Analysis authorization - Authorizing Characterstic Values

[Former Member]

Hello all,

We upgraded to BW (BI) 7.0 and thus have to use the new analysis authorization concept. While I have the documentation on how to create them and understand the, I'd like to know if there are any experienced users or experts who can assist.

I have Marc Bernand's PowerPoint "An Expert Guide to New SAP BI features" and while they say that there is an "all or nothing rule" for viewing the query results, with the exception being for key figures and hierarchies, in the presentation (pg 21), it outlines that specific sales orgs can be assigned to the analysis auth (authorizing characteristic values) - this appears to contradict the 'all or nothing' rule if more than these sales orgs are in the query result.

However, when I tested something similar in our dev environment for company code, if a specific company code is listed in the analysis auth (for the applicable characteristic), when I execute the report, I get a "you are not authorized", which is consistent with the new concept.

My main question is that in order to restrict on specific company codes, plants, etc, are the choices to either use a hierarchy or a customer exit? Restricting it by assigning the values for the characteristic won't work. Thanks in advance for any help you can provide.

Any help would be GREATLY appreciated.

[ravindra_tumuluri]

Hello Julie,

It is not necessary to use Hierarchy or customer exit inorder to restrict the access based on company code.

1. First of all make, Company code as authorization relevent in IO settings

2. In RSECADMIN, create one authorization object. It is a good practice to include all SAP Technical objects also. Just click on Inster special characts.

3. For the company code assign required value.

4. Assign this authorization to user in USER tab

5. In the report, If you want to defualt the value of company code, create one authorization relevent variable for company code. You can make this variable as ready for input/Not ready for input.

6. Execute the report.

The user will only get data related to authorized company code.

Regards,

Ravindra