BW Authorizations in conjuction with R/3 Authorizations

Question

I would like to know what type of authorization checks people are using in BW to ensure users only see the appropriate data.  We would want users in BW to only see the information that they see in R/3.  At the present we have a custom table set up to check the roles assigned to people in R/3, however we are looking for a new solution for several reason.  If we consider HR Roles for example, we would want BW to check R/3 to see which Org Units, Personnel Areas, and Personnel Subareas the user should have access to.  This custom table helps somewhat, however It only looks at authorization objects in a linear way, so if you have a Personnel Area ABC with authorization to * Personnel Subareas and Personnel Area XYZ with authorization to 0001 Personnel Subarea, the * overwrites the 0001, so the user still has authorization access to all of Personnel Area XYZ instead of just 0001.  Does anyone have a solution for ensuring the BW authorization is the same as the R/3 authorization access.  In addition to this, we may want to limit by Employee Subgroups, so although the user can see Subarea 0001, we would not want them to see the Subgroup of Executive.  This has been worked out on the R/3, we just need assistance if making sure this is recognized on the BW side.

Answer 1

hi,
in case you have no id to access the links mentioned by Deepu, you may try following
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/biw/g-i/how to generate bw authorization profiles from a flat file
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/e1cba990-0201-0010-43ae-af579aee7a73
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/39f29890-0201-0010-1197-f0ed3a0d279f
hope this helps.