Xenon BOXIAdminBestPractices

7/28/2019 Xenon BOXIAdminBestPractices

1/26

1 Copyright 2005 Xenon Consulting Inc. - All Rights Reserved Issue

BO XI Admin Best Prac


2/26

2 Copyright 2005 Xenon Consulting Inc. -All R ights Reserved Issue 4.1

Presenter

Dan Johnson

Xenon Consulting, Inc.

[email protected]


Outline

CMC Overview

CCM Overview

Establishing Groups

Adding / Deleting Users

Administering Rights


CMC Overview

The Central Management Console (CMC for

short) has replaced Business Objects

Supervisor as the Administrative application

for BOE XI

This CMC is web-based, and can be used from

any workstation that has access to the CMC

URL


3/26


CMC Overview

Launch Internet Explorer and type in the

following URL:

http://boexi:8080/businessobjects/enterprise11/admin/en/admin.cwr

boexi = server name

8080 = port number


CMC Overview

Select the Authentication Type, then type in

yourUser Name andPassword:


CMC Overview

The CMC replaces the need for BOs

Supervisor application. Heres what the CMC

looks like:


4/26


CMC Overview

This is the Folder module:


CMC Overview

This is the Objects module:

10 Copyright 2005 Xenon Consulting Inc. - All Rights Reserved Issue 4.1

CMC Overview

This is the Groups module:


5/26


CMC Overview

This is the Users module:


CMC Overview

This is the Server Groups module. Its not

populated because Im demonstrating a single-

server deployment:


CMC Overview

This is the Server module:


6/26


CMC Overview

This is the Categories module:


CMC Overview

This is the Inboxes module:


CMC Overview

This is the Universe Connections module:


7/26


CMC Overview

This is the Universe module:


CMC Overview

This is the Calendars module:


CMC Overview

This is the Events module:


8/26


CMC Overview

This is the Settings - Properties module:


CMC Overview

This is the Settings - Metrics module:


CMC Overview

This is the Settings - Cluster module:


9/26


CMC Overview

This is the Settings - Limits module:


CMC Overview

This is the BO Enterprise Applications module:


CMC Overview

This is the License Keys module:


10/26


CMC Overview

This is the

Authentication

module:


CCM Overview

The Central Configuration Manager (CCM for

short) partially replaces the Admin Console

used in previous versions of Business Objects

The primary function of the CCM is to provide

a status of the various servers needed to keep an

XI implementation up and running


CCM Overview

As you can see, the CCM provides a list of the servers in the

deployment, and gives a status and description of each server:


11/26


CCM Overview

From the CCM, its possible to Start, Stop, and Restart the

various servers contained in your XI deployment

In addition, you can also enable or disable specific servers:


CCM Overview

Please note that at the current time, the

CCM is available only on Windows-based

servers


Adding Groups

One of the first tasks a Business Objects

Administrator is charged with is setting up users

and groups

Some of the basic concepts from Supervisor do

carry over

With XI, youll still want to create the User

Groups first, and then add the users to those

groups


12/26


Adding Groups

Lets start by clicking on the Groups option

from the CMC home page:


Adding Groups

Well click on New Group to add a group:


Adding Groups

Ill name the group BONYMAUG, type in a

brief description, and clickOK:


13/26


Adding Users

Now that Ive added a group, Ill have to add a

few users. Select Users from the CMC home

page:


Adding Users

Select New User:


Adding Users

Well fill in the

appropriate

information and

match the settings

shown here

Next well clickOK

to update our

changes in the CMS

database:


14/26


Adding Users

Select the Member oftab at the top of the page,

and then click the Member ofbutton to add the

user to a pre-established group:


Adding Users

AddBONYMAUG to the list of groups that our

test1 user is a member of, then clickOK:


Deleting Users

A best practice is to

disable, but not delete users

who will no longer be using

the system

Check the box next to the

Account is disabled option

and clickUpdate:


15/26



Now weve set up a basic group and a user

name, but we havent explicitly assigned the

group (or user) any rights

Rights are the equivalent Permissions in

previous versions of the Business Objects



If I log in with the test1 user name, and choose

new, I see that I dont have the ability to create a

new Web Intelligence document:



The ability to create a Webi document must be

explicitly granted

To accomplish this, log into the CMC as an

Administrator, and underManage, select

BusinessObjects Enterprise Applications:


16/26



Now select Web Intelligence:



Select the Rights tab at the top, and then click

on the Check User Rightsbutton:



Select BONYMAUG from

the list of available groups,

and then click on the Show

Rightsbutton at the bottom of

your screen:


17/26



Here we can see that BONYMAUG has been

denied all Web Intelligence functionality:



Lets navigate back to the Web Intelligence

main page (within the CMC)

Once youre on the Rights tab, click

Add/Remove:



AddBONYMAUG to the list of groups with an

access level to Web Intelligence, then clickOK:


18/26



Again, well want to Check User Rights:



Select

BONYMAUG,

then click

Show Rights:



Well see

that we still

dont have

the ability to

create Webi

documents:


19/26



For the BONYMAUG group, select Advanced

under the Net Access column

This will allow us to edit the individual Web

Intelligence Rights we saw earlier:



Change the radio button for Allows creation of

documents to Explicitly Granted, then clickOK:



Now if we log in as test1, well have the ability

to create a new Web Intelligence document:


20/26



Unfortunately, ourtest1 user still doesnt have

access to the data contained in the eFashion

universe:



From the CMC home page, select Universes and

then eFashion:



Select the Rights tab, then Add/Remove:


21/26



Move BONYMAUG over to the Groups with

an access level for eFashion, then clickOK:



Change BONYMAUGs Access Level to View

on Demand, then clickUpdate:



Well Check User Rights forBONYMAUG to

ensure that we have Data Access:


22/26



Now lets see how we did. Well log into

InfoView using ourtest1 user name:



Select New and then Web Intelligence

Document:



Select eFashion:


23/26



Drag the Year object into the Result Objects panel,

then clickRun Query:



If weve configured

our user rights

correctly, we should

see the results of our

report:



Administration is similar to BO Supervisor in

that you should make changes at the group

(BONYMAUG) level as opposed to the user

(user1) level

Changes made at the user level should only be

made in very rare circumstances

Remember that youll have to add rights at the

application level first, and then at the universe (or

data) level


24/26


Wrapping Up

That wraps up the presentation, weve covered:

A CMC Overview

A CCM Overview

How to Establish Groups

Adding and Deleting Users

Best Practices for Administering Rights


The End

Any ?s


Additional Info

Major Changes:

Objects are stored in the File System, as opposed to

in the Repository

Repository consists of only five tables, three ofwhich are relatively small


25/26


Additional Info

Folders:

BOE XI introduces the folder concept, which is

similar to the document and universe domains in

Classic Business Objects

All published content is stored in a folder

All content is stored in only one folder

Ideally, the folder structure should mirror the

organizational structure


Additional Info

Categories:

Categories help users to classify published objects

(universes, reports, etc.)

An item can be stored in multiple categories

Categories can be thought of as an alternative

organizational structure


Additional Info

Pre-Defined Access Levels:

No Access Not able to see report content

View Can view folders or reports, as well as an instances of

the reports

Schedule All of the rights from the View group, but alsohas the ability to schedule objects (and therefore create new

instances of objects)

View on Demand in addition to the Schedule level rights,

has the ability to refresh the report immediately (without

scheduling)

Full Control all available rights


26/26


Additional Info

There are four types of advanced rights:

Explicitly Granted the user or group is given the

right

Explicitly Denied the user or group is denied the

right (note that denials take priority over grants)

Inherited inherits rights that were established at

another level (i.e. folder or group)

Not Specified because the right has not been

assigned, it is automatically denied


Additional Info

Key Concepts:

Children (sub-groups, sub-folders) inherit the rights

of their parents by default

Advanced Rights override inherited rights

Denied Rights override granted rights

Documents

Xenon BOXIAdminBestPractices