Optimization Techniques and Security Trimming of BCS

© 2011 PLANET TECHNOLOGIES, INC.

Optimization Techniques and Security Trimming of BCS

Patrick Curran, MCT

M A Y 1 2 , 2 0 1 2


Patrick Curran

MCT, MCITP, MCTS, MCP Director of Operations, Federal for Planet Technologies. SharePoint Architect. Working with SharePoint since 2003.

– Administrator / Developer– Architect / Implementer– Troubleshooting / Branding

PCfromDC.blogspot.com @PCfromDC

Agenda1. Describe scenario and objective.

2. Prerequisite.

3. Review farm.

4. Talk…

5. Verify Our Solutions.

6. Conclusion.


Scenario and Objectives

Scenario: CIO says that employees must validate their HR data on an annual basis. The CIO wants the users to be able to view their own information (including PII) at their discretion. HR already has a database with staff information.

Objectives: Give the end-user the ability to securely see and update only

their information.

Let’s get started!


Prerequisite and Farm Information

Prerequisite:External LOB system is accessible.

Farm Information:

Let’s get started!

Server Name Server Version Purposesps2011-ou-01 Server 2008R2 Active Directorysps2011-sp-01 SharePoint 2010 Enterprise SharePointsps2011-sql-01 SQL 2008R2 SharePoint DataBI-SQL1 SQL2008R2 BI Data


Create SQL Account


Quick Review of SQL…The GET stored procedure:


Let’s Get Started…Create the Secure Store Target ApplicationsWe are now going to create the accounts that will be used to access our data on the BI database. We are going to create a Read/Write application ID. Start off by going to Central Admin Application Management Manage Service Applications Secure Store Service Application. If you get this screen, please click the Generate New Key button in the ribbon and follow the directions…


Create the Secure Store Target Applications


Create the Secure Store Target ApplicationsAdd your Application Administrator and click OK to create the SQL Read/Write Application.We now need to add the Login Name and Password to the Application:


Create the Secure Store Target Applications


Create External Content Types

Warning: If you are going to create your External Content Types using Windows Authentication, you will want to run SharePoint Designer from within SharePoint’s Domain.We now are going to open up SharePoint Designer 2010 and open up our BI Site. In the Navigation Pane, you will see a Site Object call External Content Types, and select it. If everything in the Ribbon is greyed out, click inside of the External Content Type work area (somewhere near the middle of the screen) to activate the buttons. Click New External Content Type…


Create External Content Types


Set BDC Obj Permissions

Central Administration Application Management Manage service applications Business Data Connectivity Service


Set BDC Obj Permissions


Create External List


Update DataSo now, let’s update Fred’s information by going to our list, and entering some Data…


Conclusion

Having the ability for a user to modify their own information is crucial to keep data updated and reliable. By following the steps above, we can keep everyone up to date with their personal information and keep the CIO happy. And most importantly…We can now do it without the risk of getting fired for exposing everyone’s PII to the world by accident.


Thank You!!!

Email: [email protected]: PCfromDC.blogspot.comTwitter: @PCfromDC

Optimization Techniques and Security Trimming of BCS

Documents

Transcript of Optimization Techniques and Security Trimming of BCS