SAP Security Tip: How To Quickly Find Existing Roles

Filling out a security form for a new multiprovider or query is never fun.  Here are some steps that may help to smooth that process.

Find a similar multiprovider/query and get the following ZA and ZR roles, where ZA allows a user to access a query or multiprovider and ZR allows a user to find the query in the appropriate role/folder in BEx.

ZA ROLES

a. Look up table AGR_1251 using the following selection criteria:

AGR_NAM = ZA*

LOW = *<CUBENAME>*

b. Grab the roles the following roles:
End-User = ZA*END*

Power-User = ZA*POW*

IT Power-User = ZA*IT-POW*

ZR ROLES

1. Find a similar query in BEX.
2. Identify the folder/role it falls under
3. Get the folder/role name

Transport

Perform the following steps to collect a role into a transport request number:

PFCG

Search on tech name of role

Click on transport icon

Uncheck “user assignment”

Check “personalization”

Enter Transport Request Number

Ø extra: “menu” has all queries for this zr-role (folder)