Managing Users

Objective

After completing this lesson, you will be able to manage users in the Central Management Console (CMC).

User Properties

The Users and Groups Area:
  • In the Users and Groups area in CMC, you can specify everything needed for a user to access SAP BusinessObjects BI Platform 2025.
  • You can create new users by specifying their user properties before assigning their group membership.

Main User Properties

After a user account has been created, you can modify the account properties. The main user properties that can be modified include:

  • Account
  • Full Name
  • E-mail
  • Description
  • Password
  • Account Type
  • Attribute Binding
  • Alias (Authentication Type)
You must specify the properties of the new user before assigning group membership.
  • Account:

    The account name is the unique identifier for a user account and is the user name entered when logging into SAP BusinessObjects BI Platform 2025.

  • Full Name:

    This optional field is used to capture the user’s full name. We recommend that you use this field, particularly when managing many users.

  • E-mail:

    This optional field is used to add the user’s e-mail address and is used for reference only. For example, if the user forgets their password sometime in the future, you can retrieve their e-mail address from this field to send them their password.

  • Description:

    This optional field is used to add information about the user, such as their position, department, or geographic location.

  • Password:

    This field is used only for the Enterprise authentication type of the user (Alias area of the page). If you are using other aliases for external authentication types (like LDAP directory, AD directory...), a user will be automatically created on SAP BusinessObjects BI Platform 2025 but its authentication user password will be managed only on the external directory.

  • Account Type:

    This option specifies if this user belongs to a license agreement that stipulates the number of users allowed to connect at one time (Concurrent session) or if this user belongs to a SAP BusinessObjects BI Platform 2025 license agreement that associates a specific user with a license (Named user). Named user licenses are useful for people who require access to SAP BusinessObjects BI Platform 2025, regardless of how many other people are connected.

  • Attribute Binding:

    When configuring SAP, LDAP, and AD authentication plugins for implementing external authentication on SAP BusinessObjects BI Platform 2025, you can specify the priority levels for each plugin in relation to the other two. For example, in the LDAP authentication area, use the Set priority of LDAP attribute binding relative to other attributes binding option to specify the LDAP priority in relation to SAP and AD. By default, the Enterprise attribute value takes priority over any value from an external directory. Attribute binding priorities are set at the authentication plugin level and not for any specific attribute.

    You can also disable the account by selecting the Account is disabled check box. Any changes you make to the user account do not appear until the next time the user logs on.

  • Alias (Authentication Type):

    You can create aliases for existing users. The alias can be an Enterprise alias, or an alias for a third-party authentication tool. If a user has three aliases (Enterprise, LDAP and AD), that means this user can use one of the three authentication types. This is clearly very useful for a user, especially when an external directory cannot be reached anymore and the user can choose to use another authentication type to be logged on SAP BusinessObjects BI Platform 2025. This user will use the same security model on SAP BusinessObjects BI Platform 2025 irrespective of the alias he uses.

Default User Accounts

Definition:
  • In CMC, three user accounts are embedded in SAP BusinessObjects BI Platform 2025 by default:
    • Administrator
    • Guest
    • SMAdmin
  • These predefined user accounts come up with a default security on SAP BusinessObjects BI Platform 2025 (for instance, Administrator has full access to all objects).
Two default user accounts are defined in SAP BusinessObjects BI Platform 2025.

Administrator User Account

SAP BusinessObjects BI Platform 2025 automatically creates an initial Administrator user account which belongs to both Administrators and Everyone groups:

  • The Administrator user account is automatically granted the "Modify the rights users have to all objects" right.
  • We recommend creating a new user account in the Administrators group for each person in charge of the SAP BusinessObjects BI Platform 2025 administration in your company.
  • Once you have created at least one new administrator account, you can choose whether to disable the initial Administrator account for security reason.

Guest User Account

SAP BusinessObjects BI Platform 2025 uses the Guest user account in some cases:

  • SAP BusinessObjects BI Platform 2025 supports anonymous authentication with the Guest user account.
  • When users connect to SAP BusinessObjects BI Platform 2025 without specifying a user name and password, the system logs them on automatically under the Guest account.
  • If you assign a secure password to the Guest account, or if you disable the Guest account entirely, you disable this default behavior on SAP BusinessObjects BI Platform 2025.

Watch this video to see how to end a user session from the CMC.

Create Users and Assign Them to Groups

In this exercise, you will create HR and Sales users and assign them accordingly to groups.

Summary

  • User creation and management is done through the CMC (Central Management Console) in SAP BusinessObjects BI Platform 2025.
  • User properties such as Account, Full Name, E-mail, and Description can be modified after account creation.
  • Default user accounts include an Administrator for initial setup and Guest users for testing purposes.
  • Administrators can terminate user sessions manually if needed, but cannot terminate their own active session.
  • A user's session remains active until they log off or an administrator terminates it.