I have found that it is possible to protect workbooks using "SAP protection" in the

tools button of BEx analyzer.

In this way, you can protect the workbooks by entering a password.

Please give the following roles to the user to save the workbook only in favorites

s_usr_agr, s_gui, s_bds_d, s_user_tcd.

yes, it’s possible.

I think User having PFCG - Role changing authorizations also. Try to restrict to Role
Display authorizations only.

The Authorizations: Role Check S_USER_AGR has two fields: Activity and Role Name.
You usually put the following set of value 01 Create or generate, 02 Change, 22
Enter, Include, Assign. For the Role Name the value that you should put is the
specific role that you should create for saving Workbook.

As Srinivas said, you should restrict into field activity of S_USER_AGR role by 03
Display value. To avoid that end user can save again the Workbook.

Then user cannot save into a Role. Only Favourites is possible.

In BI7 the role assigned to user will show. But in order to get the roles tab in Bex
analyzer you need to provide authorization to object S_RS_FOLD with value as False
("). This will bring a folder called Roles in Bex analyzer. Now to view any role
assigned to user they must have access to object S_USER_AGR with activity as 01,
02, and 03 simultaneously for that role.
To add workbooks of views to a role in the BEX analyzer, you need authorization
objects:

s_rs_tools, s_user_tcd (rrmx), s_user_agr, s_rs_tools (themes), s_cts_admi (table),

s_bds_d (actvt 30), s_rfc, s_rs_comp and comp1.

To add queries to a role in the BEX query designer, you need: s_rs_fold, s_rfc,
s_rs_tools (web publish), s_user_agr, s_rs_comp and comp1.

The trace file is a text file that contains a log of the BEx Analyzer activities. It is stored in your system’s
temporary folder. You can view and set the following trace file properties:
● The Name of Trace File field displays the path to and name of the trace file
(BexAnalyzerTrace.txt).
● Select the Record Trace checkbox to record trace information to this file.
You can delete the contents of the trace file by switching Record Trace off and then back on
again. Save the contents of your trace file before you turn off Record Trace.
● Choose the Display Trace pushbutton to display the file that is using your system’s default text
editor
The trace display is not constantly updated, meaning you must choose Display Trace
whenever you want to display the most recent entries.

Password-Protect Workbook
If you select this indicator, the BEx Analyzer password-protects all the sheets in your workbook against
any changes you make with BEx Analyzer functions. When you attempt to change your workbook by
inserting a design item, for example, the BEx Analyzer requests the password you specified here. The
BEx Analyzer only accepts the changes if you enter the correct password
When the BEx Analyzer protects your workbook, you can still navigate in analysis mode, but you cannot
enter data. Cells that are not locked with cell protection are not protected. Activate Enable Cell Protection
in the Analysis Grid properties to protect the cells in the analysis grid as well.
S_GUI , S_BDS_D and S_BDS_DS