http://scn.sap.com/community/data-warehousing/netweaver-bw/blog/2012/05/22/authorization-in-bi-7 - Authorization in BI 7 - Part 1
In Authorization Part - 1, we have seen the creation of Authorization object. Now, part 2 will explain steps to create Authorization role.
- Go to t-code RSECADMIN-> User tab and click Role Maintenance i.e. General Role Maintenance PFCG as shown below.
- Next screen for the Role Maintenance will get open where you have to give Technical Name for the authorization role and click on Create Single Role.
6. Delete
16. Execute
22. Enter, Include, Assign.
- InfoArea: one or more single, multiple-single or range values can be mentioned here.F4 help available to select values.
- InfoCube: one or more single, multiple-single or range values can be mentioned here.F4 help available to select values.
- Name (ID) of a reporting component: one or more single, multiple-single or range values can be mentioned here.F4 help available to select values.
- Type of a reporting component: value * is used as the list contains all the components of query.
- S_RS_COMP1(Business Explorer - Components: Enhancements to the Owner): In this role, values similar to S_RS_COMP role should be maintained.
- Once you assign all the required values, YELLOW objects will turn into GREEN now, SAVE the role and GENERATE the role.
- Click on SAVE (Ctrl + S) new window will pop up, just hit ENTER.
- Message will appear in status bar Data was saved.
- Click on Generate (Shift + F5) button.
- Message will appear in status bar Profile(s) created.
- Once you generate the role, do not click on SAVE button.
- Now click on F3 / Back you are back to the main screen where now go to Users tab.
- Enter BW User Id in User ID field and hit enter, name & other details will appear.
- Click on User Comparison button to update user profile with the given role.
- New window will pop-up where you've to select Complete comparison.
- Message will appear in status bar - User master record for all roles adjusted.
- Save the role and exit.
* Constant values for authorization: One should not use constant values for authorization because maintenance will increase as you've to go and change such values in each & every role.