Generation of security reports

What is the best way to create a report with security / privilege data stored in CMS?
Thanks,
Rick P.

Srinvas,
The two databases are separate. The CMS on your RDBMS is part of a relational set of 5 tables designed to work together amongst themselves and with the other dataset that resides in memory while BO is running. The data that you query from in the Query Builder is the other set of data that is kept in memory, with some of the QB data pointing to the CMS RDBMS. Here is a for instance:
I use QB to look at the entries and there is a column called SI_RUID and a value of "Ab.VQHY4Jl1DuYxDS6j_JIc".
I go to my DB server and select * from cms_infoobjects5 where si_ruid='Ab.VQHY4Jl1DuYxDS6j_JIc' and I get one row back, but its value in SI_RUID is "0x41622E56514859344A6C31447559784453366A5F4A4963". I'm thinking that one of these data sets has the hex values for the other, however, the SI_Name is only visible to me in the QB side, not the RDBMS. So, the two work hand-in-hand by some fashion, but it is all treated as metadata at the BO level -- stuff we don't need to worry about, it's just there and it works.
Is there a specific reason that you need to know the SI_Name?
Thanks,
John

Similar Messages

Security Reports - Scheduling daily retrieval

Hi,
I have two questions regarding security reports.
I do Not have Planning audit trails activated(client does not want that.) But I Do need a daily report of all the changes that the Hyperion admin does to the roles and provisioning of groups and users.
Q1.
Of the 3 reports-Security Reports,Artifact Reports,Config Reports ,that are available in Shared services, it seemed that the 'Security Reports' was my best bet as it made me select what I wanted reports on.(eg. Directory Managemet,UserProvisioning in Select Tasks).But when I run the report I see repetitive lines of useless info
eg:
Performed on Performed by Application Artifact Type Artifact Name Task
05/17/2011 admin@native Shared Services User admin@native Authenticate
Attribute Name : Host Info
New Value:UNKNOWN
Access control report only gives me the user/group access and not the changes that were made to them. The Security team at the bank would want to monitor the activities of the Hyperion admin and see what changes were made by her.
Which report shoould I use to get the required info?
Q2.
How do I automate the generation of reoprt such that the members of the security team get the report in their emails daily?
I would appreciate any help that I get on this.
Thanks

Hi,
are we talking about a single report object here or do more than one report objects (Have the same problem)?
Is the empty instance been scheduled with the same user as the one you use to view the report in the infoview?
Have you checked for any error messages in the log files residing in the logging directory in your BOBJ installation directory?
Have you got any service packs (latest SP = SP4) installed on your BOBJ server?
Regards,
Stratos

Generation of access report CNRCRMPRCUST999 failed.

Dear Gurus,
Ive createe one pricing condition table in Dev environment and now Im trying to transport it in Quality environment. This table is for CRM only.
In development every thing working fine but while transporting in Quality I got the error "Generation of access report CNRCRMPRCUST999 failed." And I am Unable to maintain records for the respective condition type I got the error "There are no maximum generated tables for condition type ZXXX".
Please help....
Regards,
Biplab

Hello Singa,
For the error;." there is no entry in the object directory (TADIR) for R3TR TTYP /1CR/RCBSAP017_T"
This mean that Table 017 in R3 is for Application 'M' (Purchasing for Pricing 'A') which is not revelant for download to CRM. If you see the download object DNL_CUST_CNDALL, filters for T681 are on Application V, TX (KAPPL). In the R3 side in T681, have 2 entries for KAPPL= V, and the usage's are E (Rebate) and N (Free Goods). So this might be the reason why it has come to CRM. The relevant tables in CRM for the above are /1CN/CCBSAP017 and /1CN/CCFSAP017. If you see /SAPCND/T681
table for these 2 entries, GESTA field has '5', meaning the tables are downloaded. However, these tables are not used in any free goods condition types or rebate condition types/access sequences in CRM and R3. So I think this table is not being used for rebates and free goods, you can also check the corresponding tables in R3, KOTE017 and KOTN017, which have 0 entries
which indicate that they are not in use, so we can ignore this error.
IPlease also check note 1003793. and restart the customizing download DNL_CUST_CNDALL.
thanks
willie

Error while exporting security report to Excel

Hi
We are using SAP BPC 7.5 MS sp07 version
In our application , particular user is unable to download/export the User security report to Excel.
I am able to do it successfully.
User encounters following error:
Unable to download …ed.ReportViewerWebControl.axd from servername.com
Unable to open this internet side. The requested site is either unavailable or cannot be found.
Please try again later.
can anyone please suggest?
Thanks,
Vanashree.

Thanks Roberto and Kalpana.
This link solved the problem:
http://social.msdn.microsoft.com/Forums/en-US/bcf792f4-4da3-4dac-b689-60168e695683/error-internet-explorer-cannot-download-edreportviewerwebcontrolaxd-from-site?forum=vsreportcontrols

How to add "Team leader" field in standard BPC security report

BPC Expert,
We are using BPC MS 5.0 version.
There is a checkbox in the security setup to make someone a "Team Leader" when you add him/her to a team and this checkbox determines who can post data and who cannot. When we run the user report we see which team the user is in but we do not have visibility to whether or not they are a "Team Leader" which is what business owner needs to see to approve user access.
I figured out "dbo.userteamassign" is the table which hold team leader value. Can anyone please tell me all the steps of adding team leader field in the standard BPC 5.0 security report.
Thanks,
Ketan

Roberto,
Thanks for the response. I know associated steps to declare business user as a team leader but my original question is "how to add a column in standard BPC security report that says who is team leader or who is not".
Do you know the Dtx package that is responsible to supply the data to Standard BPC security report? We can enhance standard data package to pull/display extra "Team leader" column in standard security report.
Appreciate your inputs.
Thanks,
Ketan

Generation of ASH report very slow

Hello,
I'm in 11203, and generation of ASH report is very slow.
AWR and ADDM reports are generated quickly.
To understand what happen, I check the wait event on the session that is executing ASH report, and I found that this session is waiting 99% with "controlfile sequential read".
My question is :
Is there any way to make the generation of ASH report quick ?
Why the generation need to access to the controlfile ?
Thank you a lot.

Hi, Keith.
I tried the pagination scheme "Row Ranges X to Y (with next and previous links)".
This caused the same problem - my page aborts with the error message:
"Internet Explorer cannot open the Intenet site https://oraweb.slac.stanford.edu/apex/slacprod/f?p=116:13:439623456781::NO:::
Operation aborted"
I even removed pagination altogether and still got the same error.
Futhermore, it is sporadic. At times I invoke the report with 500 rows and it
displays without problem. And then, 5 seconds later, I run the re-run the report (again asking to display 500 rows), and it aborts.
This report worked without error (it was "slow", but worked) two weeks ago. But now, it is failing. My gut feeling is that my problem lies with out Oracle
Application Server. I have the feeling that our DBA's have changed some
sort of configuration (a buffer, perhaps) that is causing my problem. Not sure
about this. I guess I'm reaching for straws at this point.
Thanks for your help. It is appreciated.
Elie

List Database Security Reporting and Administration Users

Dear Expert,
Im working with BW 2004s Security Component , I try to find a database table in SE16 that it contain the follow field: Role with your component by Authorization Object. My scope is identify what role is a Secure Reporting Users and Secure Administration Users.
The role has S_RS_COMP and S_RS_COMP1 are Reporting Users. Moreover, the role has Reporting Users S_RS_ADMIWB, S_RS_IOBJ, S_RS_ISOUR, S_RS_ISRCM and S_RS_MRPO
Thank for your help,
Luis

se16-->AGR_HIER
AGR_* will be tables for Roles. Tables SMEN_* are for user favorites.
You can find the information you want in table AGR_HIER.
In this table you can select the role,
In the field REPORT, select RRMX ,this will show you all roles with their workbooks.
AGR_NAME = ROLE (technical name)
REPORT= RRMX
Hope it Helps
Chetan
@CP..

Security Reports in Shared Services

Hi guys,
Could you please help me with a simple question (well, I believe it's easy, but I'm not able to answer it... :))
I'd like to give a user the permission to run security reports, but it's seems he has to be "Shared Services admin" to do so. Is that correct? Can I give him permission to run this kind of reports without giving him the role of "admin"?
I really appreciate your help.
Thank yo!
Regards,
Lu.

Only Shared Services Administrators can generate and view audit reports to track historical changes to the security data.
Refer: Page 86 of http://download.oracle.com/docs/cd/E17236_01/epm.1112/hss_admin.pdf
HTH-
Jasmine.

Security report

Hello,
I was asked to put together somewhat of a draft for a "security report", but I'm unsure as to what values might be useful to report. I'm sure many of you out there have done something similar in the past and I'm not asking for complete ready-made scripts, just ideas as to what to include. I'm thinking failed logins, maybe specific user login, maybe include information about latest CPU version?
We are already using an overall database report showing space usage, alert log messages, invalid objects and such. The security report should complement this.
Best regards.

We are already using an overall database report showing space usage, alert log messages, invalid objects and such. The security report should complement this.-object creation/modification (DDL) detail on daily/weekly basis.
-Terminal detail of user session if auditing enable.
-login time detail after business hrs or failed login attempt.
-password complexity implementation
-database growth if not included in overall database report.
Thanks
Kuljeet Pal Singh

Security report template

I wanted to know some section details available in Security reports template in design doc
i.e.
overview
reviewed\submitted by
Data level
object level
Thanks in advance
October 12, 2010 11:31 AM

overviewWhat type of security you are applying.As the name suggests its overview of security model.
reviewed\submitted byWho has submitted and who has reviewed.
Data levelIt means whether you have applied data level scurity or not.If yes on which group and what are the filters for that group in RPD.You can check filters in permission tab.
object levelIt means whether some of cata;log objects are hidden for some of the groups.You need to check permission in presentation layer as well as in manage previleges.
Regards,
Sandeep

Security report with native roles and the roles they have access to.

We need a security report that shows the Native/Custom Roles and the roles that they have access to.
So, an example would be the role US_Acct, and the report would show what roles that has access to (Post Journals, Consolidate, etc).Can this be done?

Export the Provision report from Shared Services.
Upload report to Excel or Access.
Build Tables to show what tasks each Role has access to.
Build a report that links the provision report and the xref tables.
You should also do this with Security Classes.

Security Report VPN Graph is Blank

VPN Bandwidth
- Even though the VPN Bandwidth Bytes by Day contains data, the graphs are blank.
- SSL VPN graph is working fine.

We found the root cause it was because table "task" does not have records in APPSERVER Database.
Once we updated task table. Security report SEC_LIST_MBR is displaying results correctly.
Regards,
Rajesh

HFM Security Report Automation?

Is there a way to automate the running of the HFM (Hyperion Financial Management) Security Report in Shared Services.?
version: 11.1.2.0
Is this possible with using Task Automation? ---> If yes please provide details
If this possible using other reporting tools like HFR, web analysis..etc ---> This is not recommended
If any other way, Please provide details.
Thanks All!!
Regards,
AVSR

I think the best way to produce custom security files is using the HFM API. You can use this to report on group memberships and roles and class access. You can read all about it in the Web Developer's Guide Chapter 10. The chapter starts:
The HFMwSecurity type library contains the HFMwSecurity component. This component
provides methods that enumerate an application’s security classes, indicate whether a user has
rights to perform a given task, and return other types of security information.
I have seen these used to great effect.

FTP Error when running security reports

Hi,
When running the security report function from:
Informer -
|-Security Reports
|
|- Users,Roles,Profiles,Miscellaneous
Tabs: I get the following msg displayed: FTP site Location, user name,
password not defined
I have requested my basis team to give me the detail, that I can add it
to the config but had the following reply.
Standardbank does not make use of the FTP protocol and thus would not
be used/required.
Please advise what the work around id that I can run these reports.
Regards, Melvin

Harleen
I dont get your answer. This works perfectly in Foreground. What am I supposed to configure to make this work in Background?! Where do I make this config?
Nesimi

Security report SEC_LIST_MBR is not displaying users list

Hi,
When we run security report SEC_LIST_MBR. It is not displaying list of users instead it is just displaying user id who ran the report all other columns Full Name, Teams, Task Profile and Member access are blank.
Please suggest what is causing it not to display list of users.
In database we loaded the following page http://ReportServer/reports and ran report SEC_LIST_MBR. It also gave same result - one row with user id data only.
Regards,
Rajesh

We found the root cause it was because table "task" does not have records in APPSERVER Database.
Once we updated task table. Security report SEC_LIST_MBR is displaying results correctly.
Regards,
Rajesh

Generation of security reports

Similar Messages

Maybe you are looking for