Analysis authorization mass setup

[PKing]

Hello all,

is there an option in BI to perform a mass setup of analysis authorization (instead of using RSECADMIN for each).

Or can anyone <b>share an ABAP</b> fo a bulk generation of these authorizations (with direct table access of table RSECVAL) I do not want to use sCATT because im not convinced in transaction RSECADMIN (too much steps to setup a single authorization!).

Thanks in advance for your inputs!

Petra

[Former Member · Accepted solution]

Hi,

you can use the geneartion of analysis authorization in RSECADMIN.

With the following infoprovider:

Template for ODS with Authorization Data (Values) 0TCA_DS01

Template for ODS with Authorization Data (Hierarchy) 0TCA_DS02

Template for ODS with Description Text Authorizations 0TCA_DS03

Template for ODS with Assignment of User Authorization 0TCA_DS04

Hope it helps

You can check this wiki:

https://www.sdn.sap.com/irj/sdn/wiki?path=/display/bi/authorizationinSAPNWBI&

[PKing · Accepted solution]

Hello Jerome,

thanks for the information. I also remembered this possibility and just activated the relevant BI content for this prurpose. Did you already use this possibility? Is it possible to give own names to the generated authorizations? This is absolutely mandatory for us.

Petra

[Former Member · Accepted solution]

HI,

yes, with the ODS Template for Authorization Data (Values) (0TCA_DS01), it's work fine for the Cost center and order authorization.

But the generation create a generated profil with a name RSR_....

You see this profil in rsecadmin -> user -> assignement.

With the ODS Template for ODS with Authorization Data (Hierarchy) 0TCA_DS02, you can manage auth name with the IO 0TCTAUTH

hope it helps

I prepare some wiki page about this subject

[PKing · Accepted solution]

Hello Jerome,

thanks a lot for referring to the wiki. It is great - but did you execute mass generation from these DSOs and can you add or update your wiki (chapter 3- generation) with this part. I posted one thread (BI analysis authorization generation fails due to empty DSO) regarding this part.

Thanks,

Petra