T-codes used in BW/Security

[Former Member]

hi GURUS iam a fresher i hve some exp in r/3 security ......

iam doing bw security can any body pls pls pls mention wht t-codes r used in bw security ..............

thanks in advance

[Former Member · Accepted solution]

Sunny,

What version are you on?

The main transaction in newer versions is RSECADMIN and RSSM on older versions. However there is much more to it than just the starting tcodes.

There is a good amount of info on the net--try searching.

Cheers,

Ben

[Former Member]

Hi sunny,

check this link. It may help you.

https://www.sdn.sap.com/irj/sdn/wiki?path=/display/bi/authorizationinSAPNWBI

Reward points if helpful

Regards

Ganesh

[Former Member]

Hi Sunny,

Unlike R/3 Security, BW Security is not Transaction based, it actually deals with securing BW Objects like Info Objects, Info Cube, ODS, Info Source, etc....

The main Authorization Objects in BW are:

S_RS_ADMWB

Authorizations for working with individual objects of the Administrator Workbench. In detail, these are: source system, InfoObject, monitor, application component, InfoArea, Administrator Workbench, settings, metadata, InfoPackage, InfoPackage group, Reporting Agent settings, Reporting Agent package, documents (for metadata, master data, hierarchies, transaction data), document store administration, InfoSpoke.

S_RS_IOBJ

Authorizations for working with individual InfoObjects and their sub-objects
Until Release 3.0A, only general authorization protection was possible with authorization object S_RS_ADMWB. General authorization protection for InfoObjects still works as in the past. Special protection with S_RS_IOBJ is only used if there is no authorization for S_RS_ADMWB-IOBJ.

S_RS_ISOUR

Authorizations for working with InfoSources with flexible updating and their sub-objects

S_RS_ISRCM

Authorizations for working with InfoSources with direct updating and their sub-objects

S_RS_ICUBE

Authorizations for working with InfoCubes and their sub-objects

S_RS_MPRO

Authorizations for working with MultiProviders and their sub-objects Until BW 3.0B, Support Package 1, authorizations for MultiProviders were checked by using the authorization object S_RS_ICUBE. As of BW 3.0B, Support Package 2, this can be maintained, or you can change the check over to the authorization object S_RS_MPRO. To do this, choose in Customizing under Business Information Warehouse ® General BW Settings ® Settings for Authorizations.

S_RS_ODSO

Authorizations for working with ODS objects and their sub-objects.

S_RS_ISET

Authorizations for working with InfoSets

S_RS_HIER

Authorizations for working with hierarchies

S_RS_COMP

New Authorizations Check for Variables in Query Definition
Object type is ‘VAR’

S_RS_COMP1

Is checked additionally with S_RS_COMP
Checks for authorizations on query components dependent on the owner (creator RSZOWNER)
Authorizations are necessary, e.g. for creating queries

S_RS_FOLD

Suppress InfoAreaview of BExelements
Specify ‚X‘ (true) in the authorization maintenance for suppressing

To get more information on BW Security, plz visit:
http://www.sapsecurityonline.com/bw_security/bw_security.htm

The main Transactions invloved in BW Security are:

RRMX

: Launches the BEx Analyzer, which is used to create and
execute queries

RSA1:

Launches the Administrator Workbench, which is used by
SAP BW administrator

RSSM

--Reporting Authorization Objects.

Note:

The above information is for BW 3.x. Lot of things vary in BI.

Hope it helps.

Please award points if it is useful.

Thanks & Regards,

Santosh