Siebel Analytics Web Administration Guide > Managing Siebel Analytics Web Security >

Overview of Siebel Analytics Web Security

This section provides an overview of Siebel Analytics Web security. It contains the following topics:

• Where Siebel Analytics Web Security Settings Are Made
• Your Security Goals in Siebel Analytics Web
• About Access Control and Permissions in Siebel Analytics Web
• About User Rights and Privileges in Siebel Analytics Web
• About User Authentication in Siebel Analytics Web

Where Siebel Analytics Web Security Settings Are Made

Security settings that affect Siebel Analytics Web are made in the following Siebel Analytics components:

• Server Administration Tool. This is where you perform the following tasks:
  • Set permissions for business models, tables, columns, and subject areas.
  • Specify database access for each user.
  • Specify filters to limit the data accessible by users.
  • Set authentication options.

    For more information, see Siebel Analytics Server Administration Guide.

• Siebel Analytics Web. This is where you set permissions to Web Catalog items, including dashboards, and the privilege to perform actions such as edit views, create iBots, and create prompts.
• Catalog Manager. This is where you set permissions to Web Catalog items, including dashboards.

Your Security Goals in Siebel Analytics Web

Your main security goals are to make sure that:

• Only appropriate people can log on and access Siebel Analytics Web. This is achieved by assigning logon rights and authenticating users through the Siebel Analytics Server. For more information about authentication, see About Siebel Analytics Web User Authentication.
• Employees can access only the data that is appropriate to them. This is achieved by applying access control in the form of permissions.
• Employees have the ability to perform only actions that are appropriate to them. This is achieved by applying user rights in the form of privileges.

About Access Control and Permissions in Siebel Analytics Web

Access control defines the ability of an account to access a shared Web Catalog item. Catalog items are folders and requests, where folders are application folders, dashboard folders, and dashboard page folders.

An account is one of the following:

• An individual user.
• A Web Group that has one or more users as members.

Permissions describe the type of access to an object that an account is permitted. Examples are Read and Full Control.

Each Web Catalog item has an access control list that defines which accounts have which permissions to access the item. An access control list has the general form shown in Table 4.

For more information about permissions, see About Setting Siebel Analytics Web Permissions.

About User Rights and Privileges in Siebel Analytics Web

Privileges are the actions that users have the right to perform in Siebel Analytics Web. Example privileges are "Edit system-wide column formats" and "Create iBots."

Privileges are managed by associating them with accounts, that is, individual users or Web Groups. A specific account is either granted or denied a specific privilege. These associations are created in privilege assignment tables.

The general form of a privilege assignment table is shown in Table 5. The Web Groups in the right column are granted the privileges in the left column.

For more information about privileges, see About Setting Siebel Analytics Web Privileges.

About User Authentication in Siebel Analytics Web

Authentication is the process of using a username and password to identify a someone who is logging on. Authenticated users are then given appropriate authorization to access a system, in this case Siebel Analytics Web. Siebel Analytics Web does not have its own authentication system; it relies on the authentication system built into the Siebel Analytics Server.

For more information about authentication, see About Siebel Analytics Web User Authentication.