HR data administration and reporting - restricting access

Hello All
We have a single role for HR data adminsitrators. There is no distinction on PA, PSA u2013 no further breakdown u2013 everyone gets to see everything and they have access to change everything. How may we restrict access? Any help would be greatly appreciated.

Hi,
Please let me know if you are using Structural authorizations.
For non-structural security, without any breakdown on PA, PSA, EE groups/subgroups, you may use Organizational key (VDSK1 field of Auth object P_ORIGIN) to restrict the data access.
In the standard configuration, the field is filled with the values of Personnel Area and Cost Center.In Customizing activity, you can set up Organizational Key and define your own rules for the field. Ex: Organizational Key with an employeeu2019s Organizational Unit and Cost Center. It can be configured to include any of the data from Infotype 0001 (Organizational Assignment) within HR.
The Organizational Key essentially provides an additional user-defined field to be used for security restrictions.
Hope it helps!
Thanks,
Sandipan

Similar Messages

Copy data models and reports from BW 3.1 to NW 2004s

Hi experts,
Our client has two BW servers: BW 3.1 and BI 7. BW 3.1 contains lots of data models and reports. And the BI 7 server is newly installed.
Now we want to copy these data models and reports from BW 3.1 to the new BI 7 server. Are there any solutions for this?
Thank you very much in advance.

Hi Frank,
Sounds like a cross version transport is needed.
This is a solution we have used to do what you want to do:-
Create and release a transport as per normal.
Copy and transport the files from the source system (BW 3.1) e.g /usr/sap/trans/data & /usr/sap/trans/cofiles to the same folders on the target system.
Basis help is needed here.
From here onwards using stms_import should help you in the normal manner.
Works a treat.
Have transported the following all correctly appearing as 3.x data models in NW2004s.
DSO objects.
Cubes
Transfer/Update rules
Reports.
Cheers,
Pom

MCTS 70-466 Implementing Data Models and Reports with Microsoft SQL Server 2012

I am searching for training kit for Exam 70-466 (Implementing Data Models and Reports with Microsoft SQL Server 2012) but I think is not published yet. I was expecting its release in Jan or Feb 2014. Would any one can tell me its release date or any place
where I can find this book.
Thanks

Hi Azhar lqbal Gondal,
According to your description, since the issue regards training and certification,
I suggest you post the question in the Learning forums at
http://social.technet.microsoft.com/Forums/en-US/home?category=learning. It is appropriate and more experts will assist you. If you have a specific technical question about Microsoft SQL Server,
you can visit and post your question on the SQL Server Forum.
There is some detail about Exam 70-466 Implementing Data Models and Reports with Microsoft SQL Server 2012, you can review the following articles.
Exam content can be found here:
http://www.microsoft.com/learning/en-us/exam-70-466.aspx
http://borntolearn.mslearn.net/certification/database/w/wiki/525.466-implementing-data-models-and-reports-with-microsoft-sql-server-2012.aspx#fbid=Mn-t6aRhs-H
Regards,
Sofiya Li
Sofiya Li
TechNet Community Support

DB link problem between active Data Guard and report application database

My database version in 11.2.0.2.0 and OS is Oracle Solaris 10 9/10.
I am facing a problem in my Active data guard Database for reporting purpose. Active Data guard information is as below.
SQL> select name, database_role, open_mode from v$database;
NAME DATABASE_ROLE OPEN_MODE
ORCL PHYSICAL STANDBY READ ONLY WITH APPLY
Problem detail is below
I have created a db link (Name: DATADB_LINK) between active data guard and report application database for reporting purpose.
SQL> create database link DATADB_LINK connect to HR identified by hr using 'DRFUNPD';
Database link created.
But when I run a query using db link from my report application database I got this below error.
ORA-01555: snapshot too old: rollback segment number 10 with name "_SYSSMU10_4261549777$" too small
ORA-02063: preceding line from DATADB_LINK
Then I check Active Data Guard database alart log file and get below error
ORA-01555 caused by SQL statement below (SQL ID: 11yj3pucjguc8, Query Duration=1 sec, SCN: 0x0000.07c708c3):SELECT "A2"."BUSINESS_TRANSACTION_REFERENCE","A2"."BUSINESS_TRANSACTION_CODE",MAX(CASE "A1"."TRANS_DATA_KEY" WHEN 'feature' THEN "A1"."TRANS_DATA_VALUE" END ),MAX(CASE "A1"."TRANS_DATA_KEY" WHEN 'otherFeature' THEN "A1"."TRANS_DATA_VALUE" END )
But the interesting point if I run the report query directly in Active Data Guard database, I never got error.
So is it a problem of DB link between active Data Guard and other database?

Fazlul Kabir Mahfuz wrote:
My database version in 11.2.0.2.0 and OS is Oracle Solaris 10 9/10.
I am facing a problem in my Active data guard Database for reporting purpose. Active Data guard information is as below.
SQL> select name, database_role, open_mode from v$database;
NAME DATABASE_ROLE OPEN_MODE
ORCL PHYSICAL STANDBY READ ONLY WITH APPLY
Problem detail is below
I have created a db link (Name: DATADB_LINK) between active data guard and report application database for reporting purpose.
SQL> create database link DATADB_LINK connect to HR identified by hr using 'DRFUNPD';
Database link created.
But when I run a query using db link from my report application database I got this below error.
ORA-01555: snapshot too old: rollback segment number 10 with name "_SYSSMU10_4261549777$" too small
ORA-02063: preceding line from DATADB_LINK
Then I check Active Data Guard database alart log file and get below error
ORA-01555 caused by SQL statement below (SQL ID: 11yj3pucjguc8, Query Duration=1 sec, SCN: 0x0000.07c708c3):SELECT "A2"."BUSINESS_TRANSACTION_REFERENCE","A2"."BUSINESS_TRANSACTION_CODE",MAX(CASE "A1"."TRANS_DATA_KEY" WHEN 'feature' THEN "A1"."TRANS_DATA_VALUE" END ),MAX(CASE "A1"."TRANS_DATA_KEY" WHEN 'otherFeature' THEN "A1"."TRANS_DATA_VALUE" END )
But the interesting point if I run the report query directly in Active Data Guard database, I never got error.
So is it a problem of DB link between active Data Guard and other database?
Check this note which is applicable for your environment
*ORA-01555 on Active Data Guard Standby Database [ID 1273808.1]*
also
http://asktom.oracle.com/pls/asktom/f?p=100:11:0::::P11_QUESTION_ID:8908307196113

Error occurred. Contact the administrator and report the exception ID

Dear All,
We are on EP 7 SP8. We just now performed a system copy and are right now done with the post installation activities. All seems fine but we are having a problem in the Navigation Windown Quick Create link on the left hand side. Here I am always getting an error: Error occurred. Contact the administrator and report the exception ID in the log: 001A4B066A940068000001B500002946000433EB006CFEAC
Can someone please guide me with how to remove this error.
Please let me know as we are stuck and need to give the system to the client.
Thanks a lot in advance.
Best Regards,
Rajeet

Hello
Can you see the defaulttrace file for more details?
Open up Visual Administrator and go to Log Viewer. Then open up the Defaulttrace file. Generate the same error message and look in the file for more details.
What do you see?
And of course.. What did you do to make this error ?
Best Regards
Kristoffer Engh

Data selection and report generation

Hi,
I want to create a report with information about friends. I have a class like this:
public class friend(){
Date born;
Vector phones;
String name;
I have a collection of friends and I want generate a report with some of them. I want to select those friends that verify some restrictions like this:
- Friends with a born date in a range (ej: from 1960 to 1965)
- Friends with the same work phone
- etc.
My solutions is anything like this:
class FriendFilter(){
Friend from_friend;
Friend to_friend;
boolean filter_born=false; // To say if may be aplicated the filter
boolean filter_phone=false;
My question is if there are any pattern for this. Is this solution the best one?
Thank you in advance.

The filter class might look a little different. You need to pass the collection of Friend objects to the filter class. And then you can have the query methods that filter the Friend objects.
public class FriendFilter {
private Collection friends;
FriendFilter(Collection f) {
this.friends = f;
public Collection sortByBirthYear(int beginYear, int endYear) {
public Collection sortByPhoneNumber(int phoneNum) {
}

Course 10778 Implementing Data Models and Reports with Microsoft SQL Server 2012

Hi,
I recently imported the virtual machines for the above-mentioned course. I am running Windows Server 2012 Standard edition on my pc. When I tried the first lab exercise, I could
not open the report in MS Sharepoint Server. The error was to do with the following: "cannot impersonate user for data source 'AdventureWorksDW' ", and also "cannot convert claims identity to windows token sharepoint". I followed all the
steps in the setup guide.
Please assist me with this regard,
Many thanks.

Hi Zimiso,
Based on the error message, it seems that the issue is caused by the incorrect configuration of Claims to Windows Token Service (C2WTS) that it was not running under a domain account.
The domain account used by the Claims to Windows Token Service needs to be granted the following rights through the Local Security Policy:
Act as part of the operating system
Impersonate a client after authentication
Log on as a service
We can find these settings under Administrative Tools > Local Security Policy > Local Policies > User Rights Assignment. Please note that we should add the service account to the local Administrators Groups ahead.
Reference:
http://msdn.microsoft.com/en-us/library/hh231678.aspx
http://blogs.msdn.com/b/psssql/archive/2012/08/20/sharepoint-adventures-reporting-services-claims-and-one-way-trusts.aspx
Hope this helps.
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

Need Data Model and Report Suggestions in Design aspect

Hi all,
I have a requirement as shown below
The reports need to be available on different hierarchy levels with corresponding levels of details. To aggregate the data the standard price is applied as the weighting factor. The STANDARD PRICE should be provided on IDH-VU (plant) level in EUR. The Logic can be seen below:
mat, plt, Forecast, Actual, Absolute Forct Error, STD Price, Wgtd For Error(WFE),Weighted Actuals(WA), Agr Ext Sales FCA
Absolute Forecast Error = ( F-A)
WFE= ( AFE * STD Price)
WA= ( Actual * STD PRICE ) (1-(WFE/WA )
m1, p1,   900,      600 ,          300 ,                               3 ,             3003 = 900 ,           6003=1800,                (1-(300/600))=
m1,p2 , 1000 ,      1200     ,      200 ,                              10 ,                 2000   ,                    12000    ,                  (1-200/1200)
Total
On country level:                                                                     Sum of WFE (SWFE) Sum of WA(SWA)      (1-SWFE/SWA)
Figure 11: Aggregation Logic
The forecast in quantity is multiplied with the STANDARD PRICE per unit. The sum of all weighted forecast, is the aggregated figure for the next level.
HOw to get the value (1-SWFE/SWA) in report and what model i should follow?
Thanks & Regards
Jana
Edited by: Janardhan Karmala on Jan 5, 2012 3:01 PM

Hi Dan,
I have just joined this SAP community. Did you get any solution to your question? We have the same situation in our company too. I suppose Profit Center could be used for this, but ... is it possible to plan by trading partner GL company (intercompany transactions) in Cost Center accounting as well ?
Thank you in advance!

Data Source and Report on new BO

I have a new BO. I have created and activated a new data source for the BO. I can create a report based on this new BO. How can I deploy(assing) the report to my partner work center?

For information, please see [Add a Report List View to a Work Center|https://my020062.sapbydesign.com/sap/a1s/cd/wkt/doc/ktp/Products/A1S_UID/UID_Tool_Environment/UID_Tool_ByDStudio/HT_AssignReporttoWorkCenter.xml?ptc=text%2fhtml&prof=X&COMPONENT=A1S_PDI&INDUSTRY=&LANGUAGE=en&REGION=&RELEASE=300&TASK=CR_VIEW].
Edited by: Helen Fawcett on Jun 11, 2012 8:26 AM

Custom Data Extension and Report execution

Hello guys,
I need some help.
On the reports I'm developing I need to call some complex web services. As such, I developed an data extension in C#, which calls code from a dll. In that dll I'm calling the web services I need, and working on the data in order to get the datatables I need
(this dll is also coded in C#).
One requirement I have is for the web services being called only once. This is required as some web services return data for more than one table on the rendered report, and as such, I don't want to get the same data twice.
In order to do this and to be easier to code, I made the classes that call the web services static. The question is if when two users request different reports, I will have problems with shared variables (which are also static) or if reporting services launch
various threads which won't share the same static classes.
Thanks

Hello,
Thank you for your question.
I am trying to involve someone more familiar with this topic for a further look at this issue. Sometime delay might be expected from the job transferring. Your patience is greatly appreciated.
Thank you for your understanding and support.
Thanks,
Alisa Tang
Alisa Tang
TechNet Community Support

How to design Forms and Reports using Oracle workflow 2.6

Is it possible to design Forms & Reports for Data Entry and
reporting purposes using oracle workflow standalone version?
if so how?.
Please helpme!! is veri urgent.

Con este apellido seguro que entiendes el Espaqol.
Mi empresa esta iniciando un proyecto con la tecnologia que
estas buscando, es decir, Utilizar Forms y Reports para manejar
las APIS de WorkFlow Server, hemos encontardo muchos problemas,
el principal es que la API de WorkFlow es demasiado pequeqa para
manipular todos los procesos de WorkFlow por este motivo nos
hemos visto obligados a acceder a tablas y vistas del modelo de
datos de WorkFlow.
Saludos.

Internet connection say Restricted access"

I have been connecting to the internet via my Airport Base Station for weeks. Now I can connect, but get restricted access message from my ISP. I contacted them, there answer was "we don't support wireless". How was I able to access for weeks thru my Airport if this statement is true? I would really like to use my Airport as phones lines are a problem with my wheelchair. Any help would be appreciated!

swells123 wrote:
I am able to successfully connect to Juno (dial-up) but when I try to open Firefox I get the "restricted access" message from Juno. My Airport Base Station is the only device I am using. At one point I was unable to connect with my internal modem, I thought it had quit so I was connecting with Airport no problem. Now I get the restricted access message, I did not change anything that's why it's a mystery to me. I am not sure what you mean about turning my modem off to get it to redirect to a different device.
You're one of the (presumably) rare people on this discussion board who still uses dial-up. Evidently you're using one of the AirPort units that included a dial-up modem. My comment about your modem presumed that you had broadband service and a broadband modem.
Do you see that "restricted access" message in any other browser than Firefox? Do you see it with every Web page that you try to view with Firefox? Have you tried contacting the Juno people about this?
I"m not sure how relevant this is to your situation, but on this Web page http://ubuntuforums.org/archive/index.php/t-67980.html I found these comments about Juno and the "restricted access" message:
"It would seem that Juno wants you to use their program to connect, and if you try to make a direct connection without their program, you cannot go to any webpages."
"[Juno] made it clear in an email response to me that you can only log on to the Juno servers using their proprietary software."
I'm not sure what options that leaves you.

Restrict Access sometimes works

Using DW CS3 on Mac 10.4.11 & PHP 4.4.7 & MySQL
4.1.21-standard on Apache 1.3.37 on a UNIX server.
I've set up "Log In User" SB. Works fine.
I've set up "Restrict Access" SB on dummy PHP pages (based on
template, but with little content, no other PHP or SBs on the page)
and the "Restrict Access" works just fine.
Then I set "Restrict Access" with PHP pages the contain
RecordSets and other PHP code (using standard DW SB). When I try to
access the page, it just hangs, whether or not I'm logged in.
Any guidance or direction will be GREATLY appreciated!
thanks
Here is the code for a page that does NOT work:

Found the answer to my own question. I changed Line 1 from
"virtual" to "require_once" and everything works fine!

Need help understanding MS SQL Server 2008R2 and Report Builder 3.0 and user access / priviledges.

Having Problems with connections and access. I have spent the last 2 days reading various threads regarding SQL Reporting Services pertaining to access and connections.
First, let me explain what I have done to date.
1) I am using Windows 7 - Home Premium.
2) I downloaded and installed MS SQL Server 2008 R2 Express. This was successful.
3) I downloaded Report Server 3.0 - This was successful.
4) In IE, I tried logging onto http://servername/reports, but this failed. After logging into IE
via ' Run Administrator', I was able to access URL.
Next, I updated the security / trust sites as explained in the
threads
Next, I went to Folder Setting and added my user name and granted all roles (Browser,
Content Manager, My
Reports, Publisher and Report Builder).
5) Now, I can log into Http://servername/reports using my normal windows 7 user account.
6) Next, I opened Report Builder 3.0. However, I am having trouble connecting to report
server. I tried connecting with
http://servername/reports, but this failed.
However, If I change URL to http://servername/reportserver, it works. BUT NOW, I have
another problem. When I
execute the RUN button to create report, I get a permission
error. "PERMISSION GRANTED TO USER ARE
INSUFFICIENT FOR PERFORMING THIS OPERATION".
7) Finally, I can not save reports to http://servername/reportserver when I select "Recent
Site and Servers". ERROR
MESSAGE: UNABLE TO OPEN OR SAVE REPORT
8) In my Reporting Services Configuration Manager:
Web URL = http://servername:80/ReportServer
Report Manager URL = http://servername:80/reports.
What is strange, the Report Manager URL works for IE URL and WEB URL works for
Report Builder connect (Even though it really does not work).
THREE QUESTIONS:
1) What URL should I use to connect in Report Builder.
2) How do I update my normal Windows 7 user so I can run reports when I connect to report
builder.
3) How can I save my reports so they are displayed in IE Reporting services. Note: I was
able to save report to
documents folder and import into IE Reporting Services.
4) And finally, is it possible to add report builder 3.0 as a tab in my IE Reporting Services. I
save seen samples of Reporting Services screens where the instructor has Report Builder
tab.
Thanks
Dan

To answer question 1... it should connect through /ReportServer
http://bretstateham.com/reporting-services-architecture-diagram%E2%80%A6/
Report Builder 3.0 is not a web application, it is a client side application can be used using the click-once or downloaded from Microsoft's website. If you are having issues, you might download and install it and try running it as an administrator.

Restrict access for Vendor Master Data

Hi all.
Our company structure is like below:
Single instance, just one mandant.
Company codes like 1001, 3001, 6002, 6006, etc... over the world.
At some companies just the central administration can create vendor for the companies using the transaction XK01.
Now we need to give access to users from one of our company from other country but we can´t give access to transaction XK01 because just the central administration can create the master data for the vendors.
I already read about the object F_LFA1_AEN that is possible to create some field groups and give access just for the rigth groups. I also read that this authorization groups don´t have effect on the vendor master data like address.
How can I restrict access for the vendor master data? I´m thinking to give access to transaction FK01 and MK01 and restrict access for create a new vendor, I only want that the users can create the data for a new company or new purchase organization.
Thank you
Darlei Friedel

among many other authorization objects, you find following three:
F_LFA1_GEN general data
F_LFA1_BUK company code data
M_LFM1_EKO purchasing org data.
If the user does not have authorization for F_LFA1_GEN , then he cannot maintain general data.

HR data administration and reporting - restricting access

Similar Messages

Maybe you are looking for