9/13/2016

Home

AquickreviewofOBIEE11gArchitecture&Security

AboutAdiva

Services

Training

Careers

Blog

ContactUs

Sitemap

Testimonials

Videos

ENTERPRISEAPPLICATIONDEVELOPMENTANDSUPPORTINJ2EEANDMICROSOFT.NETTECHNOLOGY.

Youarehere: OBIEE

AquickreviewofOBIEE11gArchitecture&Security

AquickreviewofOBIEE11gArchitecture&Security
Ratethisitem

(25votes)

PopularPostinOBBIE

OBIEE11gArchitecture&Security

OBIEE11gInstallation
OBIEEServer
Administration
OBIEEVariables
CacheManagement
Categories
OBIEE
BIPublisher
OracleApplication
Framework
Hyperion
BIAPPS
JDEdwardsBIPublisher

DomainsinOBIEE
WebLogicServerDomain
J2EEAppServerusedacrosstheboardforall11gBIapplications
Contains:
http://www.adivaconsulting.com/blogobiee/item/35obiee11garchitecturesecurityarchitecture.html

1/6

9/13/2016

AquickreviewofOBIEE11gArchitecture&Security

ManagedServer:SetofJ2EEApplicationsusedforfunctioningtheBIEE
system
AdminServer:SetofJ2EEApplicationsusedforadministeringofBIEE
system
OracleProcessManagerandNotificationServer(OPMN)domain
Usedtostart/Stopsystemcomponents(BISvr,BIPresSvr,BISchdlr,BI
ClustrCntrl)
CanbeaccessedfromCMDorfromEMpage(GUI)

AdminServerComponents

WLSAdminConsole

AdminGUIforWLS,SecurityandJ2EEComponents

FusionMiddlewareEMControl(FMWEM)

AdminGUItoManagetheBIDomain

JMXBeans

Javacomponentsthatprovideprogrammaticaccessfor
managingaBIdomain.

ManagedServerComponents
BIPlugin:SendswebhttprequeststoBIPresentationServices

BISecurity:IntegratesBIServerandFMWsecplatform(usingwebservicecalls)

BIActionServices:DedicatedwebservicesforActionframework

BIWebServiceSOA:ProvidesWebservicesforobjectsintheBIEEPresentation

Catalog,toinvokeanalysis,agents,andconditions.

BIOffice:ProvidestheintegrationbetweenOracleBusinessIntelligenceandMicrosoftOffice

products

BIEEDomainSystemComponents

BIServer

Providescapabilitiestoqueryandaccessdataaswellasservicesforaccessing
andmanagingtheRPDfile(BIEEMetadata).

BIPresentationServices

Providestheframeworkandinterfaceforthepresentationofbusinessintelligence
datatoWebclients.ItmaintainsanOracleBIPresentationCatalogserviceon
thefilesystemforthecustomizationofthispresentationframework.

BIScheduler

Providesframeworkforschedulinganddeliveringreportstousers(usedby
delivers)

BIJavahost

http://www.adivaconsulting.com/blogobiee/item/35obiee11garchitecturesecurityarchitecture.html

2/6

9/13/2016

AquickreviewofOBIEE11gArchitecture&Security

EnablesBIPresentationServicestosupportvariouscomponents:Javatasksfor
BIScheduler,BIPublisher,andGraphgeneration.

BIClusterController

UsedfordistributingrequeststoBIserverandensureloadbalancing

Files

Repositoryfile(e.g.SampleSales.rpd)
ConfigFiles(nQconfig.ini,instanceconfig.xml,)
LogFiles(nqserver.log,nqquery.log,nqscheduler.log,sawlog0.logetc)
Presentationcatalog
(<MW_HOME>\OracleBIPresentationServicesComponent\coreapplication_obips1\catalog)

OBIEE11GSecurity
WhatsSecurity?
Authenticationcheckingpasswordsandothertokensagainstuserlists,toauthenticateauser
andcheckthattheyarewhotheysaytheyare
Authorizationonceweknowwhotheyare,whatarewegoingtoauthorizethemtodoonour
system.(ObjectSecurityanddataSecurity,bothdonefromrpd)
Administrationhowdoweadministertheselistsofusers,groupsandpermissions(apppolicy),
plusconnectionstoexternaldirectoriesandapplications

http://www.adivaconsulting.com/blogobiee/item/35obiee11garchitecturesecurityarchitecture.html

3/6

9/13/2016

AquickreviewofOBIEE11gArchitecture&Security

SecurityProviders
Authenticationprovider
oOBIEEdelegatesauthenticationtothefirstauthenticationproviderconfiguredforthe
domain.
oDefinedandmanagedfromWLSConsole
Policystoreprovider
oProvidesaccessto:
ApplicationRoles(tocreatefunctionalgroup)
ApplicationPolicies(todefineOracleBIServer,BIPandRTDfunctionality
permissions)
oFormsacorepartofsecuritypolicy,usedforObjectsecurityandDatasecurity
oDefinedandmanagedfromFMWEnterpriseManager
oPolicystoredinsystemjazndata.xmlfile
Credentialstoreprovider
oResponsibleforsecurelystoring/providingaccesstocredentialsreqd.byOBIEE
componentsinternally
oCredentialsarestoredinthefilecwallet.ssofile

ToolsforsecurityManagement(Inanutshell)
UsersandGroupsaremanagedinOracleWLSAdminconsole(bydefault).IfWLSisintegrated
withotherLDAPproducts,thenUsersandGroupsneedstomanagedusingtheinterfaceprovide
bytherespectiveLDAPvendorNewinOBIEE11g
http://www.adivaconsulting.com/blogobiee/item/35obiee11garchitecturesecurityarchitecture.html

4/6

9/13/2016

AquickreviewofOBIEE11gArchitecture&Security

ApplicationRolesandApplicationPoliciesaremanagedinOracleEnterpriseManagerFusion
MiddlewareControlNewinOBIEE11g
RPDobjectpermissionsaremanagedinOBIEEAdmintoolSameas10gbuttheassignment
istoApplicationRolesinsteadofGroups
WebcatPermissionsandPrivilegesaremanagedinOBIApplicaonadministraonpageSameas10gbutthe
assignmentistoApplicaonRolesinsteadofgroups

DirectoryStructure
MW_HOME:MiddleWaredirectorye.g.D:\OBIEE11G
WL_HOME:MW_HOME\wlserver_10.3\
DOMAIN_HOME:MW_HOME\user_projects\domains\bifoundation_domain\
ORACLE_INSTANCE:MW_HOME\instance\instance1

http://www.adivaconsulting.com/blogobiee/item/35obiee11garchitecturesecurityarchitecture.html

5/6

9/13/2016

AquickreviewofOBIEE11gArchitecture&Security

'Ifyoufoundthisarticleuseful,pleaseratethesame"
Read7539times

Publishedin OBIEE
backtotop

MobileVersion

Home | About Adiva | Services | Training | Careers | Blog | Contact Us | Site Map|Subscribe

http://www.adivaconsulting.com/blogobiee/item/35obiee11garchitecturesecurityarchitecture.html

Top

Designed & Developed by aricentideas

6/6