Using BW PFCG Roles to manges BOBJ Security

[Former Member]

We have BI 4.0 SP5 Patch level 6 working with SAP BW as the data source. We are using SSO with BW and users will login to BOBJ using SAP BW user name and password. We have imported the users in to BOBJ and assigned them to BOBJ groups to manage folder level and tool level security. I was thinking to assign the users into PFCG roles in BW rather than assigning them to BOBJ groups directly. Then we can assign the PFCg roles to BOBJ group. This way BASIS team can manage day to day security within BW it self. When a new user added they have to just assign the PFCG roles required to access BOBJ. Then automatically they will get the required rights in BOBJ. Has any one tried this approach or see any problems with this ?

Thanks,

Yasitha

[Former Member · Accepted solution]

Yes, we can manage Bo security with the BW Groups.

It is little bit tricky. BW group needs to have access on the BO reports/universe/Connections/QAAWS to access.

once you apply that, Users from particular BW group will be having access to respective Bo Folder access.

You need to have particular SAP BW Roles for  BO, Otherwise all the users from BW will be imported to BO.

same time you need set up Manual SAP Role update or Automate update to import the new users in to the Bo environment.

[Former Member]

Thanks for the reply Prasad. I implemented this and don't see any issues so far.

[Former Member]

Good to hear! Would you mind marking one as the answer so this thread is closed?