topic Re: BI Reporting authorization problem in Application Development and Automation Discussions

BI Reporting authorization problem

Former Member — Mon, 25 Jan 2010 16:42:40 GMT

I have problem in security below is problem could any help on this --uper Reporters cannot create Global Calculated Key Figures (CKF), Restricted Key Figures (RKF)or Structures.

Currently they are able to create global objects for these 3. We want to prevent them from creating global objects for CKF, RKF and structures.

These are the values maintained in end user reporting role

Business Explorer - Components: Enhancements to the Owner S_RS_COMP1

Business Explorer - Components: Enhancements to the Owner T-BD56001600

03, 16 ACTVT

) of a reporting compo * RSZCOMPID

a reporting component CKF, QVW, REP, RKF, SOB, STR RSZCOMPTP

erson Responsible) for * RSZOWNER

Business Explorer - Components: Enhancements to the Owner T-BD56001601

03 ACTVT

) of a reporting compo * RSZCOMPID

a reporting component VAR RSZCOMPTP

erson Responsible) for * RSZOWNE

Any help on this please

Re: BI Reporting authorization problem

Former Member — Mon, 25 Jan 2010 19:08:29 GMT

I would check the values allocated for the S_RS_COMP object not S_RS_COMP1

Are you certain they have the authorisation values you listed in your original posting? It may be some other values are overriding the actions you are trying to allow / limit.

From what you've shown they only have 03 display and 16 execute for the items you are trying to protect.

Re: BI Reporting authorization problem

Former Member — Tue, 26 Jan 2010 00:53:14 GMT

We have two roles , from these roles it is coming

Power Reporting User role

S_RS_compActivity * ACTVT

InfoArea * RSINFOAREA

InfoCube * RSINFOCUBE

Name (ID) of a reporting compo * RSZCOMPID

Type of a reporting component QVW, SOB RSZCOMPTP

Activity * ACTVT

InfoArea * RSINFOAREA

InfoCube * RSINFOCUBE

Name (ID) of a reporting compo S, Y RSZCOMPID

Type of a reporting component REP RSZCOMPTP

S_RS_Comp1

Activity * ACTVT

Name (ID) of a reporting compo * RSZCOMPID

Type of a reporting component QVW, REP, SOB RSZCOMPTP

Owner (Person Responsible) for $USER RSZOWNER

Activity 03 ACTVT

Name (ID) of a reporting compo * RSZCOMPID

Type of a reporting component QVW, REP, SOB, VAR RSZCOMPTP

Owner (Person Responsible) for * RSZOWNER

REPORTING END_USR role

S_RS_Comp

Activity 03, 16 ACTVT

InfoArea * RSINFOAREA

InfoCube * RSINFOCUBE

Name (ID) of a reporting compo * RSZCOMPID

Type of a reporting component CKF, QVW, REP, RKF, SOB, STR RSZCOMPTP

Activity 03 ACTVT

InfoArea * RSINFOAREA

InfoCube * RSINFOCUBE

Name (ID) of a reporting compo * RSZCOMPID

Type of a reporting component CKF, RKF, STR, VAR RSZCOMPTP

Activity 03, 16 ACTVT

InfoArea * RSINFOAREA

InfoCube * RSINFOCUBE

Name (ID) of a reporting compo S, Y RSZCOMPID

Type of a reporting component CKF, QVW, REP, RKF, STR RSZCOMPTP

S_RS _Comp1

Activity 03, 16 ACTVT

Name (ID) of a reporting compo * RSZCOMPID

Type of a reporting component CKF, QVW, REP, RKF, SOB, STR RSZCOMPTP

Owner (Person Responsible) for * RSZOWNER

Activity 03 ACTVT

Name (ID) of a reporting compo * RSZCOMPID

Type of a reporting component VAR RSZCOMPTP

Owner (Person Responsible) for * RSZOWNER

Edited by: raom78 on Jan 26, 2010 1:54 AM

Re: BI Reporting authorization problem

Former Member — Tue, 26 Jan 2010 06:20:08 GMT

HI,

I have checked the roles assigned to power user and it seems he has no creare access for key figure(CKF, RKF) under S_RS_COMP.

What I suggest you to check if power user has access to S_RS_IOBJ. If yes, maintain only display access for this object and try whether he can still able to create key figures.

Note: If user has Info object creation access(s_rs_iobj) then he can able to create all key figures under it.

Please let me know...if it resolves your issue.

Best Regards

Imran