Learn how to configure and set up delegated administration in BusinessObjects Enterprise 4.1 for groups, and limit the availability of users and groups within the Central Management Console (CMC) to a specific sub-administrator group.
Key Concept
Once the delegated administration functionality is set up in the Central Management Console (CMC) of BusinessObjects, you can give permission to a set of administrative tasks to be performed by specific users and groups within the CMC. This allows the responsibility of performing administrative tasks within BusinessObjects Enterprise to be distributed between a main system administration and sub-administrators who can only administer a limited set of components. Thus more administrative tasks can be performed by sub-administrators with security and controls being placed on them so that they only administer what they need to administer and nothing else.
Using Delegated Administration in the CMC
Figure 1
Figure 1
The CMC Home page for the delegated_admin user
Figure 2
The delegated_admin user’s users and groups in the CMC
Figure 3
The list of users for the Financial Report Users Group
Configuring CMC Tab Access within Applications
Figure 4Figure 5
Figure 4
The CMC Home page
Figure 5
Select the CMC Tab Access Configuration option for the CMC
Figure 6
The configuration options for CMC Tab Access
Create and Configure a New Custom Access Level
Figure 4Figure 7
Figure 7
The CMC Access Levels page
Figure 8
Edit the properties of the access level
Figure 9
Change the General Properties for the new access level
Figure 10
Choose the Included Rights option
Figure 11
Modify the Included Rights for the new access level
Figure 12
Select the Included Rights options for the new access level
Note
Rights are the base units for controlling user access to the objects,
users, applications, servers, and other features in the BusinessObjects
platform. They play an important role in securing the system by
specifying the individual actions that users can perform on objects.
Subsequently, setting rights to the access level controls what action
that the delegated administrator is able to perform.
Figure 12
Create a New Group and Configure Group CMC Tab Access
Figure 4Figure 13
Figure 13
The Users and Groups screen in the CMC
Figure 14
Create the new delegated administrator’s user group
Figure 15
The new Delegated Admins Group is added to the CMC Users and Groups page
Figure 16
Configure the CMC Tabs rights for the new Delegated Admins Group
Figure 17
Configure the CMC Tabs for the Delegated Admins Group
Create a New User and Assign to a Group
Figure 13Figure 18
Figure 18
Create the new administrative user’s log-on credentials
Figure 19
Join the new group
Figure 20
Choose the destination group for the delegated admin user
Figure 21
Verify which users are members of the delegated administrator’s group
Assign Security Access to a Group
Figure 17Figure 22
Figure 22
Assign User Security to the Financial Report Users Group
Figure 23
Add principals to the Financial Report Users Group
Figure 24
Add and assign security for the principals to the Financial Report Users Group
Figure 25
Assign security to the Financial Report Users Group
Figure 26
Delegated administrator access is assigned to the Financial Report Users Group
Assign Top-Level Security View Access to All Groups
Figure 2Figure 27
Figure 27
Assign Top-Level Security to All Groups
Figure 28
Assign top-level security to the Delegated Admins Group
Remove Security Access for Some Groups
Figure 29
Figure 29
Check the access levels for the Universe Designer Users group
Figure 30
Assign security for the Universe Designer Users group
Figure 31
Check the Universe Designer Users group delegated administrator’s access settings
Figure 32
Check the Universe Designer Users group’s Everyone group’s access settings
Adam Getz
Adam Getz currently serves as a Manager, Business Intelligence for CGI Federal. In this position, he is leading a large business intelligence and data warehousing implementation for a federal client. He is a thought leader in the field of information technology and an expert in the deployment of leading business intelligence, database management, and data integration products. He has presented at a variety of local, national, and international events, including the 2006 BusinessObjects International Conference, 2007 Oracle BIWA Summit, 2008 Oracle Open World, and 2010 and 2011 ASUG SAP BusinessObjects User Conferences. In addition, Adam is the creator and main author of bi-insider.com, a website, portfolio, and blog that provides rich technical and functional content to business intelligence and data warehousing professionals. He has also published numerous technology white papers that have focused on various topics within business intelligence and data warehousing. Adam currently serves as the chairperson of the Washington DC Business Objects User Group.
You may contact the author at adagetz@yahoo.com.
If you have comments about this article or publication, or would like to submit an article idea, please contact the editor.
