Proxy with BI EE

A customer request came through the other day that I thought was worth writing about.  They were using BIP with BI EE as a data source.  They were also using Business Model Filters in BI EE based on the user's identity.  Their concern came in how BI EE was accessed as a data source.  They had setup the BI Server as a JDBC data source and used Administrator as the credential.  (This data source gets setup automatically on a standard BI EE install.)  They did not want the SQL being sent to the BI Server to run as Administrator.  This would bypass the Business Model Filters that they had designed into their BI EE metadata.  No problem.

They way to solve this is to make sure that when you define a connection to the BI Server, that you check the little box that says "Use Proxy Authentication."  I just checked a fresh 10.1.3.3.3 install and this is even checked by default during the installation--which is great: you're all set.  (I'm not sure if older versions did that as well...)

Let's just do some quick verification.  

First make sure your data source is setup correctly:
JDBCSetup:

Now create a query that is end user sensitive.  This Could be a query that will cause a Business Model Filter to be applied by the BI Server.  In my case, I kept this simple and just created a query that referenced the session variable "USER".  This will tell us that the BI Server knows who is really issuing the query.
ProxyQuery:

If I run this as Administrator, I see that the BI Server thinks Administrator is running the query:
ProxyAdmin:

If I run this same report as an end user called "env", I see that the BI Server thinks "env" is running the query even though BIP is connecting to the BI Server using Administrator's credentials.
ProxyEndUser:

In conclusion, we see that the "use Proxy Authentication" check box does work.  BIP connects using Administrator's credentials, but properly tells the BI Server who is really running the query.

Comments:

Hi, Thanks for the really interesting article. I got stuck up when i tried the same thing at my side. It shows Administrator only even though i logged in with some other RPD users. Is there any settings we need to apply in RPD or Security Configuration on BIPUblisher? Thanks in advance. I am using 10.**.2 version.

Posted by Pratik on November 10, 2009 at 12:21 AM MST #

Post a Comment:
  • HTML Syntax: NOT allowed
About

Follow bipublisher on Twitter Find Us on Facebook BI Publisher Youtube ChannelDiscussion Forum

Join our BI Publisher community to get the most and keep updated with the latest news, How-to, Solutions! Share your feedback and let us hear your voice @bipublisher on Twitter, on our official Facebook page, and Youtube!

Search

Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today