Authorizations for Documents

Definition

A user needs the appropriate authorizations to display or edit a document for a BI object.

Use

To edit documents in the Documents functional area of the Data Warehousing Workbench, the user needs authorization for the authorization object S_RS_ADMWB Data Warehousing Workbench Object with the respective document class:

Metadata: DOC_META
Master Data: DOC_MAST
InfoProvider Data: DOC_TRAN

To edit documents on the Documents screen for a specific BI object, the user needs the following authorizations for the individual document classes:

Metadata

If you have the authorization to display or to edit a metadata object, you can also display or edit the documents for these metadata objects.

Valid activities are:

Activity	Name in BI Context	Information
03 (display)	display
23 (maintain)	maintain	Included are: create, change, delete

Master Data

If you have the authorization to display or to edit in specific master data, you can also display or edit the documents for these characteristic values.

Valid activities are:

Activity	Name in BI Context	Information
03 (display)	display
23 (maintain)	maintain	Included are: create, change, delete

InfoProvider Data
Authorization objects for InfoProvider data are not delivered. They are created as required. For more information, seeAnalysis Authorizations.

Caution

Note: The Activity field needs to be included in the authorization objects that are to model the authorizations for documents. The user only has display authorization if this field is missing. We recommend you include the Activity field particularly for new projects or subprojects.

To include the Activity field in existing authorization objects, you first need to delete all previous authorizations. For running projects, we therefore recommend the following procedure: Assign the old authorizations to those users who receive the display authorization. Create a new authorization object with the Activity field and also give this to users who are also to be given authorization for editing documents.

If a Reporting user has the display authorization for the InfoProvider data of a specific area (for example, customer 1-1000 and material 3000-5000), this user can also display the documents for this InfoProvider data.

The BI Security Manager has to be configured on the portal so that the checks described can also be performed for the documents on the portal.

To give a user the authorization for editing InfoProvider data documents, the system administrator has the following options:

Activity

Name in BW context

Information

The user receives the authorization for the data with activity 36 (enhanced maintenance) in the authorization objects for InfoProvider data.

maintain_documents

You can also assign display authorization for one area, and edit authorization for the other.

With the authorization objects for InfoProvider data, the user has display authorization for the data (display) and additionally receives authorization to maintain documents: Authorization object S_RS_ADMWB Data Warehousing Workbench Object = DOC_TRAN

maintain

A different assignment of authorizations is not possible: The user additionally receives edit authorization for all areas for which the user currently has display authorization.

We recommend that you only assign this combination of authorizations to a Reporting user if it is too time-consuming to change all the existing authorization objects individually.