BI 7.0 Security Authorization

[Former Member]

We are setting up security for new users in BI 7.0 version and need help with the following questions.

1) What authorization controls the ability to see a list of security objects (ex: all company codes ) in a query variable selection screen.

2) When attaching a role to a user what feature in that role allow you to see the hierarchy structure above it.

Thanks for your help.

[Former Member]

We are setting up security for new users in BI 7.0 version and need help with the following questions.

1) What authorization controls the ability to see a list of security objects (ex: all company codes ) in a query variable selection screen.

2) When attaching a role to a user what feature in that role allow you to see the hierarchy structure above it.

Thanks for your help.

[Former Member]

>

> We are setting up security for new users in BI 7.0 version and need help with the following questions.
> 
> 1) What authorization controls the ability to see a list of security objects (ex: all company codes ) in a query variable selection screen.
> 
> 2) When attaching a role to a user what feature in that role allow you to see the hierarchy structure above it.
> 
> Thanks for your help.

Hi Elsa,

Best of luck for setting up security in BI 7.0

1) If you are referring to variable selection is BEx, then it is controlled by the design in BEx Query Designer

2) Analysis Authorization Objects which is added under S_RS_AUTH in the roles control most of the authorizations including the hierarchy. AA Objects are maintained by transaction code RSECADMIN.

Check out this thread also : /thread/733476 [original link is broken]

Regards,

Zaheer

[Former Member]

"We are setting up security for new users in BI 7.0 version and need help with the following questions.

1) What authorization controls the ability to see a list of security objects (ex: all company codes ) in a query variable selection screen.

2) When attaching a role to a user what feature in that role allow you to see the hierarchy structure above it.

Thanks for your help."

Elsa, if you or the BW developers have marked company code or any other characteristic "authorization relevant" in tcode RSD1, you will require an analysis authorization (tcode rsecadmin) to be created and assigned to a user before they will see any values within the variable drop down.

So the answer to your first question is the S_RS_AUTH authorization object with 0BI_ALL assigned will let you see all auth-relevant characteristics and Key-Figures as a test or for your non-prd systems.

You can create a ZCOMP_CODE analysis auth with the 0COMP_CODE infoobject based on your requirement if you must restrict users by companies.

As for your second question, I am not very clear on what you are asking, perhaps if you elaborate I can offer some more assistance.

Mike