In this section: |
PMF is designed to work for identified users only, and authenticates each of its users with WebFOCUS MR/CUS security. You can set up users for PMF in MR/CUS and import them into the PMF internal security authorization table to allow authorization for PMF for your users.
As detailed earlier in this documentation, all PMF users must be identified and authenticated as MR/CUS users. MR/CUS also contains authorization information that permits users to access the various Domains and/or Folders in the MR Repository.
PMF also maintains a separate but connected set of authorization parameters within the PMF Data Mart, for each PMF user (an Owner in PMF jargon). This is necessary, since PMF has many application-specific security extensions that enable such things as:
In conclusion, all current PMF users must be:
For more information, please see Understanding Security and PMF.
To enable consistency between the MR/CUS security, PMF includes a facility called the User Sync tool, which enables an administrator to manually synchronize users from the MR/CUS environment into the PMF authorization table. This tool allows you to speed up the process of:
The User Sync tool is available from the Manage tab in PMF, and is fully documented in the section Importing Users (Owners) in the PMF Administrator’s Guide.
If your MR/CUS environment is configured to allow access to WebFOCUS using an external system of record such as an RDBMS repository, LDAP repository, MS ActiveDirectory, or another similar system, it is possible to automate the synchronization between the MR/CUS environment authorized user table and PMF.
In addition, your users might be granted access to various levels of operational data, as used in their WebFOCUS reports and applications. There could be parallelisms in what PMF Measure data they are permitted to view and what data they are allowed to view in your various operational reporting systems and applications. It is possible also to automate this synchronization.
Since your systems of record, MR/CUS environment, and PMF authorization tables are so difference in architecture and logic, the process of setting up automatic synchronization would currently entail some development work to allow ETL transfer of information to the target WebFOCUS and PMF tables. This customization and ETL can be performed either by your own developers, or by an Information Builders consultant or partner.
For more information on how to enable an automated synchronization capability for your users from a system of record, please consult the PMF Developer’s Guide, and/or contact your Information Builders support representative.
| WebFOCUS |