Authorization of Report Painter GRR3

Question

Dear
Kindly help me to restrict our users on Tcode GRR3 for Report Painter.
There are number of reports under Report >>> Library.
on authorization at PFCG I created a role and has only one tcode GRR3. under this there are four objects
Report Writer: Report
Report Writer: Libaray
Report Writer: Report Group
how I restrict users at this stage...how to define authorization group ???? is this work able.
regds:
AJ

Answer 1

I think there are a coupleof ways to do this
1.
Go to GRR3, check the report(s) that is(are) to be executed. Check the hierarchial assignment of the report(i mean check the Report group & Library they are under)
based on the above information, you can make restriction on the following objects:
G_800_GRP (For the actual report itself)
G_801K_GLB (For the report Library)
G_803J_GJB (For the report group)
2.
an alternate but somewhat tricky way to do this could be, For the user who needs the access/restriction check the roles that have the object S_PROGRAM , make sure that there is no (*) value in this.
Give free access to GRR3, without any specific restriction. BUt in the role that has S_PROGRAM - give access to only those program authorization groups that are shown for the reports to be executed
I think i made it too complex. OK.......if the user needs to run schedule 10 reports, go to GRR3 go the report he needs to execute, check the program behind - go to SE38, RSCSAUTH execute, check the authorization group of the program - make your restriction of program execution (S_PROGRAM) based on this
hope it helps