Blogs / SAP / SAP BusinessObjects / SAP BusinessObjects Best Practices: Effective Delegation of CMC Access

SAP BusinessObjects Best Practices: Effective Delegation of CMC Access

Oct 16, 2017

SHARE

As part of the SAP BusinessObjects landscape management, administrative delegation becomes a necessity with growth in the landscape and adoption. From a single admin managing the entire role to multiple people managing the single system, setting up the delegation effectively is vital for the proper functioning of the SAP BusinessObjects system.

Common delegation tasks include providing access to parts of CMC like User management or Promotion management. In this blog, we will see the best practices in effective delegation of SAP BusinessObjects landscape management.
 

Role Matrix

 
The first step in the process is to identify the role matrix, which highlights the types of roles & access needed to perform different activities. The following is an example of a role matrix.

RoleCMC Tabs
User ManagementUsers and Groups, User attribute management
Content ManagementAccess levels, Folders, Categories, Universes, Connections, OLAP Connections
Promotion ManagementPromotion Management
AuditorsAuditing, Query results, Cryptographic Keys
Server AdministratorServers, Instance Manager, Events

This role matrix helps in dividing the responsibilities and assigning them to one or more users/groups.
 

Delegated Group

 
The delegated group is used to implement the roles in the SAP BusinessObjects systems. These groups are assigned for each role and the relevant CMC tabs access are provided for the groups. The groups can be prefixed / suffixed (e.g.: DG) to identify that it is for delegated access according to the naming policy followed. The following are the group mappings for the above roles.

GroupsRole
User Management – DGUser Management
Content Management –DGContent Management
Promotion Management –DGPromotion Management
Auditors –DGAuditors
Server Admin –DGServer Administrator

Restricting CMC Tab Access

 
The next step would be to restrict the CMC access by default. Navigate to applications tab and open the context menu of Central Management Console and select CMC Tab access Configuration.

SAP BusinessObjects Best Practices: Effective Delegation of CMC Access

Select CMC Tab access to Restricted. Save to apply the setting. By default the CMC access will be restricted which can be overridden explicitly for each of the groups.

SAP BusinessObjects Best Practices: Effective Delegation of CMC Access

Creating Groups

 
The next step would be to create the groups. The groups can be created from the User and Groups section in the CMC. Navigate to this section and click on ‘Create a group’.

SAP BusinessObjects Best Practices: Effective Delegation of CMC Access


 
Provide the group name of the mapping created and create the group for all the mapping

SAP BusinessObjects Best Practices: Effective Delegation of CMC Access

Providing CMC Tab Access to the Groups

 
The next step is to provide necessary CMC Tab access to the groups. On the context menu of the group select CMC Tab configuration.
 

SAP BusinessObjects Best Practices: Effective Delegation of CMC Access

Select the necessary tabs and grant explicit access to them. The selected ones will be have permission with green icon.

SAP BusinessObjects Best Practices: Effective Delegation of CMC Access

Adding Users to the Group

 
Finally, add the users to their respective groups using the Users and Groups tabs. When the users login to the CMC, they will be able to access the CMC with only the set of Tabs that are designated to them.
 

Key Practices for Delegation

 
These are some of the key practices that should be followed in order to setup a delegated system:

  1. Provide restricted access to only those resources needed
  2. Have a flat role structure and do not overlap different roles into one
  3. Have a direct group to role mapping. Avoid having single group for multiple roles
  4. Audit the users in the Group and revoke access as needed

Got questions? Click here to get in touch.


Corporate HQ:
5920 Windhaven Pkwy, Plano, TX 75093

+1 888-227-2794

+1 972-232-2233

+1 888-227-7192

solutions@visualbi.com


Copyright © Visual BI Solutions Inc.

Subscribe To Our Newsletter

Subscribe To Our Newsletter

Join our mailing list to receive the latest news and updates from our team.

You have Successfully Subscribed!

Share This!

Share this with your friends and colleagues!