SAP BPC 10.0 Data Access Profile - Specified Dimension Member Access

[former_member766645]

Hi SAP community, I'm currently using BPC 10.0 and having trouble setting up Data Access Profile for a specified group of users:

1. I've set up a BPC Team and Task Profile for this User group "PILOT" and also a Data Access Profile. Users are all assigned to this PILOT team and the Task Profile, Data Access Profile are assigned to the User Team as well. (This way users are linked to Team, then other security accesses go with the BPC Team instead of single users. This works very well for other User Team in the system)

2. For their model access, I'd like to only giving them access to Cost Center #1 - #3 in the Consolidated Expense Model (as shown in the screenshot) for the Dimension member of COST_CENTER.

3. In this Data Access Profile, I also see there is a dimension called ENTITY, it is by default set as giving "Read and Write" access to "ALL Members".

4. After the access is set up, I have one user in this PILOT Team conduct a testing in the model: The user create a BPC report through EPM and selected Cost Center #1 - #100, Given Step 2, we were expecting the user could only see data for Cost Center #1 #2 and #3, but instead, he was able to see data for other cost centers...

I'm not sure why this happened as the Data Access Profile should be the only way to restrict assess to the Dimension members in a model (per my understanding & the SAP guide). Looking for help on how to make this happen to only give user access to certain dimension members (could be base level or hierarchy level). Thanks!

[former_member186338]

What do you mean by "selected Cost Center #1 - #100"?

Also ensure that user is a member of single team.

[former_member766645]

Hi vadim.kalinin , thanks for commenting!

This means that the user pull a data report through EPM in Excel to see the transaction data in this model, in the report he pulled, he selected every dimension member in the COSTCENTERS dimension.

[former_member186338]

Still not clear!

If the user have access to 3 CC, then he will be able to select only 3 CC

[former_member766645]

So the user didn't actually pull a new BPC report via EPM in Excel, he used a pre-built report and simply refreshed the report. Then there was transactional data showing up under Cost Center #5, #7 and #61 instead of only showing Cost Center #1, #2 and #3.

Eventually users will be using these pre-built BPC reports to review and input data to the server. These reports are saved on the server root folder. I'll double check if the user can only cherry pick 3 cost centers and get an update here, thanks vadim.kalinin !

[former_member186338]

In general it's better to have some dummy CC without data but all users have read access to it.

The report, stored on the server has to be saved with this dummy CC only. When user will refresh it only allowed CC will be shown.

[former_member766645]

We are actually trying to restrict some user's read access to some Cost Centers due to they are not the owner of the cost centers...

With the Data Access Profile setup, we were hoping to give cost center owners access to read and write to those cost centers they own, but not even read data from other cost centers that they don't own.

[N1kh1l]

Adding to what Vadim said, make sure what backend BW roles you have assigned. Ensure user has only user level authorisation backend BW roles and not higher level BW roles. Goto SU01 and check the BW roles assigned in roles tab.

Regards

Nikhil

[former_member766645]

Thanks for your comment! Would the BW roles be an impact comparing to the BPC level? Through my other practice (creating different BPC Teams with various types of access/task profile), it seemed work without checking the BW roles. I'll work with the Admin to explore the BW roles and see if that's the key, thanks!