Security Approach for SAP BI-BO Integration project

[Former Member]

Hi,

Two approaches are possible to build security for a SAP BI-BO Integration project.

Approach-1:

Restrictions on both SAP BI (viz. InfoAreas / SAP BI Queries) and BO (Folder, Report, Activity).

This approach is bit more complex, but would also handle situations where BO may not be used directly on top of SAP BI (viz. Data export from SAP BI using Open Hub to other down-stream systems.)

Approach-2 :

Handle security at only BO Level and do not restrict at SAP BI Level.

This approach is dependent on BO for the current project to handle security & is more flexible. Security is handled at only one level. It could be a potential risk / an audit issue, since there is a dependance on future projects' to always handle security appropriately at their end.

Request your suggestions / best practices; to freeze to one of the two approaches.

regards,

Rajesh K Sarin

[IngoH · Accepted solution]

Hi,

data level security on the BusinessObjects side is not possible right now and therefore it has to be a mixed approach where the SAP BI side handles the actual data authorizations and the BusinessObjects side handles the access to the reports.

Ingo

[Former Member · Accepted solution]

Thanks Ingo for your consistent help and guidance.

Appreciate it.

regards,

Rajesh K Sarin

[Former Member · Accepted solution]

Hi Ingo

If in the BO side level no exists data level security, then this affects the performance for query response time because when i execute a query BO generate a small cube in execution time with all free characteristics, the user lost the level detail for the same querys in BO. In BEx the user only execute the query with the rows and columns default, and then if drag and drop a new free characteristic so re execute the query and so on for add another free characteristic.

Thanks

Cristopher

[IngoH · Accepted solution]

Hi cristopher,

BEX is an OLAP client which executes the request on demand. if you compare that to Web Intellignce then you not comparing the same items. Web Intelligence is asking for all the elements that you include into the query panel.

ingo

[Former Member · Accepted solution]

Hi Ingo

So, WebI is not the tool for comparison with Bex? What is the OLAP tool for BO side?

With WebI, The note "1294892 - Slow performance problem with Webi report using OLAP universe ontop of SAP BW BEx" help us to the performance?

Thanks

[IngoH · Accepted solution]

Hi Cristopher,

you started this with questions around the security. what is it that you are looking for here ?

ingo

[Former Member · Accepted solution]

Hi Ingo

When i use instance for execute QUERY WebI in BO, from Universes Bex, the authorization level security is null. But when i execute the WebI without instances, the authorization level security is OK. This is the reason.

Thanks

[IngoH · Accepted solution]

Hi,

when you call a WebI report with SSO on demand all security is being used.

In case you want to schedule a report and share it with several others and still keep security intact you can use a publication using server side trust .

take a look at the installation guide for the SAP Integration Kit

ingo

[Former Member]

Ingo,

We are planning to implement new BOE which will be integrated with BI. Can you please provide me any documents or any training to design security effectively? Right now I am working on BI 7.0 security.

Thanks in Advance,

Kumar.

[IngoH]

Hi Kumar,

documents can be found here:

Getting started

https://www.sdn.sap.com/irj/boc/business-objects-for-sap?rid=/webcontent/uuid/20f83c7e-3f2a-2c10-7db... [original link is broken]

Software / Installation

https://www.sdn.sap.com/irj/boc/business-objects-for-sap?rid=/webcontent/uuid/a02d2792-452a-2c10-7c8... [original link is broken]

Content Library

https://www.sdn.sap.com/irj/boc/business-objects-for-sap?rid=/webcontent/uuid/70041b55-b52a-2c10-87a... [original link is broken]

Ingo

[Former Member]

Hi Kumar

See this note: 1294892 - Slow performance problem with Webi report using OLAP universe ontop of SAP BW BEx

Thanks

[IngoH]

Hi,

data level security on the BusinessObjects side is not possible right now and therefore it has to be a mixed approach where the SAP BI side handles the actual data authorizations and the BusinessObjects side handles the access to the reports.

Ingo