BPC 10.1 on HANA : Authorization for Input Template & data level security

[former_member419358]

Hello Everyone,

I have below scenario in my system and I need to have below security in BPC 10.1 on HANA system.

Scenario: I have User 1, User 2 and User 3 in BI system. All the users are imported in BPC system. There are three units Unit 1, Unit 2 and Unit 3 in Entity dimension. I have created input templates to do planning for all three units.

Requirement : I would like to have User 1 should only access Unit 1, User 2 should only access Unit 2 and User 3 should only access Unit 3 for Planning / Budgeting. In the context menu it self, user's should not see any other Units.

What I have done so far: I have created 3 data access profiles and assigned each data access profiles the respective Units (Under member Access tab) with Read and Write access. After that I assigned each Data access profiles to respective users. Also, I have assigned below roles in back end BI system. I have created BPF so that respective user's should be able to see input templates to do planning but when I login to BPC 10.1, user's are not able to see any input templates. Do I need to assign any additional rights ?

/POA/BUI_FLEX_CLIENT

/POA/BUI_UM_USER

/POA/CLM_BPC_USER

/POA/CLM_USER

/POA/FCP_ADMIN

/POA/FCP_DISPLAY

SAP_BPC_ADMIN

SAP_BPC_BICS_REPORTER

SAP_BPC_BTCH_JOB

SAP_BPC_CLM_EXPORT

SAP_BPC_CLM_IMPORT

SAP_BPC_MDX_REPORTER

SAP_BPC_TABU_DIS

SAP_BPC_USER

SAP_BPC_WS_USER

SAP_SM_BPCA_TBOM

ZBPC_KPM000002

ZBPC_KPU000001

ZBPC_X6M000002

ZBPC_X6U000001

ZBPC__BUI_IN_VAD

ZBPC__BUI_IN_UNITS

ZBPC__BUI_IN_UNIT1

ZSAP_BPC_BTCH_JOB

ZSAP_BPC_CLM_EXPORT

ZSAP_BPC_CLM_IMPORT

ZSAP_BPC_RFCACL_DEVELOPER

ZSAP_BPC_RFC_DESTINATIONS

Regards,

BI

[damovand]

Hi,

Please be mindful of the performance impact of having so many individual DAPs.  DAP is checked for almost any BPC process, it could have profound affect on your performance if you have many users and each is having a separate DAP.

Best Regards,

Leila

[former_member419358]

Hi Leila,

Thanks for your reply.

I will have 125 users across the different units who will do their budgeting. I will have to create atleast 125 DAP so that respective users can see their relevant data and units and can do planning.

Will there be any problem or performance impact if we create 125 DAP in BPC ? Any other option do we have ?

Regards,

BI

[Former Member]

Hi BI,

First of all, you have to assign manually only first 2 roles in that list. All other roles will be assigned automatically or shouldn't be there.

Second, it looks like this list includes access to 2 Environments.

Third, you have to assign Task Profiles in Web Admin to enable access to Reports/Input templates. I don't see those in your list.

Regards,

Gersh

[former_member419358]

Hi Gresh,

Thanks for your reply.

I was adding additional roles just to see if I am not missing any authorization for accessing input templates already created by BPC developer.

I have assigned below Task profiles and using which I am able to create new input templates on web but can't see already created input templates and assigned through BPF. Also, I am able to see only Library and Documents tab while loging into BPC portal.

Please find below few screenshots.

1. BPC First Screen after login with user id User

2. Below Task profile assigned to user but still not able to see any input templates. Also, not able to see Activities tab next to documents.

Kindly let me know if I am missing anything.

Regards,

BI

[former_member419358]

Hi Gresh,

I was working around and was able to proceed further.

1. I have assigned below task profiles and now Activities tab was visible which was having input templates.

2. However the other issue started. I have below hierarchy Configured in Organization (Entity) dimension as below

In my input templates on Page Axis, I have selected Context option for Organization dimension  so when user logs in then he/she should see their respective units.

1. When Unit 1 user logs in to BPC, he is able to open input tempaltes without error.

2. When Unit 2 user logs in to BPC, he is able to open input templates without error.

3. When Unit 3 / Unit 4 user logs in to BPC, he gets below error.

in below screen shot, 100010GJBD1011 means Unit 1...

Thanks for all your help so far.

Regards,

BI

[Former Member]

Hi BI,

This error means that in that report you either has that Node hard-coded or you have a member formula that refers to that member, but user doesn't have access to this member.

Please verify both those cases.

Regards,

Gersh