BPC 2021 Embedded: User List & authorizations

[maxboo]

Hi all,

currently when I execute the Querie in RSRT with another business username and parameters environment="nnn"&model="nnn" we get the info that the user has no auth. on the corresponding infoprovider (composite).

In SU53 i can see that the check runs against R_S_AUTH = 0BI_ALL which we obvously do not grant the user.

We have all neccessary Backend analysis Auth in place because without the parameters the query runs just fine for the user!

So i guess it is a BPC DAP issue? I created a DAP for the corresponding model, customized the dimension with "All Members" and "Write" and added my corresponding test user to it.

Checked all the corresponding BPC Tables if everything is active.

Still we get the "no auths on infoprov" error in RSRT!

Thanks in advance and regards,

Max

[maxboo · Accepted solution]

We found the error by debugging the whole execution in RSRT. It seems that at some point the BPC Auths intersect the BW Auths and if there is a mismatch an auth error is thrown.

What was the missmatch? One of our InfoObjects in the BW analysis authorization from the executing user was not maintained as "authorization relevant".

So the BPC Model requested it because it was in the BW Aanalysis Auths from the user but the BW Auth itself just ignores it (because not flagged) --> Long story short - One itab has one record less then the other --> Auth error Dump

Maybe this thread saves some consultants lifes/hours in the future 🙂

Thanks all and regards,

Max

[William_Yu]

BW users will only be listed in BPC admin client when users are assigned to current BPC environment. To create a 'Blank' DAP you only need to create a DAP for dimension with 'all' selected and 'write' right assigned.

[maxboo]

Hi William,

thank you for the quick response. I rephrased my question to be more specific, maybe you can give some further hints!

We added the auth object RSBPC_ID with the corresponding environment to the user which makes the user available in the BPC admin client. Also created the DAP and added our testuser to it, but still getting auth. errors which states that the user is not authorized on the infoprov.

[William_Yu]

Not sure if it makes any difference if the user is NOT assigned to the environment from the admin client but directly given role from from SU01. Probably need to be checked by BPC support team.

[Private_Member_141848]

Hi Max,

From your description, it looks like that DAP and BW AA are configured properly. Seems a product bug here. However, further investigation on your case is needed before reaching a final conclusion.

I would recommend you create an OSS ticket to SAP, so that it can be further identified whether it is configuration issue or product bug.

Thank you!

Best Regards

Annie