on 2022 Jun 24 3:28 PM
Hi SAP community, I'm currently using BPC 10.0 and having trouble setting up Data Access Profile for a specified group of users:
1. I've set up a BPC Team and Task Profile for this User group "PILOT" and also a Data Access Profile. Users are all assigned to this PILOT team and the Task Profile, Data Access Profile are assigned to the User Team as well. (This way users are linked to Team, then other security accesses go with the BPC Team instead of single users. This works very well for other User Team in the system)
2. For their model access, I'd like to only giving them access to Cost Center #1 - #3 in the Consolidated Expense Model (as shown in the screenshot) for the Dimension member of COST_CENTER.
3. In this Data Access Profile, I also see there is a dimension called ENTITY, it is by default set as giving "Read and Write" access to "ALL Members".
4. After the access is set up, I have one user in this PILOT Team conduct a testing in the model: The user create a BPC report through EPM and selected Cost Center #1 - #100, Given Step 2, we were expecting the user could only see data for Cost Center #1 #2 and #3, but instead, he was able to see data for other cost centers...
I'm not sure why this happened as the Data Access Profile should be the only way to restrict assess to the Dimension members in a model (per my understanding & the SAP guide). Looking for help on how to make this happen to only give user access to certain dimension members (could be base level or hierarchy level). Thanks!
Request clarification before answering.
In general it's better to have some dummy CC without data but all users have read access to it.
The report, stored on the server has to be saved with this dummy CC only. When user will refresh it only allowed CC will be shown.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
We are actually trying to restrict some user's read access to some Cost Centers due to they are not the owner of the cost centers...
With the Data Access Profile setup, we were hoping to give cost center owners access to read and write to those cost centers they own, but not even read data from other cost centers that they don't own.
Adding to what Vadim said, make sure what backend BW roles you have assigned. Ensure user has only user level authorisation backend BW roles and not higher level BW roles. Goto SU01 and check the BW roles assigned in roles tab.
Regards
Nikhil
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Thanks for your comment! Would the BW roles be an impact comparing to the BPC level? Through my other practice (creating different BPC Teams with various types of access/task profile), it seemed work without checking the BW roles. I'll work with the Admin to explore the BW roles and see if that's the key, thanks!
User | Count |
---|---|
6 | |
2 | |
2 | |
2 | |
1 | |
1 | |
1 | |
1 | |
1 | |
1 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.