Setting Up Users for Data Extraction

Use

CAF uses the special security role CAFBIAdministrator to execute the data extraction process from CAF services. As a result, you can take advantage of the security functionality provided by CAF Core. This role should be mapped to a real user on the Application Server (AS) Java and during the extraction process CAF checks if this user has permissions to read busienss object node data. Note  that CAF security is applied only for the DataSources for business object node attributes. You can use  DataSource to extract business object node language-dependent attributes and business object node associations without read permissions for this business object node. CAF does not enforce security on these types of DataSources because their data is not useful without the business object node attribute data.

Prerequisites

You have configured business rules for each business object you use to extract data from SAP BI with the in the CAF Runtime. You have set users, roles or groups to have security credentials necessary to access business object content. You have also given some users authorization for the SAP BI extraction process.

More information: Authorization Tool

Procedure

       1.      Open SAP NetWeaver Administrator.

       2.      Navigate to Operation Management → Users and Access → Identity Management.

       3.      From the Search Criteria dropdown list select Action and choose Advanced Search.

       4.      For Type choose J2EE-MODULE. ForName enter CAFBIAdministrator and choose Search.

       5.      Select the table row and choose Modify.

       6.      Open the Run-As Identity tab page and in Direct Association field enter the name of the user that you want to be used for extraction.

       7.      Choose Save.