Authorization Templates 

Use

You can use authorization templates when you create roles with the profile generator. The templates contain authorizations for roles and user tasks that were defined for the Business Information Warehouse. This means that every user role covers the authorizations that are needed for carrying out the basic user tasks.

You are automatically offered the available templates when you edit a new role. You can also refer back to the templates when you change an existing role.

Features

The templates for BW user roles start with S_RS_R, the templates for BW user tasks start with S_RS_T.

In BW the following roles are pre-set and can be used as templates for generating profiles:

  1. S_RS_RDEAD BW role: BW Administrator (development system)

    2. The task area of the BW Administrator in the development system covers, among other things, maintaining the source system, uploading Metadata, executing queries for the statistics InfoCube and maintaining aggregates.

  2. S_RS_ROPAD BW role: BW Administrator (productive system)

    3. The BW Administrator in the productive system is mainly responsible for maintaining the connection to the source system and executing queries for the statistics InfoCube.

  3. S_RS_RDEMO BW role: Modeler (development system)

    4. The BW Modeler in the development system works on the data model. It is responsible for designing the InfoCubes, InfoObjects, InfoSources and the data flow, as well as defining communication structures and transfer and update rules.

  4. S_RS_ROPOP BW role: Operator (productive system)

    5. The main task of the BW Operator in the productive system is to upload data from the source system and monitor the results.

  5. S_RS_RREDE BW role: Reporting Developer (development system)

    6. The main task of the Reporting Developer is to design the queries for the reports you want. It creates authorization objects for these reports. It also creates channels for the InfoCatalog and assigns users to the channels.

  6. S_RS_RREPU BW role: Reporting User

The Reporting User executes queries using the BEx Analyzer and BEx Explorer.

Activities

To create an authorization profile from a template and assign the relevant roles to a user, you must carry out the following steps:

  1. Create a role and give it a description.
  2. Insert the authorizations with the templates.
  3. Edit the authorizations if necessary.
  4. Generate the authorizations.

    5. A profile is automatically generated for the role.

  5. Assign the role to users and run a user master comparison to enter the generated profile into the user master record.

By choosing Environment ® Maintain Templates in the role maintenance, you can display the available templates, copy templates delivered by SAP, and change the copies as well as create the templates yourself. For this you will need the authorization User Master Record Maintenance: User Groups (S_USER_GRP) with value * in the fields CLASS and ACTVT. SAP template names start with an S . Templates that you create yourself may not start with an S .

You can subsequently edit authorizations from the templates in the role maintenance.

See also:

Setting up Authorizations with Role Maintenance