Ads from Google

Saturday, February 9, 2008

SAP BW 7.0/BI 7.0 new authorization

SAP has change the naming of BI to BW 7.0 while BI will be reserved for Business Object (BOBJ) . Authorization concept in BI 70 (SAP business intelligence, SAP business warehouse) has been changed dramatically, following are notes I collected from forum
  • New authorization concept: Authorization Analysis (which is active by default) note 820183, 955990, 923176
  • Therefore authorization checks are enforced for authorization object S_RS_AUTH and the only valid value to get past the check is 0BI_ALL (business intelligent all) which is the equivalent to saying "all of your authorization relevant objects" Not good if you have any, because users that were restricted will not be after giving this access. (After you implement your own security relevant objects with “authorization analysis, you will have other values to put in S_RS_AUTH but these will not exist at first, thus the need for the only valid value that will exist, 0BI_ALL)
  • https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/media/uuid/ac7d7c27-0a01-0010-d5a9-9cb9ddcb6bce
  • https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/4495
  • BI 7.0 upgrade guide https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/e0c9c8be-346f-2a10-2081-cd99177c1fb9
  • If you really want to implement the new concept it will either have to be address as a team effort as part of the upgrade, or addressed later as a separate project. We opted for the later.
  • Solution use IMG setting in BI and turn off the authorization analysis concept and choose the "obsolete" authorization objects instead.
  • Even using the standard BW authorization objects and current security role implementation copied from your previous BW system, you will still encounter a new authorization object check on S_RS_MPRO for access to multiproviders. This mean you have to change many roles, depending on the number of Z* infocubes you are protecting etc.6) You cannot use both the authorization analysis concept (active by default) and your old BW authorization objects at the same time, thus the need to either redesign, reimplement all security roles, or turn off authorization analysis concept in IMG until addressed under a separate project after upgrade.

Resources related to SAP BW 7.0 and authorization is very general as following:


Training :
- SAPNW SAP NetWeaver - Overview: 3 days
- BW350 BI - Data Acquisition: 5 days
- BW370 BI - Integrated Planning: 5 days


5 comments:

Anonymous said...
This comment has been removed by a blog administrator.
Anonymous said...

I really like when people are expressing their opinion and thought. So I like the way you are writing

Anonymous said...

It is useful to try everything in practice anyway and I like that here it's always possible to find something new. :)

srikanth said...

Your given most of the use full information..The Sales and Distribution (SAP SD) consists of all master data, system configuration, and
transactions to complete the Order to Cash process.
It includes the following information and processes.SAP SD TRAINING IN A SIMPLE WAY.

sap sd online training

Enrique K Hazelton said...

Your given most of the use full information..The Sales and Distribution (SAP SD) consists of all master data, system configuration, and
transactions to complete the Order to Cash process.
It includes the following information and processes.SAP SD TRAINING IN A SIMPLE WAY.

sap sd online training