For all activities in the management of analysis authorizations you need authorization for authorization object S_RSEC, which covers all relevant objects with namespace authorizations for specific activities. For more information, see the documentation for the authorization object in the BI system.
Activate all objects of the technical BI Content for authorizations. Select all the InfoObjects and InfoProviders that start with 0TCA*.
For more information, see Installing BI Content.
Select the following InfoObjects of the technical BI Content to be authorization relevant: 0TCAACTVT, 0TCAIPPROV, 0TCAVALID, and 0TCAKYFNM. Define all the characteristics that are to be checked by the authorization check as authorization relevant.
For more information, see Tab Page: Business Explorer.
Define the navigation attributes as authorization relevant too if these are to be checked.
For more information, see Tab Page: Attributes.