Skip to Content
Introduction:
Multitenancy management tool is built to use a single instance of BI 4.x runs on a server, serving multiple client organizations (tenants). BI 4.x can be designed to virtually partition its data and configuration and each client can have access to their own data only.
 
The SAP BusinessObjects Business Intelligence platform Multitenancy Management Tool is a Java-based program that SAP OEM partners can use to standardize and automate the creation of objects and settings for new customers in a multitenant BI platform deployment.
The traditional way of configuring a multitenant environment is to create separate user groups, folders for each tenant and apply security manually, but the multitenancy management tool automates these steps and makes it easier to create new tenants.
Setup:
Let’s begin to configure a simple multitenant environment:
Step – 1: Create Tenant Template:
 
  1. Create a user group name “$TemplateToken$”.
  2. Create a public folder named $TemplateToken$ atthe root level.
  3. Assign required rights to “$TemplateToken$” user group on $TemplateToken$ folder.
Step – 2: Create Tenant Configuration file:
The tenant_template_def.properties file is located in the multitenancyManager folder at:
Windows: <InstallDir>\SAP BusinessObjects EnterpriseXI4.x\java\apps\multitenancyManager\jars\
Unix: <InstallDir>/sap_bobj/enterprise_xi4x/java/apps/multitenancyManager/jars/
  • Take a backup of the properties file and open the original one in a text editor.
  • Under (Mandatory) Name of the tenant being added, change the value for the tenant Name option to the name of the new tenant you are defining.
  /wp-content/uploads/2013/06/1_225843.png
  • Under (Mandatory) Template token identifier used for tenant name replacing, change the value for the templateToken option to thestring used to identify your template folders and user group. Use the string “$TemplateToken$,” as we did in step – 1.
/wp-content/uploads/2013/06/2_225844.png
  • Under (Mandatory) Logon information provide CMS Server name, Authentication type, User name (an admin user who has permissions to perform the task), its password.
/wp-content/uploads/2013/06/3_225881.png
  • Under (Optional) Document folder template, change the value for the templateContentFolder option to specify the top-level template folder paths. Separate multiple values with a semicolon, and include the full path of the public root folder.
/wp-content/uploads/2013/06/4_225882.png
  • Save and close the tenant_template_def.properties file.
 
Step – 3: Run the Multitenancy Management Tool:
  • Open Command prompt and navigate to the location, <InstallDir>\SAP BusinessObjects Enterprise XI 4.0\java\apps\
  • Type following command.
         java -jar multitenancymanager.jar -configFile tenant_template_def.properties
/wp-content/uploads/2013/06/5_225884.png
  • Likewise you can simple change the value “Name of the tenant being added” as we did in Step – 2.2, save the file and run the tool.
  • After the tool successfully finish creating the tenant logon to CMC, go to Multitenancy and you should see the tenant name populated here.
/wp-content/uploads/2013/06/6_225886.png
  • Right click on the tenant name and go to properties. From here you can manage the number of concurrent logon sessions.

/wp-content/uploads/2013/06/7_225887.png

  • You can also manage concurrent user sessions from tenant_template_def.properties

/wp-content/uploads/2013/06/8_225888.png

  • You can add groups to tenant.
  • You can delete a tenant and all its associate infoobjects with the option to exclude certain infoobjects.

/wp-content/uploads/2013/06/9_225889.png

  • You can track system usage by tenant using auditing by enabling and configuring audit events as per the requirements.
  • To determine which auditing event is generated by which tenant use 2 new lookup tables in the auditing database: ADS_TENANT and ADS_USER.

For detailed overview please visit following blog:

http://scn.sap.com/community/bi-platform/blog/2013/06/18/overview-of-sap-bi-4x-multitenancy-management-tool

To report this post you need to login first.

34 Comments

You must be Logged on to comment or reply to a post.

        1. Tomasz Zima

          Hi Jawahar and Sohel,

          I talked to Christina Obry (Product Owner) not long ago and it appears that 4.1 in fact supports .UNX in multitenancy solution.

          Cheers,

          t

          (0) 
          1. Sohel Ahmed Syed Post author

            Hi Tomasz,

            Thanks for the correction, The 4.1 MMT document which I had was released on 2013-03-25 in this document it is mentioned “This release supports only classic universes (.unv files); it doesn’t support .unx files.”,

            I just referred to the link which Jawahar had provided earlier and this document is released on 2013-05-14 and here it is mentioned “This release supports classic universes (.unv files) with limited support for DSL universes (.unx files, with exceptions that include Access Restrictions (Security Profile) and multi-connection DSL universes).”

            Thanks again,

            Sohel

            (0) 
    1. Sohel Ahmed Syed Post author

      Hi S J,

      If you are hosting a single BI system for many different customers then this tool will help you in setting up and managing your BI system.

      Regards,

      Sohel

      (0) 
  1. Mark Richardson

    We manage reporting for 50+ Line of Business groups and their BOE platform .NET SDK applications for CR-2013 report delivery, from a single central BO-BI (soon to be 4.1) environment.

    Our licenses are still on the Old CPU-based model, but our individual UserAccounts are created with Connection Type = Concurrent User, so this Multitenancy “License-Quota” model is very interesting.

    It could help us with developing both a charge-back model for our BI Platform services, and let us manage High-Prioity (100’s of Concurrent Users) vs. Low-Priority traffic (5 – 10 Concurrent Users) for different Line of Business groups (ie. Tenants).

    [QUESTION #1] Does Multitenancy only manage the number of UserAccounts that can be created/assigned under a specific Tenant profile – or does it also LIMIT the number of Concurrent Sessions that can be open against the CMS by Users that are in groups under that Tenant…?

    [QUESTION #1a] If we have One (1) UserAccount (eg. Unique ApplicationService account per .NET SDK app) –  would Multitenancy allow us to say that ApplicationAccount-A has access to 50 Concurrent Sessions – but

    ApplicationAccount-B has ONLY access to 10 Concurrent Sessions…?

    Looking forward to playing around with this during “Ramp Up” of 4.1.

    (0) 
    1. Sohel Ahmed Syed Post author

      Hi Mark,

      [QUESTION #1]:

      You can manage the concurrent sessions by the Tenants groups and its subgroups, in CMC if you go to Multitenancy you will see the Tenant names listed over there which are already deployed, once you right click on the tenant you will have an authority to add new groups into this Tenant.

      Sorry but I didnt get your second question, please elaborate.

      Thanks,

      Sohel

      (0) 
      1. Mark Richardson

        OK, I will review that document later today…thanks!

        In the #1a question, I am trying to determine how the Multitenancy functionality manages “Simultaneous Sessions” against the CMS, and regulates the Concurrent-Count per Tenant.

        It might be more of a whiteboard discussion.

        (0) 
        1. Sohel Ahmed Syed Post author

          CMS will manage the sessions as the same what it does for a concurrent user license key. To know more about the session management you can refer following document.

          http://scn.sap.com/docs/DOC-20258

          Although this document is meant for 3.1 but there wont be much difference.

          Hope this helps.

          Regards,

          Sohel

          (0) 
          1. Sohel Ahmed Syed Post author

            Hi Mani,

            There are many blogs on what new in 4.1, but if you are specifically looking for comparison between 4.0 SP6 and 4.1 and list of new features then I will have to work on it, I dont have the list handy with me at the moment.

            Regards,

            Sohel

            (0) 
          2. Christina Obry

            I was the one that got the white paper, you mentioned in your comment above, posted. Basically everything mentioned in the white paper should apply to 4.0 as well. Features applicable for multitenancy that were introduced in 4.0 SP4 are with regards to delegated administration, custom mapped attributes and the onboarding tool described in this blog. I was planning on writing a blog post about these on the weekend and post it back here

            (0) 
  2. Vives Yudel

    Hi

    What kinds of objects are supported by multitenancy ?

    • Groups
    • Folders
    • Users
    • Crystal Reports
    • Webintelligence
    • Universe
    • Connections
    • Dashboards
    • Web Services
    • Explorer

    Thanks

    Regards

    (0) 
    1. Christina Obry

      Hi,

      Operations automated by the tenant provisioning tool

      •   Creating user groups
      •   Creating folders
      •   Setting ACL (Access Control List) on folders
      •   Copying documents and universes from template folder to individual tenant folder
      •   Adding universe restrictions for UNV only
      •   Creating connections

      Supported Document scenarios

      • Direct to data:
        • CR
        • CR4Ent
      • Shared database and semantic layer
        • CR4Ent connected to single-source unx,pquery and BICS
        • WebI connected to unv including universe restriction overload
        • WebI connected to single-source unx, BICS (as of 4.1)
      • Separate database with distinct semantic layer
        • CR4Ent connected to single source unx
        • WebI connected to unv and single-source unx (as of 4.1.)
      • Separate database with shared semantic layer
        • WebI connected to unv using universe connection overload

      Not supported

      • Dashboards
      • Web Services
      • Explorer

      Hope this helps,

        Christina

      (0) 
  3. Sandeep Rana

    Hi Sohel,

    This is with regards to SAAS enabled BOBIP solution where tenant are on-boarded using MTM. I had experienced few issues while on-boarding tenants using MTM. Hence I would request you go through thread Promote an idea – Enhance Promotion & distribution in SAAS enabled BOBIP solution stating the problem case in particular deployment scenario.

    If you are convinced with the issues highlighted and ideas stated will you please promote it.

    Regards,

    Sandeep Rana

    (0) 
    1. Sohel Ahmed Syed Post author

      Hi Sandeep,

      I would suggest you to contact SAP via incident and share these issues if these should be tracked as ADAPT or an IDEA. And its always best practice to segregate these issues while submitting idea or bug request.

      Regards,

      Sohel

      (0) 
      1. Sandeep Rana

        Sohel,

        All the issues had been logged with SAP support over the period of time. Hence, on their request i had placed it on idea space.

        Regards,

        Sandeep rana

        (0) 
        1. Medha Mehta

          Hi Sandeep,

          I have promoted the IDEAS place created by you, as explorer is not supported
          with MTM yet this could be a cause that it loosing the association, regarding
          the third Business requirement

          “Exploration: Distribution
          of Infospace via MTM across environments without losing their association with
          the universes in the tenant on-boarded.”

          Regards,

          Medha

          (0) 
  4. PrakharRaj Singh Tomar

    Very informative blog Sohel.

    Thanks to Mani and Christina for additional inputs which clears a lot of questions.

    I still have a question though.

    With mutitenancy handle usage of server groups.

    What i mean is if a user 1 who is a general user (not a part of any tenant) schedules a report without selecting a server group, it goes to one of the available AJS.

    But if i put this user 1 under one of the tenants, is it possible that every schedule of this user will only run on a specific server group?

    I hope you all may understand where I am coming from and why i am trying to seek my answers in multitenancy.

    for others, we have a system where we have >30 line of businesses. About 15 of them uses servers groups. There are situation when the LOBs who don’t have server groups run schedules on the AJSs which fall under server groups of those 15 LOBs i mentioned. This blocks the bandwidth of the LOBs who own those server groups. So if we create tenants for those 15 LOBs with their respective server groups, would a user from general population be able to use those servers of server groups under tenants or not?

    (0) 
    1. Sohel Ahmed Syed Post author

      Hi Prakhar,

      I’m sorry for the late reply.

      I haven’t seen server group security completely functional in BO there are many bugs/enhancements/ideas posted for this.

      While working with a customer on same kind of requirements (For 3.1) what I found is that even though you don’t give view rights on a particular server group and while scheduling the report if he chooses first available server, the request may go to the server part of the server group on which user doesn’t have view access.

      The workaround is to do some tweaks in the scheduling page code where in you can set the default option as use only the servers belonging to the server group instead of first available server, and setup server group security. It worked for me in 3.1 haven’t tried this in 4.1 but I feel it should work.

      Regards,

      Sohel

      (0) 

Leave a Reply