Reporting user roles configuration for Analysis for Excel reports based on ABAP CDS analytical queries

Hi, i this post I would like to share information about reporting user roles for accessing Analysis for Excel workbooks based on ABAP CDS Analytical queries.

Imagine that we have ABAP CDS analytical query in area of Plant Maintenance (PM):

• Query DDL name: ZPM_C_NAME

• Query SQL view name: ZVPM_C_NAME

• Cube DDL name: ZPM_I_NAME

• Cube SQL View name: ZVPM_I_NAME

• DCL was created for Cube and based on Plant Authorization Object I_IWERK .

• Analysis workbook name: ZWB_PM_NAME

I recommend to create at least two group of roles:

• ZROLE_PM_REPORTS - Basic Role with general authorizations and menu included Analysis workbooks

• ZROLE_PM_WERK_<NAME1>, ZROLE_PM_WERK_<NAME2>,..ZROLE_PM_WERK_<NAMEN>- Organizational Roles for plants authorizations.

  They will define information about which plants data user will be able to analyse.

Basic Role ZROLE_PM_REPORTS should include:

• S_RFC Authorisation check for RFC access

  • RFC_TYPE = FUGR

  • RFC_NAME = SYST, RFC1, RSAO_CORE, RSBOLAP_BICS*, RSOBJS_RFC_INTERFACE

  • ACTVT = 16

• S_RFC Authorisation check for RFC access

  • RFC_TYPE = FUNC

  • RFC_NAME = BICS_PROV_*,RFC_GET_FUNCTION_INTERFACE

  • ACTVT = 16

• S_TCODE Transaction Code Check at Transaction Start

  • TCD = RAAOE, SU53

• S_USR_AGR Authorisations: Role Check

  • ACT_GROUP = ZROLE_PM_*

  • ACTVT = 03

• S_RS_COMP Business Explorer - Components

  • RSINFOAREA = *

  • RSINFOCUBE = 2CZVPM_I_*

  • RSZCOMPTP = REP

  • RSZCOMPID = 2CZVPM_C_*

  • ACTVT = 03, 16

• S_RS_COMP1 Business Explorer - Components: Enhancments for the Owner 

  • RSZCOMPTP = REP

  • RSZCOMPID = 2CZVPM_C_*

  • RSZOWNER = *

  • ACTVT = 03, 16

• S_RS_AO Analysis Office: Authority Object

  • RSAO_OBJID = ZWB_PM_*

  • RSAO_OBJTY = 00

  • RSZOWNER = *

  • ACTVT = 03, 16

Also you should add reports to this role menu. Now it’s not possible to add them through PFCG t-code, then use Save workbook to Role in Analysis for Excel. See discussion: https://archive.sap.com/discussions/thread/3390213

Organizational Role ZROLE_PM_WERK_ALL for all plants should include:

• I_IWERK PM: Maintanence Planning Plant

  • TCD = RAAOE

  • IWERK = *

Notes:

• It is recommended to additionally trace authorizations to get your values for S_RFC.
• I used asterisk(*) to give access to values bases on mask, e.i. in similar report names or functional groups.

In result:

Reporting user with roles ZROLE_PM_REPORTS and ZROLE_PM_WERK_ALL will be able to open Analysis for Excel, see reports in Roles area, Open reports and Analyse data for all plants.

Thank you for attention!