BusinessObjects Enterprise Administrator's Guide

Increasing access by descending the folder hierarchy

The remaining security requirements for this tutorial are related to the Sales group and its subgroups. They require a hierarchy of folders containing management reports and regional reports. Because this tutorial sets up a system of increasing rights, the most secure content will be stored at the top of the directory tree.

With these procedures, you create the folder hierarchy and set access levels in order to meet the remaining security requirements:

• Only the Sales Managers can view the management reports and all regional reports.
• Sales staff can only view reports for their own region.

To provide minimal access to the management reports

1. Go to the Folders management area of the CMC.
2. Click New Folder.
3. On the Properties tab, in the Folder Name field, type Management Reports
4. Click OK.

The new folder is created and the page is refreshed.

5. On the Rights tab, click Add/Remove.
6. In the Select Operation list, click Add/Remove Groups.
7. In the Available Groups list, select Sales Managers.
8. Click the > arrow; then click OK.

You are returned to the Rights tab of the Management Reports folder.

9. Click the Access Level list for the Sales Managers group, and select View.
10. Click Update.

The Rights tab now shows that the Sales Managers group has View access to this folder and to any objects that you subsequently publish to it. As required, the Everyone and Administrators groups have inherited the rights that you set on the top-level BusinessObjects Enterprise folder.

Now you need only create folders for the regional reports and grant access to the appropriate regional Sales groups.

To provide selective access to the regional reports

1. If you are not already there, go to the Management Reports folder.
2. On the Subfolders tab, click New Folder.
3. On the Properties tab, in the Folder Name field, type Regional Reports - JP
4. Click OK.

The new folder is created and the page is refreshed.

5. On the Rights tab, click Add/Remove.
6. In the Select Operation list, click Add/Remove Groups.
7. In the Available Groups list, select Sales Japan.
8. Click the > arrow; then click OK.

You are returned to the Rights tab of the Management Reports folder.

9. In the Access Level list for the Sales Japan group, select View.
10. Click Update.

The Rights tab now shows that the Sales Japan group has View access to this folder and to any objects that you subsequently publish to it. The Administrators, Everyone, and Sales Managers groups automatically inherit the appropriate rights for this folder.

11. Repeat this procedure to create a subfolder called Regional Reports - USA and to provide the Sales USA group with View access to the folder.

When you finish, the Rights tab of the Regional Reports - USA folder shows that you have set the rights as required for this tutorial.

You have now reached the end of this tutorial.

Related topics:    

• To return to the beginning of this tutorial, see Setting up a closed system of increasing rights.