Purpose:
The purpose of this document is to set rights & security at “Repository” level in SAP BusinessObjects BI platform or Information platform services for SAP Data Services 4.x designer user & SAP Business Objects Data Services Management console users.
Overview:
Environment Details:
Operating system: Windows Server 2008 64 Bit
Database:Microsoft SQL Server 2008 R2
Web Application:Tomcat
SAP Business Objects Tools:SAP Business Objects Information Platform Services 4.1 SP2; SAP Data Services 4.1 SP2
Repository version:BODS 4.X
User & rights security management in SAP Business Objects Information Platform Services/ SAP Business Objects BI Platform:
Groups are collections of users who share the same account privileges. Therefore, you may create groups that are based on department, role, or location. Groups enable you to change the rights for users in one place (a group) instead of modifying the rights for each user account individually. Also, you can assign object rights to a group or groups.
In the "Users and Groups" area of the Central Management Console (CMC), you can create groups that give a number of people access to the report or folder. This enables you to make changes in one place instead of modifying each user account individually.
In addition to the basic SAP BusinessObjects BI platform or Information platform services group accounts, Data Services includes several default group accounts:
Account name | Description |
Data Services Administrator | Members of this group have access to all Data Services administrative
|
Data Services Multi-user Administrator | Members of this group are limited to managing secure central repositories. This role is a subset of the Data Services Administrator role. Multiuser administrators can: • Add and remove secure central repositories. • Manage users and groups. • View secure central repository reports. |
Data Services Monitor User | Members of this group have access limited to options available from the Status tabs. For example, a monitor user can abort batch jobs but cannot execute or schedule them. A monitor user can restart, abort, or shut down an Access Server, service, adapter instance, or client interface but cannot add or remove them |
Data Services Profiler Administrator | Members of this group are limited to managing profiler repositories. This role is a subset of the Administrator role. Profiler administrators can: • Manage profiler tasks in any profiler repository. • Manage the Profiler configuration. |
Data Services Profiler User | Members of this group are limited to managing profiler tasks in the profiler repository that is configured for the user. |
Data Services Operator | Members of this group have all Administrator privileges except they cannot modify repository, access, or CMS servers nor update datastore
|
Data ServicesDesigner | Members of this group have access to the Designer |
Data Services Administrator: The Data Services Administrator group account is granted access to all rights in the following table
Right Name | Designer Users w/ Viewaccess | Designer Users w/ Full access | Monitor Users | Multi-user Administrator | Operator Users | Profiler
Users | Profiler Users |
View webservices status |
|
| X |
| X |
|
|
Manage central repository groups |
|
|
| X |
|
|
|
View profiler status |
|
|
|
|
| X | X |
Manage RFC client and server configurations |
|
|
|
| X |
|
|
Manage datastore configurations |
|
|
|
|
|
|
|
Manage certification log configurations |
|
|
|
|
|
|
|
Manage access server configurations |
|
|
|
|
|
|
|
Manage batch job history |
| X |
|
| X |
|
|
Manage status interval configuration |
|
|
|
|
|
|
|
Execute batch job |
| X |
|
| X |
|
|
View RFC client status |
|
| X |
| X |
|
|
Manage repository resource |
|
|
|
| X |
|
|
Manage profiler configurations |
|
|
|
|
| X |
|
Manage real-time service status |
|
|
|
| X |
|
|
Manage real-time client interface status |
|
|
|
| X |
|
|
Manage real-time status |
|
|
|
| X |
|
|
View real-time client interface status |
|
| X |
| X |
|
|
Manage real-time logs |
|
|
|
| X |
|
|
View real-time service status |
|
| X |
| X |
|
|
View real-time status |
|
| X |
| X |
|
|
View adapter status |
|
| X |
| X |
|
|
View real-time logs |
|
| X |
| X |
|
|
Manage webservices configurations |
|
|
|
| X |
|
|
View Validation sample data | X | X | X | X | X | X | X |
Access to Data Quality Reports | X | X | X | X | X | X | X |
View server group information | X | X | X |
| X |
|
|
Access to Validation Dashboard | X | X | X | X | X | X | X |
Access to Operational Dashboard | X | X | X | X | X | X | X |
Access to Auto Documentation | X | X | X | X | X | X | X |
View DataQuality sample data | X | X | X | X | X | X | X |
Access to Administrator | X | X | X | X | X | X | X |
Access to Impact and Lineage | X | X | X | X | X | X | X |
Manage adapter configurations |
|
|
|
| X |
|
|
Administrator overview | X | X | X | X | X | X | X |
View batch job history | X | X | X |
| X |
|
|
Manage server group configurations |
| X |
|
| X |
|
|
Access to Designer | X | X |
|
|
|
|
|
Reference Material:
Administrator Guide:
http://help.sap.com/businessobject/product_guides/boexir4/en/xi4_ds_admin_en.pdf
SAP Data Services 4.x:
Regarding SAP Business Objects screen shots please wait…