SAP专业教材资料06_howto_generate_bw_author_profile

2002 SAP LABS, INC., SAP AMERICA, INC. AND SAP AG
2
HOW TO … GENERATE BW AUTHORIZATION PROFILES FROM FLAT FILE
1. Check and verify Authorization Technical ODS Templates have been activated. If not, go to Admin Workbench -> Business Content -> Data Target -> under Technical Content (0BWTCT), Authorization Reporting (0TCA); Drag 0TCA_DS01 and 0TCA_DS02 from the middle pane to the right pane under collected objects for activation -> select “grouping necessary objects” and “Install in background”.
2002 SAP LABS, INC., SAP AMERICA, INC. AND SAP AG
1
HOW TO … GENERATE BW AUTHORIZATION PROFILES FROM FLAT FILE
2 The Result
The individual user master records will have a profile automatically generated after the scheduled generation process. The example below displays the generated profile (RSR_0006211) for user BW20-00, the head of Root cost center has follow authorizations: • • • • Access to all Key Figures Access to Costcenters from 2001F through 2001SALES Access to Employees 20010001 through 20010014 Hierarchy authorization at summary level and the root level (generated name F4IZ…)
3 The Step By Step Solution
3.1 Prepare Input DataSource format for Authorization Profile Generator.
Once you understand the authorization requirements and before you start the actual configuration work, you need to analyze, map and prepare the format of your input datasource that contains authorization data. The first step, you must know what is expected value in the target ODSs. To do so, you need to review the content of two technical ODS templates devliered in BW 3.0.
• • • • • • • • •
0TCTIOBJNM (from CSV file) 0TCTLOW (from CSV file) 0TCTHIGH (from CSV file) 0TCTOPTION (from CSV file) 0TCTADFROM (from CSV file) 0TCTADTO (from CSV file) 0TCTUSERNM (from CSV file) 0TCTSIGN (I=interval) 0TCTSYSID (null) 0TCTOBJVERS (A=active version)
HOW TO … GENERATE BW AUTHORIZATION PROFILES FROM A FLAT FILE
1 Business Scenario
You are responsible for implementing BW authorizations at BW Incorporated. BW Incorpoated has a non-SAP financial system, which tied to employee information. The company has the authorization requirement to limit the access of employee information based on the cost center responsibility. The responsible managers can view information for his/her organization and the subordinate organizations. Each employee belongs to an organization under a hierarchical Cost Center structure as depicted in the following sample diagram. It illustrates the person responsible for Group 1 who is allowed to view all cost centers belonging to group 1 and employee records under it. Customer also wants to be able to control authorization at hierarchy node level. The organization and cost center assignments changes from time to time. Currently, BW Incorporated maintaines these authorization data in various tables in their non-SAP system. To maintain these ever changing information again in BW environment would be a very time consuming effort. Customer wishes to reuse what has been setup. You have heard about the new BW authorization profile generator function and you want to setup a regularly scheduled refresh process to bring your non-SAP HR authorizations data into the BW environment on a periodic basis. The following diagaram depits the cost center structure and employee relationship at the BW Incorporated for the head of BW Groups with User id BW20-00.
SAP (SAP Labs, SAP America, Inc. and SAP AG) assumes no responsibility for errors or omissions in these materials. These materials are provided “as is” without a warranty of any kind, either express or implied, including but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or non-infringement. SAP shall not be liable for damages of any kind including without limitation direct, special, indirect, or consequential damages that may result from the use of these materials. SAP does not warrant the accuracy or completeness of the information, text, graphics, links or other items contained within these materials. SAP has no control over the information that you may access through the use of hot links contained in these materials and does not endorse your use of third party web pages nor provide any warranty whatsoever relating to third party web pages.
3. Based on the authorization requirement, map the Input Data Source. Prepare to bring the appropriate data elements from nonSAP database tables to two flat CSV files, one for authorized values as depicted on the right. Same process is needed for Hierarchy.