Bi Roles (Developer & Security Admin) in Development System

Question

My requirment is to create 2 Roles in BI Development System...
1) Developer Role
Tasks that a new developer can perform (Create,delete,change Info Objects,Info Areas,Data providers,Info sources,Source systems,info sets,process chain.....queries) also
ABAP...TRANSPORTS..
2) Security Administrator
Can Create Roles (PFCG),Authorisation objects,Assign the roles to users...etc transport newly created roles..etc
Please update me with the list of Authorisation objects i can use
Thanks

Answer 1

Hi,
Here are the steps ...
A role is a collection of entities (such as the User Menu and a Profile) that gets allocated to a user to provide them with the necessary authorisation to do their job. Formerly referred to as an Activity Group .
Using transaction PFCG
1. Give the Role name or Activity Group name (both Role or Activity Group same in below 4.6B version it is called as Activity Group now it is called as Role).
2. Then click on Create button
Give description and Click on Save
3. Then click on Menu tab
There you will fine button like Transaction, Reports and Web address ……
a. Click on Transaction Button.
After clicking on transaction button you will find screen
Put all transactions you want to assign then click on button Assign Transaction
say for example transactions SU01 and PFCG to the Administrator.
b.Then click on the Authorisation tab
Give profile name related to your role name and description
c.Click on the Change authorization data button
Here you need to maintain authorizations.
Open each Object Class (means at the end you can find names like BC_A, BC_Z these are Object class)
For example when you open Object Class BC_A
you will find Authorisation Object (i.e. S_USER_AGR, ……)
When you open each Authorisation Object you will find Field Names and Activities
Each object have their own fields here two field names are there (Activity & Activity Group Name)
Click on the Pencil button and Maintain Activities
After maintaining all activities
There is Generate button on Application tool bar click to generate profiles
Then Press back button
There is another tab USER click on that and enter user id’s
then click on User Compare button
Until the User compare button comes green user never get access for those transactions assigned.
Hope it helps.
Assign points if helpful.
Thanks & Regards
Hemant Khemani