How to define authorization by department for Query in BW

Question

Hello:
    How to define the authorization by department for Query in BW. as follow:
    The Northern part manager can run any Query, and return the data of Northern part only.
    pls give me the method.
Regards&Thanks!

Answer 1

Hi zagory,
I am assuming that you have some infoobject which contains the department data.
here is a step by step process to add authorisation on this object.
1) Define the InfoObject as Authorization Relevant (from the BeX tab in the IO properties.
2) Create a reporting authorization object for this InfoObject (This would be done through Transaction RSSM).
3) This new authorization object needs to be added to the relevant roles (Transaction PFCG). For examle your North region manager should be in a role which has access to all the departments in the northern region.
4) A variable needs to be added to the query. This is required because the query needs to be able to restrict data by department dynamically. You would need to ensure that that the variable you create on the department InfoObject is of type authorisation,can take multiple single values and picks up data from the relevant authorisation object. Just add this InfoObject with restriction on this variable in the filter section in your query.
5) Finally the new authorization object created in step 2 would need to be assigned to the relevant cubes. This is again done through transaction RSSM. This will force the reporting authorization object to be checked when ANY query on any of these cubes is executed.
Hope it helps,
Regards,
Nikhil