SAP BW Profile to role Convertion

[Former Member]

Profile to Role conversion in SAP BW: by Chandra

AGENDA:

1. Purpose of document
2. Different ways in converting Profile to Roles
3. Different profiles to Roles
4. combining the repeated authorization objects in Composite Profile to Single Role

1. Purpose of document

In older version of SAP BW I,e prior to SAP BW 7.0 profile concept is used in SAP BW security, but from SAP BW 7.0 Profiles has been replaced by Roles which are very easy to add, delete or update any authorization object in Role.

Although there are many upgrade projects are going on to upgrade SAP BW3.x to SAP BW7.x but SAP BW 3.x profiles are left as it is, In this document I am explaining how to convert profiles to roles and make use of new features in SAP BW7.x

2. Different ways in converting Profile to Roles: There are two ways to convert Profiles to Roles in SAP BW

1. Manually
2. Through ABAP Program

In this document explains about converting profiles to roles manually.

3. Different profiles to Roles:

      There three different types of profiles we are converting to roles

• Single profile to Single Role
• Composite profile to composite Role
• Composite profile to Single Role

• Single profile to Single role: Consider CG:XXXX:AB profile, need to be converted to CG:XXXX:AB_Role.

         In CG:XXXX:AB Profile there is below Authorization objects

 

     To convert the above Profile to Role, Go to T-code PFCG Give the CG:XXXX:AB_ROLE as Role name

 

      Click on Authorizations Tab, Click on change authorization data

      Click on edit ---> Insert authorizations ----> From Profiles

       Give the CG:XXXX:AB Profile name, click on continue.

       Click on generate, the below is how the Single Profile is Converted to Role

•   Composite profile to composite Role

            In the below we can see S_RS_ALL is one composite profile,

  This particular composite profile need to be converted to S_RS_ALL_CAP composite Role

   First we need to create one Composite Role for S_RS_ALL_CAP, Go to T-Code PFCG and Create the composite Role,

      Then create three single roles for S_RS_ADMWB_A, S_RS_EXPL_A and S_RS_PLAN as shown above and add them to the above created composite      role by clicking on Roles tab.

• Composite profile to Single Role:

       Taking the same above example, S_RS_ALL is composite profile, now create S_RS_ALL_CAP single role.

 

     Click on Authorization tab and    Click on edit -----> Insert authorizations ------> From Profiles, add S_RS_ADMWB_A, S_RS_EXPL_A and S_RS_PLAN      three profiles in it one by one. Click on generate. This way we can create the composite profile to single roles.

     When we convert Composite profile to single role we may come across repeated authorization objects, for performance improvement it is better to      combine the duplicate authorization objects,

     4. Combining the repeated authorization objects in Composite Profile to Single Role

     When we convert composite profiles to Single roles, we may come across the repeated authorization objects to improve the performance it is suggested      to remove the repeated authorization objects,

     To delete the repeated authorization objects we need to follow the below steps.

     1. Authorization objects with same incidence can be deleted, I,e we can combine Nodes T-BX77052501, T-BX77052503 & T-BX7705204 because they            are having same incidence

     2. If above is satisfied then we need to check with the activities and other fields, if they are same we can combine, in the below we can see Activity      03,16 is same in Node T-BX77052503 & T-BX7705204, so we can combine and delete one node.

     3. In The below nodes T-BX77052501 & T-BX77052502 can be combined, combining T-BX77052500 Need to be discussed

     4. In below though all the fields are same but we cannot combine because they are from different Incidence