Security Knowledge Framework

By Rick Epstein

For information on using APOS solutions to help you bolster and manage security, visit our more recent series of security posts.

It is always difficult to dive into a topic that is both very large and very granular in nature. SAP BusinessObjects security is just such a topic. Where do we start?
Experienced administrators will have a good grasp on the basics of security administration, and will want to get granular very quickly. Those who are just coming to the topic of SAP BusinessObjects security, or who are not hands-on administrators, but need a better understanding of security to ensure corporate data governance objectives are being met, will benefit from more high-level discussion.

Well, as they say, you can't please everyone.

At the risk of alienating some security veterans, I'm going to start at the 30,000-foot level, just so we can all get onto the same page as quickly as possible. If we're going to have a meaningful conversation about security, we first have to make sure we're all speaking the same language. I promise we will get granular quickly, with tips and tricks that both veterans and beginners will be able to appreciate.

To start, let's establish a frame of reference -- a Security Knowledge Framework.
What is the Security Knowledge Framework? It is the collection of concepts and definitions that you need to understand to implement and manage an efficient and effective security model in SAP BusinessObjects. It helps you establish your security requirements and develop your security model.

At its most basic, security is about access -- ensuring that the appropriate people have access to the appropriate information. But the converse is equally important -- ensuring that sensitive information does not fall into inappropriate hands. Access is all-important, so my next post will examine access levels in SAP BusinessObjects.

Security Blogging with Rick Epstein

For information on using APOS solutions to help you bolster and manage security, visit our more recent series of security posts.

SAP BusinessObjects Security expert Rick Epstein of ResolvIT Inc. recently co-hosted a webinar with APOS concerning Security Architecture & Management in SAP BI 4. (View the recorded webinar.) The webinar touched on many areas of SAP BusinessObjects security., including security model design and migration, data governance, and regulatory compliance. Rick will be following up on that very well received webinar with a series of security-related guest posts on this blog.

Rick's professional focus is on SAP BusinessObjects security, report and universe design, process streamlining and data consolidation -- all with the objective of helping organizations establish their SAP BusinessObjects deployment as the single source of truth for operational excellence and efficient planning. He has implemented SAP BusinessObjects security models in numerous industries, including healthcare, aerospace and defense, and manufacturing.

Why You Need to Focus on Security

Those of you who attended the webinar, or watched the recorded webinar, will know that we started out with an overview of how growing BI volume and complexity have made the work of BI platform managers and administrators much more difficult. BI volume and complexity raise many issues for system analysis, administration, storage, query management and publishing, but none is more important than ensuring that the right people -- and only the right people -- have access to appropriate information within your system.

With the increasing emphasis on mobile and self-serve BI, the roles of BI platform managers and administrators will become even more demanding. If you are one of these people, the security of your BI platform has to be very high on your list of concerns.

Our first focus is generally on the accessibility of data -- getting our data into data warehouses, moving our reports between environments, bursting reports to a wide variety of information consumers, etc. We spend so much time getting these things right that we may not fully consider what can go wrong. Worse still, we may not know something can go wrong until it does. Bringing resources to bear on the issue of security is part of the solution. The other, equally important, parts are knowledge and experience.

Topics for Discussion

Rick will start his series of blog posts by taking a deeper look at the Security Knowledge Framework. What is the Security Knowledge Framework? It is the collection of concepts and definitions that you need to understand to implement and manage an efficient and effective security model in SAP BusinessObjects. It helps you establish your security requirements and develop your security model. The first order of business is to make sure we're speaking the same language.

Future entries will drill down into areas such as:

• Security model design and implementation
• Security model migration
• Security assessment
• Regulatory compliance
• Data governance

Do you have a specific security-related question? Contact Rick Epstein at repstein@resolvitinc.com. 

Case Study: Social Services Agency, Santa Clara County

The Social Services Agency (SSA) of Santa Clara County, CA, spoke to us recently about their experience with our APOS Storage Center and APOS Insight solutions.

The SSA's 600-plus BI accounts currently use Desktop Intelligence and Web Intelligence as their primary report delivery media. At the time of writing, the SSA was in the process of planning its migration to BI 4, so investigation of and preparation for the inevitable full adoption of Web Intelligence was also under way. More recently, the BI team has been delivering BI to the agency's information consumers via SAP BusinessObjects Dashboards (formerly Xcelsius).

In 2011, after receiving recommendations from peers at an SAP BusinessObjects conference, SSA implemented APOS Storage Center. SSA needed a strategy and solution for backing up, archiving, and selectively restoring reports. Aside from needing to implement a reliable backup solution, they wanted to optimize system performance and have the means to comply quickly and easily with regulatory requirements through selective restore.

In 2013, as SSA was preparing for their migration to SAP BusinessObjects BI 4, they were looking for a means of doing an inventory and forming a complete understanding of their BI system and what is currently being used. Their positive experience with APOS led them to contact APOS again.

Thinh Hong, Information Systems Manager with SSA, summed up her experiences with these APOS solutions:

APOS Storage Center provides us with an efficient, rules-based means of cleaning up our BI environment, and the ease with which it allows us to back up and selectively restore objects has been very useful. We can archive and retrieve historical instances in a neutral format, which is important, because we maintain a five-year window on instances for regulatory compliance.

…

APOS Insight's impact analysis capabilities allow us to see what effect changes to our data model will have downstream. It has allowed us to analyze SAP BusinessObjects metadata effectively. The information we've gathered through Insight has been very useful in helping us to manage and troubleshoot our BI environment. We will be using APOS Insight to compare environments pre- and post-migration to benchmark performance and to ensure security has translated to the new system properly, and to build a list of reports for conversion from Desktop Intelligence to Web Intelligence.

Read the complete case study.

Dashboard Design and Full-Spectrum BI

In a recent APOS webinar, SAP's Ian Mayor described SAP BusinessObjects BI 4 as a "full-spectrum" approach to business intelligence. While reporting remains the standard for attaining and maintaining operational excellence, the full spectrum approach to BI complements such reporting with mobility (dashboards and apps) and self-serve BI (agile visualization).

Mobility is one of the key themes in SAP BusinessObjects BI 4. Mobility is often cited by customers as a motivation to migrate. The increased emphasis on mobility and agile visualization are portents of the interactive, proactive and collaborative future of BI. This emphasis recognizes that the vast majority of enterprise employees are now knowledge workers who contribute to the enterprise through their interaction with and analysis of enterprise information.

Nowhere is the bright future of mobile BI more clear than in the increased emphasis on dashboards and Web apps. Mobile BI is no longer just for executives. As the role of the dashboard designer becomes more critical to the evolution of BI within the enterprise, SAP's Design Studio offering unites dashboard and Web app design in a single environment.

Using Design Studio, dashboard designers are building engaging experiences for a wide variety of enterprise users. The trend in dashboards is away from static presentations toward customized and interactive presentations, which not only deliver timely information in an easily digested format, but also allow information consumers to explore the data and find what they need quickly.

The transition to Design Studio is not without challenges, and we recently explored those challenges in an SAP Community Network blog post. You can manage some of those challenges with third-party solutions such as the APOS Dashboard Migrator, which will allow you to leverage your Xcelsius investment within Design Studio.

And, as always, there is help available in the APOS Migration Webinar series, particularly in the upcoming April 24 webinar on Design Studio with SAP's Ian Mayor.

APOS Announces Release of Dashboard Migrator for SAP BusinessObjects Design Studio

APOS Systems Inc., a leading provider of well managed business intelligence (BI) solutions for SAP BusinessObjects, announces its new Dashboard Migrator for SAP BusinessObjects Design Studio. The Dashboard Migrator is a plug-in that lets you leverage your existing SAP BusinessObjects Dashboards (formerly known as Xcelsius) development in the new SAP BusinessObjects BI 4.1 Design Studio environment. Using the Dashboard Migrator, dashboard developers can embed Xcelsius components and complete dashboards in their Design Studio projects.

Read full press release...

New: Xcelsius Activity Logging with APOS Insight

APOS Insight for SAP BusinessObjects XI 3.1 and BI 4.x now has Xcelsius Activity Logging capabilities.

We've been hearing for some time from platform managers and dashboard designers that they need better ways to understand how their dashboards are being used so that they can improve their dashboards, and thus improve service to their users. As a result, we've added Xcelsius Activity Logging capabilities to APOS Insight.

While native Xcelsius logging (i.e., basic information such as who opened a dashboard and how long they used it) may be adequate for normal day-to-day operations, organizations that want to be proactive in their development and evolution of dashboards need more information. APOS Insight lets you ask much more specific questions about how your dashboards are being used.

The APOS Insight Xcelsius Activity Logging feature uses an add-on to Xcelsius (or Dashboards 4) to configure real-time logging of Xcelsius user activity to the Insight database. To configure logging, you bind the APOS logging control to cells in the spreadsheet that represent property name and value pairs. When a value changes it is logged to the database.

For example, if you want to know which tabs dashboard users are viewing or not viewing, you could bind the APOS Xcelsius Logging control to cells that control tab visibility. Using this and similar types of information for a group of users, developers, administrators and managers can judge how a dashboard is being used, and thus how effective the design of the dashboard is.

SAP's Ian Treleaven: BI4 Sizing Guide Updated

Not long ago, SAP's Ian Treleaven was a guest presenter for two APOS migration-themed webinars on the subject of BI4 sizing:

• Platform Architecture and Sizing for SAP BusinessObjects BI 4
•  SAP BusinessObjects BI 4 Sizing Cases & Demos

We had such a great response to these webinars that we thought we should pass along Ian's message to us that the BI4 Sizing Guide has very recently been updated.

The new guide has many additions to help you get the architecture and sizing of your new BI4 deployment right, including:

• New content to help sizing and performance integration with HANA
• Tips to help you make the CMS run better
• Updated suggested limits for Web Intelligence
• Suggestions for periodic re-sizing
• Pre-sizing and post-sizing checklists to help you prepare for your sizing exercise

Make sure you also visit the companion Website, www.sap.com/bisizing, which also has some updates and new content to help you get your BI4.1 deployment running faster and leaner.