3011030 - Checkpoints: BPC Data Access in SAP Analytics Cloud (SAC)

Troubleshooting for data access profile (DAP) in BPC or data access control in SAP Analytics Cloud (SAC)

• SAP Business Planning and Consolidation 10.1, version for SAP NetWeaver
• SAP Business Planning and Consolidation 11.0, version for SAP BW/4HANA
• SAP Business Planning and Consolidation 11.1, version for SAP BW/4HANA
• SAP Analytics Cloud 

There are different rules of handling DAP in BPC Consolidation related functions respectively for standard and embedded models.

1. Term:
1. data access control [DAC - SAC term]
2. data access profile [DAP - BPC term]
    
2. BPC Standard [EPM-BPC-NW]
1. If the user does not have 0BI_ALL authorization, BPC DAP will be triggered. 
2. Quick win: Test the issue with a user of SAP_ALL/BI_ALL to determine if the issue is a DAP issue.
3. Go to BPC web client, and check SECURITY setting, make sure the user got right model/rights assigned in Data Access Profile. 
4. 1994720 - Authorization Analysis Tools for SAP Business Planning and Consolidation
    
3. BPC Embedded [BPC 10.1 and BPC 11] [BW-PLA-BPC]
1. If the user does not have 0BI_ALL authorization, BPC DAP will be triggered. 
2. Quick win: Test the issue with a user of SAP_ALL/BI_ALL to determine if the issue is a DAP issue.
3. Go to BPC web client, and check SECURITY setting, make sure the user got right model/rights assigned in Data Access Profile.
4. DAP tables:
   RSBPCE_USER_TEAM
   RSBPCE_DAP_TEAM
   RSBPCE_PROFILE
   RSBPCE_DAP_DIM
5. 2480201 - BPC authorization objects for BPC Embedded / Optimized for S4HANA
    
4. SAC [LOD-ANA-PL-PLI]
1. Check if the SAC user has been given access in the dimension members in SAC
1. Check if user has access to the model or version: Model and Version Security 
    
2. Check if the user is given Data Access Control in the Dimension Settings
1. Setting Data Access Permissions on Dimensions
   Note: from performance point of view, instead of having Data Access Control on the dimension level for all users,
   it is better to use Data Access Control using Authorization concept using Roles, Teams. 
    
2. Quick Win: Test the issue with a user of BI Admin role to determine if the issue is a DAC issue.
   If a user is assigned the BI Admin role, or is the model owner, that user always has full access to the model,
   regardless of the DAC settings applied to that model.
    
3. 2266980 - Users unable to see data / unbooked values in SAP Analytics Cloud
    
3. Check if the user in Roles, Teams if any restrictions are defined. 
    
2. Check if the BPC user which SAC import connection used to query data has all access to BPC master data.
1. see 2773902 - SAC Writeback model refresh error when BPC user has limited authorization
    
3. Error code hints
   
1. errorCode":"PLUGIN_EXECUTION_ERROR"
2. stagingType":"CUBE_MASTER_DATA"
    
5. BW [BW-BEX-OT-OLAP-AUT]
1. 177875 - Authorizations for investigation of OLAP problems
2. Check if the BPC user has access to authorization object RSBPC_ID & RSBPC_APPS...
3. Check if the BPC user has access to authorization object S_RS_COMP & RSINFOAREA & RSINFOCUBE...
    
6. To submit a BPC DAP/SAC DAC [BPC Planning model only]issue: Please provide
1. BPC system ID
2. BPC Environment/Model 
3. SAC Tenant Link
4. SAC Model Link
5. SAC Story Link
6. The BPC user used in SAC connection
7. The SAC user to reproduce the issue
8. A SAC support user to troubleshoot

• 2721311 - Data Access Control in BPC Consolidation
• 1789181 - How to check security data with BPC NW
• 2030833 - How to check the needed authorization to run a process -BPC NW
• 2296147 - Data access profile is ignored using Analysis for Office - BPC 10.1(Embedded)
• 2690364-BPC Embedded consolidation engine and DAP
• 2748770 - BICS: BPC Data Access Profiles are not taken into account F4
• 2769828 -DAP restriction is not working in Journal Pages
• 2738237 -InA DAP are not taking into account F4 help BPC Clients
• 2769828 -DAP restriction is not working in Journal Pages
• 2969947 - Planning functionalities supported in SAC live connection to BPC Embedded Model
• Configure DAP for users following instructions in
• Security Guide for SAP BusinessObjects Planning and Consolidation 10.1 version for SAP NetWeaver.
• https://help.sap.com/viewer/8314dccf627e488d9e029009a0d9e05d/10.1/en-US
• https://blogs.sap.com/2016/07/18/bpc-101-embedded-how-daps-determine-authorizations-for-hcprs/
• 2646117 - Checkpoints on BPC Embedded Model access via Analysis Office

Consolidation, Controls, Journals, Business Rule, BPC/4, BPC 11.0, BPC10.1, Standard, Embedded, DAP, BPC related authorization roles BPC Data Access Profiles (DAP) RSBPC_BBPF RSBPC_MODL RSBPC_TEAM RSBPC_WKSP RSBPC_USER RSBPC_ENVM RSBPC_ID RSBPC_DAP RSBPC_CTR RSBPC_JNL RSBPC_MON RSBPC_OWN RSBPC_RUL S_RS_AUTH S_RS_COMP S_RS_COMP1 S_RS_ADMWB S_RS_ALVL S_RS_COPR S_RS_HIER S_RS_IOBJ S_RS_WSPAC S_USER_GRP S_ADT_RES, SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning, Cloud for Analytics, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJcloud, BOCloud., SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics,Error, Issue, System, Data, User, Unable, Access, Connection, Sac, Connector, Live, Acquisition, Up, Set, setup, Model, BW, Connect, Story, Tenant, Import, Failed, Using, Working, SAML, SSO, sapanalyticscloud, sap analytical cloud, sap analytical cloud, SAC, sap analyst cloud, connected, failure, stopped   , KBA , LOD-ANA-PL-PLI , Planning Integration (BPC import/export/writeback) , EPM-BPC-NW , NetWeaver Version , EPM-BPC-BW4 , BPC/4 , Problem