Setting Up Standard Authorizations  

Use

Authorizations for object classes Business Information Warehouse and Data Mining are delivered ready for use. They are defined according to roles. After transferring the roles (see Transporting Roles), you can assign them to the relevant users in role maintenance.

A role is a collection of activities that describe a certain work area. The authorizations that users need to access transactions and reports in the menu are also assigned in the role. A role can be assigned to any number of different users. An authorization profile is automatically created for a role when you generate authorizations for it.

For more detailed documentation on role maintenance, see Role Maintenance.

Roles can be transported between SAP systems. More information: Transporting Authorization Components.

Procedure

...

       1.      In the SAP Easy Access initial screen, choose SAP Menu → Tools → Administration  → User Maintenance → Role Administration → Roles , or press the Create Role button to go straight to role maintenance.

       2.      Choose Create and Basic Maintenance (Menus, Profiles, Other Objects). Enter a name and short text for the role and save your entries.

Choose a name that does not start with the prefix SAP as this namespace is already used by the predefined roles delivered as copy templates.

       3.      On the Description tab page information on creation and changing is created. Write a meaningful text to describe the function of the role.

       4.      Select the Authorizations tab page and choose Expert Mode for Profile Generation.By pressing the Selection button, you can view a list of all Authorization Templates. The templates for the BW user roles and tasks begin with S_RS_*..

       5.      Select a template and choose Insert Selection.

       6.      Make any necessary changes to the authorizations.

       7.      Generate an authorization profile for the authorizations of the role.

To do this, press the Generate button.

       8.      Go back and assign the role to users on the Users tab page, using the relevant names in the list.

The generated authorization profiles are automatically entered in the user master record for these users if you run a user master comparison. To do this, choose User Comparison and then Complete Comparison.

Result

The users whom you have assigned roles to can now log on to the system. The user menu appears with the transactions that the user needs for his/her work and that he is now authorized to run.