bi structural authorization

10
SAP COMMUNITY NETWORK SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com | UAC - uac.sap.com © 2011 SAP AG 1 BI Structural Authorization: Profile Generation Issue and Solution Applies To: R/3 4.7, ECC 6.0, .BW 3.5, BI 7.0 and above version. For more information, visit the EDW homepage . Summary: The Paper is about what all steps to be followed to load the Org Structure from ECC to BI and there correct profile generation. The steps illustrate the end to end procedure to be followed while loading and generating the user Profile. Author: Sajid Eqbal Khan Company: Patni Computers Created On: 01/12/2011 Author Bio: Sajid Eqbal Khan is working with Patni Computer. He has 4.9 years of full time experience in SAP BI Intelligence 7.0.

Upload: enthusap

Post on 11-Nov-2014

40 views

Category:

Documents


0 download

DESCRIPTION

authorization

TRANSCRIPT

Page 1: Bi Structural Authorization

SAP COMMUNITY NETWORK SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com | UAC - uac.sap.com

© 2011 SAP AG 1

BI Structural Authorization: Profile

Generation Issue and Solution

Applies To:

R/3 4.7, ECC 6.0, .BW 3.5, BI 7.0 and above version. For more information, visit the EDW homepage.

Summary:

The Paper is about what all steps to be followed to load the Org Structure from ECC to BI and there correct profile generation. The steps illustrate the end to end procedure to be followed while loading and generating the user Profile.

Author: Sajid Eqbal Khan

Company: Patni Computers

Created On: 01/12/2011

Author Bio:

Sajid Eqbal Khan is working with Patni Computer. He has 4.9 years of full time experience in SAP BI Intelligence 7.0.

Page 2: Bi Structural Authorization

BI Structural Authorization: Profile Generation Issue and Solution

SAP COMMUNITY NETWORK SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com | UAC - uac.sap.com

© 2011 SAP AG 2

Table of Contents

Introduction ......................................................................................................................................................... 3

Process Chain .................................................................................................................................................... 4

Caution ............................................................................................................................................................ 4

Diagnosis ........................................................................................................................................................ 4

Solution ........................................................................................................................................................... 5 Step 1: Check at R/3 for the data source 0HR_PA_2 .................................................................................................. 5

Step 2: Check at RSA3 ................................................................................................................................................ 5

Step 3: Need to run the process chain Z_STR_AUTH ................................................................................................. 6

Step 4: Create a Characteristic value variable ............................................................................................................. 6

Step 5: Sample code to restrict the Org Unit ................................................................................................................ 8

Related Content .................................................................................................................................................. 9

Disclaimer and Liability Notice .......................................................................................................................... 10

Page 3: Bi Structural Authorization

BI Structural Authorization: Profile Generation Issue and Solution

SAP COMMUNITY NETWORK SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com | UAC - uac.sap.com

© 2011 SAP AG 3

Introduction

Structural profiles use the data model of the Personnel Management components

Organizational Management, Personnel Development and Training and Event Management to build hierarchies using objects and relationships. Different types of objects (Object Types) and different types of relationships are used in this process. The organizational structure of a company is illustrated in the following way:

The central elements of this data model are used to manage the authorizations for the model effectively:

Objects (such as O (Organizational Unit), S (Position), P (Person))

Relationships (such as A003 (belongs to)

Evaluation Paths (such as O-S-P)

You can define structural authorizations using the T77PR table (Definition of Authorization Profiles) at ECC.

Structural authorizations that should be used for more specific authorization checks (on account of the organizational structure) during the processing of HR master data

Page 4: Bi Structural Authorization

BI Structural Authorization: Profile Generation Issue and Solution

SAP COMMUNITY NETWORK SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com | UAC - uac.sap.com

© 2011 SAP AG 4

Process Chain

Structural authorization Process chain: Z_STR_AUTH.

Here you can see that the data is coming from two data sources: named: 0HR_PA_2 (Structural authorization -Values) and 0HR_PA_3 2 (Structural authorization-Hierarchies) and storing into DSO.

Structural authorization -Values are getting stored into - 0PA_DS02 and Structural authorization- Hierarchies are getting stored into – 0PA_DS03.

And later there is a standard program that generated the profiles for the users.

Caution

The profile, which is being generated, is not restricting for the excluded Org unit.

Diagnosis

While examine the issue we find that the org units which is excluded at R/3 level is coming into BI as included. That is why when the profile is being generated is not restricting to that Org unit.

Note: This is a Standard SAP issue. SAP does not provide any solution for it.

Page 5: Bi Structural Authorization

BI Structural Authorization: Profile Generation Issue and Solution

SAP COMMUNITY NETWORK SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com | UAC - uac.sap.com

© 2011 SAP AG 5

Solution

Step 1: Check at R/3 for the data source 0HR_PA_2

Check at R/3 for the data source 0HR_PA_2- whether the excluded field information is being sent to BI or not. If not then there is SAP Notes available which you need to run to populate the Excluded field information.

Step 2: Check at RSA3

Check at RSA3- whether the excluded field values are getting populated or not.

Page 6: Bi Structural Authorization

BI Structural Authorization: Profile Generation Issue and Solution

SAP COMMUNITY NETWORK SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com | UAC - uac.sap.com

© 2011 SAP AG 6

Step 3: Need to run the process chain Z_STR_AUTH

You need to run the process chain, which will carry all sort of excluded information to the target 0PA_DS02.

Step 4: Create a Characteristic value variable

You need to create a Characteristic value variable for the Org unit (Characteristic) and restrict it.

Page 7: Bi Structural Authorization

BI Structural Authorization: Profile Generation Issue and Solution

SAP COMMUNITY NETWORK SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com | UAC - uac.sap.com

© 2011 SAP AG 7

Page 8: Bi Structural Authorization

BI Structural Authorization: Profile Generation Issue and Solution

SAP COMMUNITY NETWORK SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com | UAC - uac.sap.com

© 2011 SAP AG 8

Step 5: Sample code to restrict the Org Unit

The sample code, which we have written to restrict the excluded org unit:

Page 9: Bi Structural Authorization

BI Structural Authorization: Profile Generation Issue and Solution

SAP COMMUNITY NETWORK SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com | UAC - uac.sap.com

© 2011 SAP AG 9

Related Content

Structural Profiles

Authorizations for BI Content for Human Resources

Analysis Authorizations

Migration of Reporting Authorizations to the New Concept

For more information, visit the EDW homepage

Page 10: Bi Structural Authorization

BI Structural Authorization: Profile Generation Issue and Solution

SAP COMMUNITY NETWORK SDN - sdn.sap.com | BPX - bpx.sap.com | BOC - boc.sap.com | UAC - uac.sap.com

© 2011 SAP AG 10

Disclaimer and Liability Notice

This document may discuss sample coding or other information that does not include SAP official interfaces and therefore is not supported by SAP. Changes made based on this information are not supported and can be overwritten during an upgrade.

SAP will not be held liable for any damages caused by using or misusing the information, code or methods suggested in this document, and anyone using these methods does so at his/her own risk.

SAP offers no guarantees and assumes no responsibility or liability of any type with respect to the content of this technical article or code sample, including any liability resulting from incompatibility between the content within this document and the materials and services offered by SAP. You agree that you will not hold, or seek to hold, SAP responsible or liable with respect to the content of this document.