Skip to Content
Author's profile photo Jorge Sousa

Creating BO Security Matrix using SBOPRepositoryExplorer

This post contains how we can create an useful security matrix in SAP BO BI using the SBOPRepositoryExplorer connector.

Shortly I want to show you next content for this example of security matrix:

  • Access Levels (ACLs) definition;
  • Groups and Users Relation;
  • Application Rights;
  • Folder Rights;
  • Universe Rights;
  • Connection Rights.

1. How to extract ACLs


Using the universe provided in SBOPRepositoryExplorer and WebIntelligence:

/wp-content/uploads/2014/06/universe_selection_464858.png

We could use next dimensions to extract the ACLs from our CMS repository:

Next step is create some required variables for our example:


=If ([Specific Right]=0 And [Right Group Name]<>"General")
     Then "Overwrite General"
          Else
               If ([Specific Right]=1 And [Right Group Name]<>"General")
                    Then "Specific Right"




=If  (Count([CRole Right ID]) Where([CRole Right Granted]=1))>0
     Then 1
          Else
               If (Count([CRole Right ID]) Where([CRole Right Granted]=0))>0
                    Then 0
                         Else Count([CRole Right ID])



Now we can create a cross-table like:

And for the values ( ) we can use conditional formatting rules:

2. Groups and Users Relation

For this kind of content we can use different perspectives/views in function of our requirements, but anyway, we can use next basic dimensions:


Here we have an example with:

“Group Name”

“User Name”


and for the value we can define next formula:


=If Count([Group Name])>=1
     Then "X"
          Else ""




Other example using full path:

3. Application Rights

For applications we can use next dimensions:

A possible example:

4. Folder Rights

For folder rights we can use the same logic than application rights:

5. Universe Rights


In next example we are showing rights for universe folders:

6. Connection Rights


Like the previous one we can use next dimensions:


This is a simple way to create online our security matrix for SAP BO BI.

Thanks and enjoy!

Jorge Sousa


Assigned Tags

      11 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo Hans Segers
      Hans Segers

      This is great.

      This is a tool we were waiting for ...

      Hans

      Author's profile photo Jorge Sousa
      Jorge Sousa
      Blog Post Author

      Many many thanks Hans!

      I'm working in a new release (at the end of this week) with more features: possibility to attach an XML file with your own SAP BO BI - CMS queries and an Excel with personal data to do on memory, for example some comparisons.

      Best regards,

      Jorge Sousa

      Author's profile photo Jorge Sousa
      Jorge Sousa
      Blog Post Author

      There is a new release with more features: create own CMS queries from an external XML file and import from an Excel file own data to compare online data with offline data:

      http://www.snapspace.pt/download/SBOPRepositoryExplorerFree201.zip

      Jorge Sousa

      Author's profile photo Former Member
      Former Member

      Hi Jorge,

      I would like to see all the folders and sub folders and the groups mapped on these folders. Can you please guide me on how I can pull the data.

      Author's profile photo Jorge Sousa
      Jorge Sousa
      Blog Post Author

      Dear Shahee,

      Sorry for the delay, but yes, you can use next objects in the universe:

      - From folders:

      + Folder Relative Path

      + Folder Name

      - From Rights ACLS --> Folders Rights

      + FolderRight Group Name

      + FolderRight Role Name

      + FolderRight Is Inherited

      I hope help you.

      BR,

      Jorge Sousa

      Author's profile photo S man
      S man

      Hi,

      Really this a tool where admins are waiting  for...

      At the same can you help me out to find list of reports and instance count which are stored in users personal folder ?

      Moreover really thanks for your support to resolve RDBMS error ..

      Thanks

      Author's profile photo Jorge Sousa
      Jorge Sousa
      Blog Post Author

      Hi,

      Ya, I think the same.

      You can select next objects in the universe:

      - Personal Folders --> PFolder Path

      - Personal Folders --> PFolder Name

      - Personal Documents --> PDocument Name

      - Personal Documents --> PDocument is Instance

      With "PDocument is Instance" you can filter with 0=No instance and 1=Is an instance.

      Thanks and regards,

      Jorge Sousa

      Author's profile photo Jorge Sousa
      Jorge Sousa
      Blog Post Author
      Author's profile photo Former Member
      Former Member

      Hi,

      If i try to edit the connection, i got the following error:

      Fehler:

      Specified RDBMS is invalid : SBOP Repository Explorer

      Fehlerursache

      Interface requested not found : csOCA

      Fehlerursache

      Session ID was not specified

      any ideas?

      thx for reply!

      Michael

      Author's profile photo Jorge Sousa
      Jorge Sousa
      Blog Post Author

      Hi Michael,

      It seems that the connector was not found by the IDT. Please review the open.sbo or also do a backup of this and replace by the provided in the zip.

      Please, review the installation steps provided in the pdf with the connector.

      If you still have the error, send me a print screen with the folder where you deploy the connector and also the open.sbo file to the email jorge.lourenco@snapspace.pt

      Best regards,

      Jorge Sousa

      Author's profile photo Former Member
      Former Member

      Hi Jorge

      thanks for your Support, now it's working!

      Kind regards,

      Michael