BPC310_EN_Col91_FV_Part_A4 (第3页)

第 122 页 / 共 473 页

Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor

PowerPoint BPC310

Pleaseremember,thevarykeynamedineachsectionwillspecifywhatdimensions

toburston,andwhoshouldreceiveeachgeneratedreport.

Figure 140: Distribution Template Fields

ADistributionTemplatemaycontainthefollowingfields:

• BOOK: the title of your distributed book.

• SECTION:denotesthebeginningofasection.

• REPNAME: report filename, location and title (can also be for Input

Schedules).

• FIXKEY:setsdimensionmemberstothefixedvalueswhengeneratingthe

report

For example, you can ensure that a report runs for 2008.TOTAL and

ACTUAL.

Todoasystemlookupforyearuse: =YEAR(TODAY())&“.TOTAL”this

makes it dynamic for time!

• VARYKEYS:liststhedimensionsanddimensionmembersthatshouldvary

for each report that will get created.

Forexample,ifyouwanttocreateanewofflinereportforeachEntity/Cost

Center/etc,youwouldspecifythatdimensionasaVARYKEY.

YouthenmapaspecificVARYKEYtoaUserIDwhoshouldreceivethat

report(forexample,theCostCentermanager). Thisway,eachuserwhogets

areporthastherequireddimension(s)settotheirindividualvalues.

Note: Ifyouwishtodistributebyemail,makesureanemailaddress

has been maintained for each user.

• SECTIONEND:denotestheendofasection.

110

第 123 页 / 共 473 页

BPC310 Lesson: BPC for Excel

Figure141: ValidatingtheDistributionTemplate

Asmentionedinanearlierslide,youneedtoValidatetheDistributiontemplate.

PleasebeverycarefulwhencreatingthedistributiontemplatesinceValidation

doesnotcheckforcasesensitivityorvalidmembersontheFIXKEYorVARKEY

members.

EventhoughyoucanlaunchtheValidatefromthemenudirectly,youwillalsobe

promptedtoValidatebeforesaving(althoughitisnotmandatorytodoso).

Figure142: DimensionsintheDistributionTemplate

AVARYKEYliststhedimensionsanddimensionmembersthatshouldvaryfor

each report that will get created.

111

第 124 页 / 共 473 页

Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor

PowerPoint BPC310

For example, if you want to create a new offline report for each Entity/Cost

Center/etc,youwouldspecifythatdimensionasaVARYKEY.Youthenmapa

specificVARYKEYtoaUserIDwhoshouldreceivethatreport(forexample,the

Cost Center manager). This way, each user who gets a report has the required

dimension(s) set to their individual values.

Figure 143: Offline Distribution Wizard

WhenexecutingtheWizard,itwilltechnicallyopenthereports/inputscheduleson

theclientmachine,changethecurrentview,refresh,andthensaveoffline.

Note: In order to use the Wizard, you will need to change an Excel

security setting: Tools → Security → Macros, then go to tab “Trusted

Publishers”andselectthebox“TrustaccesstoVisualBasicprojects”. By

allowingthisaccess,macrosinanydocumentsthatyouopencanaccess

thecoreVisualBasicobjects,methods,andproperties.

112

第 125 页 / 共 473 页

BPC310 Lesson: BPC for Excel

Figure 144: Lockdown and Send Mail

ThisslidedemonstrateshowtheDistributionselection–“LockdownandSend

mail” (via email) will work.

YouhavetheabilitytocustomizeandcontroltheemailforSubjectline, body,

requestsendconfirmationandziptheattachments.

A Distribution Summary will be provided detailing the Application Set,

Application,BookName,ModeandMailaccountsetup.

ValidatingdoesNOTcheckforvalidmembersontheFIXKEYorVARYKEY

members (including case sensitivity).

113

第 126 页 / 共 473 页

Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor

PowerPoint BPC310

Figure 145: Lockdown and Save to Folder

Byselectingthe“LockdownandSavetofolder”option,youhavetheabilityto

selectatargetfolderforthereportorscheduledistribution.

TheTargetfoldercanbeonanyclientPCoraccessibledriveorlocation.

Figure146: ViewingtheOutputfromFolderDistribution

ThisslideshowshowtoviewtheDistributionoutputfromafolderlocation.

114

第 127 页 / 共 473 页

BPC310 Lesson: BPC for Excel

YoucanseefromtheslidethatthefilesarelistedbyrecipientuserID,VARYKEY

values and then report name.

Figure 147: Collection

Thisslidedemonstrateshowthecollectionprocessisselected.

Fromthetaskmenu,selectCollectioninsteadofDistribution.

Twooptionsexistastothemethodofdatacollection. Youcanselectfromemail

or choose a folder path.

In this example, “Local Folder” is selected for the folder path. All the files

available from that location are displayed.

Youhavetheabilitytoselectone,severalorchoosethe“SelectAll”checkbox

to process all identified file(s).

The Review Distribution Summary window displays information about your

request,includingEstimatedPagesandTime,Applicationsetname,Application

name and the selected template(s).

115

第 128 页 / 共 473 页

Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor

PowerPoint BPC310

Figure 148: Creating & Publishing Books

A book of reports is a set of reports that can be published to BPC Web as an

HTMLorPDFfile,toanASCIIfile,ortoaprinter. Thebookpresentsreportdata

thatvariesbyoneormoremembersofoneormoredimensions. Themembers

used are those that are fixed in the report. Any members that are not fixed are

takenfromthecurrentviewoftheuseratthetimethebookispublished.

Abooktemplateisapre-formattedworksheetusedtocreateabookofreports.

Youcanstartwiththeemptyworksheetoranexistingbooktemplate,andmodifyit

tomeettheneedsoftheinformationyouwanttopublish. Asamplebooktemplate,

calledPerformance.xls,isprovidedwiththesampleapplicationset,ApShell.

Performance.xls contains a section called TOC, which provides an index of

the reports created by the Performance Reports section. The section called

performanceReports,bydefault,providesperformancedataforasetofentities

withinasettimeperiod. Youcaneditthefieldsintheperformance.xlsworkbook

to create a new book template.

Figure 149: The Book Template

116

第 129 页 / 共 473 页

BPC310 Lesson: BPC for Excel

You validate your book template to make sure there are no errors in the book

template. For example, validation checks for errors in syntax, structure, and

information provided. If there is an error in your report a descriptive message

displays. Theerrorlocationisalsohighlightedonthetemplate.

Abooktemplatemaycontainthefollowingfields:

BOOK: the title of your book.

CLEARBOOK: specifies whether to replace existing reports or accumulate to

existing reports.

SECTION: denotes the beginning of a section.

CLEARSECTION:allowsyoutoreplaceonlyasectionofabookinsteadofthe

entire book.

REPNAME:reportfilename, locationandtitle.

FIXKEY:setsdimensionmembersforallreportsinthebook.

SUPPRESSKEY:suppressesadimensionmemberifthevalueisequaltozero.

VARYKEYS: lists dimensions and dimension members for which the book of

reports is being created.

SECTIONEND:denotestheendofasectionofthebook.

Figure 150: Publishing a Book of Reports

117

第 130 页 / 共 473 页

Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor

PowerPoint BPC310

Figure 151: Publishing a Book of Reports

Figure 152: Publishing a Book of Reports

Booksofreportsarepublishedasweb-readyfilesandarenotvisibleuntilplaced

on a web page in the Content Library.

118

第 131 页 / 共 473 页

BPC310 Lesson: BPC for Excel

Figure 153: Adding a Web Page

BPC'sbookpublishingfeatureallowsyoutopublishmultiplereportsatonetime

toabook. ThebookcanbepublishedtoBPCWebasanHTMLorPDFfile,or

exportedtoanASCIIfileorprinter. Thebookpresentsreportdatathatvariesby

oneormoremembersofoneormoredimensions.

FollowtheActionPanepromptsto: Enterthenameyouwouldliketoappear

as the title of the item. Select the desired pixel height of the item. Select the

bookfromthelistofbooksavailabletoyou. Selectthebooksectionyouwantto

add. Setaccess. SelectShowaslistofreportsifyouwanttodisplaythelistof

reportscontainedinthebook,orselectShowasaspecificreporttoselectoneor

more specific reports from the book.

You can create a new Web page in the Content Library rather than uploading

documents. Under the Content Library Options, click “Add a new web page”

option.

Inthe“Whatisthenewpagename?”field,enterthepagename. Selectatemplate

layout:Nocolumns,Sidebyside,Smallleftside,Smallrightside.

Selectfromtheavailablechoices: Web-ReadyFile(filesthatwereuploadedfrom

ExcelasWeb-Readyfiles),ALiveReport,AspecificContentLibraryDocument

oraListofDocumentsintheContentLibrary, AWebSite(tobeembeddedin

the page).

119

第 132 页 / 共 473 页

Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor

PowerPoint BPC310

Figure 154: Displaying a Book on a Web Page

TheupperscreenshotsshowwhatBookslooklikefortheEnduser.

Lab25 – The Offline Distribution Wizard

(part of the last unit)

Lab26 – Creating and Publishing a BPC Book

(part of the last unit)

120

第 133 页 / 共 473 页

BPC310 Lesson: BPC for Excel

Lesson Summary

You should now be able to:

• Understand how to work With BPC for Excel, especially working and

navigating with Delivered Templates, creating comments and using the

OfflineDistributionWizardandthePublishBookTool.

121

第 134 页 / 共 473 页

Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor

PowerPoint BPC310

Lesson: BPC Web

Lesson Overview

Lesson Objectives

Aftercompletingthislesson, youwillbeableto:

• UnderstandwhichfeaturesBPCWebdelivers.

Business Example

Figure 155: BPC Web

Starting BPC Web

From BPC for Office, you can start BPC Web.

To start BPC Web, do one of the following

From any action pane, select BPC Web.

FromforExcel, selectePublish→ViewBPCWeb.

MySettingsallowsalanguagechangeandaccesstoMySecurityReportswhich

displaysassignedtaskandmemberaccessprofiles.

122

第 135 页 / 共 473 页

BPC310 Lesson: BPC Web

Figure 156: BPC Web – Content Library

TheContentLibraryisaweb-based, centralstorageforallkindsofdocuments

which are relevant for a certain group of user.

Figure 157: Post a New Document (1 of 5)

Steps for Posting a New Document:

Note: Steplabelsareabovetherelatedillustrationintheaboveslide.

123

第 136 页 / 共 473 页

Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor

PowerPoint BPC310

Step1: Select“Postadocument”fromtheactionpane.

Step2: ClickonBrowseandselectafilelocatedonyourPCyouwanttopost

totheContentLibrary. Thefilenamemustbeauniquename.

Step3: Youcanchangethedescriptionofthefilewhichwillthenbecome

the document title.

Figure 158: Post a New Document (2 of 5)

StepsforPostingaNewDocument(continued):

Step4: Clickonusers/teamstodefinewhoshouldhaveaccesstotheposting.

Step5: Select the All Users checkbox or select individual teams and/or

individual users.

Step6: Click on the green arrow to continue.

124

第 137 页 / 共 473 页

BPC310 Lesson: BPC Web

Figure 159: Post a New Document (3 of 5)

StepsforPostingaNewDocument(continued):

Step7: Selectapredefineddocumenttypefromthedropdownlistbox.

Step8: Selectapredefineddocumentsub-typefromthedropdownlistbox,

or define a new sub-type.

Note: Document types and sub-types are maintained from BPC

Administration.

125

第 138 页 / 共 473 页

Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor

PowerPoint BPC310

Figure 160: Post a New Document (4 of 5)

StepsforPostingaNewDocument(continued):

Step9: Ifneeded,youcanhavethesystemautomaticallysendanemailtothe

usersinformingthemofthenewposting. Youcancreateyourown

emailmessageorclickonthe“Userthedefaultmessage”linktohave

thesystemcreateagenericemailmessage. Thenclickonthegreen

arrow to continue.

Step You can associate the posting to a particular application in the

10: applicationset. FromtheApplicationdropdownlistbox,selectthe

associated application.

Step11: Application Context is NOT used to control security/access to the

files in the Content Library. This is controlled by “Team Access”

exclusively.

Figure 161: Post a New Document (5 of 5)

StepsforPostingaNewDocument(continued):

126

第 139 页 / 共 473 页

BPC310 Lesson: BPC Web

Step Editthedocumenttosettheapplicationcontext.

12:

Step Click on the green check.

13:

Step The context has been set.

14:

Note: 1:

ForDocumentsthathavealreadybeenuploaded,youcanedittheTitle,

Type,SubType,ApplicationContext,andTeamAccess. ForWebPages,

you can only edit the Team Access field.

Note: 2:

Thedimensionsintheapplicationabovesettoberelevantforworkstatus

are Entity and Time only.

Figure 162: Content Library and Work Status

Work Status locks can allow you to lock down documents that have had the

Application Context specified.

YoucanlaunchtheworkstatuslockspagefromContentLibraryusingtheAction

Pane.

You can then set the Work Status values.

127

第 140 页 / 共 473 页

Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor

PowerPoint BPC310

Figure 163: Opening Selected Items in Tabs

Multiple items can be opened in separate tabs.

• PlaceacheckmarkintheboxnexttotheContentLibraryListitemtitles.

• ClickOpenselecteditemsintabslinkundertheLibraryContentOptions

heading.

• The Multi-tab Content displays.

Figure 164: Sorting, Filtering and Deleting

128

第 141 页 / 共 473 页

BPC310 Lesson: BPC Web

Figure 165: Creating a Web Pages

YoupublishawebreadyfiletooneofthewebpublicationfoldersinBPCWeb,

dependingonyourroleintheorganizationandthetypeofreportbeingpublished.

After publishing a web-ready file, you can post it to a Page or the Content

Library.

Youcancontinueaddingmoreobjectstothepage,oryoucanselectoneofthe

following options:

• Modify the object.

• Set “Team Access” to the page.

• Preview the output.

• Save and view the output.

129

第 142 页 / 共 473 页

Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor

PowerPoint BPC310

Figure 166: Content Library – Security

ThefollowingContentLibraryactionsarecontrolledbySecurityTasks:

• “Addanewwebpage”: ZFP→CreateWebpage.

• “Postadocument”: ZFP→ManageContentLib.

• “Editpageinformationinthelist”: ZFP→ManageContentLib.

• “Deleteselecteditems”: ZFP→ManageContentLib.

“Set work status”: WorkStatus → SetWorkStatus AND it also requires that an

application has been set in your Current View.

130

第 143 页 / 共 473 页

BPC310 Lesson: BPC Web

Figure 167: LANDINGPAGEITEM

ThereisanAppSetwebadminparametercalled“LANDINGPAGEITEM”,which

allows you to control what is viewed when you open the BPC Web “Getting

Started” page (landing.aspx).

Figure 168: BPC Web: Live Reporting

You can enter your own page header.

Usedraganddroptoadddimensionstotherowsorcolumns.

One per row or column is allowed.

131

第 144 页 / 共 473 页

Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor

PowerPoint BPC310

Figure169: SampleBPCWebLiveReport&Chart

Itispossibletomodifyalivereportafteritissaved.

Figure 170: Data Input via the Web

ItisnotnecessarytoswitchthemodeoftheLiveReporttoenableinput,theonly

requirementistoresolvememberstobaselevel.

Youcandothatbyeitherchangingthecurrentviewfordimensionsnotintherows

andcolumnsandorbyexpandingdimensionsalreadyintherowsandcolumns.

Lab 28 – BPC Web Live Reporting

(part of the last unit)

132

第 145 页 / 共 473 页

BPC310 Lesson: BPC Web

Lesson Summary

You should now be able to:

• UnderstandwhichfeaturesBPCWebdelivers.

133

第 146 页 / 共 473 页

Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor

PowerPoint BPC310

Lesson: BPC for Word and BPC for PowerPoint

Lesson Overview

Lesson Objectives

Aftercompletingthislesson, youwillbeableto:

• Understand BPC for Word tasks, see how to insert SAP BPC data into a

MicrosoftWordfileandunderstandtheBPCforPowerPointtasksaswellas

seehowtoinsertSAPBPCdataintoaMicrosoftPowerPointfile.

Business Example

Figure171: LaunchingBPCforWordorBPCforPowerPoint

TolaunchBPCforWordorBPCforPowerPoint,usetheBPCLaunchPage.

ThereareseparatebuttonsontheLaunchPageforeitherselection.

134

第 147 页 / 共 473 页

BPC310 Lesson: BPC for Word and BPC for PowerPoint

Figure172: BPCforWordandPowerPointActions

BPCforWordandBPCPowerPointallowyoutosendandretrieveBPCdataand

enterandviewcommentsinyourdocumentsandslideshows.

SAPBPCBPCforWordhasthefollowingactions:

InsertBPCdata: Allowsyoutoinsertavaluefromthedatabasebasedonthe

current view. Clicking this link inserts a placeholder. Select Retrieve all data

to get the value.

InsertSAPBPCBPCforExcelobject: YoucaninsertaSAPBPCreportor

inputscheduleintoaMicrosoftWorddocumentorMicrosoftPowerPointslide.

AddnewcommentandViewcommentstasksusethestandardCommentinterface

to submit and report on comments.

Retrievealldata: Allowsyoutoretrievedatavalues,basedonthecurrentview,

fromthedatabase. Clickingthislinkrefreshesdatavaluesintheentiredocument

or slideshow.

ExpandAll: AllowsyoutoexpandfunctionscontainedinembeddedSAPBPC

objects.

Sendalldata: Afteratleastonedatavaluehasbeeninsertedinyourdocumentor

slideshow,youcanusethiscommandtosendthevaluetothedatabase. Ifthere

aremultipleinserteddatavalues,thiscommandsendsallofthemtothedatabase.

135

第 148 页 / 共 473 页

Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor

PowerPoint BPC310

Figure 173: Insert BPC for Excel object

ThisslidedescribeshowtoinsertaBPCforExcelobject.

You can insert a BPC report or input schedule into a Word document or

PowerPointslide. Thereportorinputscheduleyouwanttoembedmustbesaved

on the BPC server.

Figure174: Example: BPCforExcelObjectwithinWord

ThisslideshowsanexampleofaBPCforExcelobjectinsertedintoaMicrosoft

Word page.

Tore-entereditmode,doubleclickontheBPCExcelobject.

136

第 149 页 / 共 473 页

BPC310 Lesson: BPC for Word and BPC for PowerPoint

Figure 175: Editing Object Properties with VBA

This slides discusses editing object properties with VBA (Visual Basic for

Applications)forusewithBPCforPowerPoint.

Figure176: Sample: BPCforExcelObjectwithinPowerPoint

This slide shows an example of a BPC for Excel Object within a Microsoft

PowerPoint file.

Note: Ifyouneedmoreadvancedformatting,youshouldusethe“Insert

BPC for Excel Object”.

Lab 29 – Working with BPC for Word

(part of the last unit)

137

第 150 页 / 共 473 页

Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor

PowerPoint BPC310

Lab 30 – Working with BPC for PowerPoint

(part of the last unit)

138

第 151 页 / 共 473 页

BPC310 Lesson: BPC for Word and BPC for PowerPoint

Lesson Summary

You should now be able to:

• Understand BPC for Word tasks, see how to insert SAP BPC data into a

MicrosoftWordfileandunderstandtheBPCforPowerPointtasksaswellas

seehowtoinsertSAPBPCdataintoaMicrosoftPowerPointfile.

139

第 152 页 / 共 473 页

UnitSummary BPC310

Unit Summary

You should now be able to:

• Understand how to work With BPC for Excel, especially working and

navigating with Delivered Templates, creating comments and using the

OfflineDistributionWizardandthePublishBookTool.

• UnderstandwhichfeaturesBPCWebdelivers.

• Understand BPC for Word tasks, see how to insert SAP BPC data into a

MicrosoftWordfileandunderstandtheBPCforPowerPointtasksaswellas

seehowtoinsertSAPBPCdataintoaMicrosoftPowerPointfile.

140

第 153 页 / 共 473 页

第 154 页 / 共 473 页

第 155 页 / 共 473 页

Unit 4

Administration in BPC

Unit Overview

Unit Objectives

After completing this unit, you will be able to:

• Understand the four components of the security model and how they are

integrated.

• DescribeatypicalcustomerscenarioforWorkStatus.

• Describe how to set Work Status.

• Create a business process flow which will facilitate the coordination and

statuscheckingaspectsofperformingplanningorconsolidationsactivities.

• Describethedifferenttypesofauditcapabilitiesandthedatayoucancapture

to help provide adequate control.

Unit Contents

Lesson: Security................................................................142

Lesson: Work Status ...........................................................154

Lesson: Business Process Flows.............................................163

Lesson: Audit....................................................................176

141

第 156 页 / 共 473 页

Unit4: AdministrationinBPC BPC310

Lesson: Security

Lesson Overview

Lesson Objectives

Aftercompletingthislesson, youwillbeableto:

• Understand the four components of the security model and how they are

integrated.

Business Example

Figure 177: Security – Schema

SecurityinBPCisbasedontaskprofilesandmemberaccessprofiles. Thedefault

isnoaccesstoalltasksandallsecureddimensions. Thismeansthatifyoudo

not specifically assign task profiles to users or teams, no one will have access

to any BPC tasks.

Similarly, if you do not define access to members of a secured dimension to

usersorteams, noonewillhaveaccesstothatdimension. Thereisonedefault

taskprofileandonedefaultmemberaccessprofileavailableinApShellthatyou

can use to get started quickly.

Therearetwowaystoadduserstothesystem,andthemethodyouusedependson

your network infrastructure:

• Ifyoursecurityiscontrolledonadomainandmaintainedcentrallythrough

Active Directory Services, you must add users to the system with the

associated domain name.

• IfyoursecuritysystemismaintainedthroughBPC,youcanadduserswith

only a user ID.

About using domain user IDs

142

第 157 页 / 共 473 页

BPC310 Lesson: Security

Thismethodrequiresthateachuserisavaliduserinthedomainbeforeadding

themtoBPC.WhenauserIDisaddedtothesystemwithadomainname(for

example, BPC\hsmith), the system assumes the user ID is being maintained

outside of BPC within Active Directory Services. When the user logs on, the

systemvalidatesthepasswordagainstActiveDirectoryServices.

ThereisanewuserinterfaceinServerManagerthatallowsserveradministrators

tospecifyspecificdomainsthatarebeingusedforBPCusers. Inaddition,filters

canbeappliedtothosedomainsinordertoselectspecificusersfromthem.

About using BPC user IDs

If not on a domain, users must be valid Windows users. You can set users up

onWindowsfirst,andthenaddthemtoBPCssecurity,orhavetheusernames

automaticallyaddedtoWindowsasyouaddtheminBPC.Ifyoutrytovalidateand

processsecuritywhenoneormoreusersisnotaWindowsuser,theprocedurewill

fail. YouaddBPCuserIDsinthefollowingformat: hsmith. Behindthescenes,if

onlytheuserIDisentered,thesystemassumesthatsecurityismaintainedonthe

BPCserver,and,internally,thesystemautomaticallyassignsadomainname.

Figure 178: Security Terminology

Basically, there are users. They belong to groups called teams. The required

profiles are assigned to these teams.

User:

• Users in BPC must be network users.

Team:

• AteamisagroupofusersandsimilartoaSAPNetWeaverrolesinceboth

canbeusedasagroupingconcept. Oneusercanbedesignatedasateam

leader.

143

第 158 页 / 共 473 页

Unit4: AdministrationinBPC BPC310

Task Profile:

• ATaskProfiledetermineswhattypeofactivitiesauserorteamcanperform

inSAPBusinessPlanningandConsolidation.

Member Access Profile:

• AMemberAccessProfiledeterminesapplicationsanddimensionmembers

whereauserorateamhasread,write,ordenyaccesstoaparticularregion

of data in the application.

Figure 179: Where Is It Performed?

YousetupuserssothattheycanuseBPC.Whensettingupnewusers,youneed

to think about several topics:

• IstheuseradomainuseroralocaluserontheBPCserver?

• DoyouwantBPCtoautomaticallycreateWindowsuserIDsforlocalusers?

• Do you want to set up teams so you can more easily assign privileges to

users?

• Whichusersareadministratorsandwhicharenot?

• TowhichEntitymemberswillusershaveaccess?

144

第 159 页 / 共 473 页

BPC310 Lesson: Security

Figure180: BPCDefaultFunctionTasks(1of2)

SAPBusinessPlanningandConsolidationtaskprofile:

• A SAP Business Planning and Consolidation default function task is a

pre-defined set of tasks for Administration.

• ToassignaSAPBusinessPlanningandConsolidationuserAdminTasks,

youmustassignthemoneofthepre-definedAdministrationdefaultfunction

tasks.

• Defaultfunctiontaskscanbecumulative. Forexampleausercanbeboth,a

System Admin and a Primary Admin.

TherearethreetypesofdefaultfunctiontasksavailableforTaskProfiles

• SystemAdmin: BydefaultaSystemAdmincancreate,modify,ordelete

application sets and define security.

• PrimaryAdmin: BydefaultaPrimaryAdmincandoalladmintasksexcept

create, modify, or delete application sets.

• SecondaryAdmin: BydefaultbeingaSecondaryAdminallowsusersto

managedimensionmembersandmaintainlocks.

145

第 160 页 / 共 473 页

Unit4: AdministrationinBPC BPC310

Figure181: BPCDefaultFunctionTasks(2of2)

Each default function task has some tasks that are required and assigned by

“Default”whenchoosingtherole. Thereareadditionalavailabletasksthatyou

also can manually assign to the user.

Inthisdiagram,youcanfindthetaskswhichareassignedtotherolesbydefault.

MiscreferstochangingAppSetstatusandmaintainingcustommenus.

Figure 182: Maximum of One Team Leader

Within SAP Business Planning and Consolidation, a team leader has special

privilegesthatateammemberdoesnothave. Ateamleadercansavetemplatesto

their team folder on the server.

146

第 161 页 / 共 473 页

BPC310 Lesson: Security

To designate a team leader, you can choose the checkbox next to a user in the

dialog.

InSAPBusinessPlanningandConsolidation,youcanhaveonlyoneteamleader

per team.

Savingobjectstotheserver(suchasTools/SaveDynamicTemplates):

• Theadministratorcansaveobjectstothe“company”folder

Theadministratorautomaticallyhasthemanagetemplatetaskassigned.

• Theteamleadercansaveobjectstohis/her“team”folder.

Theteamleaderautomaticallyhastherightevenifmanagetemplateisnot

assigned

• Any user can save objects to the “company” or his/her “team” folders if

assignedmanagetemplatetaskaccess. (TheywouldalsorequireFileAccess

– Update to company folder rights.)

Concerning the Data Manager and Transformation and Conversion Files:The

teamleadercanmodifyteamtransformationfileandconversionfileandcanread

transformationandconversionfileslocatedincompanyfolder.Non-teamleaders

only have read access rights.

ConcerningtheDataManagerandthePackageOrganization:

TheTeamleadercanmanageapackageattheTeamlevel.

TheNon-teamleaderscanopeneDatamenuandrunapackagewithinaCompany

or Team Folder.

Figure183: DefiningSecuredDimensions(1of2)

147

第 162 页 / 共 473 页

Unit4: AdministrationinBPC BPC310

You define security settings for dimensions at the application level using the

“Modifyapplication”optionintheActionPane.

Figure184: DefiningSecuredDimensions(2of2)

Inthememberaccessprofile,theaccesstothedimensionscanbeadministrated.

Ifyoucanwritetoacategory,youcanthereforereadittoo.

Ifyoucan'treadanentity,youthereforecan'twritetoit.

So, even though we only chose to control read access by entity, if your rights

aretoonlyreadEntityXthentheabilitytowritetoEntityXisinheritedforthe

category specified.

Figure 185: Member Access Profile

Inthememberaccessprofile,onlytheaccesstothesecureddimensionscanbe

administrated.

148

第 163 页 / 共 473 页

BPC310 Lesson: Security

Youhavewriteaccesstoallmembersofadimensionwhicharenotmarkedas

secureddimension. InSAPtermsyouwouldsaythatyouhave“SAPALL”for

these members.

Figure 186: Security: Useful Hints and Tips

Tips for assigning task profiles

• Thenumberoftaskprofilesadministratorscanassigntoauserisnotlimited.

• However,werecommendthatyoudonotassignmultipletaskprofilesto

usersbecauseitmaycauseconfusionindeterminingtheirultimateaccess

rights.

• Taskaccesssecurityiscumulative,andtaskscannotbeexplicitlydenied. As

aresult,assigningmultipletaskprofilescancreateasituationwhereusers

haveaccesstotasksthatyoumaynotwantthemtohave. Forexample,an

administratorwantsUserAtoonlyretrievedata. IfUserAbelongstoateam

thathasdata-sendtaskrights,UserAcanalsosenddata.

• Administratorscanassignmultipletaskprofilestoateam.

• However,werecommendthatyoudonotassignmultipletaskprofilestoa

team because it may cause confusion in determining the ultimate access

rights of that team.

149

第 164 页 / 共 473 页

Unit4: AdministrationinBPC BPC310

Figure187: SecurityExample: 2HierarchiesonEntity(SecuredDimension)

Thefollowingslidesaregoingtoguideyouthroughsomeimportantissuesrelated

to the security concept.

Theupperhierarchiesformtheexampleforthesecurityissuesdescribedinthe

next slides.

Figure188: Conflict1: betweenProfiles–lessrestrictiveProfilewins

150

第 165 页 / 共 473 页

BPC310 Lesson: Security

Followtheexampleontheslidetounderstandthefirstconflict.

Figure189: Conflict2: Fathernodeandchild–Top-Downheredityunless

child has own access definition

Followtheexampleontheslidetounderstandthesecondconflict.

Figure 190: Conflict 3: Teams and User – User access dominates Team

access of the team to which the user belongs

Followtheexampleontheslidetounderstandthethirdconflict.

151

第 166 页 / 共 473 页

Unit4: AdministrationinBPC BPC310

Figure 191: Conflict 4: A Member belongs to different Hierarchies – less

restrictive profile wins

Followtheexampleontheslidetounderstandthefourthconflict.

Lab 31 – BPC Security

(part of the last unit)

152

第 167 页 / 共 473 页

BPC310 Lesson: Security

Lesson Summary

You should now be able to:

• Understand the four components of the security model and how they are

integrated.

153

第 168 页 / 共 473 页

Unit4: AdministrationinBPC BPC310

Lesson: Work Status

Lesson Overview

Lesson Objectives

Aftercompletingthislesson, youwillbeableto:

• DescribeatypicalcustomerscenarioforWorkStatus.

• Describe how to set Work Status.

Business Example

Figure 192: What is Work Status?

Managingworkstatusinvolvesspecifyingwhocanmakechangestodatainthe

databaseandwhocanchangetheworkstateonadataset.

Default work states are Unlocked, Submitted, and Locked. You can add new

work states if you need more flexibility.

Afteryourworkstatesaredefinedandyourownershipdimensionissetup,end

userscanusetheworkstatestoapplyalabeltoaspecificcurrentviewintersection

forthepurposeoflockingdatasoitcanbereviewed,approved,etc.

154

第 169 页 / 共 473 页

BPC310 Lesson: Work Status

Forexample,yourmonth-endclosebusinessprocessrequiresthataspecificsetof

dataislockeddownsothataccuratemonth-endreportscanbecreated.

Afteradatasubmission,theownersetstheworkstateto'Submitted.' Thislocks

thedataintersectionfromsubsequentsubmissions.

To use work state tracking you must specify the hierarchy (H1, H2, H3, ...,

Hn) within the owner dimension for which you want to use work status. You

specifythehierarchyintheAPPROVALORGfieldontheSettingApplication

Parameters page.

TheuseofWorkStatusistopreventdatachangestoaregionwithinanapplication

(cube)usingaspecifiedcriteria–theendresultisalockingofaregionwithina

givenapplication(similartodata-slicesinBusinessPlanningandSimulation

(BPS) and Business Intelligence (BI-IP)).

AnychangestotheWorkStatusdefinitionwillremoveallexistingWorkStatuses

setbytheusersforallapplicationsinanapplicationset.

WorkStatusisNOTprocessflowmanagementandisoptionalforthecustomer.

WorkStatusisindependentofBusinessProcessFlowshowever,thefunctionality

canbeincorporatedwithinaBusinessProcessFlow.

Ifanewchildisaddedtoahierarchy,andtheparentofthisnewchildislocked,

the new child is locked, too.

Thedefaultmethodformanagingworkstatusisbottom-up. Thatis,thestatusofa

parentcannotbehigherthanthestatusofitschildren. Forbottom-upbehavior,the

maximumstateaparentcanbesettoistheloweststateofitsimmediatechildren.

Youcansetworkstatustotop-downintheTOPDOWNfieldintheApplication

Parameters.

Figure193: WorkStatus–Month-EndFinancialExample

ThisisatypicalexampleabouthowtheWorkStatuscanbeusedbythecustomer

in real life.

155

第 170 页 / 共 473 页

Unit4: AdministrationinBPC BPC310

Atmonth-end,dataisloadedandfurtheradjustedbyauthorizedend-usersbased

on their member access profiles.

Upon completion of the month-end data submission, the responsible user

(Owner/Manager)cansettheWorkStatusasdefinedbytheadministrator.

Owner=BasememberUserID.Manager=ParentmemberUserID.

The data is locked at the responsibility center. In financial situations this is

typically a subsidiary.

A manager and/or a high level group processor, will start the review and

consolidatethedata(specificcalculations/logicexecution).

Afterthegroupconsolidationisrun,thedatacanbelockedfromchangessothat

thereportinggroupcancreateaccuratemonth-endreports.

At any time, the end user may submit supporting documents or comments

(annotations) during the process to further support the month-end results.

(assumingdocumentsorcommentsarenotlocked.)

Figure194: Owner, Reviewer&ManagerConcept

TheownerofanentitycansettheworkstatetoanystatedesignatedasanOwner

state.

The manager of an entity can set the work state to any state designated as a

Manager state.

156

第 171 页 / 共 473 页

BPC310 Lesson: Work Status

Figure195: WorkStatusEnd-to-EndProcess(1of3)

Forexample,yourmonth-endclosebusinessprocessrequiresthataspecificsetof

dataislockeddownsothataccuratemonth-endreportscanbecreated.

Afteradatasubmission,theownersetstheWorkStatustoApproved. Thislocks

thedataintersectionfromsubsequentsubmissions.

Ifworkstateissubmitted,theowneroftheentitycancreateajournal.

The Manager of the entity can change the work state to approved or from

Approved.

Youcandefineonesetofspecificcurrentviewvaluesforeachapplication. Itis

possibletohavedifferentOWNERdimensionsperapplication.

Youcanassignmultipleuserstoadimensionmemberastheowners.

Eachnonworkstatedimensionrequiresavalidmemberinthemembervalidation.

Thisisjustarequirementmadebytheprogrammertocompletethescreenand

does not serve any business purpose.

Youcanchangetheworkstatussettingsforeachapplication. Changingthework

status settings involves identifying three to five 'work status dimensions,' and

then defining specific members for the remaining non-work status dimensions

used for validation purposes.

The dimensions you select as the work status dimensions are the variables in

yourbusinessprocess. Forexample,theentity,category,andtimemightchange

basedonwhoissubmittingdata,buttheaccount,datasource,reportingcurrency,

etc., remains static.

Typically,Timeisaworkstatusdimensionsincedataisusuallysegregatedbased

on time.

157

第 172 页 / 共 473 页

Unit4: AdministrationinBPC BPC310

Figure196: WorkStatusEnd-to-EndProcess(2of3)

The“Owner”propertyisusedwhenyouareusingtheworkstatusfeature.

Youaddthepropertytothedimensionthatdrivestheworkstatusflow.

Forexample,ifyourbusinessprocessdictatesthatanentityisthedifferingfactor

whenitcomestoenteringdata,thentheEntity-typedimensionistheworkstatus

driving dimension.

Ifyourbusinessprocessdictatesthatadepartmentnameisthedifferingfactor,

thenDepartmentdimensionwouldhavetheOwnerproperty.

Thedimensionyouselecttodriveworkstatusmusthavemorethanonehierarchy,

and the hierarchy is specified in the APPROVALORG field on the Setting

Application Parameters page.

TheOwnerpropertytakesuserandteamnamesasvalues. Youcanentermultiple

names and teams separated by commas. You must also include the domain or

server name in the path.

Base Hierarchy:

“BaseHierarchy” was added in the Work Status Settings with 70M to support

multiple hierarchies for Work Status.

“BaseHierarchy” is going to be used as a flag of a specific hierarchy of the

WorkStatus dimension instead of the parameter APPROVALORG in the

tblDefaults table.

Originally“BaseHierarchy”alreadyexistedin5.1Mbutwithzeroasitsoneand

onlyvalue, sothisfeaturewasntcustomizableatall.

Duringtheupgradefrom5.1to7.0MBPCcanseewhichdimensionhasasingle

hierarchyandenters“1”inthe“BaseHierarchy”fieldoftheworkstatussettings.

“1” is the default.

Ifadimensionconsistsof3hierarchiesanditssecondhierarchyshallbeusedfor

theWorkStatusSettingstable, youhavetoenter“2”forthe“BaseHierarchy”

settings.

158

第 173 页 / 共 473 页

BPC310 Lesson: Work Status

Figure197: WorkStatusEnd-to-EndProcess(3of3)

SettheApprovalorghierarchyintheapplicationparameters.

Figure 198: Work Status Big Picture

Thethreeworkstatedimensionsdeterminedattheapplicationlevelaredetermined

later. They act as variables.

159

第 174 页 / 共 473 页

Unit4: AdministrationinBPC BPC310

Figure 199: Work Status Excel and Web Report

TheM03StatusReport1isdeliveredwithApShell.

It uses the EVLCK function.

It is located in: eTools → Open Dynamic Templates → eExcel → Reports →

Manager.

Figure 200: Work Status Tips

160

第 175 页 / 共 473 页

BPC310 Lesson: Work Status

The upper list gives you some advantages and hints if you would like to work

with Work Status.

Lab 32 – BPC Work Status

(part of the last unit)

161

第 176 页 / 共 473 页

Unit4: AdministrationinBPC BPC310

Lesson Summary

You should now be able to:

• DescribeatypicalcustomerscenarioforWorkStatus.

• Describe how to set Work Status.

162

第 177 页 / 共 473 页

BPC310 Lesson: Business Process Flows

Lesson: Business Process Flows

Lesson Overview

Lesson Objectives

Aftercompletingthislesson, youwillbeableto:

• Create a business process flow which will facilitate the coordination and

statuscheckingaspectsofperformingplanningorconsolidationsactivities.

Business Example

Figure201: BusinessProcessFlows–BudgetingExample

OneofthebiggestadvantagesofBPCistheBusinessProcessFlow(BPF).The

graphicaboveshowsatypicalexampleofaBPF.

BPFsareusedtoprovideagraphicalviewofthestepsintheprocessaswellasto

providestructure,integrationandreviewingcapability.

Whenstepsarelockedtheycannotberepeatedwithoutre-startingthebusiness

process flow.

163

第 178 页 / 共 473 页

Unit4: AdministrationinBPC BPC310

Figure202: Definition: BusinessProcessFlows

Using the intelligence of BPC data regions, you can set up a single business

processflowthatcanbeusedacrossapplicationswithinanapplicationset. Adata

regionservesasakeyforopeningasingleinstanceofabusinessprocessflow.

Forexample,an'AllocateExpense'businessprocessflowcouldberunningforthe

same entity and time, but different categories.

Business process flows can also be integrated with work states to offer an

additionallevelofintelligenceandintegrationwithyourcompanysregulatory

processes.

UsinganExplorer-likeinterfacethatisaccessiblefromBPCWebandBPCfor

Excel,end-usersareguidedthroughpre-definedsequentialtasksthatspanacross

the different areas of BPC.

TheBusinessProcessFlowsallowsmanagersto:

• Monitor progress of all participants.

• Automatically send e-mail notifications to participants at predetermined

times to expedite progress.

• Coordinaterequiredapprovalsforeachstepintheprocess.

• Assure consistency and uniformity.

164

第 179 页 / 共 473 页

BPC310 Lesson: Business Process Flows

Figure203: AddingaNewBusinessProcessFlow

TheupperscreenshotdescribestheaccesstothecustomizingofBusinessProcess

Flows.

Figure204: AddingaNewBusinessProcessFlow

165

第 180 页 / 共 473 页

Unit4: AdministrationinBPC BPC310

To define a BPF

1. FromtheSetupBPF>A.DefineBPFpageoftheAddaNewBusiness

Process Flow assistant, enter the Business Process Flow name and

description in the first two fields.

2. In the What is the controlling application? field, enter the name of the

controlling application.

3. IntheBPFOwnerfield,enteravalidusername. Youcanclickthelookup

button to display a list of users. Select the desired user name, then click

OK. The user must have an email address assigned to them in order for

them to own this BPF.

4. ClickSaveonthebottomofthewindow. ContinuetoSetupTaskB.

Figure 205: Define Data Region

Thedataregiondefinesthe“base”regioninwhichtheBPFisdesigned. However,

end users who run the BPF may select a different data region, as needed, to

perform their process flow tasks.

The'identity'dimensionsareallthedimensionsthatwillbeusedinaBPF.The

Timedimension,usedinallBPFs,isautomaticallyselected.

166

第 181 页 / 共 473 页

BPC310 Lesson: Business Process Flows

The 'Drive' Dimension:

• A dimension that the process 'revolves' around and is present in all

applications in the BPF.

• YouneedonedrivedimensionandonlyoneinaBPF.

• Adrivedimensionmusthavethereviewerproperty.

• Isitusedtoprovideauserwhocan'approve'theBPFinpractice.

• Ifyouenablereviewerstoreviewastep.Thatpersonisderivedfromthe

drive dimension.

BPFsutilizedataregions,whichallowyoutosetupasinglebusinessprocessflow

thatcanbeusedacrossapplicationswithinanapplicationset.

Adataregionservesasakeyforopeningasingleinstanceofabusinessprocess

flow.

Forexample,an'AllocateExpense'businessprocessflowcouldberunningforthe

same entity and time, but different categories.

Youcanseeanexampleofadriverdimensionontherighthandsideoftheslide.

Figure 206: Define Timing and Set Access

Note: CurrentlytheonlyoptionavailableisOnce. Additionaloptions

(Daily, Weekly, Monthly, Quarterly, and Yearly) will be available in a

later release.

BPFactivationdatesection: Priortothistime,theBPFwillnotappearonthe

end user's action pane.

167

第 182 页 / 共 473 页

Unit4: AdministrationinBPC BPC310

Automatice-mailmessagescanbesenttoBPFuserstoremindthemtoperform

theirappointedBPFtasks. IntheWhenshouldusersbenotifiedsection,usethe

twodropdownmenustospecifyanumberofdayspriortothestartof,orafterthe

startoftheBPFfrequencyyouspecifiedinStep1.

Figure 207: Steps, Sub Steps, and Actions

The actions in step 1 are bold blue hypertext because they are the only two

possible actions while step 1 is incomplete.

Stepsaregeneralbusinessactionsyoutakeincompletingthebusinessprocess.

EachBusinessProcessFlow(BPF)mustcontainatleastonestep.

Adding a new substep:

Sub-stepsareusedwhenyouwanttodefineoneormoreactionsunderasingle

step.

Here are some properties of sub-steps:

• Each sub-step has an associated action

• Sub-stepsarenotsubjecttoapprovalintheBPF

• Sub-stepsarenotsubjecttocompletioncriteria

• Sub-stepsneednotbeperformedinsequentialorder.

168