Hi, i this post I would like to share information about reporting user roles for accessing Analysis for Excel workbooks based on ABAP CDS Analytical queries.
Imagine that we have ABAP CDS analytical query in area of Plant Maintenance (PM):
Query DDL name: ZPM_C_NAME
Query SQL view name: ZVPM_C_NAME
Cube DDL name: ZPM_I_NAME
Cube SQL View name: ZVPM_I_NAME
DCL was created for Cube and based on Plant Authorization Object I_IWERK .
Analysis workbook name: ZWB_PM_NAME
I recommend to create at least two group of roles:
ZROLE_PM_REPORTS - Basic Role with general authorizations and menu included Analysis workbooks
ZROLE_PM_WERK_<NAME1>, ZROLE_PM_WERK_<NAME2>,..ZROLE_PM_WERK_<NAMEN>- Organizational Roles for plants authorizations.
They will define information about which plants data user will be able to analyse.
Basic Role ZROLE_PM_REPORTS should include:
S_RFC Authorisation check for RFC access
RFC_TYPE = FUGR
RFC_NAME = SYST, RFC1, RSAO_CORE, RSBOLAP_BICS*, RSOBJS_RFC_INTERFACE
ACTVT = 16
S_RFC Authorisation check for RFC access
S_TCODE Transaction Code Check at Transaction Start
S_USR_AGR Authorisations: Role Check
ACT_GROUP = ZROLE_PM_*
ACTVT = 03
S_RS_COMP Business Explorer - Components
RSINFOAREA = *
RSINFOCUBE = 2CZVPM_I_*
RSZCOMPTP = REP
RSZCOMPID = 2CZVPM_C_*
ACTVT = 03, 16
S_RS_COMP1 Business Explorer - Components: Enhancments for the Owner
RSZCOMPTP = REP
RSZCOMPID = 2CZVPM_C_*
RSZOWNER = *
ACTVT = 03, 16
S_RS_AO Analysis Office: Authority Object
RSAO_OBJID = ZWB_PM_*
RSAO_OBJTY = 00
RSZOWNER = *
ACTVT = 03, 16
Also you should add reports to this role menu. Now it's not possible to add them through PFCG t-code, then use Save workbook to Role in Analysis for Excel. See discussion:
https://archive.sap.com/discussions/thread/3390213
Organizational Role ZROLE_PM_WERK_ALL for all plants should include:
Notes:
- It is recommended to additionally trace authorizations to get your values for S_RFC.
- I used asterisk(*) to give access to values bases on mask, e.i. in similar report names or functional groups.
In result:
Reporting user with roles ZROLE_PM_REPORTS and ZROLE_PM_WERK_ALL will be able to open Analysis for Excel, see reports in Roles area, Open reports and Analyse data for all plants.
Thank you for attention!
Bluesky
