Application/User level Security Setup for in BI 4.0 after Migration

[Former Member]

We migrated the objects/users/groups from XI R2 to BI 4

I configured Windows AD setup after importing the objects. 

On Folder, Group and Application level i did the setup by going to Advanced (add/modify) tab and granted/denied the options.

But now, i am getting complaint from my client that for some of users they are able to DELETE the objects which shouldn't be the case.

They want to make sure NO USER should DELETE any object through launchpad.

I dont know how can i set that up, i looked all the placed but didn't get exact guidance. Please help.

Thanks.

[Former Member · Accepted solution]

Hi Tilak,

please check the below urls.

http://scn.sap.com/community/bi-platform/blog/2010/04/13/building-a-security-model-in-sap-boe-xi3

http://blogs.hexaware.com/business-objects-boogle/business-objects-content-management-planning

http://blogs.hexaware.com/business-objects-boogle/businessobjects-administration-custom-access-level...

http://www.gulland.com/wp/?p=345

all the above will give some understanding of Basic security model.

Below are the few of the Security Best Practices:

1. Grant  rights to groups on folders. Although rights can be granted on  individual objects or users, the security model can become difficult to  maintain.
2. Use predefined rights wherever possible. Understand the additional complexity that advanced rights can introduce.
3. Avoid breaking inheritance, while understanding it is sometimes necessary
4. Add multiple users to Administrators group rather than sharing Administrator user account to improve traceability
5. Document and maintain your security structure outside of the CMC- MS Excel is a good choice
6. Allot  time in your upgrade/migration for administrative staff to understand  both the new CMC interface/workflows as well as its new features
7. Use custom access levels where you would have previously resorted to advanced rights.
8. Identify opportunities to limit the scope of rights instead of breaking inheritance
9. Take advantage of the Permissions Explorer and Security Query tools to diagnose and correct security issues

[Former Member]

Just go to CMC, Applications, Select BILaunchPad security settings. Ensure to add the paticular groups and provide all the necessary rights that you want to provide appropriately.