Building a Business Objects Shared-Services Environment.pdf

Building a BusinessObjects
Shared-Services Environment
Building a BusinessObjects
Shared-Services Environment
Jay Palevsky, Credit Suisse
Robert Isaacson, Credit Suisse

Copyright © 2006 Business Objects S.A. All rights reserved.
Slide 2
Breakout Information (Hidden Slide)
Building a BusinessObjects Shared-Services
Environment
ƒ Would you like to learn how a global financial services company
plans to deploy BusinessObjects XI Release 2 to support a federated
BI shared service? Find out how the new platform will replace a
BusinessObjects 6.5 system currently supporting over 70 reporting
applications and 5,500 users deployed across all regions. Walk
through our technical design plans and discover first-hand how we
plan to meet some critical technical requirements such as the
following: high availability and disaster recovery, security for virtual
application silos on single-server instances, a global "My
BusinessObjects" portal, and integration with an enterprise-level job
control system.
ƒ Room 2008, Monday, November 6, 10:00am -11:00am
B2_ID21_Q150

Slide 3
Project Overview
Deployment Overview
Cluster Designs for High Availability/Disaster Recovery
Virtual Application Silos
Enterprise Job Control
References
Q&A
Topics

Slide 4
Project Overview - Company
Credit Suisse group
ƒ Investment banking
ƒ Private banking
ƒ Asset management
Investment banking products
ƒ Debt and equity underwriting
ƒ Sales and trading
ƒ Mergers and acquisitions
CS is a truly global institution
ƒ Operates in more than 57 locations across more than 26 countries on
five continents
ƒ Investment research
ƒ Correspondent and prime
brokerage services

Slide 5
Project Overview – Organizational Requirements
Distributed product line ownership of business
intelligence projects
ƒ Globally distributed product line IT departments to retain full
ownership of data and reporting applications
ƒ BusinessObjects to be centrally owned and hosted on shared
development, user acceptance test (UAT), and production
environments
ƒ Each product line reporting application to be deployed in a virtual
silo that isolates it from other applications running on the same
shared server instance
Distributed data warehouses/data marts
ƒ Located in regional data centers (New York, London, Singapore) for
both global and local reporting applications
Heterogeneous data sources
ƒ Oracle, DB2, Sybase, SQL Server, Informix
The CS investment bank is a distributed organization

Slide 6
Project Overview – Deployment
BusinessObjects licensing w/premium support
ƒ Legacy licensing has been consolidated into 8500 named user
licenses for BusinessObjects XI premium
• Includes BusinessObjects InfoView and Crystal
ƒ 3000 named users for Web Intelligence analysis
ƒ 1000 named users for BusinessObjects analysis
ƒ 1500 seats of Crystal Reports Advanced Developer
Query and analysis - BusinessObjects
ƒ Global shared services for BusinessObjects 6.5b
70 product line reporting applications with over 6000 users
Reporting – Crystal
ƒ Approximately ten self-supported product line deployments of Crystal
Enterprise 10, Business Objects XI, and Business Objects XI R2
ƒ Most of these deployments are expected to migrated to shared
services when our Business Objects XI R2 platform is available
BusinessObjects deployment at CS

Slide 7
Project Overview – Product Roadmap
Overlay of CS migration strategy
CS Shared-Services
1Q07
CS Product Lines

Slide 8
Project Overview – Technical Architecture Requirements
Federated regional intranet deployments
ƒ Support high availability/disaster recovery within each region
ƒ In the US, support disaster recovery for a distance of over 100 miles
(SEC regulations)
ƒ Support local development, UAT, production within each region in
one or more locations
Additional extranet deployments
ƒ Separate infrastructure outside the scope of this project
Unified end-user report services view
ƒ Provide a unified global context for end-users that have access to
reporting on multiple production clusters locally and globally

Slide 9
Project Overview
Deployment Overview
References
Q&A
Topics

Slide 10
Deployment Overview
Existing: Business Objects V6.5b
ƒ Product allows for multiple Business Objects clusters to run against a
common repository
ƒ Single global security domain for each environment
• development, UAT, production
ƒ User will see identical profile in each Web Intelligence instance
ƒ User will have one global location for personal documents
Planned: Business Objects XI Release 2
ƒ Product has a one-to-one mapping of cluster to repository
ƒ Each physical location will have an independent cluster/repository
ƒ User’s profile will vary with each Web Intelligence instance
ƒ User will have a personal documents location for each instance

Slide 11
Business Objects V6.5b Environment Silos
Local
Global
Global security domains - local universe/document domains

Slide 12
Business Objects XI R2 Environment Silos
Local
Loss of global repository - clusters are local

Slide 13
Business Objects V6.5b Global Deployment
Global security domains => global user profiles

Slide 14
Business Objects XI R2 Global Deployment
Global user profiles no longer exist

Slide 15
“My Business Objects” Portal
“My Business Objects” portal => CS global user profiles

Slide 16
Project Overview
Deployment Overview
References
Q&A
Topics

Slide 17
EMC SRDF Replication Concepts
Synchronous SRDF
(SRDF/S)
• No data exposure
• Some performance
impact
• 200 km max distance
Asynchronous SRDF
(SRDF/A)
• Can manage to 30 - 500
sec intervals
• No performance impact
• Can use consistency
groups across Simms
Source
Limited Distance
Target
Servers
Source
Unlimited Distance
Target
Servers
SRDF - Symmetrix Remote Data Facility

Slide 18
Business Objects XI R2 Split Cluster Concepts
Split active/active cluster across data centers
(short distances)
ƒ Supported by Business Objects where latency between clusters is
less than 10ms (<30 miles @CS)
ƒ Use synchronous SRDF to keep backup copy of FRS (on Storage
Area Network - SAN) and BusinessObjects XI R2 repository in 2nd
data center
Split active/passive cluster across data centers
(long distances)
ƒ Build additional passive cluster member in remote data center and
keep in stopped state until invocation of Disaster Recovery Scenario
ƒ Use asynchronous SRDF to keep backup copy of FRS (SAN) and
BusinessObjects XI R2 repository in remote 2nd data center

Slide 19
Active/Active Two Node Cluster Designs
Single data center (out-of-the-box solution)
ƒ High availability with a two node active/active cluster
ƒ Corporate infrastructure provides for local redundancy of FRS and
BusinessObjects XI R2 repository
Two data centers in close proximity
ƒ High availability/disaster recovery (DR) with a two node active/active
cluster
ƒ Use of synchronous SRDF for redundancy of FRS and
BusinessObjects XI R2 repository
ƒ FRS and BusinessObjects XI R2 repository fail over independently of
Business Objects cluster
Note: It is assumed that customer data sources will follow the same
DR strategy as the BusinessObjects XI R2 repository in each
configuration

Slide 20
Single Data Center
High availability with a two node cluster

Slide 21
Two Data Centers In Close Proximity
High availability/disaster recovery with a two node cluster

Slide 22
Active/Active/Passive Three Node Cluster Design
Wide area disaster recovery
(Required by Securities and Exchange Commission)
ƒ Remote DR using standby passive cluster node with replicated FRS
and BusinessObjects XI R2 repository
ƒ Use of asynchronous SRDF with single consistency group for FRS
and BusinessObjects XI R2 repository
• Replicated data will be synchronized at least every five minutes
• Single consistency group - Symms replicate simultaneously, to the
same point in time (+ or - one millisecond) to the DR location, thus
minimizing the risk of the repository becoming out-of-sync with the
FRS

Slide 23
Wide Area Disaster Recovery
Remote standby cluster node with replicated repository and FRS
EMC SRDF/A
Single
Consistency
Group

Slide 24
Credit Suisse Regional Deployment
In US, a combination of local and remote clustering is
employed
ƒ New York Ù Princeton has an active/active split cluster with a third
passive cluster member in Research Triangle Park (RTP)
ƒ Research Triangle Park has a local active/active cluster with a third
passive cluster member in New York
ƒ Multi-hop replication is used for the FRS and repository for the New
York Ù Princeton cluster
• Synchronous SRDF to nearby site (New York => Princeton)
• Asynchronous SRDF to far-away site (Princeton => RTP)
• RTP copy of New York Ù Princeton cluster only invoked if both
New York and Princeton are unavailable
For Europe and Asia-Pacific active/active clustering
across two data centers is employed

Slide 25
Credit Suisse Regional Deployment Topology
In US, both local and remote clustering are employed

Slide 26
Project Overview
Deployment Overview
References
Q&A
Topics

Slide 27
Virtual Application Silos – Shared Enterprise
Publish and manage own BI content
ƒ Through development lifecycle (DEV -> TEST -> PROD)
All levels of security
ƒ Resource (report, universe, connection) and data security
ƒ Functional role definition
Leverage BI services
ƒ Inclusion in client-server and web application deployments
ƒ Complete separation between application and processing tiers
Enterprise job control
ƒ Integration with Control-M, an enterprise job scheduling product, and
Broadcast Agent.
BI applications and use of shared enterprise

Slide 28
Virtual Application Silos – Security
Creating functional roles
Define functional roles
ƒ Roles within a OLAP deployment for use of product functions
• Application admin role who will perform user and group
administration
• Migration role who will perform code migrations through lifecycle
• Power user role who can promote code to group folders
• User role for refresh and basic OLAP functions
• Environmental specific permissions
– Locked-down production
– Open sandbox and development
Points of control
ƒ SOX control objective requiring development lifecycle enforcement
• Development personnel prohibited from moving development
software or data to production

Slide 29
Creating functional roles
Desktop Intelligence - example

Slide 30
Creating application groups and folders
Folder for an applications content
Create set of profile groups at the application level
ƒ For example: App XYZ admin, App XYZ migration, App XYZ power
user
ƒ Add users to a enterprise function role and application-level role
ƒ Apply folder permissions based on documented standard
User
Group
Object
Folder

Slide 31
Group security view
Credit Suisse
Application A
Functional Roles
Admin – App A
Migration – App A
Power User – App A`
User – App A
Application A All Users
Admin Role
Migration Role
Application Z
Power User Role
User Role
B Wolf
J Smith
J Smith
B Wolf
J Smith
B Wolf

Slide 32
Folder right assignment
Application A
Admin - App A
Migration – App A
Power User – App A
User- App A
App A All Users

Slide 33
Key points to remember
If a right is set as “not specified” the right is denied by
default
Users to group association
• Added to only one enterprise role for production functionality
– Developers explicitly granted right to save for all users in Desktop Intelligence
• Added to only one application role for access control list permission
on a folder permissions
– Developers explicitly granted right to view, edit, delete all objects in application
folder root
• Added to an application all users group
– Used to identify, centrally, all users of an application centrally
Application folder parent
• Apply rights to application roles and all user groups, referenced
above, to the application folder parent

Slide 34
Virtual Application Silos – Service Architecture
Application XI R2 Enterprise
single deployments
ƒ Deep vertical integration leads to
Increased support costs
ƒ Resource management varied
based on application components
ƒ Myriad of deployment
architectures
ƒ Increased server sprawl
ƒ Low utilization
Service centric
architecture
ƒ Loose coupling of client and
service
ƒ Scalable and centralized
business continuity and DR
centralized monitoring and
support
ƒ Platform independence
ƒ Finer control of resource
pools to meet service levels

Slide 35
Virtual Application Silos – Application Model
Infrastructure
Applications
Differentiated
Local
services
Common
Services
BusinessObjects component stack

Slide 36
Virtual Application Silos - Delivering an SDK Environment
Hub-spoke architecture
Deliver Infoview out-of-box with sample code
ƒ Deployment descriptor updates for WCA and Infoview
• Connection timeout settings to match Credit Suisse application
server session timeouts
• Virtual directory mappings
• Default CMS name for login page
Configuration for connectivity to backend shared
enterprise services
Authentication and authorization secured by back-
end enterprise repository

Slide 37
Virtual Application Silos – Multipurpose
Need to provide multiple test environments
ƒ System test, integration test, acceptance test, validation testing (QA, fit-
for-purpose), regression testing
ƒ Performance testing would not fit this deployment, requirement calls for
duplicate infrastructure capacity as production
Warm standby DR requirement
Use a remote region (NY using RTP) UAT machine
Mutliple clusters per deployment
ƒ One CMS cluster per repository connection
ƒ Added complexity in delivering service levels
Logical environments from one physical installation

Slide 38
Project Overview
Deployment Overview
References
Q&A
Topics

Slide 39
Value Added Components – BCA API Architecture
High-level overview
Web service architecture
ƒ Perl script freely distributed which
allows command line integration
ƒ Web service allows for integration
in all technologies
ƒ Client does not know of service
implementation details
ƒ Message based communication
using XML
• Stateless using HTTP protocol
ƒ Client location is independent of
invocation
ƒ BCA API software delivered as
J2EE servlet
ƒ Detailed logging for ease of
troubleshooting
BCA API
Service
BusinessObjects
Enterprise Server
Application
Request
CORBA
XML

Slide 40
Value Added Components – BCA API
Broadcast Agent API requirements and parameters
Core requirements
ƒ Scheduling jobs using
traditional BCA no longer
required
ƒ Use of enterprise Control-M
job control product
ƒ Return code 1 for success, -
1 for failure
ƒ Detailed logging for ease of
troubleshooting
ƒ Thin client with minimum
deployment effort
Required parameters
ƒ HTTP server URL
ƒ Path to batch parameter or
configuration file (*.xml)
ƒ Log file location
ƒ Log rotation rule

Slide 41
Value Added Components – BCA API Client
BCA API specification
XML specification
ƒ Username is system
supplied ID
ƒ Parameter name and
value pairs
ƒ Uses existing categories
ƒ Schema definition (.xsd)
as published standard
ƒ FTP and SMTP support
for one destination only

Slide 42
Value Added Components – BCA API Client
Current limitations
Single destination with single output format
through API
ƒ Loss of multiple actions and formats per batch job from
v6.5.
ƒ Requires multiple iterations or batch runs per report to
achieve similar functionality XML specification

Slide 43
Project Overview
Deployment Overview
Service Centric Deployment
References
Q&A
Topics

Slide 44
References
Please see our 2005 Insight presentation for a complete
overview of how we created the CS global shared-
service for Business Objects
ƒ Abstract: three years ago, Credit Suisse’s team was tasked in
building and maintaining a global shared service to support diverse
and strategic BI initiatives across multiple regions and product lines.
CSFB now supports 60 different reporting applications with over
3,000 users running on a common infrastructure owned and
supported by a single global service organization. See the
organizational and technical challenges that CS overcame. Learn the
critical steps required to deploy a global BI service, such as defining
organizational role definitions, cost transparency and charge backs,
virtual application silos, and integration with an enterprise-level job
control system.
http://www.jay.palevsky.net/businessobjects/bo2005.htm

Slide 45
Project Overview
Deployment Overview
Security for Virtual Application Silos
References
Q&A
Topics

Slide 46
Questions
ƒ Jay Palevsky, Global Program Manager, Credit Suisse
ƒ Robert Isaacson, Global Technical Lead, Credit Suisse
ƒ I will repeat questions to ensure everyone can hear
Contact information – Jay Palevsky
ƒ Email: jay.palevsky@credit-suisse.com
ƒ Tel: 212 325 7074
Contact information – Robert Isaacson
ƒ Email: robert.isaacson@credit-suisse.com
ƒ Tel: 212 538 7375
Q&A

Building a Business Objects Shared-Services Environment.pdf

More Related Content

Similar to Building a Business Objects Shared-Services Environment.pdf (20)

Recently uploaded (20)

Building a Business Objects Shared-Services Environment.pdf