Special Access Control Topics - Access Control for Reports

[Bernd_Fledderma]

Special Access Control Topics

In the previous sections I have explained the basic concept of access control. This section will now provide details on special topics in the context of the access control.

7.1 Restriction Rule Workforce

7.2 Delegates

7.3 Access Control for Reports - this blog

7.4 Access Control for custom developed Objects

Special Access Control Topics - Access Control for Reports

Running a report also requires the right presentation of data according to the access settings of a user. The access restrictions for a report are inherited from the work center view the report is assigned to.

Here is what you need to consider to set the access restrictions of a report:

Assigning a report to a work center
In order to provide access for a report to the business user, the report needs to get assigned to a work center (Work Center Business Analytics -> Design Reports -> Assign.

In the “Assign” detailed screen the header line shows the access context of the report. The access context of the report is derived from the data source of the report. The access context of the data source is coming from the business object the data source relates to.

In the detailed list of that screen the work center views are listed also with their access context. When the access context of the work center view matches with the access context of the report, the line is flagged with a green checkmark. For these work center view assignments, the access setting of the work center view can be derived to properly restrict the access to the report data – the report only shows the data the user is allowed to.

If a report is assigned to a work center view where the access context does not match (indicated by the red exclamation mark), the system prompts a warming message, stating that the access context conflict leads to an unrestricted access of data when running that report.

In the analytical settings of the business configuration the administrator can specify whether the reports need to be assigned to business roles. If that indicator is set, the report in addition needs to be assigned to the business role to make that report available for the business user.