Restricting HR Data via BI

[Former Member]

Hi guys,

Have any of you got any recommendations about how to restrict the level of access to HR data from the BI component?

Effectively, sensitive HR data is being exported for reporting purposes but people should only have access to the data to which they are authorised in the ECC system.

Can you restrict access to summary level and only allow detailed data to specific people based upon their job function?

If so, how is this best achieved?

Separate cubes?

Hierarchies?

Custom authorisation objects to try to replicate ECC's P_ORGIN?

Cheers, Simon

[Former Member]

In case this helps, the version of BI is BI 7.0

[Former Member]

Hi,

You can use 0HR_PA_2 and 0HR_PA_3 as specified in the following HOW-TO guide

https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/e1cba990-0201-0010-43ae-af579aee...

The HOW-TO guide was written for BW3.0B. You can still follow steps 1 through 14, but steps 15 to 21 are obsolete, you will have set this up in the new analysis authorizations in RSECADMIN.

Regards,

Lars

[Former Member]

Lars,

Thanks very much! That is exactly the sort of information I was looking for.

Cheers, Simon