Setting up Reporting Authorizations (SAP Library

Setting up Reporting Authorizations

Use

When setting up Reporting authorizations, you start with authorization objects that must be created beforehand.

As soon as an authorization object has been saved, it may be checked when executing a query. The user may not be appropriately authorized if this authorization object has not been assigned to him/her.

Only when the user has had the appropriate authorizations assigned to him/her can he/she define and execute a query or navigate an already existing query,

Procedure

Create an authorization object

In the SAP Easy Access initial screen of the SAP Business Information Warehouse choose SAP Menu à Business Explorer à Reporting Authorization Objects.

Choose Authorization Object ® Create. Enter a technical name and a normal name for the authorization object. Save your entries.

On the right-hand side you get an overview of all the InfoObjects indicated as authorization-relevant.

Only those characteristics that have previously been indicated as authorization-relevant in the InfoObject maintenance can be assigned to an authorization object as fields. See also: Creating InfoObjects: Characteristics

Assign the InfoObject fields to the authorization object:

Select the characteristics for which an authorization check of the selection conditions should be carried out.
Select the InfoObject key figure (1KYFNM) if you want to restrict the authorization to a single key figure.
Select the InfoObject (0TCTAUTHH) if you want to check authorizations for a hierarchy.

Save your entries.
Go back to the initial screen of the authorization maintenance.
Choose Check for InfoCubes à Display to get a list of InfoCubes that contain the InfoObjects you selected and are therefore affected by an authorization check (where-used list). In the change mode you can also take individual InfoCubes out of an authorization check for this authorization object by removing the flag.

Authorization object: S_RSRSAREA

Name: Sales area

Fields: DIVISION, CUSTGROUP, 1KYFNM

Creating Authorizations

Authorizations are created and maintained in the role maintenance.

Choose Authorizations à Roles à Change.
Specify the roles you want to change and choose Change. This takes you to the role maintenance.
Choose Authorizations à Expert mode for generating profiles on the tabstrip.
Choose Enter Authorization Objects Manually and enter the objects you require. Choose Enter. The authorization object is added to the role.
Choose Generate.

For more information, see Changing and Assigning Roles.

Result

The user can now work with queries.

See also:

Authorizations for Working with a Query