Optimization Techniques and Security Trimming of BCS

© 2011 PLANET TECHNOLOGIES, INC.

Optimization Techniques and Security Trimming of BCS

Patrick Curran, MCT

M A Y 1 2 , 2 0 1 2

© 2011 PLANET TECHNOLOGIES, INC.

Patrick Curran

MCT, MCITP, MCTS, MCP Director of Operations, Federal for Planet Technologies. SharePoint Architect. Working with SharePoint since 2003.

– Administrator / Developer– Architect / Implementer– Troubleshooting / Branding

PCfromDC.blogspot.com @PCfromDC

Agenda1. Describe scenario and objective.

2. Prerequisite.

3. Review farm.

4. Talk…

5. Verify Our Solutions.

6. Conclusion.

© 2011 PLANET TECHNOLOGIES, INC.

Scenario and Objectives

Scenario: CIO says that employees must validate their HR data on an annual basis. The CIO wants the users to be able to view their own information (including PII) at their discretion. HR already has a database with staff information.

Objectives: Give the end-user the ability to securely see and update only

their information.

Let’s get started!

© 2011 PLANET TECHNOLOGIES, INC.

Prerequisite and Farm Information

Prerequisite:External LOB system is accessible.

Farm Information:

Let’s get started!

Server Name Server Version Purposesps2011-ou-01 Server 2008R2 Active Directorysps2011-sp-01 SharePoint 2010 Enterprise SharePointsps2011-sql-01 SQL 2008R2 SharePoint DataBI-SQL1 SQL2008R2 BI Data

© 2011 PLANET TECHNOLOGIES, INC.

Create SQL Account

© 2011 PLANET TECHNOLOGIES, INC.

Quick Review of SQL…The GET stored procedure:

© 2011 PLANET TECHNOLOGIES, INC.

Let’s Get Started…Create the Secure Store Target ApplicationsWe are now going to create the accounts that will be used to access our data on the BI database. We are going to create a Read/Write application ID. Start off by going to Central Admin Application Management Manage Service Applications Secure Store Service Application. If you get this screen, please click the Generate New Key button in the ribbon and follow the directions…

© 2011 PLANET TECHNOLOGIES, INC.

Create the Secure Store Target Applications

© 2011 PLANET TECHNOLOGIES, INC.

Create the Secure Store Target Applications

© 2011 PLANET TECHNOLOGIES, INC.

Create the Secure Store Target Applications

© 2011 PLANET TECHNOLOGIES, INC.

Create the Secure Store Target ApplicationsAdd your Application Administrator and click OK to create the SQL Read/Write Application.We now need to add the Login Name and Password to the Application:

© 2011 PLANET TECHNOLOGIES, INC.

Create the Secure Store Target Applications

© 2011 PLANET TECHNOLOGIES, INC.

Create External Content Types

Warning: If you are going to create your External Content Types using Windows Authentication, you will want to run SharePoint Designer from within SharePoint’s Domain.We now are going to open up SharePoint Designer 2010 and open up our BI Site. In the Navigation Pane, you will see a Site Object call External Content Types, and select it. If everything in the Ribbon is greyed out, click inside of the External Content Type work area (somewhere near the middle of the screen) to activate the buttons. Click New External Content Type…

© 2011 PLANET TECHNOLOGIES, INC.

Create External Content Types

© 2011 PLANET TECHNOLOGIES, INC.

Create External Content Types

© 2011 PLANET TECHNOLOGIES, INC.

Create External Content Types

© 2011 PLANET TECHNOLOGIES, INC.

Create External Content Types

© 2011 PLANET TECHNOLOGIES, INC.

Create External Content Types

© 2011 PLANET TECHNOLOGIES, INC.

Create External Content Types

© 2011 PLANET TECHNOLOGIES, INC.

Create External Content Types

© 2011 PLANET TECHNOLOGIES, INC.

Create External Content Types

© 2011 PLANET TECHNOLOGIES, INC.

Create External Content Types

© 2011 PLANET TECHNOLOGIES, INC.

Create External Content Types

© 2011 PLANET TECHNOLOGIES, INC.

Create External Content Types

© 2011 PLANET TECHNOLOGIES, INC.

Create External Content Types

© 2011 PLANET TECHNOLOGIES, INC.

Create External Content Types

© 2011 PLANET TECHNOLOGIES, INC.

Create External Content Types

© 2011 PLANET TECHNOLOGIES, INC.

Create External Content Types

© 2011 PLANET TECHNOLOGIES, INC.

Set BDC Obj Permissions

Central Administration Application Management Manage service applications Business Data Connectivity Service

© 2011 PLANET TECHNOLOGIES, INC.

Set BDC Obj Permissions

© 2011 PLANET TECHNOLOGIES, INC.

Set BDC Obj Permissions

© 2011 PLANET TECHNOLOGIES, INC.

Create External List

© 2011 PLANET TECHNOLOGIES, INC.

Create External List

© 2011 PLANET TECHNOLOGIES, INC.

Create External List

© 2011 PLANET TECHNOLOGIES, INC.

Update DataSo now, let’s update Fred’s information by going to our list, and entering some Data…

© 2011 PLANET TECHNOLOGIES, INC.

Conclusion

Having the ability for a user to modify their own information is crucial to keep data updated and reliable. By following the steps above, we can keep everyone up to date with their personal information and keep the CIO happy. And most importantly…We can now do it without the risk of getting fired for exposing everyone’s PII to the world by accident.

© 2011 PLANET TECHNOLOGIES, INC.

Thank You!!!

Email: pcurran@go-planet.comBlog: PCfromDC.blogspot.comTwitter: @PCfromDC