Skip to Content
Author's profile photo Santhosh Kumar R G

Analysis Office Role Folder in SAP NetWeaver platform

If we need to save an analysis workbook to the BW backend, we need to create a Role folder. The saved workbooks can be opened using the T-code RAAOE.

All the available versions of SAP Analysis office and BW NetWeaver supports for it.

Prerequisites

  • The BW systems have to be defined in the saplogon.ini file in the Windows directory on your local machine.
  • The User should have access to the System with at least basic authorizations.
  • The Analysis office should be installed on your local machine and the Plug-in should be enabled in Microsoft Excel.

 

Step-by-Step procedure

Step 1: Create a Folder Role, which is used to store the Workbooks

Procedure:

  1. Run T-code PFCG (Role Maintenance)
  2. Provide Role name (Folder name), Description (Optional) and create as Single Role

Ex:    Z_TEST_WB_FOLDER

Role folder to save Workbooks

 

 

  1. In User tab, add the users who needs access to this folder.

 

 

Note: No authorizations required in Authorizations tab.

 

 

Step 2: Create Authorization Role for accessing (complete access) the created Role folder in previous step

 

Procedure:

  1. Run T-code PFCG (Role Maintenance)
  2. Provide Role name, Description(Optional) and create as Single Role

Ex:    Z_TEST_WB_FOLDER_FULL

Authorization Role to access(complete)

the Folder Role Z_TEST_WB_FOLDER

 

  1. In Authorization tab, add the below Authorization Objects and Values Manually

 

Authorization Object

Field Name

Field Value

S_USER_AGR ACTVT *
ACT_GROUP Z_TEST_WB_FOLDER
S_USER_TCD TCD RAAOE
S_RS_AO ACTVT *
RSAO_OBJID *
RSAO_OBJTY *
RSZOWNER *

 

 

 

  1. In User tab, assign the users who needs complete access to the Workbooks

 

 

Step 3: Create Authorization Role for accessing (Display access) the created Role folder in first step

 

Procedure:

  1. Run T-code PFCG (Role Maintenance)
  2. Provide Role name, Description(Optional) and create as Single Role

Ex:    Z_TEST_WB_FOLDER_DISP

Test role to access Z_TEST_WB_FLD  |Display access

 

  1. In Authorizations tab, add the below Authorization Objects and Values Manually

 

Authorization Object Field Name Field Value
S_USER_AGR ACTVT *
ACT_GROUP Z_TEST_WB_FOLDER
S_RS_AO ACTVT 03 (Display)
RSAO_OBJID *
RSAO_OBJTY *
RSZOWNER *

 

 

  1. In User tab, assign the Users who needs display access to the Workbooks

 

 

 

Result

The Users are able to view and access the Workbooks in the folder and perform the actions based on the authorizations.

 

 

 

 

 

Troubleshooting Note:

If any authorization errors, check in SU53 (Missing Authorizations) and assign them to Users.

 

Thanks,
Santhosh Kumar R G

Assigned tags

      8 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo Danqian Chen
      Danqian Chen

      it's great, thank you for sharing.

      Author's profile photo Misaq T
      Misaq T

      Awesome Sathosh! Keep blogging and keep sharing your knowledge.

      Author's profile photo Hafiz Ali
      Hafiz Ali

      Nice. Good idea to share experience with each other.

       

      Thanks

      Author's profile photo Ashwini Pachorkar
      Ashwini Pachorkar

      Hi Santhosh,

      Thanks for sharing.

      Would you be able to let know if there any way we could view the role name which is created as a folder in BW.

      We were looking for using the roles based workbook in Fiori,would you have inputs for same.

       

      Thanks & Regards,

      Ashwini

       

      Author's profile photo Aleksandrs Frolovs
      Aleksandrs Frolovs

      Dear Santhosh,

      Thanks for this great article. Can you please specify why step 3 is needed.

      Role of Step 02 already includes display access.

      Or roles of step 02 , 03 are about to be assigned to different users?

       

      Thanks

       

      Author's profile photo Martin Neetling
      Martin Neetling

      Is it possible to create sub-folders?

      Author's profile photo Arthur Chen
      Arthur Chen

      Hi Martin

      You can create sub-folders in PFCG->Menu.

      Cheers.

      Arthur

      Author's profile photo terry carter
      terry carter

      Hi Santhosh.

      I have a few question regarding  the standard authorisation object

      S_USER_AGR, Authorizations: Role Check.  Being manually added.

      Activity = *

      This clashes with some key security and access risk related to the ability to change the security roles.

      01, Add or Create

      02, Change

      06, Delete

      21, Transport

      36, Extended maintenance

      64, Generate

      DL / UL , Download and upload

       

      Questions

      1. Should the SU24 values should be updated by for transaction RAAOE And RAAOP  (not maintained by SAP )
      2. Should these values for ACTVT not be limited to 02 and 03.
      3. Just to confirm for each folder role, we should create 1 additional display role and Update role, with the assumption that some users can only view and some can only update
      4. Just to confirm what happens if you have multiple Folder roles, I assume we can set ACT_GROUP to Z_TEST_WB_FOLDER*