Академический Документы
Профессиональный Документы
Культура Документы
EPM RIG
How-To Guide
Applicable Releases:
SAP BusinessObjects Planning and Consolidation, version for the
Microsoft platform
Applicable Releases: 5.1, 7.0, and 7.5
Version 1.10
September 2010
Document History
Document Version
Description
1.10
1.00
Typographic Conventions
Icons
Type Style
Description
Icon
Example Text
Example text
Emphasized words or
phrases in body text, graphic
titles, and table titles
Example text
Example text
<Example
text>
EXAMPLE TEXT
Description
Caution
Note or Important
Example
Recommendation or Tip
Table of Contents
1.
Scenario ............................................................................ 2
2.
Introduction ....................................................................... 2
3.
4.
1.
Scenario
This guide will explain how an admin user or a consultant can import and/or export security
information with SAP BusinessObjects Planning and Consolidation, version for the Microsoft platform.
SAP Business Objects Planning and Consolidations (hereafter refered to as BPC_MS) provides a
frontend wizard based interface that administrators can use to export and import security. Tthis
wizard only allows the adding or removing of a single user at one time. If there are hundreds or
thousands of users for a particular BPC-MS system, adding that number of users will not be easy
using the current user interface.
This guide provides a convienient workaround by making it more practicle to mass add users through
the execution of a SSIS package with a Data Mamager custom task.
Caution: This tool will not provide all audit features so it SHOULD NOT be used in the
production system. SAP recommends using it only for an initial implementation and only by
an authorized administrator of customers system. After loading all user information in an
initial load, it is strongly suggested that you delete this custom package so that no one can
use it again in the production system.
2.
Introduction
BPC_MS releases 5.1, 7.0 and 7.5 leverage the SQL Server Integration Services portion of Microsoft
SQL Server 2005 or 2008 Suite to perform ETL(Extraction, Transformation and Loading) activities.
The custom task OsoftTaskUserSecurity(2008).dll allows the management of the mass security
process. This custom task allows system admins to both export as well as import BPC user security
information.
The database tables that this task focuses on are:
tblUsers User Master Table
UserProfile Profile Table
UserTeamAssign Users assignment to Teams
UserTeamProfileAssign Table containing assignments of users and teams to Profiles
Profiles
Using BPC standard security interface, admins can add only one user at a time. The purpose of this
custom task is to allow adding multiple users in one step versus adding each user individually.
The steps below were performed on a copy of ApShell (ApShell_7M) within a BPC 7.0, version for the
Microsoft Platform system.
3.
Using the custom task to mass upload security is broken up into multiple steps.
1) Registering the task within Visual Studio
2) Configuring the task within SSIS
3) Executing the task
3.1
1.
Register the task by copying the file OSoftTaskUserSecurity.dll into two locations:
BPC\WebSrvr\bin (or PC_MS\WebSrvr\Bin)
as well as
..\Microsoft SQL Server\90\DTS\Tasks\
After finish copying to appropriate dll file, register OSoftTaskUserSecurity.dll into global assembly cache
(GAC).
Click Windows Start button and select Run, Type Assembly and click OK.
Note: SAP BPC 7.5 MS changed resource file name so user has to register old resource dll in BPC
7.5 MS system.
Copy attached Ev4ResSvrDmm.dll to <install drive>:PC_MS\WebSrvr\Bin folder.
Click Windows Start button and select Run and type the following command and click OK.
regsvr32 <install drive>:PC_MS\WebSrvr\Bin\ Ev4ResSvrDmm.dll
2.
Open Visual
Studio
2005(2008) and
create an
Integration
Services Project
3.
Right Click on
the Toolbox and
Click Choose
items.. from
the context
menu.
Select the SSIS
Control Flow
Items tab
Find the
OSoftTaskUserS
ecurity or User
Security Task
2008 in the list
and select the
Checkbox.
4.
3.2
1.
2.
Choose a folder
path to where you
will export your user
security files.
Click on the
Preview in the
Table button and
you can then display
the entries in each
of the tables you
have chosen to
export.
You can choose
which table you
wish to preview by
leveraging the
preview in the table
dropdown in the
user security dialog.
Click on the OK
button
4.
5.
6.
7.
8.
9.
3.3
1.
2.
3.
4.
5.
6.
Export / Import
b. Append/Overwrite
c.
Note: Again, some tables dont allow using Append. Therefore, please export all data first and use
Overwrite (delete and append) option for avoiding errors.
7.
Hit the Finish button and confirm your package ran successfully! You should now understand how to import
and export the security data from a BPC, version for the Microsoft Platform system leveraging the attached
tasks.
Note: To use Excel_UserSecurity (2008) package, application server must have Microsoft Excel program.
4.
Here is the best practice for setting user security based on the our experience,
Lets assume there is no security information in the new application.
1.
Add team, profile and all related information using admin console
2.
3.
Export all security tables into files using data manager package.
4.
5.
6.
7.
Profiles A list of all of the profiles (both task and member access) in the system including their
descriptions
tblUsers Table of Users containing all of the users metadata information (email, name, etc.)
MemberAccess This table defines the data permissions for all of the applications within your
application set.
Caution Manipulating Security in this fashion can be dangerous if the person who is performing this in
not knowledgeable with respect to the user management model in BPC.
Best practice is just to use this to add / remove users (tblUsers table) and to update user to team
mappings (UserTeamAssign)
www.sdn.sap.com/irj/sdn/howtoguides