application access

[OCM]

Greetings,

I’ve a user that belongs to Group 1 and Group 1 has full control Folder 1 (her department’s folder). I’m trying to give the same user “View Only” access to universe designer so she can only import certain universes, but not export them.
I tried creating another group (Group 2) for “Designer Viewer” as I do not want this group to Export the universe, and add the user to this group and assigned security as follows:

CMC > Application > Designer >View
CMC->Universes > Top Level Security-> All Universes -> Selected Group 2, and assign view on demand access.
I logged in as the user and noticed that she can Import/Export all universes. Is this because she belongs to another group (Group 1) that has full control? What would be the best approach for the user to have full control on Folder 1 and to have View only access to universe Designer (just import certain universes, but not Export)


TIA


OCM

 

[hilfy]

I would assign Group 2 to the folder with full control and take the user out of Group 1.

-Dell

DecisionFirst Technologies - Six-time SAP BusinessObjects Solution Partner of the Year

http://www.decisionfirst.com

 

[OCM]

Thanks Hilfy for your reply.

The question I have is that ‘assigning group 2 full control’ is this mean user to export universes back to the repository?
I just want the user to be able to import, only specific universes and only to view them.

Regards,


OCM

 

[hilfy]

Access to the universes in the Designer is based on two things:
1. The user's rights to the specific objects.
2. The user's rights to the Designer application.

Whether a user can see or use a universe is based on object rights. What the user can do with a universe is based on application rights.

So, after thinking about this a little further, you'll need to to a couple of things:

1. Give Group2 Full Control access to the folder where the reports are located.
2. Give Group2 View access to the folder where the universes are located.
3. If you're on BO XI 3.x or BI 4.0, create a new custom access level. This will cover what users can do in Designer. For access rights, edit the Included Rights and go to the Application section. Find Universe design tool (this name is in BI 4.0, I don't have a BO XI 3.x system I can access to verify the name there.) Override "Log on to the Designer and view this object in the CMC" and grant access. You may have to play with granting some of the other access here to get thing to work correctly.
4. In the CMC, go to Applications. Find the universe designer (again, different names in different versions). Add Group2 to the security with the access level you just created.
5. Make sure your user is NOT in the Universe Designer Users group.

This should get you close to what you're looking for and a little playing and testing with the access rights on the new access level should get you the rest of the way there.

-Dell

DecisionFirst Technologies - Six-time SAP BusinessObjects Solution Partner of the Year

http://www.decisionfirst.com

 

[OCM]

Thanks Dell, I’m using BO XI 3.1 sorry for not mentioning. I’ll try your suggestions and post back.

Regards,


OCM