how to... generate bw authorization profiles from a flat file

8/12/2019 How to... Generate BW Authorization Profiles From a Flat File

http://slidepdf.com/reader/full/how-to-generate-bw-authorization-profiles-from-a-flat-file 1/11

How to…

Generate BW AuthorizationProfiles from a Flat File

BUSINESS INFORMATION W AREHOUSE

ASAP How to Paper

Applicable Releases: BW 3.0A or aboveJuly 15, 2002

SAP (SAP Labs, SAP America, Inc. and SAP AG) assumes no responsibility for errors or omissions in these materials.

These materials are provided “as is” without a warranty of any kind, either express or implied, including but not limited to, theimplied warranties of merchantability, fitness for a particular purpose, or non-infringement.

SAP shall not be liable for damages of any kind including without limitation direct, special, indirect, or consequential damagesthat may result from the use of these materials.

SAP does not warrant the accuracy or completeness of the information, text, graphics, links or other items contained withinthese materials. SAP has no control over the information that you may access through the use of hot links contained in thesematerials and does not endorse your use of third party web pages nor provide any warranty whatsoever relating to third partyweb pages.



HOW TO … G ENERATE BW A UTHORIZATION P ROFILES FROM A FLAT F ILE

1 Business Scenario

You are responsible for implementing BW authorizations at BW Incorporated. BW Incorpoated has a

non-SAP financial system, which tied to employee information. The company has the authorizationrequirement to limit the access of employee information based on the cost center responsibility. Theresponsible managers can view information for his/her organization and the subordinateorganizations. Each employee belongs to an organization under a hierarchical Cost Center structureas depicted in the following sample diagram. It illustrates the person responsible for Group 1 who isallowed to view all cost centers belonging to group 1 and employee records under it. Customer alsowants to be able to control authorization at hierarchy node level. The organization and cost centerassignments changes from time to time. Currently, BW Incorporated maintaines these authorizationdata in various tables in their non-SAP system. To maintain these ever changing information again inBW environment would be a very time consuming effort. Customer wishes to reuse what has beensetup. You have heard about the new BW authorization profile generator function and you want tosetup a regularly scheduled refresh process to bring your non-SAP HR authorizations data into theBW environment on a periodic basis.

The following diagaram depits the cost center structure and employee relationship at the BWIncorporated for the head of BW Groups with User id BW20-00.

Root

ZCOSTCTR

Group 3

BW-03

Group 2

BW-02

CC: 2001HR

20010012 Emp #12

20010007 Emp #7

Emp #2 20010002

CC: 2001FI

20010010 Em #10

20010005 Emp #5

CC:

20010014 Emp #14

20010013 Emp #13

20010011 Emp #11

20010006 Em #6

Emp #120010001

CC:2001Market

20010008 Emp #8

Emp #3 20010003

CC: 2001IT

20010004Emp #4

20010009Emp #9

Group 1

BW-01

BW Incorporated

2002 SAP L ABS , INC ., SAP A MERICA , INC . AND SAP AG 1



HOW TO … G ENERATE BW A UTHORIZATION P ROFILES FROM FLAT F ILE

2 The Result

The individual user master records will have a profile automatically generated after the scheduledgeneration process. The example below displays the generated profile (RSR_0006211) for userBW20-00, the head of Root cost center has follow authorizations:

• Access to all Key Figures

• Access to Costcenters from 2001F through 2001SALES

• Access to Employees 20010001 through 20010014

• Hierarchy authorization at summary level and the root level (generated name F4IZ…)

3 The Step By Step Solution

3.1 Prepare Input DataSource format for Authorization Profile Generator.

Once you understand the authorization requirements and before you start the actual configurationwork, you need to analyze, map and prepare the format of your input datasource that containsauthorization data. The first step, you must know what is expected value in the target ODSs. To doso, you need to review the content of two technical ODS templates devliered in BW 3.0.





1. Check and verify AuthorizationTechnical ODS Templates have beenactivated.

If not, go to Admin Workbench ->Business Content -> Data Target ->under Technical Content (0BWTCT),Authorization Reporting (0TCA);Drag 0TCA_DS01 and 0TCA_DS02from the middle pane to the rightpane under collected objects foractivation -> select “groupingnecessary objects” and “Install inbackground”.

2. Determine the Authorization InputDatasourace format for Value ODS.• At Admin Workbench,

InfoProvider screen -> HighlightTemplate for Value ODS(0TCA_DS01) -> right mouseclick -> select Object Overview

3. Based on the authorizationrequirement, map the Input DataSource. Prepare to bring theappropriate data elements from non-SAP database tables to two flat CSVfiles, one for authorized values asdepicted on the right. Same processis needed for Hierarchy.

• 0TCTIOBJNM (from CSV file)• 0TCTLOW (from CSV file)• 0TCTHIGH (from CSV file)• 0TCTOPTION (from CSV file)• 0TCTADFROM (from CSV file)• 0TCTADTO (from CSV file)• 0TCTUSERNM (from CSV file)

• 0TCTSIGN (I=interval)• 0TCTSYSID (null)

• 0TCTOBJVERS (A=active version)





3.2 Configure the InfoSources and Create the Authorization ODSs

4. Create InfoSource for Flat File sourcesystem.

Admin Workbench -> Modeling ->InfoSource -> Create InfoSource andgive a name and description

Right mouse click on InfoSource justcreated -> Assign Data Source ->Select PC_file source system.

5. Define InfoSource Transfer Structurefor Value Data Source according tothe sequence in CSV file layout.

Click the communication structureicon above -> move all objects fromright pane to the left by pressing thedouble left arrow.





6. Define Transfer rules and activatethe InfoSource.

In Transfer structure and transferrules screen -> click on Transferrules tab -> click the “Proposetransfer rules” icon in the middle ofthe pane to move all infoobjects plusthe compounded characteristics.Define transfer rules as follows:0TCTOBJVERS = “A” & 0TCTSIGN = “I” bydouble click red X for these infoobjects andchoose Constant on the pop up screen andenter A & I respectively. Leave 0TCTSYSIDbe null. Then click the activate icon toactivate the transfer rules.

7. Repeat a similar process and createthe InfoSource for Hierarchy DataSource.

8. Create Target Value ODS using0TCA_DS01 as template. It ismandatory to have the name withsuffix of “DS01” for value ODS.





9. Create Target Hierarchy ODS using0TCA_DS02 as template. It ismandatory to have the name withsuffix of “DS02” for value ODS

10. Create Update Rule for Value ODS.

Admin Workbench -> Modeling-> InfoProvider -> highlight yourvalue ODS (ALO_DS01) -> rightmouse and select “create updaterule” -> all key fields exceptauthorized fields (blank) shouldhave a corresponding source field-> activate update rule.

Note: the warning that “InfoObject0RECORDMODE is missing” can

be ignored by click “enter”.

11. Create Update rules for HierarchyODS. Please note the constantsettings.





12. Continuation and activate theupdate rule.

13. Data Load into ODSs:

Create Infopackages in AdminWorkbench -> Modeling ->InfoSource -> highlight Flat fileInfoSources your created(BW20value) -> right mouse clickand select create Infopackage ->schedule & monitor for asuccessful load.

Repeat same for BW20HIER.Note: please refer to online doc, if you are

unfamiliar with infopackage definitionfrom flat file.





3.3 Define Reporting Authorization Objects

14. Mark the InfoObjects as“Authorization Relevant”.

Execute transaction “RSD1” ->enter InfoObject name -> click onMaintenance -> select 2 nd tab“Business Explorer” and checkmark “Authorization Relevant” ->Activate the InfoObject.

Repeat for each InfoObjects to beauthorization checked. (Zcostctr,Zemployee and any key figure tobe checked).

Create Authorization Object:Execute transaction “RSSM” ->enter authorization object name(ZBW20) -> click Create -> Give adescription -> highlightInfoObjects on the right pane ofthe screen -> use left arrow tomove to the left.Note: 0TCTAUTHH is mandatory forhierarchy authorizations

16. Switch the ReportingAuthorization Object (ZBW20) onfor the InfoCube (Zcomp_C01).

15.





3.4 Generate Authorization Profiles

17. To generate authorization profile:

Execute transaction “RSSM” -> go

to the section 3 “Authorization” ->click push button “GeneratingAuthorizations” -> click ChangeIcon to access the generationscreen as shown -> check yourODSs (ALO_DS01, ALO_DS02)and cross section of yourAuthorization Object (ZBW20) ->push Generate Icon on the top leftof the screen -> upon successfulgeneration a log with green buttonwill appear.Note: you may want to generate profiles inbatch mode by execute report“RSSB_GENERATE_AUTHORIZATIONS

18. Verify the result:

a. Execute transaction “ SLG1”or SE38 program name =RSSB_BW_SHOW_LOG_AUTH_M

ODIFY -> Green lights indicatesuccessful generation.in usermaster record.

b. You can also validate theresult by checking one of theuser master record viatransaction SU01 -> Profiles -> the generated profile willhave a prefix ofRSR_nnnnnnnnn and typ ofprofile is left blank.





3.5 Create Authorization Variables in query definition

19. Create Authorization Variable toautomatic loading of authorizedobject values for the user whenexecuting the query. Createvariable for each of the involvedInfoobject. I.e. ZCostctr andZEmpolyee. Be sure to choose“Selection option” as variablerepresents parameter.

20. Include the authorization variables

in your query.

3.6 Appendix

3.6.1 Sample CSV file for Value ODS for user BW20-00 and LOA

Z C O S T C T R 2 0 0 1 F I 2 0 0 1 S A L E S B T 1 9 5 0 0 1 0 1 9 9 9 9 1 2 3 1 B W 2 0 - 0 0Z C O S T C T R * E Q 1 9 5 0 0 1 0 1 9 9 9 9 1 2 3 1 L O AZ E M P L O Y E E 2 0 0 1 0 0 0 1 2 0 0 1 0 0 1 4 B T 1 9 5 0 0 1 0 1 9 9 9 9 1 2 3 1 B W 2 0 - 0 0

3.6.2 Sample CSV file for Hierachy ODS for user BW20-00 and LOAZ C O S T C T R B W 2 0 - 0 0 B W 2 0 H IE 0 H IE R _ N O B W 2 0 G 0 1 3

Z C O S T C T R L O A B W 2 0 H IE 0 H IE R _ N O R O O T 3Z C O S T C T R B W 2 0 - 0 0 A B W 2 0 H IE 0 H IE R _ N O R O O T 3


how to... generate bw authorization profiles from a flat file

Documents