Recently, I have faced problem in authorization in Web Intelligence report using Business Explorer (Bex) Query.
Thanks to my friend (AT) for the help and solution. I would like to blog it for benefit of everybody.
Here is the story.
1. Bex query has been developed with characteristic restriction (Country: zctry)
2. Analysis authorization has been maintained based on country. (transaction code: RSECADMIN)
We would like to restrict user information based on country.
3. In SAP BW/BI, we create one role and assign to one user. (Transaction code: PFCG)
This role will contain BI analysis authorization with value 'ZCTRY'.
4. In SAP BW/BI, we are able to run it based on user with certain country authorization. (transaction code: RSRT)
The problem was occurred when it is in Business Object Web Intelligence (WebI). WebI report shows all the countries information.
After we explore more.
The issues were:
1. New user is logon using Enterprise authentification
2. It was wrong Setup of OLAP connection. It should be "SSO" instead of Prompt / Predefined Authentication.
Beside those issue, please don't forget to maintain below objects in Business Object CMC (Central Management Console) :
1. authentication: please use sap_all profile user to get sap roles
2. user and groups
Please assigned the new adapted role from BW to the user in Business Object.
Business Object WebI will show the same result of information as in SAP BW/BI with same user:
