第 123 页 / 共 237 页
BPC310 Lesson: BPC for Excel
Figure 141: Validating the Distribution Template
Asmentionedinanearlierslide,youneedtoValidatetheDistributiontemplate.
Pleasebe verycareful whencreating thedistribution templatesinceValidation
doesnotcheckforcasesensitivityorvalidmembersontheFIXKEYorVARKEY
members.
EventhoughyoucanlaunchtheValidatefromthemenudirectly,youwillalsobe
promptedtoValidatebeforesaving(althoughitisnotmandatorytodoso).
Figure 142: Dimensions in the Distribution Template
AVARYKEYliststhedimensionsanddimensionmembersthatshouldvaryfor
each report that will get created.
111
2009 © 2009 SAP AG. All rights reserved.
第 124 页 / 共 237 页
Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor
PowerPoint BPC310
For example, if you want to create a new offline report for each Entity/Cost
Center/etc, youwouldspecifythat dimensionasaVARYKEY.Youthenmapa
specificVARYKEYtoaUserIDwhoshouldreceivethatreport(forexample,the
Cost Center manager). Thisway, eachuser who gets areport has the required
dimension(s) set to their individual values.
Figure 143: Offline Distribution Wizard
WhenexecutingtheWizard,itwilltechnicallyopenthereports/inputscheduleson
theclientmachine,changethecurrentview,refresh,andthensaveoffline.
Note: In order to use the Wizard, you will need to change an Excel security
setting: Tools → Security →Macros, then go to tab “Trusted Publishers” and
selectthebox“TrustaccesstoVisualBasicprojects”. Byallowingthisaccess,
macrosinanydocumentsthatyouopencanaccessthecoreVisualBasicobjects,
methods, and properties.
112
©2009SAPAG.Allrightsreserved. 2009
第 125 页 / 共 237 页
BPC310 Lesson: BPC for Excel
Figure 144: Lockdown and Send Mail
ThisslidedemonstrateshowtheDistribution selection–“Lockdownand Send
mail” (via email) will work.
Youhavetheability tocustomize and control theemail for Subject line, body,
request send confirmationand zip theattachments.
A Distribution Summary will be provided detailing the Application Set,
Application, BookName, ModeandMailaccountsetup.
ValidatingdoesNOT check forvalid memberson theFIXKEYor VARYKEY
members (including case sensitivity).
113
2009 © 2009 SAP AG. All rights reserved.
第 126 页 / 共 237 页
Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor
PowerPoint BPC310
Figure 145: Lockdown and Save to Folder
Byselectingthe“LockdownandSavetofolder”option, youhavetheabilityto
selectatargetfolderforthereportorscheduledistribution.
TheTargetfoldercanbeonanyclientPCoraccessibledriveorlocation.
Figure 146: Viewing the Output from FolderDistribution
ThisslideshowshowtoviewtheDistributionoutputfromafolderlocation.
114
©2009SAPAG.Allrightsreserved. 2009
第 127 页 / 共 237 页
BPC310 Lesson: BPC for Excel
YoucanseefromtheslidethatthefilesarelistedbyrecipientuserID,VARYKEY
values and then report name.
Figure 147: Collection
Thisslidedemonstrateshowthecollectionprocessisselected.
Fromthetaskmenu,selectCollectioninsteadofDistribution.
Twooptionsexistastothemethodofdatacollection. Youcanselectfromemail
or choose a folder path.
In this example, “Local Folder” is selected for the folder path. All the files
available from that location are displayed.
Youhavetheabilitytoselectone,severalorchoosethe“SelectAll”checkboxto
process all identified file(s).
The Review Distribution Summary window displays information about your
request,includingEstimatedPagesandTime,Applicationsetname,Application
name and the selected template(s).
115
2009 © 2009 SAP AG. All rights reserved.
第 128 页 / 共 237 页
Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor
PowerPoint BPC310
Figure 148: Creating & Publishing Books
A book of reports is a set of reports that can be published to BPC Web as an
HTMLorPDFfile,toanASCIIfile,ortoaprinter. Thebookpresentsreportdata
thatvariesbyoneormoremembersof oneormoredimensions. Themembers
used arethose that arefixedin thereport. Any membersthat arenot fixedare
takenfromthecurrentviewoftheuseratthetimethebookispublished.
Abooktemplateisapre-formattedworksheetusedto createabookof reports.
Youcanstartwiththeemptyworksheetoranexistingbooktemplate,andmodifyit
tomeettheneedsoftheinformationyouwanttopublish. Asamplebooktemplate,
calledPerformance.xls,isprovidedwiththesampleapplicationset,ApShell.
Performance.xls contains a section called TOC, which provides an index of
the reports created by the Performance Reports section. The section called
performanceReports,bydefault,providesperformancedataforasetofentities
withinasettimeperiod. Youcaneditthefieldsintheperformance.xlsworkbook
to create a new book template.
Figure 149: The Book Template
116
©2009SAPAG.Allrightsreserved. 2009
第 129 页 / 共 237 页
BPC310 Lesson: BPC for Excel
You validate your book template to make sure there are no errors in the book
template. For example, validation checks for errors in syntax, structure, and
information provided. If there isan error in your report a descriptive message
displays. Theerrorlocationisalsohighlightedonthetemplate.
Abooktemplatemay containthefollowing fields:
BOOK: the title of your book.
CLEARBOOK: specifies whether to replace existing reports or accumulateto
existing reports.
SECTION: denotesthebeginning of a section.
CLEARSECTION-allowsyoutoreplaceonlyasectionofabookinsteadofthe
entire book.
REPNAME: report filename, location and title.
FIXKEY:setsdimensionmembersforallreportsinthebook.
SUPPRESSKEY:suppressesadimensionmemberifthevalueisequaltozero.
VARYKEYS: listsdimensions and dimension membersfor which the book of
reports is being created.
SECTIONEND:denotestheendofasectionofthebook.
Figure 150: Publishing a Book of Reports
117
2009 © 2009 SAP AG. All rights reserved.
第 130 页 / 共 237 页
Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor
PowerPoint BPC310
Figure 151: Publishing a Book of Reports
Figure 152: Publishing a Book of Reports
Booksofreportsarepublishedasweb-readyfilesandarenotvisibleuntilplaced
on a web page in the Content Library.
118
©2009SAPAG.Allrightsreserved. 2009
第 131 页 / 共 237 页
BPC310 Lesson: BPC for Excel
Figure 153: Adding a Web Page
BPC'sbookpublishingfeatureallowsyoutopublishmultiplereportsatonetime
toabook. ThebookcanbepublishedtoBPCWebasanHTMLorPDFfile,or
exportedtoanASCIIfileorprinter. Thebookpresentsreportdatathatvariesby
oneor moremembersof oneor moredimensions.
FollowtheActionPanepromptsto: Enterthenameyouwouldliketoappear
as the title of the item. Select the desired pixel height of the item. Select the
bookfromthelistofbooksavailabletoyou. Selectthebooksectionyouwantto
add. Set access. Select Showaslistofreportsifyouwanttodisplaythelistof
reportscontainedinthebook,orselectShowasaspecificreporttoselectoneor
more specific reports from the book.
You can create a new Web page in the Content Library rather than uploading
documents. Under theContent Library Options, click “Add a new web page”
option.
Inthe“Whatisthenewpagename?”field,enterthepagename. Selectatemplate
layout:Nocolumns,Sidebyside,Smallleftside,Smallrightside.
Selectfromtheavailablechoices: Web-ReadyFile(filesthatwereuploadedfrom
ExcelasWeb-Readyfiles),ALiveReport,AspecificContentLibraryDocument
or aList of Documentsin theContentLibrary, AWeb Site(to beembeddedin
the page).
119
2009 © 2009 SAP AG. All rights reserved.
第 132 页 / 共 237 页
Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor
PowerPoint BPC310
Figure 154: Displaying a Book on a Web Page
TheupperscreenshotsshowwhatBookslooklikefortheEnduser.
120
©2009SAPAG.Allrightsreserved. 2009
第 133 页 / 共 237 页
BPC310 Lesson: BPC for Excel
Lesson Summary
You should now be able to:
• Understand how to work With BPC for Excel, especially working and
navigating with Delivered Templates, creating comments and using the
OfflineDistributionWizardandthePublishBookTool.
121
2009 © 2009 SAP AG. All rights reserved.
第 134 页 / 共 237 页
Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor
PowerPoint BPC310
Lesson: BPC Web
Lesson Overview
Lesson Objectives
After completingthislesson, you will beable to:
• UnderstandwhichfeaturesBPCWebdelivers.
Business Example
Figure 155: BPC Web
Starting BPC Web
From BPC for Office, you can start BPC Web.
To start BPCWeb, do one of thefollowing
From any action pane, select BPC Web.
Fromfor Excel, select ePublish >ViewBPCWeb.
MySettingsallowsalanguagechangeandaccesstoMySecurityReportswhich
displaysassignedtaskand member accessprofiles.
122
©2009SAPAG.Allrightsreserved. 2009
第 135 页 / 共 237 页
BPC310 Lesson: BPC Web
Figure 156: BPC Web - Content Library
TheContentLibraryisaweb-based, centralstorageforall kindsof documents
which arerelevant for a certain group of user.
Figure 157: Post a New Document (1 of 5)
Steps for Posting a New Document:
(Note: Steplabelsareabovetherelatedillustrationintheaboveslide).
123
2009 © 2009 SAP AG. All rights reserved.
第 136 页 / 共 237 页
Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor
PowerPoint BPC310
Step1: Select“Post adocument”fromtheactionpane.
Step2: ClickonBrowseandselectafilelocatedonyourPCyouwanttopostto
theContentLibrary. Thefilenamemustbeauniquename.
Step 3: You can changethe descriptionof thefile which will thenbecome the
document title.
Figure 158: Post a New Document (2 of 5)
Steps for Posting aNewDocument (continued):
Step4: Clickonusers/teamstodefinewhoshouldhaveaccesstotheposting.
Step5: SelecttheAllUserscheckboxorselectindividualteamsand/orindividual
users.
Step 6: Click on thegreen arrow to continue.
124
©2009SAPAG.Allrightsreserved. 2009
第 137 页 / 共 237 页
BPC310 Lesson: BPC Web
Figure 159: Post a New Document (3 of 5)
Stepsfor Posting aNew Document (continued):
Step7: Selectapredefineddocumenttypefromthedropdownlistbox.
Step8: Selectapredefineddocumentsub-typefromthedropdownlistbox, or
define a new sub-type.
Note: Documenttypesandsub-typesaremaintainedfromBPCAdministration.
Figure 160: Post a New Document (4 of 5)
Stepsfor Posting aNew Document (continued):
125
2009 © 2009 SAP AG. All rights reserved.
第 138 页 / 共 237 页
Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor
PowerPoint BPC310
Step 9: If needed, you can have the systemautomaticallysend an email to the
usersinformingthemofthenewposting. Youcancreateyourownemailmessage
orclickonthe“Userthedefaultmessage”linktohavethesystemcreateageneric
emailmessage. Thenclickonthegreenarrowtocontinue.
Step10: Youcanassociatethepostingtoaparticularapplicationintheapplication
set. FromtheApplicationdropdownlistbox,selecttheassociatedapplication.
Step11: ApplicationContextisNOTusedtocontrolsecurity/accesstothefilesin
theContentLibrary. Thisiscontrolledby“TeamAccess”exclusively.
Figure 161: Post a New Document (5 of 5)
Steps for Posting aNewDocument (continued):
Step12: Editthedocumenttosettheapplicationcontext.
Step 13: Click on the green check.
Step 14: The context has been set.
Note1: ForDocumentsthathavealreadybeenuploaded,youcanedittheTitle,
Type,SubType,ApplicationContext,andTeamAccess. ForWebPages,youcan
only edit the Team Access field.
Note2: Thedimensionsintheapplicationabovesettoberelevantforworkstatus
are Entity and Time only.
126
©2009SAPAG.Allrightsreserved. 2009
第 139 页 / 共 237 页
BPC310 Lesson: BPC Web
Figure 162: Content Library and Work Status
Work Status locks can allow you to lock down documents that have had the
Application Context specified.
YoucanlaunchtheworkstatuslockspagefromContentLibraryusingtheAction
Pane.
You can then set the Work Status values.
127
2009 © 2009 SAP AG. All rights reserved.
第 140 页 / 共 237 页
Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor
PowerPoint BPC310
Figure 163: Opening Selected Items in Tabs
Multipleitems can be opened in separatetabs.
• PlaceacheckmarkintheboxnexttotheContentLibraryListitemtitles.
• ClickOpenselecteditemsintabslink under theLibrary Content Options
heading.
• The Multi-tab Content displays.
Figure 164: Sorting, Filtering and Deleting
128
©2009SAPAG.Allrightsreserved. 2009
第 141 页 / 共 237 页
BPC310 Lesson: BPC Web
Figure 165: Creating a Web Pages
YoupublishawebreadyfiletooneofthewebpublicationfoldersinBPCWeb,
dependingonyourroleintheorganizationandthetypeofreportbeingpublished.
After publishing a web-ready file, you can post it to a Page or the Content
Library.
Youcancontinueaddingmoreobjectstothepage, oryoucanselectoneofthe
following options:
• Modify the object.
• Set “Team Access” to the page.
• Preview the output.
• Save and view the output.
129
2009 © 2009 SAP AG. All rights reserved.
第 142 页 / 共 237 页
Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor
PowerPoint BPC310
Figure 166: Content Library - Security
ThefollowingContentLibraryactionsarecontrolledbySecurityTasks:
• “Addanewwebpage”: ZFP >CreateWebpage.
• “Posta document”: ZFP>ManageContentLib.
• “Editpageinformationinthelist”: ZFP>ManageContentLib.
• “Deleteselecteditems”: ZFP>ManageContentLib.
“Set work status”: WorkStatus > SetWorkStatus AND it also requires that an
applicationhasbeen set in your Current View.
130
©2009SAPAG.Allrightsreserved. 2009
第 143 页 / 共 237 页
BPC310 Lesson: BPC Web
Figure 167: LANDINGPAGEITEM
ThereisanAppSetwebadminparametercalled“LANDINGPAGEITEM”,which
allows you to control what is viewed when you open the BPC Web “Getting
Started” page (landing.aspx).
Figure 168: BPC Web: Live Reporting
You can enter your own page header.
Usedraganddroptoadddimensionstotherowsorcolumns.
One per row or column is allowed.
131
2009 © 2009 SAP AG. All rights reserved.
第 144 页 / 共 237 页
Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor
PowerPoint BPC310
Figure 169: Sample BPC Web Live Report & Chart
Itispossibletomodify alivereportafter itissaved.
Figure 170: Data Input via the Web
ItisnotnecessarytoswitchthemodeoftheLiveReporttoenableinput,theonly
requirement is toresolve memberstobaselevel.
Youcandothatbyeitherchangingthecurrentviewfordimensionsnotintherows
andcolumnsandorbyexpandingdimensionsalreadyintherowsandcolumns.
132
©2009SAPAG.Allrightsreserved. 2009
第 145 页 / 共 237 页
BPC310 Lesson: BPC Web
Lesson Summary
You should now be able to:
• Understand which features BPCWebdelivers.
133
2009 © 2009 SAP AG. All rights reserved.
第 146 页 / 共 237 页
Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor
PowerPoint BPC310
Lesson: BPC for Word and BPC for PowerPoint
Lesson Overview
Lesson Objectives
After completingthislesson, you will beable to:
• Understand BPC for Word tasks, see how to insert SAP BPCdata into a
MicrosoftWordfileandunderstandtheBPCforPowerPointtasksaswellas
seehowtoinsertSAPBPCdataintoaMicrosoftPowerPointfile.
Business Example
Figure171: LaunchingBPCforWordorBPCforPowerPoint
TolaunchBPCforWordorBPCforPowerPoint,usetheBPCLaunchPage.
ThereareseparatebuttonsontheLaunchPageforeitherselection.
134
©2009SAPAG.Allrightsreserved. 2009
第 147 页 / 共 237 页
BPC310 Lesson: BPC for Word and BPC for PowerPoint
Figure 172: BPC forWord and PowerPoint Actions
BPCforWordandBPCPowerPointallowyoutosendandretrieveBPCdataand
enterandviewcommentsinyourdocumentsandslideshows.
SAP BPCBPCfor Word hasthefollowingactions:
InsertBPCdata: Allowsyoutoinsertavaluefromthedatabasebasedonthe
current view. Clicking this link inserts a placeholder. Select Retrieve all data
to get the value.
Insert SAP BPC BPCforExcel object: You caninserta SAP BPCreport or
inputscheduleintoaMicrosoftWorddocumentorMicrosoftPowerPointslide.
AddnewcommentandViewcommentstasksusethestandardCommentinterface
to submit and report on comments.
Retrievealldata: Allowsyoutoretrievedatavalues,basedonthecurrentview,
fromthedatabase. Clickingthislinkrefreshesdatavaluesintheentiredocument
or slideshow.
ExpandAll: AllowsyoutoexpandfunctionscontainedinembeddedSAPBPC
objects.
Sendalldata: Afteratleastonedatavaluehasbeeninsertedinyourdocumentor
slideshow,youcanusethiscommandtosendthevaluetothedatabase. Ifthere
aremultipleinserteddatavalues,thiscommandsendsallofthemtothedatabase.
135
2009 © 2009 SAP AG. All rights reserved.
第 148 页 / 共 237 页
Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor
PowerPoint BPC310
Figure 173: Insert BPC for Excel object
ThisslidedescribeshowtoinsertaBPCforExcelobject.
You can insert a BPC report or input schedule into a Word document or
PowerPointslide. Thereportorinputscheduleyouwanttoembedmustbesaved
on the BPC server.
Figure 174: Example: BPC forExcel Objectwithin Word
ThisslideshowsanexampleofaBPCforExcelobjectinsertedintoaMicrosoft
Word page.
Tore-entereditmode,doubleclickontheBPCExcelobject.
136
©2009SAPAG.Allrightsreserved. 2009
第 149 页 / 共 237 页
BPC310 Lesson: BPC for Word and BPC for PowerPoint
Figure 175: Editing Object Properties with VBA
This slides discusses editing object properties with VBA (Visual Basic for
Applications) for usewith BPC for PowerPoint.
Figure176: Sample: BPCforExcelObjectwithin PowerPoint
This slide shows an example of a BPC for Excel Object within a Microsoft
PowerPoint file.
NOTE: Ifyouneedmoreadvancedformatting, youshouldusethe“InsertBPC
for Excel Object”.
137
2009 © 2009 SAP AG. All rights reserved.
第 150 页 / 共 237 页
Unit3: WorkingwithBPCforExcel,BPCWeb,BPCforWordandBPCfor
PowerPoint BPC310
Lesson Summary
You should now be able to:
• Understand BPC for Word tasks, see how to insert SAP BPCdata into a
MicrosoftWordfileandunderstandtheBPCforPowerPointtasksaswellas
seehowtoinsertSAPBPCdataintoaMicrosoftPowerPointfile.
138
©2009SAPAG.Allrightsreserved. 2009
第 151 页 / 共 237 页
BPC310 Unit Summary
Unit Summary
You should now be able to:
• Understand how to work With BPC for Excel, especially working and
navigating with Delivered Templates, creating comments and using the
OfflineDistributionWizardandthePublishBookTool.
• Understand which features BPCWebdelivers.
• Understand BPCfor Word tasks, see how to insert SAP BPC data into a
MicrosoftWordfileandunderstandtheBPCforPowerPointtasksaswellas
seehowtoinsertSAPBPCdataintoaMicrosoftPowerPointfile.
139
2009 © 2009 SAP AG. All rights reserved.
第 152 页 / 共 237 页
UnitSummary BPC310
140
©2009SAPAG.Allrightsreserved. 2009
第 153 页 / 共 237 页
BPC310 Test Your Knowledge
Test Your Knowledge
1.
2.
3.
141
2009 © 2009 SAP AG. All rights reserved.
第 154 页 / 共 237 页
TestYourKnowledge BPC310
Answers
1.
Answer:
2.
Answer:
3.
Answer:
142
©2009SAPAG.Allrightsreserved. 2009
第 155 页 / 共 237 页
第 156 页 / 共 237 页
第 157 页 / 共 237 页
Unit 4
Administration in BPC
Unit Overview
Unit Objectives
After completing thisunit, you will beableto:
• Understand the four components of the security model and how they are
integrated.
• DescribeatypicalcustomerscenarioforWorkStatus.
• Describe how to set Work Status.
• Createa businessprocessflow which will facilitate thecoordination and
statuscheckingaspectsofperformingplanningorconsolidationsactivities.
• Describethedifferenttypesofauditcapabilitiesandthedatayoucancapture
to help provide adequate control.
Unit Contents
Lesson: Security................................................................144
Lesson: Work Status ...........................................................156
Lesson: Business Process Flows.............................................165
Lesson: Audit....................................................................178
143
2009 © 2009 SAP AG. All rights reserved.
第 158 页 / 共 237 页
Unit4: AdministrationinBPC BPC310
Lesson: Security
Lesson Overview
Lesson Objectives
After completingthislesson, you will beable to:
• Understand thefour components of the security model and howthey are
integrated.
Business Example
Figure 177: Security - Schema
SecurityinBPCisbasedontaskprofilesandmemberaccessprofiles. Thedefault
is no accessto all tasksand all secureddimensions. Thismeans that if you do
not specifically assign task profiles to users or teams, no one will have access
to any BPC tasks.
Similarly, if you do not define access to members of a secured dimension to
usersor teams, noonewill haveaccesstothatdimension. Thereisonedefault
taskprofileandonedefaultmemberaccessprofileavailableinApShellthatyou
can use to get started quickly.
Therearetwowaystoadduserstothesystem,andthemethodyouusedependson
your network infrastructure:
• Ifyoursecurityiscontrolledonadomainandmaintainedcentrallythrough
Active Directory Services, you must add users to the system with the
associated domain name.
• IfyoursecuritysystemismaintainedthroughBPC,youcanadduserswith
only a user ID.
144
©2009SAPAG.Allrightsreserved. 2009
第 159 页 / 共 237 页
BPC310 Lesson: Security
AboutusingdomainuserIDsThismethodrequiresthateachuserisavaliduser
inthedomainbeforeaddingthemtoBPC.WhenauserIDisaddedtothesystem
withadomainname(forexample,BPC\hsmith),thesystemassumestheuserID
isbeingmaintainedoutsideofBPCwithinActiveDirectoryServices. Whenthe
userlogson,thesystemvalidatesthepasswordagainstActiveDirectoryServices.
ThereisanewuserinterfaceinServerManagerthatallowsserveradministrators
tospecifyspecificdomainsthatarebeingusedforBPCusers. Inaddition,filters
canbeappliedtothosedomainsinordertoselectspecificusersfromthem.
About using BPC user IDs
If not on a domain, users must be valid Windows users. You can set users up
onWindowsfirst,andthenaddthemtoBPCssecurity, orhavetheusernames
automaticallyaddedtoWindowsasyouaddtheminBPC.Ifyoutrytovalidateand
processsecuritywhenoneormoreusersisnotaWindowsuser,theprocedurewill
fail. YouaddBPCuserIDsinthefollowingformat: hsmith. Behindthescenes,if
onlytheuserIDisentered,thesystemassumesthatsecurityismaintainedonthe
BPCserver,and,internally,thesystemautomaticallyassignsadomainname.
Figure 178: Security Terminology
Basically, there are users. They belong to groups called teams. The required
profiles are assigned to these teams.
User:
• Users in BPC must be network users.
Team:
• AteamisagroupofusersandsimilartoaSAPNetWeaverrolesinceboth
can beusedasagroupingconcept. Oneusercanbedesignated asateam
leader.
145
2009 © 2009 SAP AG. All rights reserved.
第 160 页 / 共 237 页
Unit4: AdministrationinBPC BPC310
Task Profile:
• ATaskProfiledetermineswhattypeofactivitiesauserorteamcanperform
in SAP BusinessPlanning andConsolidation.
Member Access Profile:
• AMemberAccessProfiledeterminesapplicationsanddimensionmembers
whereauserorateamhasread,write,ordenyaccesstoaparticularregion
of data in the application.
Figure 179: Where Is It Performed?
YousetupuserssothattheycanuseBPC.Whensettingupnewusers,youneed
to think about several topics:
• IstheuseradomainuseroralocaluserontheBPCserver?
• DoyouwantBPCtoautomaticallycreateWindowsuserIDsforlocalusers?
• Do you want to set up teams so you can more easily assign privileges to
users?
• Whichusersareadministratorsandwhicharenot?
• TowhichEntitymemberswillusershaveaccess?
146
©2009SAPAG.Allrightsreserved. 2009
第 161 页 / 共 237 页
BPC310 Lesson: Security
Figure 180: BPC Default Function Tasks (1 of 2)
SAPBusinessPlanningandConsolidationtaskprofile:
• A SAP Business Planning and Consolidation default function task is a
pre-defined set of tasks for Administration.
• ToassignaSAPBusinessPlanningandConsolidationuserAdminTasks,
youmustassignthemoneofthepre-definedAdministrationdefaultfunction
tasks.
• Defaultfunctiontaskscanbecumulative. Forexampleausercanbeboth,a
System Admin and a Primary Admin.
TherearethreetypesofdefaultfunctiontasksavailableforTaskProfiles
• SystemAdmin: BydefaultaSystemAdmincancreate,modify,ordelete
application sets and define security.
• PrimaryAdmin: BydefaultaPrimaryAdmincandoalladmintasksexcept
create, modify, or delete application sets.
• SecondaryAdmin: BydefaultbeingaSecondaryAdminallowsusersto
managedimensionmembersand maintainlocks.
147
2009 © 2009 SAP AG. All rights reserved.
第 162 页 / 共 237 页
Unit4: AdministrationinBPC BPC310
Figure 181: BPC Default Function Tasks (2 of 2)
Each default function task has some tasks that are required and assigned by
“Default”whenchoosingtherole. Thereareadditionalavailabletasksthatyou
also can manually assign to the user.
Inthisdiagram,youcanfindthetaskswhichareassignedtotherolesbydefault.
MiscreferstochangingAppSetstatusandmaintainingcustommenus.
Figure 182: Maximum of One Team Leader
Within SAP Business Planning and Consolidation, a team leader has special
privilegesthatateammemberdoesnothave. Ateamleadercansavetemplatesto
their team folder on the server.
148
©2009SAPAG.Allrightsreserved. 2009
第 163 页 / 共 237 页
BPC310 Lesson: Security
To designate a team leader, you can choose the checkbox next to a user in the
dialog.
InSAPBusinessPlanningandConsolidation,youcanhaveonlyoneteamleader
per team.
Savingobjectstotheserver(suchasTools/SaveDynamicTemplates):
• Theadministratorcansaveobjectstothe“company”folder
Theadministratorautomaticallyhasthemanagetemplatetaskassigned.
• Theteamleadercansaveobjectstohis/her“team”folder.
Theteamleaderautomaticallyhastherightevenifmanagetemplateisnot
assigned
• Any user can save objectsto the“company” or his/her “team”foldersif
assignedmanagetemplatetaskaccess. .(TheywouldalsorequireFileAccess
- Update to company folder rights).
Concerning the Data Manager and Transformation and Conversion Files:The
teamleadercanmodifyteamtransformationfileandconversionfileandcanread
transformationandconversionfileslocatedincompanyfolder.Non-teamleaders
only have read access rights.
ConcerningtheDataManagerandthePackageOrganization:
TheTeamleadercanmanageapackageattheTeamlevel.
TheNon-teamleaderscanopeneDatamenuandrunapackagewithinaCompany
or Team Folder.
Figure 183: Defining Secured Dimensions (1 of 2)
149
2009 © 2009 SAP AG. All rights reserved.
第 164 页 / 共 237 页
Unit4: AdministrationinBPC BPC310
You define security settings for dimensions at the application level using the
“Modify application”option intheActionPane.
Figure 184: Defining Secured Dimensions (2 of 2)
Inthememberaccessprofile,theaccesstothedimensionscanbeadministrated.
Ifyoucanwritetoacategory,youcanthereforereadittoo.
Ifyoucan'treadanentity,youthereforecan'twritetoit.
So, even though we only chose to control read access by entity, if your rights
aretoonlyreadEntityXthentheabilitytowritetoEntityXisinheritedforthe
category specified.
150
©2009SAPAG.Allrightsreserved. 2009
第 165 页 / 共 237 页
BPC310 Lesson: Security
Figure 185: Member Access Profile
In the member access profile, only the access to the secured dimensions can
be administrated.
Youhavewriteaccessto all membersof adimension which arenot marked as
secureddimension. InSAP termsyouwouldsaythat youhave“SAPALL”for
these members.
Figure 186: Security: Useful Hints and Tips
151
2009 © 2009 SAP AG. All rights reserved.
第 166 页 / 共 237 页
Unit4: AdministrationinBPC BPC310
Tips for assigning task profiles
• Thenumberoftaskprofilesadministratorscanassigntoauserisnotlimited.
• However,werecommendthatyoudonotassignmultipletaskprofilesto
usersbecauseitmaycauseconfusionindeterminingtheirultimateaccess
rights.
• Taskaccesssecurityiscumulative,andtaskscannotbeexplicitlydenied. As
aresult,assigningmultipletaskprofilescancreateasituationwhereusers
haveaccesstotasksthatyoumaynotwantthemtohave. Forexample,an
administratorwantsUserAtoonlyretrievedata. IfUserAbelongstoateam
thathasdata-sendtaskrights,UserAcanalsosenddata.
• Administratorscanassignmultipletaskprofilestoateam.
• However,werecommendthatyoudonotassignmultipletaskprofilestoa
team because it may cause confusionin determining the ultimate access
rights of that team.
Figure187: SecurityExample: 2HierarchiesonEntity(SecuredDimension)
Thefollowingslidesaregoingtoguideyouthroughsomeimportantissuesrelated
to the security concept.
Theupperhierarchiesformtheexampleforthesecurityissuesdescribedinthe
next slides.
152
©2009SAPAG.Allrightsreserved. 2009
第 167 页 / 共 237 页
BPC310 Lesson: Security
Figure188: Conflict1: betweenProfiles-lessrestrictiveProfilewins
Followtheexampleontheslidetounderstandthefirstconflict.
Figure 189: Conflict 2: Father node and child -Top-Down heredity unless
child has own access definition
Followtheexampleontheslidetounderstandthesecondconflict.
153
2009 © 2009 SAP AG. All rights reserved.
第 168 页 / 共 237 页
Unit4: AdministrationinBPC BPC310
Figure 190: Conflict 3: Teams and User - User access dominates Team
access of the team to which the user belongs
Followtheexampleontheslidetounderstandthethirdconflict.
Figure 191: Conflict 4: A Member belongs to different Hierarchies - less
restrictive profile wins
Followtheexampleontheslidetounderstandthefourthconflict.
154
©2009SAPAG.Allrightsreserved. 2009
第 169 页 / 共 237 页
BPC310 Lesson: Security
Lesson Summary
You should now be able to:
• Understand the four components of the security model and how they are
integrated.
155
2009 © 2009 SAP AG. All rights reserved.
第 170 页 / 共 237 页
Unit4: AdministrationinBPC BPC310
Lesson: Work Status
Lesson Overview
Lesson Objectives
After completingthislesson, you will beable to:
• DescribeatypicalcustomerscenarioforWorkStatus.
• Describe how to set Work Status.
Business Example
Figure 192: What is Work Status?
Managingworkstatusinvolvesspecifyingwhocanmakechangestodatainthe
databaseandwhocanchangetheworkstateonadataset.
Default work states are Unlocked, Submitted, and Locked. You can add new
work states if you need more flexibility.
Afteryourworkstatesaredefinedandyourownershipdimensionissetup,end
userscanusetheworkstatestoapplyalabeltoaspecificcurrentviewintersection
forthepurposeoflockingdatasoitcanbereviewed,approved,etc.
Forexample,yourmonth-endclosebusinessprocessrequiresthataspecificsetof
dataislockeddownsothataccuratemonth-endreportscanbecreated.
156
©2009SAPAG.Allrightsreserved. 2009
第 171 页 / 共 237 页
BPC310 Lesson: Work Status
Afteradatasubmission,theownersetstheworkstateto'Submitted.' Thislocks
thedata intersection from subsequentsubmissions.
To use work state tracking you must specify the hierarchy (H1, H2, H3, ...,
Hn) within the owner dimension for which you want to use work status. You
specifythehierarchyintheAPPROVALORGfieldontheSettingApplication
Parameters page.
TheuseofWorkStatusistopreventdatachangestoaregionwithinanapplication
(cube)usingaspecifiedcriteria–theendresultisalockingofaregionwithina
givenapplication(similartodata-slicesinBusinessPlanningandSimulation
(BPS) and Business Intelligence (BI-IP)).
AnychangestotheWorkStatusdefinitionwillremoveallexistingWorkStatuses
setbytheusersforallapplicationsinanapplicationset.
WorkStatusisNOTprocessflowmanagementandisoptionalforthecustomer.
WorkStatusisindependentofBusinessProcessFlowshowever,thefunctionality
can beincorporatedwithinaBusinessProcessFlow.
Ifanewchildisaddedtoahierarchy,andtheparentofthisnewchildislocked,
the new child is not locked.
Thedefaultmethodformanagingworkstatusisbottom-up. Thatis,thestatusofa
parentcannotbehigherthanthestatusofitschildren. Forbottom-upbehavior,the
maximumstateaparentcanbesettoistheloweststateofitsimmediatechildren.
Youcansetworkstatustotop-downintheTOPDOWNfieldintheApplication
Parameters.
Figure 193: Work Status -Month-End FinancialExample
ThisisatypicalexampleabouthowtheWorkStatuscanbeusedbythecustomer
in real life.
Atmonth-end,dataisloadedandfurtheradjustedbyauthorizedend-usersbased
on their member access profiles.
157
2009 © 2009 SAP AG. All rights reserved.
第 172 页 / 共 237 页
Unit4: AdministrationinBPC BPC310
Upon completion of the month-end data submission, the responsible user
(Owner/Manager)cansettheWorkStatusasdefinedbytheadministrator.
Owner=BasememberUserID.Manager=ParentmemberUserID.
The data is locked at the responsibility center. In financial situations this is
typically a subsidiary.
A manager and/or a high level group processor, will start the review and
consolidatethedata(specificcalculations/logicexecution).
Afterthegroupconsolidationisrun,thedatacanbelockedfromchangessothat
thereportinggroupcancreateaccuratemonth-endreports.
At any time, the end user may submit supporting documents or comments
(annotations) during the process to further support the month-end results.
(assumingdocumentsor commentsarenot locked.)
Figure 194: Owner, Reviewer & ManagerConcept
TheownerofanentitycansettheworkstatetoanystatedesignatedasanOwner
state.
The manager of an entity can set the work state to any state designated as a
Manager state.
158
©2009SAPAG.Allrightsreserved. 2009
第 173 页 / 共 237 页
BPC310 Lesson: Work Status
Figure 195: Work Status End-to-End Process(1 of 3)
Forexample,yourmonth-endclosebusinessprocessrequiresthataspecificsetof
dataislockeddownsothataccuratemonth-endreportscanbecreated.
Afteradatasubmission,theownersetstheWorkStatustoApproved.' Thislocks
thedata intersection from subsequentsubmissions.
Ifworkstateissubmitted,theowneroftheentitycancreateajournal.
The Manager of the entity can change the work state to approved or from
Approved.
Youcandefineonesetofspecificcurrentviewvaluesforeachapplication. Itis
possibletohavedifferentOWNERdimensionsperapplication.
Youcanassignmultipleuserstoadimensionmemberastheowners.
Eachnonworkstatedimensionrequiresavalidmemberinthemembervalidation.
Thisisjustarequirementmadebytheprogrammertocompletethescreenand
does not serve any business purpose.
Youcanchangetheworkstatussettingsforeachapplication. Changingthework
status settings involves identifying three to five 'work status dimensions,' and
thendefining specific membersfor the remainingnon-workstatusdimensions
used for validation purposes.
The dimensions you select as the work status dimensions are the variables in
yourbusinessprocess. Forexample,theentity,category,andtimemightchange
basedonwhoissubmittingdata,buttheaccount,datasource,reportingcurrency,
etc., remains static.
Typically,Timeisaworkstatusdimensionsincedataisusuallysegregatedbased
on time.
159
2009 © 2009 SAP AG. All rights reserved.
第 174 页 / 共 237 页
Unit4: AdministrationinBPC BPC310
Figure 196: Work Status End-to-End Process (2 of 3)
The“Owner”propertyisusedwhenyouareusingtheworkstatusfeature.
Youaddthepropertytothedimensionthatdrivestheworkstatusflow.
Forexample,ifyourbusinessprocessdictatesthatanentityisthedifferingfactor
whenitcomestoenteringdata,thentheEntity-typedimensionistheworkstatus
driving dimension.
Ifyourbusinessprocessdictatesthatadepartmentnameisthedifferingfactor,
thenDepartmentdimensionwouldhavetheOwnerproperty.
Thedimensionyouselecttodriveworkstatusmusthavemorethanonehierarchy,
and the hierarchy is specified in the APPROVALORG field on the Setting
Application Parameters page.
TheOwnerpropertytakesuserandteamnamesasvalues. Youcanentermultiple
namesand teams separated by commas. You must also includethe domain or
server name in the path.
Base Hierarchy:
“BaseHierarchy” was added in the Work Status Settings with 70M to support
multiple hierarchies for Work Status.
“BaseHierarchy” is going to be used as a flag of a specific hierarchy of the
WorkStatus dimension instead of the parameter APPROVALORG in the
tblDefaults table.
Originally“BaseHierarchy”alreadyexistedin5.1Mbutwithzeroasitsoneand
onlyvalue, sothisfeaturewasnt customizableat all.
Duringtheupgradefrom5.1to7.0MBPCcanseewhichdimensionhasasingle
hierarchyandenters“1”inthe“BaseHierarchy”fieldoftheworkstatussettings.
“1” is the default.
Ifadimensionconsistsof3hierarchiesanditssecondhierarchyshallbeusedfor
theWorkStatusSettings table, youhavetoenter “2”for the“BaseHierarchy”
settings.
160
©2009SAPAG.Allrightsreserved. 2009
第 175 页 / 共 237 页
BPC310 Lesson: Work Status
Figure 197: Work Status End-to-End Process (3 of 3)
SettheApprovalorghierarchyintheapplicationparameters.
Figure 198: Work Status Big Picture
Thethreeworkstatedimensionsdeterminedattheapplicationlevelaredetermined
later. They act as variables.
161
2009 © 2009 SAP AG. All rights reserved.
第 176 页 / 共 237 页
Unit4: AdministrationinBPC BPC310
Figure 199: Work Status Excel and Web Report
TheM03StatusReport1 isdeliveredwith ApShell.
It uses the EVLCK function.
Itislocatedin: eTools>OpenDynamicTemplates>eExcel>Reports>Manager.
Figure 200: Work Status Tips
162
©2009SAPAG.Allrightsreserved. 2009
第 177 页 / 共 237 页
BPC310 Lesson: Work Status
The upper list givesyou some advantages and hints if you would like to work
with Work Status.
163
2009 © 2009 SAP AG. All rights reserved.
第 178 页 / 共 237 页
Unit4: AdministrationinBPC BPC310
Lesson Summary
You should now be able to:
• DescribeatypicalcustomerscenarioforWorkStatus.
• Describe how to set Work Status.
164
©2009SAPAG.Allrightsreserved. 2009
第 179 页 / 共 237 页
BPC310 Lesson: Business Process Flows
Lesson: Business Process Flows
Lesson Overview
Lesson Objectives
After completingthislesson, youwillbeable to:
• Createa businessprocessflow which will facilitate thecoordination and
statuscheckingaspectsofperformingplanningorconsolidationsactivities.
Business Example
Figure 201: Business Process Flows-Budgeting Example
OneofthebiggestadvantagesofBPCistheBusinessProcessFlow(BPF).The
graphicaboveshowsa typicalexample of aBPF.
BPFsareusedtoprovideagraphicalviewofthestepsintheprocessaswellasto
providestructure, integrationandreviewingcapability.
Whenstepsarelockedtheycannotberepeatedwithoutre-startingthebusiness
process flow.
165
2009 © 2009 SAP AG. All rights reserved.
第 180 页 / 共 237 页
Unit4: AdministrationinBPC BPC310
Figure 202: Definition: Business Process Flows
Using the intelligence of BPC data regions, you can set up a single business
processflowthatcanbeusedacrossapplicationswithinanapplicationset. Adata
regionservesasakeyforopeningasingleinstanceofabusinessprocessflow. For
example, an'AllocateExpense' businessprocessflowcouldberunning for the
same entity and time, but different categories.
Business process flows can also be integrated with work states to offer an
additional level of intelligence and integration with your companys regulatory
processes.
UsinganExplorer-likeinterfacethat isaccessiblefromBPCWebandBPCfor
Excel,end-usersareguidedthroughpre-definedsequentialtasksthatspanacross
the different areas of BPC.
The BusinessProcessFlows allowsmanagers to:
• Monitor progress of all participants.
• Automatically send e-mail notifications to participants at predetermined
times to expedite progress.
• Coordinaterequiredapprovalsforeachstepintheprocess.
• Assure consistency and uniformity.
166
©2009SAPAG.Allrightsreserved. 2009
第 181 页 / 共 237 页
BPC310 Lesson: Business Process Flows
Figure 203: Adding a New Business Process Flow
TheupperscreenshotdescribestheaccesstothecustomizingofBusinessProcess
Flows.
Figure 204: Adding a New Business Process Flow
To define a BPF
1. From the Setup BPF > A. Define BPF page of the Add a New Business
ProcessFlowassistant, entertheBusinessProcessFlownameanddescription
in the first two fields.
167
2009 © 2009 SAP AG. All rights reserved.
第 182 页 / 共 237 页
Unit4: AdministrationinBPC BPC310
2. In the What is the controlling application? field, enter the name of the
controlling application.
3. In the BPF Owner field, enter a validuser name. You canclickthelookup
button to display a list of users. Select the desired user name, then click OK.
Theusermusthaveanemailaddressassignedtotheminorderforthemtoown
this BPF.
4. ClickSaveonthebottomofthewindow. ContinuetoSetupTaskB.
Figure 205: Define Data Region
The data region defines the “base” region in which the BPF is designed.
However,enduserswhoruntheBPFmayselectadifferentdataregion,asneeded,
to perform their process flow tasks.
The'identity'dimensionsareallthedimensionsthatwillbeusedinaBPF.The
Timedimension,usedinallBPFs,isautomaticallyselected.
The 'Drive' Dimension:
• A dimension that the process 'revolves' around and is present in all
applications in the BPF.
• YouneedonedrivedimensionandonlyoneinaBPF.
• Adrivedimensionmusthavethereviewerproperty.
• Isitusedtoprovideauserwhocan'approve'theBPFinpractice.
• Ifyouenable reviewersto review astep.That person isderivedfrom the
drive dimension.
BPFsutilizedataregions,whichallowyoutosetupasinglebusinessprocessflow
thatcanbeusedacrossapplicationswithinanapplicationset.
168
©2009SAPAG.Allrightsreserved. 2009
第 183 页 / 共 237 页
BPC310 Lesson: Business Process Flows
Adataregionservesasakeyforopeningasingleinstanceofabusinessprocess
flow.
Forexample,an'AllocateExpense'businessprocessflowcouldberunningforthe
same entity and time, but different categories.
Youcanseeanexampleofadriverdimensionontherighthandsideoftheslide.
Figure 206: Define Timing and Set Access
Note: Currentlytheonlyoption availableisOnce. Additionaloptions
(Daily, Weekly, Monthly, Quarterly, and Yearly) will be available in
a later release.
BPFactivationdatesection: Priortothistime, theBPFwillnotappearonthe
end user's action pane.
Automatice-mailmessagescanbesenttoBPFuserstoremindthemtoperform
theirappointedBPFtasks. IntheWhenshouldusersbenotifiedsection,usethe
twodropdownmenustospecifyanumberofdayspriortothestartof,orafterthe
start of theBPF frequency you specifiedinStep1.
169
2009 © 2009 SAP AG. All rights reserved.
第 184 页 / 共 237 页
Unit4: AdministrationinBPC BPC310
Figure 207: Steps, Sub Steps, and Actions
The actions in step 1 are bold blue hypertext because they are the only two
possible actions while step 1 is incomplete.
Stepsaregeneral businessactionsyoutakeincompletingthebusinessprocess.
EachBusinessProcessFlow(BPF)mustcontainatleastonestep.
Adding a new substep:
Sub-stepsareusedwhenyouwanttodefineoneormoreactionsunderasingle
step.
Here are some properties of sub-steps:
• Each sub-step has an associated action
• Sub-stepsarenotsubjecttoapprovalin theBPF
• Sub-stepsarenot subject tocompletioncriteria
• Sub-stepsneednotbeperformedinsequentialorder.
170
©2009SAPAG.Allrightsreserved. 2009
第 185 页 / 共 237 页
BPC310 Lesson: Business Process Flows
Figure 208: Define Steps & Sub Steps
Designate aprocessaseither astep or sub-step.
Thedescriptionappearswhenuserexecutestheprocess.
Enable Alerts is not currently available.
Enable completion criteria:
Completion criteria may be enabled if Work Status has been enabled in the
controlling application of the BPF.
Ifdefinedhere,theselectedcombinationsofmembersmustbesettothespecified
workstatusbeforethestepcanbeconsideredcomplete.
Send email to reviewers upon completion
Thisfeaturecanbeinstalledifamailserverisinstalled.PleaseseeDocumentation
for installation.
171
2009 © 2009 SAP AG. All rights reserved.
第 186 页 / 共 237 页
Unit4: AdministrationinBPC BPC310
Figure 209: Enable Reviewers
Enable Reviewers
This allows reviewers (as defined in the 'Reviewer' property of the drive
dimension)toreviewthestep. Ifyouwanttodefineanactionthatthereviewer
must perform in order to review the step, select Set/Modify Custom Review
Actions.
Set/Modify Custom Review Action(s)
Anactioncouldbesomethinglikeopeningascheduleorpublishingareport. In
previousversionsofBPC,actionsweredrivenbyEVfunctionsorMNUfunctions.
172
©2009SAPAG.Allrightsreserved. 2009