ADHOC  Query Authorization

Hi Experts,
How authorization can be assigned to a query created by PAAH transaction (adhoc query).
If a query is created by particular user/user group, it should not be altered by other user / user group.
Please advice.Thanks in Advance.
Regards,
IFF

Hello,
Through P_PERNR we could restrict the authorisations for adhoc query for a particular user.
Using the employee sbu group field value found under the P_ORGINCON authorisation object we could restrict the authorisations for a particular group of users.
Hope this answers your query.
Kindly let me know if you need any further help in this regards.
Pramathesh.

Similar Messages

  • Authorizations for adhoc query

    Hi all,
    I am facing a problem with authorization on adhoc query. The following is what I am trying to achieve: Power Users are able to design a query but they are only allowed to save the query with the prefix "p_"
    In PFCG I have set this up in s_rs_comp and s_rs_comp1 but I am still able to save the query under z_...... The role I have setup is quite plain, it has s_rfc, s_tcode, s_rscomp,
    s_rscomp1 en s_rsicube. Have I forgot to setup something else?
    anyone any idea?
    mcteam

    Hello James,
    I am trying to make it so my users can only save queries with the prefix "Y" I guess my problem is sort of the reverse of yours.
    My SDN thread is: 
    Only save queries if name starts with Y
    if you can help it'd be great!
    Thanks,
    Nick

  • Logical database in adhoc query

    Hello All,
    Can anyone tell me what is the logical database in adhoc query?

    Hi
    When you create a query , you have to select an infoset. Infoset can be considered as a source from which data is populated in the Query Fields.
    Infosets are created from Transaction SQ02.
    There can be four methods through which an Infoset can become a source of data:
    1.  Table join ( By joining two or more tables from Data dictionary)
         example: Joining tables PA0001 and PA0006 on Pernr to get a one resultant dataset
    2. Direct read of Basis Table ( Like PA0001 as a source for data in Infoset )
    3. Logical Database ( A Pre-written Program by SAP that extract data from clusters, tables taking care of authorizations and validity periods)
    Example : Logical database PNP, PNPCE (Concurrent Employement),PCH ( LDB for Personnel Development Data)
    Custom Logical DBs can be created in T_Code SE-36.
    4. Data Retrieval by a Program ( Custom code written by ABAP developers which will collect and process data) . This program has a corresponding Structure in data dictionary and the fields of this structure will be used in query)
    Reward Points, if helpful.
    Regards
    Waseem Imran

  • ADHOC Query in Production System

    Can I create a ADHOC query in Production system?Coz I can able to do that.
    Thanks
    Sriram

    This is the practice:
    1. The project team will build all the reports defined in the project plan, test and transport to production. These queries usually will be set not to be changed.
    2. SUper users will be granted authorization to create their own queries, modify their own queries and delete their own queries. For this the auth object S_RS_COMP1 is used.
    3. All the other users will be granted to access reports.
    Ravi Thothadri

  • Adhoc Query report not working fine

    Hi,
    We have a customized infotype  9222 which stores the previous experience of the employees.
    Now I have created a adhoc query in which I have added this infotype.The problem which I am facing is when I put the Indian company codes and run the report, the report is working fine . But when I put a Ukraine Company Code and then run the report ; the report does not picks the experience details of the employees and it shows Zero Yrs and Zero months.
    I have checked in PA30 the experience details are maintained  for the Ukraine employees.
    Is their any setting in the system which allows the infotype for a particular company? or what may be the reason for the strange behaviour of the report towards a specific compant code. Please reply asap

    Hi ,
    Pls check do you have authorization or not for to create Object Directory entry.
    Thanks and Regards,
    Revathi.

  • Adhoc Query Report

    Hi SAPients..
    I have a n issue in Adhoc Query
    In Adhoc query report ( PQAH ), X person having authorization to see the folder Additional Personal Data (IT0077), but Y person can access the Adoc but could not see the folder (IT0077). Please guide what should I do to make the Y person can view the (IT0077) folder??
    Appreciate your support on this, Please guide me.
    Shan

    Hi Shan,
    What I undertand is as follows:
    Person is having access to view IT77 and Y person is having access to t code - PQAH (Ad Hoc Reprot). you want to give Y person access of IT77.
    In this case you would need to add the concerned role to y person's SAP user id by which he ll get acces to maintain IT77 ands also can download the report. The role name you can get from your security team or GRC team.
    Hope this solves your query.
    Sarang Kulkarni

  • SAP ADHOC Query execute only

    dear all,
    I have setup a new role and made adhoc query for users to be able to maintain, change etc......
    You can set up authorizations in such a way, that certain end-users in a user group are authorized to maintain and execute queries, while other members of the same user group are authorized only to execute existing queries."
    the above statement, states other memebrs can be setup to execute only?
    what must I do to make the endsers allow them to execute the query only?
    for the first set of users i have within object S_QUERY made them to use change, maintain and translate.
    thanks all

    There is info here: http://help.sap.com/SAPHELP_NW70EHP1/helpdata/EN/de/45daf69ef111d195050000e82de14a/content.htm and here: http://help.sap.com/saphelp_46c/helpdata/en/de/45daf69ef111d195050000e82de14a/content.htm
    Users with S_QUERY actvt=02 can move between infosets with no problem.  If you are removing this then you need to specify which infosets are assigned to a user group and which users are assigned to the user group.  If you have lots of users and queries already then this may be a big piece of work and illustrates why use of queries may save time for one team (developers) but give more work for others.

  • Regarding  HR Adhoc  Query

    I came across a situation in the course of my job that certain people are able  to execute S_PH0_48000513 (HR Adhoc Query) without being added to the User Group. This was surprising.
    Can any of you tell me if this is because what security settings ? I am not sure if this could be some settings with auth object  S_QUERY .
    Acccording to the http://www.insightcp.com/res_15.htm it should not work if they are not added to any uset group. But in reality it is otherwise.
    Any thoughts on this , also if anyone can explain how security in Adhoc Query works , that would also be wonderful

    Hi,
    Most pobably these users are assigned with a role wherein they are assigned with the value S_PH0_48000513 under the auth object s_tcode or with the authorization object s_querry.
    Check this.
    Go to tcode S_BCE_68001397.
    In the Authorization tab enter value S_TCODE
    click ENTRY VALUES button
    In the next screen in the values field enter S_PH0_48000513
    and execute.
    It will show you which users are able to execute the said tcode
    Similarly check which users/roles are assigned with the auth object s_querry.
    In the roles assigned to the said users check if the r assigned with profile sap_all or sap_new profile.
    Or in the roles assigned to them the auth object S-Tcode containf the value S_PH0_48000513  or *  OR
    if there is an authorization  object s_querry.
    Note * means he is authorised to all tcodes.
    If the auth object s_querry exists make it inactive.
    A detailed analysis of the roles can give the way to regulate .
    If resolved dont forget to award few points.
    Regards

  • Issue in adhoc Query

    Dear All,
    When i am running adhoc query for a particular infotype iam getting fine.
    My issue is iam not getting the start and end date of the record.
    can any body help me out how to get the start date and end date of each record.
    Thanks in advance
    Regards
    Ananya.K

    Hi,
    If you want to add the dates to the output of the querry, While creating/editing the query, you should add feilds ENDDA and BEGDA for the infotype to get the start and end date correct.
    If this does not answer your question, could you explain your query in detail?
    Thanks,
    Dhiraj

  • Problem in Adhoc Query's set operation functionality.

    Hi Experts,
    I am facing problem executing Adhoc Query's set operation functionality.
    In Selection Tab, following operations are performed :-
    Execute a query and mark it as 'Set A'.(Say Hit list = X)
    Execute another query and mark it as 'Set B'.(Say Hit list = Y)
    In Set operation Tab, following operations are performed :-:-
    Carry out an Operations 'Set A minus Set B'.
    which results in Resulting Set = Z.
    Transfer the resulting set 'in hit list' and press the copy resulting set button.
    In Selection Tab, Hit list is populated with Z.
    And when output button is pressed, I get to see 'Y' list and not 'Z' list.
    Kindly help.
    Thanks.
    Yogesh

    Hi Experts,
    I am facing problem executing Adhoc Query's set operation functionality.
    In Selection Tab, following operations are performed :-
    Execute a query and mark it as 'Set A'.(Say Hit list = X)
    Execute another query and mark it as 'Set B'.(Say Hit list = Y)
    In Set operation Tab, following operations are performed :-:-
    Carry out an Operations 'Set A minus Set B'.
    which results in Resulting Set = Z.
    Transfer the resulting set 'in hit list' and press the copy resulting set button.
    In Selection Tab, Hit list is populated with Z.
    And when output button is pressed, I get to see 'Y' list and not 'Z' list.
    Kindly help.
    Thanks.
    Yogesh

  • Problem in adhoc query

    Hi All,
    This is regarding a problem in the adhoc query.
    For one adhoc query in the selection field only personnel number is there. The adhoc query selects from 0022-infotype.In this case if the reporting period is ALL, all infotype records belonging to 0022 infotype are selected. Even if the end date of the infotype record is less than the initial date of Org.assignment.
    For the second adhoc query in the selction field only
    personnel area is there. In this case the adhoc query doesnot select infotype record belonging to 0022 infotype
    if the end date of the infotype record is less than the Org.assignment.
    Can anyone explain me this strange behaviour.
    Points will be rewarded.
    Regards,
    Aravind

    Some more additional info about the problem.
    Suppose in the selection screen there are 4 fields
    Company code, Personnel area, Personnel sub area and Personnel number.
    If you fill both Personnel subarea and personnel number,
    data record belonging to education infotype but whose end date is greater than the start date of Org.assignment
    infotype is not selected.
    But if you fill only personnel number the same data record belonging to education infotype is shown with blank values for Org.assignment.
    I tried debugging and found out that in the first case
    since there is no Org. assignment record for the time period of the education infotype nothing is shown.
    In the second case, it is allowed to be shown with blank values for Org.assignment.
    Any explanation for this behaviour?

  • Additional field in adhoc query

    Hi all, I need to be able to report on the IT105 subtype 0001 system ID for employees who are withdrawn from the company, however, when someone leaves their IT105 record is delimited so adhoc query will not output anything.  Has anyone coded an additional field that will look at the latest record regardless of the date?
    If you have, please can you share the code with me!?
    Many thanks!

    Hi Tanya ,
    Please find the code below. It is designed for additional structure z105_last which is bassed on P0105 type.
    data l_it_p0105 type standard table of p0105.
    clear: l_it_p0105, z105_last.
    call function 'HR_READ_SUBTYPE'
      exporting
        tclas                 = 'A'
        pernr                 = peras-pernr
        infty                 = '0105'
        subty                 = '0001'   
        begda                 = '18000101'
        endda                 = pn-endda
      tables
        infty_tab             = l_it_p0105
      exceptions
        others                = 1.
    if sy-subrc = 0.
      describe table l_it_p0105.
      read table l_it_p0105 into z105_last index sy-tfill.
    endif.
    Regards,
    Sergey

  • Blank entry in adhoc query

    Hi All,
    Im have created a data source with table joins T001W and T134M.
    Filed MANDT has been maintained when the join condition has been established at Data source level.
    Adhoc query in business rule identifies the deficiency. But some filed in the result has blank entry.
    Attached the screen shot for your reference.
    Can you please let me know, how to fix the blank entry issue.
    Thanks
    Ashok S

    Hello Ashok,
    In this case, you have foundation and plug-in in both systems. I assume you have set data source and business rules in GRC system, am I right?
    If this is the case, you might have several problems as before SP 10 for GRC 10.0, backwards compatibility was not implemented yet. It means that you must follow SAP note 1352498 in order to synchronize your systems.
    If this is not the case, have you checked these values in SCU3 in ECC system?
    Best Regards,
    Fernando

  • Can we call a function module in ADHOC query

    Hi
    Can we call a function module in ADHOC query if yes how.
    Also we ned to know how to call a function module in SAP query.
    An early responce is appreciated.
    Thanks and best regards
    Rajeev

    Okay as far as I understand your aim is:
    To fill a field in the output list with a value that is based on the current line information and calculated by a function module
    So go to SQ02 and create an additional field in the InfoSet.
    You can refer in the coding to the technical names you can see in the left tree window like P0000-PERNR.
    More information is avaiable in the Help part look for additional field in SQ02.
    Regards,
    Michael

  • System unable to read table in Adhoc Query

    Hi Experts,
    I am trying to extract a report based on Infotype 0022 through Adhoc query. Even after maintaining data for IT0022 for a few employees the system is unable to read the educational details of those employees.
    I am unable to trace the defect . can anybody please tell me what could be the reason. I have checked the table PA0022, there the data is been stored.
    Thanks & Regards,
    Smitha

    Hi paul and experts
    actuall im reading data from 0022 infotype .  im using  macro
    rp_provide_from_last p0022 '11' pn-begda pn-endda.
    no data found for this.
    but in pa30 for that particular employee data is there.
    please help me out of this.
    thanks a lot

Maybe you are looking for