How to hide sensitive SAP information in Query Reports
By Marc Rouhana on July 17, 2012
Winshuttle Query is great for adding security on top of the native SAP security to limit users down to the field level. Security administrators can even configure Query to perform custom security checks, restrict or exclusively allow one or multiple tables within an authorization group.
What about when we want users to have access to the data but we need to hide or scramble personally identifiable information such as tax id, bank routing, bank account number or show only the last 4 digits of the Social Security number?
Winshuttle Query natively supports Excel formulas and functions in the mapper. This means we can leverage those familiar Excel formulas and transform an SAP field value to hide it or change it.
Let’s walk through the process step by step in a couple of examples:
1. Design the Query: In our example I will add the HR Tables for Infotype 0002, 0008 and 0009 (Personal Data, Basic Pay and Bank details)
2. Run a quick Preview to review the data in its native form in the SAP tables
3. Add the Excel Formulas in the mapper to hide or transform our SAP values
a. To show the last 4 of the SSN I used the RIGHT() formula
b. To scramble the Bank account number I used the RAND() formula
c. PS: Make sure to check “Transform Original mapping” to replace the original SAP value with the calculate value in the Excel column. Report runners will not be able to see the SAP data.
4. Publish or execute your Query
a. Notice the calculated values: The SSN shows only the last four numbers whereas the Bank Account number was randomly generated.
I hope you have found this quick helper to be useful. Please chime in and share some of your ideas on useful Excel formulas with Winshuttle Query for SAP data extraction.