Tell us what you think

We want to create the best possible experience for our learners. Your feedback helps us to improve the experience for everyone.

Creating Analysis Authorizations for Aggregated Values

Objective

After completing this lesson, you will be able to create analysis authorizations for aggregated values

Business Example

Person thinking about how the customer needs to be able to compare aggregated data for different controlling areas while also being able to restrict access to specific cost elements and cost centers within certain controlling areas.

This lesson covers the scenario where a controller must compare data for different controlling areas on an aggregated level. This lesson also includes analyzing specific cost elements and cost centers for controlling area 1000 while restricting access at this detailed level for controlling area 2000.

Aggregated Values

Using a Colon (:) as an Authorization Value

The colon value authorization plays a critical role in facilitating aggregated data analysis:

All characteristics of the InfoProvider set as authorization-relevant are checked during query execution, independent of whether they are contained in the query at all or displayed in the query result.
For characteristics of the InfoProvider that are not contained in the query at all or contained in the query as free characteristics, the query result shows aggregated values.
If these characteristics are set as authorization-relevant, the analysis authorization for aggregated values is necessary. The authorization value Colon (:) is used here.
If you want to drill down by an authorization-relevant characteristic, the full (*) authorization is needed, or authorization values at least to cover the query selection.
Therefore, the colon value authorization enables aggregated data to be reported when the user does not have authorization to access detailed data.

Controlling Area, Cost Element, and Cost Center are Authorization-Relevant Characteristics. A screenshot shows the necessary Analysis Authorizations for Controlling Area at least 1000 and 2000. For Cost Element, at least Colon (:). For Cost Center, at least Colon (:). Another screenshot shows the necessary Analysis Authorizations for a drill-down by the Cost Center: at least 1000 and 2000 for the Controlling Area. For Cost Element, at least Colon (:). For Cost Center Full Authorization (*) or authorization values covering at least the query selection.

Using a Colon (:) in Combinations of Analysis Authorizations

In the following example, you can see another purpose for the colon authorization value. A controller can view total sales figures for all areas but can only break down their specific area (1000) by individual cost centers. In this case, you must create and assign the following two analysis authorizations to the controller.

Controlling Area and Cost Center are Authorization-Relevant Characteristics. A screenshot shows the Analysis Authorization 1 with Controlling Area *, the Cost Center Colon (:), and Key figure U00 Amount. Another screenshot shows the Analysis Authorization 2 with Controlling Area 1000, the Cost Center *, and the Key figure U00 Amount.

Note

For further details about the analysis authorizations for aggregated values, see SAP Note 1140831. - Colon authorization during query execution.

Creating an Analysis Authorization for Aggregated Values

Watch this video to learn what aggregated values are and how to define analysis authorizations for aggregated values.

Analysis Authorizations In-App Creation

The SAP BW∕4HANA Cockpit is a central entry point for the administration of an SAP BW∕4HANA system. The SAP BW∕4HANA cockpit is an intuitive, web-based user interface that is available with an SAP Fiori launchpad.

The SAP BW∕4HANA Cockpit contains various SAP Fiori apps used for process control, monitoring, and administration in SAP BW∕4HANA. As an alternative to the analysis authorization management transaction RSECADMIN, you can use the Analysis Authorization Editor app to create analysis authorizations. This app does not provide all the functions available in the analysis authorization management transaction RSECADMIN, such as assigning an analysis authorization to a user.

SAP BW/4HANA Cockpit with the Analysis Authorization Editor app highlighted. With this app you can edit Analysis Authorizations.

Here's a look at the app for editing Analysis Authorizations. You can maintain the authorized values for each characteristic by selecting the arrows.

Analysis Authorization Editor app Home screen of U00_COAREAS. The three arrow buttons for each characteristic are highlighted.

Creating Analysis Authorizations Using the SAP BW/4HANA Cockpit

Watch this video to learn how to create Analysis Authorizations within the SAP BW∕4HANA Cockpit by using the app Analysis Authorization Editor.

Next lesson