Solutions

Unit: Authorization

1-1 Try to execute our test query.

1-1-1 In the BEx Analyzer run query “Divisions” of the InfoCube
AUTH_XX.
1-1-2 Execution should fail. Try to find out why.
Run transaction RSSM. Either run an authorization trace or check
which reporting object exist on the system that are relevant for your
cube. Since your user doesn’t have any reporting object
authorization

1-2 Assign your user authorizations for executing the query.

1-2-1 Create an role TABW90-XX.
Transaction PFCG, type “TABW90-XX” and press the create button.
1-2-2 Change the authorizations of the role, don’t use any template.
Click the tab Authorizations, press change button at the bottom of
the screen. Click cancel on the template pop up.
1-2-3 Include the necessary reporting object manually.
Edit  Insert authorizations  Insert manually. Choose the correct
reporting object from the BW Reporting node.
1-2-4 Maintain the authorizations (give it full authorization).
Expand the tree, click on the right hand control on leaf level
(characteristics / key figure). Press the button Full Authorization on
the pop up.
1-2-5 Generate the profile(s).
Press button Generate.
1-2-6 Assing your user to your role.
In the tab users enter your user in the table control.
1-2-7 Perform a user compare.

______________________________________________________________________________
 SAP AG Business Explorer Solution - 1
 Press button User Compare.
1-3 Try executing your query again.
1-3-1 Logon again to the BEx Analyzer.
1-3-2 Execute the query.
1-3-3 Have a look at the result.
You should see the entire query result consisting of several rows.
1-4 Change the authorizations.
1-4-1 In your role change the authorizations of the reporting object.
Transaction PFCG. Change your own role TABW90-XX.
1-4-2 Assing ‘01’ authorization instead of ‘*’ for the characteristic
0DIVISION.
Expand the authorizations tree and click on the right hand control of
DIVISION, fill in 01 manually or select from F4 help.
1-4-3 Generate the profile(s).
Press button Generate.
1-4-4 Execute the query again and compare the result with what you had
before.
You should now only have one row left (plus a total row).

______________________________________________________________________________
 SAP AG Business Explorer Solution - 2