Security Upgrade (SU25) steps for BI 7.0 system.

[Former Member]

Hi,

We have just upgraded the BW3.5 to BI 7.0. We are not going to migrate to the new Analysis Authorization concept right now. I have few question before performing the security upgrade steps (SU25).

1) Do I need to change the Authorization Mode in SPRO (IMG) to RSR Authorization Object before performing the SU25 steps?

2) All the new authorization object (S_RS_...) in BI 7.0, have to be defined in each of the roles in SU25?

3) Will this old concept works fine for the new reports created in future?

Thanks for reading.

Thanks.

[sdipanjan]

Please check the below documents and Notes:

[Note 820183 - New authorization concept in BI|https://service.sap.com/sap/support/notes/820183]

[An Expert Guide to new SAP BI Security Features|;

[Note 923176 - Support situation authorization management BI70/NW2004s|https://service.sap.com/sap/support/notes/923176]

[LCM208-Best Practices for Upgrading to SAP NetWeaver BI 7.0|http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/008c741c-5d4b-2b10-519e-f26542501791]

These will answer your all queries.

regards,

Dipanjan

[Former Member]

Thank you Dipanjan. Will go through the notes and document.

[Former Member]

To be precise for your questions:

1) Do I need to change the Authorization Mode in SPRO (IMG) to RSR Authorization Object before performing the SU25 steps? Not required. This has to be maintained only if you are switching your authorisations to Analysis Authorisations

2) All the new authorization object (S_RS_...) in BI 7.0, have to be defined in each of the roles in SU25?

Yes, they have to be defined based on the requirement. This has to be provided by the BI consultant.

3) Will this old concept works fine for the new reports created in future?

Yes, they would work.

The analysis authorisations provides more flexibility and advantage in securing the components of BI - Reporting..

[Former Member]

> 3) Will this old concept works fine for the new reports created in future?

> Yes, they would work.

No, it wont.

In BI 7.0 is works but is not supported. In BI 7.1 it no longer exists.

I recommend that you migrate to the new concept. There are many improvements (security ones as well).

That you are using SU25 (and by implication SU24) in your BI system is quite extraordinary. Do you have any more infos on how you are doing this and on which basis you maintain Su24? I am a big Su24 fan

Cheers,

Julius

Edited by: Julius Bussche on Oct 2, 2009 9:50 PM