Analysis authorizations created in T-CODE RSECADMIN do not work on Market Segment.

[#1]

Dear All.

Requirement:
On the Market Segment app, we want to set permissions to only see certain CO areas.
Example - Set a role to be authorized to see only the data in CO area 1000.

Implementation Details:
(1) Set the characteristics of the CO area to the authorization-related characteristics.
(2) In T-CODE RSECADMIN, create an analysis authority that specifies CO area 1000.
(3) Assign the analysis authority in (2) to the role's authority object S_RS_AUTH.

Result:
On the Market Segment app, an error occurred that there is no authority.

Remarks:
When the authority object: S_RS_AUTH is set to *, the analysis authority "0BI_ALL" is also assigned, which means that data other than the CO area 1000 can be viewed.

Therefore, what should I do to make the analysis authority effective?
(I have also read about creating an authority variable (for the CO area) on the query side, but I don't know what to set for "Var Represents" when creating the authority variable).

Please let me know. Thank you in advance.

[S_Sriram · Accepted solution]

Hi 

Have you provided the authority on the query level? authorization object name S_RS_COMP & S_RS_COMP1

Regards

SS

[yukitsumura · Accepted solution]

Dear S_Sriram.

[yukitsumura · Accepted solution]

Dear S_Sriram. Thank you for your reply. I checked the permissions and they were all set to *&ALL Values & ALL activities regarding S_RS_COMP & S_RS_COMP1. Is this setting impossible? If the settings are wrong, I would appreciate it if you could tell me how I should fix it. S_RS_COMP RSINFOAREA * RSINFOCUBE * RSZCOMPTP All values RSZCOMPID * ACTVT All activities S_RS_COMP1 RSZCOMPID * ACTVT All activities RSZCOMPTP All values RSZCOMPID * RSZCOMPTP All values ACTVT All activities Thank you in advance.

[S_Sriram · Accepted solution]

Hi If the permissions are * means ok, once again check the missing authorization in the RSECADMIN transaction code.

[yukitsumura]

Dear S_Sriram.

Thank you for your reply.

I have attached a photo of the authority that we are creating in the RSECADMIN transaction code. and would be happy to review the contents.
Please let me know if there is anything wrong with the configuration.

Best Regards.

[S_Sriram]

Hi Check this blog follow the steps as mentioned in the Assigning Authorization Objects to Users, https://community.sap.com/t5/additional-blogs-by-members/step-by-step-sap-bi-security/ba-p/12885755