Creating Analysis Authorizations for Key Figures

Objective

After completing this lesson, you will be able to create Analysis Authorizations for Key Figures

Key Figure Authorizations

A unique special characteristic, 0TCAKYFNM, enables key figure authorizations, offering critical control and security within the system to restrict access to certain key figure data to authorized users. Some points to note:

  • Single key figures cannot be marked as authorization-relevant.

  • Key figures can only be set in general as authorization-relevant by setting the authorization-relevance for the special characteristic 0TCAKYFNM.

  • To include the key figure values from the InfoProvider in your report, you need analysis authorization for the special characteristic 0TCAKYFNM. This authorization must have the technical name of the key figure as the authorized value.

  • For example, the key figure 0QUANTITY is contained in the CompositeProvider U00_COMPO1.

    If you include the 0TCAKYFNM field in your analysis authorization and have 0QUANTITY as an authorized key figure, you can display these values in your report's columns or rows.

    If the authorization for this key figure is not granted, no key figure values are displayed.

Authorizations in Calculated Key Figures

To view calculated key figure values in the report, it's essential to understand the following:

  • Let's assume that the authorization-relevance for the special characteristic 0TCAKYFNM is set.

  • To view calculated key figure values in the report, you need analysis authorization for the special characteristic 0TCAKYFNM. This authorization includes the technical names of the key figures used in the Calculation.

  • To illustrate, theTotal Amount key figure (0QUANTITY x 0AMOUNT) combines the key figures 0QUANTITY and 0AMOUNT.

    If the user's analysis authorization contains the 0TCAKYFNM field and the 0QUANTITY and 0AMOUNT key figures as values of the authorization. In that case, they can then view the calculated key figure values in the report's column/row.

    If the authorization for these key figures is not granted, no key figure values are displayed.

Authorizations in Restricted Key Figures

  • Let's assume again that the authorization-relevance for the special characteristic 0TCAKYFNM is set.

  • To display restricted key figure values in the report, you need analysis authorization for the special characteristic 0TCAKYFNM. This authorization is required for the key figure's technical name used in the restricted key figure definition as an authorized value.

  • Also, if the restricting characteristics are authorization-relevant, you must have the analysis authorization for these characteristics. Assign complete authorization (*) or assigning the specific values used for the restriction to resolve.

  • For example, the key figure AMOUNT is restricted by the value 1000 for the authorization-relevant characteristic controlling area.

     If you have the 0TCAKYFNM field in your analysis authorization and the AMOUNT key figure as a value of the authorization, and if you have analysis authorization for the controlling area, specifically for the value 1000, you will be able to display the restricted key figure values in the report.

    If the authorization for this key figure and the characteristic value is not granted, no key figure values are displayed.

User has Analysis Authorization for Controlling Area 1000 and for the key figure U00 AMOUNT. A table shows the following: Unrestricted key figure: No authorization: neither query nor key figure is restricted to authorized value Controlling Area 1000. Key figure restricted to Controlling Area 1000: Authorization for Controlling Area 1000 and key figure U00AMOUNT. Key figure restricted to Controlling Area 2000: No authorization for Controlling Area 2000. Unrestricted key figure: No authorization for key figure Quantity (even when restricted to Controlling Area 1000).

Extra Remarks

  • If a report does not contain any authorized key figures, the report is empty, and the message "User does not have Authorization" is displayed.

  • Key figures, calculated key figures, and restricted key figures are usually structure members of Key Figure Structures.

  • Also, there are structures known as Characteristic Structures, which consist of one or more restricted characteristics but don't contain a key figure.

    In cases where these characteristics are authorization-relevant, it is important to ensure that corresponding analysis authorizations are in place.

  • For example, suppose that the characteristic Controlling Area is authorization-relevant, and the structure element CO Area Group A is built out of the controlling areas 1000, 2000, and 3000. In that case, authorization for the values 1000, 2000, and 3000 is needed at least, or the complete authorization (*).

Hint

For high-security-relevant key figures (such as SAP Human Capital Management solution), it is recommended that they be implemented in separate InfoProviders. This allows for distinct analysis authorizations at the InfoProvider level, using the special characteristic 0TCAIPROV.

Creating Analysis Authorizations for Key Figures

Watch this video to learn how to refine the authorization concept by using analysis authorizations for key figures.

Log in to track your progress & complete quizzes