BI Analytics Administrators gain access via

IBM Cognos Upgrade/Assessment Service
Prepared For:
XYZ Corp
XYZ BICC C11 DEV
Prepared By:
Tech Data BSP Software
BSP Joe
4/11/2017
License Audit
BI Analytics Administrators gain access via System Administrators group
BI Advanced Users gain access via Authors group
Information Distribution Users gain access via GCR Viewers group
•
•
BI Advanced User
•
Bayard
•
cgriffin
•
Eric
•
Fritz
•
jbrewer
BI Analytics Administrator
•
Ari
•
bspadmin
•
dfish
•
Drama
•
Gunter
•
Hal
License Audit.xlsx
•
•
BI Analytics Explorer
•
Andy
•
Vince
•
BI Analytics User
•
Chin
•
Steve
Information Distribution
•
Jan
•
Jackie
•
Sally
•
Sherry
•
Turtle
Content Overview
Content Store
331 MB
Public Folders - 325 MB
Directory - 6 MB
Object Stats Public Folders.pdf
Object Stats Directory.pdf
Object Stats Analysis.xlsx
Type
Quantity
Total
Approx. 4000 Objects
Package
43 (1 in My Folders)
Folder
283
Report
1513
Output
260 (94 MB)
Job
11
View
31
Schedule
52 (2 My Folders)
Account
47
Group/Role
70
Content Validation Errors
Test
Results
Report
Reports with Broken Query Items
3 Failures
Broken Query Items.xlsx
Broken Shortcuts
9 Failures
Content Validation Results.xlsx
Broken Reports
94 Failures
Content Validation Results.xlsx
Broken Report Views
8 Failures
Broken Report Views.xlsx
Reports not linked to a package
6 Failures
Report Package Linkage Errors.xlsx
Failing Schedules
15 Failures
Failing Schedules.xlsx
Jobs with Broken Steps
5 Failures
Broken Jobs.xlsx
Broken Datasources
7 Failures
Broken Datasources.xlsx
Broken Datasources.pdf
Content Validation Concerns
Test
Results
Report
Reports with embedded SQL
0 Failures
Embedded SQL.xslx
*Consider rewriting Query or moving SQL to FM Model
Excluding Samples
Content without an Owner
Unowned Content.xslx
*Assign ownership using Object Editor
129 Reports
9 Packages/Folders
Large Report Outputs
7 Outputs over 5MB
Stored Outputs.xlsx
*Review retentions for these reports
Scheduled Content
Test
Results
Number of Schedules
53 Schedules
Schedules sent to Email Addresses
19 instances of email addresses
*Recommended to use CAMIDs over SMTP Email Addresses.
Schedules that send Email
21 Schedules are sending emails
Credentials used for schedules
2 Credentials (Ari & jbrewer)
*These accounts are important for proper report execution.
Schedules without an End Date
22 Indefinite End Dates
*Consider end dates as a way of avoiding unused schedules
Schedules sending attachments
1 Email sending attachments.
*Sending links is more secure than sending attachments
Add Color report
Schedules that run frequently
19 Schedules running more than once an hour
*Review if this aggressive schedule frequency are necessary
Failing Schedules
Scheduled Content.xlsx
Failing Schedules.xlsx
15 failures however only 4 from this year
Content Errors Details
• Report Failures Summary
• The Invalid Query item [gosales_goretailers].[Products].[Product Line] is breaking 3 reports
• Datasource failures including: MM3_*, UAR and sales_and_marketing
• Logon for the Audit database is failing.
• The GOSALES.TIME_DIMENSION is causing some report failures
• The table TIME_DIMENSION3 is missing
• Schedules failing mostly due to Ambiguous Datasource Connections, Unresolved Prompts and Ari’s stored Credentials are invalid.
• 5 Jobs have a total of 15 invalid Job Steps, however only 2 jobs with 3 missing steps are in the Public Area. The broken items in the My
Folders area belong to lgriffin and bspadmin
• The IVC, Audit and DB101 Datasources are failing with a logon error
• The Muppets and Springfield datasources are not configured properly
• 5 Reports contain embedded SQL but they are all sample reports
• The single output Public Folders >> _AD >> Big Report 2 is very large at 315MB.
• Several schedules are emailing to SMTP addresses including: bspsoftware.com, Avnet.com & Blah.com
Content Size Audit
60% of all content is in the Hold folder.
Other folders appear healthy with a
reasonable number of outputs and
report history being stored.
Content Size Public Folders.pdf
Content Size Directory.pdf
60% of all My Folders content is
owned by bsimpson and is
attributed to 12 large stored outputs
259 Stored outputs over 12 months totaling 500 MB
Stored Output Analysis
•
261 Total Stored Outputs totaling 500 MB
•
259 Stored outputs over 12 months (500 MB)
•
44 Outputs in User’s My Folders
•
8 Reports have more than 5 stored outputs
•
Single large report causing most of the space needs
•
Public Folders >> _AD >> Big Report 2
Stored Outputs.xlsx
Content Administration & Configuration
• Review performed for a Single Server / Multi-Dispatcher environment
• http://ushom00nb039093:9305/p2pd
• http://ushom00nb039093:9306/p2pd
• Audit Logging is Enabled
• Logging is set at the root level as Minimal and inheriting on dispatcher 9306 however it is overridden on the dispatcher as Request for
dispatcher 9305
• The Audit Database is configured on the 9305 dispatcher but not the 9306 dispatcher
• The mail server From address is different between the 9305 dispatcher and the 9306 dispatcher
• The User Lookup for the AD Namespace is different between the 9305 dispatcher and the 9306 dispatcher
http://ushom00nb039093:9305/p2pd
Content Administration.xlsx
Configuration.xlsx
Content Administration.pdf
Configuration.pdf
http://ushom00nb039093:9306/p2pd
* This server doesn’t actually exist, it has
been mocked up for the purpose of
demonstration
Account Analysis
•
Quick Facts
–
–
–
–
–
45 Accounts amongst 3 Namespaces
16 Accounts using the Executives Portal Page
1 User (Ari) using a Datasource Credential
1 User (bspadmin) with a Package in My Folders
2 Users have credentials and scheduled content
Account Analysis.xlsx
Reports in User’s My Folders
Security Audit
•
•
•
•
144 Public Folders objects have overridden security which probably should be set to
Inherit.
The security in the entire Go Sales and Retailers package needs to be reset to
inherit.
157 Public Folders objects have direct account access. This access should be
abstracted through group membership.
The following accounts have direct access to certain Public Content:
–
•
Ari, Andy, cgriffin, bsimpson, dfish, snevada, Drama, lgriffin, bspadmin, pgriffin, mgriffin, lsimpson, rriver, hsimpson, lbaker,
jbrewer, msimpson & sgriffin
23 Folders/Packages have Explicit Security. Review this security for correctness.
Security Audit.xlsx
Environment Compare Analysis
•
•
•
6 Objects exist in Development that are not in Production
13 Objects exist in Production that are not in Development
32 of 86 objects compared are different between environments
–
–
–
–
–
–
–
7 Reports point to different models
4 Descriptions are different
3 Multi-lingual names are different
2 Report Options are different
2 Stored Report Parameters are different
2 Report Specifications are different
1 Retention policy is different
Compare Details
Dev Only
6
Prod
Only 13
Same 35
Different
32
Environment Compare.xlsx
Summary