Making reports accessible to external users

Hello,
I'm wondering where I can find information of typical BI extranet setups to make webi, xcelsius, crystal reports accessible to external users (vendors). How much effort does this involve? Is the solution to create a website and then using the web services SDK or the BOBJ enterprise SDK - to open/list reports within that website? Where can I find additional info to answer questions such as:
- How is security handled?
- is it recommended to have "vendor" reports reside on a separate server (than the one hosting other BI reports) or should reports reside outside the firewall?
thanks,
Nelly

There are a lot of questions here. I'll try to answer them as best as I can. First, you should look at the [XI R2 Pattern Book for Windows|http://help.sap.com/businessobject/product_guides/boexir2/en/Win_pattern_book.pdf].
How much effort does this involve?
Since this is relatively involved, this is a gist what what is needed.
The standard approach is to use a reverse proxy that shields the internal BOE deployment from external users.
Is the solution to create a website and then using the web services SDK or the BOBJ enterprise SDK - to open/list reports within that website?
This is not necessary. You could allow external users to access the same Infoview that your internal users use. The reverse proxy has 2 network cards (and 2 IP addresses, one for external users and one for internal users). This allows it to mask the IP address(es) of internal servers to external clients.
How is security handled?
This really depends on the size of your deployment, budget etc. You could just use security within BO or you could use external software to handle security before the request even reaches BO (TAM for example).
is it recommended to have "vendor" reports reside on a separate server (than the one hosting other BI reports) or should reports reside outside the firewall?
No. A BO deployment can only have one filestore, that must reside within the firewall (as a best practice). Best practices suggest that only the router/gateway is outside the firewall.
A typical (simple) deployment would be:
clients --->internet--->router/gateway--->firewall(outer)----->web server (reverse proxy)-->firewall(inner)--->BOE servers

Similar Messages

List of reports accessible to specific user.

I have a situation where user lets say 'A' used to run some reports. A left the company so the person who replaced A wants to run the same reports but he doesn't have access. So I checked if A owns any reports then I found out that A doesn't have ownership of any reports which he used to run. Is there any way I can find reports which are accessible to specific user. Please help.
Thanks,
PA1

Hi,
You can import the The Discoverer V5 EUL business area and workbooks which are in the EUL5.eex file shipped with Discoverer administrator. This will show you all the workbook shares set up in the EUL.
Alternatively you can run the SQL below which will give you the workbooks shared with a user or role:
select doc_name, doc_developer_key
from eul_us.eul5_documents doc
, eul_us.eul5_access_privs ap
, eul_us.eul5_eul_users eu
where doc.doc_id = ap.gd_doc_id
and ap.ap_type = 'GD'
and ap.ap_eu_id = eu.eu_id
and eu.eu_role_flag=0 /* 0=user 1=role */
and eu.eu_username = '&Username'
Rod West

Lyncdiscover reports HTTP 500 Internal Server Error for external users

Hello,
I have a problem providing lyncdiscover information for external Lync users. The same address works internal (prompts for file download) so I believe the problem is UAG/TMG providing the site which is not my cup of tea. I have a working external lyncdiscover
for other domain in the same Lync + UAG/TMG server environment. I have also checked the public DNS records few times and everything should be fine. Firewall also shouldn't be an issue since it reports the internal server error, right? Any suggestions what
should I check?

more information based on Lync Autodiscover Web Service Remote Connectivity Test.
Testing HTTP authentication methods for URL https://lyncdiscover.domain1.com/Autodiscover/AutodiscoverService.svc/root/user.
HTTP authentication methods successful.
Additional Details
Testing HTTP content for URL https://lyncdiscover.domain1.comi/?sipuri=[email protected] has
token="User".
HTTP content isn't verified.
<label for="testSelectWizard_ctl12_ctl06_ctl00_ctl04_tmmArrow">Tell
me more about this issue and how to resolve it</label>
Additional Details
HTTP 200 status received from server, but no token="User".
Elapsed Time: 203 ms.
The same result goes for the other domain that provides the lyncdiscover information correctly for external users. It doesn't seem to solve the root cause but might help to understand
the problem.

External user report

How can i create a report showing the where external users have been granted access to content in each of the sites in our tenant?
Dean MCTS-SQL 2005 Business Intelligence, MCITP SharePoint 2010

This option is not available for SharePoint online but it is available on premise.
If you find this information helpful then please propose this as answer and vote.
Thanks.

Sending OBIEE reports to non OBIEE users who are external to SMTP server

Hi All,
Hi Nazza,
Would you please help me how you diid send reports to non OBIEE users (external mails)?
I have configured the mail server and able to send reports to internal mails.
I have followed the following steps as mensioned in all blogs:
1. I created a d table called SA_SYSTEM_USER with default columns as mensioned.
2. Imported into Physical Layer
3. Created a view for Dummy table(Dual) with 'DUMMY' column.
4. Joined these tow tables DUMMY fact and SA_SYSTEM_USER as Dimension on DUMMY join Email.
5. Renamed columnsfor Presentaion table as mensioned in Bolgs.
6. Restarted the servers.
7. I noticed the system mail and system delivery profile created with only one email id(where are the other email ids from my SA_SYSTEM_USER table?)
8. But as written in blogs it never sends emails to external mails e.g. [email protected](this is existng mail in SA_SYSTEM_USER)
I am in need of urgent solution please some one help me out....
Thank you so much.....

Hi Deepak,
I followed every single step mensioned in the link you have given.
When save the iBot there was no response.
Would yu please clarify these doubts:
1. Do I need to have any specific settings on our SMTP mail server to send emails to external email-ids ????
2. I can see only one email account appears in My Account-->Active Profile. where I loaded 2 email accounts in my User table. Does it matters while I am choosing 'Specific Devices' on 'Destinations' Tab while deselecting 'Ineractive Dashboard' and 'Active Delivery Profile'?
3. By default the report is going to that mail account (internal only) if I select Destinations--> Active Delivery Profile.
4. As mmy requirement is to send emails to the users external to organization( external to our local SMTP server distribution list), I entered my Gmail account to test.
When save the iBot there was no response.
5. Do I need to set filter on specifc user on a conditional request to send e-mai to that usel??
6. Is there any solution for this please? Thsi is a must requiremnet.
My Thought (I am not sure) : 1. I create those user IDs on SMTP server
2. send reports to this user list.
3. From these user ID mail inbox of SMTP server if possible: forward those reports to external email IDs.
Thank you for your time
Regards

Huge Reports to external users

Hi ,
I have a requirement from BW, I need to send approximately 2 MB data to 1000 external users (different data based on their name/id). Can any one help me on the different way of achieving it?
I tried.. broadcasting (got memory issue), Portal(got memory issue), Infospokes (some users may not have servers).
Requesting an expert guidance on any alternate possibilities.
Regards
Sree

Hi,
Broadcosting will work, else dump the report in one drive and send it using through mail program.
Use RSCRM_BAPI and try to generate the report and dump it in folder and from there you send it using program,
Re: notification mail
See
How to transfer the Data from SAP-System to Non-SAP system without additional Cost/License
/people/surendrakumarreddy.koduru/blog/2009/03/11/how-to-transfer-the-data-from-sap-system-to-non-sap-system-without-additional-costlicense
Thanks
Reddy

Making a file accessible to all users

Hi
Win 8.1 Pro with Media Centre.
I have a win 8.1 pc connected to a SBS 2011 domain. I have an MS Access MDE file in C:\Folder1\Folder2\Folder3z\MyMDE.MDE. I need the MDE file accessible to all users logged into to the pc. No matter how I set the permissions on the MDE file and the folders
including Everyone the file is not accessible to all users. I have also disabled the User Account Control but no luck.
What are simple steps to have a file accessible to all users please?
Thanks
Regards

Hi,
According to your description, I think this should be the folder problem. However, you can try to copy this file to the root of other Drive for test.
In addition, please make sure its user was Everyone and had full control like screenshot below:
Roger Lu
TechNet Community Support

Integration of Web Interface of a Application in portal for external users

Hello portal experts,
our portal can be accessed from the internet (per ISA-Server and https). We have some applications that should be integrated in the portal.
This application having a web interface that should be used in this context. It's easy to do this for our interal users which could access the web interface of the applications directly.
But our requirement is to make this application accessible for our external users, too. I have tried a lot with the URL-iView and the server side fetching mode. The first page is shown but with broken images and the buttons are not clickable (Javascript not working).
Is it possible to use the portal as a kind of proxy that would get the request from the client and forward this to the application in the intranet or is the only way to match our requirement in making the applications accessible directly from the internet? Is there any other solution?
Best regards
Florian

Hi Florian,
No its not possible to use the SAP Portal as web proxy to your other web-app.
From my experiance I can tell you to stop searching/trying on the serverside fetching part, it wil not do wat you want.
There is only one solution direction and that is that you place some kind of reverse proxy in front of your Portal...
This reverse proxy solution (I keap it abstract as there are multiple solutions for this) should listen on the WWW and translate requests to the right servers.
For example calls to "/" could be translated to "/irj/portal/" and back
But also "/yourotherapp" can be translated to "http://yourotherappserver:port/yourotherapp and back
Resulting in that all calls to http://yourexternalurl/ will go to SAP Portal and all requests to http://yourexternalurl/yourotherapp will go to your other app. When this works you can use the URL or Intergrater iView using the default client side fetching.
I know that it is possible with Apache as a reverse proxy so I guess (and hope for you) that its also possible with ISA.
Good luck,
Benjamin Houttuin

Creating a link for external users to view my project

Hi -
I want to share my RoboHelp project with external users that do not have access to my company's internal server if I publish there. Is there a way to create a link to my project that I can just share with other people?
Thanks!

Hello again
Are you clicking the "view result" link? If so, the CHM should simply open. However, there are a host of things that can go wrong along the way and to figure out what may be happening we need to ask all sorts of questions.
Did you click View Result after it finished? If so, what happened? An error? Nothing? What?
Where are you attempting to compile the help? When you look at the properties of your Single Source Layout recipe, where are you pointing the output folder to? What is the file name?
Are you able to open and view other CHM files? Do you know what a CHM file is?
As you can see, there are many questions to answer. And probably others I failted to think of.
Cheers... Rick
Helpful and Handy Links
RoboHelp Wish Form/Bug Reporting Form
Begin learning RoboHelp HTML 7, 8 or 9 within the day!
Adobe Certified RoboHelp HTML Training
SorcerStone Blog
RoboHelp eBooks

Excel Services Connectivity on Sharepoint 2013 for external user

Currently , external user is able to refresh the data on sharepoint site through browser. the data connection is pointing the one of the external data source. But how can an external user (Internet user which accessing sharepoint through internet) download
a copy of excel in sharepoint library and open the excel workbook with data refresh ability at client machine ?
Do we need client machine to be able to access / ping the external data source?
Thanks.

Thanks for the response.
They want to perform data analysis and design their own report with own template , for example : to remove subtotal from the powerpivot tables which we cannot change the formatting at the excel services at browser level.
So if i understand correctly, we need to get the client machine to be able to access to the database server directly to get the access to the cube for data analysis although we had this odc file connection setup, am i right?
For internal user, network team should open port / access for them to access database server directly.
For external user, either to open public access to the database server directly or setup a VPN connection for the external user to access the database server in their secure network.
Let me know if i understand this correctly.
Thanks.

SharePoint Online External Users

So I was taking SharePoint online for a test drive a few days ago. While I was looking at how users are given permissions to list and libraries I realize something that might
make or break SP Online for me. The out-of-the-box SharePoint Online implementation gives you one private site collection and one public website. Let just focus on the public website in this example. Now, by default the public website is at least viewable
to everyone. But what if I created a survey on my public website and only wanted members of the site to have access to it. I know that you can "Share Site" with external users. But can you allow visitors to your site the ability to create their own account,
and in turn fill out the survey? And of course without purchasing a license for every person filling the survey.
Jeffrey T McFarland

I'm not sure about making content on your public site private, but you can make content on your private sites public. You basically turn on external users for the entire Office 365 SharePoint Online account. Then you can optionally disable it
for certain site collections. That way, you can control who has access to what. This article might be helpful in explaining how external users works in SharePoint Online:
http://office.microsoft.com/en-us/sharepoint-online-enterprise-help/share-a-site-with-external-users-HA102476183.aspx

Linking to an OBIEE report without showing the user and password

Hi!
we are trying to access to an obiee report from an external portal (coded with php).
The idea is that the user clicks on a link an gets the report in pdf format. For that purpose we are using this url:
http://ttivobiee01:7001/analytics/saw.dll?Go&Path=/shared/Prueba/ogp_obi&Action=Print&P0=1&P1=eq&P2="Criteria"."Key"&P3=1402&NQuser=user&NQPassword=pass&format=pdf
But this url is expossing OBIEE's user and password.
In order to avoid this security issue we tried to do an wget of the url but it doesn't return the report. Instead we get an html, which seams to download the report chunk by chunk (using javaScript).
The question is, is there any way that we could let our portal ussers access to an obbie report without expossing the user and password?
I have been looking into oracle forums and have found this: OBIEE Go URL with password protected
but we couldn't use this aproach due to security issues.
Thanks!
Nuria

Hi!
We have finally done this (and it works!)
<?php
$urlInforme='http://obi:7001/analytics/saw.dll?Go&Path=/shared/Prueba/ogp_obi&Action=Print&P0=1&P1=eq&P2="Criterios"."Clave oficial"&P3=1402&NQuser=user&NQPassword=pass&format=pdf';
$ch = curl_init($urlInforme);
$ckfile = tempnam ("./", "CURLCOOKIE");
$ch = curl_init ($urlInforme);
curl_setopt ($ch, CURLOPT_COOKIEJAR, $ckfile);
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, true);
$output = curl_exec ($ch);
$ch = curl_init ($urlInforme);
curl_setopt ($ch, CURLOPT_COOKIEFILE, $ckfile);
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, true);
$fp = fopen("salida.pdf", "w");
curl_setopt($ch, CURLOPT_FILE, $fp);
$output = curl_exec ($ch);
curl_close($ch);
fclose($fp);

Encrypted drives accessible by other users

Howdy,
I am looking into encryption methods for OS X (previous post here: https://discussions.apple.com/message/22321009#22321009) and in playing around with it i found the following:
If i have an encrypted drive or partition mounted on my desktop i can not secure it by simply unmounting, logging out or starting a password protected screensaver. Another user can sign in through 1. fast user switching, 2. the main login window after i have logged out and 3. by using the 'Switch User' button at the bottom of the screensaver when it asks for a password. As soon as the other user logs in, there are my encrypted drives or partitions, no password asked!
The only way to secure an encrypted drive is to 1. Restart the Mac, 2. Turn off the Mac or 3. in the case of an external device, physically disconnect it.
Am i overreacting or is this a huge security concern/flaw and more importantly, are there ways to plug these holes if multiple users have to have an account on the same system?
I have read something similar a few months ago that mentioned simply unmounting a drive was not secure but it did not cover other users or offer a solution (can't find the article anymore).
Jay

This is how mounting volumes works in OS X. Once mounted, a drive is available systemwide, and not restricted to a specific user. The encryption that OS X sets up on a drive is per-volume only, and not intended to protect the data from other users on the system. Instead, its intent is to prevent someone from finding your drive and plugging it into another system to overcome security and access your files.
Ultimately the mode for securing files from other users of the same system is to not rely on encrypted volumes. If mounted, the unencrypted drive will remain unlocked and re-mountable. The only way to secure it again is to fully detach or eject it from the system.
However, overall it is not really a security flaw in the system. While intuitively it may seem the system ought to lock the drive again once ejected, this behavior still falls in line with how the system already handles local drives, where any volume (encrypted or not) is viewable accessible by other user accounts.
The way you can prevent another user from accessing the mounted volume is to get information on the volume, and then click the lock at the bottom to authenticate for changes, and then uncheck the box to ignore ownership on the volume. This will have the system observe permissions restrictions for files on the drive, but keep in mind this will only be restrictive to non-administrative accounts, as any admin can re-check the box and have full access to the drive again.
An alternative option is to use an encrypted disk image to secure files. Unlike encrypted drives, the system should fully eject an encrypted disk image when you eject it, requiring its password to be entered when mounting the image again. Unfortunately as with other mounted volumes, if you mount the disk image in your account and keep it mounted, then another user that logs in at the same time will be able to access this volume.

How to hide some folders in a woprkspace from some external users?

Hi
We manage a workspace that has both Internal external users. We have a requirements in a way that external users can only see some folders they have access to. What is the best way to accomplish.
I reviewed an article in "How to" section which describes how to use ACLS to hide some folders from certain users (https://beehiveonline.oracle.com/External_06_howto.html).
But this process is cumbersome as we need to go to exh folder and revoke permission for selected users. And also if we add any new folders to the workspace that folder will default be accessible to the external users also. We want by default any new folders do not have access to this group of users except the ones we provide access to.
How can we do it?
Regards
Ram Uppu

Ram,
We have a new process which is much more easily used - the https://beehiveonline.oracle.com/External_06_howto.html page has been upfdated to show the new process.
phil

Send a OBIEE report to non OBIEE user (Client) Mail in OBIEE11g

Hi Frenz,
i`m fresher to OBIEE, i need the step for "Send a OBIEE report to non OBIEE user (Client) Mail in OBIEE11g". searched in on-line got only OBIEE 10g Documents that one also followed but no result.Please help Me....the Step to config a Mail for external user.
Thnaks,

Have the SMTP server configured by your admin and create agent privilege given to your role. Then Schedule an Agents to yourself/Testuser with the report to be sent to external user as its Content. Set up the Delivery Profile of the recipient. In the set up for email device - delivery profile specify the external email address. This might be useful
http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/bi/bi11115/delivers/alerts.htm
Thanks.

Making reports accessible to external users

Similar Messages

Maybe you are looking for