RSRT access in Production

[Former Member]

Dear Guru's,

Using RSRT t-code we can execute any query on production and see critical data.

Is it ok to give RSRT t-code access to BI developers in production, as they want to cross check the data with ECC transcational reports.

Please advise.

[morten_nielsen]

Hi Imran

The access to the data in BI is not controlled by transactions. So if your concern is access to critical data you need to control the access by the use of analysis authorization (in RSECADMIN if you are using this concept), and the authorization object S_RS_AUTH (or directly in RSECADMIN).

You will also need to make sure the no user has 0BI_ALL in the object S_RS_AUTH.

On the other hand RSRT is a quite "Powerful" transaction, so be careful when adding this to your roles. Wether or not you should give your developers access to this transaction, and the authorizations below depends entirely on your Security level/Security Policy.

Regards

Morten Nielsen

[Former Member]

Thanks Morten,

I am aware of BI data flow and how to control access.

I just want to confirm for RSRT access only.

Here BI developers are asking RSRT because they want to run business reports in BI production and match the data with ECC(production) transcational reports.

We are follwoing very strict security policy in our company. But BI develoer says that they had RSRT is thier previous projects. They said its standard process to give RSRT to BI developers across landscape

[Former Member]

Thanks