Skip to Content
Actions

Creating BO Security Matrix using SBOPRepositoryExplorer

June 2, 2014 | 532 Views |
 bussinessobjectscmsmatrixrepositorySAP BusinessObjects Business Intelligence Platform 4.0sboprepositoryexplorerSecurity
Follow

This post contains how we can create an useful security matrix in SAP BO BI using the SBOPRepositoryExplorer connector.

Shortly I want to show you next content for this example of security matrix:

  • Access Levels (ACLs) definition;
  • Groups and Users Relation;
  • Application Rights;
  • Folder Rights;
  • Universe Rights;
  • Connection Rights.

1. How to extract ACLs


Using the universe provided in SBOPRepositoryExplorer and WebIntelligence:

/wp-content/uploads/2014/06/universe_selection_464858.png

We could use next dimensions to extract the ACLs from our CMS repository:

Next step is create some required variables for our example:


=If ([Specific Right]=0 And [Right Group Name]<>"General")
     Then "Overwrite General"
          Else
               If ([Specific Right]=1 And [Right Group Name]<>"General")
                    Then "Specific Right"






=If  (Count([CRole Right ID]) Where([CRole Right Granted]=1))>0
     Then 1
          Else
               If (Count([CRole Right ID]) Where([CRole Right Granted]=0))>0
                    Then 0
                         Else Count([CRole Right ID])

Now we can create a cross-table like:

And for the values ( ) we can use conditional formatting rules:

And the final result is (example):

2. Groups and Users Relation

For this kind of content we can use different perspectives/views in function of our requirements, but anyway, we can use next basic dimensions:


Here we have an example with:

“Group Name”

“User Name”


and for the value we can define next formula:


=If Count([Group Name])>=1
     Then "X"
          Else ""


Other example using full path:

3. Application Rights

For applications we can use next dimensions:

A possible example:

4. Folder Rights

For folder rights we can use the same logic than application rights:

5. Universe Rights


In next example we are showing rights for universe folders:

6. Connection Rights


Like the previous one we can use next dimensions:


This is a simple way to create online our security matrix for SAP BO BI.

Thanks and enjoy!

Jorge Sousa


To report this post you need to login first.

11 Comments

You must be Logged on to comment or reply to a post.

    1. Jorge Sousa Post author

      Many many thanks Hans!

      I’m working in a new release (at the end of this week) with more features: possibility to attach an XML file with your own SAP BO BI – CMS queries and an Excel with personal data to do on memory, for example some comparisons.

      Best regards,

      Jorge Sousa

      (0) 
  3. Shaheen Usman

    Hi Jorge,

    I would like to see all the folders and sub folders and the groups mapped on these folders. Can you please guide me on how I can pull the data.

    (0) 
    1. Jorge Sousa Post author

      Dear Shahee,

      Sorry for the delay, but yes, you can use next objects in the universe:

      – From folders:

      + Folder Relative Path

      + Folder Name

      – From Rights ACLS –> Folders Rights

      + FolderRight Group Name

      + FolderRight Role Name

      + FolderRight Is Inherited

      I hope help you.

      BR,

      Jorge Sousa

      (0) 
  4. S man

    Hi,

    Really this a tool where admins are waiting  for…

    At the same can you help me out to find list of reports and instance count which are stored in users personal folder ?

    Moreover really thanks for your support to resolve RDBMS error ..

    Thanks

    (0) 
    1. Jorge Sousa Post author

      Hi,

      Ya, I think the same.

      You can select next objects in the universe:

      – Personal Folders –> PFolder Path

      – Personal Folders –> PFolder Name

      – Personal Documents –> PDocument Name

      – Personal Documents –> PDocument is Instance

      With “PDocument is Instance” you can filter with 0=No instance and 1=Is an instance.

      Thanks and regards,

      Jorge Sousa

      (0) 
  6. Michael Stettler

    Hi,

    If i try to edit the connection, i got the following error:

    Fehler:

    Specified RDBMS is invalid : SBOP Repository Explorer

    Fehlerursache

    Interface requested not found : csOCA

    Fehlerursache

    Session ID was not specified

    any ideas?

    thx for reply!

    Michael

    (0) 
    1. Jorge Sousa Post author

      Hi Michael,

      It seems that the connector was not found by the IDT. Please review the open.sbo or also do a backup of this and replace by the provided in the zip.

      Please, review the installation steps provided in the pdf with the connector.

      If you still have the error, send me a print screen with the folder where you deploy the connector and also the open.sbo file to the email jorge.lourenco@snapspace.pt

      Best regards,

      Jorge Sousa

      (0) 

Leave a Reply