SAP Security authorizations in Business Objects

[Former Member]

Hi All,

Iam an SAP Security consultant and we are going to implement Business objects very soon.I have some doubts like where do we find any documentation about "SAP BO Template Roles" or some information about the BO authorizations, so that we can add those respective authorizations in the back end roles. And apart from that what else we need to do in CMC to set up the user authorizations in BO.

Your help will be greatly appreciated.

Thanks in Advance

Vijay

[Former Member]

Hi All,

Iam an SAP Security consultant and we are going to implement Business objects very soon.I have some doubts like where do we find any documentation about "SAP BO Template Roles" or some information about the BO authorizations, so that we can add those respective authorizations in the back end roles. And apart from that what else we need to do in CMC to set up the user authorizations in BO.

Your help will be greatly appreciated.

Thanks in Advance

Vijay

[Former Member]

> Iam an SAP Security consultant and we are going to implement Business objects very soon.I have some doubts like where do we find any documentation about "SAP BO Template Roles" or some information about the BO authorizations, so that we can add those respective authorizations in the back end roles. And apart from that what else we need to do in CMC to set up the user authorizations in BO.

Are you implementing SAP Business Objects Business Intelligence. If yes..

There are no "SAP BO Templates Roles" which come in with the installation. However there a new object class(ZSSI) is addded. Following are the 4 objects which comes in with this new object class.

ZCNTADMCES

ZCNTADMJOB

ZCNTADMRPT

ZSEGREPORT

You may want to include these objects in your backend roles.

In CMC primary thing you would need to do would be to include all the roles. By default all user assignments are also incldued. If any role is not included then user will not be able to access CMC.

Thanks.

Anjan

[Former Member]

Hi Anjan,

Thanks for the Information.

I have some more questions, i will be very thankful if you can give some more information.

1.What kind of authorizations do we need to give initially for the Web Intelligence users and Crystal Reports users, do the above authorizations you have mentioned is necessary?

2. Can we trace BO authorizations in case of any missing authorizations?

3.what are those CMC roles you have mentioned above to be assigned to the users?

Thanks in advance

vijay

[Former Member]

> 1.What kind of authorizations do we need to give initially for the Web Intelligence users and Crystal Reports users, do the above authorizations you have mentioned is necessary?

The above listed authrizations are required only for admin users who will do the configurations through trxn /CRYSTAL/RPTADMIN.

> 2. Can we trace BO authorizations in case of any missing authorizations?

Yes you can do ST01 & RSECADMIN trace.

> 3.what are those CMC roles you have mentioned above to be assigned to the users?

After logging in to CMC --> go to Authentication --> SAP.

Add the SAP system to be used for the backend in Entitlement systems tab.

Go to Role Import tab and add all the roles which will be assigned to users in the backend and click on update

Go to options tab --> ensure that "Automatically import users" is checked -> Click on update to import all existing users to whom role included in the roles tab are assigned in the backend system.

note: The authentication tab is visible to only Administrator users.

Thanks.

Anjan

Edited by: anjanpandey on May 31, 2010 6:24 AM

[Former Member]

Thanks a lot for the information Anjan.

So what will be the authorizations that we need to provide for the Webi and Crystal reports users?

Thanks a lot once again.

Regards

Vijay

[Former Member]

> So what will be the authorizations that we need to provide for the Webi and Crystal reports users?

Please read through the guide as per link provided by Alex and read through the following topics.

Configuring SAP Authentication.

Authrizations

Both these topics cover answers for all your questions.

Thanks.

Anjan

[Former Member]

Thanks a lot Anjan....

[Former Member]

Have a look in the auths section of this doc for info on the objects mentioned by Anjan. There are a number of other standard auths that you need to consider too:

https://websmp102.sap-ag.de/~sapidb/011000358700000843912009E/xi31_sp2_bip_sap_install.pdf

[Former Member]

Hi Alex,

Thanks for the link.

Regards

Vijay