SAP OLAP Connector user configuration
A user profile transport is supplied for Business Warehouse systems.
Installing the SAP transports - Windows
Authorizations are required to use the OLAP Connector. Qlik provides a role that contains the necessary authorizations.
The QTQVCBWACCESS role is to be used by OLAP, DSO/ODS, BEx, and InfoProvider connectors back-end users for doing extraction jobs on an SAP BI/BW system. This role is intended only for use in a Development environment. As part of the development process, you should create a more restricted role for the Production environment.
After the transports have been installed in the system, create one or more users as needed.
If you import the role into SAP BW versions prior to 7.00, errors or warnings regarding missing objects will be displayed, but these can be ignored.
Alternatively, go to transaction PFCG and manually create a role with the following access rights. In the SAP system, add the following authorization objects:
Authorization object | Access rights |
---|---|
S_RFC |
ACTVT: 16 RFC_NAME: RFC1, RRT0, RSAB, RSOB, SDIFRUNTIME, SYST,OCSB, SYSU, SRTT RFC_TYPE: FUGR |
S_TABU_LIN |
ACTVT: Restrict according to customer (* to access all) ORG_CRIT: Restrict according to customer (* to access all) ORG_FIELD1: Restrict according to customer (* to access all) ORG_FIELD2: Restrict according to customer (* to access all) ORG_FIELD3: Restrict according to customer (* to access all) ORG_FIELD4: Restrict according to customer (* to access all) ORG_FIELD5: Restrict according to customer (* to access all) ORG_FIELD6: Restrict according to customer (* to access all) ORG_FIELD7: Restrict according to customer (* to access all) ORG_FIELD8: Restrict according to customer (* to access all) |
S_RS_AUTH |
BIAUTH: 0BI_ALL |
S_RS_COMP |
ACTVT: 03,16, 22 RSINFOAREA: Restrict according to customer (* to access all) RSINFOCUBE: Restrict according to customer (* to access all) RSZCOMPID: Restrict according to customer (* to access all) RSZCOMPTYPE: Restrict according to customer (* to access all) |
S_RS_COMP1 |
ACTVT: 03, 16, 22 RSINFOAREA: Restrict according to customer (* to access all) RSZCOMPID: Restrict according to customer (* to access all) RSZCOMPTYPE: Restrict according to customer (* to access all) RSZOWNER: Restrict according to customer (* to access all) |
S_RS_ERPT |
ACTVT: 03, 16, 22 RSERPTID: Restrict according to customer (* to access all) RSZOWNER: Restrict according to customer (* to access all) |
S_RS_HIER |
ACTVT: 71 RSHIENM: Restrict according to customer (* to access all) RSIOBJNM: Restrict according to customer (* to access all) RSVERSION: Restrict according to customer (* to access all) |
S_RS_ICUBE |
ACTVT: 03 RSCUBEOBJ: DATA, DEFINITION RSINFOAREA: Restrict according to customer (* to access all) RSINFOCUBE: Restrict according to customer (* to access all) |
S_RS_MPRO |
ACTVT: 03 RSINFOAREA: Restrict according to customer (* to access all) RSMPRO: Restrict according to customer (* to access all) RSMPROBJ: DATA, DEFINITION |
Create one or more download users with the above role. Do not use the same download user as the SQL Connector.
Do the following:
- If download users with different access rights to cubes or queries are needed, copy the role created above and change the copy according to the requirements. Create a new user with the newly created role assigned. You can also assign the roles to existing users.
- Go to transaction SU01.
- Click Create (F8).
- Give the new user a name and a password.
- For an existing user, enter the User ID and click Change (Shift + F6).
- On the Logon data tab, assign new users to User Type: Service or Communications.
- On the Roles tab, add the role just created.
If the installation is an upgrade from a previous version and the role QTQVCBWACCESS has been updated, update all users assigned to the role.
Do the following:
- Go to transaction PFCG.
- Enter the role name QTQVCBWACCESS.
- Click Change Role.
- On the User tab, enter the name of the user(s) created above.
- Click User comparison.
- Click Complete comparison.
- Click Save.