dbTalk Databases Forums  

Scorecard Accelerator & user context

microsoft.public.sqlserver.olap microsoft.public.sqlserver.olap


Discuss Scorecard Accelerator & user context in the microsoft.public.sqlserver.olap forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
Bluetooth
 
Posts: n/a

Default Scorecard Accelerator & user context - 07-14-2004 , 05:15 AM






Hi,

I'm not sure if this is the appropriate newsgroup to ask about the Business
Scorecards Accelerator, but anyway I'll try ;-)

Default Scorecards engine settings impersonate any business scorecards
user - they get OLAP data based on a single account/role setting, so the
OLAP engine does not know the actual user's context. What I would like to
have is to enforce dimension security and default members on dimensions
based on the actual user viewing the scorecards webparts.

The scenario is to have a single set of performance KPIs, that can be
computed based on one, automatically selected member of the organizational
structure dimension. This dimension has organizational units (OUs) as
members, and each OU has a member property referring to the OU manager. I
would like to have a default member in this dimension defined as a "home" OU
fo the currently logged user, therefore each user when viewing the
Scorecards would see his/her own OU. This can be done in OLAP itself, but
the Scorecards engine looses the user context, so for any user I have the
same default member.

Is is safe/possible to change Scorecards connection settings to forward user
context to the OLAp engine? Via Kerberos SSPI?

Any comments appreciated.

Best,
Szymon Slupik, CTO
CDN S.A., Kraków, Poland



Reply With Quote
  #2  
Old   
Deepak Puri
 
Posts: n/a

Default Re: Scorecard Accelerator & user context - 07-14-2004 , 10:39 AM






There is supposedly a newsgroup for the Scorecards as well, which is
mentioned in the FAQ. This section (p.31) from the Admin Guide suggests
that Kerberos is at least possible:

Quote:
Per-User Security

By default, Business Scorecards uses the IIS application pool account to
securely access the data sources. However, if all of your scorecards
components are on a single computer, you can add the following key to
the web.config file to use per-user security. In a per-user
configuration, a designated data accesss account is not used to proxy
client requests. Instead, the individual credentials of each user’s
account is used to determine access permissions in SQL Server and
Analysis Services.

The advantage of per-user security is that you can customize security
levels to suit your administrative personnel. Every user can have an
individual security setting tailored for their access needs. However,
depending on the number of scorecard users you have, a per-user
configuration may result in slower performance, because a separate
security cache must be maintained and looked up for each scorecard user.

To activate per-user security, in the web.config file that corresponds
to your Business Scorecards SharePoint Web site, type the following:
• <add key=”Scorecard.ConnectionPerUser” value=”True”/>

Note that per-user security is recommended only for single-server
deployments. Per-user security across multiple computers requires
Kerberos. Upon installation, SharePoint extends your IIS virtual server,
resulting in a switch from Kerberos authentication to Integrated Windows
authentication. Integrated Windows authentication doesn’t allow
delegation between computers. Therefore you need to use SharePoint with
Kerberos. For information on using SharePoint with Kerberos, see the
knowledge base article 832769 “How to: Configure Windows SharePoint
Services to Use Kerberos Authentication” at

http://support.microsoft.com/?id=832769.
Quote:

- Deepak

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!


Reply With Quote
  #3  
Old   
Bluetooth
 
Posts: n/a

Default Re: Scorecard Accelerator & user context - 07-15-2004 , 01:02 AM



Thank you, will give this a try. BTW browsking through available NG list I
could not find a scorecards-related one.

Best,
Szymon

"Deepak Puri" <deepak_puri (AT) progressive (DOT) com> wrote

Quote:
There is supposedly a newsgroup for the Scorecards as well, which is
mentioned in the FAQ. This section (p.31) from the Admin Guide suggests
that Kerberos is at least possible:


Per-User Security

By default, Business Scorecards uses the IIS application pool account to
securely access the data sources. However, if all of your scorecards
components are on a single computer, you can add the following key to
the web.config file to use per-user security. In a per-user
configuration, a designated data accesss account is not used to proxy
client requests. Instead, the individual credentials of each user's
account is used to determine access permissions in SQL Server and
Analysis Services.

The advantage of per-user security is that you can customize security
levels to suit your administrative personnel. Every user can have an
individual security setting tailored for their access needs. However,
depending on the number of scorecard users you have, a per-user
configuration may result in slower performance, because a separate
security cache must be maintained and looked up for each scorecard user.

To activate per-user security, in the web.config file that corresponds
to your Business Scorecards SharePoint Web site, type the following:
. <add key="Scorecard.ConnectionPerUser" value="True"/

Note that per-user security is recommended only for single-server
deployments. Per-user security across multiple computers requires
Kerberos. Upon installation, SharePoint extends your IIS virtual server,
resulting in a switch from Kerberos authentication to Integrated Windows
authentication. Integrated Windows authentication doesn't allow
delegation between computers. Therefore you need to use SharePoint with
Kerberos. For information on using SharePoint with Kerberos, see the
knowledge base article 832769 "How to: Configure Windows SharePoint
Services to Use Kerberos Authentication" at

http://support.microsoft.com/?id=832769.



- Deepak

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!



Reply With Quote
  #4  
Old   
Deepak Puri
 
Posts: n/a

Default Re: Scorecard Accelerator & user context - 07-15-2004 , 09:08 PM



Szymon,

Would be interesting to know if this works for you. Here is the FAQ info
regarding the MS Office Solutions Private NewsGroup - don't know how
active it is:

http://www.microsoft.com/office/solu...recards/faq.ms
px
Quote:
Q. Is a discussion newsgroup available for the Business Scorecards
Accelerator?

A. Yes. The following newsgroup is available for peer-to-peer
collaboration:

• NNTP Server/Newsgroup name: privatenews.microsoft.com

• User ID: privatenews\OffSolutions

• Password: OffSolutions (Password is case sensitive)


Follow these step-by-step instructions to configure Outlook Express to
access the Office Solution Accelerators private newsgroup:

1.
Click the Start button, point to All Programs, and then click Outlook
Express.

2.
On the Tools menu, click Accounts.

3.
In the Internet Accounts dialog box, click Add and then select News.

4.
In the Internet Connection Wizard box, type your display name and click
Next and then type your e-mail address and click Next.

5.
In the Internet News Server Name (NNTP) dialog box type
"privatenews.microsoft.com" and select the My news server requires me to
log on check box.

6.
In the Internet News Server Logon dialog box, type
"privatenews\OffSolutions" in the account name field and "OffSolutions"
in the password field. Note Password is case sensitive.

7.
Select Remember password check box, click Next, and then click Finish.

After successfully completing the wizard, you will see Internet Accounts
again. Click Close. Once you complete the setup process, you will be
able to access the Microsoft.private.offsolaccelerators newsgroups.
Quote:

- Deepak

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!


Reply With Quote
  #5  
Old   
Yan-Hong Huang[MSFT]
 
Posts: n/a

Default Re: Scorecard Accelerator & user context - 07-19-2004 , 02:10 AM



Hello Szymon,

We are reviewing this issue thread. Deepak has posted excellent answer for
it. If you have anything unclear, please feel free to post here.

Thanks very much for participating the community.

Best regards,
Yanhong Huang
Microsoft Community Support

Get Secure! ¨C www.microsoft.com/security
Register to Access MSDN Managed Newsgroups!
-http://support.microsoft.com/default.aspx?scid=/servicedesks/msdn/nospam.as
p&SD=msdn

This posting is provided "AS IS" with no warranties, and confers no rights.


Reply With Quote
  #6  
Old   
Mathieu Diepman
 
Posts: n/a

Default RE: Scorecard Accelerator & user context - 10-05-2004 , 11:27 AM



Is it possible to pass parameters (for instance parameters containing the
selected dimensions) while navigating from one scorecard to another?

If possible, how do I do it ?

Reply With Quote
  #7  
Old   
Deepak Puri
 
Posts: n/a

Default RE: Scorecard Accelerator & user context - 10-05-2004 , 09:51 PM



Not sure about this, but there is an upcoming MSDN Webcast, so maybe you
can get some answers there:

http://msevents.microsoft.com/cui/We...?EventID=10322
59388&Culture=en-US
Quote:
TechNet Webcast: Implementing Office Business Scorecards Accelerator for
Business Intelligence—Level 200

Start Time: Tuesday, October 19, 2004 8:00 AM (GMT-08:00) Pacific
Time (US & Canada)

End Time: Tuesday, October 19, 2004 9:30 AM (GMT-08:00) Pacific Time
(US & Canada)

Event Description
Products: Other.

Recommended Audience: IT Professional.

Language: English-American

Description: This webcast offers a theoretical and practical
exploration of the Microsoft® Office Business Scorecards Accelerator.
Get to know the principles behind Business Scorecards and how they fit
into the overall Microsoft Office System for Business Intelligence. This
in-depth discussion will describe exactly how to build Business
Scorecards and deploy them. Join us to learn the metrics and methods for
making sure you're getting the most out of Microsoft Office Business
Scorecards Accelerator.

Presenter: Mark Job, Strategic Principal, Business Intelligence and
Collaboration, Immedient Corporation
Quote:

- Deepak

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!


Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.