SAP Security Online!
 
 
Web SAPSecurityOnline.com
 
   
 
 
 
 
 

 
 

BW Security

Introduction

SAP Business Information Warehouse (SAP BW) SAP NetWeaver data warehousing provides both a business intelligence platform and a suite of business intelligence tools. With the tool set provided, relevant business information can be integrated into SAP BW and transformed and consolidated there. SAP BW enables analysis and interpretation as well as the distribution of this information. Based on this analysis, sound decisions can be made and goal oriented activities can be initiated. With extensive predefined information models provided for the various roles in a company (BI Content), which is standard with BI. SAP BW also increases the usability of these analyses and enables a quick, cost-effective implementation.

Data warehousing in SAP BW represents the integration, transformation, consolidation, cleanup and storage of data. It also signifies the extraction of data for analysis and interpretation. The data warehousing process includes data modeling, data extraction and the management of the data warehouse management processes.

SAP BW Authorization Specifics
In an SAP BW system there are two different types of authorization objects.

  1. Standard authorization objects: This type of authorization objects is provided by SAP and covers all checks for e.g. system administration tasks, data modelling tasks, and for granting access to InfoProviders for reporting. For this type of authorizations the same concept and technique is used as in an SAP R/3 system.
  2. Reporting authorization objects: For more granular authorization checks on an InfoProvider’s data you need another type of authorization objects defined by the customer. With these objects you can specify which part of the data within an InfoProvider a user is allowed to see.

Both types of authorization objects use the same authorization framework. Technically they are treated in the same way. However, the design of reporting authorizations is more complex because you need to design the reporting authorization objects first. This is an additional step that needs to be treated with care because the structure of the authorization objects determines the possible use in regards to selections, combinations and granularity. In your project you need expertise in the area of reporting authorizations; knowledge of the basis authorization framework is not sufficient.

User Type in BW     

There are different types of users in SAP BW. Most of your users will be the users who execute queries and workbooks. These people could be considered "reporting users" or "end users."  To read more about how to secure reporting users click here


There are also users who develop new queries. Some people may refer to them as "power users" or "data analysts." The users who develop queries may also create new workbooks and may be responsible for publishing that information to the right audience.

Then, there are users who create new objects like InfoCubes, InfoAreas, and InfoObjects. They also schedule data loads, create update rules for InfoCubes, monitor performance, and set up source systems. The users who do these tasks are normally referred to as "administration users." read more about how to secure administrator users click here

BW InfoObject Security- Step by Step instruction.

Using Workbooks model       

Generally power user create query to suit their teams needs and save the results in a workbook. They may want to save the workbooks to their Favorites folder for easy retrieval later, or they may want to save the workbooks to a location where other users can execute the same workbook. ..More

Create Folder and Saving Workbook

Create a New Query

Maintaining Authorizations for Hierarchies

Linking BW to Enterprise Portal (EP) Step-by-step list, explaining how to link a BW system to an EP system. ...More

Setting up RFC to R3 system BW RFC / ALE  Setup.In SAP BW, you should create a system (not a dialog) user called BWALE. BWALE should have the authorization profile (not Role)S_BI-WHM_RFC…. ...More

Transaction Code in BW

  • RRMX: Launches the BEx Analyzer, which is used to create and
    execute queries
  • RSA1: Launches the Administrator Workbench, which is used by
    SAP BW administrator




 
Copyright © 2005 - 2007 SAP Security Online.com All Rights Reserved.