2 Replies Latest reply: Jun 25, 2012 8:59 PM by Raghu Ram RSS

Security integration with ECC

Manny Smith
Currently Being Moderated

I understand with BW 7.3 AND EPM 10, there is security integration between BPC & BW, but is it possible to have ECC security applied to bpc and bw? in other words, could there be one security for ecc,bw & bpc?     

  • Re: Security integration with ECC
    Daniel Jacinto
    Currently Being Moderated

    Hi Manny,

     

    BPC security management is integrated with NW security management, so assigning BPC user to BPC environment actually equals assigning NW user to NW Role/Profile.

    If the CUA (Central User Administration) is enabled in system landscape, the underlying NW API will throw an exception when trying to assign user to NW Role/Profile. This is out of BPC control, BPC 10 does not support CUA and therefore, BPC 10 user security cannot be configured through CUA.

     

    However, this feature will be considered in future releases.

    This is the SAP Note for that:

    1675327 - BPC10NW: Configure BPC Users via Web Admin console without excluding the BW system from CUA.

     

    http://scn.sap.com/thread/2112971

     

    If you wished to Assign SAP Business Planning and Consolidation Authorizations via the SAP Governance, Risk, and Compliance (GRC) Access Control Compliance User Provisioning Product then take a look at the below document:

      

    http://scn.sap.com/docs/DOC-29197

     

    Hope this helps

     

    Kind Regards

    Daniel

  • Re: Security integration with ECC
    Raghu Ram
    Currently Being Moderated

    Hi Manny,

     

    In BPC 10.0 NW version the integration between BPC and BW is closer and better when compared to earlier versions of BPC 7X. The BPC 10.0 Users are NW Users, Windows Active Directory Users and CMS Users are no longer supported, The Users and Profiles are created in BW using the t.codes SU01 and PFCG. There are two roles which needs to be assigned to a BPC User in BW they are:

     

    /POA/BUI_FLEX_CLIENT and /POA/BUI_UM_USER

     

    As BW is a OLAP system and ECC is a OLTP system the role creation and User Administration remains the same, but the Authorization would be different in both ECC and BW Systems. I think you can have one Security for BPC and BW.

     

    Regards,

    Raghu