- SAP Community
- Groups
- Interest Groups
- Application Development
- Discussions
- Role to Restrict access to BW report acc. to plant...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Role to Restrict access to BW report acc. to plant & Region
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-10-2009 6:40 AM
Hello,
Can I restrict users to view the BW report according to the plant they are authorized to.
Say I've User1(plant 1100) & User2(plant 1200).
Now I want both the users to access same report (say, Plant Wise Sale Report) but to view data related to their plant only.
Can I achieve the scenario by creating Role.
Also I want to put a check on Region( East, West, North, South).
Plz provide Authorization Object & complete procedure for both plant & Region.
Thanks in Advance
Shilpi
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-10-2009 7:36 AM
Hi,
If you are using BI 7.0 analysis authorization .
You can achive this by
1. create two PFCG role (A & B) and insert below auth object.
a) S_RS_COMP-->name of report, infocube and info area
b)S_RS_COMP1--> name of the report, owner (*)
c) S_RS_ICUBE --> infocube, infoarea
d) S_RS_AUTH --> mention name of analysis auth. (see point 2)
2. Create analysis authorizations (A1 & B1) using rsecadmin Tcode
3. for A1 insert values of plant 1100, region & for B1 insert values of plant 1200, region.
4. Now assign PFCG Role A to user1 & role B to user2.
I hope this will help u.
Edited by: Imran Mulani on Jan 10, 2009 8:37 AM
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-10-2009 7:36 AM
Hi,
If you are using BI 7.0 analysis authorization .
You can achive this by
1. create two PFCG role (A & B) and insert below auth object.
a) S_RS_COMP-->name of report, infocube and info area
b)S_RS_COMP1--> name of the report, owner (*)
c) S_RS_ICUBE --> infocube, infoarea
d) S_RS_AUTH --> mention name of analysis auth. (see point 2)
2. Create analysis authorizations (A1 & B1) using rsecadmin Tcode
3. for A1 insert values of plant 1100, region & for B1 insert values of plant 1200, region.
4. Now assign PFCG Role A to user1 & role B to user2.
I hope this will help u.
Edited by: Imran Mulani on Jan 10, 2009 8:37 AM
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-10-2009 7:53 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-10-2009 8:12 AM
its long procedure. Screenshots will help u.
http://help.sap.com/saphelp_nw2004s/helpdata/en/59/fd8b41b5b3b45fe10000000a1550b0/frameset.htm
/people/prakash.darji/blog/2006/10/09/sap-netweaver-2004s-bi-authorizations-for-reporting
let me know if you are not clear.
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-13-2009 7:47 AM
Hello Imran,
Your documents helped me a lot.
I've created an Analysis Authorization & added it in role which is allowing to access only particular plant's data.
Thanks
Given Points
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-17-2009 9:52 AM
Hello Imran,
I'm able to create an analysis authorization based on a caracterstic but i want to do the same for navigational attribute(0PLANT_0REGION) also.
I followed the link u gave : https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/ded59342-0a01-0010-da92-f6b72d98...
I'm able to make characterstic(0PLANT & 0REGION) as authorization relevent but unable to make their navigational attribute(0PLANT_0REGION) as authorization relevant.
In the Attribute tab strip of infoobject 0plant, i marked 0PLANT_0REGION as authorization relevent & activated the infoobject successfully.
Problem is, in analysis authorization when i try to insert 0PLANT_0REGION, it gives an error that 0PLANT_0REGION is not authorization relevant.
Kindly solve the issue.
Thnaks in advance
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-18-2009 6:26 AM
Hi Shilpi,
goto RSD1, give infoobject name >click on maintain >on business explorer tab> select authorization relevant>save.
Thanks
Imran
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-19-2009 5:33 AM
Hii Imran,
0PLANT_0REGION is navigational attribut & not infoobject.
I have marked it authorization relevant in 0PLANT's attribute tab. But while inserting this navigational attribute in analysis authorization eror is arisisng --> "0PLANT_0REGION is not authorization relevat"
-Shilpi
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-20-2009 6:56 AM
Hi Shilpi,
info object is direct object which u insert in infocube or ods.
navigation attribute is something that is linked with info object all the time.
for ex. 0MATERIAL is info-object. Then u go RSD1> give infoobject name as "0MATERIAL">goto attribute tab> here u will find some as display attributes and some as navigational attribute. > double click on the navigatiional attribute u want to make as authorization relevant > goto busniess explorer tab> select authorization relevant.
if you have followed exact procedure..then something will be wrong with infoobject itself..kindly get in touch with BW developers.
Thanks
Imran
Edited by: Imran Mulani on Jan 20, 2009 8:00 AM
- SAP Managed Tags:
- Security
