Setting Up Standard Authorizations

Authorizations for object classes Business Information Warehouse and Data Mining are delivered ready for use. They are defined according to roles. After transferring the roles (see Transporting Roles), you can assign them to the relevant users in role maintenance.

A role is a collection of activities that describe a certain work area. The authorizations that users need to access transactions and reports in the menu are also assigned in the role. A role can be assigned to any number of different users. An authorization profile is automatically created for a role when you generate authorizations for it.

1. On the SAP entry screen, choose  SAP Menü  Tools  Administration  User Maintenance  User Maintenance  Role Administration  Roles  or call role administration directly by choosing Create Role.
2. Enter a name and short text for the role and choose Create Single Role.
   Note

   Choose a name that does not start with the prefix SAP as this namespace is already used by the predefined roles delivered as copy templates.

3. On the Description tab page, the creation and change date for the role is automatically created. Write a meaningful text to describe the function of the role.
4. Go to the Authorizations tab page and choose Expert Mode for Profile Generation. The system displays a list of all existing authorization templates. The templates for the BW user roles and tasks begin with S_RS_*..
5. Select a template and choose Add Template.
6. To insert an authorization object that does not exist as a template, choose Manual. You can enter one or several authorization objects here. Choose Continue. The authorization objects are inserted.
7. Make any necessary changes to the authorizations.
8. Choose Generate in order to generate an authorization profile for the authorizations of the role.
9. Go back and assign the role to users on the Users tab page by adding the corresponding names to the list.

   The generated authorization profiles are automatically entered in the user master record for these users if you run a user master comparison. To do this, choose User Comparison and then Complete Comparison.

The users whom you have assigned roles to can now log on to the system. The user menu appears with the transactions that the user needs for his/her work and that s/he is now authorized to run.