Need to restrict the user's authorization to enable external access of BEx Query

[PBT]

In SAP BW BEx Query we have option to check if we want to enable external access of the BEx query at query designer level, but in our organization, we have two types of users, developers & another Super user. All the users excluding developers should not be able to enable external access, OLE DB, OData & Easy Query at Query designer level. Can anyone help me with right authorization object & relevant selections to do this.

[Savio_Dmello]

Ask your BAsis/security team to control the access in PFCG role using below

Authorization Object: S_RS_TOOLS
Authorization Field: RS_TOOL
Value: RSRQ (Query Designer - Release Query for External Access)

Leave the RSRQ value empty for the users you don't want to give external excess to the query.

For more complex control

You can further restrict external access based on specific access methods using the following authorization objects:

S_SERVICE: This can restrict access to specific services such as OLE DB or OData.
S_RFC: This controls RFC access, which could also be used for remote data extraction.
S_BI_EASYQ: This specifically governs Easy Query access.

Let me know