NW Security for BPC Users

When using NetWeaver security (not AD or CMS) for BPC, the user must have these roles set using the SU01 transaction in order to access BPC:


ABAP Access Keys

Recently I tried to create a new object in the ABAP Object Navigator. It seemed simple, select Program, enter HELLO_WORLD_2 and press the Enter key. After doing so, I’m eventually faced with this screen:

If you have the Access keys, then enter the Developer Access key and the Object Access key and click Continue.

If you don’t, then you need go thru these 2 steps:

  1. Register the Developer
  2. Register the Object

Register the Developer

  1. Login to SAP Service Marketplace (http://service.sap.com/licensekey)
  2. Click SCCR Keys
  3. Click Register Developer and follow the prompts

Register the Object

  1. Same as above, except click Register Object for step 3

Once you have registered both the developer and object you can view either My Company’s Registrations, Developers Registered by Me or Objects Registered by Me by clicking the SSCR Keys menu link

Use the Developers and Object tabs to retrieve the Registration keys (Access key) and enter them in the User and SAP Object Key screen.

BPC 7.5 NW ApShell Data

Remembering where data is in the ApShell AppSet of NW 7.5 has been difficult for me. So instead of running RSA1 to find the data, I can look here:

  • Category: ACTUAL
  • Entity: C9000
  • P_Acct: CE0004010
  • P_Activity: NONE
  • P_DataSrc: Upload
  • RptCurrency: LC
  • Time: 2006, 2007, 2008


Installing BPC 7.5 NetWeaver Support Packages

Installing BPC NetWeaver Support Packages are a bit more involved than for the MS version. There are 2 parts to address: the ABAP SP and the BPC SP.

Before beginning, document the current install by making screen shots of the Server Manager screens into WordPad.


For the ABAP SP retrieve the .SAR file from the SAP Marketplace

NOTE: ABAP BPC Support Packages are NOT cumulative, so download all the SPs between your current version and the latest.

  1. Software Downloads > Support Packages and Patches > A – Z Index > B
  3. Comprised Software Component Versions > SAP CPM BPC ABAP 7.5 > Support Packages
  4. Check the box for the SP and click Add to Download Basket.
  5. At this point, the SP is in the Approval List tab of your Download Basket and needs to be approved for download by SAP.
  6. Submit a ticket to the XX-SER-SAPSMP-SDM component asking them to approve the download.
  7. Once it is approved you may download it.

NOTE with Solution Manager, you can retreive the SP directly thru NetWeaver.

Load the Support Package into NetWeaver

  1. On the NetWeaver server, logon to client 000 as Admin
  2. Run the SPAM transaction
  3. Go to the Support Packages menu
  4. Click Load Packages > From Front End
  5. Browse to the .SAR file location
  6. Click Open
  7. Click Decompress
  8. Repeat steps 1 thru 7 for all ABAP SP files.

Transport SP into the system

  1. On the main SPAM display ensure ‘New Support Packages’ is selected under ‘Directory’
  2. Click Display
  3. Click the SP in the list
  4. Right click on the package and choose Define Queue
  5. Click the green checkmark
  6. Click No to Adding Modification Adjustment Transports to the queue
  7. The window should close and in the main SPAM window, the Queue should display your SP
  8. Click the red truck button to transport the update
  9. Click the green checkmark to start the transport of the update into the system
  10. Once the transport finishes, ‘Confirm the Queue’ by clicking the green checkmark with a pencil.
  11. Repeat steps 1 thru 10 for all ABAP SP files.


For the BPC SP retrieve the .exe file from the SAP Marketplace

NOTE: BPC .NET Support Packages are cumulative, so only download the latest.

  1. Software Downloads > Support Packages and Patches > A – Z Index > B
  3. Comprised Software Component Versions > SAP CPM BPC 7.5 for NW > Win32
  4. Check the box for the SP and click Add to Download Basket.
  5. At this point, the SP is in the Download Basket tab of your Download Basket, download it locally by right clicking the file and selecting Save Target As…

Install the SP

    1. Reboot the server
    2. Uninstall the existing .NET Server application.
    3. Reboot the server
    4. Start the install program
    5. Locate XceedZip.dll and AntiXSSlibrary.dll. NOTE: SP06 requires version 3.1 of AntiXSS which requires .NET 3.5
    6. Specify user name and company
    7. Enter ADBPCSysAdmin
    8. Select authentication method, we use CMS
    9. Enter these values by referring to the WordPad document created at the beginning.
  1. Site Port
  2. Message Queue
  3. Message Server
  4. System ID
  5. Client
  6. Language
  7. System Number
  • There are 3 ABAP service users: bpcsysadmin, bpc_admin and bpc_user. Enter their credentials.
  • Click Install
  • When the install completes, click Finish

SAP Central Management Console and Windows AD Authentication

When changing Domain Controllers for a UMS/CMS server you need to modify the krb5.ini file. In our case that file was located in C:WinNT. Simply adding another kdc line, saving the file and restarting TomCat updates the system.

AD.ourdomain.COM = {
kdc = NewDCName.AD.ourdomain.COM
kdc = OldDCName.AD.
default_domain = AD.

Prior to this update, I was receiving this error:

Account Information Not Recognized: Active Directory Authentication
failed to log you on. Please contact your system administrator to make
sure you are a member of a valid mapped group and try again. If you are
not a member of the default domain, enter your user name as
[email protected]_DomainName, and then try again. (FWM 00006)

Viewing Data in a NW AppSet

Often I need to know where data is when testing after an upgrade or install. For the NW version do the following:

  1. Login to SAP GUI
  2. Start transaction RSA1
  3. If prompted, decide whether to view or not view the documentation
  4. In the Modeling pane, click InfoProvider
  5. In the large pane on the right, expand Business Planning and Consolidation
  6. Expand your AppSet
  7. Right click on your Application, then select Display Data
  8. If an information dialog appears about too many characteristics, click the green check

At this point a dialog appears with all the dimensions and their properties. So for example, the P_Activity dimension shows 4 rows:

  1. [ ] [ ] CALC[P_ACTIVITY]
  2. [ ] [x] CALC[P_ACTIVITY]
  3. [ ] [ ] P_ACTIVITY
  4. [ ] [x] P_ACTIVITY

Notice there are white check boxes and greyed out check boxes. The grey boxes that are checked indicate the ID for the member, the non checked contain the name. So check the white check box like this to get ID and Name:

  1. [ ] [ ] CALC[P_ACTIVITY]
  2. [ ] [x] CALC[P_ACTIVITY]
  3. [x] [ ] P_ACTIVITY
  4. [x] [x] P_ACTIVITY

Do this for every dimension you want to view with your results. Notice the SignedData row at the end, this is the actual value column. Then:

  1. Click the green check.
  2. Clicking the Fld Selectn for Output button
  3. Click the Select All button
  4. Click the Clock with a green check button
  5. You return to the previous screen
  6. Click the Clock with a green check button again
  7. Your data displays

Once I know where data is located I can run reports in the Excel client.

Changing R/3 SAP GUI Permissions

Recently I needed to apply an SAP Note to our BPC NW environment. To do this, I had to create a new ‘admin’ user and run the Notes Assistant under that new account. Before I could run the Notes Assistant, I need to grant access to the snote transaction in SAP GUI. This is how I did it:

  1. Login with DDIC
  2. Go to su01
  3. Specify user ID
  4. Change
  5. Go to Profiles tab
  6. enter SAP_ALL or whatever objects
  7. Save
  8. Exit

Some BPC NW Commands

In SAP GUI using se80 will show tables.

These table prefixes mean the following:

  • uj – BPC related
  • uja – AppSet
  • ujj – Journal
  • uje – Security

rsa1 – Data Warehousing Workbench: Modeling (view AppSet, dimension attributes and raw data here)
su01 – Create Users
snote – Run Note Assistant