Import SAP BW roles to SAP BO withour prefix

Question

Hello,
we are re-using our SAP BW authorizations roles for folder authorizations in SAP BO.
Therefore we import roles from SAP BW source system and add these roles to different BO-Groups. Folder authorizations are maintained for these BO Groups.
Import of roles works - but all imported roles / Groups start with a prefix "<SYS-ID>~<CLNT>@"
So if we promote groups/authorizations to qa and prod system we have to add BW roles in each system.
E.g.
     DEV-System:
          DEV~001@BW_ROLE --> added to BO Group "BW"
     Promotion to QA-System:
          BO Group contains Role DEV~001@BW_ROLE and QA~002@BW_ROLE has to be added.
How to avoid this?
There is a similar issue with user which has been resolved by maintaing registry setting.
HKLM\SOFTWARE\SAP BusinessObjects\Suite XI 4.0\Enterprise\Auth Plugins\secSAPR3\SimpleUsernameFormat
Thanks and best regards,
Christian
P.S. we are using BI 4.1

Answer 1

Hello Ingo,
A small clarification w.r.to security maintenance in BO w.r.to SAP report execution...
If I have roles created/maintained in SAP to restrict the access in terms of what data is available for an end user, and if these roles have been imported into BO and have been assigned to different groups as per the user grouping roles in SAP.
And later, if additional access in terms of data has been assigned to the SAP role....does the group on BO has to be changed as the data access provided is only on SAP side.
As my understanding is the groups on the BO side are only to dictate what level of access does the user have for BO tools in terms of changing/creating/deleting BO reports and not what kind of data is accessed in SAP.
Can you please confirm the same.
Thanks
Dharma.