Handling security, multi-tenancy, and self-service reporting for your data as a feature app. This workshop series features a brand-new demo application—created by the TIBCO Jaspersoft team and projekt202—that illustrates and teaches you how to create answer-generating applications of your own. Over the course of 5 webinars, we will introduce you to the what and the why of data as a feature applications and how you can build your own. Topics covered in this session: - Ways to visualize data with Jaspersoft - Developing a visualization template - Customizing charts using styles & chart properties - Creating expressions and data functions - Using data for non-Jaspersoft visualizations

1. Managing the Experience +
Ad Hoc Reporting
(Part 5 / 5) Data as a Feature webinar series
Defining security and delivering self-service
BI in an application

2. 2

3. 3
Hello from the project team!
3
Rachael Ross
Solutions Architect, projekt202
Seattle, WA
Crystal Phiripes
Program Manager, projekt202
Dallas area, TX
Sherman Wood
Director Solution Consulting WW, TIBCO
San Francisco, CA
Xavier Harrell
Sr. Experience Designer, projekt202
Dallas area, TX
Shane Swiderek
Product Marketing Manager, TIBCO
San Francisco, CA
Chad Lumley
Senior UI Developer, projekt202
Seattle, WA

4. 4
Agenda
4
Intro to security &
embedded BI
How is security
implemented in demo
app?
How is self-service
reporting delivered in
demo app?
Key takeaways
& best practices

5. What is “Embedded”?
Your audience are Consumers!
Reports: Interactive and
distributed
Self Service: with
guard rails
Visualizations and
Dashboards
Deliver
© Copyright 2000-2019 TIBCO Software Inc.
Data for UX: APIs

6. 6
Authentication, Authorization: a User
Profile
User Profile active in Jaspersoft
UserId: clint.collins@hospital.com
Business Unit: AFacility
Department: Admin/Records
Roles: User, Documentor
Name: Clint Collins
ECIs: 1213115190, 1057385912
RRs: 0156, 089A, 078R
Authentication
LDAP, other SSO?….
Authorization
Application, LDAP, …
Portal
Or Application
Pass Auth.
User
Profile
Jaspersoft
© Copyright 2000-2019 TIBCO Software Inc.

7. 77
Authentication, Authorization,
Multi-tenancy
© Copyright 2000-2019 TIBCO Software Inc.
Resource Access
How do we access to a new
resource?
• For all?
• Or only to some?
Multi Tenant Repository
Per Tenant Administration
Nested Tenants
Shared & Private Areas
Tenant Administration
Tenants manage
themselves – some users
need more rights than
others
Server/Tenant/User
Roles, Attributes
Domain Security
Describing Users
We need to limit access to
data and objects
Customer: Acme
Customer Type: 2
Name: Jane
Country: Ireland
Department: Sales
Office IDs: 12,9,78
Roles: User, Sales Management

8. 8
Data level security
© Copyright 2000-2019 TIBCO Software Inc.
Domain:
Physical Model
and Presentation
SELECT columns FROM table, ….
WHERE joins + user filters + security
User Profile
UserId: clint.collins@hospital.com
Department: Admin/Records
Roles: User, Documentor
ECIs: 1213115190, 1057385912
RRs: 0156, 089A, 078R
If Roles include ‘ABC’:
Account.ECI in Attribute(‘ECIs’);
If Roles include `DEF’:
Account.RR in Attribute(‘RRs’);
…….
▪ Domain engine adds joins to
ensure security rules are
always applied
▪ Can add visibility rules into
JasperReports queries and
report logic

9. 9
Agenda
9
Intro to security &
embedded BI
How is security
implemented in demo
app?
How is self-service
reporting delivered in
demo app?
Key takeaways
& best practices

10. 10
Security Design: Different experiences
Manager Driver
Franchise
● People belong in a franchise
● Managers can see data across all
regions in their franchise
● Drivers belong to a region and
can only see their routes
● Managers have self service
● Drivers can only consume

11. 11
Security Implementation in Bikeshare
● Token based single sign on
● Data level filtering in reports/visualizations
● Tenant/Role based access to JasperReports Server resources
● Security rules in domain
Let’s see it!!!

12. 12
Agenda
12
Intro to security &
embedded BI
How is security
implemented in demo
app?
How is self-service
reporting delivered in
demo app?
Key takeaways
& best practices

13. 13
Self Service with Ad hoc
● People belong in a franchise
● Managers can see data across all
regions in their franchise
● Drivers belong to a region and
can only see their routes
● Managers have self service
● Drivers can only consume

14. 14
Domains
● Building
● Security rules
● Testing
Let’s see it!!!

15. 15
Agenda
15
Intro to security &
embedded BI
How is security
implemented in demo
app?
How is self-service
reporting delivered in
demo app?
Key takeaways
& best practices

16. 16
Key Takeaways
16
Get complimentary
eBook from
Jaspersoft.com
• Define your security requirements from an end
audience perspective
• Define the user profile to support the requirements
• Domains are the most flexible way to deliver self
service
• Implement security rules in domains to support self
service

17. 17
Get involved with the demo app
17
“How we built it” webinar
series
*Ongoing
Workshops and
documentation
*Available now on Jaspersoft Community!
Guided demo app for on-
demand consumption
*Available on Jaspersoft.com
Access to source code for app
and dataset
* Available on Jaspersoft BikeShare GitHub repo

18. © Copyright 2000-2019 TIBCO Software Inc.

19. 19
Report repository layout
Public Folder – Canned
Private User or Customer Folders – Custom
Customer 1 Folder
User or Customer 1
User or Customer 2
Customer 2 Folder

20. 2020
“Canned” & Custom Reports
© Copyright 2000-2018 TIBCO Software Inc.
Canned Reports & Dashboards
Built by developers and included by default for all your
customers
Same set of reports shared by all customers (secured by
data security structure)
Customer 2
Customer 1
Custom Reports & Dashboards
Built by end users (or dev) and only consumed by that
customer
Each report must be stored separately (object level security)
Customer 1
Customer 2

21. 2121
Report Repository Layout
© Copyright 2000-2018 TIBCO Software Inc.
Public Folder – Canned
Private Customer Folders – Custom
Customer 1 Folder Customer 2 Folder
Customer 1
Customer 2

22. 22
FOR SHERMAN
SCREENSHOTS & ICONS FROM DEMO APP:
https://drive.google.com/open?id=1U54kljAbH7YIPyw1yQHZiveRSMKPD6WK
PICS OF USERS:
TIBCO ICON LIBRARY:
https://drive.google.com/open?id=0B0t8IoRPE6meZGtNZjJGN0RJa1E

23. 23
● Intro to security and embedded BI
○ Goals (security + personalization)
○ How do you achieve goals?
■ Determine security rules (desired access level for users / customers)
■ Define audience and data related to that audience
■ What visualizations are seen? How are security rules implemented in those
visualizations
■ How are users identified?
● How is security implemented in bikeshare?
○ SSO (when a user logs in)
○ Report level security (reference roles, attributes, permissions of report)
○ Ad hoc / Domains
● Authoring content
● Embedding in app
○ Self-service security features
Working agenda