This will be a short one but it’s a good one if your company has a lot of SAP Queries.   This Blog covers adding SAP Security to an SAP Query / InfoSet.  This allows you to limit access of the query to certain users via SAP authorization roles.

The security is added to an SAP Query via an authorization group, which is actually assigned to the SAP Query’s InfoSet.

Granted you can limit a User’s access to an SAP Query by using “User Groups”.  The authorization group allows you to control the Query / InfoSet even tighter within a user group.

I won’t go into reasons why you would want to use an authorization group nor will I debate how you could do the same thing with multiple users groups in this blog.  All I will say on that is I have had a couple of clients that did not want to create additional user groups but did want to limit access to certain SAP Queries.

Something else to note, if you want to use queries in Web reporting, it is necessary to assign an authorization group to the InfoSet.

It is important to keep in mind that the security will apply to all SAP Query’s that use the InfoSet.

With all that said I’m going to assume that if you have read to this point you want to know how it’s done.

As always my goal is that any knowledgeable SAP person can successfully use the following information, however this is not a step by step instruction manual and does require a good understanding of SAP and SAP Query InfoSets.

This blog assumes the user has a good understanding of how to create / change an InfoSet.  The blog will not go into detail on how to actually create or change an InfoSet only how to add the authorization group.

Important Note:  Once the authorization group has been added to the InfoSet it will also need to be added to the object S_PROGRAM in a security role.  This blog does not touch on how to set up / maintain a security role.  Please work with your SAP security team to add the authorization group to a security role.

This Blog assumes you are adding an Authorization Group to an existing InfoSet. 

Assigning Authorization Group to InfoSet

1. Transaction SQ02 (Info Set: Initial Screen)

Select the InfoSet from list and hit the change icon.

2. Transaction SQ02 (Info Set: Initial Screen) – Continued

• Follow menu path GoTo > Global Properties > Title and Database.
• Enter Authorization Group.
• Hit enter and save InfoSet.

 

If you have question on this or any other PortSAP Consulting blog please feel free to contact us at Blog@PortSAP.com.  Or if you are looking for Top Quality SAP Consultants please feel free to contact us.

The author, Ray Hornbrook, has over 18 years of SAP functional and technical experience.  Ray started his career in SAP as a Subject Matter Expert (SME) for a SAP implementation in 1998 and is now a Senior Level SAP Consultant.  Since Ray has worked both sides of SAP, business end-user and IT professional, he is able to communicate effectively with both IT and Business team members.  Having a background as an SAP business end user has helped Ray greatly in his consulting career.  The business background helps him better communicate with the business members of the team.  As well as helping bridge gaps in communication between the IT and Business team members.

To find out more about Ray Hornbrook please check out his LinkedIn profile by clicking HERE.

End of document – www.portsap.com

Neither PortSAP Consulting nor the author of this Blog is associated with SAP AG or with any of its subsidiary or alliance company. Trademarks used in our website are registered trademarks of respective companies and neither PortSAP Consulting nor the author of this Blog is associated affiliated with these companies.