Analysis Office Role Folder in SAP NetWeaver platform
If we need to save an analysis workbook to the BW backend, we need to create a Role folder. The saved workbooks can be opened using the T-code RAAOE.
All the available versions of SAP Analysis office and BW NetWeaver supports for it.
Prerequisites
- The BW systems have to be defined in the saplogon.ini file in the Windows directory on your local machine.
- The User should have access to the System with at least basic authorizations.
- The Analysis office should be installed on your local machine and the Plug-in should be enabled in Microsoft Excel.
Step-by-Step procedure
Step 1: Create a Folder Role, which is used to store the Workbooks
Procedure:
- Run T-code PFCG (Role Maintenance)
- Provide Role name (Folder name), Description (Optional) and create as Single Role
Ex: Z_TEST_WB_FOLDER
Role folder to save Workbooks
- In User tab, add the users who needs access to this folder.
Note: No authorizations required in Authorizations tab.
Step 2: Create Authorization Role for accessing (complete access) the created Role folder in previous step
Procedure:
- Run T-code PFCG (Role Maintenance)
- Provide Role name, Description(Optional) and create as Single Role
Ex: Z_TEST_WB_FOLDER_FULL
Authorization Role to access(complete)
the Folder Role Z_TEST_WB_FOLDER
- In Authorization tab, add the below Authorization Objects and Values Manually
Authorization Object |
Field Name |
Field Value |
S_USER_AGR | ACTVT | * |
ACT_GROUP | Z_TEST_WB_FOLDER | |
S_USER_TCD | TCD | RAAOE |
S_RS_AO | ACTVT | * |
RSAO_OBJID | * | |
RSAO_OBJTY | * | |
RSZOWNER | * |
- In User tab, assign the users who needs complete access to the Workbooks
Step 3: Create Authorization Role for accessing (Display access) the created Role folder in first step
Procedure:
- Run T-code PFCG (Role Maintenance)
- Provide Role name, Description(Optional) and create as Single Role
Ex: Z_TEST_WB_FOLDER_DISP
Test role to access Z_TEST_WB_FLD |Display access
- In Authorizations tab, add the below Authorization Objects and Values Manually
Authorization Object | Field Name | Field Value |
S_USER_AGR | ACTVT | * |
ACT_GROUP | Z_TEST_WB_FOLDER | |
S_RS_AO | ACTVT | 03 (Display) |
RSAO_OBJID | * | |
RSAO_OBJTY | * | |
RSZOWNER | * |
- In User tab, assign the Users who needs display access to the Workbooks
Result
The Users are able to view and access the Workbooks in the folder and perform the actions based on the authorizations.
Troubleshooting Note:
If any authorization errors, check in SU53 (Missing Authorizations) and assign them to Users.
Thanks,
Santhosh Kumar R G
it's great, thank you for sharing.
Awesome Sathosh! Keep blogging and keep sharing your knowledge.
Nice. Good idea to share experience with each other.
Thanks
Hi Santhosh,
Thanks for sharing.
Would you be able to let know if there any way we could view the role name which is created as a folder in BW.
We were looking for using the roles based workbook in Fiori,would you have inputs for same.
Thanks & Regards,
Ashwini
Dear Santhosh,
Thanks for this great article. Can you please specify why step 3 is needed.
Role of Step 02 already includes display access.
Or roles of step 02 , 03 are about to be assigned to different users?
Thanks
Is it possible to create sub-folders?
Hi Martin
You can create sub-folders in PFCG->Menu.
Cheers.
Arthur
Arthur Chen, hi!
You have to put trx RRAOE in each subfolder to be able to see them in AFO, right?
For example:
With this configuration I can only save Reports in folders "Carpeta 3" and "Carpeta 1".
"Carpeta 2" is not visible.
Am I right or is there other way?
Thanks!
Hi Santhosh.
I have a few question regarding the standard authorisation object
S_USER_AGR, Authorizations: Role Check. Being manually added.
Activity = *
This clashes with some key security and access risk related to the ability to change the security roles.
01, Add or Create
02, Change
06, Delete
21, Transport
36, Extended maintenance
64, Generate
DL / UL , Download and upload
Questions