crystal enterprise sap edition - installation guide.pdf

7/25/2019 Crystal Enterprise SAP Edition - Installation guide.pdf

1/58

Crystal Enterprise SAPEditionInstallation Guide

Crystal Decisions, Inc.895 Emerson St.

Palo AltoCalifornia, USA 94301


2/58

Copyright 2002 Crystal Decisions, Inc., 895 Emerson St., Palo Alto, California,USA 94301. All rights reserved.

Issue 1.

No part of this documentation may be stored in a retrieval system, transmitted orreproduced in any way, except in accordance with the terms of the applicablesoftware license agreement. This documentation contains proprietary informationof Crystal Decisions, Inc., and/or its suppliers.

Trademark Acknowledgements

2002 Crystal Decisions, Inc. All rights reserved. Crystal Decisions, Crystal,Crystal Reports, Crystal Enterprise, Seagate Info, Seagate Software, Seagate, andthe Seagate and Crystal logos are trademarks or registered trademarks of CrystalDecisions, Inc. and/or Seagate Technology, Inc. All other trademarks referencedare the property of their respective owner.


3/58

Crystal EnterpriseSAP Edition Installation Guide i

Contents

Chapter 1: Welcome to Crystal EnterpriseSAP Edition

What is Crystal EnterpriseSAP Edition? ........................................... 2

Who should use this guide? ............................................................... 2

About this guide ................................................................................ 2

Chapter contents ................................................................................................... 2

Crystal Care technical support .......................................................... 3

Crystal Training ................................................................................. 3

Crystal Consulting ............................................................................. 4Document conventions ..................................................................... 4

Chapter 2: Components and Architecture

Crystal EnterpriseSAP Edition overview .......................................... 6

Reporting off BW queries and Online Data Stores ............................ 7

Providing Single Sign On to SAP users .............................................. 8

Publishing from BW to Crystal Enterprise ......................................... 9

Distributing information over the Web ............................................. 9

Chapter 3: Installing Crystal EnterpriseSAP Edition

Installation overview ....................................................................... 12

Contents of the product CDs ............................................................................... 12

Installing on Windows .................................................................... 13

System requirements ........................................................................................... 13Recommended initial installation ........................................................................ 15

Installing the local SAP Gateway ......................................................................... 18


4/58

ii Crystal EnterpriseSAP Edition Installation Guide

Distributed installation ................................................................... 19

Separating Crystal Enterprise from your web server ............................................. 19

Distributing the BW Report Publisher installation ................................................ 20

Adding servers to Crystal Enterprise ..................................................................... 20Configuring BW for Crystal Enterprise ............................................ 20

Creating a user account for Crystal Enterprise ...................................................... 21

Setting the installation parameters ....................................................................... 22

Creating roles for designated content publishers and administrators .................... 25

Chapter 4: Integrating Crystal Enterprise with BW

Configuration overview .................................................................. 28

Connecting to SAP entitlement systems .......................................... 28

Importing SAP roles to Crystal Enterprise ....................................... 30

Setting up folders and security in Crystal Enterprise ....................... 31

Understanding the default folder security patterns ............................................... 31

Assigning publishing rights to content administrators ........................................... 33

Assigning system administration rights ................................................................. 35

Integrating with Secure Network Communication .......................... 36

Chapter 5: Working with Web Content

SAP ePortfolio ................................................................................. 40

Running translated reports on different server groups .......................................... 40

Chapter 6: Configuring the InfoSet driver

Installing and configuring the transport .......................................... 44

Setting up the transport .................................................................. 44Importing the transport file .................................................................................. 44

Creating and applying authorizations ............................................. 45

Authorizing users to make remote function calls ................................................. 45

Authorizing users to schedule reports .................................................................. 46


5/58

Crystal EnterpriseSAP Edition Installation Guide iii

Appendix A: Troubleshooting

Troubleshooting overview ............................................................... 48

Locating and generating log files ..................................................... 48

Troubleshooting Crystal Enterprise ................................................. 49

Troubleshooting your InfoSet driver installation ............................. 49

Reports, tables, and functions .............................................................................. 49

Errors when importing transport files ................................................................... 49

Errors when connecting to SAP ............................................................................ 49

Index .................................................................................51


6/58

iv Crystal EnterpriseSAP Edition Installation Guide


7/58

Crystal EnterpriseSAP Edition Installation Guide 1

Welcome to Crystal EnterpriseSAP Edition 1

This chapter briefly describes Crystal EnterpriseSAPEdition and outlines the contents and the intendedaudience of this guide.


8/58

What is Crystal EnterpriseSAP Edition?

2 Crystal EnterpriseSAP Edition Installation Guide

What is Crystal EnterpriseSAP Edition?Crystal EnterpriseSAP Edition provides you, the SAP user, with the ability toextract the business intelligence contained within SAP Business InformationWarehouse (BW). By generating Crystal reports from SAP BW queries, ABAPqueries, and InfoSets, you can organize, format, and share your SAP data. SAPePortfolio allows you to share your reports over the Web, and SAP Authenticationenables Single Sign On between your SAP system and Crystal Enterprise.

Who should use this guide?This guide leads administrators and users through the planning and installationstages of a Crystal EnterpriseSAP Edition implementation. Familiarity with youroperating system and your network environment is certainly beneficial, as is ageneral understanding of web server management.

A number of installation tasks require the skills and security privileges of an SAPBasis administrator. If you are not an SAP administrator, you will need to contactone for assistance during the installation.

For more information about using the product, consult theCrystal EnterpriseSAPEdition Users Guide(userguide.pdf), included in thesapdocs directory of eachproduct CD.

About this guideThis guide provides you with information and procedures for installing and

configuring the components included in Crystal EnterpriseSAP Edition.

Chapter contents

The following is a short description of each of the remaining chapters in this guide.

Chapter 2: Components and Architecture

This chapter introduces the various reporting components that make up CrystalEnterpriseSAP Edition. The chapter then provides information on the overallproduct architecture and describes each component in greater detail.

Chapter 3: Installing Crystal EnterpriseSAP Edition

This chapter shows how to install Crystal EnterpriseSAP Edition. Systemrequirements are provided, as well as procedures covering various installation andconfiguration tasks.


9/58

1 Welcome to Crystal Enterprise SAP Edition


Chapter 4: Integrating Crystal Enterprise with BW

This chapter shows how to configure Crystal Enterprise for your SAPenvironment. It includes procedures for setting up SAP Authentication, importingSAP users into Crystal Enterprise, and providing users with publishing and

system administration rights.


This chapter briefly describes SAP ePortfolio and the mini applications that areincluded in the Web Content feature of Crystal EnterpriseSAP Edition. It alsoshows how to add the mini applications to mySAP.com Workplace.


This chapter explains how to import the transport file andset up the authorizationsthat are required for the InfoSet driver.

Crystal Care technical supportYour standard SAP service agreement may include technical support. If yourequire assistance when integrating Crystal EnterpriseSAP Edition with yourSAP system, it is recommended that you first check your SAP service agreementand follow your usual SAP support procedures.

To find out about the Crystal Care technical support programs that are available:

Go to our support web site at:http://support.crystaldecisions.com/crystalcare/

Contact your regional office. For details, go to:http://www.crystaldecisions.com/contact/offices.asp

Crystal TrainingWhether youre a developer, information technology professional, or businessuser, we offer a wide range of Crystal EnterpriseSAP Edition training coursesdesigned to build or enhance your existing skills. Courses are available online, atcertified training centers, or at your own site:

For a complete list of training courses and special offers, visit:http://www.crystaldecisions.com/training/

Or contact your regional office. For details, go to:

http://www.crystaldecisions.com/offices/


10/58

Crystal Consulting


Crystal ConsultingOur global team of certified consultants and consulting partners can guide youthrough a corporate-wide solutionincluding strategy, design, integration anddeploymentfor the fastest results, maximum performance, and increasedproductivity.

To learn more, visit:http://www.crystaldecisions.com/consulting/

Or contact your regional office. For details, go to:http://www.crystaldecisions.com/offices/

Document conventionsThis guide uses the following conventions:

Commands and buttons

For easy recognition within procedures, User Interface (UI) features appear inbold type. For example: On the Filemenu, clickNew.

Keyboard shortcuts

Delete means the Delete key, or the Del key on your numeric keypad. Entermeans the Enter, Return, or CR key, depending on which of these keys appearson your keyboard.

Key combinations

CTRL+KEY, SHIFT+KEY, and ALT+KEY are examples of key combinations.Hold down the first key in the combination and, at the same time, press thesecond key in the combination (designated above as KEY). For example:CTRL+C means hold the Control key down and press the letter C on your

keyboard (CTRL+C is the Windows Copy command).

Key terms are italicized when first defined.

Monospaced font indicates data that you enter using your keyboard. Forexample: In the Formula Editor, typeIf Sales > 1000 Then crRed

Monospaced, italicized font indicates variable data that you must replace withdata appropriate to your current settings, environment, or task. For example,in the following URL, you would replacewebserver:

http://webserver/crystal/enterprise/


11/58


Components and Architecture 2

This chapter introduces the various reporting componentsthat make up Crystal EnterpriseSAP Edition. The chapterthen provides information on the overall productarchitecture and describes each component in greater detail.


12/58

Crystal EnterpriseSAP Edition overview


Crystal EnterpriseSAP Edition overviewCrystal EnterpriseSAP Edition provides you with powerful report-design toolsand a framework for managing, scheduling, and distributing your Crystal reportsover the Web. As such, it enables you to extract value from your SAP BusinessInformation Warehouse (BW) data and share it with users across the enterprise.

Crystal Enterprise itself is a multi-tier system, and this edition integrates closelywith the framework to provide you with several reporting solutions. To activateand use all the SAP features, install and configure the following componentsaccording to the procedural information included in the rest of this guide:

Crystal ReportsSAP Edition

This customized version of the Crystal Reports report designer includes twodatabase drivers that are designed specifically for SAP data: the BW Querydriver and the InfoSet driver. The integrated SAP Tools toolbar facilitatestasks associated with reporting off BW queries.

New reports that you design with this version of Crystal Reports can be saved toyour Test and Development environment and published to Crystal Enterprise.

For details, seeReporting off BW queries and Online Data Stores on page 7.

SAP Authentication

This required component allows you to map your existing SAP roles and usersto Crystal Enterprise. It also enables Crystal Enterprise to authenticate usersagainst the SAP system, thereby providing Single Sign On to your SAP users.As a result, once SAP users are logged on to the SAP system, they arerecognized by Crystal Enterprise as authenticated users.

For details, seeProviding Single Sign On to SAP users on page 8.

BW Report Publisher

This required component allows you to publish reports individually or inbatches from BW to Crystal Enterprise. To make this feature operational, youmust install a local SAP Gateway along with Crystal EnterpriseSAP Edition.

For details, seePublishing from BW to Crystal Enterprise on page 9.

Data Access

This required component provides the Crystal Enterprise processing serverswith connectivity to your SAP data. It includes the two database drivers that areused by Crystal ReportsSAP Editionthe BW Query driver and the InfoSetdriverto allow the processing servers to run your reports properly.

For details, seeReporting off BW queries and Online Data Stores on page 7.

Web ContentThis optional component includes the SAP ePortfolio web desktop. SAPePortfolio allows users to organize and view your Crystal reports in multiplelanguages over the Web.

For details, seeDistributing information over the Web on page 9.


13/58

2 Components and Architecture


The following diagram illustrates how each of the Crystal EnterpriseSAP Editioncomponents expands upon the multi-tier framework of Crystal Enterprise.

Note:If you are new to Crystal Enterprise, see its documentation for a moredetailed explanation of the framework, its components, and the general tasks thateach component performs.

The remainder of this chapter describes the Crystal EnterpriseSAP Editioncomponents and their primary responsibilities in additional detail.

Reporting off BW queries and Online Data StoresCrystal ReportsSAP Edition provides connectivity to your SAP data through twodatabase driversthe BW Query driver and the InfoSet driver:

The BW Query driver is integrated directly within the CrystalReports interface: itincludes an SAP Tools toolbar that allows you to report off your BW queries

from within Crystal Reports. The toolbar also allows you to save reports to a Testand Development environment and publish them directly to Crystal Enterprise.

The InfoSet driver provides Crystal Reports with another means of accessingSAP data sources: this driver can access InfoSets (also known as FunctionalAreas), ABAP Queries, and Online Data Store (ODS) data. You access thisdriver through the Data Explorer in Crystal Reports.


14/58

Providing Single Sign On to SAP users


One advantage of these drivers is that they allow business users to report offpredefined views of your SAP data. Tables and fields are first logically grouped by anSAPcontent expert into queries,InfoSets, and so on.You then make these data sourcesaccessible to users who are designing reports with Crystal ReportsSAP Edition.

These same two drivers are also included in the add-ons for Crystal Enterprise (theData Access feature), so the Job Server and Page Server components cansuccessfully process reports designed with Crystal ReportsSAP Edition.

Note:Before you can design or process reports with the InfoSet driver, you mustinstall the Flat Data Access Functions transport file on the SAP system. For moreinformation, seeInstalling and configuring the transport on page 44.

For instruction on creating Crystal reports with these drivers, consult the CrystalEnterpriseSAP Edition Users Guide(userguide.pdf), included in thesapdocsdirectory of each product CD.

Providing Single Sign On to SAP usersSecurity plug-ins expand and customize the ways in which Crystal Enterpriseauthenticates users. The SAP Authentication feature includes an SAP securityplug-in (secSAPR3.dll) for the Automated Process Scheduler (APS) component ofCrystal Enterprise. This SAP security plug-in offers several key benefits:

It enables you to set up Single Sign On between Crystal Enterprise and SAP.Crystal Enterprise can then automatically and seamlessly recognize SAP userswho have already been authenticated by your SAP system.

It acts as anauthentication providerthat verifies user credentials against yourSAP system on behalf of the APS. When users log on to Crystal Enterprise

directly, they choose SAP Authentication and provide their usual SAP username and password.

It facilitates account creation by allowing you to map roles from SAP to CrystalEnterprise, and it facilitates account management by allowing you to assignrights to users and groups in a consistent manner within Crystal Enterprise.

It dynamically maintains SAP role listings. So, once you map an SAP role toCrystal Enterprise, all users who belong to that role can log on to CrystalEnterprise. When you make subsequent changes to the SAP role membership,you need not update or refresh the listing in Crystal Enterprise.

The SAP Authentication component includesa web application for configuring theplug-in and its Single Sign On functionality. This application is displayed as an

additional tab within the Crystal Management Console (CMC). After installing theSAP Authentication component, seeIntegrating Crystal Enterprise with BW onpage 27.


15/58

2 Components and Architecture


Publishing from BW to Crystal EnterpriseThe BW ReportPublisher allowsyouto publishCrystalreports (.rpt files) individuallyor in batches from BW to Crystal Enterprise. To make this feature operational, youmust install a local SAP Gateway along with Crystal EnterpriseSAP Edition.

Reports are published from BW to Crystal Enterprise in several ways: users whodesign reports with Crystal ReportsSAP Edition can simultaneously save reportsto their roles in BW and publish them to Crystal Enterprise; users with theappropriate rights within SAP and Crystal Enterprise can also publish reportsindividually or in batches by executing BWsRSCR_ADMIN_REPORTS program.

In either case, when a user attempts to publish one or more Crystal reports, BWlooks for an RFC destination (of type TCP/IP) that is defined on the system withthe nameCRYSTAL_PUBLISHER. This TCP/IP destination provides BW with thelocation of a machine where you have installed a local SAP Gateway and the BWReport Publisher.

BW then communicates over TCP/IP with the specified SAP Gateway service, andsends the following information across the network:

A logon ticket representing the users SAP credentials.

The appropriate Crystal report file(s), with any required translated report strings.

Tip: For more on translated reports, seethe Crystal EnterpriseSAP Edition UsersGuide(userguide.pdf), included in thesapdocs directory of each product CD.

A publishing command.

The name of the appropriate Crystal Enterprise APS.

The SAP Gateway responds by executing the publishing command, therebyinvoking the BW ReportPublisher. The BW Report Publisher logs on to the specified

APS with the users logon ticket. The APS then verifies the authenticity of the logonticket and checks that the user has permission to publishreports to the system. If theusers rights are sufficient, the APS allows the reports to be added to the system.

Distributing information over the WebThe Web Content feature includes a web desktop called SAP ePortfolio, which is acustomized edition of the standard Crystal Enterprise web desktop. These newfeatures are designed especially for SAP users:

Users whose roles you import can log on to SAP ePortfolio with their usualSAP credentials.

Users can browse a hierarchy of My Roles folders that correspond to thestructure of the imported roles whose content you publish from BW to CrystalEnterprise. In these folders, users can locate, view, and refresh Crystal reportsthat have been saved in their BW roles.


16/58

Distributing information over the Web


Users can schedule translated reports in specific languages and view reporttitles and on-demand reports in their usual logon language.

Note:These features require that you translate the reports within BW, beforeyou publish the reports to Crystal Enterprise. For more information, see theCrystal EnterpriseSAP Edition Users Guide (userguide.pdf), included in thesapdocs directory of each product CD.

Administrators can divide report processing by language across servergroups. This ensures that reports created or translated in a specific languageare always processed by servers that can handle data in that language.

After installing the Web Content, seeWorking with Web Content on page 39.


17/58


Installing Crystal EnterpriseSAP Edition 3

This chapter shows how to install Crystal EnterpriseSAPEdition. System requirements are provided, as well asprocedures covering various installation and configurationtasks.


18/58

Installation overview


Installation overviewTo set up Crystal EnterpriseSAP Edition, you must first complete the maininstallation and configuration stages in this order:

Check the system requirements and perform the installation procedures thatcorrespond to your operating environment.

SeeInstalling on Windows on page 13.

Complete the required administrative tasks within BW to integrate your newCrystal Enterprise system.

SeeConfiguring BW for Crystal Enterprise on page 20.

Provide Crystal Enterprise with information about your BW system. Fordetails, seeChapter 4: Integrating Crystal Enterprise with BW.

A number of installation tasks require the skills and security privileges of an SAPBasis administrator. If you are not an SAP administrator, you will need to contactone for assistance during the installation.

Once you have completed the main installation and configuration stages, you mayneed to complete some additional configuration within Crystal Enterprise and/orBW. The tasks that you perform depend upon the features that you want to enable.For details, consult the remaining chapters of this guide:



Tip:If you are evaluating the product or installing it for the first time, it isrecommended that you install Crystal Reports and its add-ons on a desktopmachine, and then install Crystal Enterprise and its add-ons on a web servermachine. For details, seeRecommended initial installation on page 15.

Contents of the product CDs

Crystal EnterpriseSAP Edition includes two major productsCrystal Enterpriseand Crystal Reportseach with its own set of add-ons. These components areprovided on four installation CDs:

Crystal ReportsSAP Edition Disc 1

This CD contains the installation program and documentation for CrystalReports Professional. Crystal Reports is the report-design tool that allows youto create reports off virtually any data source and save those reports directly toCrystal Enterprise.

Crystal ReportsSAP Edition Add-Ons Disc 2This CD contains the installation program for the Crystal Reports add-oncomponents. These components include database drivers designed specificallyfor reporting off BW queries, InfoSets, and other Online Data Stores (ODS). Inaddition, the add-ons include a toolbar that allows you to work with BWqueries and open and save Crystal reports in BW.


19/58

3 Installing Crystal EnterpriseSAP Edition


Crystal EnterpriseSAP Edition Disc 1

This CD contains the installation program and documentation for CrystalEnterprise Professional. Crystal Enterprise is the server-based system thatmanages, schedules, and renders Crystal reports for viewing over the Web.

Crystal EnterpriseSAP Edition Add-Ons Disc 2This CD contains the installation program for the Crystal Enterprise add-oncomponents. These components allow you to integrate Crystal Enterprise withSAP BW, and they provide functionality such as Single Sign On betweenCrystal Enterprise and SAP and role synchronization. This CD also contains theBW Report Publisher and the Web Content, including SAP ePortfolio.

Installing on WindowsAll Crystal EnterpriseSAP Edition components are supported for use onWindows operating systems: Crystal Enterprise and its add-ons are supported for

use on Windows NT/2000; Crystal Reports and its add-ons are supported for useon Windows 98SE/ME/NT/2000.

When installing Crystal EnterpriseSAP Edition on Windows, consider the following:

It is recommended that you install Crystal Reports and its add-ons on adesktop machine, and then install Crystal Enterprise and its add-ons on a webserver machine.

For details, seeRecommended initial installation on page 15.

You can install Crystal Enterprise, Crystal Reports, and the correspondingadd-ons on a single Windows machine.

You can expand your deployment by distributing the Crystal Enterpriseservers across multiple machines.

For details, seeDistributed installation on page 19.

You must install and configure a local SAP Gateway in order to connect BW toCrystal Enterprise. You must install the SAP Gateway on the same machine asthe BW Report Publisher component of Crystal EnterpriseSAP Edition.

For details, seeInstalling the local SAP Gateway on page 18.

If you need additional information about installing Crystal Enterprise or CrystalReports, locate theInstallation Guide(install.pdf) on the corresponding Disc 1.

Note:Prior to installing any components, be sure that your system meets thecorresponding system requirements.

System requirements

For a distributed installation, ensure that each machine meets the requirementsthat correspond to the components you are installing. For a stand-aloneinstallation, ensure that all requirements are met on a single machine runningWindows NT4 Server SP6a or Windows 2000 Service Pack 2.


20/58

Installing on Windows


SAP Presentation CD requirements

Crystal EnterpriseSAP Edition uses the SAPGUI and the SAP Gateway from theSAP Presentation CD. For version and patch-level requirements, see thereadme.txt file in thesapdocsdirectory of each product CD.

Server requirements for Crystal Enterprise

Supported web server software (Microsoft Internet Information Services, iPlanetWeb Server Enterprise Edition, or Lotus Domino) must be installed andconfigured correctly before you install Crystal Enterprise on Windows NT/2000.

The following entry must appear in the Services file on the Crystal Enterprisemachine (found in%windir%\system32\drivers\etc\):

SapmsSID portnumber/tcp

ReplaceSIDwith the system ID of your SAP system, and replaceportnumber withthe port number of the message server that Crystal Enterprise will log on to (for

example,SAPMSQR6 3600/tcp). Ensure also that a blank line follows the entry. Thisstandard setting allows Crystal Enterprise to log on to SAP with load balancing.

For a detailed list of tested environments, consult thePlatforms.txt file fromCrystal EnterpriseSAP Edition Disc 1. This file includes specific version andService Pack requirements for web servers, web browsers, databases, andoperating systems.

Server requirements for the SAP Gateway

For an up-to-date list of prerequisites, see the SAP document entitledSAP GatewayInstallation on Windows (Gateway.pdf), included in theDocu directory of your SAPPresentation CD.

These are the requirements listed by SAP at the time of this guides production:

The machine name must not exceed 13 characters in length.

The file system must be NTFS.

The operating system must be Windows 2000 Service Pack 2 or Windows NT4.0 Service Pack 6a. If you are running Windows NT 4.0, ensure that InternetExplorer 3.0+ and the Microsoft Management Console are also installed.

Client requirements for Crystal Reports

The SAPGUI along with the BW AddOn option must be installed from theSAP Presentation CD. For version and patch-level requirements, see the

readme.txt file in thesapdocs directory of each product CD. If Crystal Reports is already present on your machine, you must uninstall it

before installing Crystal ReportsSAP Edition.


21/58



For a detailed list of tested environments, consult thePlatforms.txt file fromCrystal ReportsSAP Edition Disc 1. This file includes specific version andService Pack requirements for installation, database connectivity, and so on.

BW requirements

Before you can enable Single Sign On between BW and Crystal Enterprise, youmust set up BW to accept and create logon tickets. This involves setting two relatedprofile parameters on your BW server:

login/accept_sso2_ticket

login/create_sso2_ticket

The parameter values that you set depend upon whether or not the serverscertificate is self-signed or signed by the SAP Certification Authority (CA). Forcomplete details on these profile parameters and configuring BW to accept andcreate logon tickets, see the SAP Library > SAP Web Application Server > Security >SAP Web Application Server Security > User Authentication > Using Logon Tickets.

Note:You must re-start the BW system to activate your changes.

Recommended initial installation

The procedures in this section guide you through the installation CDs in order.

On a desktop machine, you will set up Crystal ReportsSAP Edition by installingcomponents from these CDs:

Crystal ReportsSAP Edition Disc 1

Crystal ReportsSAP Edition, Add On Disc 2

On a machine that is running a supported web server, you will set up CrystalEnterpriseSAP Edition by installing components from these CDs:

Crystal EnterpriseSAP Edition Disc 1

Crystal EnterpriseSAP Edition, Add On Disc 2

Before you begin the installation, however, you must have valid product keycodes.If you dont yet have your keycodes, follow the steps below to register and obtainkeycodes online.

Note:

Before beginning this installation, ensure that each machine meets theminimum requirements. SeeSystem requirements on page 13.

Log on as an Administrator of the local machine to install any components.


22/58



To register and obtain keycodes online

1 On the desktop machine that you will use when designing reports, insertCrystal ReportsSAP Edition Disc 1.

If AutoPlay is enabled on your system, the Crystal EnterpriseSAP Edition

page appears in your web browser. If AutoPlay is disabled, open thestarterfolder and double-clickrunhtml.exe.

2 ClickCrystal ReportsSAP Edition.

3 Click theregistering with Crystal Decisionslink to access the onlineregistration web site.

4 Follow the instructions on your screen to obtain your product keycodes.

The Setup programs prompt you for specific keycodes when you complete theremaining installation procedures.

To install Crystal ReportsSAP Edition

1 Insert Crystal ReportsSAP Edition Disc 1.

If AutoPlay is enabled on your system, the Crystal EnterpriseSAP Editionpage appears in your web browser. Follow the instructions on your screen tostart the Disc 1 setup program.

Note:If AutoPlay is disabled, or if you are accessing the files from a networkdrive, double-clicksetup.exe on the root directory of the CD.

2 Proceed through the Setup programs dialog boxes and follow the instructionsdisplayed on your screen until you reach the Select Installation Type dialog box.

3 ClickTypical; then clickNext.

4 In the Start Installation dialog box, clickNext.The installation of files begins immediately. When the installation program hasfinished copying files, the Registration Wizard appears.

5 ClickRegister Laterto skip the standard registration steps; then clickFinish.

6 Insert Crystal ReportsSAP Edition Disc 2 and double-clickcrsap.exe.

7 Proceed through the Setup programs dialog boxes and follow the instructionsdisplayed on your screen.

When the installation program has finished copying files, the final setup screenappears.

8 ClickFinish.


23/58



To install Crystal EnterpriseSAP Edition

1 On the web server machine that you have set aside for use with CrystalEnterprise, insert Crystal EnterpriseSAP Edition Disc 1.

If AutoPlay is enabled on your system, the Crystal EnterpriseSAP Edition

page appears in your web browser. Follow the instructions on your screen tostart the Disc 1 setup program.

Note:If AutoPlay is disabled, or if you are accessing the files from a networkdrive, double-clicksetup.exe on the root directory of the CD.

2 Proceed through the Setup programs dialog boxes and follow the instructionsdisplayed on your screen until you reach the Installation Type dialog box.

3 ClickNew; then clickNext.

4 In the Start Installation dialog box, clickNext.

The installation of files begins immediately. When the installation program hasfinished copying files, the Registration Wizard appears.

5 ClickRegister Laterto skip the standard registration steps.6 ClearLaunch Crystal Publishing Wizard; then clickFinish.

7 Insert Crystal EnterpriseSAP Edition Disc 2 and double-clickcesap.exe.

8 Proceed through the Setup programs dialog boxes and follow the instructionsdisplayed on your screen until you reach the Select Features dialog box.

9 Ensure that all of the features are selected; then clickNext.

10In the APS Logon Info dialog box, type the following information:

APS Name

Change this entry if you installed the Crystal Enterprise AutomatedProcess Scheduler (APS) component on a different machine.

User NameTypeAdministrator to log on with this default Crystal Enterprise account.

Password

By default, the Administrator account has no password. Leave this fieldempty if you have not created a password for the Administrator account.

AuthenticationSelect Enterprise Authentication.

Note:If you chose not to install the SAP Authentication feature, the APSLogon Info screen does not appear.

11ClickNext.

12In the Ready to Install the Application dialog box, clickNext.The installation of files begins immediately. When the installation program hasfinished copying files, the final setup screen appears.

13ClickFinish.

Note:You must now install a local SAP Gateway on this machine. For details,seeInstalling the local SAP Gateway on page 18.


24/58



Installing the local SAP Gateway

A local SAP Gateway must be installedon the machine whereyou installed the BWReport Publisher. It is recommended that an SAP Basis administrator perform thisinstallation. For up-to-date instructions on installing a local SAP Gateway, see the

SAP document entitledSAP Gateway Installation on Windows (Gateway.pdf),included in theDocu directory of your SAP Presentation CD.

This section provides complementary instructions, including additional steps thatare required when you install an SAP Gateway for use with Crystal Enterprise.

To install a local SAP Gateway

1 Log on as an Administrator of the local machine.

2 Install theGWSETUP program according to the instructions in the SAP documententitled SAP Gateway Installation on Windows (Gateway.pdf).

Note:You will be prompted for an SAP System ID (SID). The value that you

type is used as the ID for the SAP Gateway instance. These steps useGAT as thesystem ID, but you can use a different value if necessary.

3 Run the newly installedGWSETUPprogram and perform a local installation of anSAP Gateway according to the instructions in the SAP document entitledSAPGateway Installation on Windows (Gateway.pdf).

Note:

When prompted for your SAP System ID (SID), typeGAT

During the installation, you will set the password for two new WindowsNT user accounts that are created on the local machine: the SAP systemadministrator account (adm) and the SAP service account

(SAPService). Be sure to make note of the passwords you create. If prompted with LDAP Support options, select No LDAP Support.

4 When the SAP Gateway installation has finished, ensure that the WindowsTMPsystem environment variable is set to the same value as the WindowsTEMPsystem environment variable.

For details on changing environment variables, consult your Windows help.

5 Log off of the local machine, and log back on under the local SAP systemadministrator account. (The user name isgatadm, and the password is the valueyou provided during the SAP Gateway installation.)

6 Usingregedit, verify theTMPandTEMP registry entries under the

HKEY_CURRENT_USER\Environment subkey.Both registry entries should hold the same string value, which must be a validabsolute directory path. If either entrys value contains the%USERPROFILE%variable, replace it with an absolute directory path. Typically, both registryentries are set toC:\WINNT\TEMP


25/58



Distributed installationThe Crystal Enterprise architecture is scalable in that it allowsfor a multitudeof serverconfigurations, ranging from stand-alone, single-machine environments, to large-scale deployments supporting global organizations. The flexibility offered by theproducts architecture allows you to set up a system that suits your current reportingrequirements, without limiting the possibilities for future growth and expansion.

Note:This section provides details that are specific to Crystal EnterpriseSAPEdition. For general information about distributing the Crystal Enterprisecomponents, see the Scaling Your System section of the Crystal EnterpriseAdministrators Guide(admin.pdf in thedoc directory of Crystal EnterpriseSAPEdition Disc 1).

Separating Crystal Enterprise from your web server

The first step in distributing the Crystal EnterpriseSAP Edition components is toseparate Crystal Enterprise from your web server:

1 On a dedicated web server machine, install and configure the Web Connectorcomponent of Crystal Enterprise.

The procedures for installing and configuring the Web Connector are differentdepending upon your web server software and the operating system on whichit is running. For details on installing and configuring Web Connectors, see theCrystal Enterprise Installation Guide(install.pdf in thedocdirectory of CrystalEnterpriseSAP Edition Disc 1).

2 On the same machine, install the Web Content feature from CrystalEnterpriseSAP Edition Disc 2.

Note:If you have connected the Windows edition of Crystal Enterprise to aweb server that is running on UNIX, you must run thecesap_webcontent.shscript to install the Web Content files on your web server. This script isprovided in theunix directory of Crystal EnterpriseSAP Edition Disc 2.

3 On a dedicated server machine, install and configure Crystal Enterprise.

4 On the same machine, install all features from Crystal EnterpriseSAP EditionDisc 2, and install a local SAP Gateway.

5 On a desktop machine, install Crystal ReportsSAP Edition Disc 1 and Disc 2.

On this machine, you may also want to install the Crystal ConfigurationManager (from Crystal EnterpriseSAP Edition Disc 1), which allows you toremotely administer Crystal Enterprise servers that are running on Windows.

Further customization of your system will depend largely on your reportingrequirements. For details, see theCrystal Enterprise Administrators Guide.


26/58

Configuring BW for Crystal Enterprise


Distributing the BW Report Publisher installation

You can separate the BW Report Publisher from the other Crystal Enterprisecomponents; however, you must install a local SAP Gateway on the same machineas the BW Report Publisher. In addition, the BW Report Publisher requires access

to the Crystal Enterprise Software Development Kit (SDK). Thus, if you install theBW Report Publisher and the local SAP Gateway on a dedicated machine, youmust also perform a minimal installation of Crystal Enterprise. Installing any of theCrystal Enterprise client tools, such as the Crystal Publishing Wizard, is sufficientfor installing the SDK.

Adding servers to Crystal Enterprise

If your Crystal Enterprise implementation is distributed across multiple machines,follow these guidelines when installing features from Crystal EnterpriseSAPEdition Disc 2:

Install the Data Access feature on each Job Server and Page Server. Install the Web Content feature on each web server that is connected to Crystal

Enterprise with a Web Connector. Also install this feature on each WebComponentServer (WCS) that is running on a machine other than your web server.

Note:If you have connected the Windows edition of Crystal Enterprise to aweb server that is running on UNIX, you must run thecesap_webcontent.shscript to install the Web Content files on your web server. This script isprovided in theunixdirectory of Crystal EnterpriseSAP Edition Disc 2.

Install the SAP Authentication feature on one APS. If you have clusteredmultiple APS machines, the SAP Authentication components areautomatically propagated to the other cluster members.

Configuring BW for Crystal EnterpriseOnce you have installed Crystal EnterpriseSAP Edition, you must configure BW tointegrate the two systems. This required configuration includes the following tasks:

Creating a user account for Crystal Enterprise

Setting the installation parameters

In addition, you may need to assess your current role structure in SAP, to ensurethat you can quickly grant publishing and/or administration rights to particularusers within Crystal Enterprise. For details, seeCreating roles for designated

content publishers and administrators on page 25.


27/58



Creating a user account for Crystal Enterprise

The Crystal Enterprise system requires an SAP user account that is authorized toaccess SAP role membership lists, authenticate SAP users, and so on. You will needthis user name and its password when you connect Crystal Enterprise to your BW

system (seeIntegrating Crystal Enterprise with BW on page 27). For generalinstruction on creating SAP user accounts and assigning authorizations throughroles, see your SAP documentation.

Use transactionSU01 to create a new SAP user account namedCRYSTAL. Usetransaction PFCG to create a new role named CRYSTAL_ENTITLEMENT. (These names arerecommended but not required.) Change the new roles authorization data bysetting these values for the following authorization objects:

Finally, add theCRYSTAL user to theCRYSTAL_ENTITLEMENT role.

Tip:If your system policies require users to change their passwords when they first

log on to the system, log on now with the CRYSTALuser account and reset its password.

Authorization object Field Value

Authorization for file access

(S_DATASET)

Activity (ACTVT) Read, Write (33, 34)

Physical file name(FILENAME)

*

ABAP program name(PROGRAM)

*

Authorization Check for RFCAccess (S_RFC)

Activity (ACTVT) 16

Name of RFC to beprotected (RFC_NAME)

BDCH, STPA, SUSO, SUUS,SU_USER, SYST, SUNI

Type of RFC object to beprotected (RFC_TYPE)

Function group (FUGR)

User Master Maintenance:User Groups (S_USER_GRP)

Activity (ACTVT) Change, Display (02, 03)

User group in usermaster maintenance(CLASS)

*

Note: For greater security, you mayprefer to explicitly list the usergroups whose members requireaccess to Crystal Enterprise.


28/58



Setting the installation parameters

BW includes an ABAP program that is designed to assist you in setting andchecking the Crystal Enterprise installation parameters. This section shows how touse this program (RSCR_CHECK_INSTALLATION_PARAMS) to provide BW with the

information it needs about your Crystal Enterprise installation.

The process of setting the installation parameters consists of completing threechecksone check for each of the three groups of installation parameters:

The URL Parameter Check provides BW with information about the webserver that is connected to Crystal Enterprise. So, when an SAP user opens aCrystal report from within the SAPGUI or an SAP Portal, BW is able to routethe viewing request over the Web appropriately.

The Publish Settings Check ensures that reports published from BW to CrystalEnterprise are associated with the appropriate data source. These settingsinclude the Logon Group that provides users with data access privileges.

The RFC Connection Test aids you in creating a Remote Function Call (RFC)destination within BW, so you can publish reports from BW to CrystalEnterprise. This RFC destination must use the TCP/IP connection type, and itmust be namedCRYSTAL_PUBLISHER.

Note:To set the installation parameters, follow these procedures in order. Formore information, consult your BW documentation.

To start the configuration program

1 Execute transactionSE38 to access the ABAP Editor.

2 In theProgram field, typeRSCR_CHECK_INSTALLATION_PARAMSand clickExecute.

This program is provided with BW to assist you in connecting BW to CrystalEnterprise. When you execute the program, the Check Crystal EnterpriseInstallation Parameters screen appears.

3 In theChecktypecolumn, ensure thatChecksis expanded, so you can viewthe three subfolders: URL Parameter Check, Publish Settings Check, and RFCconnection test.

Note:Return codes of zero indicate success.

To set the URL parameters

1 Select theURL Parameter Checkfolder; then clickMaintain.

The Variable Replacement CR table appears.


29/58



2 Complete the table with the appropriate field values, so your BW system isable to locate and send information over the Web to Crystal Enterprise:

3 Save your changes and return to theRSCR_CHECK_INSTALLATION_PARAMS program.

To set the publishing settings

1 Select thePublish Settings Checkfolder; then click Maintain.

The Parameter for Publishing on Crystal Enterprise table appears.2 Complete the table with the appropriate field values:

Field Value

APS Name Type the name of the machine that is running your Crystal Enterprise APS. If youconfigured your APS to listen on a port other than the default, typeAPSNAME:PORT

Path Prefix If you followed a default installation of Crystal Enterprise, type:

crystal/enterprise/sapbw

This path prefix is essentially the virtual path that your web server uses whenreferring to thesapbw subfolder of your Crystal Enterprise web content. Providean alternate value only if you have customized your web environment and thelocation of the Crystal Enterprise web content files.

Note:Do not include a forward slash at the beginning or at the end of this entry.

Protocol Typehttp (unless the web server that is connected to Crystal Enterprise is

configured to usehttps).Web Server Type the fully qualified domain name or IP address of the web server where you

installed the Web Connector component of Crystal Enterprise. For example:ceserver01.crystaldecisions.com

APS Cluster Provide this value only if you have set up an APS cluster. Prefix the name of theAPS cluster with the@ symbol, as in@CLUSTERNAME

Field Value

Logon Group Type the name of the logon group that must verify users credentialswhen they schedule reports or refresh them against the SAP system.

Tip:If you havent set up logon groups in SAP, the default SPACE orPUBLIC groups may be available.

Application Server Type the name of your application server. This server will be set as thedata source of reports that are published from BW to Crystal Enterprise.

System Number Type the appropriate System Number.

Trace Level (on: X) This optional value determines the amount of information that islogged by the SAP system.


30/58



To create the required RFC destination (TCP/IP connection)

1 Select theRFC connection testfolder and clickMaintain.

This executes transactionSM59 which allows you to display and maintain RFCdestinations. Here you will create a TCP/IP connection namedCRYSTAL_PUBLISHER.

2 ClickCreateand provide the values described in the following table.

Tip:You cannot view all of these fields until you provide the Connection type.

3 After saving your settings, clickTest connection.

Note:

The publishing process will not work until the destination is working successfully.

If you plan to enforce Secure Network Communication (SNC) between BWand Crystal Enterprise, you must provide your SNC options on the Logon/

Security tab for theCRYSTAL_PUBLISHER destination. For details about SNC, seeIntegrating with Secure Network Communication on page 36.

For more information on RFC destinations and TCP/IP connection types, consultyour SAP documentation.

Router String toReach the BW Systemfrom CE

Provide this value only if an SAP Router separates your applicationserver from Crystal Enterprise. In such cases, a router string allows foreffective communication across your network. Consult your SAP

documentation for more information.

Field Value

Field Value

RFC destination TypeCRYSTAL_PUBLISHER

Connection type TypeT (for TCP/IP connection).

Activation Type Select Start on Explicit Host.

Program Type the absolute path to the BW Report Publisher program (bwcepub.exe). Ifyou installed it in the default directory on Windows, the value is:c:\progra~1\crysta~1\shared\bwcepub.exe

Tip:Use the MS-DOS short path name, as shown here.

Target host Type the fully qualified domain name or IP address of the machine whereyou installed the BW Report Publisher. For example:ceserver01.privatedomain.com

Gateway host Type the name of the machine where you installed the SAP Gateway. Thisshould be the same machine as the Target host. For example:ceserver01

Gateway service Typesapgw##, where##represents the instance number of your SAP Gateway.Typically, the instance number is00, and the value for this field issapgw00


31/58



Creating roles for designated content publishers and administrators

When you are configuring BW for integration with Crystal Enterprise, assesswhether or not your current role structure allows youto quickly designate particularSAP users as Crystal Enterprise content or system administrators. This section

suggests some additional roles that you might want to create, if your current rolestructure is insufficient. For details on creating roles, see your SAP documentation.

For example, you might want to allow a subset of your SAP users to act as contentadministratorsusers who publish batches of reports on behalf of a number ofSAP roles. Instead of adding the SAP content administrators to every role, create anew role with a name such asCE_CONTENT_ADMINISTRATORS, and add each contentadministrator to the role.

Further, you might also want to provide a smallnumber of SAPusers with full systemadministration rights to CrystalEnterprise. Again,create a new role with a name suchasCE_SYSTEM_ADMINISTRATORS, and add each designated administrator to the role.

To modify the rights that these new roles (or any of your existing roles) are grantedin Crystal Enterprise, you must first set up SAP Authentication and import theroles. You can then modify the rights of each imported role through the CrystalManagement Console. For complete details, seeIntegrating Crystal Enterprisewith BW on page 27.


32/58




33/58


Integrating Crystal Enterprise with BW 4

This chapter shows how to configure Crystal Enterprise foryour SAP environment. It includes procedures for settingup SAP Authentication, importing SAP users into CrystalEnterprise, and providing users with publishing andsystem administration rights.


34/58

Configuration overview


Configuration overviewAfter installing SAP Authentication, you must provide Crystal Enterprise withinformation about your BW system. Crystal EnterpriseSAP Edition installs a webapplication that aids you in providing the required information. This webapplication is accessible through the main Crystal Enterprise administration tool,the Crystal Management Console (CMC).

Use the CMC to complete all the tasks in this chapter:

Connecting to SAP entitlement systems

Importing SAP roles to Crystal Enterprise

Setting up folders and security in Crystal Enterprise

Integrating with Secure Network Communication

To log on to the CMC

1 Go to the following page:

http://webserver/crystal/enterprise/admin/

Replacewebserverwith the name of the web server machine that has the WebConnector component installed. If you changed thisdefault virtual directory onthe web server, you will need to type your URL accordingly.

2 When the Log On page appears, selectEnterprisein theAuthentication Typelist.

Windows NT, LDAP, and SAP authentication also appear in the list; however,you must map your third-party user accounts and groups to Crystal Enterprisebefore you can use these types of authentication.

3 Type your

User Nameand

Password.

For this example, typeAdministrator as the User Name. This default Enterpriseaccount does not have a password until you create one.

4 ClickLog On.

The CMC Home page appears. For an introduction to the CMC, click Help toopen theCrystal Enterprise Administrators Guide; then see the AdministeringCrystal Enterprise section.

Connecting to SAP entitlement systems

Before you can import roles or publish BW content to Crystal Enterprise, you mustprovide information about the SAP entitlement systems that you want to integratewith Crystal Enterprise. Crystal Enterprise uses this information to connect to SAPwhen determining role memberships and authenticating SAP users.


35/58

4 Integrating Crystal Enterprise with BW


To add an SAP entitlement system to Crystal Enterprise

1 Go to theAuthorizationmanagement area of the CMC.

2 Click theSAP Authenticationtab.

The Entitlement systems tab appears.

Tip:If an entitlement system is already displayed in the Logical system name

list, clickNew.3 In theSystemfield, type the three-character System ID (SID) of your SAP system.

4 In theClientfield, type the client number (800, 400, 003, and so on) thatCrystal Enterprise must use when it logs on to BW.

Tip: When you finish these steps, Crystal Enterprise combines your System andClient information and adds an entry to the Logical system name list.

5 If you have set up load balancing such that Crystal Enterprise must log onthrough a message server, complete theMessage serverandLogon groupfields as appropriate.

6 If you have not set up load balancing (or if you prefer to have CrystalEnterprise log on directly to the SAP system), complete theApplication serverandSystem numberfields as appropriate.


36/58

Importing SAP roles to Crystal Enterprise


7 Type theUsername,Password, andLanguagefor the SAP account that youwant Crystal Enterprise to use when it logs on to SAP.

Note:These credentials must correspond to the user account that you createdfor Crystal Enterprise. For details, seeCreating a user account for Crystal

Enterprise on page 21.8 ClickUpdate.

Tip:If you add multiple entitlement systems, click the Options tab to specifythe system that Crystal Enterprise should use as the default.

Importing SAP roles to Crystal EnterpriseBy importing SAP roles into Crystal Enterprise, you allow role members to log onto Crystal Enterprise with their usual SAP credentials. In addition, you enableSingle Sign On, so SAP users can be logged on to Crystal Enterprise automaticallywhen they access reports from within the SAPGUI or an SAP Portal.

When you complete these steps, Crystal Enterprise automatically creates onegroup for each SAP role that you import. Each generated group is named with thefollowing convention: SystemID~ClientNumber@NameOfRole. You can subsequentlyuse these groups to define object security within Crystal Enterprise. For details, seeSetting up folders and security in Crystal Enterprise on page 31.

To import a role to Crystal Enterprise



3 On theRole importtab, select the appropriate entitlement system from theLogical system namelist.

Note:If this list is empty, seeConnecting to SAP entitlement systems onpage 28.

4 In theAvailable rolesarea, select the role(s) that you want to import; thenclickAdd.

5 ClickUpdate.

Crystal Enterprise generates a group for each role that you import. Each group isnamed with the following convention:SystemID~ClientNumber@NameOfRole. Youcan use these groups in Crystal Enterprise to set object rights on folders and

reports. You can view the new groups in the Groups management area of the CMC.Tip: CrystalEnterprise dynamically creates new user accounts when role membersfirst log on successfully to Crystal Enterprise with valid SAP credentials. You canview the new groups in the Users management area of the CMC.


37/58



Setting up folders and security in Crystal EnterpriseWhen you install Crystal EnterpriseSAP Edition, the setup program creates afolder named SAP (and a subfolder named 1.0) at the top level of the CrystalEnterprise folders. The top-level SAP folder is created with default securitysettings: the Administrators group is granted Full Control, and the Everyonegroup is granted No Access.

These SAP folders form the basis for the hierarchy of roles, folders, and reports thatyou publish to Crystal Enterprise from within BW. That is, all content that youpublish from BW is organized automatically below the SAP folder hierarchy inCrystal Enterprise. The sections that follow provide details about the creation ofthese SAP folders, and show how to modify the initial security levels to meet youradministrative requirements.

Understanding the default folder security patterns

Before making initial security settings, consider how Crystal Enterprise treatscontent that you publish from BW: Crystal Enterprise organizes your Crystalreports in folders named according to the System ID, the Client number, and thename of the role.

The diagram that follows shows how Crystal Enterprise organizes content whenyou publish two roles from one BW system:

The top-level folders are created during the installation. The 1.0 refers to theproduct version. (Labeled A in the diagram.)

The system and client folders (and) are created, as necessary,when a role is published from BW. (B)

Note:If you are not publishing content at this time, and you want to allow aparticular group of users to publish content from one or more BW systems,create the appropriate system and client folders manually. Then grant theappropriate users permission to publish reports. For details, seeAssigningpublishing rights to content administrators on page 33.

The Files folder stores all report objects that are published from this systemand client. (C)

Security is set on each report object, so users can view only the reports thatbelong to their roles. (D)


38/58



The Roles folder and its subfolders provide an alternate way of browsing thepublished reports. Each subfolder contains shortcuts to the actual reportobjects that are stored in the Files folder. (E)

By default, each newly created folder or report inherits security settings from itsparent folder. So, if you publish content to Crystal Enterprise immediately, all of theobjects inherit default security rights from the 1.0 folder (which in turn inherits theinstalled default settings from the SAP folder). Alternatively, you can create several

system folders and client subfolders manually, before publishing content to CrystalEnterprise. In this scenario, all subsequentlypublished contentinherits security rightsfrom the appropriate client folder that you created. This is useful when differentgroups of SAP users are responsible for publishing content for different roles. Fordetails, seeAssigning publishing rights to content administrators on page 33.

Once you publish a roles content to Crystal Enterprise, the corresponding CrystalEnterprise group (namedSystemID~ClientNumber@NameOfRole) is used to grantadditional rights to role members:

Role members are granted Full Control to each report object that is published fromthe role. Users can thus view, schedule, modify, and remove their own reports.

Role members are explicitly granted the following Advanced rights to the Files

and Roles folders: Add objects to the folder View objects Edit objects that the user owns Modify the rights users have to objects that the user owns


39/58



In addition to these default rights, you may want to grant additional rights to SAPusers who will be responsible for administering content in Crystal Enterprise orthe system itself.

Assigning publishing rights to content administratorsThe role membership of SAP users determines their ability to publish reports fromBW to Crystal Enterprise. That is, SAP users can publish reports from the role(s) towhich they belong into the Crystal Enterprise folders that correspond to thoseimported role(s). By default, however, SAP users cannot publish reports to CrystalEnterprise from roles to which they do not belong.

If you have a number of SAP users who are typically designated as contentcreators or content administrators within your organization, you may want togrant them permission to publish reports to many (or all) of the SAP folders withinCrystal Enterprise. To accomplish this, you must first create a dedicated role withinSAP, addthe appropriate usersto the role, and import the role to Crystal Enterprise.For details on creating the role, see your SAP documentation. For details onimporting the role, seeImporting SAP roles to Crystal Enterprise on page 30.

The folder on which you modify the security settings depends upon yourrequirements and the number of systems you have connected to Crystal Enterprise:

If your content administrators are responsible for all SAP content on CrystalEnterprise, you can make your settings on the top-level SAP folder.

If your content administrators are divided into several rolesfor instance, onerole for each system or clientthen you can make your settings on thecorresponding system or client folder in Crystal Enterprise. If the system andclient folders do not yet exist in Crystal Enterprise (because you havent yet

published any content from BW), create them yourself in the Foldersmanagement area of the CMC.

This diagram demonstrates a scenario where there are three groups of SAP userswho are allowed to publish content for different roles:

The default settings on the top-level SAP folder remain intact: members of theAdministrators group have Full Control, and members of the Everyone grouphave No Access (until rights are later granted through role membership).

Members of AdminRoleA are explicitly granted Advanced rights to publishreports from any role on any system.

Members of AdminRoleB and AdminRoleC are explicitly granted Advancedrights to publish reports from the BW system whose SID is QR6. However,

AdminRoleB is limited to publishing reports from roles in client 800, andAdminRoleC is limited to roles in client 003.

The default rights on these files and folders allow users from Role1 and Role2 toview, edit, add, and modify reports in accordance with their role membership.


40/58



Members of AdminRoleD are explicitly granted Advanced rights to publishreports from all roles in the system whose SID is DMB.

To assign publishing rights to an imported role

1 Go to theFoldersmanagement area of the CMC.

2 In theSAPfolder, locate the first (uppermost) subfolder into which this role ispermitted to publish reports.

3 When you have located the folder whose rights you want to modify, click itsRightstab.

4 ClickAdd/Remove.

The Add/Remove page appears.

5 In theSelect Operationlist, select Add/Remove Groups.

6 In theAvailable groupslist, select the group that corresponds to the importedrole whose rights you want to specify.


41/58



7 Click the> arrow to grant the group access to this folder; then clickOK.

You are returned to the Rights tab.

8 Click the groupsAccess Levellist and selectNo Access; then clickUpdate.

9 Click the groupsAccess Levellist again, and selectAdvanced.

The Advanced Rights page appears.

10Ensure that theRespect current security by inheriting rights from parentfoldersoption is cleared, and clickUpdateif you made changes.

11In theExplicitly Grantedcolumn, select the following rights:

Add objects to the folder

View objects

Edit objects

Modify the rights users have to objects

12ClickOK.

Members of this imported role now have permission to publish the roles from BWto Crystal Enterprise. For complete details on the predefined access levels andadvanced rights, click Help to see the Crystal Enterprise Administrators Guide.

Assigning system administration rights

If you have a number of SAP users who will be responsible for maintaining theCrystal Enterprise system, you can quickly grant them administrative rights. Toaccomplish this, you must first create a dedicated role within SAP, add theappropriate users to the role, and import the role to Crystal Enterprise. For detailson creating the role, see your SAP documentation. For details on importing the

role, seeImporting SAP roles to Crystal Enterprise on page 30.To grant role members system administration rights, you make the imported SAProle a subgroup of the default Administrators group in Crystal Enterprise. Thisgrants role members full control over all aspects of Crystal Enterprise, includinguser and group accounts, folders and reports, servers andserver groups, and so on.

To assign system administration rights to an imported role

1 Go to theGroupsmanagement area of the CMC.

2 In theGroup Namecolumn, clickAdministrators.

3 Click theSubgroupstab; then clickAdd/Remove Subgroups.

4 In theAvailable groupslist, select the imported role whose rights you want tomodify.

5 Click the> arrow to make the role a subgroup of the Administrators group;then clickOK.


42/58



Integrating with Secure Network CommunicationCrystal EnterpriseSAP Edition supports environments that implement SecureNetwork Communication (SNC) for authentication and/or for data encryptionbetween SAP components. If you have deployed the SAP Cryptographic Library(or another external security product that uses the SNC interface) you must setsome additional values in order to integrate Crystal Enterprise effectively withinyour secured environment.

Note:

You must also configure the local SAP Gateway for SNC (for instance, it must bestarted with the system profile parametersnc/enable). For details, see the SAPLibrary > Basis Services/Communication Interfaces > SAP Communication:Configuration > SAP Gateway. Relevant headings include The SAP Gatewayand the SNC Interface and Parameterization of the SAP Gateway.

Use your external SNC security product to create an external name for Crystal

Enterprise; then create the corresponding SNC name. You will need this SNCname when configuring Crystal Enterprise.

For complete details on using SNC, see theSNC Users Guide, which isavailable through SAPNet.

To enable SNC support within Crystal Enterprise



3 On theSNC settingstab, select the appropriate entitlement system from theLogical system namelist.

Note:If this list is empty, seeConnecting to SAP entitlement systems onpage 28.

4 SelectEnable Secure Network Communication [SNC].

Tip:If you clear this check box to disable SNC at a later time, the CMC retainsthe rest of your SNC settings.

5 SelectDisallow insecure incoming RFC connectionsif you want CrystalEnterprise to refuse requests that do not use SNC.

This option enforces the use of SNC and ensures that the BW Report Publisheruses SNC when users publish reports through the local SAP Gateway.Consequently, this option requires you to enable SNC in the SAP Gateway.

In addition, you must provide your SNC information in the definition of theCRYSTAL_PUBLISHER RFC destination. Execute transactionSM59 and set your SNCoptions on the Logon/Security tab. For details, see the SAP Library.


43/58



6 Use the remaining fields to provide the information that corresponds to yourSNC implementation.

7 ClickUpdate.

Field Value

SNC library path Type the absolute path to the library that contains the functionsprovided by your external security product. This library may bereferred to elsewhere as the external library, the gssapi library, orSNC_LIB (for example,C:\WINNT\system32\gssapi32.dll).

Quality of Protection Specify the level of security that Crystal Enterprise should applywhen it communicates with your SAP system. This value isdependent on the SNC product that you have installed.

Tip:The Encryption option corresponds to the level referred to asPrivacy in some SNC products. The Max. available optionadjusts the quality of protection, depending on the capabilities ofyour SNC product.

SNC name of SAP system Type the SNC identity of your SAP system.


44/58




45/58


Working with Web Content 5

This chapter briefly describes the web desktop called SAPePortfolio, which is included with the Web Content featureof Crystal EnterpriseSAP Edition.


46/58

SAP ePortfolio


SAP ePortfolioSAP ePortfolio serves as a window to Crystal Reports on your companys existingintranet or Internet site. When you use Crystal EnterpriseSAP Edition, you canchoose SAP ePortfolio or a web desktop designed by someone in your company.SAP ePortfolio helps organize your reports into logical groupsusing foldersand allows you to search for and view reports.

Through SAP ePortfolio, you can access all the Crystal reports that have beensaved in your SAP roles or included with BWs predefined Business Content. Youcan configure your own personal desktop settings and save your favorite reports.Once you have found the reports you want to look at, SAP ePortfolio offers reportviewers with printing and exporting capabilities.

The only administrative feature available within SAP ePortfolio relates to theprocessing of translated reports. For details, seeRunning translated reports ondifferent server groups on page 40.

To access SAP ePortfolio

Go to the SAP ePortfolio main page:

http://webserver/crystal/enterprise/sapbw/eportfolio/

Replacewebserverwith the name of the web server that is set up for CrystalEnterprise. For more information about SAP ePortfolio, click Help to see the SAPePortfolio Users Guide.

Running translated reports on different server groups

If you are an administrator, you can use SAP ePortfolio to divide report processingacross different server groups, depending upon the language that users specifywhen they schedule reports. You can also specify a default server group for reportsthat are not otherwise assigned to a particular server group. To divide reportprocessing in this manner, you must first publish reports in multiple languages.For more information, see theCrystal EnterpriseSAP Edition Users Guide(userguide.pdf), included in thesapdocsdirectory of each product CD.

The ability to process all reports in a given language on a particular server groupis especially useful when your report data includes double-byte characters or otherlocale-specific features. For instance, reports that contain Japanese characters mustbe processed on a Japanese operating system.

Tip:Crystal Enterprise also allows administrators to control processing ofindividual reports. To make server group settings for a particular report object, youmust modify the objects properties in the Crystal Management Console (CMC).


47/58

5 Working with Web Content


To distribute processing across server groups

1 Ensure that you have defined one or more server groups in the CMC. Eachserver group that you define for this purpose must include at least one JobServer and one Page Server.

For instance, if you want to create a server group for processing Japanesereports, first install a Crystal Enterprise Job Server and Page Server on amachine that is running a supported Japanese operating system. Then create anappropriately named server group in the CMC, andadd the new Job Server andPage Server to the server group. For details on server groups, click Help in theCMC to see theCrystal Enterprise Administrators Guide.

2 Log on to SAP ePortfolio with the default Administrator account.

3 ClickAdvancedin the top-right section of the title bar.

The Server Group Settings page appears, with a section for each of the servergroups that is available on your system.

4 In theDefault Grouplist, select the server group that you want to processreports that are not otherwise assigned to a particular server group.

5 To assign all reports in a particular language to a server group, type theappropriate SAP language code in the server groupsLanguagefield; thenclickAdd to move the code to theLanguage List.

In this example, the group called Japanese Processing Servers will process allJapanese reports (that is, all translated reports that are scheduled in Japanese orviewed on demand by SAP users who specify Japanese when they log on). All


48/58

SAP ePortfolio


other reports will be processed by servers in the group called EnglishProcessing Servers.

6 ClickApply; then clickBackto return to SAP ePortfolio.


49/58


Configuring the InfoSet driver 6

This chapter explains how to import the transport file and setup the authorizations that are required for the InfoSet driver.


50/58

Installing and configuring the transport


Installing and configuring the transportThe InfoSet driver is installed with Crystal ReportsSAP Edition and with the DataAccess feature of Crystal EnterpriseSAP Edition. However, to make the driveroperational, you must complete the following installation and configurationprocedures on your SAP system:

Import the Flat Data Access Functions transport from Crystal EnterpriseSAPEdition Disc 2 to your SAP system.

The InfoSet driver uses the contents of this transport file when communicatingwith the SAP system. For details, seeSetting up the transport on page 44.

Create the required authorizations and apply them through profiles or roles toSAP users who will be designing, running, or scheduling Crystal reports. Fordetails, seeCreating and applying authorizations on page 45.

If you havent already done so, ensure that the Data Access feature is installedon each Crystal Enterprise Job Server and Page Server. For details, seeTo

install Crystal EnterpriseSAP Edition on page 17.The installation and configuration procedures required on the SAP system must beperformed by a Basis expert who is familiarwith the Change and Transport systemand who has administrative rights to the SAP system. The exact procedure forimporting transport files varies, depending upon the version of Basis that you arerunning. For specific procedural details, refer to your SAP documentation.

Setting up the transportThe Flat Data Access Functions transport enables the driver to access InfoSets. Thistransport is compatible with R/3 4.6b and later. Do not import this transport if you

are running R/3 4.6a or earlier.

The transport consists of the following object:

Tip:The contents of the transport file are registered automatically under theCrystal Decisions namespace when you import the files. The Crystal Decisionsnamespace is reserved for this purpose within versions 4.6b and later of SAP R/3.

Importing the transport fileImport the transport file from the\transports\cofiles and\transports\datadirectories of Crystal EnterpriseSAP Edition Disc 2. These directories correspondto the.../trans/cofiles and.../trans/data directories on your SAP server.

PgmID Object Object name

R3TR FUGR /CRYSTAL/FLAT


51/58

6 Configuring the InfoSet driver


Note:

The transport is a binary file. Therefore, if your SAP server is installed on aUNIX machine, you must add the file by FTP in Binary mode (to avoid filecorruption). In addition, you must have write permissions for the UNIX server.

After copying files from CD to server, ensure that all files are writable beforeyou import the transport file. Imports fail if the cofiles are read-only.

Creating and applying authorizationsThe exact procedures for creating, configuring, and applying authorizationsdepend upon the version of SAP that you have installed. In all cases, however,there are two authorization objects that must be applied to SAP users who will bedesigning, running, or scheduling Crystal reports using the InfoSet driver. Therequired authorization objects are:

S_RFC

For details, seeAuthorizing users to make remote function calls on page 45. S_BTCH_JOB

For details, seeAuthorizing users to schedule reports on page 46.

From each authorization object, you must create an authorization and define theappropriate field values. You then apply the two new authorizations to the profiles(or roles) of your SAP users. The following sections describe the requiredauthorizations and provide you with the necessary field values. For proceduraldetails that are specific to your version of SAP, refer to your SAP documentation.

Authorizing users to make remote function calls

The S_RFC authorization object grants an SAP user the right to make remotefunction calls to the function modules installed on the SAP system. The S_RFCauthorization object belongs to the AAAB object class, which exists by defaultwithin your SAP system.

From the S_RFC authorization object, create a new authorization and give it asuitable name. Define the new authorization's field values as follows:

Apply the new authorization to the profiles (or roles) of all SAP users who need todesign, run, or schedule Crystal reports.

Field Value

ACTVT * (denotes ALL)

RFC_TYPE FUGR (denotes Function Group)RFC_NAME SYST, RFC1, ZIMG, AQRC, /CRYSTAL/FLAT


52/58

Creating and applying authorizations


crystal enterprise sap edition - installation guide.pdf

Documents