Does BPC requires a dialog type user because the jobs are scheduled from the BPC interface?

[former_member275658]

Hi Gurus,

I am a security person and we have a requirement from BPC functional team that they need a dialog user to schedule jobs. Below is the reply from functional team  

"BPC supports only a regular user (dialog) for scheduling jobs and this user-id
requires all the data access inside BPC to run the jobs. So long as the user is
of type dialog and has all the access inside BPC, we should be fine."

My question is Why we need a dialog for something in background. BPC does have a automatically created user BPC_SERVICE which is a System user, can't we use this user instead of a dialog user ? Please advise..

Regards,

Salman

[former_member190501]

Hi,

In BPC, users will schedule jobs from front end i.e Excel using their IDs. Jobs also scheduled based on user ID.

Thanks,

Raju

[former_member275658]

i know they will use bpc front end to schedule jobs like legal consolidation run but my question is why can't they use a system user at the time of scheduling batch jobs ? Is it not a security flaw to use dialog user for batch jobs ?

[former_member190501]

Hi,

When user triggers job from front end , job will executed in back end under user BPC_SERVICE. That is why you no need to create BPC user as back ground user . All the jobs triggered under BPC_SERVICE.

Thanks,

Raju

[former_member275658]

we do have BPC_SERVICE system user automaticallu created. When functional team is running Legal Consolidation from front end it is scheduling under their regular dialog user id instead of BPC_SERVICE.

Why Functional team is saying that we need to have a dialog user  to run legal consolidation from BPC front end ?

[former_member190501]

Hi,

All BPC users in BW are Dialog users. Functional no need to mention that its default.

Thanks,

Raju

[former_member275658]

Let me put like this.. Requirement is: For Legal Consolidation run, the authorization required is all data access profiles/task profiles must be assigned to a dialog user else it is failing. Functional is stating that without this access assigned to their regular(dialog) user id the legal consolidation is failing and they also mentions that they can't use system user like BPC_SERVICE to complete this task.

My question: Is BPC is designed like this where we need to give full access to a dialog user to complete a task which runs in background ?