1 BW 3 0 Authorizations Deborah Board BI

1 BW 3. 0 Authorizations Deborah Board BI RIG USA Know How Network Call May 30, 2002 Know How Network Call - BW 3. 0 Authorizations May 30, 2001 1

Agenda Automatic Security Profile Generator HR Structural Authorizations from R/3 Authorizations from Flat Files New BW Authorization Objects Questions & Answers Know How Network Call - BW 3. 0 Authorizations May 30, 2001 2 2

Agenda Automatic Security Profile Generator HR Structural Authorizations from R/3 Authorizations from Flat Files New BW Authorization Objects Questions & Answers Know How Network Call - BW 3. 0 Authorizations May 30, 2001 3 3

Automatic Security Profile Generator Sourced from Two types of ODS Objects n Authorization Value ODS n Hierarchy ODS Population n From R/3: HR Structural Authorizations n From Flat Files New RSSM User Interface Know How Network Call - BW 3. 0 Authorizations May 30, 2001 4 4

Automatic Profile Generation Architecture 5 < Auth Object > Tcode: RSSM – Generate Authorization 0 TCTAUTHH 0 ORGUNIT BW Metadata 0 Employee Value 0 TCA_DS 01 Hierarchy ODS-Objects 0 TCA_DS 02 Update Rules SAP BW Server Info. Source Mapping & Transfer Rules Data. Source File Know How Network Call - BW 3. 0 Authorizations May 30, 2001 5 Other Mapping & Transfer Rules Data. Source R/3 replicated Metadata

Agenda Automatic Security Profile Generator HR Structural Authorizations from R/3 Authorizations from Flat Files New BW Authorization Objects Questions & Answers Know How Network Call - BW 3. 0 Authorizations May 30, 2001 6 6

HR Structural Authorizations Know How Network Call - BW 3. 0 Authorizations May 30, 2001 7 7

BW/HR Structural Authorizations What’s BW/HR Structural Authorizations n Bring R/3 Structural Authorizations to BW via Standard Extraction n Associate with BW Authorizations via execution of special Module n Full Refresh on a Customer Selected Frequency Key Benefits n Reduced the Redundant Security Setup n Provide Cross System Consistency Know How Network Call - BW 3. 0 Authorizations May 30, 2001 8 8

9 Structural Authorization in BW PSA Transfer Rules T 77 PR R/3 Org. Structure Profile INDX Cluster T 77 UA Assignment T 77 UU User (0 HR_PA_2) (0 HR_PA_3) Data Sources 0 HR_PA_2 Data Source 0 HR_PA_3 Data Source Struc Auth Security Check Update Rules Struc Auth ODSs PSA 0 PA_DS 002 RSSM Trans OR Function 0 PA_DS 003 R/3 OLTP Know How Network Call - BW 3. 0 Authorizations May 30, 2001 9 BW Modules RSSB_Generate _Authorizations

12 Steps to Install Structural Authorizations 1 Create Structural Authorization Profile (IMG or TR-OOSP) 2 Assign User to Profile (IMG or TR-OOSB) 3 Update T 77 UU table to include User Name 4 Execute program RHBAUS 00 to create INDX 5 Activate 0 HR_PA_2 & 3 Data. Source in R/3 and BW 6 Create 0 HR_PA_2 & 3 Info. Source & Communication Structure Know How Network Call - BW 3. 0 Authorizations May 30, 2001 10 10

12 Steps to Install Structural Authorizations 7 Activate and load ODS from R/3 8 Activate Target Info. Objects “Authorization Relevant” 9 Create Authorization Object (Transaction Code: RSSM) 10 Use Transaction code: RSSM or Execute RSSB Function Modules to generate BW Authorization 11 Create Authorization Variables 12 Create Query with Authorization Variables Know How Network Call - BW 3. 0 Authorizations May 30, 2001 11 11

Step 1: Create Structural Authorization Profile Know How Network Call - BW 3. 0 Authorizations May 30, 2001 12 12

Step 1: Create Structural Authorization Profile Know How Network Call - BW 3. 0 Authorizations May 30, 2001 13 13

Step 2: Assign User to Profile in R/3 Know How Network Call - BW 3. 0 Authorizations May 30, 2001 14 14

Step 3: Update T 77 UU Table to Include User Name Know How Network Call - BW 3. 0 Authorizations May 30, 2001 15 15

Step 4: Execute Program to Create Indexes Know How Network Call - BW 3. 0 Authorizations May 30, 2001 16 16

Step 5: Activate Data. Source in R/3 & BW Know How Network Call - BW 3. 0 Authorizations May 30, 2001 17 17

Step 5: Activate Data. Source in R/3 & BW Know How Network Call - BW 3. 0 Authorizations May 30, 2001 18 18

Step 5: Activate Data. Source in R/3 & BW Know How Network Call - BW 3. 0 Authorizations May 30, 2001 19 19

Step 6: Create Info. Source & Comm. Structures Know How Network Call - BW 3. 0 Authorizations May 30, 2001 20 20

Step 6: Create Info. Source & Comm. Structures Know How Network Call - BW 3. 0 Authorizations May 30, 2001 21 21

Step 6: Create Info. Source & Comm. Structures Know How Network Call - BW 3. 0 Authorizations May 30, 2001 22 22

Step 7: Activate and Load ODS from R/3 Know How Network Call - BW 3. 0 Authorizations May 30, 2001 23 23

Step 7: Activate and Load ODS from R/3 Know How Network Call - BW 3. 0 Authorizations May 30, 2001 24 24

Step 8: Mark Info. Objects ‘Authorization Relevant’ Know How Network Call - BW 3. 0 Authorizations May 30, 2001 25 25

Step 9: Create Authorization Objects (RSSM) Know How Network Call - BW 3. 0 Authorizations May 30, 2001 26 26

Step 9: Create Authorization Objects (RSSM) Know How Network Call - BW 3. 0 Authorizations May 30, 2001 27 27

Step 9: Create Authorization Objects (RSSM) Know How Network Call - BW 3. 0 Authorizations May 30, 2001 28 28

Step 10: Generate BW Authorization Objects Know How Network Call - BW 3. 0 Authorizations May 30, 2001 29 29

Step 10: Generate BW Authorization Objects Know How Network Call - BW 3. 0 Authorizations May 30, 2001 30 30

Step 10: Generate BW Authorization Objects Know How Network Call - BW 3. 0 Authorizations May 30, 2001 31 31

Step 10: Generate BW Authorization Objects Know How Network Call - BW 3. 0 Authorizations May 30, 2001 32 32

Step 11: Create Authorization Variables Know How Network Call - BW 3. 0 Authorizations May 30, 2001 33 33

Step 12: Create Query With Authorization Variables 34 Know How Network Call - BW 3. 0 Authorizations May 30, 2001 34

Agenda Automatic Security Profile Generator HR Structural Authorizations from R/3 Authorizations from Flat Files New BW Authorization Objects Questions & Answers Know How Network Call - BW 3. 0 Authorizations May 30, 2001 35 35

Steps to Create Authorization from Flat Files 36 1 Define Reporting Object • Mark Info. Objects Auth. Relevant • Define Reporting Auth Object via RSSM 2 Create Authorization Value Infosoure & ODS • Use 0 TCA_DS 01 as template • ODS name must be xxxx_DS 01 3 Create Authorization Hier Infosoure & ODS • Use 0 TCA_DS 02 as template • ODS name must be xxxx_DS 02 4 Create Update Rules & Flat Files for ODS Loads • The data format = yyyymmdd or per Your Default Format • Several Objects can define as constant 5 Generate Profiles via RSSM or RSSB program • RSSM: Find your ODSs & Mark Auth Obj • Exec RSSB_Generate_Authorizations 6 Create Authorizations Variable in Query Def. Know How Network Call - BW 3. 0 Authorizations May 30, 2001 36 • Define Variables for Auth Info. Objects • Include Variables in your Queries

Step 1: Define Reporting Object Authorization Flag Know How Network Call - BW 3. 0 Authorizations May 30, 2001 37 37

Step 1: Define Reporting Object Know How Network Call - BW 3. 0 Authorizations May 30, 2001 38 38

Step 2: Create Auth. Value Info. Source & ODS Know How Network Call - BW 3. 0 Authorizations May 30, 2001 39 39

Step 2: Create Auth. Value Info. Source & ODS Know How Network Call - BW 3. 0 Authorizations May 30, 2001 40 40

Step 3: Create Auth. Hierarchy Info. Source & ODS Know How Network Call - BW 3. 0 Authorizations May 30, 2001 41 41

Step 3: Create Auth. Hierarchy Info. Source & ODS Know How Network Call - BW 3. 0 Authorizations May 30, 2001 42 42

Step 4: Create Update Rules & Files for ODS Loads Know How Network Call - BW 3. 0 Authorizations May 30, 2001 43 43

Step 4: Create Update Rules & Files for ODS Loads Know How Network Call - BW 3. 0 Authorizations May 30, 2001 44 44

Step 4: Create Update Rules & Files for ODS Loads Know How Network Call - BW 3. 0 Authorizations May 30, 2001 45 45

Step 5: Authorizations from Flat Files Select Reporting Authorization Object Know How Network Call - BW 3. 0 Authorizations May 30, 2001 46 46

Step 6: Create Query With Authorization Variables Know How Network Call - BW 3. 0 Authorizations May 30, 2001 47 47

Agenda Automatic Security Profile Generator HR Structural Authorizations from R/3 Authorizations from Flat Files New BW Authorization Objects Questions & Answers Know How Network Call - BW 3. 0 Authorizations May 30, 2001 48 48

New in Authorization Objects, Frontend (3. 0) S_RS_COMP n New Authorizations Check for Variables in Query Definition n Object type is ‘VAR’ S_RS_COMP 1 n Is checked additionally with S_RS_COMP n Checks for authorizations on query components dependent on the owner (creator RSZOWNER) n Authorizations are necessary, e. g. for creating queries S_RS_FOLD n Suppress Info. Area view of BEx elements n Specify ‚X‘ (true) in the authorization maintenance for suppressing Know How Network Call - BW 3. 0 Authorizations May 30, 2001 49 49

New Authorization Objects, Backend (3. 0) S_RS_IOBJ n Authorization object for working with Info. Objects n Is checked if authorization is not available via S_RS_ADMWB n Additional checks for update rule authorizations S_RS_ISET n For displaying / maintaining Info. Sets (new object in BW) S_RFC n Authorization for GUI activities n Add following RFC_NAMEs with RFC_TYPE ‚FUGR‘ and ACTVT ‚ 16‘ u RRXWS: BW Web Interface u RS_PERS_BOD: Personalization of Bex Open Dialog u RSMENU: Roles and Menus S_GUI n Authorization for. GUI activities. Add the activity 60 (upload) Know How Network Call - BW 3. 0 Authorizations May 30, 2001 50 50

Agenda Automatic Security Profile Generator HR Structural Authorizations from R/3 Authorizations from Flat Files New BW Authorization Objects Questions & Answers Know How Network Call - BW 3. 0 Authorizations May 30, 2001 51 51