SAP BI Analysis Authorization (Customer Exit Variables

)

Applies to:
SAP BI 7.0/BW 3.5 consultants. For more information, visit EDW Homepage .

Summary
Use analysis authorization for authorization relevant characteristic and restrict the query output based on the customer exit variable values (Based on Authorization relevant characteristic values stored in Custom Table for different users). Author: Suraj Tigga

Company: Capgemini Consulting India Pvt. Ltd. Created on: 28 March 2011

Author Bio
Suraj Tigga is a Senior SAP BI / ABAP consultant at Capgemini Consulting, India. Suraj joined Capgemini Consulting in 2008 and has worked on multiple SAP BI implementation and support projects.

SAP COMMUNITY NETWORK © 2010 SAP AG

SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com | UAC - uac.sap.com 1

......... 8 Execution ................................................................................................................................................sap....uac................................................................... 9 Related Content .......................boc............sap..... 10 Disclaimer and Liability Notice .........................................................................com | BPX ............................com | UAC .........com | BOC ....................................................................................................................................................................................................................... 3 Step-by-Step Solution .....................SAP BI Analysis Authorization (Customer Exit Variables) Table of Contents Scenario ................ 7 Enhancement (RSR00001) – (I_STEP = 2: Check the authorization for selection screen values) ............................................................................sap............................................................................................................ 11 SAP COMMUNITY NETWORK © 2010 SAP AG SDN ..........................................sap..................................................................... 3 Analysis Authorization ..........................................bpx................................................................................................com 2 .................. 4 Maintain Authorization .............................. 6 Enhancement (RSR00001) – (I_STEP = 1: Populate Values from Custom Table) ...........................................sdn.......................... 5 Maintain Characteristic Values (Custom Table) ............................

0TCAACTVT (activity): Can restrict the authorization for different activities.boc. Apart from those values if any extra values would be fed to the selection screen for which authorization is not provided.x .SAP BI Analysis Authorization (Customer Exit Variables) Scenario Based on the Characteristic (Authorization-relevant) values stored in the Custom Table specific to different users.extraction. is called as Analysis Authorization in SAP BI 7.data mining etc. 0TCAIPPROV. selection screen values would be populated.loading. Analysis Authorization Analysis Authorizations refer to the new authorization concept by which data access is controlled.sap. one can also assign the activity change (02) for integrated planning. monitoring. and 0TCAKYFNM as authorization relevant. there was no division in authorizations for Data Warehousing Workbench and Reporting.com | BPX . then query execution should be ceased with an error message.bpx. Read (03) is set as the default activity. Concept where reporting of data using the authorization relevant characteristics is done. Select all the InfoObjects and InfoProviders that start with 0TCA*.In SAP BW 3. SAP COMMUNITY NETWORK © 2010 SAP AG SDN .uac. The philosophy behind Analysis Authorizations being that users are looking at SAP BI for data analysis and their authorizations should also be according to the data that they want and not by the objects that they access / want to access.com | BOC .sap. 0TCAIPROV (InfoProvider): Can restrict the authorization to Individual InfoProviders. In SAP BI 7.com | UAC . Special Characteristics 0TCAACTVT (activity).sap.0. Standard Authorization refers to concept where in the users are provided with access to the functionalities of Data Warehousing Workbench.sdn. and 0TCAVALID (validity) must be included in at least one authorization for a user.com 3 .0 (Techniques) Direct Assignment of Authorizations from RSECADMIN to Users Assignment of Authorizations to Users with PFCG using S_RS_AUTH Automatic Generations of Authorizations Pre-requisites of Analysis Authorization: a) Activate all the objects of the technical BI Content for authorizations. b) Define the InfoObjects 0TCAACTVT. otherwise the user is not authorized to execute a query.0. such as modeling . 0TCAVALID. 0TCAIPROV (InfoProvider).sap.The default is the all InfoProviders are authorized with the asterisk (*). Analysis Authorization in SAP BI 7.

sap.12. Authorizations are created and checked for the special characteristic when key figure authorizations are required.sap. Enhancement (RSR00001) .SAP BI Analysis Authorization (Customer Exit Variables) 0TCAVALID (validity): Can restrict the validity of an authorization.com | BOC .++.sap.sap.uac. SAP COMMUNITY NETWORK © 2010 SAP AG SDN .2010 I(Including) - BT(Between) Authorization is only valid until 12/31/2010 Including/Excluding Operator Technical Characteristic Value(From) 31.com | UAC . Step-by-Step Solution To reduce the maintainability for assigning the authorization to users. customer exit variables can be used to read the authorization values at runtime from the custom table. Can also specify a single value or an interval.sdn.com | BPX .com 4 . Below are the steps mentioned to use the customer exit variable to read authorization values from custom table: Maintain Authorization: Use transaction RSECADMIN to create ‘Authorization’.bpx.++.2010 Technical Characteristic Value(To) 10. Maintain Characteristic Values (Custom Table): Create Custom Table maintenance generator to maintain authorization values.(I_STEP = 1): Code to populate the selection screen with the authorization values specific to users. Enhancement (RSR00001) – (I_STEP = 2): Check the validity of the authorization values for specific users.2010 Technical Characteristic Value(To) I(Including) LT(Less or Equal) 0TCAKYFNM: Characteristic for Key Figure authorization.boc. Always valid (*) is set as default for validity. Authorization is restricted to the 1 – 10 of each month for the year 2010 Including/Excluding Operator Technical Characteristic Value(From) 01.

com 5 .uac.sap.Prior to this make the InfoObject ‘ZPRODH1’ as authorization-relevant.com | BPX .bpx.SAP BI Analysis Authorization (Customer Exit Variables) Maintain Authorization Go to transaction ‘RSECADMIN’ and create authorization ‘YZPRODH1’: Include InfoObject ‘ZPRODH1’ in the authorization ‘YZPRODH1’.boc.sap.sap. SAP COMMUNITY NETWORK © 2010 SAP AG SDN .com | UAC .sap.sdn.com | BOC .

SAP BI Analysis Authorization (Customer Exit Variables) Maintain Characteristic Values (Custom Table) Step1: Create a Customer Exit Variable ‘YC_ZPRODH1’ for the InfoObject ‘ZPRODH1’: Step2: Create a Custom Table and alongwith its maintenance generator: (Maintain the ‘Username’ and ‘World Wide Business’ Values.com | BPX .com | BOC .com 6 .uac.sdn.com | UAC .sap.boc.bpx.sap.sap.sap.) Step3: Maintain the Values (Below): (Maintain values for Username ‘CAPTIGGA’) SAP COMMUNITY NETWORK © 2010 SAP AG SDN .

sap. After user executes the query with the above selection screen values.sap.bpx. then the authorization of the values would be checked against username.com 7 .com | BOC .boc.com | UAC .sap.uac.sap.com | BPX .sdn. SAP COMMUNITY NETWORK © 2010 SAP AG SDN .SAP BI Analysis Authorization (Customer Exit Variables) Enhancement (RSR00001) – (I_STEP = 1: Populate Values from Custom Table) Step1: Create a query ‘YZPRODH1’ to check for the authorization variable: Step2: Go to enhancement ‘RSR00001’ (I_STEP = 1) and write the code for variable ‘YC_ZPRODH1’ to populate the query selection screen: Code would retrieve the values from the custom table ‘YPRODH1’ and populate the query selection screen values.

sdn.com | UAC . Use the Function Module ‘RRMS_MESSAGE_HANDLING’ to raise the exception.SAP BI Analysis Authorization (Customer Exit Variables) Enhancement (RSR00001) – (I_STEP = 2: Check the authorization for selection screen values) Step1: Go to enhancement ‘RSR00001’ (I_STEP = 3) and write the code for variable ‘YC_ZPRODH1’ to check the authorization values stored in custom table: Retrieve the values from custom table YPRODH1 based on the corresponding selection screen values.boc.sap.com | BOC .bpx.sap.com | BPX . SAP COMMUNITY NETWORK © 2010 SAP AG SDN .uac. if authorization values are not stored for the username.sap.com 8 .sap.

bpx.boc.sap.com | UAC .sap.com | BPX .sap. SAP COMMUNITY NETWORK © 2010 SAP AG SDN . Enter one extra ‘World Wide Business’ value ‘104’ not maintained in Custom Table: Execute the query: Exception rose (Username ‘CAPTIGGA’ not authorized for World Wide Business ‘104’).SAP BI Analysis Authorization (Customer Exit Variables) Execution Step1: Go to transaction RSRT and execute the query ‘YZPRODH1’: Values would be populated from the custom table ‘YPRODH1’.com | BOC .sdn.uac.sap.com 9 .

sap.boc.bpx.SAP BI Analysis Authorization (Customer Exit Variables) Related Content For more information.sap. visit the EDW Homepage .sap.com | BOC .sap. SAP COMMUNITY NETWORK © 2010 SAP AG SDN .sdn.com 10 .com | UAC .uac.com | BPX .

code or methods suggested in this document. SAP offers no guarantees and assumes no responsibility or liability of any type with respect to the content of this technical article or code sample.boc. and anyone using these methods does so at his/her own risk.com | BPX . SAP COMMUNITY NETWORK © 2010 SAP AG SDN . SAP responsible or liable with respect to the content of this document. or seek to hold.uac. including any liability resulting from incompatibility between the content within this document and the materials and services offered by SAP.sdn. You agree that you will not hold.sap.com | UAC .sap.SAP BI Analysis Authorization (Customer Exit Variables) Disclaimer and Liability Notice This document may discuss sample coding or other information that does not include SAP official interfaces and therefore is not supported by SAP.bpx.sap.com 11 . Changes made based on this information are not supported and can be overwritten during an upgrade. SAP will not be held liable for any damages caused by using or misusing the information.sap.com | BOC .

Sign up to vote on this title
UsefulNot useful