Business Objects Authorization

Hi Gurus,
We are planning to implement Business Objects XI in 2 of our projects. In one of our projects data is stored in SAP BW cubes and in the other project we have data stored directly in SQL.
I have tried to investigate in detail for authorization concept in both enviroments but I could not find much. I heard it is possible to use existing authorization concept developed in BW but I do not know if this is correct.
Now my questions are the following:
1 - Is it possible to use existing BW authorization concept in Business Objects reporting?
2- In general how authorization issue is handled in Business Objects regarding SQL, Oracle, etc?
3- I would appreciate if you can recommend / send some documents
I really appreciate your help and thanks in advance for your valuable support.
Thanks and best regards,
Arda.

Hi,
comments inlined:
1 - Is it possible to use existing BW authorization concept in Business Objects reporting?
>> yes by using SSO and Server side Trust you can leverage the authorizations configured in you BI System without the need to replicate them
2- In general how authorization issue is handled in Business Objects regarding SQL, Oracle, etc?
>> that depends on your choice. there are also options to define data level security in a Universe.
3- I would appreciate if you can recommend / send some documents
>> take a look at the documentation for the Universe Designer and the SAP integration Kit available on help.sap.com
Ingo

Similar Messages

  • Is it possible to assgin authorization object to business object

    Hi, Experts, Is it possible to assgin authorization object to business object to get secutiry control

    Hello jrockman li ,
    I recommend to post this query to the [BusinessObjects Enterprise Administration|BI Platform; forum.
    This forum is dedicated to topics related to administration and configuration of BusinessObjects Enterprise, BusinessObjects Edge, and Crystal Reports Server.
    It is monitored by qualified technicians and you will get a faster response there.
    Also, all BOE Administration queries remain in one place and thus can be easily searched in one place.
    Best regards,
    Falk

  • Getting error while testing "create" operation of a business object!

    Hi Experts,
       I have created a composition application. This contains only one business object called Reservation.
       It has a structure containing following fields:
      <UL>
       <LI> Key      -- Key field
       <LI>Reservation_No   -- Key field
       <LI>Create_Date
       <LI>Create_Time
       <LI> Status
       <LI>Source
       <LI>createdAt
       <LI>createdBy
       <LI>modifiedAt
       <LI>modifiedBy
       </UL>
       Here following fields are created by system.
    <UL>
       <LI>Key   
       <LI>createdAt
       <LI>createdBy
       <LI>modifiedAt
       <LI>modifiedBy
    </UL>
       The system also created many operations on the business object. Some on them are mentioned below.
    <UL>
      <LI>create
      <LI>delete
      <LI>findAll
    </UL>
    <UL> <LI>I built and deployed the business object. When I test the service and create a new entry in the business object I got the error below:
    </LI>
    </UL>
    <UL> <LI>
    <I>Failed to save BusinessObjectNode element: User XXX has no create authorization for object ID </I>
    </LI>
    </UL>
    <UL> <LI>
    How do i resolve this?
    </LI>
    </UL>
    Thanks
    Gopal
    Edited by: gopalkrishna baliga on Aug 12, 2010 1:13 PM
    Edited by: gopalkrishna baliga on Aug 12, 2010 1:21 PM

    Hi,
    Has this issue of yours been resolved?
    If yes, Kindly guide us how it was resolved, since we too are facing a similar issue.
    Thanks
    Rajeev Parmar

  • Authorisation in Business Objects Explorer Infospaces created on BEx query

    Hello,
    We have installed Business Objects Explorer, created Universe on BEx query and created a Explorer Infospace on that universe. everything works fine but the authorisations created for the user in BEx query are not taken into consideration when I login using SAP username "leveraging" SSO.
    Is Explorer not designed to consider authorisations in BEX query?
    Whats happening during Indexing of an Infospace? Will the system save the data in Business Objects repository from the source of the data?
    Thanks in advance.
    /Suman

    Hi Suman,
    You are right , Explorer is not designed to leverage Authorisations in SAP BW.
    Polestar is indexing data and keeping it out side of BW.  Although you can log in with SSO , it doesn't check the authorization according to BW, it shows everything indexed.
    You can have a workaround if the case is simple such as;
    Suppose you have 3 region , you can create 3 infospaces and give these authorizations to users from CMC.
    But if you really want to use all features of authorization in BW , it is impossible for now.
    Regards,
    Ozan Eroglu

  • Add extra Business Objects to model CRM 2007: Web Client Records

    Hello,
    Could anyone tell me how I can add more Reference Objects in Case Management?
    I copied the model CRM 2007: Web Client Records and added a new node (with for example Business Object Service Order) just like product and installations (which are visible under the reference objects)
    I created a new element type under SCMG_SP_CASE_RECORD --> Z_CRM_SPS_CASE_RECORD and in the customizing we attached the model to the case type under Case Management --> Extended Customizing --> Process Actions --> Assign Action Profile to Case Type.
    Still the new Business Object in the model isn't visible under Case Management in de WebUI.
    Could anyone tell me if I'm missing something or is there a config guide available how to add more business objects?
    Looking forward to your replies.
    Kind regards,
    Joost Christenhusz

    Eddie,
    Are you familiar with Access Control Engine (ACE)?
    Go through this -> http://help.sap.com/saphelp_crm50/helpdata/en/04/0177f9bb67ac4cafb84bb4d4c1d8fc/content.htm.
    and https://websmp205.sap-ag.de/~sapdownload/011000358700002121742006E.
    Authorizations in CRM are controlled through ACE.
    Hope this helps.
    Amar.

  • Query on SAP Business Object and Content shipment..

    I know about SAP Business Suite... & SAP Business One... But what is :
    1. SAP Business Object and
    2. Content Shipment
    The definitions on the SAP Release & Maintenance Strategy and other docs on SDN were not too clear for my understanding. I want to know why are they used / where are they applied ? E.g: if you have a SAP BW system.. why would you need SAP BW Content ? where does it fit in the picture and what purpose does it serve...
    (PS: it would be great if someone can share the product / functionality details of their landscape where these systems are used, how does it benefit the business operations and any other purpose of having them... )
    Thanks,

    Hi Ashim,
    If your client want it to be done in one database, then the answer is no if you do not have any add-on or SDK codes.  Most difficult part is authorization since I believe what you mean project here is not the same as project center in B1,
    If your client allow more than one database, then the configuration will be easy.
    Thanks,
    Gordon

  • Problem connecting SAP IS-U (ECC 6.0) with Business Objects Edge 3.1

    Dear all,
    I'm trying to connect to a SAP ECC 6.0 System (SAP IS-U) with Business Objects 3.1 (for example with Crystal Reports). I have installed the SAP RFC SDK on the ECC server and have imported these transport files:
    Open SQL reporting objects
    InfoSet reporting objects
    Row Level Security Tool
    Security functions
    Cluster Definition Editor
    But CR keeps returning this error "You do not have the necessary rights to design reports against the SAP System". I've read a few threads about that problem here. I couldn't find a specific "ABAP transport" - did I miss to import anything else?
    Is there any way to check whether the transport files work as they are supposed to? Like the MDX parser connection test for SAP Business Warehouse.
    Any other suggestions?
    thanks in advance!

    Hi,
    I read about these authorization tasks in some other thread, but didn't know what to do.
    But now I found the auth. object in the transaction SU21.
    Since I cannot edit SAP_ALL I created another profile in transaction PFCG (just in case someone else is still messing with that problem) and added all activities of ZSEGREPORT ans S_RFC.
    After that I added the profile to the users in question.
    Now everything works like a charm.
    Thanks alot!

  • Business Object XI 3.1 Integration with Siebel CRM 8.1.1.1

    Hi Experts,
    We are planning to Integrate Business Objects XI 3.1 with Siebel CRM 8.1.1.1.
    Our requirement would be creating BO Universes on top of Siebel CRM Business Layer (Business Components) and expose these Universe for Ad-hoc reporting using Web Intelligence at InfoView portal. In addition we would like to leverage Siebel CRM Authentication and authorizations (positions) as well with Integration Kit.
    Found some of docs on BO with Siebel integration using crystal designer. But not on creation of Universe and then WebI Reports.
    And also found that Siebel Web Desktop for Ad-hoc reporting within Siebel portal. Not sure how it is similar to BO Web Intelligence reporting.
    Can any one please guide us the different possible options to achieve this requirement.
    Regards,
    Ravi Kumar Garre
    Edited by: Ravi Kumar Garre on Jan 27, 2010 5:56 PM
    Edited by: Ravi Kumar Garre on Jan 27, 2010 6:03 PM

    Hi Paul,
    I've left SAP on March 31th, 2011, so my information may not be 100% accurate.
    As far as I know, in Business Objects Suite XI4.0, there will no longer be Siebel Integration kit.
    Instead, Siebel related integration features are moved back into core products such as Crystal Reports and BOE.
    This means, you no longer need to have an installer for Siebel integration kit, when you installed Crystal Reports, it will bring you to Siebel connectivity after you install Crystal Reports. So does BOE.
    The similar approach applies to other integration kits as well such as SAP, PeopleSoft, JD Edwards, Oracle EBS.
    In Crystal Reports and BOE XI4.0, the Siebel integration feature remains with some improvements (check the product document for detail when you get XI4.0 BOBJ suite.)
    For Webi/Universe accessing Siebel request, I have no further update since then.
    You may want to go through your sales representitive/support channel to raise enhancement request/new feature request officially and get feedback.
    Hope this helps.
    Thanks and Regards
    Carlos Chen

  • Re:Examples of objects authorizations linked only to S_TCODE

    Hi there,
    Please let me know of examples of Transactions that are linked only to object authorization S_TCODE which grant access to Create/Maintain processes.
    Thank You

    There is no reason for anyone to have SAP_ALL or anything the like.
    The approach should NOT be you telling them why not, but the people who say they want it to build a business case why they need it and that should be approved by the BUSINESS Controller or an other person of similar seniority BEFORE even thinking of such a wide access.
    So the answer to your question, let the requester do their job properly, if it is an auditor as sugegsted by teh other answer, do not trust someone with such a poor knowledge of security on your system!!!

  • Business Object Creation for OBN:

    Hi
    I am a very new user of the SAP EP.
    I believe i have EP 6.0 on my machine.(How do i find out which release of EP I am using ?)
    As part of my first step towards learning OBN, I tried to create a folder under "Business Objects". But, I do not get any screen/message, when I right click on the Business Objects and say New Folder.
    What authorizations / permissions are required for the same ?
    Thanks for the help.
    Best Regards
    Prasad

    Hi Prasad,
    To see the version of portal click on
    System administration->support->version.In Version you can see the portal version ,J2ee details and KM details.
    <b>Plz don forget points, if it helped.</b>
    Thanks,
    Harish.

  • Business Objects Design Studio

    I am working on a report on Business Objects Design Studio,
    Please help me out with the below two issues,
    1. I want to display user name after Welcome message. The user name should be of the person who is logged into the SAP warehouse currently.
    2. The corresponding user should only view those option, reports that he has access to.
    Please suggest me the approach to work on this scenario

    Thanks Tammy for the reply. I have posted the same question in my second post, that's why I used the same thread.
    What I am trying to do is,
    I am trying to figure out a web item equivalent to role menu (of Web Application Designer) in Business Objects Design Studio.
    Currently we are using BW 3.5 role menu to display BW 7.0 web template links. As SAP will no longer support role menu web item, I have to find a similar alternative, I am trying to look for a similar authorization (role menu) in Design Studio. All this is required so that if one user has access to only 3 reports then he should get only 3 reports displayed in the index page for all reports i.e main page for accessing all reports.
    Also, i would greatly appreciate if you could please provide some more inputs on Design Studio Backend authorizations .

  • How to restrict permissions for individual business object fields?

    I know that ACE can restrict permissions (read/write/delete) for entire business objects (Business Partner, Opportunity, Activity...).
    Is it possible to assign security permissions (read/write) to individual attributes of business objects? For example, I want that some users could not view phone number for Business Partner.

    We had similar requirement for transaction but that was more to do edit or non-edit authorization at field level, but i feel this will work for your scenario too.
    First there is no standard tool available to do this, so, you'll have to create your own authorization objects in transaction SU21 (Basis will be able to do that) lets say ZAUTHOBJ, and then assign permitted activities for this object i.e. create/generate, change, display. Then you this authorization object in UI coding to check the permission level and give access at field level. Don't forget to assign this object to your PFCG role.
    I'm not technical so can't tell you where to put the code on UI (may be some prepare output method), your tech team will be able to help you.
    Also, its good idea to have seperate auth object for each field you want to restrict because of scalability in future.
    Hope this gives you some idea...
    Regards,
    Vikas

  • Business Objects connect to  Solution Manager system?

    Hi
    1.How to Monitor Business Objects in SM?
    2.How to Connet Business Objects to SM?
    Please let me know if ther are any SIM or PDF for configuration of BOJ for SM.
    Regards,
    Neni

    1)     Install the specified Microsoft security patch in accordance with the instructions in SAP Note 1375494 in BOBJ Server
    2)     Download SAPHOSTAGENT711_56-20006321.SAR and uncared.
    3)     The login user requires authorization to create a service. To set this specific authorization, do the following:
    a.     On the Microsoft Windows host, choose Start Control Panel  Administrative Tools  Local Security Policy .
    b.     In the navigation bar, choose Security Settings  Local Policies  User Rights Assignment , and then double-click the line Log on as a service.
    c.     Add the login user to the list by choosing the Add User or Groupu2026 button and entering this user.
    4)     SAP HOSTAGENT version 7.11 instead 7.20. Then again upgraded to 7.20 version
    5)     Downloaded the attached file ewa4boe.zip in SAP Note 1393207 onto C:\EWA folder of BOBJ server and extracted.  As administration user, executed the batch script enable_ewa_monitoring.bat by invoking enable_ewa_monitoring.bat
    I hope this resolves

  • Scheduling Options(CMC)/ Business Objects Xir2

    Environment spec:
    Aix 5.3
    Business Objects Xir2
    Crystal reports Xi
    DB2
    Tomcat
    Whilst scheduling a report from the CMC, there is a 'Schedule For' tab
    I am trying to determine how this option works, whilst scheduling for a selected group/users.
    I have reviewed the relevant documentation in the Business Objects Administrators guides in reference to this including Xi, XiR2 and XiR3/3.1.
    There is no clear definition.
    I asked this question, as we are trying to determine if whilst using this option does BO execute the query and then filter data according to each group/user  OR execute the query for each specific user/group. If the latter is the case then this will have a big impact on our environment resources.
    unfortunately we have reach EOL for Business Objects XiR2 so tech support will no longer advise us.
    If anyone can provide us with any insight or direction this will be greatly appreciated
    Many thanks

    HI,
    Option u2018Schedule foru2019 is generally used when you want schedule  the reports on behalf of other users such that when underlying queries hit the database, they use the useru2019s id and pull the data based on his authorization over the data.
    With SAP BW as backend, the impact can easily be seen where a report will show different dataset if run for two different sap user who different data access. Same should be the case with other databases as well.
    Thanks,

  • Installation Business Objects

    Hi,
    I want to install the business objects. I´ve the B.O XI for SAP solutions and Xcelsius.
    Where can download this programs? On SMP?
    More thanks

    http://www.service.sap.com/swdc
    you'll have to login with you s-user id with download authorizations
    Business Objects Downloads->Installations and Upgrades->SBOP Enterprise
    Download the installation guide as well which will guide you the install process...Pretty straight forward..

Maybe you are looking for

  • ITunes 10.6.3.25

    How do I back up my iTunes library when I don't have an external hard drive?  I have looked at support and it says something about CD's in earlier versions of iTunes but this option is not available in the version I have so what do I do?

  • Redo log file is full or not

    Hi everybody, In Oracle I wanna know the current capacity of a log group, so I will know/estimate when it will be switched. For example, I have three log groups 1, 2 and 3, each log group has only 1 member of size 10MB. So I want to check how full th

  • Outputting each letter in a string twice

    hello, im very new to java. how would i go about writing a program which takes the user's input as a string, then out puts it the string twice. For example, if the user inputs : twice it would outout : ttwwiiccee i know of i would have to use while l

  • Day wise Production stock

    Hi, I am a SD consultant and looking for the following details, I need to develop a report in which I need to show the 1. daily opening stock, 2. day wise production stock, 3. Available stock for the day (this will be step 1 plus step 2) 4. open orde

  • 2 BPEL Processes doing Read at same directory in File Adapter.

    Hi, I am using File Adapter for Read operation. Normally we would make a Logical Directory for reading files at that location. There is a design design scenario where 2 BPEL processes will need to read file from same File location. Incase such a desi