Siebel Analytics Web Administration Guide > Managing Siebel Analytics Web Security >

About Siebel Analytics Web Groups and Siebel Analytics Session Variables

If the Siebel Analytics Server is using an external table or LDAP server for authentication, you must configure system session variables in the repository.

A session variable block contains the SQL statement that is issued when each session begins. This block can contain system session variables with fixed meanings (such as USER, GROUP, DISPLAYNAME, and WEBGROUP) and other non-system session variables unique to your particular environment. See Siebel Analytics Server Administration Guide for additional information about using session variables.

You should also create a Web group to match each possible value returned in the GROUP or WEBGROUPS variable for which you want to control privileges and permissions to Siebel Analytics Web components and requests.

This section contains the following topics:

• About the Siebel Analytics GROUP Session Variable
• About the Siebel Analytics WEBGROUPS Session Variable
• Setting Permissions and Privileges in Siebel Analytics Web

About the Siebel Analytics GROUP Session Variable

The GROUP variable contains one or more group names, separated by semicolons, that are also used by the Analytics server for security and content filtering. In many cases, these same groups are sufficient to control access to Siebel Analytics Web content. Siebel Analytics applications have been preconfigured to use this GROUP variable technique to inherit group memberships from the Analytics server.

About the Siebel Analytics WEBGROUPS Session Variable

The WEBGROUPS session variable allows greater flexibility because you can define Web Groups that categorize the roles, or classes, of Web users. For example, you might create the following groups:

• A Basic group that can only access the dashboard.
• A Standard group that has minimal access to Siebel Answers.
• A Power Users group that has full access to Siebel Answers and minimal access to iBots (Siebel Delivers).
• An Administrative group with full access to all features.

Setting Permissions and Privileges in Siebel Analytics Web

When you have set up the Web Groups, create a Web Catalog folder structure and assign appropriate privileges and permissions to each group. Keep in mind that each user can be associated with multiple roles by being a member of multiple Web Groups. Although WEBGROUPS can be used to control access to Web Catalog content (permissions), usually GROUP controls content and WEBGROUPS controls the ability to perform actions (privileges).

NOTE:  Some GROUPs may not have corresponding Web content. In this case, when you create the group, you can delete the group folder created for the group in the
/Shared folder, and give the group permission to the other group folders and subject area folders as appropriate (see Administering the Siebel Analytics Web Catalog for more information).

For more information about the sequence in which to set up security, see Guidelines for Configuring Siebel Analytics Web Security for the Web Catalog and Dashboards.

For more information about permissions, see About Setting Siebel Analytics Web Permissions.

For more information about privileges, see About Setting Siebel Analytics Web Privileges.