Dashboard Authorizations
The Tactical, OCC and Operation Dashboards are part of the "Advanced Analytics & Intelligence" group accessible in the Focused Run Launchpad.
The access to this SAP Fiori Group is granted by the SAP_FRN_FLP_5_6_AAI role (SAP_FRN_FLP_1_1_ADI in SAP Focused Run 2.0 FP01)
Individual access to the Tactical, OCC and Operation Dashboards is granted by additional roles described in the next section.
Display Users
Display Users can use the following roles to ensure they have access to individual Dashboards:
- SAP_FRN_FI_TACTICAL
- SAP_FRN_FI_OCC
- SAP_FRN_FI_OPE (as of SAP Focused Run 3.0 SP00)
These roles contain the authorization objects needed to start the application from the launchpad and, depending on the release of SAP Focused Run, the configuration of custom pages.
As of SAP Focused Run 3.0 SP00 a new Authorization Object has been added to the SAP_FRN_FI_* roles to control and restrict the access to individual Public Pages.
FRN_AAI_ID
- Field PAGEID
- Used to filter the Public Page access based on its ID, e.g. 98F2B3032C971EDABE81E8F644CD6331
- The Page ID of a public page can be retrieved by using the "Share Current Page" button in the Dashboard Header.
- Field USECASE
- Used to filter the Dashboard Access (possible values fiocc, fitac or fiope)
As of SAP Focused Run 3.0 SP00, display users can only display authorized public pages. All the functionalities in the personalization pane are disabled and custom pages creation not possible (i.e. the "+" button is not available anymore).
Administrators
An additional role is needed for Administrators. These users are allowed to create and manage (delete/update) public pages that can be shared with display users.
- SAP_FRN_UI5_PERS_PUB
The Authorization Object SR_UOC contained in this role grants admin rights when the field ACTVT is 70 (Administer).
FRN_AAI_ID is never checked for Administrators (i.e. users having the SAP_FRN_UI5_PERS_PUB or any other role with the SR_UOC Authorization Object). Administrators can therefore access all the dashboards and every public page. "Display" roles are needed by Administrators just to enable the access to the Dashboard Applications and services.