grant the View objects right. Clear the option Apply to Sub Object. Note: This Custom Access Level allows access to view the parent object, but does not allow the user to view any subobjects (for example a sub folder or document within the folder, or instances under the document)

e) 2.

Click OK then Close.

Modify the rights for the ViewScheduleCAL access level to have the following:

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

139

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

Rights Collections

Rights

General

Schedule document to run View objects

BOE310

a)

In the Access Levels area, select the ViewScheduleCAL access level.

b)

Click Actions → Included Rights. The Included Rights dialog box appears and displays a list of effective rights.

c)

Click Add/Remove Rights. The Included Rights dialog box displays the rights collections for the access level in the navigation list. The General Global Rights section is expanded by default.

d)

Under General Global Rights, grant the Schedule document to run right and the View objects right. Keep the options Apply to Object and Apply to Sub Object selected. Note: This Custom Access Level allows access to view the parent object and subobjects. This Custom Access Level also allows the user to schedule objects within the parent folder and subfolders.

e)

Click OK then Close.

Task 9: Apply Top-level Folder Rights to Folders Ensure that the Everyone group and its subgroups can view the Top-level folder (root folder). This is referred to as Public Folders in BI launch pad. 1.

Launch SAP BusinessObjects BI launch pad and logon with the following information.

Continued on next page

140

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

2.

Field Name

Value

System

:6400

User name

DivisionA

Password



a)

Click Start → Programs → SAP BusinessObjects BI platform 4.0 → Custom Link to BI Launchpad.

b)

Log on with your username and password.

Check if your user can view the Public Folders in BI launch pad. a)

Click the Documents tab.

b)

No Folders tab should appear on the left pane. The Public Folders are not visible at this time. DivisionA user can only see some private folders and Inbox under My Documents.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

141

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

3.

BOE310

Grant the view rights for the Everyone group on the top-level folder so your user can see the Public Folders. a)

In the CMC go to the Folders area.

b)

Select the top-level entry All Folders.

c)

Click Manage → Top-Level Security → All Folders. Hint: Click OK if you are prompted with a warning message that indicates you are able to set the Security for the Top-Level Folder. The User Security: Root Folder dialog box appears and displays the access control list for the object.

d)

Click Everyone and then click Assign Security The Assign Security dialog box appears.

e)

Select the ViewThisLevelOnlyCAL access level from Available Access Levels and click > to move it to Assigned Access Levels. Note: Note: You are granting view rights for everyone on the top-level folder (Public Folders level) but not to subfolders.

f) 4.

Click OK and Close to complete the process.

Launch BI launch pad and verify if your user can view the Public Folders. Field Name

Value

System

:6400

User name

DivisionA

Password



a)

Log into BI launch pad with your username and password.

b)

Click the Documents tab.

c)

Select the Folders tab on the left pane. The Public Folders is now visible to the DivisionA user. You are able to see the Public Folders but no folders underneath. Remember the ViewThisLevelOnlyCAL custom access level applies to this object only but does not apply to sub objects (subfolders). Continued on next page

142

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Task 10: Specify Rights for a Folder Ensure that your Company Group users and members of all the divisional subgroups can see the Company Folder located underneath the top-level folder. In addition, grant rights for the divisional groups to the divisional folders. 1.

In the CMC, enable your Company Group users to see the Company Folder. a)

In the Folders area, select Company Folder.

b)

Click Manage → User Security. The User Security dialog box appears and displays the access control list.

c)

Click Add Principals. The Add Principals dialog box appears.

2.

d)

Click Group List and select Company Group from Available users/groups. Click > to bring your group to Selected user/groups.

e)

Click Add and Assign Security.

f)

Select the ViewThisLevelOnlyCAL access level and click > to bring it to Assigned Access Levels.

g)

Click OK and Close.

Log into BI launch pad and verify that your user has access to the company folder.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

143

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

Field Name

Value

System

:6400

User name

DivisionA

Password



BOE310

a)

Click Start → Programs → SAP BusinessObjects BI platform 4.0 → Custom Link to BI Launchpad.

b)

Log on with your username and password.

c)

Click the Documents tab.

d)

Select the Folders tab on the left pane.

e)

Expand Public Folders. Company Folder is now visible to the Division A user. However you are not able to see the divisional subfolders. Remember the ViewThisLevelOnlyCAL custom access level applies to this object only but does not apply to sub objects (subfolders).

3.

Assign rights for the divisional groups to divisional folders. a)

In the CMC go to the Folders area and select Division A Folder.

b)

Click Manage → User Security. The User Security dialog box appears and displays the access control list.

c)

Click Add Principals. The Add Principals dialog box appears.

d)

Click User List and select DivisionA from Available users/groups. Click > to bring your group to Selected user/groups.

e)

Click Add and Assign Security.

f)

Select the ViewScheduleCAL access level and click > to bring it to Assigned Access Levels. Note: Remember the ViewScheduleCAL custom access level is applied to the divisional folder and to subobjects (objects within the folder).

g)

Click OK and Close.

Continued on next page

144

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

4.

Log into BI launch pad and verify that DivisionA has access to the company folder. Field Name

Value

System

:6400

User name

DivisionA

Password



a)

Click Start → Programs → SAP BusinessObjects BI platform 4.0 → Custom Link to BI Launchpad.

b)

Log on with your username and password.

c)

Click the Documents tab.

d)

Select the Folders tab on the left pane.

e)

Expand Public Folders. The Division A folder should now be visible. You should be able to see the documents you added to the folder and the options to view and schedule should also be available.

5.

Grant the ViewScheduleCAL custom access level to Division B Group on Division B Folder. a)

6.

Repeat the steps of subtask 3 using Division B Group.

Log into BI launch pad and verify that DivisionB has access to the company folder. Field Name

Value

System

:6400

User name

DivisionB

Password

password

a)

Repeat the steps of subtask 4 using DivisionB. You should be able to see the Division B Folder. You should not be able to see the Division A folder. You should be able to see the documents you added to the folder and the options to view or schedule should be available.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

145

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

BOE310

Task 11: Manage Categories Create two categories and then use them to create an alternate filing system within the organization. 1.

2.

3.

Create a new folder Various Items Folder on the same level as your Division A folder and Division B folder. a)

Go to the Folders area in the CMC.

b)

Select Company Folder.

c)

Click Manage → New → Folder.

d)

Name the folder Various Items Folder and click OK.

Add an existing SAP Crystal Reports object to Various Items Folder (for example Comparative Income Statement). a)

Navigate to the folder: All Folders → Report Samples → Demonstration.

b)

Click the Comparative Income Statement.

c)

Click Organize.

d)

Click Copy To.

e)

Navigate to All Folders → Company Folder → Various Items Folder and click >

f)

Click Copy.

g)

Click Various Items Folder. The report is copied to the destination folder.

Give your Company Group the ViewScheduleCAL access level to the Various Items Folder. a)

In the Folders area, select Various Items Folder.

b)

Click Manage → User Security. The User Security dialog box appears and displays the access control list.

c)

Select Company Group and click Assign Security.

d)

Select the ViewScheduleCAL access level and click > to bring it to Assigned Access Levels. Note: Note: This ensures that all members from all divisions can see the documents inside the Various Items Folder.

e)

Click OK and Close. Continued on next page

146

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

4.

Create a new category with the name: Financial Category. a)

Go to the Categories area of the CMC.

b)

Click Manage → New → Category. The Create Category dialog box appears.

5.

6.

c)

Give the new category the name Financial Category.

d)

Click OK.

Rename existing documents in the divisional folders. a)

Go to the Folders area of the CMC.

b)

Navigate to All Folders → Company Folder → Division A Folder.

c)

Select the existing document from the Division A Folder.

d)

Click Manage → Properties.

e)

Change the title of the documents to Division A Document.

f)

Navigate to the Division B Folder and rename its documents to Division B Document.

Assign documents to the Financial Category a)

Select the Division A Document from the Division A Folder.

b)

Click Manage → Properties. In the Categories section, expand Corporate Category and select Financial Category.

c)

Click Save & Close.

d)

Repeat the same steps for Division B Document located in the Division B Folder.

e)

Repeat the same steps for Comparative Income Statement located in the Various Items Folder. Financial Category should now contain three items.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

147

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

7.

BOE310

Create the category Financial Category 2and add the same objects to this category as you added to Financial Category. Hint: You can right-click on the category and select the Add to Category option. This allows you to select multiple document to add at once. a)

Go to the Categories area of the CMC.

b)

Click Manage → New → Category. The Create Category dialog box appears.

c)

Give the new category the name: Financial Category 2.

d)

Click OK.

e)

Right-click Financial Category 2 and select Add to Category.

f)

Navigate the folders to select the three objects: Division A_document, Division B_document, and Comparative Income Statement. Click OK. Financial Category 2 should now contain three items. Note: You have proved that documents can exist in only one folder but can belong to more than one category.

Continued on next page

148

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

8.

Give your Company Group the ViewThisLevelOnlyCAL access level to the root level for categories. a)

In the Categories area of the CMC, select Categories at the root level.

b)

Click Manage → Top-Level Security → All Categories. Click OK if prompted with a warning window. The User Security dialog box appears and displays the access control list.

c)

Click Add Principals. The Add Principals dialog box appears.

9.

d)

Click Group List and select Company Group from Available users/groups. Click > to bring your group to Selected user/groups.

e)

Click Add and Assign Security.

f)

Select the ViewThisLevelOnlyCAL access level and click > to bring it to Assigned Access Levels.

g)

Click OK and Close.

Give your Company Group the ViewScheduleCAL access level to Financial Category and Financial Category 2. a)

In the Categories area of the CMC, select Financial Category.

b)

Click Manage → User Security. The User Security dialog box appears and displays the access control list.

c)

Select Company Group and click Assign Security.

d)

Select the ViewScheduleCAL access level and click > to bring it to Assigned Access Levels.

e)

Click OK and Close.

f)

Repeat the same steps for Financial Category 2.

10. Log into BI launch pad and verify that DivisionA has access to the categories.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

149

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

Field Name

Value

System

:6400

User name

DivisionA

Password



BOE310

a)

Click Start → Programs → SAP BusinessObjects BI platform 4.0 → Custom Link to BI Launchpad.

b)

Log on with your username and password.

c)

Click the Documents tab.

d)

Select the Categories tab on the left pane. You should be able to see Financial Category and Financial Category 2.

e)

Click Financial Category. You should see the Division A Document and Comparative Income Statement objects, but you should not see the Division B Document.. Note: The results of this exercise prove that to be able to see objects belonging to categories you need to have adequate rights to the object within the parent folder where the object resides.

11. Log into BI launch pad and verify that DivisionB has access to the categories.

Continued on next page

150

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Field Name

Value

System

:6400

User name

DivisionB

Password



a)

Click Start → Programs → SAP BusinessObjects BI platform 4.0 → Custom Link to BI Launchpad.

b)

Log on with your username and password.

c)

Click the Documents tab.

d)

Select the Categories tab on the left pane. You should be able to see Financial Category and Financial Category 2.

e)

Click Financial Category. You should see the Division B Document and Comparative Income Statement objects, but you should not see the Division A Document. Note: The results of this exercise prove that to be able to see objects belonging to categories you need to have adequate rights to the object within the parent folder where the object resides.

Task 12: Create a Security Query Use the Security Query tool to check what rights the user DivisionA has on various objects. 1.

Launch the Security Query tool for user DivisionA. a)

In the Users and Groups area of the CMC, navigate to User List.

b)

Select DivisionA.

c)

Navigate to Manage → Tools → Create Security Query.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

151

Unit 3: Securing Users and Groups in SAP BusinessObjects Business Intelligence Platform

2.

BOE310

Create the query so it shows all the folders where Division A has the right to View objects granted. a)

Click Browse within the Query Permission section. This allows you to select which right was granted, denied, or not specified throughout the system for a given principal.

b)

Inside the Browse for Query Permission dialog box select the Granted option (first column) for the View objects right and click OK.

c)

Navigate to the Query Context area. Click the check box in front of a section and select the Query sub objects check box.

d)

Click Browse.

e)

Inside the Browse for Query Context dialog box select All Folders and click OK.

f)

Click OK. The Query Results dialog opens and shows which folders this user has access to.

152

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Administering Rights in SAP BusinessObjects Business Intelligence Platform

Lesson Summary You should now be able to: • Describe how rights work in SAP BusinessObjects Business Intelligence platform • Manage security settings for objects • Work with access levels • List the inheritance rules

2011

© 2011 SAP AG. All rights reserved.

153

Unit Summary

BOE310

Unit Summary You should now be able to: • Explain user management • Explain group management • Manage users and groups • Manage categories • Describe how rights work in SAP BusinessObjects Business Intelligence platform • Manage security settings for objects • Work with access levels • List the inheritance rules

154

© 2011 SAP AG. All rights reserved.

2011

BOE310

Test Your Knowledge

Test Your Knowledge

2011

1.

Name the two accounts in SAP BusinessObjects Business Intelligence platform.

2.

What are categories?

3.

What is an access level?

4.

What is a principal?

© 2011 SAP AG. All rights reserved.

155

Test Your Knowledge

BOE310

Answers 1.

Name the two accounts in SAP BusinessObjects Business Intelligence platform. Answer: Administrator, Guest.

2.

What are categories? Answer: Like folders, categories are used for organizing documents in SAP BusinessObjects Business Intelligence platform. Categories provide an alternative organizational structure that makes it easier for users to sort and find documents.

3.

What is an access level? Answer: Access levels are groups of rights that users frequently need. They allow administrators to set common security levels quickly and uniformly rather than requiring that individual rights be set one by one.

4.

What is a principal? Answer: A principal is a user or a group.

156

© 2011 SAP AG. All rights reserved.

2011

Unit Summary

157

BOE310

© 2011 SAP AG. All rights reserved.

2011

Unit Summary

158

BOE310

© 2011 SAP AG. All rights reserved.

2011

Unit 4 Managing Applications Security Unit Overview This unit describes how to manage and secure applications in SAP BusinessObjects Business Intelligence platform.

Unit Objectives After completing this unit, you will be able to: • •

Describe the concept of applications security Describe rights for applications

Unit Contents Lesson: Securing your applications in SAP BusinessObjects Business Intelligence Platform ................................................................ 160 Procedure: Manage Web Intelligence settings ............................. 163 Exercise 3: Set application security for Web Intelligence ................. 165

2011

© 2011 SAP AG. All rights reserved.

159

Unit 4: Managing Applications Security

BOE310

Lesson: Securing your applications in SAP BusinessObjects Business Intelligence Platform Lesson Overview This lesson explains how to manage application and securing applications in SAP BusinessObjects Business Intelligence platform.

Lesson Objectives After completing this lesson, you will be able to: • •

Describe the concept of applications security Describe rights for applications

Business Example Applying security to applications allows system administrators to provide more system management control to different departments or business units in a way that enables system administrators to maintain control of how much access the departments or business units have. For example, you may have a group of individuals from various departments who are responsible for some basic administrative tasks. In order for these users to perform these basic administrative tasks, they require access to the Central Management Console. As the system administrator, you can grant this group access to the Central Management Console while denying access to everyone else.

160

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Securing your applications in SAP BusinessObjects Business Intelligence Platform

What is application security The Applications management area of the CMC allows you to change the appearance and functionality of web applications such as the CMC and BI launch pad, without doing any programming. You can also modify access to applications for users, groups, and administrators by changing the rights associated with each one. • • • • • • • • • • • • • • • • • • • • • •

Advanced Analysis Alerting BI launch pad BI workspaces Central Management Console Crystal Reports Dashboard Design Discussions Information Designer Interactive Analysis LifeCycle Manager Monitoring Open Document Platform Search Report Conversion Tool SAP BusinessObjects Mobile Translation management tool Universe design tool Upgrade management tool VisualDiff Application Web Service Widgets for SAP BusinessObjects BI platform

You can use rights to control user access to certain features of applications. The Applications area in the CMC lets you assign principals to the access control list for an application, view the rights that a principal has, and modify the rights that the principal has to an application.

2011

© 2011 SAP AG. All rights reserved.

161

Unit 4: Managing Applications Security

BOE310

Figure 24: What is application security

162

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Securing your applications in SAP BusinessObjects Business Intelligence Platform

Manage Web Intelligence settings Use You can control which features your users have access to for Interactive Analysis documents by setting properties for the Interactive Analysis application.

Procedure 1.

Go to the Applications area of the CMC and select Web Intelligence.

2.

Click Manage → Properties. The Properties dialog box opens with display options.

3.

Define the display options that you want.

4.

Option

Description

Dimensions and details

Use the options in this area to define how added data appears in reports; change the font style, text color, and background color. A cell preview automatically shows your changes. Click OK when you are finished.

Fluctuating values (numerical measures)

Use the options in this area to modify and format the page heading; change the font style, text color, and background color. A cell preview automatically shows your changes. Click OK when you are finished.

Embedded image properties

Enter the maximum embedded image size.

Quick display mode properties

In the appropriate fields, enter the maximum vertical records, maximum horizontal records, minimum width of page, minimum height of page, right padding value, and bottom padding value.

Click Save & Close.

Setting application security The SAP BusinessObjects Business Intelligence platform Applications management area of the Central Management Console enables system administrators to manage applications and control which users have access to them.

2011

© 2011 SAP AG. All rights reserved.

163

Unit 4: Managing Applications Security

BOE310

Each SAP BusinessObjects BI application has its own set of rights that can be granted or denied. There are no global rights or predefined access levels for SAP BusinessObjects BI platform applications.

Web Intelligence In order to give a user access to the Web Intelligence application the administrator must grant rights in the following areas: • • • • •

Web Intelligence Application Folder Web Intelligence Content Universe Universe Connection

It is always recommended to create custom access levels with the necessary application and content specific security, and then apply those to principals on folders and objects.

164

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Securing your applications in SAP BusinessObjects Business Intelligence Platform

Exercise 3: Set application security for Web Intelligence Exercise Objectives After completing this exercise, you will be able to: • Build content plan and group structure for Web Intelligence users • Create Web Intelligence users and groups • Setup custom access levels • Configure security and application security on various objects for the Web Intelligence application • Test security settings

Business Example You are tasked with building a content structure and setting up the security for a small organization. The organization uses Web Intelligence. You need to create a new Folder and add a new Web Intelligence document to this newly created Folder. You also need to create two new groups and two new users who will be consuming Web Intelligence documents within the Folder in different ways. You need to configure the system security so that the WebiConsumer is only allowed to view existing Web Intelligence documents and is not allowed to refresh documents against the database or create brand new Web Intelligence documents. In addition, you have to enable the WebiCreator to view existing Web Intelligence documents, refresh existing Web Intelligence documents against the database, and also create new Web Intelligence documents in the folder.

Task 1: Setup Content and Group Structure Create two new groups: WebIConsumer Group and WebICreator Group. Create two new users: WebIConsumer and WebICreator. Add the users to their corresponding groups. Finish this task by creating a new folder: WebI Folder. 1.

Launch SAP BusinessObjects Business Intelligence Platform and log on to Central Management Console (CMC) with the following information.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

165

Unit 4: Managing Applications Security

BOE310

Field Name

Value

System

:6400

User name

train-##

Password



2.

Create the following groups: WebIConsumer Group and WebICreater Group.

3.

Create the following users: WebIConsumer and WebICreator

4.

Add the users WebIConsumer and WebICreator to their respective groups.

5.

Create the new folder WebI Folder within CMC to store Web Intelligence documents.

Task 2: Create a Web Intelligence Document Create a Web Intelligence document based on the eFashion universe and save the document to the newly created WebI Folder. 1.

Launch SAP BusinessObjects Web Intelligence and select the eFashion universe as data source. Logon with the following details: Field Name

Value

System

:6400

Username

train-##

Password



2.

Create a query with the name of the store manager and the sale revenue.

3.

Change the report title to Store Revenue.

4.

Save your document to the WebI Folder in SAP BusinessObjects Business Intelligence Platform.

Task 3: Create Custom Access Levels Create two custom access levels: WebIConsumerCAL and WebCreatorCAL. 1.

Create the custom level WebIConsumerCAL with the following right:

Continued on next page

166

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Securing your applications in SAP BusinessObjects Business Intelligence Platform

2.

Rights Collections

Apply these rights to both Apply to Object and Apply to Sub Objects

General

View objects

Create the custom level WebICreatorCAL with the following right: Rights Collections General

Apply these rights to both Apply to Object and Apply to Sub Objects Add objects to the folder Edit objects View document instances View objects

Application → Web Intelligence

Grant all rights

Content → Web Intelligence

Grant all rights

System → Connection System → Relational Connection System → Universe

Grant all rights

Task 4: Configure Security Configure the security on folders, application, connection, and universe so that users who are granted with WebIConsumerCAL and WebICreatorCAL are allowed to perform the necessary tasks. 1.

Configure security on the top level folder and the WebI Folder for WebIConsumer Group so that the members of these group can see the top level folder and the Webl Folder to which they are given rights.

2.

Configure security on the top level folder and the WebI Folder for WebICreator Group so that the members of these group can refresh, edit and create new Web Intelligence documents within these folders.

3.

Configure security and apply WebIConsumerCAL to WebIConsumer Group on the Web Intelligence Application.

4.

Configure security and apply WebICreatorCAL to WebICreator Group on the Web Intelligence application so that the members of the WebICreator Group can perform all the necessary tasks within Web Intelligence. Continued on next page

2011

© 2011 SAP AG. All rights reserved.

167

Unit 4: Managing Applications Security

BOE310

5.

Configure security on the Universe so that the members of the WebIConsumer Group can perform all the necessary tasks against the Universe (eFashion universe).

6.

Configure security on the Universe so that the members of the WebICreator Group can perform all the necessary tasks against the Universe (eFashion universe).

7.

Configure security on the Connection so that the members of the WebIConsumer Group can perform all the necessary tasks within the Web Intelligence.

8.

Configure security on the Connection so that the members of the WebICreator Group can perform all the necessary tasks within the Web Intelligence.

Task 5: Test Your Security Model Log into the system first as WebIConsumer and test the users and application rights. Then log into the system as WebICreator to verify the user and application rights. 1.

2.

168

Launch SAP BusinessObjects Business Intelligence Platform and log on to Central Management Console (CMC) with the following information. Field Name

Value

System

:6400

User name

WebIConsumer

Password



Launch SAP BusinessObjects Business Intelligence Platform and log on to Central Management Console (CMC) with the following information. Field Name

Value

System

:6400

User name

WebICreator

Password



© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Securing your applications in SAP BusinessObjects Business Intelligence Platform

Solution 3: Set application security for Web Intelligence Task 1: Setup Content and Group Structure Create two new groups: WebIConsumer Group and WebICreator Group. Create two new users: WebIConsumer and WebICreator. Add the users to their corresponding groups. Finish this task by creating a new folder: WebI Folder. 1.

2.

Launch SAP BusinessObjects Business Intelligence Platform and log on to Central Management Console (CMC) with the following information. Field Name

Value

System

:6400

User name

train-##

Password



a)

Click Start → Programs → SAP BusinessObjects BI platform 4.0 → Custom Link to CMC home page

b)

Log on with your username and password.

Create the following groups: WebIConsumer Group and WebICreater Group. a)

In the CMC Home, click Users and Groups.

b)

Click Manage → New → New Group.

c)

Enter the group name WebIConsumer Group.

d)

Click OK.

e)

Repeat the same steps to create WebICreater Group.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

169

Unit 4: Managing Applications Security

3.

BOE310

Create the following users: WebIConsumer and WebICreator a)

In the CMC Home page, click Users and Groups.

b)

Select the WebICreator Group and click Manage → New → New User. The New User dialog box appears

c)

Keep the Authentication Type as Enterprise.

d)

Type WebIConsumer in the Account Name field. Hint: Normally you would enter the full name, email, and description information. Use the description area to include extra information about the user or account.

e)

Enter a password in the Password field and enter the same password in the Confirm field.

f)

Deselect User must change password at next logon. Note: You are deselecting this option so you do not need to change the password, as you will later log on as this user to test your security settings.

g)

Click Create. The user is added to the system and is automatically added to the Everyone group. An inbox is automatically created for the user, as well as an Enterprise alias.

h) 4.

Repeat the same steps to create WebICreator.

Add the users WebIConsumer and WebICreator to their respective groups. a)

In the CMC Home page, click Users and Groups.

b)

Click User List and select WebIConsumer.

c)

Click Actions → Join Group. The Join Group dialog box appears.

d)

Select WebIConsumer Group from the Available Groups list, and click > to move it to the Destination Group(s) list.

e)

Click OK.

f)

Repeat the above steps to add WebICreator to WebICreator Group.

Continued on next page

170

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Securing your applications in SAP BusinessObjects Business Intelligence Platform

5.

Create the new folder WebI Folder within CMC to store Web Intelligence documents. a)

Go to the Folders area in the CMC.

b)

Select All Folder.

c)

Click Manage → New → Folder.

d)

Name the folder WebI Folder and click OK. WebI Folder is created at the root of the All Folders level.

Task 2: Create a Web Intelligence Document Create a Web Intelligence document based on the eFashion universe and save the document to the newly created WebI Folder. 1.

Launch SAP BusinessObjects Web Intelligence and select the eFashion universe as data source. Logon with the following details: Field Name

Value

System

:6400

Username

train-##

Password



a)

Click Start → Programs → SAP BusinessObjects BI platform 4.0 → SAP BusinessObjects BI platform Client Tools → Interactive Analysis Desktop.

b)

Select Universe.

c)

Log on with your username and password.

d)

Click Log On. The Universe dialog box appears and displays a list of available universes.

e)

Select eFashion and click Select.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

171

Unit 4: Managing Applications Security

2.

3.

4.

BOE310

Create a query with the name of the store manager and the sale revenue. a)

Navigate to eFashion → Store and select Store name. Drag Store name to the Result Objects pane on the right.

b)

Navigate to Measures and select Sales revenue. Drag Sales revenue to the Result Objects pane on the right.

c)

Click Run query.

Change the report title to Store Revenue. a)

Select the Page Setup tab followed by the Rename tab.

b)

Change the name to Store Revenue.

c)

Press Enter to continue.

Save your document to the WebI Folder in SAP BusinessObjects Business Intelligence Platform. a)

Navigate to the toolbar and click Save.

b)

Click the SAP BusinessObjects Business Intelligence Platform hostname on the left pane and navigate to Public Folders → WebI Folder.

c)

Enter the name Store Revenue and click Save.

Task 3: Create Custom Access Levels Create two custom access levels: WebIConsumerCAL and WebCreatorCAL. 1.

Create the custom level WebIConsumerCAL with the following right: Rights Collections

Apply these rights to both Apply to Object and Apply to Sub Objects

General

View objects

a)

Go to the Access Levels area in the CMC.

b)

Click Manage → New → Create Access Level. The Create New Access Level dialog box appears.

c)

Name the access level WebIConsumerCAL and click OK.

d)

In the Access Levels area, select the WebIConsumerCAL access level.

e)

Click Actions → Included Rights. Continued on next page

172

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Securing your applications in SAP BusinessObjects Business Intelligence Platform

The Included Rights dialog box appears and displays a list of effective rights. f)

Click Add/Remove Rights. The Included Rights dialog box displays the rights collections for the access level in the navigation list. The General Global Rights section is expanded by default.

g)

Under General Global Rights, grant the following rights. Select the options Apply to Object and Apply to Sub Object. Rights Collections

Apply these rights to both Apply to Object and Apply to Sub Object

General

View objects

Note: This Custom Access Level allows you to view Web Intelligence documents. h) 2.

Click OK and then Close.

Create the custom level WebICreatorCAL with the following right: Rights Collections General

Apply these rights to both Apply to Object and Apply to Sub Objects Add objects to the folder Edit objects View document instances View objects

Application → Web Intelligence

Grant all rights

Content → Web Intelligence

Grant all rights

System → Connection System → Relational Connection System → Universe

Grant all rights

a)

Go to the Access Levels area in the CMC.

b)

Click Manage → New → Create Access Level. The Create New Access Level dialog box appears. Continued on next page

2011

© 2011 SAP AG. All rights reserved.

173

Unit 4: Managing Applications Security

BOE310

c)

Name the access level WebICreatorCAL and click OK.

d)

In the Access Levels area, select the WebICreatorCAL access level.

e)

Click Actions → Included Rights. The Included Rights dialog box appears and displays a list of effective rights.

f)

Click Add/Remove Rights. The Included Rights dialog box displays the rights collections for the access level in the navigation list. The General Global Rights section is expanded by default.

g)

Grant the following rights in different Rights Collections. Select the options Apply to Object and Apply to Sub Object. Rights Collections

General

Apply these rights to both Apply to Object and Apply to Sub Objects • • • •

Add objects to the folder Edit objects View document instances View objects

Application → Web Intelligence

Grant all rights

Content → Web Intelligence

Grant all rights

System → Connection System → Relational Connection System → Universe

Grant all rights

Note: This Custom Access Level allows you to create, edit and refresh Web Intelligence documents. h)

Click OK and then Close.

Continued on next page

174

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Securing your applications in SAP BusinessObjects Business Intelligence Platform

Task 4: Configure Security Configure the security on folders, application, connection, and universe so that users who are granted with WebIConsumerCAL and WebICreatorCAL are allowed to perform the necessary tasks. 1.

Configure security on the top level folder and the WebI Folder for WebIConsumer Group so that the members of these group can see the top level folder and the Webl Folder to which they are given rights. a)

In the CMC go to the Folders area.

b)

Select the top-level folder All Folders.

c)

Click Manage → Top-Level Security → All Folders. Hint: Click OK if you are prompted with a warning message that indicates you are able to set the Security for the Top-Level Folder.

d)

Click Add Principals. The Add Principals dialog box appears and displays the access control list for the object.

e)

Navigate to Group List → WebIConsumer Group and click > to select the group.

f)

Click Add and Assign Security. The Assign Security dialog box appears.

2.

g)

Select the WebIConsumerCAL access level from Available Access Levels and click > to move it to Assigned Access Levels.

h)

Click OK and Close to complete the process.

Configure security on the top level folder and the WebI Folder for WebICreator Group so that the members of these group can refresh, edit and create new Web Intelligence documents within these folders. a)

Repeat the steps of the previous task using WebICreatorCAL on WebICreator Group.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

175

Unit 4: Managing Applications Security

3.

BOE310

Configure security and apply WebIConsumerCAL to WebIConsumer Group on the Web Intelligence Application. a)

In the CMC go to the Applications area.

b)

Select Web Intelligence.

c)

Click Manage → User Security.

d)

Click Add Principals. The Add Principals dialog box appears and displays the access control list for the object.

e)

Navigate to Group List → WebI Consumer Group and click > to select the group.

f)

Click Add and Assign Security. The Assign Security dialog box appears.

4.

g)

Select the WebIConsumerCAL access level from Available Access Levels and click > to move it to Assigned Access Levels.

h)

Click OK and Close to complete the process.

Configure security and apply WebICreatorCAL to WebICreator Group on the Web Intelligence application so that the members of the WebICreator Group can perform all the necessary tasks within Web Intelligence. a)

Repeat the steps of the previous subtask using WebICreatorCAL on WebICreator Group.

Continued on next page

176

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Securing your applications in SAP BusinessObjects Business Intelligence Platform

5.

Configure security on the Universe so that the members of the WebIConsumer Group can perform all the necessary tasks against the Universe (eFashion universe). a)

In the CMC go to the Universes area.

b)

Select the top level Universes folder.

c)

Click Manage → Top-Level Security → All Universes. Hint: Click OK if you are prompted with a warning message that indicates you are able to set the Security for the Top-Level Folder.

d)

Click Add Principals. The Add Principals dialog box appears and displays the access control list for the object.

e)

Navigate to Group List → WebI Consumer Group and click > to select the group.

f)

Click Add and Assign Security. The Assign Security dialog box appears.

6.

g)

Select the WebIConsumerCAL access level from Available Access Levels and click > to move it to Assigned Access Levels.

h)

Click OK and Close to complete the process.

Configure security on the Universe so that the members of the WebICreator Group can perform all the necessary tasks against the Universe (eFashion universe). a)

Repeat the steps of the previous subtask using WebICreatorCAL on WebICreator Group.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

177

Unit 4: Managing Applications Security

7.

BOE310

Configure security on the Connection so that the members of the WebIConsumer Group can perform all the necessary tasks within the Web Intelligence. a)

In the CMC go to the Connections area.

b)

Select the top level Connections folder.

c)

Click Manage → Top-Level Security → All Connections. Hint: Click OK if you are prompted with a warning message that indicates you are able to set the Security for the Top-Level Folder.

d)

Click Add Principals. The Add Principals dialog box appears and displays the access control list for the object.

e)

Navigate to Group List → WebIConsumer Group and click > to select the group.

f)

Click Add and Assign Security. The Assign Security dialog box appears.

8.

g)

Select the WebIConsumerCAL access level from Available Access Levels and click > to move it to Assigned Access Levels.

h)

Click OK and Close to complete the process.

Configure security on the Connection so that the members of the WebICreator Group can perform all the necessary tasks within the Web Intelligence. a)

Repeat the steps of the previous subtask using WebICreatorCAL on WebICreator Group.

Task 5: Test Your Security Model Log into the system first as WebIConsumer and test the users and application rights. Then log into the system as WebICreator to verify the user and application rights. 1.

Launch SAP BusinessObjects Business Intelligence Platform and log on to Central Management Console (CMC) with the following information.

Continued on next page

178

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Securing your applications in SAP BusinessObjects Business Intelligence Platform

Field Name

Value

System

:6400

User name

WebIConsumer

Password



a)

Click Start → Programs → SAP BusinessObjects BI platform 4.0 → Custom Link to CMC home page

b)

Log on with your username and password.

c)

Navigate to the WebI Folder. You should be able to see WebI Folder and Store Revenue report.

d)

Click Manage → New. You should not be able to create any new folder or add any object to this folder.

e)

Select the Store Revenue report and click View. You should be able to view the content of the document but you should not be able to refresh or modify the existing document. An error message appears when you refresh this document because you do not have the right to access data returned by this universe.

f) 2.

Log off the system.

Launch SAP BusinessObjects Business Intelligence Platform and log on to Central Management Console (CMC) with the following information.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

179

Unit 4: Managing Applications Security

BOE310

Field Name

Value

System

:6400

User name

WebICreator

Password



a)

Click Start → Programs → SAP BusinessObjects BI platform 4.0 → Custom Link to CMC home page

b)

Log on with your username and password.

c)

Navigate to the WebI Folder. You should be able to see WebI Folder and Store Revenue report.

d)

Click Manage → New. You should be able to create new folders or add new objects to this folder.

e)

Right-click the Store Revenue report and select View. You should be able to view the content of the document.

f)

Click the Refresh button. You should be able to refresh or modify the existing document.

g)

180

Log off the system.

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Securing your applications in SAP BusinessObjects Business Intelligence Platform

Lesson Summary You should now be able to: • Describe the concept of applications security • Describe rights for applications

2011

© 2011 SAP AG. All rights reserved.

181

Unit Summary

BOE310

Unit Summary You should now be able to: • Describe the concept of applications security • Describe rights for applications

182

© 2011 SAP AG. All rights reserved.

2011

BOE310

Test Your Knowledge

Test Your Knowledge

2011

1.

What is application security?

2.

Where do you apply application security?

© 2011 SAP AG. All rights reserved.

183

Test Your Knowledge

BOE310

Answers 1.

What is application security? Answer: Application security is used to control the functionality that users and groups have to the SAP BusinessObjects Business Intelligence applications.

2.

Where do you apply application security? Answer: You apply it in the applications management area of the CMC.

184

© 2011 SAP AG. All rights reserved.

2011

Unit Summary

185

BOE310

© 2011 SAP AG. All rights reserved.

2011

Unit Summary

186

BOE310

© 2011 SAP AG. All rights reserved.

2011

Unit 5 Distributing Content using Scheduling and Alerting Unit Overview This unit describes how to distribute content in SAP BusinessObjects Business Intelligence platform.

Unit Objectives After completing this unit, you will be able to: • • • • • • • • • • • • • • •

Describe the benefits of scheduling reports List the scheduling options Schedule a Web Intelligence document Schedule a Crystal report Schedule other objects Manage instance information Set limits for instances Define a calendar Create a calendar Schedule objects with a calendar Describe what are events Describe the types of events that can used with scheduling. Enable Alerting for an event Subscribe to and unsubscribe from an alert Manage alerting settings

Unit Contents Lesson: Scheduling objects ....................................................... 189 Procedure: Set a recurrence pattern for an object ......................... 193

2011

© 2011 SAP AG. All rights reserved.

187

Unit 5: Distributing Content using Scheduling and Alerting

BOE310

Procedure: Set notification for an instance’s success or failure.......... 196 Procedure: Set your destination to default .................................. 199 Procedure: Set your destination to file location............................. 200 Procedure: Set an FTP server as the destination .......................... 202 Procedure: Send an object by email ......................................... 205 Procedure: Schedule an object to a BI Inbox destination ................. 207 Procedure: Select a cache format for Web Intelligence documents ..... 210 Procedure: Schedule an object for a user or group........................ 211 Procedure: Schedule an object to run based on an event ................ 213 Procedure: Schedule an object to trigger an event ........................ 214 Lesson: Managing instances ...................................................... 216 Procedure: Manage instances for an object ................................ 218 Procedure: Set limits for instances........................................... 221 Lesson: Managing Calendars ..................................................... 223 Procedure: Create a calendar ................................................ 225 Procedure: Add dates to a calendar ......................................... 230 Procedure: Delete a calendar................................................. 231 Lesson: Managing Events ......................................................... 233 Procedure: Create a file-based event........................................ 236 Procedure: Create a schedule-based event ................................ 238 Procedure: Create a custom event........................................... 240 Procedure: Trigger a custom event .......................................... 241 Lesson: Working with Alerting..................................................... 243 Procedure: Enable Alerting for an event Alerting .......................... 248 Procedure: Subscribe to an alert ............................................. 249 Exercise 4: Manage alerting and events .................................... 251

188

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Scheduling objects

Lesson: Scheduling objects Lesson Overview This lesson explains how to schedule objects.

Lesson Objectives After completing this lesson, you will be able to: • • • • •

Describe the benefits of scheduling reports List the scheduling options Schedule a Web Intelligence document Schedule a Crystal report Schedule other objects

Business Example Scheduling ensures reports contain the most recent data and enables you to run resource-intensive reports during non-peak hours. Learning about the different scheduling options will help you maximize the business intelligence potential of SAP BusinessObjects BI platform.

About Scheduling Scheduling is a process which allows you to run an object automatically at specified times. When you schedule an object, you choose the recurrence pattern that you want and specify additional parameters to control exactly when and how often the object will be run. At the time you schedule an object, the system creates a scheduled instance. Although a scheduled instance appears in the History dialog box of a respective object (with a status of Recurring or Pending), it contains only object and schedule information—it does not contain any data. When the system runs the object, it creates an output instance for the object (for example, a report or program instance). A report instance contains actual data from the database. A program instance is a text file that contains the standard output and standard error produced when the program object was run. Output instances also appear in the History dialog box of an object and have a status of Success or Failed.

2011

© 2011 SAP AG. All rights reserved.

189

Unit 5: Distributing Content using Scheduling and Alerting

BOE310

For end users to schedule and run objects, they must use a web-based client such as BI launch pad or a custom web application. BI launch pad is designed primarily to schedule objects and view reports, whereas the CMC enables you to manage and administer objects in addition to scheduling objects and viewing reports.

Recurrence patterns When scheduling an object, you can choose from the recurrence patterns summarized by the following table. Recurrence patterns Recurrence pattern Description Now

The object runs as soon as you click Schedule.

Once

190

The object runs only once. It can be run now or in the future, or when a specified event has occurred.

Hourly

The object is run every hour. You specify at what time it will start, as well as a start and end date.

Daily

The object is run every day. It can be run once or several times a day. You can specify at what time it will run, as well as a start and end date.

Weekly

The object is run every week. It can be run once a week or several times a week. You can specify on which days and at what time it will run, as well as a start and end date.

Monthly

The object is run every month or every several months. You can specify on which days of the month and at what time it will run, as well as a start and end date.

Day of Month

The object is run on a certain day of every month. You can specify the day it will run, as well as a start and end date

First Monday of Month

The object is run on the first Monday of every month. You can specify a start and end date.

Last Day of Month

The object is run on the last day of every month. You can specify a start and end date.

Day of Week of Month

The object is run on a particular day of a particular week every month. You can specify the day and the week, as well as the start and end date.

Calendar

The object is run on the dates specified in a calendar that has previously been created.

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Scheduling objects

Run options and parameters After you choose a recurrence pattern, you must configure the run options and parameters for that recurrence option. This section describes the Run parameters for scheduling an object. Run options and parameters

2011

Run option

Description

X and N variables

Applies to certain Daily and Monthly recurrence patterns only. When you select a Run option that contains these variables, the system displays their default values. You can then change these values as needed. For example, if you select the Daily recurrence pattern and the Every N hour(s) and X minute(s) Run option, you could specify to run the report every 4 (X) hours and 30 (N) minutes. If you don't change the X or N value, the system will run the report every hour.

Run Days

These options appear if you select the Weekly recurrence pattern. You can choose the days of the week on which you want your job to run by deleting the check boxes of the appropriate days.

Start Time

Applies to most but not all recurrence patterns and Run options. The default is the current date and time. The system will run the object according to the schedule that you specified, as soon as it can, after the Start Time has passed. For example, if you specify a start time that is three months into the future, the system won't run the object until the start date has passed, even if all the other criteria are met. After that, the system will run the report at the specified time.

© 2011 SAP AG. All rights reserved.

191

Unit 5: Distributing Content using Scheduling and Alerting

192

BOE310

Run option

Description

End Time

Applies to most, but not all, recurrence patterns and Run options. The default is the current time and a date in the distant future, to ensure an object will be run indefinitely. Specify a different End Time if required. Once the End Time has passed, the system no longer runs the object.

Number of retries allowed

Always applies. The number of times the system attempts to process an object if the first attempt is not successful. By default, the number is zero.

Retry interval in seconds

Always applies. The period, in seconds, that the system will wait before it attempts to process the object again if the first attempt is unsuccessful.

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Scheduling objects

Set a recurrence pattern for an object 1.

In the Folders management area of the CMC, select an object. To change the default schedule settings for the object, click Default Settings when you open the Schedule dialog box. Set the scheduling settings and click Save.

2.

Click Actions → Schedule. The Schedule dialog box appears, showing the default settings for the object.

3.

Enter an appropriate instance title.

4.

Click Recurrence and select the recurrence pattern you want. For example, select Weekly.

5.

Specify the parameters that you want. For example, specify Monday, Wednesday, and Friday.

6.

Set any of the other schedule options and parameters as required.

7.

Click Schedule. The system will create a scheduled instance and run it according to the schedule information you specified. You can view the scheduled instance on the History page for the object.

2011

© 2011 SAP AG. All rights reserved.

193

Unit 5: Distributing Content using Scheduling and Alerting

BOE310

Determining the success or failure of a scheduling job When you schedule an object, the scheduled instance either succeeds or fails. The conditions required for an instance's success or failure depend on the type of object you schedule: •

Report objects and Web Intelligence documents A report instance or document object instance runs successfully if it doesn't encounter any errors while processing the object or accessing the database. An instance may fail if the user does not provide the correct parameters or logon information.

•

Program objects For program objects, the program must run in order to succeed. If the program does not run, the instance is considered a failure. If the program runs, but does not perform the tasks it is supposed to, it is still considered a successful instance because the program object ran. SAP BusinessObjects BI platform does not monitor problems with the program object's code.

•

Object packages An object package may fail if one of its components fails. To change this setting, select the object and click Manage → Default Settings. Click Component Failure, and clear the Scheduled package fails upon individual component failure option. You can also set scheduling options for individual objects within an object package. You can do this by choosing the component you want to set options for in the Components section of the Scheduling dialog box. You can then set the component's notification, database logon, filters, format, print, parameters, server groups, and alert settings as applicable to the component. Note: You cannot set audit or email notification for object packages, but you can set any type of notification for the individual objects in the object package. You can also schedule object packages with events.

Notification types You can set notification at the object level. You can select unique notification options for each object, sending different types of notification for different conditions. For object packages, you can set only event notification, which will trigger an event based on success or failure of the object package. To monitor object successes and failures from a more general perspective, use the auditing functionality within SAP BusinessObjects BI platform.

194

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Scheduling objects

If notification fails, then the object instance fails. For example, if an email notification sends a message to an invalid email address, then the notification fails and the object instance is recorded as a failure in the object's history. You can choose to notify using: •

Audit notification To use audit notification, you must configure the auditing database and enable auditing for the servers. If you use auditing to monitor your SAP BusinessObjects BI platform, you can use audit notification. When you select audit notification, information about the scheduled object is written to the auditing database. You can choose to have a notification sent to the auditing database when the job runs successfully, when it fails to run, or both.

•

Email notification You can send an email as a notification of an object instance's success or failure. You can choose the sender and recipients of the email message. You can send an email when the instance fails and when it succeeds. For example, you could send your administrator an email if the report fails, but when the report succeeds you can automatically send a notification to everyone who needs the report to let them know it is now available. To enable email notification, you must have the Email SMTP destination enabled and configured on the job servers. Note: Notification of a scheduled object's success or failure is not the same as alert notification. Alert notification must be built into the design of the report. For example, alert notification can send an email to you whenever a specific value in the report exceeds $1,000,000. In this case, the notification has nothing to do with the contents of the report — it's just about whether or not the report object instance has failed or succeeded.

2011

© 2011 SAP AG. All rights reserved.

195

Unit 5: Distributing Content using Scheduling and Alerting

BOE310

Set notification for an instance’s success or failure 1.

Select an object in the Folders management area of the CMC.

2.

Click Actions → Schedule.

3.

On the navigation list, click Notification.

4.

Click the notification type (or types) you want to use. If the notification type is already being used, it will be labelled Enabled. If not, it will be labelled Not in use. Notification type

Instruction

Audit

To send a record to the auditing database when the job succeeds, select A job has been run successfully. To send a record when the job fails, select A job has failed to run.

Email

Choose whether you want to send a notification when the job fails or when it succeeds. To specify the contents and recipients of the email notification, expand the notification option(s) you have enabled, select Set the values to be used here, and provide the From and To email addresses, the email subject line, and the message. Note: By default, the notification is sent to the server's default email destination.

Alert notifications Alerts are custom messages, created in Crystal Reports, that appear when certain conditions are met by data in a report. Alerts may indicate actions to be taken by the user or information about report data. If the alert condition (as defined in Crystal Reports) is true, the alert triggers and its message displays. In BusinessObjects BI platform, you can choose to send alert notification when scheduling a report. If you enable alert notification, messages are sent through an SMTP server. You can configure email delivery options, specify the “To,”“Cc,”

196

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Scheduling objects

and “From”" fields for the email, add subject and message information, set a URL for the viewer you want the email recipient to use, and set the maximum number of alert records to send. • • •

The Alert Notification link is available only if the report object contains alerts. Alerts are triggered in the report object even if you disable alert notification. To enable alert notification, you must have the Email SMTP destination enabled and configured on the job servers.

Selecting a destination Using SAP BusinessObjects BI platform, you can configure an object or instance for output to a destination other than the default Output File Repository Server (FRS). When the system runs an object, it always stores the output instance on the Output FRS. Being able to choose an additional destination gives you the flexibility to deliver instances across your system or to destinations outside your BI platform. For example, you can set an object to have its output automatically delivered by email to other users. You can also configure object instances to print after they have been run. When you specify a destination other than the default destination, SAP BusinessObjects BI platform generates a unique name for the output file or files. To generate a file name, you can use a combination of ID, name or title of the object, owner information, or the date and time information. The available destinations are file locations, FTP, email, and BI Inboxes. The following destinations are available: • • • • •

Default destination location File location FTP location Email BI Inbox Note: You can change the destination setting for an object or instance either in the CMC or in BI launch pad. When you specify the destination settings through the CMC, these settings are also reflected in the default scheduling settings for BI launch pad.

2011

© 2011 SAP AG. All rights reserved.

197

Unit 5: Distributing Content using Scheduling and Alerting

BOE310

Setting your destination to default By default, object instances are saved to the Output File Repository Server (FRS). If you want to save instances to the FRS only and not to any other destinations, select that option.

198

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Scheduling objects

Set your destination to default 1.

In the Folders management area of the CMC, select an object.

2.

Click Actions → Schedule. For example, for a Crystal report or object package, click Destinations.

3.

Ensure that Default Enterprise Location is set in the Destination field. For example, for a Crystal report or object package, select Default Enterprise Location from the Destination list.

4.

Set the rest of your scheduling options and click Schedule.

Setting your destination to a file location When scheduling objects, you can configure the objects for output to an unmanaged disk. In this case, the system will save an output instance to both the Output File Repository Server and the specified destination. If the object is a Web Intelligence document or an object package, you cannot specify Unmanaged Disk as a destination. However, for an object package you can configure the individual objects in the object package for output to Unmanaged Disk. Note: • •

•

2011

To use a destination, you must have the destination enabled and configured on the Adaptive Job Server. The location must be a local directory on the processing server. For servers using Windows, the location can either be a Universal Naming Convention (UNC) path or a local directory. The processing server must have sufficient rights to the specified location.

© 2011 SAP AG. All rights reserved.

199

Unit 5: Distributing Content using Scheduling and Alerting

BOE310

Set your destination to file location 1.

In the Folders management area of the CMC, select an object.

2.

Click Actions → Schedule and view your destination settings. For example, for a Crystal report or object package, click Destinations.

3.

Select a file location as the destination. For example, for a Crystal report or object package, select File System from the Destination list.

4.

Choose whether or not to use the Job Server's default settings. For example, for a Crystal report or program object, select or deselect Use default settings. If you choose not to use the default settings, you must configure some additional settings to be used at schedule time. The following table summarizes these settings.

5.

Setting

Description

Directory

Type a local location, mapped location, or a Directory UNC path.

File Name

To let the system generate a file name, select Use Automatically Generated Name. To choose a file name, select Use Specific Name and enter the name you want to use. For a Web Intelligence document, you can include placeholders in the file name, or select Add file extension to include the file extension in the name.

User Name

Specify a user who has permission to write files to the destination directory.

Password

Type the password for the user.

Choose whether to enable instance cleanup. For example, for a Crystal report or program object, select or deselect Keep an instance in the history.

Continued on next page

200

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Scheduling objects

When you enable instance cleanup, the system automatically deletes the report or program instance from the Output File Repository Server to keep the number of instances on the server to a minimum. Note: These instances are needed for auditing the event, so this setting is overruled if auditing is activated for the scheduled object. 6.

Set other scheduling options as needed and click Schedule.

Setting an FTP server as the destination When scheduling objects, you can configure the objects for output to a File Transfer Protocol (FTP) server. To connect to the FTP server, you must specify a user who has the necessary rights to upload files to the server. If you specify an FTP destination, the system will save an output instance to both the Output File Repository Server and the specified destination. Note: To use a destination, you must have the destination enabled and configured on the job servers.

2011

© 2011 SAP AG. All rights reserved.

201

Unit 5: Distributing Content using Scheduling and Alerting

BOE310

Set an FTP server as the destination 1.

In the Folders management area of the CMC, select an object.

2.

Click Actions → Schedule and view your destination settings by doing one of the following: For example, for a Crystal report or object package, click Destinations.

3.

Select FTP Server as the destination. For example, for a Crystal report or an object package, select FTP Server from the Destination list.

4.

Choose whether or not to use the Job Server's default settings. For example, for a Crystal report or program object, select or deselect Use default settings. If you choose to use the default, SAP BusinessObjects BI platform will schedule an object using the Job Server's default settings. You can change these settings in the "Servers" management area. If you choose not to use the default settings, you must configure some additional settings to be used at schedule time. The following table summarizes these settings. Setting

Description

Host

Enter the FTP host information.

Port

Enter the FTP port number (the default is 21).

User Name

Specify a user who has the necessary rights to upload an object to the FTP server.

Password

Enter the user's password.

Continued on next page

202

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Scheduling objects

5.

Account

Enter the FTP account information, if required. Account is part of the standard FTP protocol, but it is rarely implemented. Provide the appropriate account only if your FTP server requires it.

Directory

Enter the FTP directory that you want the object to be saved to. To add a variable, choose a placeholder for a variable property from the list.

File Name

To let the system generate a file name, select Use Automatically Generated Name. To choose a file name, select Use Specific Name and enter the name you want to use. For a Web Intelligence document, you can include placeholders in the file name, or select Add file extension to include the file extension in the name.

Choose whether to enable instance cleanup. For example, for a Crystal report or program object, select or deselect Keep an instance in the history. When you enable instance cleanup, the system automatically deletes the report or program instance from the Output File Repository Server to keep the number of instances on the server to a minimum.

6.

Set your other scheduling options and click Schedule.

Scheduling an object to an email destination With Simple Mail Transfer Protocol (SMTP) mail support, you can choose to send the instances of an object, for example, a report instance, to one or more email destinations. After it runs the object, the system sends a copy of the output instance as an attachment to the email addresses you specified.

2011

© 2011 SAP AG. All rights reserved.

203

Unit 5: Distributing Content using Scheduling and Alerting

BOE310

When you select the Email (SMTP) destination, the system will save the instance to the Output File Repository Server as well as email it to the specified destinations. SAP BusinessObjects BI platform supports Multipurpose Internet Mail Extensions (MIME) encoding. Note: To use a destination, you must have the destination enabled and configured on the job servers.

204

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Scheduling objects

Send an object by email 1.

In the Folders management area of the CMC, select an object.

2.

Click Actions → Schedule and view your destination settings. For example, for a Crystal report or object package, click Destinations.

3.

Select Email Recipients as the destination. For example, for a Crystal report or an object package, select Email from the Destination list.

4.

Choose whether or not to use the Job Server's default settings. For example, for a Crystal report or program object, select or deselect Use default settings. If you choose not to use the default settings, you must configure some additional settings to be used at schedule time. These settings are summarized in the following table. Setting

Description

From .

Type a return address

To

Cc

Subject

Message

Type an address to which you want the object to be sent. If you want to send the object to multiple addresses, use semicolons to separate them. Type an address to which you want to send a copy of the object. If you want to send the object to multiple addresses, use semicolons to separate them. Complete the Subject field. You can choose variables to include in the Subject field by choosing them from the list beside the text box. Type a short message, if required. You can choose variables to include in the message by choosing them from the list beside the text box.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

205

Unit 5: Distributing Content using Scheduling and Alerting

Setting Deliver Document(s) as Attachment

Use Automatically Generated Name

Use Specific Name

BOE310

Description Select this check box if you want a copy of the instance attached to the email. Select this option if you want SAP BusinessObjects BI platform to generate a random file name. Select this option if you want to enter a file name. You can choose variables to include in the Use Specific Name field by choosing them from the list beside the field. If you want to add the file extension, ensure that Add file extension is selected.

5.

Choose whether to enable instance cleanup. For example, for a Crystal report or a program object, select or deselect Keep an instance in the history. When this option is selected, the system automatically deletes the report or program instance from the Output File Repository Server to keep the number of instances on the server to a minimum.

6.

Set your other scheduling options and click Schedule.

Scheduling an object to a BI Inbox destination When scheduling objects, you can configure objects for output to the BI Inboxes of users. In this case, the system will save the instance to both the Output File Repository Server and the BI Inboxes you specified. Instead of sending the actual file to BI Inboxes, you can choose to send a shortcut. Note: To use a destination, you must have the destination enabled and configured on the job servers.

206

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Scheduling objects

Schedule an object to a BI Inbox destination 1.

In the Folders management area of the CMC, select an object.

2.

Click Actions → Schedule and view your destination settings. For example, for a Crystal report or object package, click Destinations.

3.

Select BI Inbox as the destination. For example, for a Crystal report or object package, select BI Inbox from the Destination list.

4.

Choose whether to use the Job Server's default settings. For example, for a Crystal report or program object, select or deselect Use default settings.

5.

If you chose not to use the Job Server's default settings, complete the following steps: 1. 2. 3.

6.

Move users from the "Available Recipients" list to the "Selected Recipients" list. . Choose whether to use an automatically generated name or a specific name for the instance. Choose whether to send the instance as a shortcut or a copy

Choose whether to enable instance cleanup. For example, for a Crystal report or program object, select or deselect Keep an instance in the history. When this option is selected, the system automatically deletes the report or program instance from the Output File Repository Server to keep the number of instances on the server to a minimum.

7.

Set your other scheduling options and clickSchedule.

Choosing a format You can select the format that the document or report instance will be saved in when it is generated. This format will be saved to the destination you have selected. You can select from the formats summarized in the following table.

2011

© 2011 SAP AG. All rights reserved.

207

Unit 5: Distributing Content using Scheduling and Alerting

BOE310

Format Product

Format

SAP BusinessObjects Web Intelligence

SAP Crystal Reports

• • • •

Web Intelligence Microsoft Excel Adobe Acrobat Comma-separated values (CSV)

• •

SAP Crystal Reports SAP Crystal Reports read only (RPTR) Microsoft Excel (97-2003) Microsoft Excel (97-2003) (Data Only) Microsoft Excel Workbook Data only Microsoft Word (97-2003) PDF Rich Text Format (RTF) Microsoft Word - Editable (RTF) Plain Text Paginated Text Tab Separated Text (TTX) Separated Values (CSV) XML

• • • • • • • • • • • • Note: • •

• •

208

SAP Crystal Reports produces a normal editable report; the RPTR option produces a read-only Crystal report. The difference between Excel and Excel (Data only) is that Excel attempts to preserve the look and feel of your original report, while Excel (Data only) saves only the data, with each cell representing a field. The Tab-separated Values format places a tab character between values; the Separated Values format places a specified character between values. If you choose to print the report when it is scheduled, the report instance is automatically sent to the printer in SAP Crystal Reports format. This does not conflict with the format you select when scheduling the report.

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Scheduling objects

•

For Excel, Paginated Text, Tab Separated Text, and Separated Values, you specify certain formatting properties for the report. For example, if you select the CSV option, you can enter characters for the separator and delimiter.

Caching Options When the system runs a scheduled Web Intelligence document it stores the instance it generates on the Output File Repository Server. In addition, you can choose to have the system cache the report on the appropriate server by selecting a cache format for the document. If you don't select a cache format, then the system won't cache the document when it runs the document Note: To select a cache option, the output format you specified for the object must be a Web Intelligence document. If you select a different format, the cache options you specify will have no effect.

2011

© 2011 SAP AG. All rights reserved.

209

Unit 5: Distributing Content using Scheduling and Alerting

BOE310

Select a cache format for Web Intelligence documents 1.

In the Folders management area of the CMC, select a Web Intelligence document object.

2.

Click Actions → Schedule and click Caching.

3.

Select the format you want to preload the cache with. Your options are: • • •

4.

Microsoft Excel Standard HTML Adobe Acrobat

Select the locale(s) with which to preload the cache if you are scheduling a Web Intelligence document. When you schedule the Web Intelligence document, SAP BusinessObjects BI platform generates cached versions of the document in the locale(s) that you specify.

5.

Set the rest of your scheduling options and click Schedule.

Scheduling an object for a user or group The Schedule For feature allows you to generate reports that contain data for specific users only. It is intended to be used for either of the following types of objects: • •

Crystal reports that are based on Business Views, Universes, or SAP BEx Queries. Web Intelligence documents that use Universes.

Using the Schedule For feature, you can schedule an object and specify for which users you want the system to run the object. The system will run the object and generate multiple instances of the report or document. Each instance will contain data that is relevant to the individual user only. For example, you can schedule a sales report and on the Schedule For page you can specify the user names of all of your sales representatives. At the specified time, the system runs the report object and generates the individual report instances. Each instance would contain sales information for the individual sales representative only.

210

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Scheduling objects

Schedule an object for a user or group 1.

In the Folders management area of the CMC, select an object.

2.

Click Actions → Schedule.

3.

On the navigation list, click Schedule For.

4.

Select who you want to schedule the object for. • •

5.

Schedule only for myself Schedule for specified users and user groups

If you selected Schedule for specified users and user groups, navigate to and select the users and groups you would like to schedule for and click> to add them to the Selected list. Hint: If you need to remove users or groups from the Selected llist, select them and click Manage Subscribers. A new dialog opens, listing all users that are currently subscribed to this event. Because no one has subscribed yet, no users are listed.

c)

Click Add.

d)

Select User List and click train-## to move the user from the Available list to the Subscribed list.

e)

Click Add Default Subscription(s). The Edit Subscriptions dialog box appears. The My Success or Failure Schedule Event is already selected.

2.

Specify the destination of the alert. a)

Click Destinations.

b)

Ensure the My Alerts checkbox is selected.

c)

Click Save & Close. You can now see that your user has been subscribed to this alert.

3.

Schedule the document World Sales Report to trigger the schedule event. a)

In the Folders area of the Central Management Console, navigate to All Folders → Report Samples → Demonstration.

b)

Select World Sales Report and click Actions -> Schedule.

c)

Click Events in the navigation on the left.

d)

Select My Success or Failure Schedule Event from the Available Schedule Events list and click > to move it to the Events to trigger on completion list

e)

Click Schedule.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

257

Unit 5: Distributing Content using Scheduling and Alerting

BOE310

Task 4: View Alert Notification View alert notification from the home page within the BI Launchpad. 1.

Log on to BI Launchpad with the following information: Field Name

Value

Username

train-##

Password



a)

Click Start → Programs → SAP BusinessObjects BI platform→ Custom Link to BI launchpad.

b)

Log on with your username and password. Train-## has already been subscribed to an alert within the system and received a new alert notification. In the BI launchpad, you can see the alerts following the path Documents -> My Documents -> My Alerts.

c)

In the My Alerts list, double-click My Success or Failure Schedule Event. A new window opens displaying the alert details including the time the alert was triggered and the alert message.

258

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Working with Alerting

Lesson Summary You should now be able to: • Enable Alerting for an event • Subscribe to and unsubscribe from an alert • Manage alerting settings

2011

© 2011 SAP AG. All rights reserved.

259

Unit Summary

BOE310

Unit Summary You should now be able to: • Describe the benefits of scheduling reports • List the scheduling options • Schedule a Web Intelligence document • Schedule a Crystal report • Schedule other objects • Manage instance information • Set limits for instances • Define a calendar • Create a calendar • Schedule objects with a calendar • Describe what are events • Describe the types of events that can used with scheduling. • Enable Alerting for an event • Subscribe to and unsubscribe from an alert • Manage alerting settings

260

© 2011 SAP AG. All rights reserved.

2011

BOE310

Test Your Knowledge

Test Your Knowledge

2011

1.

What does it mean to schedule an object?

2.

What is the benefit of scheduling report objects?

3.

Name one of the benefits of limiting the number of historical instances for an object.

4.

How do calendars benefit the scheduling process?

© 2011 SAP AG. All rights reserved.

261

Test Your Knowledge

BOE310

Answers 1.

What does it mean to schedule an object? Answer: Scheduling an object allows a user to create an instance of a report which contains a copy of the data at the time the report was run. Report instances can be delivered in different file formats and to different destinations.

2.

What is the benefit of scheduling report objects? Answer: Creating one or more schedules for a report object is recommended when the report will generate a large amount of data. By setting large reports to run on specific servers at off-peak hours, you can reduce the impact that report processing has on your system’s resources.

3.

Name one of the benefits of limiting the number of historical instances for an object. Answer: • • •

4.

Improves usability by reducing the number of instances users must search through. Saves storage space by reducing the number of reports that must be stored Simplifies backup by reducing the number of reports that you must include.

How do calendars benefit the scheduling process? Answer: Calendars can be created to set a time series of run dates to schedule an object.

262

© 2011 SAP AG. All rights reserved.

2011

Unit Summary

263

BOE310

© 2011 SAP AG. All rights reserved.

2011

Unit Summary

264

BOE310

© 2011 SAP AG. All rights reserved.

2011

Unit 6 Publishing and Publications Unit Overview This unit describes how to publish objects in SAP BusinessObjects Business Intelligence platform.

Unit Objectives After completing this unit, you will be able to: • • • • • •

Describe the process of publishing Describe what is a publication Use profiles to burst personalized data to multiple recipients Use the publishing feature to create publications Test a publication Publish reports to SAP BusinessObjects Business Intelligence Platform

Unit Contents Lesson: Publishing personalized reports ........................................ 266 Procedure: Create a profile ................................................... 284 Procedure: Specify a global profile target ................................... 286 Procedure: Specify a profile value ........................................... 288 Procedure: Use variables as profile values ................................. 290 Exercise 5: Create a publication in SAP BusinessObjects Business Intelligence platform and publish it to Enterprise Recipients.............. 295

2011

© 2011 SAP AG. All rights reserved.

265

Unit 6: Publishing and Publications

BOE310

Lesson: Publishing personalized reports Lesson Overview This lesson explains how to publish personalized reports and documents to multiple recipients

Lesson Objectives After completing this lesson, you will be able to: • • • • • •

Describe the process of publishing Describe what is a publication Use profiles to burst personalized data to multiple recipients Use the publishing feature to create publications Test a publication Publish reports to SAP BusinessObjects Business Intelligence Platform

Business Example When you create reports and documents in SAP BusinessObjects BI platform you have the ability to publish personalized instances of these reports and documents to users using publications.

What is Publishing Publishing Publishing is the process of making documents such as Crystal reports and Web Intelligence documents publicly available for mass consumption. The contents of these documents can be distributed automatically via email or FTP, saved to disk, or managed through the SAP BusinessObjects BI platform for web viewing, archiving, and retrieval, and automated through the use of scheduling. From within BI launch pad or the CMC, you can take documents and tailor them for different users or recipients; schedule a publication to run at specified intervals; and send it to a number of destinations, including recipients' BI Inboxes and email addresses. Publication A publication is a collection of documents intended for distribution to a mass audience. Before the documents are distributed, the publisher defines the publication using a collection of metadata. This metadata includes the publication source, its recipients, and the personalization applied.

266

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

Publication Publications can help you send information through your organization more efficiently: • •

•

They allow you to easily distribute information to individuals or groups of users and personalize the information each user or group receives. They provide delivery of targeted business information to groups or individuals through a password-protected portal, across an intranet, an extranet, or the Internet. They minimize database access by eliminating the need for users to send process requests themselves. Note: You can create different types of publications based on Crystal reports or Web Intelligence documents.

Figure 30: Publication

2011

© 2011 SAP AG. All rights reserved.

267

Unit 6: Publishing and Publications

BOE310

Roles/Tasks/Rights Role

Task

Rights required

Document designer

Create the document on which None the publication is based

None

Document designer

Add the document to the SAP BusinessObjects BI platform

View and Add rights on the folder or category to which the document will be added

Document designer

Create a document to be used as a dynamic recipient source

View and Add rights on the folder or category to which the document will be added

Publisher

Create a publication

• • • • • •

Publisher

Schedule a publication

• • • • • •

268

© 2011 SAP AG. All rights reserved.

Add right on the folder where the publication is saved View right on users and groups intended as recipients View right on the profile that is used for personalization View right on documents and other documents for the publications Schedule rights on the documents Subscribe rights on the Enterprise recipients View, Schedule, Add, and Modify Security rights on the publication Delete Instance right on the publication View right on users and groups intended as recipients View right on the profile that is used for personalization View and Schedule rights on the documents View and Refresh rights on the dynamic recipient source

2011

BOE310

Lesson: Publishing personalized reports

Role

Task

Rights required •

• • •

• •

•

Publisher

Retry a failed publication instance

• •

Publisher

Redistribute a publication instance

• • •

2011

Recipient

View a publication

Recipient

Subscribe to or unsubscribe from a publication

View and Refresh rights on the document on which a delivery rule is set Data Access right on any universes used by the publication's objects Data Access right on any universe connections used Add and View rights on recipients' BI Inboxes (when you schedule to inboxes) Subscribe rights on the recipients Print right on Crystal report source documents if the publisher wants to print publication instances “Schedule on behalf of other users” right on Enterprise recipients (if you use One database fetch per recipient) Same rights required to schedule a publication Edit right on the publication instance View, Schedule, Add, and Modify Security rights on the publication Add and View rights on recipients' BI Inboxes View Instance and Edit rights on the publication instance

• •

View right on the publication View Instance right on the publication

• •

View right on the publication Subscribe right on the Enterprise recipients

© 2011 SAP AG. All rights reserved.

269

Unit 6: Publishing and Publications

BOE310

Typically, the publisher (the user who owns and schedules the publication) can view all publication instances for all recipients; the recipients can view their personalized publication instances only. This rights setup ensures maximum security for publication data because it reserves the rights to schedule publications and to view all publication instances for the publisher only. Note: If you are a publisher and want to add yourself to a publication as a recipient, use two user accounts for yourself, a Publisher account and a Recipient account. The Publisher account grants you the rights you require when you design and schedule publications, while the Recipient account grants you the rights of a typical recipient.

Publication concepts The following section details the concepts involved in the publishing process.

Report bursting During Publishing, the data in documents is refreshed against data sources and personalized before the publication is delivered to recipients. This combined process is known as “report bursting”. Depending on the size of the publication and how many recipients it is intended for, you have several report bursting methods to choose from: •

One database fetch for all recipients When you use this report bursting method, all documents in the publication are refreshed once, and then the documents are personalized and delivered to each recipient. This report bursting method uses the data source logon credentials of the publisher to refresh data. This is the default option for Web Intelligence document publications. It is also the recommended option if you want to minimize the impact of Publishing on your database. This option is secure only when the source documents are delivered as static documents. For example, a recipient who receives an Web Intelligence document in its original format can modify the document and view the data associated with other recipients. However, if the document is delivered as a PDF, the data would be secure. Note: – –

270

This option is secure for most Crystal reports regardless of whether the Crystal reports are delivered in their original format. The performance of this option varies depending on the number of recipients.

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

•

One database fetch for each batch of recipients When you use this report bursting method, the publication is refreshed, personalized, and delivered to recipients in batches. This report bursting method uses the data source logon credentials of the publisher to refresh data. The batches are based on the personalization values you specified for the recipients. The batch size varies depending on the specified personalization value and is non-configurable. This is the default option for Crystal report publications. It is also the recommended option for high-volume scenarios. With this option, you can process batches concurrently on different servers, which can greatly decrease the processing load and time required for large publications. Note: This option is unavailable for Web Intelligence documents.

•

One database fetch per recipient The data in a document is refreshed for every recipient. For example, if there are five recipients for a publication, the publication is refreshed five times. This report bursting method uses the data source logon credentials of the recipient to refresh data. This option is recommended if you want to maximize security for delivered publications. Note: Crystal reports that are based on universes or Business Views support One database fetch per recipient only to maximize security.

Delivery rules Note: This feature is unavailable for Web Intelligence documents.

2011

© 2011 SAP AG. All rights reserved.

271

Unit 6: Publishing and Publications

BOE310

Delivery rules affect how documents in publications are processed and distributed. When you set delivery rules on documents, you indicate that the publication will be delivered to recipients only if the content in the documents meets certain conditions. There are two types of delivery rules: •

Recipient delivery rule If the data in the recipient's publication instance meets the delivery rule, the publication is delivered to the recipient.

•

Global delivery rule If the data in a designated document meets the delivery rule, the publication is delivered to all recipients. Note: The designated document for a global delivery rule can be different from the document or documents used in a publication. For example, you can set a global delivery rule on a Web Intelligence document used as a dynamic recipient source instead of a Web Intelligence document in the publication.

If a publication has recipient and global delivery rules, the global delivery rule is evaluated first to determine whether the publication will be processed. If the publication meets the global delivery rule, the system then evaluates the recipient delivery rules to determine which instances to process and distribute for each recipient. How you set delivery rules depends on the document type that you want to publish. For Crystal reports, you specify a delivery rule based on a named alert that the report designer creates in the Crystal report. You can also set a delivery rule based on whether the personalized publication contains any data. The diagram Global delivery rule met illustrates how an alert-based global delivery rule works. Here the global delivery rule is set on a document in the publication. The Crystal report has a Revenue alert for values greater than 100,000. The publisher creates a global delivery rule based on the Revenue alert so that the Crystal report is only delivered to all recipients if revenue exceeds 100,000. In this case the delivery rule is met, so the Crystal report is delivered.

272

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

Figure 31: Global delivery rule met

The diagram Recipient delivery rule unmet illustrates how a recipient delivery rule works. The publisher sets a recipient delivery rule for the Crystal report so that the report is delivered to recipients only if the report contains data for that recipient. When the report is personalized for each recipient, Green Recipient does not have data in the Crystal report. This means that only Blue Recipient and Orange Recipient receive the publication.

Figure 32: Recipient delivery rule unmet

2011

© 2011 SAP AG. All rights reserved.

273

Unit 6: Publishing and Publications

BOE310

For publications that contain multiple documents and objects, each document can have its own recipient delivery rule. When you do this, you have the following options for processing and delivery: • •

If a document in the publication fails to meet its recipient delivery rule for a recipient, the entire publication will not be delivered for that recipient. If a document in the publication fails to meet its recipient delivery rule for a recipient, that document will not be delivered, but all other documents in the publication will be delivered for that recipient.

Delivery rules are useful because they allow publications intended for a large number of recipients to be processed and distributed more efficiently. Consider a situation in which a publisher at an insurance company creates a publication for its clients that contains the following objects: • • •

An insurance bill (personalized Crystal report). A monthly statement (personalized Crystal report). A payment methods brochure (PDF).

In the insurance bill, there is an Amount Due alert for values greater than zero. The publisher creates an Amount Due recipient delivery rule for the insurance bill so that the insurance bill is published and distributed only if a client owes a payment. The publisher also specifies that the entire publication will not publish if the insurance bill fails to meet the delivery rule because he does not want clients to receive a monthly statement and a brochure when they do not have to pay a bill. When the publication is run, the publication is processed and distributed only to clients who owe payments. Note: If a Crystal reports publication is scheduled to print when the publication runs, the print job occurs regardless of whether a document in a publication fails to meet a delivery rule and is not delivered to a recipient. This is because print jobs are processed during personalization, and delivery rules are applied to publications after personalization.

Dynamic recipients Dynamic recipients are publication recipients who exist outside of the SAP BusinessObjects BI platform. Dynamic recipients already have user information in an external data source, such as a database or an LDAP or AD directory, but do not have user accounts in SAP BusinessObjects BI platform. To distribute a publication to dynamic recipients, you use a “dynamic recipient source”. A dynamic recipient source is a document or custom data provider that provides information about publication recipients outside of the SAP BusinessObjects BI platform. Dynamic recipient sources allow you to easily maintain information for dynamic recipients by linking directly to the external data source and retrieving

274

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

the most recent data. They also decrease administrative costs because you do not have to create Enterprise user accounts for dynamic recipients before you distribute publications to them. Consider a situation in which a billing company distributes bills to customers who are not Enterprise users. The customer information already exists in an external database. The publisher creates a document based on the external database and uses the document as a dynamic recipient source for a publication. The customers receive the billing publication, and the dynamic recipient source allows the publisher and the system administrator to maintain up-to-date contact information. You can do the following with a dynamic recipient source: •

Deliver a single publication to dynamic recipients and Enterprise users simultaneously. Note: – –

• • •

Only one dynamic recipient source can be used for each publication. Dynamic recipients cannot unsubscribe themselves automatically from a publication.

Preview the dynamic recipients list when you create a publication. Specify whether you want to deliver the publication to all dynamic recipients, or to include or exclude certain dynamic recipients. Deliver publications to external destinations such as email or an FTP server. Note: BI Inboxes are invalid destinations for dynamic recipients because they do not have Enterprise user accounts.

To use a dynamic recipient source, you specify a column for each of the following values: • • •

Recipient ID (required) Full name of recipient Email address

The recipient ID column determines the number of dynamic recipients who will receive the publication. It is recommended that you sort the dynamic recipient source according to recipient ID.

2011

© 2011 SAP AG. All rights reserved.

275

Unit 6: Publishing and Publications

BOE310

Destinations Destinations are locations that you deliver publications to. A destination can be an Enterprise location in which a publication in stored, a BI Inbox, a email address, an FTP server, or a directory on the file system. You can specify multiple destinations for a publication. If you are publishing multiple Crystal reports, you can also merge them into a single PDF on a per destination basis. If you want to publish a publication as a single ZIP file, you can choose to zip or unzip the instances on a per destination basis (for example, zip the instances for email recipients and leave them unzipped for BI Inboxes). The following table provides descriptions of each destination type: Destination Destination

Description

Default Enterprise location

The publication is accessible from the folder in which it was created. For the default destination, you have these options:

BI Inbox

The publication is sent to the recipient's BI Inbox. For the BI Inbox destination, you have these choices:

• Merge all PDF documents (Crystal reports only). • Package the publication as a ZIP file. If you distribute a publication to the default location or a shortcut to a recipient's BI Inbox, you must select a folder that is accessible to all recipients as the publication’s location.

• • • • •

276

Deliver objects to each user. Have the target name automatically generated, to enter a specific name for it, or to choose from a list of placeholders. Have the publication sent as a shortcut or as a copy. Merge all PDF documents (Crystal reports only). Package the publication as a ZIP file.

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

Destination Email

Description The publication is sent to recipients via email. For email recipients, it is recommended that you complete the From field. If you do not complete the From field, SAP BusinessObjects BI platform uses the email address associated with the publisher's account. If the publisher's account has no email address, SAP BusinessObjects BI platform uses the Adaptive Job Server's settings. You also have these choices: • • • • •

• • • • FTP server

For FTP server, complete the Host field. If you do not complete the Host field, the option configured for the Adaptive Job Server will be used. You also have these choices: • • •

• • Local disk

2011

Deliver objects to each user. Complete the To field or enter a placeholder for the email address. Complete the Cc field. Enter the subject or select a placeholder to use for this field. Enter text in the Message field to be delivered with your publication. You can also choose from a list of placeholders to use in the Message field and embed dynamic document content in the body of the email. Attach source document instances to the email. Have the attachment name automatically generated, to enter a specific name for it, or to choose from a list of placeholders. Merge all PDF documents (Crystal reports only). Package the publication as a ZIP file.

Specify a port number, a user name and password, and an account. Enter a directory name or select a placeholder to use for this field. Have the file name automatically generated, to enter a specific name for it, or to choose from a list of placeholders. If Specific name is selected, you can also choose to add a file extension. Merge all PDF documents (Crystal reports only). Package the publication as a ZIP file.

If you choose local disk as the destination, you must enter the directory for your publication. You also have these choices:

© 2011 SAP AG. All rights reserved.

277

Unit 6: Publishing and Publications

Destination

BOE310

Description • •

• • •

Deliver objects to each user. Have the file name automatically generated, to enter a specific name for it, or to choose from a list of placeholders. If you select a specific name, you can also choose to add a file extension. Enter a user name and password to access the file location. Merge all PDF documents (Crystal reports only). Package the publication as a ZIP file.

Note: •

•

Deliver objects to each user is selected by default for all destinations. However, in some cases, you may not want to deliver objects to each user. For example, three recipients have identical personalization values and thus receive the same data in their publication instances. If you clear Deliver objects to each user, one publication instance is generated and delivered to all three recipients. If you select Deliver objects to each user, the same publication instance is delivered three times (once for each recipient). Additionally, if you are sending the publication to an FTP server or local disk destination and some recipients share identical personalization values, you can clear Deliver objects to each user to decrease overall processing time. If you clear Deliver objects to each user, any placeholders that you use when you configure your destinations will contain the publisher's information and not the recipient's.

Formats Formats define the file types that a publication's documents will be published in. A single document can be published in multiple formats, and these instances can be delivered to multiple destinations. For publications with multiple documents, you can specify a different format for each. For publications that contain Web Intelligence documents, you can publish the whole document or a report tab within the document to different formats. Any formats you choose for a document apply to all recipients of the publication. For example, you cannot publish a document as a Microsoft Excel file for one recipient and as a PDF for another. If you want the recipients to receive instances in those formats, each recipient will receive a Microsoft Excel file and a PDF. The following table provides descriptions of each format type:

278

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

Format Object Type

Format

Description

All document types

mHTML

This option publishes the document in mHTML format (the "m" stands for MIME). You can also embed a document's content as mHTML in an email: • •

PDF (.pdf)

For Crystal reports, you can embed the content of one report in an email. For Web Intelligence documents, you can embed the content of one report tab in an email

This option publishes a document as a static PDF.

Microsoft Excel file This option publishes a document as a (.xls) Microsoft Excel file and preserves as much of the original format of the document as possible. Crystal reports Data only Microsoft This option publishes a Crystal report as a Excel file (.xls) Microsoft Excel file that contains data only. XML

Crystal report (.rpt) Crystal report read-only

Microsoft Word file (.doc)

2011

This option publishes a Crystal report in XML format. This option publishes a Crystal report in its original format. This option publishes a Crystal report in read-only format. (.rptr)

This option publishes a Crystal report as a Microsoft Word file and preserves the original formatting of the Crystal report.

© 2011 SAP AG. All rights reserved.

279

Unit 6: Publishing and Publications

Object Type

Web Intelligence documents

BOE310

Format

Description This option is recommended if you expect recipients to view the publication without making many changes to it.

Editable Microsoft Word file (.doc)

This option publishes a Crystal report as a Microsoft Word file that you can edit more easily. This option is recommended if you expect recipients to view the publication and edit its content.

Rich text (.rtf)

This option publishes a Crystal report in Rich text (.rtf) format.

Plain text (.txt)

This option publishes a Crystal report in plain text format.

Paginated text (.txt)

This option publishes a Crystal report in plain text format and paginates the content of the publication.

Tab-separated text (.txt)

This option publishes a Crystal report in plain text format and separates the content in each column using tabs.

Character-separated values (.csv)

This option publishes a Crystal report as a character-separated values file.

Web Intelligence document (.wid)

This option publishes a Web Intelligence document in its original format.

Personalization Personalization Personalization is the process of filtering data in source documents so that only relevant data is displayed for publication recipients. Personalization alters the view of the data, but it does not necessarily change or secure the data being queried from the data source.

280

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

Figure 33: Personalization

The diagram Personalization illustrates how personalization works. An unpersonalized report contains data types 1, 2, and 3. When the personalization is applied to the report, users receive only the data that is relevant to them: User 2 receives only data type 2, User 1 receives only data type 1, and User 3 receives only data type 3. To personalize source documents for recipients, you can do the following: • •

If the recipients are Enterprise recipients, you can apply a profile when you design the publication. If the recipients are dynamic recipients, you can map a data field or column in the source document to data in the dynamic recipient source. For example, you can map a Customer ID field in a source document to the Recipient ID field in the dynamic recipient source.

For Crystal report publications, you specify the personalization that is used in the Personalization section. If no personalization is specified and the report contains parameters, the Publishing feature uses the personalized parameter values if these personalized parameter values do not exist, the Publishing feature uses the default parameter values. If none of these settings exist, personalization does not occur for a recipient.

2011

© 2011 SAP AG. All rights reserved.

281

Unit 6: Publishing and Publications

BOE310

Subscription A subscription allows users who were not specified as recipients of a publication to receive publication instances when the publication runs. Users can subscribe to a publication if they want to view the latest instance, or they can unsubscribe from a publication they no longer want to receive. If a user has the appropriate rights, the user can also subscribe and unsubscribe other users To subscribe to and unsubscribe from a publication, a user must have the following: •

Appropriate rights, including:

• •

– View rights on the publication. – Subscribe right on user accounts for Enterprise recipients. Access to BI launch pad or the CMC. An Enterprise account. Note: Dynamic recipients cannot subscribe and unsubscribe themselves automatically.

Profiles Profiles are objects in the SAP BusinessObjects BI platform that let you classify users and groups. They work in conjunction with publications to personalize the content that users see. Profiles link users and groups to profile values, which are values used to personalize data within a report. Profiles also use profile targets, which describe how a profile is applied to a report. By assigning different profile values, the data within a report can be tailored to specific users or groups. Many different personalized versions of the report are then delivered to your users. Often profiles reflect the roles of users and groups in an organizational structure. For example, you could have a Department profile that includes all employees in an organization. The users and groups each have profile values that reflect their roles in the organization (for example, “Finance”, “Sales”, and “Marketing”). When a publisher applies the Department profile to a publication, the employees receive data that is relevant to their department. Profiles do not control users' access to data. Profiles are used to refine or filter a document's content. When you use profiles to display a subset of the data to a user, it is not the same as restricting the user from seeing that data. If users have the appropriate rights and access to the document in its original format, they may still see the complete data for the document by viewing it in BI launch pad or the CMC. Profiles filter the view of the data; they do not change or secure the data being queried from the data source.

282

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

Profiles in publishing workflow Using a profile to personalize a publication is a two-part process. First, you must create the profile in the "Profiles" area of the CMC. Creating a profile involves these tasks: 1. 2. 3. 4.

You create a profile. You add users and groups to the profile. You assign profile values to each user and group for that profile. You specify a global profile target if necessary.

When you create the publication, you perform these tasks: 1. 2. 3.

2011

You add users and groups to a publication as recipients. You specify a local profile target for the profile to filter (for example, a field in a Crystal report). You specify the profile or profiles that will be used for personalization.

© 2011 SAP AG. All rights reserved.

283

Unit 6: Publishing and Publications

BOE310

Create a profile 1.

Go to the Profiles management area of the CMC.

2.

Click Manage → New → New Profile. The Create New Profiles dialog box appears.

3.

Type a name for the profile in the Title field.

4.

Click OK.

Profile targets and profile values To use a profile to personalize a publication, you must set profile values and profile targets for the profile.

What are profile targets? Profile targets are data sources that profile values filter and interact with to provide personalized publications. There are two types of profile targets: •

Local profile target A local profile target can be a variable in a Web Intelligence document, or a field or parameter in a Crystal report. When you use a local profile target, the source document that contains the local profile target is filtered for the publication recipients.

•

Global profile target A global profile target can be a universe. You must also specify an object within that universe. This type of profile target can filter all source documents that use the universe.

Profile values? Profile values are attributes detailed to specific users or groups when you assign these users and groups to a profile. When a profile is applied to a publication, the users and groups assigned to that profile receive versions of the publication that are filtered according to the profile values set for them. Note: If you assign profile values to both users and groups, note that inheritance works the same way for profiles as it does for security settings.

284

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

Using profile targets and profile values Profile targets and profile values enable a profile to personalize a publication for recipients. The users and groups specified for a profile receive filtered versions of the same publication that only display the data most relevant to them. Consider a situation where a global sales report is distributed to a company's regional sales teams in North America, South America, Europe, and Asia. Each regional sales team only wants to view the data that is specific to their region. The administrator creates a Regional Sales profile and adds each regional sales team to the profile as a group. The administrator assigns each regional sales team a corresponding profile value (for example, the North America Sales group is assigned “North America”). During Publishing, the publisher uses the Region field in the global sales report as a local profile target, and applies the profile to the report. The global sales report is filtered according to the profile values set for each regional sales team. When the global sales report is distributed, each regional sales team receives a personalized version that only displays regional sales data.

2011

© 2011 SAP AG. All rights reserved.

285

Unit 6: Publishing and Publications

BOE310

Specify a global profile target Use This task lets you specify a global profile target for a profile. Local profile targets are specified by the publisher during the Publishing process.

Procedure 1.

Go to the Profiles management area of the CMC.

2.

Select the profile you want to specify a profile target for.

3.

Click Actions → Profile Targets.

4.

Click Add.

5.

Select a universe from the Universe Name list.

6.

Enter a class name in the Class Name field, or click Select object from the universe.

7.

Enter a variable name in the Variable Name field, or click Select object from the universe.

8.

Click OK.

Specifying profile values You can use static values, expressions, or variables as profile values. Static values are the most common profile value type and can be used to filter any source document type. You can also enter multiple static values for a user or group for one profile. For example, a manager interested in receiving data from several departments can have “Production”, “Design”, and “Marketing” as static profile values for a Department profile. Expressions use syntax that is specific to certain source document types. You can use SAP Crystal Reports and Web Intelligence expressions to perform more complex personalization and filtering. Expressions are useful if you want to filter a range of values, or a range of values greater than or less than a given value, for a user. If you want to use user information as profile values, you can use variables for user names, full names, and email addresses. These variables are mapped to user information and act as placeholders. When you apply the profile to a publication, the system retrieves the most recent information for users.

286

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

Profile value variables are useful because they decrease administrative costs and possible errors associated with entering information manually. Consider a situation where an administrator maps an AD user to the system and adds the user to two profiles. Instead of entering the information manually for each profile value and possibly making typographical errors, the administrator can specify which variables to use for the user's data. For third-party users, if the user's information changes in an external system, the data in the SAP BusinessObjects BI platform can be updated to reflect those changes when a publication is run. Note: Static-value profile values can filter string fields in source documents only. If you map the incorrect type of field to the profile, personalization will fail. The following table summarizes the variables that can be used for the externalization of profiles. These variables can also be used for groups. You can map the Email address variable to a common email address for the entire group. When you do this, the system resolves the variable and retrieves individual email addresses for each member of the group.

2011

© 2011 SAP AG. All rights reserved.

287

Unit 6: Publishing and Publications

BOE310

Specify a profile value Use This task lets you specify a profile value for a user or group.

Procedure 1.

Go to the Profiles management area of the CMC, select a profile.

2.

Click Actions → Profile Values. The Profile Values dialog box appears.

3.

Click Add.

4.

Click Choose.

5.

Select a user or group, or multiple users or groups, and click>to move them into the list on the right side.

6.

Click OK.

7.

Enter a profile value for the selected user or group or multiple users or groups.

Continued on next page

288

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

You can use several different types of profile values. You can enter a static profile value or an expression. You can also specify variable profile values for third-party users and groups mapped to the system. •

If you want to use a value: – – –

Click Value Enter a value in the New Value field. Click Add. Hint: You can add multiple static values for a user or group. You can use %NULL% as a static profile value if the user or group does not have values that the profile can filter for personalization.

•

If you want to use a filter expression: – –

Click Filter Expression. Depending on the type of expression you want to use, enter an expression in the Web Intelligence formula expression field or the Crystal Reports expression field. Note: If you want to apply the profile to multiple document types, you can enter filter expressions in all three fields.

8.

2011

Click OK.

© 2011 SAP AG. All rights reserved.

289

Unit 6: Publishing and Publications

BOE310

Use variables as profile values Use This task lets you specify variable profile values for users when you add them to a profile. You can specify variable profile values for the user's full name, account name, or email address.

Procedure 1.

Go to the Profiles management area of the CMC, select the profile you want to add the user or group to.

2.

Click Actions → Profile Values. The Profile Values dialog box appears.

3.

Click Add.

4.

Click Choose.

5.

Select a user or group, or multiple users or groups, and click>to move them into the list on the right side.

6.

Click OK.

7.

Click Value.

8.

Select a placeholder variable from the Add placeholder list, and click Add. The following table summarizes the variables that can be used for the externalization of profiles. Variable

Description

Title

This variable is associated with the user's account name.

User's full name

This variable is associated with the user's full name.

Email address

This variable is associated with the user's email address.

Hint: These variables can also be used for groups. You can map the E-mail address variable to a common email address for the entire group. When you do this, the system resolves the variable and retrieves individual email addresses for each member of the group. Continued on next page

290

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

The placeholder appears in the Existing values field. 9.

Click OK. When you use the profile to personalize a publication, the profile value for the third-party user updates itself with the most recent user information. For example, if the user's email address has changed since the last time the publication was run, the email address used for the profile value changes the next time the publication runs.

Resolving conflicts between profiles You may encounter conflicts between profiles when users and groups have been assigned multiple profiles through inheritance. If a document is delivered to a user that has two profiles that conflict, the difference must be resolved. For example, Tony is a product manager in the Mexico office. He is assigned a profile called Region that personalizes his documents to show only data from Mexico. He is also assigned a different Management profile that personalizes the data to display data for product managers. If a document uses both of these profiles, which data will Tony see? According to one profile, he'll see data for Mexico. According to the other profile, he should see only data for product managers. SAP BusinessObjects BI platform can resolve this conflict in two ways 1.

Do not merge SAP BusinessObjects BI platform determines the different possible views of a publication that could be delivered and produces a unique view for each case. In the example, Tony would receive one publication personalized to show data for Mexico, and another publication that shows product manager data.

2.

Merge With this setting, SAP BusinessObjects BI platform again determines the different possible views of the data, but this time the non-conflicting profiles are merged. This type of profile resolution is designed for role-based security. In the example, Tony would receive a single publication personalized to show data for Mexican product managers.

2011

© 2011 SAP AG. All rights reserved.

291

Unit 6: Publishing and Publications

BOE310

Conflicts between profile values Conflicts between profile values can arise when a user inherits two contradictory profile values as a result of group membership. In general, explicitly assigned profile values override profile values inherited from group membership. A profile value assigned to a user or a subgroup overrides the profile value inherited from group membership. For example, David belongs to the North America Sales and Canada Sales groups. The Canada Sales group is a subgroup of the North America Sales group. These groups are both added to the Region profile. From the North America Sales group, David inherits a Region profile value of “North America”, and from the Canada Sales group, David inherits a Region profile value of “Canada”. In this case, the profile value that is assigned to the subgroup overrides the profile value that is assigned to the group, and David receives a publication with data for Canada. Conflicts between profile values can also arise when a user is explicitly assigned a profile value that contradicts a profile value inherited from group membership. For example, Paula belongs to the North America Sales group, which has a Region profile value of “North America”. The administrator also assigns Paula a Region profile value of “Spain”. In this case, the profile value that is assigned to the member overrides the profile value that is inherited from the group, and Paula receives a publication with data for Spain. However, sometimes a user can inherit different profile values from two different groups for one profile. Both groups are hierarchically equal; one group is not a subgroup of the other group, so one profile value does not override the other. In this case, both profile values are valid and the user receives a publication instance for each profile value. As a result of this profile value conflict, sometimes duplicate report instances are included in different publication instances and sent to the same user. For example, Sandra is a manager in two North America offices and receives a publication via email that contains two reports. Report 1 is personalized using the Region profile, for which Sandra inherits the conflicting profile values “USA” and “Canada” from group membership. Report 2 is personalized using the Role profile, for which Sandra inherits the profile value “Manager”. If there is no profile value conflict, after personalization, Sandra receives one email with a merged Report 1 instance (USA and Canada data)

292

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

and a Report 2 instance (Manager data). Instead, Sandra receives two emails: one email includes a Report 1 USA instance, the other email includes a Report 1 Canada instance, and both emails have the same Report 2 Manager instance. Hint: To avoid profile value conflicts that result in duplicate publication instances being sent, when possible, explicitly assign profile values to users instead of allowing users to inherit profile values from group membership.

Specifying profile rights You can grant or deny users and groups access to profiles. Depending on how you organize your profiles, you may have specific profiles that you want to be available only for certain employees or departments. Users with access to the CMC will only be able to see profiles they have the rights to see, so you can use rights to hide profiles that aren't applicable to a particular group. For example, by granting only the ITadmin group access to IT-related profiles, those profiles won't appear for a user from the HRadmin group; this makes the profile list easier for the HRadmin group to navigate.

2011

© 2011 SAP AG. All rights reserved.

293

Unit 6: Publishing and Publications

294

© 2011 SAP AG. All rights reserved.

BOE310

2011

BOE310

Lesson: Publishing personalized reports

Exercise 5: Create a publication in SAP BusinessObjects Business Intelligence platform and publish it to Enterprise Recipients Exercise Objectives After completing this exercise, you will be able to: • Prepare a Web Intelligence document and save it in SAP BusinessObjects Business Intelligence Platform • Create a target group who receives your publication • Create and configure a profile using variables • Create a publication using the Web Intelligence document

Business Example You need to create a group for some managers in your company. Create a new group called Manager. Add three users to the Manager group. Then create a profile for the Manager group so that each manager can receive a report with his or her own store details.

Task 1: Create a Web Intelligence Document Create a Web Intelligence document based on the eFashion universe 1.

Launch SAP BusinessObjects Web Intelligence and select the Universe eFashion as data source. Logon with the following details: Field Name

Value

System

:6400

User name

train-##

Password



Authentication

Enterprise

2.

Create a query with the name of the store manager and the sale revenue.

3.

Run the query. Continued on next page

2011

© 2011 SAP AG. All rights reserved.

295

Unit 6: Publishing and Publications

BOE310

4.

Change the report title to Sales Report by Manager.

5.

Save your document to SAP BusinessObjects Business Intelligence platform.

Task 2: Create Manager Group and Users Create a manager group and add Anderson, Barrett and Larry to this group. 1.

2.

3.

Launch SAP BusinessObjects Business Intelligence platform and log on to Central Management Console (CMC). Field Name

Value

System

:6400

User name

Administrator

Password



Create three new users: Anderson, Barrett, and Larry. Field Name

Value

Authentication Type

Enterprise

Account Name

Anderson, Barrett, Larry

Full Name

Anderson, Barrett, Larry

Password

initial

Password never expires

checked

User must change password at next logon

unchecked

Create a group called Managers and add three users to the Managers group.

Task 3: Create Profile using Variables Create a profile for the Managers group using a variable in the Profile Value so each manager can receive a report with his/her own store details. 1.

Create a new profile for the managers.

2.

Add a global profile target based on the name of the store manager in the eFashion universe Continued on next page

296

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

3.

Add profile values to personalize the data on the Managers group.

Task 4: Distribute Document Distribute the Web Intelligence document to the managers based on the profile. 1.

Build a publication based on the Web Intelligence document.

2.

Select the Managers group you built earlier to be the recipients of the publication.

3.

Use personalization to select the global profile that is used to burst the report with personalized data to each manager.

4.

Specify the destination for the publication.

5.

Publish and distribute the publication to the users based on the profile.

Task 5: Test the Result Verify the publication is sent. 1.

2.

2011

Launch the SAP BusinessObjects BI launch pad and log on as Anderson, Barrett, and Larry and check the personalized publication is received. Field Name

Value

System

:6400

User name

Anderson, Barrett, Larry

Password

initial

Open the unread message and view the document.

© 2011 SAP AG. All rights reserved.

297

Unit 6: Publishing and Publications

BOE310

Solution 5: Create a publication in SAP BusinessObjects Business Intelligence platform and publish it to Enterprise Recipients Task 1: Create a Web Intelligence Document Create a Web Intelligence document based on the eFashion universe 1.

Launch SAP BusinessObjects Web Intelligence and select the Universe eFashion as data source. Logon with the following details: Field Name

Value

System

:6400

User name

train-##

Password



Authentication

Enterprise

a)

Click Start → Programs → SAP BusinessObjects BI platform 4.0 → SAP BusinessObjects BI platform Client Tools → Interactive Analysis Desktop.

b)

Select Universe.

c)

Log on with your username and password. The Universe dialog box appears and displays a list of available universes.

d) 2.

3.

Select eFashion and click Select.

Create a query with the name of the store manager and the sale revenue. a)

Navigate to eFashion → Store → Store details and select Name of manager. Drag Name of manager to the Result Objects pane on the right.

b)

Navigate to Measures and select Sales revenue. Drag Sales revenue to the Result Objects pane on the right.

Run the query. a)

Click Run query.

Continued on next page

298

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

4.

5.

Change the report title to Sales Report by Manager. a)

Select the Page Setup tab followed by the Rename tab.

b)

Change the name to Sales Report by Manager.

c)

Press Enter to continue.

Save your document to SAP BusinessObjects Business Intelligence platform. a)

Navigate to the toolbar and click Save.

b)

Click the SAP BusinessObjects Business Intelligence platform hostname on the left pane and navigate to Public Folders → Publishing. Hint: Create the Publishing folder if you do not see it already there.

c)

Enter the name Sales Report by Manager and click Save.

Task 2: Create Manager Group and Users Create a manager group and add Anderson, Barrett and Larry to this group. 1.

2.

Launch SAP BusinessObjects Business Intelligence platform and log on to Central Management Console (CMC). Field Name

Value

System

:6400

User name

Administrator

Password



a)

Click Start → Programs → SAP BusinessObjects BI platform 4.0 → Custom Link to CMC home page

b)

Log on with your username and password.

Create three new users: Anderson, Barrett, and Larry. Field Name

Value

Authentication Type

Enterprise

Account Name

Anderson, Barrett, Larry

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

299

Unit 6: Publishing and Publications

3.

BOE310

Field Name

Value

Full Name

Anderson, Barrett, Larry

Password

initial

Password never expires

checked

User must change password at next logon

unchecked

a)

In the CMC Home, click Users and Groups.

b)

Click User List.

c)

Click Manage → New → New User.

d)

Enter the Account name and Full Name.

e)

Select Password never expires and deselect User must change password at next logon.

f)

Click Create & Close.

g)

Repeat this step until all three users are created.

Create a group called Managers and add three users to the Managers group. a)

In the CMC Home, click Users and Groups.

b)

Click Group List.

c)

Click Manage → New → New Group.

d)

Enter the group name Managers.

e)

Click OK.

f)

Navigate to select your newly created group.

g)

Click Actions → Add Members to Group. The Add Members to Group dialog box appears.

h)

Select Anderson, Barrett, and Larry from the Available users/groups list and click > to move them to the Selected users/groups list.

i)

Click OK. All three managers are added to the Managers group.

Continued on next page

300

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

Task 3: Create Profile using Variables Create a profile for the Managers group using a variable in the Profile Value so each manager can receive a report with his/her own store details. 1.

Create a new profile for the managers. a)

Go to the Profiles area of the CMC.

b)

Click Manage → New → New Profile. The Create New Profiles dialog box appears

2.

c)

Enter Manager Profile in the Title field.

d)

Click OK.

Add a global profile target based on the name of the store manager in the eFashion universe a)

Select Manager Profile.

b)

Click Actions → Profile Targets.

c)

Click Add.

d)

Select Webi Universes\ from the Universe Name list and then click Show Subfolder.

e)

Select eFashion from the Universe Name list.

f)

Click Select object from the universe to select a class.

g)

Navigate to Store →Store details → Name of manager and click OK. The Class Name value and Variable Name value are automatically populated.

h)

Click OK.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

301

Unit 6: Publishing and Publications

3.

BOE310

Add profile values to personalize the data on the Managers group. a)

In the Manager Profile dialog box, click Profile Values.

b)

Click Add.

c)

Click Choose.

d)

Check the radio button Groups, select the group Managers, click > to move them into the list on the right side, and click OK. Note: All the members in your Managers group (Anderson, Barrett and Larry) are used in the publishing process.

e)

Select User full name from the Add placeholder list. Note: A user can have multiple profile values. If you want to add a static profile value, you can type the value directly in the new value field. Alternatively, you can add a variable value, such as User full name. However, be aware that for this feature to work, the user must have their account name entered in the Full Name field in the user properties.

f)

Click Add.

g)

Click OK.

h)

Click Close. Now that you have created the profile and specified the profile value and target, you are ready to create a publication to publish the report to the managers.

Continued on next page

302

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

Task 4: Distribute Document Distribute the Web Intelligence document to the managers based on the profile. 1.

2.

3.

4.

Build a publication based on the Web Intelligence document. a)

Go to the Folders area of the CMC.

b)

Navigate to the Publishing folder and click Manage → New → Publication

c)

In the title field, type Manager Publication.

d)

Click Source Documents.

e)

Click Add.....

f)

Select Public Folders → Publishing → Sales Report by Manager

g)

Click OK.

Select the Managers group you built earlier to be the recipients of the publication. a)

Click Enterprise Recipients.

b)

Click Group List and select Managers.

c)

Click > to bring it to the Selected window.

Use personalization to select the global profile that is used to burst the report with personalized data to each manager. a)

Click Personalization.

b)

From the Global Profiles area, select Manager Profile in the Enterprise Recipient Mapping drop-down list.

Specify the destination for the publication. a)

Click Destinations.

b)

Deselect the Default Enterpirse Location checkbox and select the BI Inbox checkbox. Select BI Inbox from the Show Options For selected destinations drop-down box.

c)

Click Use Specific Name and choose Title from the Add placeholder... drop-down list.

d)

Click Save & Close.

Continued on next page

2011

© 2011 SAP AG. All rights reserved.

303

Unit 6: Publishing and Publications

5.

BOE310

Publish and distribute the publication to the users based on the profile. a)

In the Folders area of the CMC, navigate to the Publishing folder and click Manager Publication.

b)

Click Actions → Schedule.

c)

Click Schedule. This schedules the publication to run now. Wait a few seconds and once the status field displays Success, check the Inbox of each user in the Manager group (Anderson, Barrett, Larry) to view the personalized reports.

d)

In the Inboxes area of the CMC, navigate to Anderson, Barrett, and Larry and check the publicaiton is sent.

Task 5: Test the Result Verify the publication is sent. 1.

2.

Launch the SAP BusinessObjects BI launch pad and log on as Anderson, Barrett, and Larry and check the personalized publication is received. Field Name

Value

System

:6400

User name

Anderson, Barrett, Larry

Password

initial

a)

Click Start → Programs → SAP BusinessObjects BI platform 4.0 → Custom Link to BI Launchpad.

b)

Log on with your username and password.

Open the unread message and view the document. a)

There should be 1 unread message in your Inbox.

b)

Click the new message. The Web Intelligence document launches and you see only the corresponding store manager's name and the sales revenue.

304

© 2011 SAP AG. All rights reserved.

2011

BOE310

Lesson: Publishing personalized reports

Lesson Summary You should now be able to: • Describe the process of publishing • Describe what is a publication • Use profiles to burst personalized data to multiple recipients • Use the publishing feature to create publications • Test a publication • Publish reports to SAP BusinessObjects Business Intelligence Platform

2011

© 2011 SAP AG. All rights reserved.

305

Unit Summary

BOE310

Unit Summary You should now be able to: • Describe the process of publishing • Describe what is a publication • Use profiles to burst personalized data to multiple recipients • Use the publishing feature to create publications • Test a publication • Publish reports to SAP BusinessObjects Business Intelligence Platform

306

© 2011 SAP AG. All rights reserved.

2011

BOE310

Test Your Knowledge

Test Your Knowledge

2011

1.

What is a publication?

2.

What are dynamic recipients?

3.

What are profiles?

© 2011 SAP AG. All rights reserved.

307

Test Your Knowledge

BOE310

Answers 1.

What is a publication? Answer: A publication is a collection of documents intended for distribution to a mass audience. Before the documents are distributed, the publisher defines the publication using a collection of metadata. This metadata includes the publication source, its recipients, and the personalization applied.

2.

What are dynamic recipients? Answer: Dynamic recipients are publication recipients who exist outside of the SAP BusinessObjects Business Intelligence platform. Dynamic recipients already have user information in an external data source, such as a database or an LDAP or AD directory, but do not have user accounts in SAP BusinessObjects Business Intelligence platform.

3.

What are profiles? Answer: Profiles are objects in the SAP BusinessObjects Business Intelligence platform that let you classify users and groups. They work in conjunction with publications to personalize the content that users see. Profiles link users and groups to profile values, which are values used to personalize data within a report. Profiles also use profile targets, which describe how a profile is applied to a report. By assigning different profile values, the data within a report can be tailored to specific users or groups. Many different personalized versions of the report are then delivered to your users.

308

© 2011 SAP AG. All rights reserved.

2011

Test Your Knowledge

309

BOE310

© 2011 SAP AG. All rights reserved.

2011

Course Summary

BOE310

Course Summary You should now be able to: • • • • • •

310

Explain what is SAP BusinessObjects Business Intelligence platform Manage content and objects in SAP BusinessObjects Business Intelligence Platform Organize objects Secure users and groups Manage and secure applications Distribute content to users

© 2011 SAP AG. All rights reserved.

2011

Appendix 1 Determining effective rights

Keep these considerations in mind when you set rights on an object:

2011

© 2011 SAP AG. All rights reserved.

311

Appendix 1: Determining effective rights

BOE310

Figure 34: Multiple access levels

•

•

•

When you assign multiple access levels to a principal on an object, the principal has the combination of each access level's rights. The user in “Multiple access levels” is assigned two access levels. One access level grants the user rights 3 and 4, while the other access level grants right 3 only. The effective rights for the user are 3 and 4. Each access level grants some rights, denies some rights, and leaves the other rights unspecified. When a user is granted several access levels, the system aggregates the effective rights and denies any unspecified rights by default. Advanced rights can be combined with access levels to customize the rights settings for a principal on an object. For example, if an advanced right and an access level are both assigned explicitly to a principal on an object, and the advanced right contradicts a right in the access level, the advanced right will override the right in the access level. Advanced rights can override their identical counterparts in access levels only when they are set on the same object for the same principal. For example, an advanced Add right set at the general global level can override the general Add right setting in an access level; it cannot override a type-specific Add right setting in an access level. However, advanced rights do not always override access levels. For example, a principal is denied an Edit right on a parent object. On the child object, the principal is assigned an access level that grants him the Edit right. In the end, the principal has Edit rights on the child object because the rights set on the child object override rights that are set on the parent object.

•

312

Rights override makes it possible for rights set on a child object to override rights that are inherited from the parent object.

© 2011 SAP AG. All rights reserved.

2011

Appendix 2 Breaking inheritance

Inheritance lets you manage your security settings without setting rights for each individual object. However, in some cases, you may not want rights to be inherited. For example, you may want to customize rights for each object. You can disable inheritance for a principal in an object's access control list. When you do this, you can choose whether to disable group inheritance, folder inheritance, or both. Note: When inheritance is broken, it is broken for all rights; it is not possible to turn off inheritance for some rights but not for others. In the diagram Breaking inheritance, group and folder inheritance are initially in effect. Red User inherits rights 1 and 5 as granted, rights 2, 3, and 4 as unspecified, and right 6 as explicitly denied. These rights, set on the folder level for the group, mean that Red User, and every other member of the group, has these rights on the folder's objects, A and B. When inheritance is broken on the folder level, Red User's set of rights to the objects in that folder is cleared until an administrator assigns new rights to him.

2011

© 2011 SAP AG. All rights reserved.

313

Appendix 2: Breaking inheritance

BOE310

Figure 35: Breaking inheritance 1

314

© 2011 SAP AG. All rights reserved.

2011

BOE310

Appendix 2: Breaking inheritance

Figure 36: Breaking inheritance 2

2011

© 2011 SAP AG. All rights reserved.

315

Appendix 2: Breaking inheritance

316

© 2011 SAP AG. All rights reserved.

BOE310

2011

Feedback SAP AG has made every effort in the preparation of this course to ensure the accuracy and completeness of the materials. If you have any corrections or suggestions for improvement, please record them in the appropriate place in the course evaluation.

2011

© 2011 SAP AG. All rights reserved.

317