Configuring CMC Delegated Administration for Groups in BusinessObjects Enterprise 4.1

  • by Adam Getz, Manager – Business Intelligence, CGI Federal
  • May 15, 2015
Learn how to configure and set up delegated administration in BusinessObjects Enterprise 4.1 for groups, and limit the availability of users and groups within the Central Management Console (CMC) to a specific sub-administrator group.
Learning Objectives

Reading this article you will learn how to:

  • Configure the Central Management Console (CMC) tab access within applications
  • Create and configure a new custom access level
  • Create a new group and configure group CMC tab access
  • Assign users to a group
  • Assign security access to a group
  • Assign top-level security view access to all groups
  • Un-assign security access to unnecessary groups
Key Concept
Once the delegated administration functionality is set up in the Central Management Console (CMC) of BusinessObjects, you can give permission to a set of administrative tasks to be performed by specific users and groups within the CMC. This allows the responsibility of performing administrative tasks within BusinessObjects Enterprise to be distributed between a main system administration and sub-administrators who can only administer a limited set of components. Thus more administrative tasks can be performed by sub-administrators with security and controls being placed on them so that they only administer what they need to administer and nothing else.

The main tool for performing administration tasks and conducting infrastructure management, deployment, and configuration in BusinessObjects Enterprise 4.1 is the Central Management Console (CMC). The CMC provides control of the entire BusinessObjects environment for tasks that include setting up user roles, configuring security and access, performing server administration, and monitoring system usage. In addition, the CMC allows administrators to easily access and configure the system, while controlling the overall access rights, applications, and end-user viewing experience.

By default, a system administrator that has access to the CMC has access to all the tools within the CMC and the system administrator can administer all aspects of the BusinessObjects Enterprise system. However, there are times that limited access should be provided to the CMC. Only a subset of the administration tools should be available to a sub-administrator (aka delegate administrator). And the sub-administrator should have limited user privileges within the tools that the sub-administrator has access to. The process of setting up and limiting the access to the tools within the CMC is known as delegated administration.

Delegated administration allows for controlled access to a subset of objects and settings within the CMC and allows for administrative tasks to be divided among group administrators or sub-administrators. For example, you may want people from different departments to manage their own users and groups. Or you may have one administrator who handles high-level management of the platform, but you want all server management to be handled by people in your IT department. Delegated administration provides a method to accomplish dividing access to the CMC and controlling the access to perform administrative tasks.

A useful example of delegated administration is to let a sub-administrator manage or edit user accounts for a particular group without having access to all the user accounts in the system. In this article I explain the details for setting up delegated administration of groups. Delegated administration can also be set up for other tools within the CMC including users, folders, universes, connections, and instances.

Adam Getz

Adam Getz currently serves as a Manager, Business Intelligence for CGI Federal. In this position, he is leading a large business intelligence and data warehousing implementation for a federal client.  He is a thought leader in the field of information technology and an expert in the deployment of leading business intelligence, database management, and data integration products. He has presented at a variety of local, national, and international events, including the 2006 BusinessObjects International Conference, 2007 Oracle BIWA Summit, 2008 Oracle Open World, and 2010 and 2011 ASUG SAP BusinessObjects User Conferences. In addition, Adam is the creator and main author of bi-insider.com, a website, portfolio, and blog that provides rich technical and functional content to business intelligence and data warehousing professionals. He has also published numerous technology white papers that have focused on various topics within business intelligence and data warehousing. Adam currently serves as the chairperson of the Washington DC Business Objects User Group.

See more by this author


Comments

No comments have been submitted on this article. 


Please log in to post a comment.

To learn more about subscription access to premium content, click here.