Security

You define who can access what data, so that your SAP NetWeaver BW system can map the structure of your enterprise while meeting security requirements.

An authorization allows a user to perform a certain activity on a certain object in the BW system. There are two different concepts for this depending on the role and tasks of the user: standard authorizations and analysis authorizations.

Standard Authorizations

All users who work in the Data Warehousing Workbench, BEx Broadcaster or Query Designer for example need standard authorizations

Standard authorizations are based on the SAP authorization concept Each authorization applies to an object and defines one or more values for each field in the authorization object. Individual authorizations are grouped into roles by system administration. You can copy the roles delivered by SAP and customize them if required. The authorizations are assigned to the master records of individual users in the form of profiles.

Analysis Authorizations

All users who want to display transaction data from authorization-relevant characteristics require analysis authorizations for these characteristics. Analysis authorizations use their own concept, which takes the special features of reporting and analysis in SAP NetWeaver BW into consideration. For example, you can define that employees can only see the transaction data for their cost center.

You can add any number of characteristics to an analysis authorization and authorize single values, intervals, simple patterns, variables as well as hierarchy nodes. Using special characteristics, you can restrict the authorizations to certain activities, such as reading or changing, to certain InfoProviders, or to a specified time interval. You can then assign the authorization to one or more users either directly or using roles and profiles. All characteristics of the underlying InfoProvider that are indicated as authorization relevant are checked when a query is executed. Using the special authorization concept in SAP NetWeaver BW to display query data, you can protect especially critical data.