View access for users for a public folder

security CMC
1

Hi all,

I’ve a folder (called ‘Folder1’) in my public folders. I need to give a ‘view only’ access to 4 of my users on that folder. The folder has Webi reports, hyperlinks, excel sheets , analytics, xcelsius components etc.,

How can i achieve this in BO XI R3. I’m somewhat new to BO. So can somebody please guide me

-Vijay. K

kodamvijay (BOB member since 2010-04-23)

2

Create a group, add 4 users to this group, in the security access for the Folder1 add the new group with the access level View only, you are done.

icotler :us: (BOB member since 2002-08-19)

3

Create a group, add 4 users to this group, in the security access for the Folder1 add the new group with the access level View only, you are done.

Steps I did:

  1. I’ve created a new group (grp1)and and assigned ‘view’ access to that group.
  2. Created a User(usr1) and made him the member of grp1 and by default he is a member of ‘everyone’.
  3. Right click on folder1 -> user security -> Add Principal ->
    then added the grp1 to that folder with view access.

Initially when i open the report i got an error saying the user doesn’t have a refresh right on the document. SO i went and granted the refresh right to that group.

Now when i open the report I’m getting an error
‘Universe not found See business Objects administrator (Error: wis 00501)’

I’m using BO XI R3.

Can you please suggest

kodamvijay (BOB member since 2010-04-23)

4

“View only” does not let you refresh documents. It is only for viewing reports.
So what you did is fine. Now in CMC go to the connections and universe folder and grant the group that you created “View on demand” rights for all the connections and universes it should solve your problem. Of course this is for the testing purposes only you will need to modify the security according to your company specs.

By the way your initial post stated that you need to give the users view only access.

icotler :us: (BOB member since 2002-08-19)

5

I have the same situation except we don’t want users to see this specific univers when they click New/WebI Document.

The users need to be able to schedule and refresh documents built in a specific universe but not change the query side of those documents or see that universe in the New/WebI Document universe list.

The same users still need to have access to create WebI documents against other universes, just not this specific one.

DavidL :us: (BOB member since 2005-05-06)

6

I was going to say not possible, but I think you might get there by using different universe folders - one folder gets normal view on demand, but the other would be much more specific - don’t grant “Create / Edit queries based on this universe” to the folder.

You’ll have to mess with not inheriting this from a higher / different level, but I think it’s possible.

Good luck!
B.

bdouglas :switzerland: (BOB member since 2002-08-29)

7

What you probably need to do is to create universe subfolder and move the universes that the users can create new documents from and grant the appropriate access right to this folder for the group of users. Second you need to grant the scheduling rights to the folder(s) where the documents are for the group that you need to schedule these documents. Third assign the users to these 2 groups and you accomplish your task.

icotler :us: (BOB member since 2002-08-19)

8

Correct it’s possible only if you are running XI3 and if you are playing with the security command you specicied setup at universe level …