BW/4HANA User Authorization replicate in SAP Analytics Cloud

[bogdanbgddm]

Hello,

I am using SAP Analytics Cloud with BW/4HANA 2.0 (Live connection) and I was wondering how can I transfer the BW Users Authorization to SAC User Authorizations.

For example, my BW Users have restrictions to distribution channels when they visualize the report through Microsoft Analysis for Office, I want to use same BW Users with same authorizations in SAC as well, so when I will share with them a report in SAC they will have the same restrictions that I defined in BW.

Thanks in advance

[VijayetaSharma · Accepted solution]

Hello bogdanbgddm,

In case of live BW connection from SAC, SAC always respects existing roles and authorization in source system (in your case it is BW4HANA access). You do not need SSO between SAC and BW4HANA to take advantage of this. SSO between SAC and BW makes it easier for end user in terms of data consumption for end users. They do not need to authenticate when they open SAC stories. For instance you can use a password (SAC Connection Authorization = "User Name and Password" instead of "SSO") based live BW connection in SAC story and all your BW authorization/ access will still be considered in SAC side. End user will be prompted for BW side of credentials, whenever they access SAC story.

Thanks,

Vijayeta

[bogdanbgddm · Accepted solution]

Hello vijayeta.sharma,

How can I setup this SAC Connection Authorization instead of SSO?

They will need to log into SAC to browse the stories I gave them access, once they access the story I want those authorizations from BW applied.

Is there any other way? I am new to SAC/BW4 and I am searching for the best way to do this.

Thanks

[VijayetaSharma · Accepted solution]

Hello bogdanbgddm,

When you setup connection to your BW4 system from SAC, you have option to select "authorization type" under direct live connection. You need to choose " User Name and Password" or "SSO". If you choose "User Name and Password" you end user will be prompted for BW side of credentials whenever they open SAC stories. Regardless if you use go with "User Name and Password" based option or "SSO" or "None" option, SAC will always respect users existing roles and authorization in BW. For live connection, data level auth is controlled by the source (BW in your case) - "always". SAC only let you control object level (SAC model, stories, apps...) authorization (read, delete, edit etc).

Here is a screenshot of SAC live connection with password based setup:

https://blogs.sap.com/2020/06/17/sap-analytics-cloud-live-data-connection-to-sap-bw/

Appreciate if you flag the correct answer.

Thanks,

Vijayeta

[bogdanbgddm · Accepted solution]

vijayeta.sharma it worked with your solution, thank you !