BusinessObjects and SAP – Publishing of Crystal Reports Part 3 of 3
This time we finish the configuration and as last step we will configure the necessary security rights on the BusinessObjects server.
BusinessObjects security configuration for publishing
To be able to publish a report from SAP BI to BusinessObjects Edge the users need to have the necessary rights in the BusinessObjects system.
The following is a suggested differentiation:
- BusinessObjects Enterprise administrators
Enterprise administrators configure the BusinessObjects Enterprise system for publishing content from SAP. They import the appropriate roles, create necessary folders, and assign rights to those roles and folders in BusinessObjects Enterprise.
- Content publishers
Content publishers are those users who have rights to publish content into roles. The purpose of this category of user is to separate regular role members from those users with rights to publish reports.
- Role members
Role members are users who belong to content roles. They have rights to view and schedule content that has been published to the roles they are members of.
However, regular role members cannot publish new content, nor can they publish updated versions of content.
The following are recommendations for the previously described BusinessObjects user groups:
Role Members
BusinessObjects Edge imports a group for each role that is added to the entitlement system as defined in the CMC. To ensure that suitable default rights are granted to all members of a content bearing role, grant the following rights in the Content Administration Workbench for each entitlement system that is defined in BusinessObjects Enterprise:
- Default Security policy for reports = View
- Default security policy for role folders = View on Demand
Content Publisher
Assign the following rights to a publisher role in the Central Management Console:
- Add objects to the folder.
- View objects.
- Edit objects.
- Modify the rights users have to objects.
- Delete objects.
- Delete instances.
- Copy objects to another folder.
To set those recommended rights I logon to the SAP Server and start the transaction /CRYSTAL/RPTADMIN.
I double-click on my system entry and navigate to the tab “Layout”.
Now I can set the default security based on the recommendations.
After I configured the rights on the SAP side I now log onto the Central Management Console.
And select the item Folders.
I navigate down to the folder for my SAP System ID.
I select the folder and go to the menu Manage > Security > User Security.
I can now Click Add Principals….
…and by clicking GroupsI can select the roles from the SAP system.
I can click Add and Assign Security …
… and navigate to the Advancedtab. And click Add/Remove rights.
Now I can configure the rights for this role.
At this point you :
- Did configure the SAP Authentication and imported roles (previous blog)
- Did configure the publishing service
- Did create a RFC Destination in transaction SM59
- Did create a BusinessObjects Server definition in transaction /CRYSTAL/RPTADMIN
- Did assign the necessary rights to the SAP roles in BusinessObjects Edge
And as a result you should be able to publish a report from Crystal Reports Designer.
You can create a new report in the Crystal Reports Design using the SAP specific menus and when saving the report to BW you will be asked if you also want to publish the report from the BW system to the BusinessObjects system – which based on te configuration we did should result in a successfully published report and a report on the BusinessObjects Edge server.
In the next blogs I will explain the SAP specific features in InfoView and the Content Administration Workbench
For those that missed the installation parts, here are the links to the blogs:
BusinessObjects and SAP – Installation and Configuration Part 1 of 4
BusinessObjects and SAP – Installation and Configuration Part 2 of 4
BusinessObjects and SAP – Installation and Configuration Part 3 of 4
BusinessObjects and SAP – Installation and Configuration Part 4 of 4
BusinessObjects and SAP – Configure SAP Authentication
BusinessObjects and SAP – Publishing of Crystal Reports Part 1 of 3
BusinessObjects and SAP – Publishing of Crystal Reports Part 2 of 3
I get to the point where I can access queries from within Crystal, but at the moment of trying to save, it says "No Entry Found", I followed all the steps in your blogs/book, I can login using SAP user and can import roles and users.
Any ideas on what could be missing to be able to save?
Regards!
may I suggest to put this into the forum for the SAP Integration Kit ? It is easier to follow up there.
thanks
Ingo
I have a quick question. Once you publish these reports to BOE using the method explained, can you then move those reports out of the SAP folder and into another content folder in BOE without breaking the SSO?
What is the recommended practice here? Should I cut/paste the newly published report or should I make a copy of it and move that to the new folder?
Thanks!!
you not breaking SSO but you breaking the synchronization between you SAP BW system and you BOE system. Recommendation would be to structure the roles in your BW system so that you just replicating it to the BOE Server.
Ingo
BOE folders at my company are arranged based on content (i.e. AP, AR, PCA) and as far as I understand, you can only setup BW to publish into one folder in BOE (on layout tab).
So I have 2 questions:
1. Are you saying that I can move reports out of my SAP folder in BOE and that SSO will still work? (Meaning, I could publish a report in CR to the SAP folder, then in Infoview actually cut/paste that report to a new folder and SSO will be intact? (You said above I was not breaking SSO but synchronization - does this mean the report will not work?)
2. Your recommendation is to structure roles in BW system for BOE server. Can you setup multiple folders for BW to publish into in BOE? If so how, can I setup multiple connections to BOE box for different folders? I only see the ability to setup one folder on the layout tab.
Thanks for all of your hardwork and advice,
Allison
I would suggest you open up an entry in the forum for the SAP Integration Kit - its much easier to follow up
thanks
Ingo
when you get a chance please respond to this forum
Hi Ingo,
This information is valuable but I have different question for you.
Can I connect 2 versions of Business Objects systems to one BW system for Crystal Publishing service.
We have BOBJ 3.1 and BI 4.0 and are planning to migrate to BI 4.0 but not yet. We have currently configured BW publishing service for BOBJ 3.1. We would like to build new reports in crystal 2011 or 2013 to publish on BI 4.0 and use BI 4 for future reporting purposes. Could you please give us guidence