BW Security

[Former Member]

I have a question about BW access. One of our key concerns is Power User and Reporting Users ability to assign and maintain queries and other objects in Menu and Workbook roles. In BW we have designed two roles that work in conjunction with one another. A Security role to restrict users to InfoAreas, InfoCubes, etc.., and a Menu Role that only has the queries and web reports the user is allowed to execute. These two roles work in conjunction to secure users in BW. If you have time can you answer the question below:

Do you allow users other than Security or Basis assign Queries, Workbooks, Web Reports, or other objects to roles?

Please explain the reasons why this access is granted to users other than security/basis

-or-

Explain why this access is not delegated to non-admin users?

[Former Member]

Hi

This is a debatable issue.

But in general and usually in most cases the Security person (along with BW people) is assigning roles, Query's, Users Etc.

This is mainly because of the change management process that SAP supports (moving changes via transports).

Granting users some of these auth will cause the security not be full.

Also there is the issue of changing and designing new and existing Query's? do you let users change or add Query's?

We don't. Just because of change Mang and security, but its possible to grant this kind of capabilities (usually its even requested by power users).

Thanks Edan