Grant Privileges in SAP BW to the Virtual DataPort User Account

Usually, SAP systems are configured to limit the functions a user can invoke.

If you are going to retrieve data from SAP BW (i.e. create multidimensional data sources), you have to grant access to the following functions, via the authorization object S_RFC, to the user account used by Virtual DataPort to connect to SAP BW:

  • RFCPING
  • RFC_GET_FUNCTION_INTERFACE
  • DDIF_FIELDINFO_GET
  • SYSTEM_RESET_RFC_SERVER

Virtual DataPort invokes these BAPIs at introspection time (when opening the data source to list the SAP BW cubes):

  • BAPI_MDPROVIDER_GET_CUBES
  • BAPI_MDPROVIDER_GET_VARIABLES
  • BAPI_MDPROVIDER_GET_MEASURES
  • BAPI_MDPROVIDER_GET_DIMENSIONS
  • BAPI_MDPROVIDER_GET_LEVELS
  • BAPI_MDPROVIDER_GET_PROPERTIES
  • BAPI_MDPROVIDER_GET_HIERARCHYS
  • RSOBJS_GET_NODES_X

When querying views that involve a multidimensional data source with the “SAP BW 3.x (BAPI)” adapter, it invokes these:

  • BAPI_MDDATASET_CREATE_OBJECT
  • BAPI_MDDATASET_GET_AXIS_INFO
  • BAPI_MDDATASET_GET_AXIS_DATA
  • BAPI_MDDATASET_GET_CELL_DATA
  • BAPI_MDDATASET_SELECT_DATA
  • BAPI_MDDATASET_DELETE_OBJECT
  • BAPI_MDPROVIDER_GET_MEMBERS

When querying views that involve a multidimensional data source with the “SAP BI 7.x (BAPI)” adapter, it invokes these:

  • RSR_MDX_CREATE_OBJECT
  • RSR_MDX_GET_AXIS_INFO
  • RSR_MDX_GET_AXIS_DATA
  • RSR_MDX_GET_CELL_DATA
  • BAPI_MDDATASET_SELECT_DATA
  • BAPI_MDDATASET_DELETE_OBJECT
  • BAPI_MDPROVIDER_GET_MEMBERS