Académique Documents
Professionnel Documents
Culture Documents
1 2
BO5 or BO6 security concepts BOE Xi R2 security concepts BOE Xi 3.x security: Whats new? Migration and Implementation: Challenges & 360suite
3
4
1 2 3 4
BO5 or BO6 security concepts BOE Xi R2 security concepts BOE Xi 3.x security: Whats new?
Under BOE Xir2, universes and documents are stored within folders. Objects can be stored in one folder only. There are four folder trees.
A user can belong to more than one group (the Everyone group, a
technical group and a functional one).
Explicit right
Closed system
Inherited right
Explicitly granted (OK): User or group is given the right. Explicitly denied (KO): User or group is denied the right. Not specified (NS): No right assignment.
KO
OK
KO
OK
KO
KO
1 2 3
BO5 or BO6 security concepts BOE Xi R2 security concepts BOE Xi 3.x security: Whats new? Migration and Implementation: Challenges & 360suite
Rights have been duplicated on content: Hundreds of rights. Content rights overload general rights.
General right set: Schedule Objects prohibited. Content right overloads General settings: Schedule Deski Documents allowed. Net result: Schedule documents not allowed
Content rights possible on Folders. Descending right: Add object. Ascending right: Delete object.
General right set: Add Objects allowed. Content right overloads General settings:
Right only applied for one door and not to sub doors!
It is possible to override explicitly denied rights. It is possible to explicitly deny a right at a top level and then explicitly
granted the same right at a lower level (without breaking inheritance like in Xi r2):
You can no longer applied NA access level to all top level doors.
KO
OK
KO
OK
KO
KO
Rights inherited from groups. Could be multiple rights. Effective rights calculation now also depends on:
Rights set on Content. Type of folder inheritance.
Apply rights at group and folder level. Folders structure: Content driven. Use Not Specified right instead of Denied whenever possible. Create Recycle Bin folders and groups. Take advantage of the Everyone group. Do not manage universe overloads in Designer but directly in the DB. Never apply security on AD groups. Implement a closed system of increasing rights to navigate through folders and not through categories.
You can apply right at content level. Content rights override general
rights.
You can override an explicitly denied right at a lower level. You can apply a right at folder level and at sub folders level. You can apply multiple rights between a folder and a group. You can apply granularity on the list of universes you want to use for
report creation or modification.
1
2 3 4
BOE Xi 3.x security model is powerful. Understand the new security concepts.
Take advantage of them. Redesign your security model.
360suite: Optimize BO project costs Like 300+ customers world wide you can use our suite to optimize SAP BO project costs around: Manage and document security Backup and restore objects Change management control (promotion of content) Schedule reports Link BO admin tasks with Enterprise Job Schedulers Audit your system and your BO metadata Follow the evolution of BO deployments over time Perform your migration projects Run impact analysis Ensure license compliance
Schedule SAP BusinessObjects reports from an Excel, CSV spreadsheet or a SQL query distribution list Dynamic scheduling and bursting
Fill in prompts, filter, format and destination values within Excel, CSV or SQL Any modification within Excel, CSV or SQL will dynamically impact your results
Schedule your reports using your enterprise scheduler (ControlM, DollarU, Vtom, UC4, TWS )
Load all your SAP BusinessObjects data (CMS, universes, documents and audit data) within a datawarehouse
Query and analyze this data using pre built BO universes and Webi reports Document your deployment:
Detect unused documents and universes, dormant users Perform impact analysis
Compare your SAP BO license pool with the licenses you have deployed License compliance is just a mouse click away
Contact
Sebastien Goiffon
sebastien@gbandsmith.com www.gbandsmith.com