cancel
Showing results for 
Search instead for 
Did you mean: 
Read only

BPC - Error with queries, RSECADMIN and DAP's

former_member381836
Participant
0 Kudos
614

Hi, experts,

I configured BPC 11.1 Embedded Security both in BW and in BPC. Whether I use RSECADMIN configuration or DAP's configuration, the following problem arises:

I want to restrict access by 0COMP_CODE. I designed a query with access to only two companies (COMP_A and COMP_B). When I set "Global authorization" for 0COMP_CODE in RSECADMIN, the query works without a problem. When I try to restrict it to either one of those values (let's say COMP_A), the query opens with an error and shows no data, whether it be in Analysis for Office or in RSRT t code.

Now, when I right-click>Filter by Member on 0COMP_CODE, the only option available is the company I restricted access to (COMP_A), so that when I select said company, the query now shows transactional data as it is supposed to do.

From this I gather that the security configuration is correct because I am able to access transaction data for only that company, so my question is, how do I force the query to try to read the data for only the companies the user has access to? Or how do I prevent the error from showing up?

The same is true for when I use DAP's. That is, the user is assigned 0BI_ALL and further restricted using a BPC DAP, but when opening the query it does not show any data, only the message (User does not have authorization) but I am able to restrict my selection from Analysis' Design Panel to the company I restricted the access to.

We're using BPC 11.1 and BW4HANA 2.0

Thank you in advance for any help you could provide.

Accepted Solutions (0)

Answers (1)

Answers (1)

gregor_dieckmann
Product and Topic Expert
Product and Topic Expert
0 Kudos

Ni Nidia,

you can use a variable on characteristic 0COMP_CODE that get the values from the authorization.

The blog

https://blogs.sap.com/2019/02/14/bpc-embedded-common-dap-configurations/

describes how BW authorizations and DAPs are merged. But also here a variable that gets the values from authorization should be used.

Regards,

Gregor