Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
1 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Effectively Deploying and Managing Business Intelligence Implementations Nick Tuson Senior Director, BI Product Management - Oracle The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle Corporation. 3 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Program Agenda Product Architecture Commissioning BI Maintaining BI Service Levels Maintaining BI Security Policy Commissioning Applications 4 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Oracle Business Intelligence 11g Architecture Commission Commission Applications BI Platform Maintain Service Levels Maintain Security Policy 5 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template BI 11g Product Architecture Significant TCO Improvements Extensive use of Oracle technology stack WebLogic used as application server Enterprise Manager used for systems management Introduction of OPMN for BI System components Centralized configuration management – Modify on central server, propagate to other servers Horizontal and vertical scale out procedures Security – Oracle Platform Security Services (OPSS) Scriptable systems management and control 6 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Leverage FMW Technologies WLS (Web Logic Server) – Application server – Required on every OBIEE machine OPMN (Oracle Process Management Network) – Used for distributed process start / stop / restart – Process recovery (optional), Process ‘Ping’ – Managed via EM – Can also be used for performance collection (DMS) – Required on every OBIEE machine 7 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Leverage FMW Technologies DMS (Dynamic Monitoring System) – Standard FMW performance data collection format – Allows collection of current / historic data – Can be persisted to database ODL (Oracle Diagnostic Logging) – Defines standard FMW Logging content and format – Defines mechanisms for analysing diagnostics across s/w components and systems / Support for ECID (transaction ID) 8 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Leverage FMW Technologies OPSS (Oracle Platform Security Services) – Authentication Service / Authorization Service – Policy Management Service (Policy Store) – User and Role Management Service (Identity Store) – Credential Storage Service (CSF)* CSF (Credential Store Framework) – CSF provides secure handling of credentials used in BI system – looking at SSL certificates 9 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Leverage FMW Technologies OPATCH / OPACK – Standard Oracle patching mechanism – Silent or attended – integrated with EM – Support for BI Apps UA (Upgrade Assistant) – Standard oracle approach to simplify upgrade / rollback of patches 10 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Architecture - Terminology Oracle BI Domain – The overall Oracle BI EE system WebLogic Domain - A set of WebLogic instances servicing one or more J2EE applications Admin Server (WebLogic) – Provides management of both the WebLogic and BI Domain. A WebLogic Domain contains one Admin Server Managed Server (WebLogic) – Contains deployed J2EE BI application components 11 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Architecture - Terminology Node Manager (WebLogic) – A daemon process that provides remote server start, stop and restart capabilities in addition to monitoring Oracle BI System Components – BI Server, Presentation Server, Scheduler, Cluster Controller and Java host Oracle BI J2EE Components – BI Publisher, BI Office, Action Framework Service, BI SAW Bridge Plugin, Security, Web Services for SOA 12 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Oracle BI Architecture – Simple Install 13 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Oracle BI Architecture – Enterprise Install 14 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Oracle BI Clustering Architecture Oracle BI Domain Server 1 Server 2 WebLogic Domain BI Office BI Publisher Web Service SOA BI Plugin Security Managed Server | Cluster Node 2 Action Service Web Service SOA BI Office BI Publisher BI Plugin Security Admin Server Admin Server Admin Console Admin Console Enterprise Mgr Enterprise Mgr BI System Component Cluster Oracle BI System Components BI Server BI Scheduler Oracle BI System Components Presentation Server OPMN 15 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Java Host Cluster Controller BI Server BI Scheduler OPMN Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Presentation Server Java Host Cluster Controller Node Manager Action Service Node Manager Managed Server | Cluster Node 1 Oracle Business Intelligence 11g Lifecycle Commission BI Commission Applications BI Platform Maintain Service Levels Maintain Security Policy 16 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Installation Process And Options Roadmap to installation – Read the release notes and doc (twice) – Is machine DHCP? If YES, then install loopback adapter – Download files (‘shiphome’) – Unpack to required location – Run RCU to create schemas – Run installer Install required files Configure 17 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Installation Process And Options Repository Creation Utility (RCU) – This is used to create the supporting database schemas required by Oracle Fusion Middlware – Oracle BI EE has a single schema that is prompted for during install. This includes the scheduler and BI scorecard schemas and others. RCU also selects an MDS schema to be created. – Independent of the main Oracle BIEE install process – Unzip distribution file and run : \bin\rcu.bat (Win) or \bin\rcu script (Linux) 18 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Repository Creation Utility 19 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Installation Procedure and Options Install Options – Simple Easiest way to install Oracle BIEE – WLS Admin Server Only – Enterprise Adds more options, e.g. Ports and Oracle Home names Used for creating a new install Performing a horizontal scale out to another machine – Software Only Used for advanced configuration, only ‘file copy’ of install Separate configuration phas Used with Exalytics and BI Apps Installations 20 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Install Technology Oracle Inventory Oracle Universal Installer (OUI) – Unified installer across Oracle products. – Sophisticated framework – Pre-req checks – Supports Inventory – Supports silent install – Supports ‘standalone’ and ‘advanced’ install – Operates in an ‘Interview’ style 21 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Oracle Universal Installer 22 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Oracle Universal Installer 23 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Configuration Utility – Scale Out 24 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Configuration Utility – Scale Out 25 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Configuration Phase 26 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Oracle Business Intelligence 11g Lifecycle Commission BI Commission Applications BI Platform Maintain Service Levels Maintain Security Policy 27 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Virtualization 28 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Deployment Options 29 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Deployment Options For BI Availability Active / Active – Admin Server Failover Option Active / Passive (CFC) Enterprise Deployment Guide Disaster Recovery 30 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template High Availability for Oracle BI Oracle BI EE achieves high availability through – Process replication – Highly available storage (database and shared file system) To provide a highly available system, BI EE requires the following external services: – A fault tolerant HTTP load balancer – A highly available shared file system – A highly available database for Oracle BI Scheduler and fact tables The following system components must be replicated (have at least two instances): 31 – Presentation Services – Cluster Controller – Oracle BI Scheduler – BI Server – JavaHost Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template High Availability for Oracle BI The following persistent data sources must be placed on the highly available shared file system: – RPD publishing directory: The server metadata is contained in the repository file (.rpd file) that is local to each BI Server. One BI Server is designated as a Master. Online changes to the rpd file are made on the Master BI Server, and these changes are replicated to other members of the cluster. – Oracle BI Presentation Catalog – Global cache (optional, but advisable for higher performance). The global cache capability offers support for a common query cache that stores cache seeding and purging events. The global cache is visible to all BI Servers in the cluster. – Scheduler scripts 32 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template High Availability for Oracle BI A WebLogic cluster with at least two members is required to host the Oracle BI EE Java components such as the Oracle BI Presentation Services Plug-in and the authentication service. 33 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template WebTier WLS Java Components OBIEE System Components 34 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Active - Active An Active-Active system deploys two or more active system instances All instances handle requests concurrently Advantages: – Provides High Availability – Minimal System Downtime – Highly Scalable Architecture Disadvantages: – Requires a Load Balancer – Requires Shared Storage 35 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Active – Active WLS Admin Server Failover – Default deployment as a singleton – Not essential for WLS managed server availability – Can be deployed on shared storage to enable failover Procedure documented in Enterprise Deployment Guide 36 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Active - Passive (Cold Failover Cluster) An Active-Passive system deploys an active instance that handles requests and a passive instance that is on standby. Also known as a Cold Failover Cluster Advantages: – Increased Availability over Single Instance – Less Costly than Active-Active – Load Balancer not required Disadvantages: – Not as scalable as Active-Active – Longer Downtime than Active-Active 37 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Active / Passive (Cold Failover Cluster) 38 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Enterprise Deployment Guide The Enterprise Deployment Guide (EDG) defines an architectural blueprint that captures Oracle's recommended best practices for a highly available and secure Oracle Business Intelligence deployment The best practices described in this blueprint use Oracle products from across the technology stack, including Oracle Database, Oracle Fusion Middleware, and Oracle Enterprise Manager Fusion Middleware Control 39 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Enterprise Deployment Diagram (EDG) • Documented Best Practice • • • • Database Security Middle tier Cluster Firewall Configuration • Tested by Oracle 40 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Disaster Recovery It is different to High Availability Protection of services in cases of natural disaster Typically at an alternative geographic location May be fewer services or resources at standby site Relies on shared storage and replication – Synchronize the Application Tier after changes and patching – Synchronize the DB Tier (RCU schemas) 41 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Disaster Recovery 42 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Enterprise Management and Lifecycle Comprehensive Support in Enterprise Manager Unified systems management – Across all components / entire lifecycle Performance monitoring & tuning – Diagnostics & troubleshooting – Across single instance & clusters – 1-click scale-out & online clustering – Dynamic capacity management Lifecycle and Management 43 – Develop, test, deploy – Scale-out & tune – Patch & upgrade cycles Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template 44 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Oracle BI EE Management Pack Key benefits Reduce Costs • Automated discovery and tracking of Business Intelligence components and configurations • Reduce mean time to resolution Improve Service Levels • Proactive monitoring of end-user performance and availability • Monitor key performance indicators and metrics Align with Business Demands • Make optimization decisions based on clearly defined KPI’s • Create Service Level Agreements and Dashboards 45 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Oracle BI EE Management Pack Manage your OBIEE11g/Exalytics environment • New OBIEE11g target types with home pages • BI Instance, BI Presentation Server, BI Cluster Controller, BI Java Host, BI Scheduler, BI Server • Essbase Server, Essbase Application • Guided discovery for Stand-alone or Exalytics deployments • Process Control for Instances & Components • HA recommendations based on current setup 46 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Oracle BI EE Management Pack Track and Diagnose • Log viewer integration • Search and diagnose across your BI or Exalytics instance • Log file monitoring • Set thresholds on custom patterns in BI log files • Configuration Management • View, Search and compare configurations between components and across instances • Dashboards reports for usage and failures • Scheduler reports for failed and scheduled jobs 47 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Fusion Middleware Control Demonstration 48 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Oracle Business Intelligence 11g Lifecycle Commission BI Commission Applications BI Platform Maintain Service Levels Maintain Security Policy 49 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Oracle BI Security Integration with Identity Management Strong security – Comprehensive SSL – Encrypted metadata catalog – Report encryption, watermarking & signing Authentication & Single Sign-On – Integrates with corporate directories / SSO – Externalizes authentication – Easy to configure & setup Application roles & authorization 50 – Comprehensive set of application roles – Externalized for all metadata & data – Flexible authorization model Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Oracle Platform Security Services (OPSS) Standards-based, portable, integrated, enterprise-grade security framework for Java applications Underlying security platform that provides security to Oracle Fusion Middleware Abstraction layer in the form of standards-based programming interfaces (APIs) that insulate applications from security infrastructure 51 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template <Insert Picture Here> What security mechanisms do we support? http://www.oracle.com/technetwork/middleware/ias/ downloads/fusion-certification-100350.html http://www.oracle.com/technetwork/middleware/bienterprise-edition/bi-11gr1certmatrix-166168.xls 52 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Application Roles 53 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Roles Users Application Roles / Policies Oracle Business Intelligence LDAP Groups Identity Store Users Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Application Role Mappings in EM 54 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Multi-Tenancy 55 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template The High-Level Vision for Multi-Tenancy Functionality in Oracle BI Enable Oracle BI customers to provide Oracle BI as part of a SaaS offering to their own internal or external customers. Customers need to be able to service multiple, distinct tenants through one deployment of BI. These deployments typically have very large numbers of end users (sometimes hundreds of thousands) and service a large number of ‘tenant’ customers (sometimes hundreds of thousands). In a multi-tenant deployment, each tenant should have access to end-user BI functionality whilst being unaware and unaffected by the presence of other tenants within their environment. 56 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Multi-Tenancy Support in BI 11.1.1.7 - What it does do The webcat is made ‘Tenant-aware’ meaning that tenants can be provisioned - a special Tenant folder is created that only members of that tenant (plus global administrators) can see. The TENANTGUID session variable can be used as necessary (e.g. to provide context for data-level security in the RPD) Front-end functionality is isolated by tenant 57 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Multi-Tenancy In The Web Catalog 58 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template 11.1.1.7.0 Multi-Tenancy Functionality A Global Administrator is provisioned as well as a Tenant Administrator Use of Answers, Dashboards and Delivers isolated by Tenant Tenant provisioning functionality Tenant audit logs Tenant backup and restore Set query limits by tenant Tenant-specific global header and getting started sections Provide the ability to disable functionality in the user interface options while retaining the ability to access the same functionality programmatically through API 59 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template 11.1.1.7.0 Multi-Tenancy Limitations No tenant access to RPD and limited access to admin functionality No tenant functionality in Essbase, RTD, BI Publisher, Scorecard or Market Segmentation No tenant access to direct database requests Limited methods for selecting tenant-specific data sources or credentials to connect to data sources No tenant-specific Application Roles No Catalog Groups 60 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Oracle Business Intelligence 11g Lifecycle Commission BI Commission Applications BI Platform Maintain Service Levels Maintain Security Policy 61 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Questions [email protected] 62 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template Graphic Section Divider 63 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template 64 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification from Slide 12 of the corporate presentation template
© Copyright 2025