SAP Security Online!
 
Web SAPSecurityOnline.com
 
   
 
 
 
 
 

 
 

BW Security

Administrator
There are users who create new objects like InfoCubes,
InfoAreas, and InfoObjects. They also schedule data loads, create update
rules for InfoCubes, monitor performance, and set up source systems. The
users who do these tasks are normally referred to as "administration users."

Some of the common tasks performed by administration users are:

  • Set up and maintain different source systems and connections to SAP BW
  • Manage metadata and define new InfoObjects, DataSources, and InfoSources
  • Create transfer rules and update rules
  • DesignInfoCubes
  • Schedule and monitor data-loading processes

Administration authorization objects are primarily used when doing
anything in the Administrator Workbench (transaction codeRSA1). The
primary objects used are:

S_RS_ADMWB: Administrator Workbench - Objects
Authorization object S_RS_ADMWB is the most critical authorization
object in administration protection. When you do anything in transaction
code RSA1, object S_RS_ADMWB is the first object checked. There are two
fields in this object: Activity and Administrator Workbench Object. Each of
the two fields can have a variety of values.
The possible values for the Administrator Workbench field are:

  • SourceSys: Working with a source system
  • InfoObject:Creating, maintaining InfoObjects
  • Monitor: monitoring data brought over from the source systems
  • Workbench: Checked as you execute transaction code RSA1
  • InfoArea:Creating and maintaining InfoAreas
  • ApplComp: Limiting which application components you can access
  • InfoPackage: Creating and scheduling InfoPackages for data extraction
  • Metadata: Replication and management of the metadata repository

The following list shows possible values for the Activity field.

  • Maintain - 03
  • Execute-16
  • Administer document storage - 23
  • Update metadata - 66

 Other Authoization objects for Admin user

Authorization object/ Technical name

Description

Administrator Workbench -Objects S_RS_ADMWB

Authorizations for working with individual objects of the Administrator Workbench. In detail, these are: source system, InfoObject, monitor, application component, InfoArea, Administrator Workbench, settings, metadata, InfoPackage, InfoPackage group, Reporting Agent settings, Reporting Agent package, documents (for metadata, master data, hierarchies, transaction data), document store administration, InfoSpoke.

Administrator Workbench - InfoObject S_RS_IOBJ

Authorizations for working with individual InfoObjects and their sub-objects
Until Release 3.0A, only general authorization protection was possible with authorization object S_RS_ADMWB. General authorization protection for InfoObjects still works as in the past. Special protection with S_RS_IOBJ is only used if there is no authorization for S_RS_ADMWB-IOBJ.

Administrator Workbench - InfoSource (flexible update) S_RS_ISOUR

Authorizations for working with InfoSources with flexible updating and their sub-objects

Administrator Workbench - InfoSource (direct update) S_RS_ISRCM

Authorizations for working with InfoSources with direct updating and their sub-objects

Administrator Workbench - InfoCube S_RS_ICUBE

Authorizations for working with InfoCubes and their sub-objects

Administrator Workbench - MultiProvider S_RS_MPRO

Authorizations for working with MultiProviders and their sub-objects Until BW 3.0B, Support Package 1, authorizations for MultiProviders were checked by using the authorization object S_RS_ICUBE. As of BW 3.0B, Support Package 2, this can be maintained, or you can change the check over to the authorization object S_RS_MPRO. To do this, choose in Customizing under Business Information Warehouse ® General BW Settings ® Settings for Authorizations.

Administrator Workbench – ODS object S_RS_ODSO

Authorizations for working with ODS objects and their sub-objects.

Administrator Workbench - InfoSet S_RS_ISET

Authorizations for working with InfoSets

Administrator Workbench - hierarchy S_RS_HIER

Authorizations for working with hierarchies

 

Administrator Workbench – Master data maintenance

S_RS_IOMAD

Authorizations for processing master data in the Administrator Workbench

 

 



 
Copyright © 2005 - 2007 SAP Security Online.com All Rights Reserved.