Skip to Content
Author's profile photo Sohel Ahmed Syed

Multitenancy Management tool setup, new features in BI 4.1

Introduction:
Multitenancy management tool is built to use a single instance of BI 4.x runs on a server, serving multiple client organizations (tenants). BI 4.x can be designed to virtually partition its data and configuration and each client can have access to their own data only.
 
The SAP BusinessObjects Business Intelligence platform Multitenancy Management Tool is a Java-based program that SAP OEM partners can use to standardize and automate the creation of objects and settings for new customers in a multitenant BI platform deployment.
The traditional way of configuring a multitenant environment is to create separate user groups, folders for each tenant and apply security manually, but the multitenancy management tool automates these steps and makes it easier to create new tenants.
Setup:
Let’s begin to configure a simple multitenant environment:
Step – 1: Create Tenant Template:
 
  1. Create a user group name “$TemplateToken$”.
  2. Create a public folder named $TemplateToken$ atthe root level.
  3. Assign required rights to “$TemplateToken$” user group on $TemplateToken$ folder.
Step – 2: Create Tenant Configuration file:
The tenant_template_def.properties file is located in the multitenancyManager folder at:
Windows: <InstallDir>\SAP BusinessObjects EnterpriseXI4.x\java\apps\multitenancyManager\jars\
Unix: <InstallDir>/sap_bobj/enterprise_xi4x/java/apps/multitenancyManager/jars/
  • Take a backup of the properties file and open the original one in a text editor.
  • Under (Mandatory) Name of the tenant being added, change the value for the tenant Name option to the name of the new tenant you are defining.
  /wp-content/uploads/2013/06/1_225843.png
  • Under (Mandatory) Template token identifier used for tenant name replacing, change the value for the templateToken option to thestring used to identify your template folders and user group. Use the string “$TemplateToken$,” as we did in step – 1.
/wp-content/uploads/2013/06/2_225844.png
  • Under (Mandatory) Logon information provide CMS Server name, Authentication type, User name (an admin user who has permissions to perform the task), its password.
/wp-content/uploads/2013/06/3_225881.png
  • Under (Optional) Document folder template, change the value for the templateContentFolder option to specify the top-level template folder paths. Separate multiple values with a semicolon, and include the full path of the public root folder.
/wp-content/uploads/2013/06/4_225882.png
  • Save and close the tenant_template_def.properties file.
 
Step – 3: Run the Multitenancy Management Tool:
  • Open Command prompt and navigate to the location, <InstallDir>\SAP BusinessObjects Enterprise XI 4.0\java\apps\
  • Type following command.
         java -jar multitenancymanager.jar -configFile tenant_template_def.properties
/wp-content/uploads/2013/06/5_225884.png
  • Likewise you can simple change the value “Name of the tenant being added” as we did in Step – 2.2, save the file and run the tool.
  • After the tool successfully finish creating the tenant logon to CMC, go to Multitenancy and you should see the tenant name populated here.
/wp-content/uploads/2013/06/6_225886.png
  • Right click on the tenant name and go to properties. From here you can manage the number of concurrent logon sessions.

/wp-content/uploads/2013/06/7_225887.png

  • You can also manage concurrent user sessions from tenant_template_def.properties

/wp-content/uploads/2013/06/8_225888.png

  • You can add groups to tenant.
  • You can delete a tenant and all its associate infoobjects with the option to exclude certain infoobjects.

/wp-content/uploads/2013/06/9_225889.png

  • You can track system usage by tenant using auditing by enabling and configuring audit events as per the requirements.
  • To determine which auditing event is generated by which tenant use 2 new lookup tables in the auditing database: ADS_TENANT and ADS_USER.

For detailed overview please visit following blog:

http://scn.sap.com/community/bi-platform/blog/2013/06/18/overview-of-sap-bi-4x-multitenancy-management-tool

Assigned tags

      34 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo Manikandan Elumalai
      Manikandan Elumalai

      Informative Sohel!  Thanks for sharing.

      Author's profile photo Former Member
      Former Member

      I think Multitenancy tool supports only UNV version of the universes. I am not sure if that is changed in 4.1.

      Author's profile photo Sohel Ahmed Syed
      Sohel Ahmed Syed
      Blog Post Author

      Hi Jawahar,

      As per my knowledge .UNX is still not supported.

      Regards,

      Sohel

      Author's profile photo Tomasz Zima
      Tomasz Zima

      Hi Jawahar and Sohel,

      I talked to Christina Obry (Product Owner) not long ago and it appears that 4.1 in fact supports .UNX in multitenancy solution.

      Cheers,

      t

      Author's profile photo Sohel Ahmed Syed
      Sohel Ahmed Syed
      Blog Post Author

      Hi Tomasz,

      Thanks for the correction, The 4.1 MMT document which I had was released on 2013-03-25 in this document it is mentioned "This release supports only classic universes (.unv files); it doesn't support .unx files.",

      I just referred to the link which Jawahar had provided earlier and this document is released on 2013-05-14 and here it is mentioned "This release supports classic universes (.unv files) with limited support for DSL universes (.unx files, with exceptions that include Access Restrictions (Security Profile) and multi-connection DSL universes)."

      Thanks again,

      Sohel

      Author's profile photo Christina Obry
      Christina Obry

      yes, single source unx are supported as of 4.1.

      Author's profile photo S man
      S man

      Hi,

      Thanks for sharing information!!

      Could you provide use of tool with best example??

      Thanks

      Author's profile photo Sohel Ahmed Syed
      Sohel Ahmed Syed
      Blog Post Author

      Hi S J,

      If you are hosting a single BI system for many different customers then this tool will help you in setting up and managing your BI system.

      Regards,

      Sohel

      Author's profile photo Former Member
      Former Member
      Author's profile photo Mark Richardson
      Mark Richardson

      We manage reporting for 50+ Line of Business groups and their BOE platform .NET SDK applications for CR-2013 report delivery, from a single central BO-BI (soon to be 4.1) environment.

      Our licenses are still on the Old CPU-based model, but our individual UserAccounts are created with Connection Type = Concurrent User, so this Multitenancy "License-Quota" model is very interesting.

      It could help us with developing both a charge-back model for our BI Platform services, and let us manage High-Prioity (100's of Concurrent Users) vs. Low-Priority traffic (5 - 10 Concurrent Users) for different Line of Business groups (ie. Tenants).

      [QUESTION #1] Does Multitenancy only manage the number of UserAccounts that can be created/assigned under a specific Tenant profile - or does it also LIMIT the number of Concurrent Sessions that can be open against the CMS by Users that are in groups under that Tenant...?

      [QUESTION #1a] If we have One (1) UserAccount (eg. Unique ApplicationService account per .NET SDK app) -  would Multitenancy allow us to say that ApplicationAccount-A has access to 50 Concurrent Sessions - but

      ApplicationAccount-B has ONLY access to 10 Concurrent Sessions...?

      Looking forward to playing around with this during "Ramp Up" of 4.1.

      Author's profile photo Sohel Ahmed Syed
      Sohel Ahmed Syed
      Blog Post Author

      Hi Mark,

      [QUESTION #1]:

      You can manage the concurrent sessions by the Tenants groups and its subgroups, in CMC if you go to Multitenancy you will see the Tenant names listed over there which are already deployed, once you right click on the tenant you will have an authority to add new groups into this Tenant.

      Sorry but I didnt get your second question, please elaborate.

      Thanks,

      Sohel

      Author's profile photo Manikandan Elumalai
      Manikandan Elumalai

      Lets have a look at below article which details about the same concept.

      http://scn.sap.com/docs/DOC-42447

      Author's profile photo Mark Richardson
      Mark Richardson

      OK, I will review that document later today...thanks!

      In the #1a question, I am trying to determine how the Multitenancy functionality manages "Simultaneous Sessions" against the CMS, and regulates the Concurrent-Count per Tenant.

      It might be more of a whiteboard discussion.

      Author's profile photo Sohel Ahmed Syed
      Sohel Ahmed Syed
      Blog Post Author

      CMS will manage the sessions as the same what it does for a concurrent user license key. To know more about the session management you can refer following document.

      http://scn.sap.com/docs/DOC-20258

      Although this document is meant for 3.1 but there wont be much difference.

      Hope this helps.

      Regards,

      Sohel

      Author's profile photo Sohel Ahmed Syed
      Sohel Ahmed Syed
      Blog Post Author

      Thanks for sharing Mani.

      Regards,

      Sohel

      Author's profile photo Manikandan Elumalai
      Manikandan Elumalai

      Sohel,

      Do we have list of new features in BO 4.1 as compared to that of BO 4.0 SP6. It would be really helpful if you could share the same.

      Regards,

      Mani

      Author's profile photo Sohel Ahmed Syed
      Sohel Ahmed Syed
      Blog Post Author

      Hi Mani,

      There are many blogs on what new in 4.1, but if you are specifically looking for comparison between 4.0 SP6 and 4.1 and list of new features then I will have to work on it, I dont have the list handy with me at the moment.

      Regards,

      Sohel

      Author's profile photo Manikandan Elumalai
      Manikandan Elumalai

      Yes Sohel. I just wanted a comparative document against BO 4.0. I will prepare it once I get the 4.1 environment in my hand. Thanks.

      Author's profile photo Christina Obry
      Christina Obry

      I was the one that got the white paper, you mentioned in your comment above, posted. Basically everything mentioned in the white paper should apply to 4.0 as well. Features applicable for multitenancy that were introduced in 4.0 SP4 are with regards to delegated administration, custom mapped attributes and the onboarding tool described in this blog. I was planning on writing a blog post about these on the weekend and post it back here

      Author's profile photo Manikandan Elumalai
      Manikandan Elumalai

      Eagerly looking forward them Christina! 🙂

      Author's profile photo Christina Obry
      Christina Obry
      Author's profile photo Christina Obry
      Christina Obry

      Thanks you! Great overview, I am in the process of writing multitency blogs myself, so you just saved me some time 🙂

      Author's profile photo Sohel Ahmed Syed
      Sohel Ahmed Syed
      Blog Post Author

      Thanks Christina.

      Regards,

      Sohel

      Author's profile photo Christina Obry
      Christina Obry

      Hi Sohel, in addition of this great blog, I dicided to write an additional one going more over the general concepts of the onboarding tool starting with 4.0 SP4 rather on how to set it up and the 4.1. features. Check it out at Overview of SAP BI 4.x Multitenancy Management Tool

      Author's profile photo Sohel Ahmed Syed
      Sohel Ahmed Syed
      Blog Post Author

      Thanks a lot Christina, I've just visited the blog and have linked it in this blog.

      Author's profile photo Former Member
      Former Member

      Nice piece of Information and easy to understand

      Author's profile photo Former Member
      Former Member

      Hi

      What kinds of objects are supported by multitenancy ?

      • Groups
      • Folders
      • Users
      • Crystal Reports
      • Webintelligence
      • Universe
      • Connections
      • Dashboards
      • Web Services
      • Explorer

      Thanks

      Regards

      Author's profile photo Christina Obry
      Christina Obry

      Hi,

      Operations automated by the tenant provisioning tool

      •   Creating user groups
      •   Creating folders
      •   Setting ACL (Access Control List) on folders
      •   Copying documents and universes from template folder to individual tenant folder
      •   Adding universe restrictions for UNV only
      •   Creating connections

      Supported Document scenarios

      • Direct to data:
        • CR
        • CR4Ent
      • Shared database and semantic layer
        • CR4Ent connected to single-source unx,pquery and BICS
        • WebI connected to unv including universe restriction overload
        • WebI connected to single-source unx, BICS (as of 4.1)
      • Separate database with distinct semantic layer
        • CR4Ent connected to single source unx
        • WebI connected to unv and single-source unx (as of 4.1.)
      • Separate database with shared semantic layer
        • WebI connected to unv using universe connection overload

      Not supported

      • Dashboards
      • Web Services
      • Explorer

      Hope this helps,

        Christina

      Author's profile photo Former Member
      Former Member

      Hi Sohel,

      This is with regards to SAAS enabled BOBIP solution where tenant are on-boarded using MTM. I had experienced few issues while on-boarding tenants using MTM. Hence I would request you go through thread Promote an idea - Enhance Promotion & distribution in SAAS enabled BOBIP solution stating the problem case in particular deployment scenario.

      If you are convinced with the issues highlighted and ideas stated will you please promote it.

      Regards,

      Sandeep Rana

      Author's profile photo Sohel Ahmed Syed
      Sohel Ahmed Syed
      Blog Post Author

      Hi Sandeep,

      I would suggest you to contact SAP via incident and share these issues if these should be tracked as ADAPT or an IDEA. And its always best practice to segregate these issues while submitting idea or bug request.

      Regards,

      Sohel

      Author's profile photo Former Member
      Former Member

      Sohel,

      All the issues had been logged with SAP support over the period of time. Hence, on their request i had placed it on idea space.

      Regards,

      Sandeep rana

      Author's profile photo Former Member
      Former Member

      Hi Sandeep,

      I have promoted the IDEAS place created by you, as explorer is not supported
      with MTM yet this could be a cause that it loosing the association, regarding
      the third Business requirement

      "Exploration: Distribution
      of Infospace via MTM across environments without losing their association with
      the universes in the tenant on-boarded."

      Regards,

      Medha

      Author's profile photo PrakharRaj Singh Tomar
      PrakharRaj Singh Tomar

      Very informative blog Sohel.

      Thanks to Mani and Christina for additional inputs which clears a lot of questions.

      I still have a question though.

      With mutitenancy handle usage of server groups.

      What i mean is if a user 1 who is a general user (not a part of any tenant) schedules a report without selecting a server group, it goes to one of the available AJS.

      But if i put this user 1 under one of the tenants, is it possible that every schedule of this user will only run on a specific server group?

      I hope you all may understand where I am coming from and why i am trying to seek my answers in multitenancy.

      for others, we have a system where we have >30 line of businesses. About 15 of them uses servers groups. There are situation when the LOBs who don't have server groups run schedules on the AJSs which fall under server groups of those 15 LOBs i mentioned. This blocks the bandwidth of the LOBs who own those server groups. So if we create tenants for those 15 LOBs with their respective server groups, would a user from general population be able to use those servers of server groups under tenants or not?

      Author's profile photo Sohel Ahmed Syed
      Sohel Ahmed Syed
      Blog Post Author

      Hi Prakhar,

      I'm sorry for the late reply.

      I haven't seen server group security completely functional in BO there are many bugs/enhancements/ideas posted for this.

      While working with a customer on same kind of requirements (For 3.1) what I found is that even though you don't give view rights on a particular server group and while scheduling the report if he chooses first available server, the request may go to the server part of the server group on which user doesn't have view access.

      The workaround is to do some tweaks in the scheduling page code where in you can set the default option as use only the servers belonging to the server group instead of first available server, and setup server group security. It worked for me in 3.1 haven't tried this in 4.1 but I feel it should work.

      Regards,

      Sohel