Authorizations Based on ERP Org Structure

[Former Member]

Is there any easy way of creating authorisations based on the Org structure in ERP. We do not use structural authorizations in the ERP system but we do have a fully maintained Org structure with chiefs etc. Is the only option to build profiles and link users etc via transactions OOSP & OOSB on the ERP side?

[Former Member · Accepted solution]

Do you mean in BW?

The best way is to create composite roles (PFCG) for each function you have in the org structure.

2) create roles which provide access to groups of reports

3) create "entity value" roles. So I you have 100 company codes, you create one role for each company code. Each role has a one to one relationship to an analysis authorization. (RSECADMIN)

user assignment: you assign one composite role to give the user access to reports, and one role to restict the values he can see in a report.

But, if you use the generation of analysis authorizations, you can skip bullet 3. just create an excel file which links a userid to an analysis authorization.