IBM OpenPages GRC PlatformVersion 7.0.0

Administrator's Guide

NoteBefore using this information and the product it supports, read the information in Notices on page 787.

Product Information

This document applies to IBM OpenPages GRC Platform Version 7.0.0 and may also apply to subsequent releases.

Licensed Materials - Property of IBM Corporation.

Copyright IBM Corporation, 2003, 2013.

US Government Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contractwith IBM Corp.

Contents

Document Release and Update Information . . . . . . . . . . . . . . . . . . . xvii

Chapter 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1Whats new in IBM OpenPages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3What's changed in IBM OpenPages . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5About the IBM OpenPages GRC Platform . . . . . . . . . . . . . . . . . . . . . . . . . 6

IBM OpenPages GRC Platform Modules . . . . . . . . . . . . . . . . . . . . . . . . . 6How the IBM OpenPages GRC Platform Can Help . . . . . . . . . . . . . . . . . . . . . 7

Chapter 2. Administering Users, Groups, and Domains . . . . . . . . . . . . . . . 9About Users and Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Accessing Users, Groups and Domains . . . . . . . . . . . . . . . . . . . . . . . . . 9Rules for User Names and Passwords . . . . . . . . . . . . . . . . . . . . . . . . . 10

About Administrators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11The Super Administrator . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11Delegating Administrator Permissions . . . . . . . . . . . . . . . . . . . . . . . . . 12

Managing User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15Creating New Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16Associating Existing Users with a Group . . . . . . . . . . . . . . . . . . . . . . . . 17Disassociating Users from a Group . . . . . . . . . . . . . . . . . . . . . . . . . . 18Modifying Existing User Accounts. . . . . . . . . . . . . . . . . . . . . . . . . . . 18Disabling User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19Enabling User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Managing Organizational Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19Creating a New Organizational Group . . . . . . . . . . . . . . . . . . . . . . . . . 20Disassociating a Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20Associating a Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Configuring Application Permissions . . . . . . . . . . . . . . . . . . . . . . . . . . . 21Defining Application Permissions . . . . . . . . . . . . . . . . . . . . . . . . . . . 21Understanding Group Application Permissions . . . . . . . . . . . . . . . . . . . . . . 22Application Permissions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22Other Permissions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Configure Password Behavior . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28Configuring Password Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29Configuring Password Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . 29The UPEA Tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30Using the UPEA Tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Chapter 3. Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37Role-based security model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Security context points . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39Extending security context points . . . . . . . . . . . . . . . . . . . . . . . . . . . 40Security domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43Moving business entities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44Copying business entities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44Role-based access control permissions . . . . . . . . . . . . . . . . . . . . . . . . . 45Role templates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Security rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53Scenarios for security rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54Defining security rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60Enabling or disabling a security rule . . . . . . . . . . . . . . . . . . . . . . . . . . 71Validating a formula for a security rule . . . . . . . . . . . . . . . . . . . . . . . . . 71Deleting a security rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72

Custom security for projects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72About the folder hierarchy and inheritance . . . . . . . . . . . . . . . . . . . . . . . . 72

iii

Accessing the Access Control page . . . . . . . . . . . . . . . . . . . . . . . . . . 73Creating an Access Control List. . . . . . . . . . . . . . . . . . . . . . . . . . . . 73Editing an Access Control List . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74Deleting an Access Control List. . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

LDAP user authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74Supported LDAP servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75Configuring the LDAP Authentication Module . . . . . . . . . . . . . . . . . . . . . . 75Setting up mixed-mode authentication . . . . . . . . . . . . . . . . . . . . . . . . . 78Configuring a multi-forested LDAP authentication . . . . . . . . . . . . . . . . . . . . . 79

Chapter 4. Using System Admin Mode . . . . . . . . . . . . . . . . . . . . . . 81About System Administration Mode (SAM) . . . . . . . . . . . . . . . . . . . . . . . . 81Enabling and Disabling System Admin Mode . . . . . . . . . . . . . . . . . . . . . . . . 82

Chapter 5. Managing the Reporting Schema and Framework . . . . . . . . . . . . 83Administering the Reporting Schema . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

Reporting Schema and Framework Permissions . . . . . . . . . . . . . . . . . . . . . . 83Accessing the Reporting Schema . . . . . . . . . . . . . . . . . . . . . . . . . . . 83Updating the Reporting Schema . . . . . . . . . . . . . . . . . . . . . . . . . . . 84Creating or Re-creating the Reporting Schema . . . . . . . . . . . . . . . . . . . . . . . 84Populating Past Reporting Periods. . . . . . . . . . . . . . . . . . . . . . . . . . . 85Enabling and Disabling the Reporting Schema. . . . . . . . . . . . . . . . . . . . . . . 85Viewing Reporting Schema Operation Details . . . . . . . . . . . . . . . . . . . . . . . 86

Using the Reporting Framework . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86Accessing the Reporting Framework . . . . . . . . . . . . . . . . . . . . . . . . . . 87

Generating the Reporting Framework . . . . . . . . . . . . . . . . . . . . . . . . . . 87The IBM OpenPages Reporting Framework V6 . . . . . . . . . . . . . . . . . . . . . . 87Backward Compatibility with the Legacy Reporting Framework . . . . . . . . . . . . . . . . . 88About Choosing Update Options in the Reporting Framework . . . . . . . . . . . . . . . . . 88Regenerating the Reporting Framework . . . . . . . . . . . . . . . . . . . . . . . . . 88Updating the Reporting Framework . . . . . . . . . . . . . . . . . . . . . . . . . . 89Viewing Reporting Framework Details . . . . . . . . . . . . . . . . . . . . . . . . . 89Changing the Administrator Logon Account and Framework Generation . . . . . . . . . . . . . . 90

Configuring Facts and Dimensions . . . . . . . . . . . . . . . . . . . . . . . . . . . 91Facts and Dimensions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91Process Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91Enabling and Disabling Facts . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91Enabling and Disabling Enumeration and Dependent Picklist Dimensions . . . . . . . . . . . . . 92Using Date Dimension Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94

Configuring Recursive Object Levels . . . . . . . . . . . . . . . . . . . . . . . . . . . 97About Recursive Object Levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97Rules for Defining Sets of Recursive Object Levels . . . . . . . . . . . . . . . . . . . . . 99Working With Business Entity Recursive Object Levels . . . . . . . . . . . . . . . . . . . . 99Modifying Recursive Object Levels . . . . . . . . . . . . . . . . . . . . . . . . . . 101

Configuring Object Type Dimensions . . . . . . . . . . . . . . . . . . . . . . . . . . 101Object Type Dimensions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101Selecting a Starting Object Type for a Dimension . . . . . . . . . . . . . . . . . . . . . 102Adding Object Type Dimensions . . . . . . . . . . . . . . . . . . . . . . . . . . . 102Modifying Object Type Dimensions . . . . . . . . . . . . . . . . . . . . . . . . . . 103Enabling and Disabling Object Type Dimensions . . . . . . . . . . . . . . . . . . . . . 103Deleting Object Type Dimensions. . . . . . . . . . . . . . . . . . . . . . . . . . . 104

Chapter 6. Business Process Visualizations . . . . . . . . . . . . . . . . . . . 105Types of visualizations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106

Visualizing a Business Entity organization chart . . . . . . . . . . . . . . . . . . . . . . 108Visualizing a business process flow . . . . . . . . . . . . . . . . . . . . . . . . . . 108

Creating a process diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110Updating process diagrams. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112

Process diagrams management . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113Modifying a process diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113

iv IBM OpenPages GRC Platform Version 7.0.0: Administrator's Guide

Copying a process diagram to use as a template. . . . . . . . . . . . . . . . . . . . . . 115Changing the status of a process diagram . . . . . . . . . . . . . . . . . . . . . . . . 116Exporting a process diagram from an IBM OpenPages environment . . . . . . . . . . . . . . . 116Importing a process diagram to an IBM OpenPages environment . . . . . . . . . . . . . . . . 117Deleting a process diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118Modifying field properties of a process diagram . . . . . . . . . . . . . . . . . . . . . . 119

Chapter 7. Managing Reports . . . . . . . . . . . . . . . . . . . . . . . . . 121Accessing Reports From the Application User Interface . . . . . . . . . . . . . . . . . . . . 121Supplied Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121

IBM OpenPages V6 Folder Reports . . . . . . . . . . . . . . . . . . . . . . . . . . 121Adding Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125

Using the Application User Interface to Add Reports . . . . . . . . . . . . . . . . . . . . 126Working With Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128

Understanding Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128Locating Report Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129Accessing Report Pages and Page Templates . . . . . . . . . . . . . . . . . . . . . . . 129Manually Creating a New Instance of a Report . . . . . . . . . . . . . . . . . . . . . . 129Working with Interactive JSP Reports . . . . . . . . . . . . . . . . . . . . . . . . . 134

Restricting Access to Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135Setting Permissions on JSP and Reports . . . . . . . . . . . . . . . . . . . . . . . . 135Securing Access to the CommandCenter Portal . . . . . . . . . . . . . . . . . . . . . . 136

Chapter 8. Configuring Fields and Field Groups . . . . . . . . . . . . . . . . . 141Fields and Field Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141

Definition of Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141Definition of a Field Group That is In Use. . . . . . . . . . . . . . . . . . . . . . . . 142Accessing the Field Groups Page . . . . . . . . . . . . . . . . . . . . . . . . . . . 142Process Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143Identifying New Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145Considerations When Naming New Fields . . . . . . . . . . . . . . . . . . . . . . . 147Running the Schema Analysis Report . . . . . . . . . . . . . . . . . . . . . . . . . 148

Adding New Field Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149Adding Field Definitions to a Field Group. . . . . . . . . . . . . . . . . . . . . . . . . 149Data Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150Using Currency Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155

Accessing the Currencies Page. . . . . . . . . . . . . . . . . . . . . . . . . . . . 155Modifying Currency Exchange Rates . . . . . . . . . . . . . . . . . . . . . . . . . 155Adding and Editing Currency Fields in a Field Group. . . . . . . . . . . . . . . . . . . . 155Editing Currency Field Values in Individual Accounts . . . . . . . . . . . . . . . . . . . . 157Modifying Currency Exchange Rates . . . . . . . . . . . . . . . . . . . . . . . . . 157

Modifying Field and Field Group Properties . . . . . . . . . . . . . . . . . . . . . . . . 159Modifying Field Group Properties . . . . . . . . . . . . . . . . . . . . . . . . . . 159Modifying Object Field Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . 159Making Fields Either Required or Optional . . . . . . . . . . . . . . . . . . . . . . . 160Setting a Default Value for an Object Field . . . . . . . . . . . . . . . . . . . . . . . 161

Creating Computed Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161Process Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161Modeling a New Computed Field in Cognos . . . . . . . . . . . . . . . . . . . . . . . 162Defining a Computed Field. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163Importing and Exporting Computed Field Definitions . . . . . . . . . . . . . . . . . . . . 165Using Computed Fields with Multiple Namespaces . . . . . . . . . . . . . . . . . . . . 165Nesting Computed Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166Troubleshooting Computed Fields . . . . . . . . . . . . . . . . . . . . . . . . . . 166

Modifying Enumerated String Values . . . . . . . . . . . . . . . . . . . . . . . . . . 169Adding New Enumerated String Values . . . . . . . . . . . . . . . . . . . . . . . . 169Changing the Order of Enumerated String Values . . . . . . . . . . . . . . . . . . . . . 170Hiding Enumerated String Values . . . . . . . . . . . . . . . . . . . . . . . . . . 170Unhiding Enumerated String Values. . . . . . . . . . . . . . . . . . . . . . . . . . 171Deleting Enumerated String Values . . . . . . . . . . . . . . . . . . . . . . . . . . 171

Contents v

Configuring Reporting Fragment Fields . . . . . . . . . . . . . . . . . . . . . . . . . 172About Reporting Fragment Fields . . . . . . . . . . . . . . . . . . . . . . . . . . 172Limitations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 172Planning Considerations for Reporting Fragment Fields . . . . . . . . . . . . . . . . . . . 173Overview of Configuring Reporting Fragment Fields . . . . . . . . . . . . . . . . . . . . 173Fields Requiring Parameter Information . . . . . . . . . . . . . . . . . . . . . . . . 173Defining a Reporting Fragment Field . . . . . . . . . . . . . . . . . . . . . . . . . 174

Configuring Save As Draft Fields. . . . . . . . . . . . . . . . . . . . . . . . . . . . 178Create a new field group and field . . . . . . . . . . . . . . . . . . . . . . . . . . 179Configure settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179Add the field to the object type and profile . . . . . . . . . . . . . . . . . . . . . . . 180

Deleting Field Groups and Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . 180Deleting Field Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180Deleting an Object Field Definition . . . . . . . . . . . . . . . . . . . . . . . . . . 181

Working with Long String Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181

Chapter 9. Managing Object Types . . . . . . . . . . . . . . . . . . . . . . . 183About Object Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183

About Platform Object Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183About Property Rendering JSP Files . . . . . . . . . . . . . . . . . . . . . . . . . . 184Accessing Object Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185

Configuring Object Type Properties . . . . . . . . . . . . . . . . . . . . . . . . . . . 185Editing Object Type Properties . . . . . . . . . . . . . . . . . . . . . . . . . . . 185Including Field Groups for an Object Type . . . . . . . . . . . . . . . . . . . . . . . 186Disabling Associations Between Object Types. . . . . . . . . . . . . . . . . . . . . . . 186Enabling Associations Between Object Types . . . . . . . . . . . . . . . . . . . . . . . 187About Object Relationship Types . . . . . . . . . . . . . . . . . . . . . . . . . . . 188Modifying Cardinality Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . 191Configuring File Type Information . . . . . . . . . . . . . . . . . . . . . . . . . . 193Configuring Large Files for Upload . . . . . . . . . . . . . . . . . . . . . . . . . . 194

Setting Up Custom Forms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 196Process Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 196Adding an Object Type for a Custom Form . . . . . . . . . . . . . . . . . . . . . . . 196Deleting a Custom Object Type . . . . . . . . . . . . . . . . . . . . . . . . . . . 197Associating a Custom Form to an Object Type . . . . . . . . . . . . . . . . . . . . . . 197

Managing Filters for an Object Type . . . . . . . . . . . . . . . . . . . . . . . . . . . 198Filter Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 199Adding Filters to Object Types . . . . . . . . . . . . . . . . . . . . . . . . . . . 200Copying Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205Modifying Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205Deleting Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206

Configuring Dependent Field Behavior . . . . . . . . . . . . . . . . . . . . . . . . . . 206Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 207Adding Dependent Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 207Copying Controller Conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . 209Modifying Controllers for a Dependent Field . . . . . . . . . . . . . . . . . . . . . . . 209Enabling and Disabling Field Dependency Behavior . . . . . . . . . . . . . . . . . . . . 210Deleting Dependent Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 210

Configuring Dependent Picklists . . . . . . . . . . . . . . . . . . . . . . . . . . . . 211Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 211Adding Dependent Picklists . . . . . . . . . . . . . . . . . . . . . . . . . . . . 211Modifying Picklist Dependency Behavior . . . . . . . . . . . . . . . . . . . . . . . . 213Enabling and Disabling Picklist Dependency . . . . . . . . . . . . . . . . . . . . . . . 213Deleting a Dependent Picklist . . . . . . . . . . . . . . . . . . . . . . . . . . . . 213

Excluding Fields from a Subsystem . . . . . . . . . . . . . . . . . . . . . . . . . . . 214Adding Fields for Exclusion . . . . . . . . . . . . . . . . . . . . . . . . . . . . 214Changing the Subsystem for an Excluded Field . . . . . . . . . . . . . . . . . . . . . . 215Deleting Excluded Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215

vi IBM OpenPages GRC Platform Version 7.0.0: Administrator's Guide

Chapter 10. Managing Profiles . . . . . . . . . . . . . . . . . . . . . . . . . 217About Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217Accessing Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 218Creating and Managing Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . 218

Creating a New Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 218Designating a Default or Fallback Profile . . . . . . . . . . . . . . . . . . . . . . . . 219Editing a Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220Deleting a Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220Disabling or Enabling a Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . 220

Setting Up Users or Groups with a Profile. . . . . . . . . . . . . . . . . . . . . . . . . 221Associating Users and Groups to a Profile . . . . . . . . . . . . . . . . . . . . . . . . 221Disassociating Users or Groups from a Profile . . . . . . . . . . . . . . . . . . . . . . 221

Configuring Object Types in Profiles. . . . . . . . . . . . . . . . . . . . . . . . . . . 222Including Object Types in a Profile . . . . . . . . . . . . . . . . . . . . . . . . . . 222Excluding Object Types From a Profile . . . . . . . . . . . . . . . . . . . . . . . . . 222

Configuring Fields for Object Types . . . . . . . . . . . . . . . . . . . . . . . . . . . 223Including and Excluding Fields in an Object Type . . . . . . . . . . . . . . . . . . . . . 223Setting the Global Display Order of Object Types . . . . . . . . . . . . . . . . . . . . . 224Setting a Field in a Profile to Required or Optional . . . . . . . . . . . . . . . . . . . . . 224

Chapter 11. Managing the Home Page and Views for Objects . . . . . . . . . . . . 227Home Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227

The Layout of Tabs on a Home Page . . . . . . . . . . . . . . . . . . . . . . . . . 228Guidelines for Selecting Reports to Run in Tabs . . . . . . . . . . . . . . . . . . . . . . 229

Configuring Tabs on the Home Page . . . . . . . . . . . . . . . . . . . . . . . . . . 229Adding New Tabs for Reports or Dashboards . . . . . . . . . . . . . . . . . . . . . . 229Setting the Display Order of Tabs . . . . . . . . . . . . . . . . . . . . . . . . . . 230Hiding and Unhiding Tabs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 230Deleting Tabs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231

Configuring the My Work Tab. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231Configuring Predefined Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232Filtered lists on the My Work tab . . . . . . . . . . . . . . . . . . . . . . . . . . . 232Configuring Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 235Removing items from the My Work tab . . . . . . . . . . . . . . . . . . . . . . . . 238

Views for objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 238Navigational views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 239Object views. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 241Association Views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243

Managing Views for Objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 244Enabling a View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 244Disabling a View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245Setting a Default View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246Setting the Display Order of Fields in a View. . . . . . . . . . . . . . . . . . . . . . . 247

Configuring Views for Objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 248Configuring Fields in Navigational and Association Views . . . . . . . . . . . . . . . . . . 248Including and Excluding Object Types on Overview Pages . . . . . . . . . . . . . . . . . . 250Filtered List View and Grid View Pages . . . . . . . . . . . . . . . . . . . . . . . . 251Creating a Grid View. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 252Creating Activity Views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 254Configuring Fields in Detail and Activity Views . . . . . . . . . . . . . . . . . . . . . . 261Using Section Headings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 263Setting Object Fields as Read-Only or Editable . . . . . . . . . . . . . . . . . . . . . . 264Spanning Table Columns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 265

Configuring the Display Type for Reporting Fragment Fields . . . . . . . . . . . . . . . . . . 265Configuring Display Types for Simple String Fields . . . . . . . . . . . . . . . . . . . . . 266

Selecting a Display Type for Simple String Fields . . . . . . . . . . . . . . . . . . . . . 267Configuring Rich Text Display Types for Simple Strings . . . . . . . . . . . . . . . . . . . 267Configuring Text and URL Display Types for Simple Strings . . . . . . . . . . . . . . . . . 268Configuring Text Area Display Types for Simple String Data Types . . . . . . . . . . . . . . . 269Configuring User and Group Selector Display Types for Simple Strings . . . . . . . . . . . . . . 269

Configuring Display Types for Long String Fields . . . . . . . . . . . . . . . . . . . . . . 274

Contents vii

Selecting a Display Type for Long String Fields . . . . . . . . . . . . . . . . . . . . . . 274Configuring the On Demand Display Types for Long String Fields . . . . . . . . . . . . . . . 275Configuring Text Display Types for Medium Long String Fields . . . . . . . . . . . . . . . . 276Configuring Rich Text Display Types for Medium Long String Fields. . . . . . . . . . . . . . . 276

Configuring Display Types for Enumerated Strings . . . . . . . . . . . . . . . . . . . . . . 278Selecting a Display Type for Enumerated Strings . . . . . . . . . . . . . . . . . . . . . 278

Chapter 12. Localizing Text . . . . . . . . . . . . . . . . . . . . . . . . . . 279Localization Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279

About Locale Codes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279Configuring Client Systems to Display Asian Characters . . . . . . . . . . . . . . . . . . . 279Language and locale support . . . . . . . . . . . . . . . . . . . . . . . . . . . . 280

Localizing Object Text . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281About Object Text . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281Accessing the Object Text Page . . . . . . . . . . . . . . . . . . . . . . . . . . . 282Modifying Display Text for an Object Type . . . . . . . . . . . . . . . . . . . . . . . 282Modifying Display Text for Object Fields . . . . . . . . . . . . . . . . . . . . . . . . 283Modifying Display Text for Public Filters . . . . . . . . . . . . . . . . . . . . . . . . 283

Localizing Application Text. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 284About Application Text . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 284Accessing the Application Text Page. . . . . . . . . . . . . . . . . . . . . . . . . . 285About Modifying Display Text in the Application User Interface . . . . . . . . . . . . . . . . 286Modifying User Display Formats . . . . . . . . . . . . . . . . . . . . . . . . . . . 286Modifying Navigational Link Formats . . . . . . . . . . . . . . . . . . . . . . . . . 288

Using the Custom Folder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 290About the Custom Folder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 290Adding New Keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 290Modifying Custom Keys. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 291

Chapter 13. Resetting Objects . . . . . . . . . . . . . . . . . . . . . . . . . 293Overview of Reporting Periods . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293

About Active Reporting Periods and Operational Limitations . . . . . . . . . . . . . . . . . 293About Finalized Reporting Periods . . . . . . . . . . . . . . . . . . . . . . . . . . 293How Reporting Periods and the Reporting Schema Interact . . . . . . . . . . . . . . . . . . 294How Reporting Periods and ACLs Interact . . . . . . . . . . . . . . . . . . . . . . . 294How Reporting Periods and Change Histories Interact . . . . . . . . . . . . . . . . . . . 294Using System Administration Mode with Reporting Periods and Schemas . . . . . . . . . . . . . 294Reporting Period Permissions and Settings . . . . . . . . . . . . . . . . . . . . . . . 294

Creating a New Reporting Period . . . . . . . . . . . . . . . . . . . . . . . . . . . 295Creating a New Finalized Reporting Period . . . . . . . . . . . . . . . . . . . . . . . 295

Working with the Active Reporting Period . . . . . . . . . . . . . . . . . . . . . . . . 296Reapplying the Active Reporting Period to a Business Entity . . . . . . . . . . . . . . . . . 296Finalizing a Reporting Period . . . . . . . . . . . . . . . . . . . . . . . . . . . . 297Deleting a Reporting Period . . . . . . . . . . . . . . . . . . . . . . . . . . . . 297

Overview of Object Resets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 298Using Object Reset on System Fields . . . . . . . . . . . . . . . . . . . . . . . . . 298Using Object Reset on Currency Fields . . . . . . . . . . . . . . . . . . . . . . . . . 298Preparing Your Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 299

Creating a Ruleset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 299Creating the Ruleset File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 300Sample Ruleset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 300The Ruleset Tag Library . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 301

Loading the Ruleset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 306Updating a Ruleset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 307

Performing the Object Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 307Preparing for the Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 307Configuring the Ruleset Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . 307Using the Object Reset Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . 308Starting the Object Reset. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 308Viewing the Reset Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 308

viii IBM OpenPages GRC Platform Version 7.0.0: Administrator's Guide

Viewing the Reset Session Details . . . . . . . . . . . . . . . . . . . . . . . . . . 309Viewing the Reset Session Log . . . . . . . . . . . . . . . . . . . . . . . . . . . 310

Exporting Rulesets to an XML File . . . . . . . . . . . . . . . . . . . . . . . . . . . 310

Chapter 14. Configuring Settings . . . . . . . . . . . . . . . . . . . . . . . . 313About the Settings Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 313

Accessing the Settings Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . 313Applications Folder Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 313

Modifying the Overview View Cache Capacity . . . . . . . . . . . . . . . . . . . . . . 314Configuring the Browser Cache . . . . . . . . . . . . . . . . . . . . . . . . . . . 314Displaying the Accessibility Link . . . . . . . . . . . . . . . . . . . . . . . . . . . 314Displaying or Hiding Field Guidance . . . . . . . . . . . . . . . . . . . . . . . . . 315Displaying or Hiding System Generated Field Guidance . . . . . . . . . . . . . . . . . . . 315Setting a Default Object View . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316Configuring File Check-out . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316Configuring the Sort Order of Object List Views By Modification Date . . . . . . . . . . . . . . 317Modifying the Deletion Interval for a Reporting Period . . . . . . . . . . . . . . . . . . . 317Showing Hidden Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 318Configuring Actor Table Page Size . . . . . . . . . . . . . . . . . . . . . . . . . . 318Selector Display Type Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 318Configuring Menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 321Auto-Naming Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 324Signature and Lock Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 327Settings That Apply to Environment Migration . . . . . . . . . . . . . . . . . . . . . . 335Reporting Fragment Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 336Notification Manager Mail Server Settings . . . . . . . . . . . . . . . . . . . . . . . . 337Object Reset Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 338Configuring Object View Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . 340Optimizing File Uploads . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 344

Creating and Deleting Custom Settings . . . . . . . . . . . . . . . . . . . . . . . . . . 344Enabling the Creation and Deletion of New Settings . . . . . . . . . . . . . . . . . . . . 344Creating a New Setting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 345Deleting a Setting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 345

Common Folder Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 346Excluding Characters From User Names . . . . . . . . . . . . . . . . . . . . . . . . 346Setting the System Security Model . . . . . . . . . . . . . . . . . . . . . . . . . . 346Disabling Access Control on Role Groups . . . . . . . . . . . . . . . . . . . . . . . . 347

Platform Folder Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 347Setting Localization Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . 347Configuring Primary Associations . . . . . . . . . . . . . . . . . . . . . . . . . . 348Configuring the legacy move behavior . . . . . . . . . . . . . . . . . . . . . . . . . 349Reporting Framework V6 Generation Settings . . . . . . . . . . . . . . . . . . . . . . 350Reporting Framework Configuration Settings. . . . . . . . . . . . . . . . . . . . . . . 357Reporting Schema Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 359Workflow Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 361Configuring Security Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 364

User Preferences Folder Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 366Setting Alert Notification Behavior . . . . . . . . . . . . . . . . . . . . . . . . . . 366

Copy Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 367Setting Copy Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 367Cross-Context Sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 368

Self-Contained Object Type Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . 370About Self-Contained Object Types . . . . . . . . . . . . . . . . . . . . . . . . . . 370Configuring Settings for Self Contained Object Types . . . . . . . . . . . . . . . . . . . . 371

Chapter 15. Using IBM OpenPages Utilities with IBM DB2 . . . . . . . . . . . . . 373About IBM DB2 and the OpenPages Backup and Restore Utilities . . . . . . . . . . . . . . . . . 373Configuring Email Notification for Backup Jobs . . . . . . . . . . . . . . . . . . . . . . . 373

About Email Notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 373Configuring Backup Job Notification . . . . . . . . . . . . . . . . . . . . . . . . . 374

Contents ix

Running Asynchronous Background Jobs and Administrative Functions . . . . . . . . . . . . . . . 375Enabling and Disabling Asynchronous Background Processes Checking . . . . . . . . . . . . . . 377

Using the IBM OpenPages Backup Utility . . . . . . . . . . . . . . . . . . . . . . . . . 378Backing Up Custom OpenPages Files . . . . . . . . . . . . . . . . . . . . . . . . . 378Running the OPBackup Command . . . . . . . . . . . . . . . . . . . . . . . . . . 379

Running a Live OpenPages Backup . . . . . . . . . . . . . . . . . . . . . . . . . . . 379About OPBackup Generated Files . . . . . . . . . . . . . . . . . . . . . . . . . . . 380

About IBM OpenPages Backed-Up Content . . . . . . . . . . . . . . . . . . . . . . . 380About the OPBackup Log File . . . . . . . . . . . . . . . . . . . . . . . . . . . . 381Configuring OPBackup to Use GZIP. . . . . . . . . . . . . . . . . . . . . . . . . . 381

Enabling and Disabling Storage Backup . . . . . . . . . . . . . . . . . . . . . . . . . 381Using the IBM OpenPages Restore Utility . . . . . . . . . . . . . . . . . . . . . . . . . 382

Running the OPRestore Command . . . . . . . . . . . . . . . . . . . . . . . . . . 382About OPRestore Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 383

Using the Cognos Backup Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . 383Running the OPCCBackup Command . . . . . . . . . . . . . . . . . . . . . . . . . 384About OPCCBackup Generated Files . . . . . . . . . . . . . . . . . . . . . . . . . 384

Using the Cognos Restore Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . 385Running the OPCCRestore Command . . . . . . . . . . . . . . . . . . . . . . . . . 386About OPCCRestore Log Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . 386

Backing up and Restoring IBM DB2 Databases for OpenPages . . . . . . . . . . . . . . . . . . 387Restoring Backed up Production Data in a New Environment . . . . . . . . . . . . . . . . . . 388Refreshing a Test Environment from Backup Files . . . . . . . . . . . . . . . . . . . . . . 390

Prerequisites. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 391Back up Production Databases in OpenPages on the DB2 Server . . . . . . . . . . . . . . . . 391Back Up and Copy IBM OpenPages Application Production Files . . . . . . . . . . . . . . . . 391Back up Databases in OpenPages on the Test Server . . . . . . . . . . . . . . . . . . . . 391Back Up IBM OpenPages Application Files on Your Test Server . . . . . . . . . . . . . . . . 391Back Up Workflow Properties in the Test Environment . . . . . . . . . . . . . . . . . . . 392Drop the DB2 Database for the Application on the Test System . . . . . . . . . . . . . . . . . 392Copy and Restore the Application Production Database Backup File to the Test Database Server . . . . . 393Update the OpenPages Storage Location in the Database . . . . . . . . . . . . . . . . . . . 393Update Workflow Properties in the Test Environment . . . . . . . . . . . . . . . . . . . . 395Import Properties Specific to Cluster Members in Your Test Environment . . . . . . . . . . . . . 396Update Cognos Data in the Test Environment . . . . . . . . . . . . . . . . . . . . . . 397Modify SSO and LDAP Configuration in the Test Environment . . . . . . . . . . . . . . . . . 399Copy Custom Deliverables to the Test Environment . . . . . . . . . . . . . . . . . . . . 399Start OpenPages and Workflow Servers in the Test Environment . . . . . . . . . . . . . . . . 401Update URL Host Pointers for Cognos Reports . . . . . . . . . . . . . . . . . . . . . . 401

Utilities for Filtering on Long String Field Content . . . . . . . . . . . . . . . . . . . . . . 401Install and Configure DB2 Text Search . . . . . . . . . . . . . . . . . . . . . . . . . 402Enable DB2 Text Search . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 404Create a Long String Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 405Create a Schedule Job to Synchronize a Long String Index . . . . . . . . . . . . . . . . . . 407Drop a Long String Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 409

Entity Move/Rename Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 410Prerequisites. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 410Configuring the Entity Move/Rename utility . . . . . . . . . . . . . . . . . . . . . . . 410Prepare the input file for the Entity Move/Rename utility . . . . . . . . . . . . . . . . . . 411Running the Entity Move/Rename utility interactively . . . . . . . . . . . . . . . . . . . 413Running the Entity Move/Rename utility as a scheduled task . . . . . . . . . . . . . . . . . 413Impact of the Entity Move/Rename utility on the OpenPages application . . . . . . . . . . . . . 414

Chapter 16. Using Utilities with Oracle Database . . . . . . . . . . . . . . . . . 415About Oracle Database and the OpenPages Backup and Restore Utilities . . . . . . . . . . . . . . 415

Prerequisite: Oracle Admin Client . . . . . . . . . . . . . . . . . . . . . . . . . . 415About Oracle Data Pump . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 415

Configuring Email Notification for Backup Jobs . . . . . . . . . . . . . . . . . . . . . . . 416About Email Notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 416Configuring Backup Job Notification . . . . . . . . . . . . . . . . . . . . . . . . . 416

Running Asynchronous Background Jobs and Administrative Functions . . . . . . . . . . . . . . . 418

x IBM OpenPages GRC Platform Version 7.0.0: Administrator's Guide

Enabling and Disabling Asynchronous Background Processes Checking . . . . . . . . . . . . . . 419Encrypting Database Passwords in the Backup-Restore Utility Environment Files. . . . . . . . . . . . 420Using the IBM OpenPages Backup Utility . . . . . . . . . . . . . . . . . . . . . . . . . 421

Modifying the Backup-Restore Environment File . . . . . . . . . . . . . . . . . . . . . 422Backing Up Custom OpenPages Files . . . . . . . . . . . . . . . . . . . . . . . . . 423Running the OPBackup Command . . . . . . . . . . . . . . . . . . . . . . . . . . 423Running a Live OpenPages Backup . . . . . . . . . . . . . . . . . . . . . . . . . . 424About OPBackup Generated Files . . . . . . . . . . . . . . . . . . . . . . . . . . 426Enabling and Disabling Storage Backup . . . . . . . . . . . . . . . . . . . . . . . . 427

Using the IBM OpenPages Restore Utility . . . . . . . . . . . . . . . . . . . . . . . . . 428Running the OPRestore Command . . . . . . . . . . . . . . . . . . . . . . . . . . 428About OPRestore Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 429

Using the Cognos Backup Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . 429About Configuring Oracle Data Pump on First Time Use . . . . . . . . . . . . . . . . . . . 429About the OpenPages File Storage Directory . . . . . . . . . . . . . . . . . . . . . . . 430Configuring or Updating the Oracle Data Pump Directory . . . . . . . . . . . . . . . . . . 430Running the OPCCBackup Command . . . . . . . . . . . . . . . . . . . . . . . . . 431About OPCCBackup Generated Files . . . . . . . . . . . . . . . . . . . . . . . . . 432

Using the Cognos Restore Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . 433Running the OPCCRestore Command . . . . . . . . . . . . . . . . . . . . . . . . . 433About OPCCRestore Log Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . 434

Using Oracle Online Database Backup (RMAN) for Point-In-Time Recovery . . . . . . . . . . . . . 434About Oracle Online Database Backups . . . . . . . . . . . . . . . . . . . . . . . . 435Running Oracle Online Database Backups (RMAN) . . . . . . . . . . . . . . . . . . . . 435Managing the Backup Area. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 441Disabling Online Backup of the Database Instance . . . . . . . . . . . . . . . . . . . . . 443Performing Oracle Online Database Crash Recoveries . . . . . . . . . . . . . . . . . . . . 443

Refreshing a Test Environment from Backup Files . . . . . . . . . . . . . . . . . . . . . . 443Back Up and Copy IBM OpenPages Application Production Data . . . . . . . . . . . . . . . . 444Back Up IBM OpenPages Application Test Data . . . . . . . . . . . . . . . . . . . . . . 444Back Up Workflow Properties in the Test Environment . . . . . . . . . . . . . . . . . . . 444Delete Data on the Test Database System . . . . . . . . . . . . . . . . . . . . . . . . 445Copy the Production Database Dump (.dmp) File to the Test Database Server . . . . . . . . . . . . 445Import the Production Data into the Test Environment . . . . . . . . . . . . . . . . . . . 446Update the OpenPages Storage Location in the Database . . . . . . . . . . . . . . . . . . . 448Update the Workflow Database in the Test Environment . . . . . . . . . . . . . . . . . . . 450Import Properties Specific to Cluster Members in Your Test Environment . . . . . . . . . . . . . 451Update Cognos Data in the Test Environment . . . . . . . . . . . . . . . . . . . . . . 452Modify SSO and LDAP Configuration in the Test Environment . . . . . . . . . . . . . . . . . 456Copy Custom Deliverables to the Test Environment . . . . . . . . . . . . . . . . . . . . 456Start OpenPages and Workflow Servers in the Test Environment . . . . . . . . . . . . . . . . 457Update URL Host Pointers for Cognos Reports . . . . . . . . . . . . . . . . . . . . . . 457

Workflow Purge Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 458Running the Workflow Purge Utility . . . . . . . . . . . . . . . . . . . . . . . . . 458Impact of the Workflow Purge Utility . . . . . . . . . . . . . . . . . . . . . . . . . 460

Utilities for Filtering on Long String Field Content . . . . . . . . . . . . . . . . . . . . . . 460Enable Oracle Text. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 461Create a Long String Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 462Create a Schedule Job to Synchronize a Long String Index . . . . . . . . . . . . . . . . . . 463Drop a Long String Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 464Modifying the List of Stop Words . . . . . . . . . . . . . . . . . . . . . . . . . . 465

String Concatenation Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 466Running String Concatenation . . . . . . . . . . . . . . . . . . . . . . . . . . . . 466About the String Concatenation SQL File . . . . . . . . . . . . . . . . . . . . . . . . 468

Entity Move/Rename Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 472Prerequisites. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 472Configuring the Entity Move/Rename utility . . . . . . . . . . . . . . . . . . . . . . . 473Prepare the input file for the Entity Move/Rename utility . . . . . . . . . . . . . . . . . . 474Running the Entity Move/Rename Utility interactively . . . . . . . . . . . . . . . . . . . 475Running the Entity Move/Rename utility as a scheduled task . . . . . . . . . . . . . . . . . 476Impact of the Entity Move/Rename utility on the OpenPages application . . . . . . . . . . . . . 476

Contents xi

Chapter 17. System Maintenance . . . . . . . . . . . . . . . . . . . . . . . . 477Changing Default Port Numbers . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477

Check Port Number Availability . . . . . . . . . . . . . . . . . . . . . . . . . . . 477Changing OpenPages Application Ports for an Oracle WebLogic Server Environment . . . . . . . . . 477Changing OpenPages Application Ports for an IBM WebSphere Application Server Environment . . . . . 484Change Port Numbers for the Workflow Server . . . . . . . . . . . . . . . . . . . . . . 492Changing the OpenPages Framework Generation Port. . . . . . . . . . . . . . . . . . . . 503Application server names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 504Restart Services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 504Update the Reporting Schema and Framework . . . . . . . . . . . . . . . . . . . . . . 504

Updating URL Host Pointers for Reports . . . . . . . . . . . . . . . . . . . . . . . . . 504Auditing Configuration Changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . 505

Accessing the Configuration Audit Report . . . . . . . . . . . . . . . . . . . . . . . . 505The Configuration Audit Report . . . . . . . . . . . . . . . . . . . . . . . . . . . 506

Changing Passwords and IP Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . 507Changing Password References . . . . . . . . . . . . . . . . . . . . . . . . . . . 507Oracle WebLogic - Changing the Password for the IBM OpenPages and Workflow Accounts . . . . . . . 512IBM WebSphere - Changing the Password for the IBM OpenPages and Workflow Administrator Account . . 514Oracle WebLogic - Changing the Workflow Server Multicast IP Address. . . . . . . . . . . . . . 515Oracle Database - Updating the Oracle Enterprise Manager Database Control Tool . . . . . . . . . . 515Changing the IP Address of an Application Server . . . . . . . . . . . . . . . . . . . . . 516

Changing Database References . . . . . . . . . . . . . . . . . . . . . . . . . . . . 517Modify the Connection URL for the JDBC Data Source . . . . . . . . . . . . . . . . . . . 518Modify Database References in the Application Configuration Files . . . . . . . . . . . . . . . 520Modify Database Connection References for the Reporting Server . . . . . . . . . . . . . . . . 522

Working With Cluster Members . . . . . . . . . . . . . . . . . . . . . . . . . . . . 524Adding Vertical Cluster Members to an Existing Installation in an Oracle WebLogic Environment . . . . . 524Adding Vertical Cluster Members to an Existing Installation in an IBM WebSphere Environment . . . . . 538Adding Members to a Horizontal Cluster . . . . . . . . . . . . . . . . . . . . . . . . 551

Configuring Global Administration Security in IBM WebSphere . . . . . . . . . . . . . . . . . 552Enabling Global Administration Security . . . . . . . . . . . . . . . . . . . . . . . . 552Changing the IBM WebSphere Administrator User Account Password . . . . . . . . . . . . . . 556

SSL for OpenPages GRC Platform environments. . . . . . . . . . . . . . . . . . . . . . . 558Accessing the IBM OpenPages Application Using SSL . . . . . . . . . . . . . . . . . . . . 559SSL configuration for WebLogic Application Server. . . . . . . . . . . . . . . . . . . . . 559SSL configuration for WebSphere Application Servers . . . . . . . . . . . . . . . . . . . . 568SSL configuration for Microsoft Internet Information Services . . . . . . . . . . . . . . . . . 573SSL configuration for Apache Web Server . . . . . . . . . . . . . . . . . . . . . . . . 576SSL Configuration of the OpenPages Properties Files . . . . . . . . . . . . . . . . . . . . 578SSL configuration on AIX and Linux load balancer server . . . . . . . . . . . . . . . . . . 578SSL configuration for an Apache load balancer server in Windows environments . . . . . . . . . . . 581Modifying the LDAP configuration file for LDAP over SSL . . . . . . . . . . . . . . . . . . 583Renewing SSL Certificates for IBM OpenPages . . . . . . . . . . . . . . . . . . . . . . 585Renewing SSL Certificates for Cognos . . . . . . . . . . . . . . . . . . . . . . . . . 588Renewing SSL Certificates in an IBM HTTP Server Environment . . . . . . . . . . . . . . . . 591

Configuring HTTP Compression in OpenPages . . . . . . . . . . . . . . . . . . . . . . . 591Enabling or Disabling HTTP Compression on IBM OpenPages Application Servers . . . . . . . . . . 592Enabling or Disabling HTTP Compression on the Cognos Server . . . . . . . . . . . . . . . . 592

Using Log Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 595Configuring Application Thread-Dump Logs for Cluster Members . . . . . . . . . . . . . . . 595Configuring Extended Access Logging . . . . . . . . . . . . . . . . . . . . . . . . . 596IBM OpenPages Standard Application Server Log Files . . . . . . . . . . . . . . . . . . . 598Oracle WebLogic Administrative Server and Cluster Member Log Files . . . . . . . . . . . . . . 600IBM WebSphere DMGR Server, Node Agent, and Cluster Member Log Files . . . . . . . . . . . . 601Workflow Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 602Changing the size and number of backups of the aurora log file . . . . . . . . . . . . . . . . 604

Troubleshooting Browser Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . 605Microsoft Windows Internet Explorer Browser Issues . . . . . . . . . . . . . . . . . . . . 605CSV View Report Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 606Browser Locale Settings and Messaging Issues . . . . . . . . . . . . . . . . . . . . . . 606Browser Security Issues and Best Practices. . . . . . . . . . . . . . . . . . . . . . . . 606

xii IBM OpenPages GRC Platform Version 7.0.0: Administrator's Guide

Optimizing Application Performance in the Internet Explorer Browser . . . . . . . . . . . . . . 609Setting the Cognos Application Firewall (CAF) for Browser Security . . . . . . . . . . . . . . . 609Setting a Session Inactivity Timeout Value . . . . . . . . . . . . . . . . . . . . . . . . 610

Chapter 18. Starting and Stopping Servers. . . . . . . . . . . . . . . . . . . . 613Starting and Stopping OpenPages Application Servers. . . . . . . . . . . . . . . . . . . . . 613

About Services and Scripts Used by the OpenPages Application . . . . . . . . . . . . . . . . 613About Starting Application Servers . . . . . . . . . . . . . . . . . . . . . . . . . . 615Starting OpenPages in a Windows Environment . . . . . . . . . . . . . . . . . . . . . . 616Starting OpenPages in an AIX and Linux Environment . . . . . . . . . . . . . . . . . . . 617Stopping IBM OpenPages Application Servers . . . . . . . . . . . . . . . . . . . . . . 619Stopping OpenPages in a Windows Environment . . . . . . . . . . . . . . . . . . . . . 619Stopping OpenPages in an AIX and Linux Environment . . . . . . . . . . . . . . . . . . . 621

Starting and Stopping the Database Server . . . . . . . . . . . . . . . . . . . . . . . . 622Starting and Stopping the Database Server in a Windows Environment . . . . . . . . . . . . . . 622Starting and Stopping the Database Server in an AIX and Linux Environment . . . . . . . . . . . . 623

Starting and Stopping the Cognos Services . . . . . . . . . . . . . . . . . . . . . . . . 623Using the IBM Cognos Configuration Tool to Start and Stop the IBM Cognos Service . . . . . . . . . 623Using the Windows Operating System to Start and Stop the IBM Cognos Service. . . . . . . . . . . 624Using the AIX or Linux Operating System to Start and Stop IBM Cognos Service. . . . . . . . . . . 624Using the Windows Operating System to Start and Stop the OpenPages Framework Model Generator Service 625Using the AIX or Linux Operating System to Start and Stop the OpenPages Framework Model GeneratorService . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 625

Chapter 19. Migrating IBM OpenPages Environments . . . . . . . . . . . . . . . 627About Migrating IBM OpenPages Environments. . . . . . . . . . . . . . . . . . . . . . . 627Settings That Apply to Environment Migration . . . . . . . . . . . . . . . . . . . . . . . 627Supported Migration Items . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 628

About Exporting Dependencies . . . . . . . . . . . . . . . . . . . . . . . . . . . 629About Import Validation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 630Items Not Migrated . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 631Item Dependencies Not Migrated by Default . . . . . . . . . . . . . . . . . . . . . . . 633

Environment Migration Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . 633The Environment Migration Process . . . . . . . . . . . . . . . . . . . . . . . . . . . 634Exporting Configuration Items from the Source Environment . . . . . . . . . . . . . . . . . . 634Importing Configuration Items to the Target Environment . . . . . . . . . . . . . . . . . . . 635

Configuring Environment Migration to Allow Special Characters . . . . . . . . . . . . . . . . 636Validating the Migration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . 636Performing the Import for Environment Migration . . . . . . . . . . . . . . . . . . . . . 637

About Migration Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 639Log Summary Migration Report . . . . . . . . . . . . . . . . . . . . . . . . . . . 639Log Details Migration Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . 639

Chapter 20. Using the ObjectManager Tool. . . . . . . . . . . . . . . . . . . . 641About the ObjectManager Tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . 641Working With Loader Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 641

Understanding Loader File Naming Conventions . . . . . . . . . . . . . . . . . . . . . 641Creating a Data Loader File . . . . . . . . . . . . . . . . . . . . . . . . . . . . 642

Running ObjectManager Commands . . . . . . . . . . . . . . . . . . . . . . . . . . 643About the ObjectManager Command File . . . . . . . . . . . . . . . . . . . . . . . . 643ObjectManager Command Line Parameters . . . . . . . . . . . . . . . . . . . . . . . 643Interactive Command Line Loader File Syntax . . . . . . . . . . . . . . . . . . . . . . 644Batch Mode Loader File Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . 645Using ObjectManager to move objects . . . . . . . . . . . . . . . . . . . . . . . . . 646Using ObjectManager to rename objects . . . . . . . . . . . . . . . . . . . . . . . . 648

Modifying the ObjectManager Properties File. . . . . . . . . . . . . . . . . . . . . . . . 649Settings in the ObjectManager.properties File . . . . . . . . . . . . . . . . . . . . . . . . 650Controlling Data Load Behavior . . . . . . . . . . . . . . . . . . . . . . . . . . . . 655Managing Currency Exchange Rates. . . . . . . . . . . . . . . . . . . . . . . . . . . 656

About Updating Currency Exchange Rates . . . . . . . . . . . . . . . . . . . . . . . 656

Contents xiii

Importing Exchange Rates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 656Exporting All Currency Exchange Rates . . . . . . . . . . . . . . . . . . . . . . . . 657Enabling and Disabling Currencies . . . . . . . . . . . . . . . . . . . . . . . . . . 657

Importing and Exporting Currency Field Definitions . . . . . . . . . . . . . . . . . . . . . 658Importing Currency Field Definitions . . . . . . . . . . . . . . . . . . . . . . . . . 658Exporting Currency Field Definitions . . . . . . . . . . . . . . . . . . . . . . . . . 659

Importing and Exporting Computed Field Definitions . . . . . . . . . . . . . . . . . . . . . 659Importing Computed Field Definitions . . . . . . . . . . . . . . . . . . . . . . . . . 659Exporting Computed Field Definitions . . . . . . . . . . . . . . . . . . . . . . . . . 660

Migrating Configuration Changes Using the ObjectManager Tool . . . . . . . . . . . . . . . . . 661About Multi-deployment Environments . . . . . . . . . . . . . . . . . . . . . . . . 661About the Migration Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . 661Modifying ObjectManager Settings . . . . . . . . . . . . . . . . . . . . . . . . . . 662Migrating Configuration Changes . . . . . . . . . . . . . . . . . . . . . . . . . . 664

Chapter 21. Managing Workflows . . . . . . . . . . . . . . . . . . . . . . . . 669Starting Jobs from Objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 669

Starting a Job from an IBM OpenPages Object . . . . . . . . . . . . . . . . . . . . . . 669Monitoring Job Progress . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 669

Managing Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 670Accessing the Jobs Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 670About the Jobs Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 670Filtering Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 670Terminating Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 671

Managing Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 672Accessing the Tasks Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 672About the Tasks Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 672Filtering Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 672Reassigning a Task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 673

Managing Job and Task Attachments . . . . . . . . . . . . . . . . . . . . . . . . . . 674Managing IBM OpenPages Workflow Groups . . . . . . . . . . . . . . . . . . . . . . . 674Deploying a Business Calendar on the Workflow Server . . . . . . . . . . . . . . . . . . . . 675Configuring E-mail for Workflows . . . . . . . . . . . . . . . . . . . . . . . . . . . 675

Setting Up an E-Mail Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . 676Disabling Standard Task E-mails . . . . . . . . . . . . . . . . . . . . . . . . . . . 677

Using the Job Launch Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . 677About the Job Launch Manager Command File . . . . . . . . . . . . . . . . . . . . . . 678Job Launch Manager Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . 678Configuring the Job Launch Manager . . . . . . . . . . . . . . . . . . . . . . . . . 679

Remediating Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 684Overview of the Remediation Process . . . . . . . . . . . . . . . . . . . . . . . . . 684Setting Up Remediation Notifications and Actions . . . . . . . . . . . . . . . . . . . . . 684Remediating the Job in Error . . . . . . . . . . . . . . . . . . . . . . . . . . . . 687

Access the Job in Error in the Workflow Console . . . . . . . . . . . . . . . . . . . . . . 687Identify and Resolve the Error. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 688Reactivate the Nodes in Error . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 688

Alternate Methods for Accessing Jobs in Error in Workflow Console . . . . . . . . . . . . . . . 689Troubleshooting Workflows. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 689

Setting Up Job Remediation E-mails . . . . . . . . . . . . . . . . . . . . . . . . . . 689About Interstage BPM Studio Error Logs . . . . . . . . . . . . . . . . . . . . . . . . 690About IBM OpenPages Workflow Runtime Error Logs. . . . . . . . . . . . . . . . . . . . 691

Chapter 22. Using FastMap . . . . . . . . . . . . . . . . . . . . . . . . . . 693FastMap Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 693

About FastMap Templates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 694About the Data Validation Process . . . . . . . . . . . . . . . . . . . . . . . . . . 695About Localization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 695

Using FastMap to Import Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . 696Accessing FastMap to Import Data and View Status . . . . . . . . . . . . . . . . . . . . 696Importing a FastMap Data Load Template . . . . . . . . . . . . . . . . . . . . . . . . 696

xiv IBM OpenPages GRC Platform Version 7.0.0: Administrator's Guide

Resolving Validation Errors. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 697Understanding Validation Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . 697Troubleshooting the Conflict with Recent Updates Warning Message . . . . . . . . . . . . . . . 698Troubleshooting FastMap Validation Messages . . . . . . . . . . . . . . . . . . . . . . 698

Viewing Import Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 703Using the FastMap Import Status Report Window . . . . . . . . . . . . . . . . . . . . . 703Understanding Import Status Messages. . . . . . . . . . . . . . . . . . . . . . . . . 704

Creating FastMap Import Templates . . . . . . . . . . . . . . . . . . . . . . . . . . . 705About the Data Exported to a Workbook . . . . . . . . . . . . . . . . . . . . . . . . 705An Overview of the FastMap Import Process . . . . . . . . . . . . . . . . . . . . . . . 706

Working With Data Load Worksheets . . . . . . . . . . . . . . . . . . . . . . . . . . 707Defining Paths for Objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 707Using Special Column Headings . . . . . . . . . . . . . . . . . . . . . . . . . . . 707Defining Property Fields for Objects . . . . . . . . . . . . . . . . . . . . . . . . . . 708Guidelines for Entering Object Data into Templates. . . . . . . . . . . . . . . . . . . . . 709About Adding Custom Columns and Worksheets . . . . . . . . . . . . . . . . . . . . . 710Sample Worksheets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 710

Using the Definition Worksheet . . . . . . . . . . . . . . . . . . . . . . . . . . . . 713About the Definition Worksheet . . . . . . . . . . . . . . . . . . . . . . . . . . . 714Unhiding a Definition Worksheet . . . . . . . . . . . . . . . . . . . . . . . . . . . 714

Configuring FastMap. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 714About FastMap Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 714About Export Templates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 715FastMap Parameters for Importing and/or Exporting Data . . . . . . . . . . . . . . . . . . 716Configuring a Lookup Key for FastMap . . . . . . . . . . . . . . . . . . . . . . . . 722Optimizing FastMap Performance . . . . . . . . . . . . . . . . . . . . . . . . . . 723Configuring Security and Cleanup for FastMap Import Templates . . . . . . . . . . . . . . . . 725

AFCON-generated FastMap Template Best Practices . . . . . . . . . . . . . . . . . . . . . 726

Appendix A. The Notification Manager. . . . . . . . . . . . . . . . . . . . . . 727Overview of the Notification Manager . . . . . . . . . . . . . . . . . . . . . . . . . . 727

Why would I use Notifications? . . . . . . . . . . . . . . . . . . . . . . . . . . . 727About Using the Notification Manager . . . . . . . . . . . . . . . . . . . . . . . . . . 727

Exploring the Notification Reports . . . . . . . . . . . . . . . . . . . . . . . . . . 727Requirements for Setting Up a Notification . . . . . . . . . . . . . . . . . . . . . . . 728Tasks for Setting Up a Notification . . . . . . . . . . . . . . . . . . . . . . . . . . 728Results of Running a Notification Report . . . . . . . . . . . . . . . . . . . . . . . . 728

Setting Up a Notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 728Task 1: Prepare Your Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 728Task 2: Create the Notification. . . . . . . . . . . . . . . . . . . . . . . . . . . . 729Task 3: Trigger the Notification . . . . . . . . . . . . . . . . . . . . . . . . . . . 739

Appendix B. Installing and Configuring HTTP Compression . . . . . . . . . . . . 743Installing HTTP Compression . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 743Configuring HTTP Compression . . . . . . . . . . . . . . . . . . . . . . . . . . . . 743

Appendix C. Legacy Reporting Framework Generation Settings. . . . . . . . . . . 747About Namespaces in the Legacy Reporting Framework . . . . . . . . . . . . . . . . . . . . 747Defining a New Non-Default Namespace in the Legacy Reporting Framework . . . . . . . . . . . . 748

About Legacy Reporting Framework Custom Namespace Names . . . . . . . . . . . . . . . . 748Adding a New Non-Default Namespace to the Legacy Reporting Framework . . . . . . . . . . . . 748

Editing an Existing Legacy Reporting Framework Namespace . . . . . . . . . . . . . . . . . . 750

Appendix D. Non-Role Based Access Control . . . . . . . . . . . . . . . . . . 751About Non-Role Based Access Controls . . . . . . . . . . . . . . . . . . . . . . . . . 751Using ACLs with Top-Level Folders . . . . . . . . . . . . . . . . . . . . . . . . . . . 751The Object Folder Structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 751Accessing the Access Control Page . . . . . . . . . . . . . . . . . . . . . . . . . . . 752Using Inheritance with Access Control Lists . . . . . . . . . . . . . . . . . . . . . . . . 752

Breaking Inheritance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 753

Contents xv

Creating a New ACL on a Folder. . . . . . . . . . . . . . . . . . . . . . . . . . . . 754Editing an Existing ACL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 754Deleting an Existing ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 755Using Groups to Establish User Roles . . . . . . . . . . . . . . . . . . . . . . . . . . 755

The "Core" IBM OpenPages Governance Platform 5.1x (and earlier) Groups . . . . . . . . . . . . 755Example: Using Groups to Establish User Roles . . . . . . . . . . . . . . . . . . . . . . 756

Using Groups to Limit User Activities . . . . . . . . . . . . . . . . . . . . . . . . . . 756The Executive Team . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 757The Regional Teams . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 757The Site Teams . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 758

Using Nested Groups to Limit User Scope. . . . . . . . . . . . . . . . . . . . . . . . . 758Task 1: Breaking Folder Inheritance . . . . . . . . . . . . . . . . . . . . . . . . . . 758Task 2: Nesting Your User Groups . . . . . . . . . . . . . . . . . . . . . . . . . . 759Task 3: Setting Folder Access Control Lists . . . . . . . . . . . . . . . . . . . . . . . 760

Using Group ACLs to Traverse Business Entities . . . . . . . . . . . . . . . . . . . . . . 761

Appendix E. Using the DataMart Reporting Schema . . . . . . . . . . . . . . . . 763Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 763Configuring the Reporting Metadata . . . . . . . . . . . . . . . . . . . . . . . . . . 763

Configuration Tables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 763Reporting Schema Scripts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 764Customizing the Reporting Schema Configuration . . . . . . . . . . . . . . . . . . . . . 765Supported Macro Keywords . . . . . . . . . . . . . . . . . . . . . . . . . . . . 765Populating the Reporting Schema . . . . . . . . . . . . . . . . . . . . . . . . . . 766Exporting Data to the Reporting Database Instance . . . . . . . . . . . . . . . . . . . . . 769

Appendix F. Troubleshooting and support for IBM OpenPages GRC Platform . . . . . 771Techniques for troubleshooting problems . . . . . . . . . . . . . . . . . . . . . . . . . 771Searching knowledge bases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 773Getting fixes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 774Contacting IBM Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 774Exchanging information with IBM . . . . . . . . . . . . . . . . . . . . . . . . . . . 775

Sending information to IBM Support . . . . . . . . . . . . . . . . . . . . . . . . . 775Receiving information from IBM Support . . . . . . . . . . . . . . . . . . . . . . . . 776

Subscribing to Support updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . 776Known problems and solutions for visualizations . . . . . . . . . . . . . . . . . . . . . . 777

Rendering a visualization generates "Stop running this script?" error message . . . . . . . . . . . . 777Cannot read labels on a Business Entity diagram . . . . . . . . . . . . . . . . . . . . . 778Diagrams cannot be rendered during Active Reporting Periods. . . . . . . . . . . . . . . . . 778

Appendix G. Best practices for configuring the IBM OpenPages GRC Platform . . . . 781Use short field names and field group names. . . . . . . . . . . . . . . . . . . . . . . . 781Limit the number of objects in views . . . . . . . . . . . . . . . . . . . . . . . . . . 781Limit the number of associations in the Overview . . . . . . . . . . . . . . . . . . . . . . 782Limit activity views with field dependencies and dependent picklists . . . . . . . . . . . . . . . 782Be aware of shared field groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . 783Eliminate unused object type relationships . . . . . . . . . . . . . . . . . . . . . . . . 783Display reporting fragments only on demand . . . . . . . . . . . . . . . . . . . . . . . 784Display Cognos reports on home page tabs . . . . . . . . . . . . . . . . . . . . . . . . 784Set a minimal starting group for display types . . . . . . . . . . . . . . . . . . . . . . . 785

Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 787

Glossary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 791

Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 793

xvi IBM OpenPages GRC Platform Version 7.0.0: Administrator's Guide

Document Release and Update Information

This topic lists information about this document and where updates to thisdocument can be found.

Document Release Information

Software Version: 7.0

Document Published: December 2013

Documentation Updates

Supplemental documentation is available on the web. Go to the IBM OpenPages

GRC Platform Information Center (http://pic.dhe.ibm.com/infocenter/op/v7r0m0/index.jsp).

xvii

http://pic.dhe.ibm.com/infocenter/op/v7r0m0/index.jsphttp://pic.dhe.ibm.com/infocenter/op/v7r0m0/index.jsp

xviii IBM OpenPages GRC Platform Version 7.0.0: Administrator's Guide

Chapter 1. Introduction

This document is intended for use with IBM OpenPages GRC Platform. Theinformation includes instructions for maintaining, configuring, and administeringthe IBM OpenPages GRC Platform application.

Topics that are covered include user and group administration, database backupand restoration, customizing the applications look and feel, using the data loadercapabilities, and more.

Audience

This document is intended for use by OpenPages administrators. An administratormust have a background in Systems Management.

Finding information

To find IBM OpenPages GRC Platform product documentation on the web,including all translated documentation, access the IBM OpenPages GRC PlatformInformation Center (http://pic.dhe.ibm.com/infocenter/op/v7r0m0/index.jsp).Release Notes are published directly to the Information Center, and include linksto the latest technotes and APARs.

Accessibility features

Accessibility features help users who have a physical disability, such as restrictedmobility or limited vision, to use information technology products.

IBM HTML documentation has accessibility features. PDF documents aresupplemental and, as such, include no added accessibility features.

Database tool information

The IBM OpenPages GRC Platform supports both the IBM DB2 database and theOracle Database.v To run IBM OpenPages SQL scripts, you must use CLPPlus with IBM DB2, and

SQL*Plus with Oracle Database.v To run queries, you can use any SQL tool that is compatible with the database.

For example, you could use CLPPlus or Optim Development Studio to runqueries on the IBM DB2 database.

Documentation conventions

To illustrate screen displays, menu items, product displays, information that youenter, the following typographic conventions are used:

Table 1. Typographic conventions used in this document

Convention Meaning

KEYWORD Keywords of SQL or some other programming languages andenvironment variables are displayed in uppercase letters in aserif font.

1

http://pic.dhe.ibm.com/infocenter/op/v7r0m0/index.jsphttp://pic.dhe.ibm.com/infocenter/op/v7r0m0/index.jsp

Table 1. Typographic conventions used in this document (continued)

Convention Meaning

italics

< text>

Variables that represent an object or entity that you replacewith specific information.Note: To avoid confusion, in some situations, angle bracketsenclose variables.

bold Names of interface elements (such as icons, menu items, andbuttons) are displayed in bold.

monospace Information that the product displays and information that youenter is displayed in a monospace typeface.

> This symbol indicates a menu item. For example,"Administration > Profiles" means choose the Profiles itemfrom the Administration menu.

The installation directory is the location of product artifacts after a package,product, or component is installed. The following table lists the conventions thatare used to refer to the installation location of installed components and products.

Table 2. Typographic conventions for installation directories

Directory Meaning

OP_Home The installation directory where OpenPages GRC Platform isinstalled.

For example:

v on Microsoft Windows operating systems: c:\OpenPagesv on AIX and Linux operating systems: /opt/OpenPages

Workflow_Home The installation location of the Fujitsu Interstage BPM server.

For example:

v on Windows operating systems, C:\Fujitsu\InterstageBPMv on AIX and Linux operating systems, /opt/Fujitsu/

InterstageBPM

ORACLE_Home The installation location of the Oracle database server.

For example, if you purchased Oracle database software fromIBM and the database and application servers are on the samemachine:

v on Windows operating systems, C:\openpages_data\repository\server112_se_x64\software

v on AIX and Linux operating systems, /opt/oracle/openpages_data/server112_se_x64/software

DB2_Home The installation location of the DB2 software.

For example:

v on Windows operating systems, C:/IBM/SQLLIBNote: Directory names that contain spaces, such as ProgramFiles, are not supported.

v on AIX and Linux operating systems, /home/db2inst1/sqllib

2 IBM OpenPages GRC Platform Version 7.0.0: Administrator's Guide

Table 2. Typographic conventions for installation directories (continued)

Directory Meaning

Cognos_Home The installation location of Cognos Business Intelligence.

For example:

v on Windows operating systems, C:\OpenPages\Cognos\cognos\c10_64

v on AIX and Linux operating systems, /opt/OpenPages/Cognos/cognos/c10_64

JAVA_Home The installation location of your Java Runtime Environment(JRE) or your Java Development Kit (JDK).

JDK example:

v on Oracle WebLogic Server, C:\Program Files\java\jdk1.6.0_24

v on IBM WebSphere Application Server: on Windows operating systems, C:\IBM\WebSphere\

AppServer\java

on AIX and Linux operating systems,/opt/IBM/WebSphere/AppServer/java

JRE example:

v on Oracle WebLogic Server, C:\OpenPages\jrev on IBM WebSphere Application Server:

on Windows operating systems, C:\IBM\WebSphere\AppServer\java\jre

on AIX and Linux operating systems,/opt/IBM/WebSphere/AppServer/java/jre

CommandCenter_Home

CC_Home

The installation location of OpenPages CommandCenter.

For example:

v on Windows operating systems, C:\OpenPages\CommandCenterv on AIX and Linux operating systems, /opt/OpenPages/

CommandCenter

Whats new in IBM OpenPagesKnowing what features are new, changed, deprecated, or removed helps you planyour upgrade and deployment strategies and the training requirements for yourusers. This topic lists the new features in IBM OpenPages GRC Platform version7.0.0.

Visualizations

As a Risk analyst or Compliance manager, you can graphically render yourbusiness process and communicate it to other users of risk analysis.

You can create interactive visualizations to communicate information about theprocess flows and the Business Entity hierarchical structure.

The following are the new visualization object types:v Process Diagramv Data Input

Chapter 1. Introduction 3

v Data Output

For more information, see Chapter 6, Business Process Visualizations, on page105.

Security rules

Use security rules to define a more granular control over the access to individualobjects in a folder. For example, two GRC domains share a common organizationalhierarchy. They share some common object instances, such as processes, but theydo not want to share other object instances, such as risks and controls. If you donot create security rules on objects, folder-based security applies.

For more information, see Chapter 3, Security, on page 37.

Grid view

The grid view allows you to select how information about an object is displayedby selecting an option from the View selector. Options include the ability todisplay objects that match the selected filter or the folder view of an object. Select agrid view to display information about more than one object. From the grid view,you can add a new item and update one or more items.

You can use the Bulk Update feature to update multiple objects in the grid viewduring one editing session. For example, you can update all objects assigned toUser A and assign them to User B.

Filtered List views and Folder views have been consolidated with the new gridviews.

For more information, see Grid views on page 241.

Info Card

The Info Card is displayed when you hover over an object. The card allows you toquickly understand and review an object definition.

The Info Card is available from the grid view.

New multi-selector actor field types

New field types allow you to select multiple actors when selecting users, usergroups, or both users and user groups.

Orphan system field

The new Orphan system field allows you to see and filter on the objects with noparents. You can also filter on objects that have parents but do not have a path to abusiness entity.

IBM OpenPages SDK

A new OpenPages SDK allows users to programmatically access and manipulateOpenPages platform data. This offering includes an OpenPages REST API and JavaAPI. working samples that demonstrate typical use cases, and referencedocumentation to help you understand and use the APIs.

4 IBM OpenPages GRC Platform Version 7.0.0: Administrator's Guide

The following OpenPages API documents were added in this release and they areavailable from your installation.v IBM OpenPages GRC Platform API Javadocv IBM OpenPages GRC Platform REST API Reference Guidev IBM OpenPages GRC Platform Trigger Developer Guide

What's changed in IBM OpenPagesListed below are features that are changed in version 7.0.0 of IBM OpenPages GRCPlatform.

Changes to the user interface

From the home page, you can filter objects to display only those items that meetyour requirements, sort information based on a column, and perform mostfunctions from the home page.

Improved icons make it easier for you to identify the commands that you need. Toview the updated icons, users must clear their web browser's cache afterupgrading to version 7.0.0.

Changes to menus

The contents of the Administration, Reporting, and MyOpenPages menus havebeen reorganized.

The Workflow Console is available on the Administration menu. The WorkflowConsole was formerly called the IBPM Console.

Changes to the configuration of the menu bar do not take effect immediately. Thenext time that you log in, you will see the changes that you have made to themenus.

Page size setting for Filtered List views

The Page Size setting for Filtered List views is no longer required to be used andis ignored. Instead IBM OpenPages will load rows as you scroll through theFiltered List view.

Actor fields

Actor fields can now be Field Dependency controllers.

Object views

You can now change the order of Detail and Activity object views.

Filters

Quick Filter and Advanced Filter have been consolidated. When you press Enter,the Quick Filter is applied.

Chapter 1. Introduction 5

Some actions take effect immediately

Some actions, such as View Selection and Reporting Period, take effectimmediately when you select them. You are no longer required to click Go or View.

Paginate Actor Tables and Use Actor Search Only settings are nolonger required

There are no longer two possible interfaces used for selecting user lists and grouplists in the administration user interface. Where the type-ahead search andfilterable listing of users or groups were available, you have the option of selectingusers or groups.

The Paginate Actor Tables and Use Actor Search Only settings under/OpenPages/Applications/Common/Administration/Users and Groups are nowignored and are treated as though their values are always true.

To control the number of rows listed per page, use the Page Size setting under/OpenPages/Applications/Common/Administration/Users and Groups.

About the IBM OpenPages GRC PlatformThe IBM OpenPages GRC Platform serves as the foundation for a company'senterprise risk management (ERM) efforts by unifying enterprise-wide risk andcompliance initiatives into a single management system. With solutions for IBMOpenPages Financial Controls Management, IBM OpenPages Operational RiskManagement, IBM OpenPages IT Governance, IBM OpenPages Policy andCompliance Management, and IBM OpenPages Internal Audit, the IBM OpenPagesGRC Platform provides a modular and integrated approach to governance, riskand compliance.

Each component provides a highly configurable capability that supports yourspecific methodology, without having to write custom code, whether in loss events,KRI or any other solution component. The result is that companies can embed riskmanagement into the business and improve outcomes over time.

IBM OpenPages GRC Platform Modules

The IBM OpenPages GRC Platform consists of multiple modules.v IBM OpenPages Financial Controls Management (FCM) provides automated

assessment, testing, and certification processes to standardize and manageSarbanes-Oxley (SOX) compliance enterprise-wide.

v IBM OpenPages Operational Risk Management (ORM) provides a fullyintegrated operational risk solution, including risk control self-assessments(RCSAs), key risk Indicators, (KRIs), loss event data management, and advancedreporting and business intelligence with IBM Cognos finance integrated riskmanagement. Dashboard components are available to provide an enterprise-wideview of risk across the business and manage Basel II AMA compliance in thebanking industry.

v IBM OpenPages IT Governance (ITG) provides a risk-based, policy-drivenapproach to managing risk and compliance initiative for the IT organization.

v IBM OpenPages Policy and Compliance Management (PCM) provides anintegrated solution for reducing the complexity of complying with numerousindustrial, ethics, privacy, and government regulatory mandates.

6 IBM OpenPages GRC Platform Version 7.0.0: Administrator's Guide

v IBM OpenPages Internal Audit Management (IAM) provides an integratedaudit management solution to manage the full life cycle of internal audits.

How the IBM OpenPages GRC Platform Can HelpThe IBM OpenPages GRC Platform application provides many capabilities tosimplify and centralize compliance and risk management activities.

Shared Content Management and Common Repositoryv Logically presents processes, risks and controls in many-to-many and shared

relationships at multiple levels that can be configured to your business processesv Supports importing existing corporate data and maintains a complete audit trail

and version historyv Ensures consistent regulatory enforcement and monitoring across multiple

regulations.

Dynamic Decision Support with Cog