cancel
Showing results for 
Search instead for 
Did you mean: 

Display hierarchies in BW4 for authorization relevant characteristics

kamil_jung2
Explorer
0 Kudos
134

Dear colleagues,

I have a question 🙂

We have multiple hierarchies created for 0COMP_CODE. The characterisitc 0COMP_CODE is authorization relevant. And the corresponding analysis authorizations cover single values. They do not cover hierarchy authorizations.

The requirement we have: an user, who is authorized for e.g. company code 0200, should be able to see the whole hierarchy (from root node, down the tree to the node, where the company code is assigend). At the same time, I need to guarantee, that only values for authorized company codes are shown. 

Is this somehow possible?

System: BW/4HANA 2023 SP2

Thank you very much!

Kamil

View Entire Topic
Savio_Dmello
Active Participant
0 Kudos

your current analysis authorizations cover only single values.  you will need to add hierarchy authorizations.

You might also need to create a specific authorization object for hierarchies S_RS_HIER that grants access to the entire hierarchy structure based on the authorized company codes . In rsecadmin the analysis authorization for 0COMP_CODE, include the hierarchy node that corresponds to the company code (e.g 0200). This can be done by defining the hierarchy node in the authorization object.

With this, You can create an authorization that allows access to the whole hierarchy by assigning the root node and restricting values only to authorized company codes.

 

kamil_jung2
Explorer
0 Kudos

Unfortunately this does not work as expected... Once the user is authorized for the root node, the user sees values for complete world. This is not what we want. He should still be able to see values for his company code only. Value and hierarchy authorizations work always in combination.