Привет, всем!
Подскажите пжл для того чтобы задействовать новую концепцию полномочий в BI. Необходимо ли задействовать кубы 0TCA* и 0TCT* и до какого уровня?
При попытке Анализа в RSECADMIN у меня выкидывает в дамп. Пишет что поле символа еще не было присвоено.

Из саповского документа "An Expert Guide to New SAP BI Security Features"

Before you get started, here are some tips:

Activate all Business Content related to authorizations before you get started
InfoObjects: 0TCA* (and 0TCT* if not done already)
InfoCubes: 0TCA*

Set the following InfoObjects as “authorization-relevant”
0TCAACTVT
0TCAIPROV
0TCAVALID
0TCAKYFNM

Add 0TCAIFAREA as an external hierarchy characteristic to 0INFOPROV

Если собираетесь грузить полномочия (например, из R/3) - они Вам пригодятся (По крайней мере, SAP так считает )...
Если с нуля делать будете - они Вам нафиг не нужны...

Спасибо, теперь более понятней становится концепция.
А по следующему вопросу не могли бы дать совет у меня при попытке анализа в RSECADMIN выкидывает в дамп. Ставлю в роль объекта S_RS_AUTH значение 0BI_ALL отчет проходит но ограничение нигде не срабатывает, убираю выпадает в дамп.

Assigning an Authorization Using Profiles
The analysis authorizations can be (but do not have to be) assigned by roles. To assign an authorization to a user, it is sufficient to proceed as described above.
As an alternative, authorizations can also be assigned using profiles for the authorization object S_RS_AUTH, the entries of which are analysis authorization names. In this way, you can assign authorizations to a user using roles as well using the general role maintenance and the general user maintenance for SAP NetWeaver.
The input help in the role maintenance for this authorization object provides all existing, defined BI analysis authorizations.
Mixed scenarios, which mean assignments from roles in addition to the directly assigned authorizations, are also possible.
Special Authorization for Everything: 0BI_ALL
An authorization for all values of all authorization-relevant characteristics is created automatically in the system. It has the name 0BI_ALL. It can be viewed, but not changed. Every user that receives this authorization can access all the data at any time. Each time an InfoObject is activated and the property authorization relevant is changed for the characteristic or a navigation attribute, 0BI_ALL is changed. A user that has a profile with the authorization object S_RS_AUTH and has entered 0BI_ALL there (or has included it, for example with the pattern *) has complete access to all data.

Ссылко: http://help.sap.com/saphelp_nw04s/helpd ... ameset.htm