SAP Knowledge Base Article - Public

3011030 - Checkpoints: BPC Data Access in SAC

Symptom

Trouble shooting for Data Access Profile in BPC or Data Access Control in SAC

Environment

SAP Business Planning and Consolidation 10.0, version for SAP NetWeaver

SAP Business Planning and Consolidation 10.1, version for SAP NetWeaver

SAP Business Planning and Consolidation 11, version for SAP NetWeaver

SAP Cloud for Analytics

Cause

There are different rules of handling DAP in BPC Consolidation related functions respectively for standard and embedded models.

Resolution

  1. Term:
    1. data access control [DAC - SAC term]
    2. data access profile [DAP - BPC term]
       
  2. BPC Standard [EPM-BPC-NW]
    1. If the user does not have 0BI_ALL authorization, BPC DAP will be triggered. 
    2. Quick win: Test the issue with a user of SAP_ALL/BI_ALL to determine if the issue is a DAP issue.
    3. Go to BPC web client, and check SECURITY setting, make sure the user got right model/rights assigned in Data Access Profile. 
    4. 1994720 - Authorization Analysis Tools for SAP Business Planning and Consolidation
       
  3. BPC Embedded [BPC 10.1 and BPC 11] [BW-PLA-BPC]
    1. If the user does not have 0BI_ALL authorization, BPC DAP will be triggered. 
    2. Quick win: Test the issue with a user of SAP_ALL/BI_ALL to determine if the issue is a DAP issue.
    3. Go to BPC web client, and check SECURITY setting, make sure the user got right model/rights assigned in Data Access Profile.
    4. DAP tables:
      RSBPCE_USER_TEAM
      RSBPCE_DAP_TEAM
      RSBPCE_PROFILE
      RSBPCE_DAP_DIM
    5. 2480201 - BPC authorization objects for BPC Embedded / Optimized for S4HANA
       
  4. SAC [LOD-ANA-PL-PLI]
    1. Check if the SAC user has been given access in the dimension members in SAC
      1. Check if user has access to the model or version: Model and Version Security 
         
      2. Check if the user is given Data Access Control in the Dimension Settings
        1. Setting Data Access Permissions on Dimensions
          Note: from performance point of view, instead of having Data Access Control on the dimension level for all users,
          it is better to use Data Access Control using Autorization concept using Roles, Teams. 
           
        2. Quick Win: Test the issue with a user of BI Admin role to determine if the issue is a DAC issue.
          If a user is assigned the BI Admin role, or is the model owner, that user always has full access to the model,
          regardless of the DAC settings applied to that model.
           
        3. 2266980 - Users unable to see data / unbooked values in SAP Analytics Cloud
           
      3. Check if the user in Roles, Teams if any restrictions are defined. 
         
    2. Check if the BPC user which SAC import connection used to query data has all access to BPC master data.
      1. see 2773902 - SAC Writeback model refresh error when BPC user has limited authorization
         
    3. Error code hints
      1. errorCode":"PLUGIN_EXECUTION_ERROR"
      2. stagingType":"CUBE_MASTER_DATA"
         
  5. BW [BW-BEX-OT-OLAP-AUT]
    1. 177875 - Authorizations for investigation of OLAP problems
    2. Check if the BPC user has access to authorization object RSBPC_ID & RSBPC_APPS...
    3. Check if the BPC user has access to authorization object S_RS_COMP & RSINFOAREA & RSINFOCUBE...
       
  6. To submit a BPC DAP/SAC DAC [BPC Planning model only]issue: Please provide
      1. BPC system ID
      2. BPC Environment/Model 
      3. SAC Tenant Link
      4. SAC Model Link
      5. SAC Story Link
      6. The BPC user used in SAC connection
      7. The SAC user to reproduce the issue
      8. A SAC support user to trouble shoot

See Also

2721311 - Data Access Control in BPC Consolidation

1789181 - How to check security data with BPC NW

2030833 - How to check the needed authorization to run a process -BPC NW

2296147 - Data access profile is ignored using Analysis for Office - BPC 10.1(Embebbed)

2690364-BPC Embedded consolidation engine and DAP

2748770 - BICS: BPC Data Access Profiles are not taken into account F4

2769828 -DAP restriction is not working in Journal Pages

2738237 -InA DAP are not taking into account F4 help BPC Clients

2769828 -DAP restriction is not working in Journal Pages

2969947 - Planning functionalities supported in SAC live connection to BPC Embedded Model

Configure DAP for users following instructions in
Security Guide for SAP BusinessObjects Planning and Consolidation 10.1 version for SAP NetWeaver.
https://help.sap.com/viewer/8314dccf627e488d9e029009a0d9e05d/10.1/en-US

https://blogs.sap.com/2016/07/18/bpc-101-embedded-how-daps-determine-authorizations-for-hcprs/

2646117 - Checkpoints on BPC Embedded Model access via Analysis Office

Keywords

Consolidation, Controls, Journals, Business Rule, BPC/4, BPC 11.0, BPC10.1, Standard, Embedded, DAP BPC related authorization roles BPC Data Access Profiles (DAP) RSBPC_BBPF RSBPC_MODL RSBPC_TEAM RSBPC_WKSP RSBPC_USER RSBPC_ENVM RSBPC_ID RSBPC_DAP RSBPC_CTR RSBPC_JNL RSBPC_MON RSBPC_OWN RSBPC_RUL S_RS_AUTH S_RS_COMP S_RS_COMP1 S_RS_ADMWB S_RS_ALVL S_RS_COPR S_RS_HIER S_RS_IOBJ S_RS_WSPAC S_USER_GRP S_ADT_RES   , KBA , LOD-ANA-PL-PLI , Planning Integration (BPC,S/4,IBP...) , EPM-BPC-NW , NetWeaver Version , Problem

Product

SAP Analytics Cloud 1.0