Hierarchical Authorizations in SAP BW

 

The following steps describe the steps to control authorizations for hierarchies

 1) Transfer and activate InfoObject 0TCTAUTHH tcode => RSD1

2) Mark InfoObject 0TCTAUTHH as relevant for authorization tcode => RSD1

3) Mark Leaf InfoObject as relavant for authorization tcode => RSD1

4)  Create authorization objects with 0TCTAUTHH and Leaf InfoObject => RSSM

5) Define hierarchical authorizations tcode => RSSM

6) Manual intrgration of authorization object in role tcode => PFCG

7)  Maintain authorization values tcode => PFCG

8)  Assign role to user tcode => PFCG or via Central User Administration

 For extracting structural authorizations from HR (mySAP ERP HCM)  and to map it in SAP BW to maintian consistency between the   two systems the tables of interest are:

1)  T77PR for Structural Authorization profiles

2)  T77UA for user assignments

3) T77UU for users (in this table you can select the users for extraction. You can either select all or specific users)