You are on page 1of 11

Maintaining Roles and Authorizations in BI7.

0 RSECADMIN

Applies to:
SAP Business Intelligence 7.0. For more information, visit the Business Intelligence homepage.

Summary
This paper will take you through the BI 7.0 Roles and Authorization related technical specifications using transaction RSECADMIN. The document will cover Maintaining Authorization objects, Assigning Authorizations to Users & Roles. Author: Soumyadeep Guha

Company: Patni Computer System Ltd. Created on: 1 September 2009

Author Bio
Soumyadeep Guha is a BI Consultant working in Patni Computer System Ltd.. Soumyadeep has got a working expreince of more than 23 months in SAP-BI 7.0 , SAP BI 3.5 & SAP ABAP.

SAP COMMUNITY NETWORK 2009 SAP AG

SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com 1

Maintaining Roles and Authorization in BI 7.0 - RSECADMIN

Table of Contents
Introduction to Roles and Authorizations in BI7.0 .............................................................................................. 3 Transactions Used .......................................................................................................................................... 3 Creating Roles and Authorization objects ....................................................................................................... 3
Creating Authorization objects ..................................................................................................................................... 3 Creating Roles ............................................................................................................................................................. 7

Related Content ................................................................................................................................................ 10 Disclaimer and Liability Notice .......................................................................................................................... 11

SAP COMMUNITY NETWORK 2009 SAP AG

SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com 2

Maintaining Roles and Authorization in BI 7.0 - RSECADMIN

Introduction to Roles and Authorizations in BI7.0


The Roles and Authorization maintained in BI7.0 provides a restriction on accessing reports based on infocube level, Characteristics level, Characteristics Value level, Key Figure level, hierarchy Node Level. The above mentioned restrictions are maintained by using this below mentioned approach; Authorizations are maintained in authorization objects. Roles contain the Authorizations. Users are assigned to roles.

Transactions Used Infoobject Maintenance Role Maintenance RSD1. PFCG

Roles and Authorization maintenance - RSECADMIN.


Note: A Characteristic object should be Authorization Relevant to make it available for restrictions. To make a characteristics object, Authorization Relevant; Go to Business Explorer tab in Info object details. Without making an object Authorization relevant checked, we cannot use it or include it into the Authorization Object.

Creating Roles and Authorization objects Creating Authorization objects Step 1: Transaction RSECADMIN -> Go to Tab Authorizations -> Maintenance.

Step 2: Create an Authorization Object.

SAP COMMUNITY NETWORK 2009 SAP AG

SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com 3

Maintaining Roles and Authorization in BI 7.0 - RSECADMIN

Step3: Click on Insert Special Characteristics

0TCAACTVT

Activity in Analysis Authorizations

0TCAACTVT Grant authorizations to different activities like to change and Display, Default value is 03 Display. 0TCAIPROV Authorizations for InfoProvider

0TCAIPROV Grant authorization to particular InfoProviders, Default value is * . 0TCAVALID Validity of an Authorization

0TCAVALID Define when authorizations are valid or not valid, Default Value is * . Step 4: Include rows in the Authorization Structure. Add 0TCAKYFNM (Grant authorization to particular key figures) and authorization relevant objects on which we want to implement the restrictions.

SAP COMMUNITY NETWORK 2009 SAP AG

SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com 4

Maintaining Roles and Authorization in BI 7.0 - RSECADMIN

Step 5: After including the Objects click on Node to edit the Values as per your requirements for both Value Restrictions and Hierarchy restrictions (If Present).
Note: In this step you can choose either restricting on Values or Hierarchy nodes. The below screen shots will explain you how to do achieve these restrictions one by one. The First is restricting values and the later will show restricting on hierarchy nodes.

SAP COMMUNITY NETWORK 2009 SAP AG

SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com 5

Maintaining Roles and Authorization in BI 7.0 - RSECADMIN

Step 6: This steps will create the restriction based on Infoprovidres (0TCAIPROV) and keyfigures (0TCAKYFNM), if not maintained manually, the default values will be *.

Step7: Save the Authorization Object.

SAP COMMUNITY NETWORK 2009 SAP AG

SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com 6

Maintaining Roles and Authorization in BI 7.0 - RSECADMIN

Creating Roles Step 1: Transaction RSECADMIN -> Go to User tab -> Role Maintenance.

Step 2: Click on Single Role to create a new Role.

Step 3: After creating the role, go to Authorization Tab, and Click on Change Authorization tab to assign the Authorization Object created.

SAP COMMUNITY NETWORK 2009 SAP AG

SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com 7

Maintaining Roles and Authorization in BI 7.0 - RSECADMIN

Step 4: The above step will take you to Assignment of Authorization object. After assignment of authorization objects; click on Generate Profile.

Step 5: Maintain the list of users in the user Tab and save the changes done in the role to get it activated for the users.

SAP COMMUNITY NETWORK 2009 SAP AG

SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com 8

Maintaining Roles and Authorization in BI 7.0 - RSECADMIN

This brings to the end of maintaining a complete set of Roles and Authorization for a user, there by restricting the user for Info Providers, hierarchy nodes, Characteristics and Characteristics Values, Key Figure etc.

SAP COMMUNITY NETWORK 2009 SAP AG

SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com 9

Maintaining Roles and Authorization in BI 7.0 - RSECADMIN

Related Content
An Expert Guide to new SAP BI Security Features https://www.sdn.sap.com/irj/scn/elearn?rid=/library/uuid/659fa0a2-0a01-0010-b39c8f92b19fbfea&overridelayout=true An Expert Guide to new SAP BI Security Features https://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/707cbec7-9716-2a10-8092cb7485e25de9&overridelayout=true For more information, visit the Business Intelligence homepage.

SAP COMMUNITY NETWORK 2009 SAP AG

SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com 10

Maintaining Roles and Authorization in BI 7.0 - RSECADMIN

Disclaimer and Liability Notice


This document may discuss sample coding or other information that does not include SAP official interfaces and therefore is not supported by SAP. Changes made based on this information are not supported and can be overwritten during an upgrade. SAP will not be held liable for any damages caused by using or misusing the information, code or methods suggested in this document, and anyone using these methods does so at his/her own risk. SAP offers no guarantees and assumes no responsibility or liability of any type with respect to the content of this technical article or code sample, including any liability resulting from incompatibility between the content within this document and the materials and services offered by SAP. You agree that you will not hold, or seek to hold, SAP responsible or liable with respect to the content of this document.

SAP COMMUNITY NETWORK 2009 SAP AG

SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com 11

You might also like