Analysis Authorization In Dev and impact of reports and roles in prod trans

Hello,
We are planning to switch to analysis authorization. We plan to make that change first in Dev and we were wondering what would be the impact on roles and reports we transport from dev (which is switched to Analysis Authorization) to production( on Old authirization) ? We wont transport new things to production till we switch to new auth in Prd.
Thanks a lot,
BP.

Hello
Even if you are transporting the roles from dev to quality and production, the analysis authorization objects will not be checked until you set "current procedure..." in RSCUSTV23.
So there is no harm in transporting the roles and auhotrization until you change the concept to analysis.
regards,
Payal

Similar Messages

How you will see reports last year and till date reports and compare?

How you will see reports last year and till date reports and how you will compare?
sridhar

Hi.
This you can achieve at query level.
I have few question.. First let me know how many KFs you have in the query and based on what characteristic you want to compare the KFs.
Let me assume that you want to compare "SALES" KF for the last and current year.
1) Add the "SALES" KF to the Query.
2) Rename it as "SALES - Prior Year"
3) Copy the above KF and rename the new KF as "SALES - Current Year"
4) In the "SALES - Prior Year", add the date (say, Calendar Date, Fiscal Period, etc.) as per yr requirement. Keep offset as "-1"
5) Do the same for "SALES - Current Year" . No offset.
6) Now create a new formula to find the difference between "SALES - Prior Year" and "SALES - Current Year" .
Hope you got some idea!!
Let me know if anything more is required.
Regards,
Balaji V

Analysis Authorization in BO 4.0 Webi report

Hi All,
I am using BO 4.0 and creating connection from Information Design tool to a BW query using BICS client. This connection is then published to CMC.
We are using SAP authentication and importing the roles from BW system. We have added profiles to this role and these profiles have Analysis Authorization set on Company Code. So one user can access data to one company code and vice versa. Now this works well in Bex Analyzer, but if I try to create a report in Webi, the analysis authorization fails. I went through the forum before posting this question and I found that is in 3.1 version and in most cases using SSO in universe connection solved the problem.
However in 4.0 I am using BICS client and followed the same processes to create a connection but for some reason it doesn't work ? Is this suppose to work differently in 4.0 ?
I have tried:
1. To create connection in Information Design tool using SSO, selecting user ID and password. It doesn't work.
2. Checked the Bex query and it already has Company code as a Characteristic restrictions (I have made it a mandatory variable).
3. Publish the connection to CMC with my Enterprise and SAP ID and in both cases it doesn't work.
Please let me know if anyone encountered a similar issue and what is the best method to resolve this.
(BO 4.0 no service pack or fix pack installed on the system yet)
Thanks - Appreciate your help !
Prasad Rasam

Ingo,
1. To create connection in Information Design tool using SSO, selecting user ID and password. It doesn't work.
>> Correct you need to setup you OLAP Connection with SSO.
>>> What I meant was I created the connections using both the methods, Using SSO it allows me to create a connection. The ID which I am using to create a connection has Admin access to BOBJ system. When I login as a regular user to create a Webi report and select this new connection, it throws an error message 'The DSL Service returned an error: com.businessobjects.dsl.services.workspace.impl.QueryViewAnalyzer$CannotGetCubeFromConnectionException: Cannot get the cube from the connection'
Using the other method to create a connection with User ID and password, I can create a connection and with the normal user login I can connect to the BW query but Analysis Authorization doesn't work.
Ingo : Could you be more specific what you mean here with the different users ? When you say "regular" user are you referring to an SAP credentials or SAP BusinessObjects Enteprrise credentials ?
2. Checked the Bex query and it already has Company code as a Characteristic restrictions (I have made it a mandatory variable).
>> The variable in the BEx query needs to be an authorization variable.
>>> This has already been set as Authorization variable. There is still a question here. If I select the variable as Authorization variable, I cannot set the other parameters in the query properties such as Mandatory variable (as this is greyed out).
Ingo : What other parameters would you like to configure ? Could you perhaps describe the scenario with more details ?
regards
Ingo Hilgefort

My WIFI keeps on disconnecting and even after reporting and suggestion by support the phone hasnt been replaced or repaired under warranty

I think I have had enough. So its been a long time back and forth between me and you. Since I am not getting any solution and same thing you guys are providing me again and again.
I want to take a step back and list down a few things which have happened so far :-
I started chatting with the apple support on this issue starting September - please refer back to your chats on this Serial Number.
I have factory reset my phone like 20 times since then as each time they asked me to follow few steps which made me loose my data as your icloud doesn't work properly as stated by your customer care support people itself that sometimes the back up doesn't happen so please take back up at your laptop too.
Send phone diagnostics by clicking on a link.
reset your WIFI settings
Call apple support after 24 hours of observation.
Next day when same issue occurs then extreme Apology.
Take Back up on computer and Icloud both and contact apple support once its done
Call apple support again.
Factory Reset by erase all contents and setting options. Once one call back again.
wait and analyse for a whole day after setting up apple ID and data.
Wifi Issue stil exists.
Call apple support again
Between all this I had to explain the issue each time to a new representative. This above process I have gone through at least 7-8 times. Please go and refer your call notes.
So finally i got to know after escalating it several times and one of your supervisors told me that the issue is a hardware issue and it can only be replaced as they have tried it all.
Supervisor assured me that he has recommended it to be replaced in notes and asked me to visit a center.
I called in local distributor and set up an appointment, unfortunately couldnt make it. So call them to reschedule as I am working women so i dont have all the time in life to keep interacting with associate after associate so thought of walking in to an apple store near by and lodge a complaint. The supervisor updated me that I have warranty left and it will be replaced without any cost and also if i report and issue in warranty and if apple is not able to resolve it so the warranty stands true until its completely resolved after customer's consent.
I went in to give my phone to the tech support and they kept it for analysis and came back saying the issue doesnt exist. I was getting a disconnection in my WIFI every now and then. My Data plan was always used and i fortunately have a proof of that.
Customer rep told me talk to apple support and if they say we will replace it. One more place added where customer has to go.
Now and back to square one - They say phone is damaged - we cant replace it. First of all the phone is not damaged and you guys are just finding reasons to not replace a faulty phone.
It randomly disconnects and its listed as a known issue on your website too. had this not been listed i would have never thought its the phone. Then I started to observe that its the phone that makes a disconnection and not the WIFI connections as it was everywhere home, office and at friends place.
Best i can do is call you guys when this happens if you guys promise me that the tech employee of apple can come to whatever location i suggest at that point and do not be surprised if the phone behaves normal when the person arrives as its random.
Now you want pictures of my phone and you want to analyse further.

After making an appointment and waiting over a week I was a few minutes late for my appointment I was told by apple I would have to make a new appointment. The shop was Chatswood in Sydney and the manager Mathew was very pathetic. I travelled 1 hour each way and was treated very poorly I must comment and say this was my first Apple devices and I will never understand how come people are buying these devices. The apps seem really good if only the hardware and the support could match. I really wish this manager all his best to Matthew in his next position somewhere else he obviously should not be in the position of managing an Apple store.

New GL implemented, problems in F.01 and trail balance report and balance carry forward.

Dear Friends,
One of the my client recently implemented New GL in the Dev system, and getting posted the documents. now we are facing the many problems in the Dev system.
1. F.01 Financial statement report not generating for the year 2008 to till 2014 fiscal years.
2. the same in trail balance also not generating data form the year 2008 to till 2014 fiscal years.
3.system is asking the carry forward the balances form the 2008 to till, when we try to carry forward the 2008 year amount only forwarding for the all the fiscal year, not adding the other balances.
i went through some forums and i did the some analysis on this, after implementing new GL the table GLT0 was desble, data was not updated in the GLT0 all the data has been moved to FAGLFLEXT table. later i activated the table GLT0 and able to storing the data both the tables.
now i want to see the all my privious year report in the DEV system. all the data is there in the tables expect GLT0. how can i recover reports as well as how can i do the carry forward balances?
even still i have not carry forward for the 2014 balances, those balances also not there in the reports? but data is there in the table.
Please help me on this.
Regards,
Krish

Hello,
balance carry forward is done with TCd.
FAGLGVTR
when you are on SAP nGL.
any further quesitions?
By the way why don´t you do searching?
all the best erwin

I downloaded ios 8 and was bug reporting and it crashes when I log in

I downloaded ios 8.0 on my iPod touch 5 and when I log in to the bug reporter it crashes

Gustavoizzo wrote:
I downloaded ios 8.0 on my iPod touch 5 and when I log in to the bug reporter it crashes
If you're not a developer, aren't you glad that you beat the system?

MRO and Meter Read report and reconciliation

Hi,
I am creating Meter read orders for all MRU's in a portion and need to reconcile the number of orders created and after the read results have been received, i again need to check for how many orders reads have been received and how many are still open.
What is the standard way of doing this. I am aware of using EABL and EABLG. Will again need to understand what is a better way.
Thanks,
Monis Shakeel

we have a custom report which counts the number of orders, & results every day. After a few days the orders are filled (mostly) & business processes monitor the outstanding open orders.
The report is based on the schedule records (TE417 & TE418) as well as the meter reading results tables (EABL/G)
Alternatively: transaction EL32 can be used to monitor meter reading data.
SAP Utilities --> Device Management --> Meter Reading --> Basic Settings --> Define Automatic Monitoring of Meter Reading Data
However we've never used this functionality so I have very limited experience with its subtleties.
user exit EDMLADUE is utilized here.
I'd be interested in any 'better way' you end up pursuing.

Why does Firefox beta keep connecting to 173.194.70.* (google), even when no tabs are open and all data reporting and the built in ggl. search is disabled?

I'm worried of google spying. Connections appear in OS Monitor as ESTABLISHED TCP4 connections on port 80, even in background.

See this article for some suggestions: [[Firefox has just updated tab shows each time you start Firefox]]
See also http://kb.mozillazine.org/Preferences_not_saved and Preferences are not saved

Analysis Authorization and relates issue

Hello all,
I am in the midst of designing authorizations using RSECADMIN transaction.
We have a set of 50 different queries.
In our cube, there are 5 different characteristics, which are authorization relevent.
So, in RSECADMIN, i have created one analysis auth role, included all special and authorization relevent characteristics and maintained the appropriate values.
But when i execute the queries,the desired output is not coming.
- Do i need to create authorization varaibles and included in all my queries ?
- Without including the auth.variabes in queries, is there any other way to restrict the users ?
I though, by assigning the parameters in RSECADMIN, the query will automatically filter the data.
Can you pls help ?
We are on SP19.

Hi,
First of all, The query is always based on a InfoCube. Now, you have 50 different Queries which is based on this InfoCube if I am not wrong as you are not getting any authorization error.
For a query to run, the user should have access to 1. Query, 2. Infocube and 3. Data(All Auth Relevant + 4 Special Objects)
Authorization relevant objects are for an InfoCube which means that these objects are important or key fields for the infocube.
You say that in your case, you have 5 Auth relevant objects which means they are important. But please note that there are more infoObjects in that InfoCube.
Now, when you go to the query design, you can restrict on any object in the InfoCube but it makes more sense that you do it on one of those authorization relevant objects as you have to specify that in the Analysis Authorization where the system can pick up the data easily and give the output.
Again, on the query design, if you have designed the query with processing type "Authorization", then it would automatically pick up (What you mentioned as automatic filtering) the value from the Analysis Authorization which is contained in the user's role for that query which otherwise gives a wide variety of options to chose from where the user has to choose the correct one.
To get the desired output, all the correct variables should be included in the query and user should have access to all the three mentioned above.
May be this gives a clear picture.
Regards,
Prasanna
Edited by: Prasanna Nagaraja on Sep 11, 2009 11:40 PM

Hyperion Reporting and Analysis

Hello Gurus,
So I installed Hyperion (11.1.2.2) foundation services(all componants), essbase(all componants), planning (all componants. well, it was only one componant), Reporting and Analysis framework (web application, services and common libraries. i installed only these two because hyperion planning depends on them), financial management ADM driver (chosen by default when i want to install hyperion reporting and analysis). i installed them and configured them all togather. I'm using a Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production on Windows 2008 SP2 32bits.
Configuration of Reporting and Analysis framework failed, and that caused several problems when i ran the EPM system Diagnosis. this is what i got. Note: I'm gonna list only the errors/warnings in anything other than reporting and Analysis. as for reporting and analysis, i'm gonna list everything. sorry it's so long....
Hyperion Foundation
FAILED HTTP: HTTP Checking availability of HTTP context http://DC-HYPERIONT01:19000/raframework/index.jsp
Error: com.hyperion.cis.utils.BadResponseCodeException: Bad response code with GET method: 404
Recommended Action: Check that the application is started
0 seconds
EPM System Registry
FAILED REG: Registry Next issues are present:
LOGICAL_WEB_APP (id: fa67b59381bd8c85S4cc267951398ff60006S73df):
"webAppType" property missed
"context" property missed
"port" property missed
"SSL_Port" property missed
"isSSL" property missed
"host" property missed
"" child missed
RA_FRAMEWORK (id: fa67b59381bd8c85S4cc267951398ff60006S7bc8):
"applicationId" property missed
"RA_PRODUCT" parent missed
RA_FRAMEWORK (id: fa67b59381bd8c85S4cc267951398ff60006S74c6):
"applicationId" property missed
"DATABASE_CONN" child missed
Error: Checker execution failed.
Recommended Action: Refer to the validation logs for exception details.
Financial Reporting
FAILED REG: Datasource Checking if datasource property exists in the registry
Error: ORA-00942: table or view does not exist
Recommended Action: Refer to the validation logs for exception details.
0 seconds
Reporting and Analysis
FAILED CFG: Configuration Validating that configuration tasks have been completed
Error: EPMVLD-01004: The following configuration tasks have not been completed:
FrameworkServicesConfiguration: Configuration Failed
Recommended Action: Attempt to configure referenced tasks
0 seconds
PASSED DB: Database Connectivity Checking connection to database jdbc:oracle:thin:@dc-hypdbt01.nuqulgroup.loc:1521:hybdb
0 seconds
PASSED SVR: Essbase Java API Launch external checker with next command: D:\install03092012\user_projects\epmsystem1\config\validation\11.1.2.0\launchEssbaseJavaAPI.bat EssbaseJAPIConnect ****** DC-HYPERIONT01:1423 Embedded
5 seconds
PASSED EXT: External Authentication Check Native Directory external authentication provider configuration
0 seconds
PASSED REG: Configuration Checking if product has only one product node in registry.
0 seconds
PASSED RA: Reporting and Analysis Check if Reporting and Analysis Services and corresponding Agent Modules belong to the same host.
Reporting and Analysis Services and corresponding Agent Modules belong to the same host.
0 seconds
FAILED RA: Reporting and Analysis Check if all required RAF properties exist under the RAF Logical Web App component.
Error: Some required properties are not found in the RAF Logical Web App component: WebClient.SmartPages.DefaultSmartPage.PreconfiguredCategories, WebClient.SmartPages.ColorScheme.ColorScheme1.BackgroundColor, WebClient.Applications.DAServlet.OpenNewWindow, WebClient.UserInterface.Localization.localLanguageCode, WebClient.SmartPages.ColorScheme.ColorScheme2.HeaderColor, WebClient.Cache.Objects.HeadlinesPageTTL, WebClient.SmartPages.ColorScheme.ColorScheme0.FooterColor, WebClient.Internal.Cookies.EncryptCookies, WebClient.UserInterface.PortalColor.MainFrame.General.ColorMainWizard, WebClient.SmartPages.ColorScheme.ColorScheme0.HeadingColor, WebClient.UserInterface.Localization.localCountryCode, WebClient.Cache.Domain.DomainInfoTTL, WebClient.SmartPages.ColorScheme.ColorScheme3.BCMessagesColor, WebClient.SmartPages.ColorScheme.ColorScheme2.BackgroundColor, WebClient.SmartPages.ColorScheme.ColorScheme1.Name, RCPDirectoryURL2, WebClient.Cache.Objects.CategoryCacheSize, WebClient.UserInterface.JobOutput.MIMETypeToDisplayForSQRProgramOutput, WebClient.Cache.Objects.TaskListingTTL, WebClient.Cache.Objects.CategoryTTL, SmartViewContext, WebClient.Internal.Transfer.PassDCByStream, WebClient.SmartPages.ColorScheme.ColorScheme2.FooterColor, WebClient.SmartPages.ColorScheme.ColorScheme2.LinkColor, WebClient.SmartPages.ColorScheme.ColorScheme1.BCMessagesColor, WebClient.SmartPages.ColorScheme.ColorScheme0.HeaderColor, OfficeAddinSupport, WebClient.SmartPages.ColorScheme.ColorScheme0.BackgroundColor, WebClient.SmartPages.ColorScheme.ColorScheme1.HeaderColor, WebClient.Applications.iHTML.PollingTimeSec, WebClient.SmartPages.ColorScheme.ColorScheme3.LeftColor, WebClient.Cache.Objects.CacheModifyTTL, WebClient.SmartPages.ColorScheme.ColorScheme1.LeftColor, WebClient.Cache.Objects.CacheListTTL, WebClient.UserInterface.Subscription.ShowSubscriptions, WebClient.SmartPages.ColorScheme.ColorScheme2.LeftColor, WebClient.Diagnostics.Log.Configuration, WebClient.UserInterface.JobOutput.ShowHTMLOutputForSQRPrograms, WebClient.UserInterface.Localization.ShowTimeOrder, WebClient.Applications.DAServlet.DASResponseTimeout, WebClient.Applications.DAServlet.PollingTimeSec, WebClient.UserInterface.Localization.localVariant, WebClient.SmartPages.ColorScheme.ColorScheme0.LinkColor, WebClient.UserInterface.SmartCut.ShowAsLink, WebClient.SmartPages.ColorScheme.ColorScheme3.BackgroundColor, WebClient.UserInterface.JobOutput.ShowSPFOutputForSQRPrograms, WebClient.SmartPages.ColorScheme.ColorScheme3.FontColor, WebClient.SmartPages.ColorScheme.ColorScheme3.LinkColor, WebClient.SmartPages.General.MaxNumberOfInitializedFromPublished, WebClient.Internal.Upload.MaxFileSize, WebClient.SmartPages.ColorScheme.ColorScheme2.RightColor, WebClient.SmartPages.ColorScheme.ColorScheme3.HeadingColor, WebClient.SmartPages.ColorScheme.ColorScheme1.LinkColor, WebClient.SmartPages.ColorScheme.ColorScheme1.HeadingColor, WebClient.SmartPages.ColorScheme.ColorScheme2.HeadingColor, WebClient.UserInterface.Localization.ShowDateOrder, WebClient.Cache.Objects.BrowseQueryTTL, RelatedContentProtocol, WebClient.Cache.Objects.PublishedSmartPagesQueryTTL, WebClient.CorporateWorkspage.Folder, WebClient.UserInterface.PortalColor.MainFrame.General.ColorMainFrame, WebClient.SmartPages.Publish.Location, WebClient.SmartPages.General.MaxNumberOfSmartPages, WebClient.SmartPages.ColorScheme.ColorScheme2.Name, WebClient.SmartPages.ColorScheme.ColorScheme3.Name, WebClient.SmartPages.DefaultSmartPage.DefaultColorScheme, WebClient.Cache.Objects.CacheListSize, WebClient.UserInterface.Configuration.EnableMSReportsIntegration, WebClient.SmartPages.ColorScheme.ColorScheme2.FontColor, WebClient.SmartPages.ColorScheme.ColorScheme2.BCMessagesColor, WebClient.SmartPages.ColorScheme.ColorScheme0.RightColor, WebClient.Internal.Temp.Location, WebClient.SmartPages.ColorScheme.ColorScheme0.BCMessagesColor, WebClient.Applications.iHTML.BQServiceResponseTimeout, RAFVersion, customSmartcutUrl, WebClient.UserInterface.PortalColor.MainFrame.Title.ColorMainTitleUnderline, WebClient.SmartPages.ColorScheme.ColorScheme1.FontColor, WebClient.Applications.iHTML.DiskCachePollingPeriod, WebClient.UserInterface.PortalColor.MainFrame.General.ColorMainWizardBorder, WebClient.Cache.Objects.JobTTL, WebClient.SmartPages.General.ShowHeadings, WebClient.SmartPages.ColorScheme.ColorScheme3.FooterColor, WebClient.Applications.DAServlet.ZAC, Folder0, WebClient.SmartPages.ColorScheme.ColorScheme3.RightColor, WebClient.Cache.Notifications.NotificationQueryTTL, WebClient.Internal.Cookies.KeepCookiesBetweenBrowserSessions, WebClient.SmartPages.DefaultSmartPage.ShowBookmarks, WebClient.SmartPages.DefaultSmartPage.PreconfiguredEmbeddedObjects, WebClient.Cache.Browse.JobOutputSummaryListing, WebClient.SmartPages.DefaultSmartPage.ShowExceptionsDashboard, WebClient.SmartPages.ColorScheme.ColorScheme0.Name, WebClient.UserInterface.PortalColor.MainFrame.Text.ColorMainLinkFont, WebClient.SmartPages.ColorScheme.ColorScheme3.HeaderColor, WebClient.Internal.Redirect.RedirectPolicy, WebClient.SmartPages.ColorScheme.ColorScheme0.LeftColor, WebClient.SmartPages.ColorScheme.ColorScheme1.RightColor, WebClient.UserInterface.PortalColor.MainFrame.Text.ColorMainFont, WebClient.SmartPages.ColorScheme.ColorScheme1.FooterColor, WebClient.UserInterface.Localization.Show24HourTime, WebClient.SmartPages.ColorScheme.ColorScheme0.FontColor.
Recommended Action: Ensure that you ran the config tool and configured the RAF Web App component.
0 seconds
FAILED RA: Reporting and Analysis Check if the Agent (AGENT) components exist.
Error: Components not found.
Recommended Action: Ensure that you ran the config tool and configured the Reporting and Analysis Service component.
0 seconds
WARNING RA: Reporting and Analysis Checker execution failed.
Check if RAF Services are available.
No RAF Services (Agent Module) components found in Registry.
0 seconds
PASSED RA: Reporting and Analysis Check if Job Factory data folder exists.
Data file locations are valid.
0 seconds
PASSED RA: Reporting and Analysis Check if every Agent Module is associated with some Agent.
Every Agent Module is associated with some Agent.
0 seconds
FAILED RA: Reporting and Analysis Check if the Reporting and Analysis Setup (RA_SETUP) component exists.
Error: Components not found.
Recommended Action: Ensure that you ran the config tool and configured the Reporting and Analysis component.
0 seconds
PASSED RA: Reporting and Analysis Check if the RAF Web App (RA_FRAMEWORK_WEB_APP) components exist.
Found: 1. Hosts for the components: DC-HYPERIONT01.
0 seconds
FAILED RA: Reporting and Analysis Check consistency of the Service Agent sets between Registry and V8_SERVICEAGENT.
Error: java.lang.IndexOutOfBoundsException: Index: 0, Size: 0
Recommended Action: Ensure that you ran the config tool and configured the Reporting and Analysis Service component.
0 seconds
FAILED RA: Reporting and Analysis Check consistency of the Service Agent properties between Registry and database tables (V8_SERVICEAGENT, V8_SA_PROPS).
Error: java.lang.IndexOutOfBoundsException: Index: 0, Size: 0
Recommended Action: Ensure that you ran the config tool and configured the Reporting and Analysis Service component.
0 seconds
PASSED RA: Reporting and Analysis Check if Agent Modules and corresponding Agents belong to the same host.
Agent Modules and corresponding Agents belong to the same host.
0 seconds
WARNING RA: Reporting and Analysis Checker execution failed.
Check if all required RAF properties exist under the Reporting and Analysis Setup component.
The Reporting and Analysis Setup component is not found.
0 seconds
PASSED RA: Reporting and Analysis Check if every Agent Module (except IR Log) is associated with some Reporting and Analysis Service(s).
Every Agent Module (except IR Log) is associated with some Reporting and Analysis Service(s).
0 seconds
PASSED RA: Reporting and Analysis Check if Service Broker data folder exists.
Data file locations are valid.
0 seconds
FAILED RA: Reporting and Analysis Check if the Reporting and Analysis Service (RA_SERVICE) components exist.
Error: Components not found.
Recommended Action: Ensure that you ran the config tool and configured the Reporting and Analysis Service component.
0 seconds
FAILED RA: Reporting and Analysis Check if the Agent Module (AGENT_MODULE) components exist.
Error: Components not found.
Recommended Action: Ensure that you ran the config tool and configured the Reporting and Analysis Service component.
0 seconds
PASSED RA: Reporting and Analysis Check if all required Workspace configuration files exist under the RAF Logical Web App component.
All required files exist.
0 seconds
WARNING RA: Reporting and Analysis Checker execution failed.
Check if Agents are available.
No Agent components found in Registry.
0 seconds
PASSED RA: Reporting and Analysis Check if every Reporting and Analysis Service is associated with some Agent Module.
Every Reporting and Analysis Service is associated with some Agent Module.
0 seconds
PASSED RA: Reporting and Analysis Check if Event Server data folder exists.
Data file locations are valid.
0 seconds
PASSED RA: Reporting and Analysis Check if every Agent is associated with some Agent Module(s).
Every Agent is associated with some Agent Module(s).
0 seconds
PASSED RA: Reporting and Analysis Check if the RAF Logical Web App (LOGICAL_WEB_APP) component exists.
Found: 1.
0 seconds
PASSED RA: Reporting and Analysis Check if Repository data folder exists.
Data file locations are valid.
0 seconds
FAILED WA: Essbase connectivity Check connectivity between Web Analysis Server and Essbase Server.
Error: An error occurred while running the check.
Recommended Action: Ensure that: 1) Essbase Server is configured properly and started; 2) Web Analysis Web Application is configured and started.
0 seconds
FAILED WA: HFM connectivity Check connectivity between Web Analysis Server and Financial Management Server.
Error: An error occurred while running the check.
Recommended Action: Ensure that: 1) Financial Management Server is configured properly and started; 2) Web Analysis Web Application is configured and started.
0 seconds
FAILED WA: Login Check the possibility to login on Web Analysis Server.
Error: An error occurred while running the check.
Recommended Action: Ensure that Web Analysis Web Application is configured and started.
0 seconds
PASSED WEB: Web Application Availability of Web application context http://DC-HYPERIONT01:9000/WebAnalysis
0 seconds
Many Many thanks in advance,
Zain

Hello Krishna,
yes, looks like i didn't have moduke 7 downloaded. however after i did and installed it, i still got the following errors that seemed to do with connectivity to RAFRAMEWORK and it's database. I am going to list errors in all modules, except for Reporting and Analysis, i'm going to post everythign else.
Hyperion Foundation
FAILED HTTP: HTTP Checking availability of HTTP context http://DC-HYPERIONT01:19000/raframework/index.jsp
Error: com.hyperion.cis.utils.BadResponseCodeException: Bad response code with GET method: 404
Recommended Action: Check that the application is started
0 seconds
EPM System Registry
FAILED REG: Registry Next issues are present:
LOGICAL_WEB_APP (id: fa67b59381bd8c85S4cc267951398ff60006S73df):
"webAppType" property missed
"context" property missed
"port" property missed
"SSL_Port" property missed
"isSSL" property missed
"host" property missed
"" child missed
RA_FRAMEWORK (id: fa67b59381bd8c85S4cc267951398ff60006S74c6):
"applicationId" property missed
"DATABASE_CONN" child missed
Error: Checker execution failed.
Recommended Action: Refer to the validation logs for exception details.
Financial Reporting
FAILED REG: Datasource Checking if datasource property exists in the registry
Error: Datasource property raframeworkDatasource not found.
Recommended Action: Fix failure manually with epmsys_registry tool.
0 seconds
FAILED REG: Datasource Checking if datasource property exists in the registry
Error: Datasource JNDI property raframeworkDatasourceJNDI not found.
Recommended Action: Fix failure manually with epmsys_registry tool.
0 seconds
Reporting and Analysis
PASSED CFG: Configuration Validating that configuration tasks have been completed
0 seconds
PASSED DB: Database Connectivity Checking connection to database jdbc:oracle:thin:@dc-hypdbt01.nuqulgroup.loc:1521:hybdb
0 seconds
PASSED SVR: Essbase Java API Launch external checker with next command: D:\install03092012\user_projects\epmsystem1\config\validation\11.1.2.0\launchEssbaseJavaAPI.bat EssbaseJAPIConnect ****** DC-HYPERIONT01:1423 Embedded
6 seconds
PASSED EXT: External Authentication Check Native Directory external authentication provider configuration
0 seconds
PASSED REG: Configuration Checking if product has only one product node in registry.
0 seconds
PASSED RA: Reporting and Analysis Check if the RAF Web App (RA_FRAMEWORK_WEB_APP) components exist.
Found: 1. Hosts for the components: DC-HYPERIONT01.
0 seconds
PASSED RA: Reporting and Analysis Check if every Agent Module (except IR Log) is associated with some Reporting and Analysis Service(s).
Every Agent Module (except IR Log) is associated with some Reporting and Analysis Service(s).
0 seconds
PASSED RA: Reporting and Analysis Check if IR BI Services are available.
All IR BI Services are available: IRBI_AGENT_MODULE (Agent on dc-hyperiont01).
0 seconds
PASSED RA: Reporting and Analysis Check if the Reporting and Analysis Service (RA_SERVICE) components exist.
Found: 37.
0 seconds
PASSED RA: Reporting and Analysis Check if the Agent (AGENT) components exist.
Found: 1. Hosts for the components: DC-HYPERIONT01.
0 seconds
FAILED RA: Reporting and Analysis Check consistency of the Service Agent properties between Registry and database tables (V8_SERVICEAGENT, V8_SA_PROPS).
Error: There is inconsistency between Registry and V8_SERVICEAGENT for the following items: JF1, SB1, RM1, ES1.
Recommended Action: Ensure that you ran the config tool and configured the Reporting and Analysis Service component.
0 seconds
PASSED RA: Reporting and Analysis Check if Service Broker data folder exists.
Data file locations are valid.
1 seconds
PASSED RA: Reporting and Analysis Check if the Agent Module (AGENT_MODULE) components exist.
Found: 6.
0 seconds
PASSED RA: Reporting and Analysis Check if Repository data folder exists.
Data file locations are valid.
1 seconds
PASSED RA: Reporting and Analysis Check if IR Job Services are available.
All IR Job Services are available: IRJOB_AGENT_MODULE (Agent on dc-hyperiont01).
0 seconds
PASSED RA: Reporting and Analysis Check if Reporting and Analysis Services and corresponding Agent Modules belong to the same host.
Reporting and Analysis Services and corresponding Agent Modules belong to the same host.
3 seconds
PASSED RA: Reporting and Analysis Check if RAF Services are available.
All RAF Services are available: RAF_AGENT_MODULE (Agent on dc-hyperiont01), RAF_AGENT_MODULE (Agent on dc-hyperiont01).
0 seconds
PASSED RA: Reporting and Analysis Check if IR Log Services are available.
All IR Log Services are available: IRLOG_AGENT_MODULE (Agent on dc-hyperiont01).
0 seconds
PASSED RA: Reporting and Analysis Check if all required Workspace configuration files exist under the RAF Logical Web App component.
All required files exist.
0 seconds
PASSED RA: Reporting and Analysis Check if every Reporting and Analysis Service is associated with some Agent Module.
Every Reporting and Analysis Service is associated with some Agent Module.
1 seconds
PASSED RA: Reporting and Analysis Check consistency of the Service Agent sets between Registry and V8_SERVICEAGENT.
Data in Registry and database are consistent.
0 seconds
PASSED RA: Reporting and Analysis Check if every Agent is associated with some Agent Module(s).
Every Agent is associated with some Agent Module(s).
0 seconds
PASSED RA: Reporting and Analysis Check if every Agent Module is associated with some Agent.
Every Agent Module is associated with some Agent.
0 seconds
FAILED RA: Reporting and Analysis Check if all required RAF properties exist under the RAF Logical Web App component.
Error: Some required properties are not found in the RAF Logical Web App component: WebClient.SmartPages.DefaultSmartPage.PreconfiguredCategories, WebClient.SmartPages.ColorScheme.ColorScheme1.BackgroundColor, WebClient.Applications.DAServlet.OpenNewWindow, WebClient.UserInterface.Localization.localLanguageCode, WebClient.SmartPages.ColorScheme.ColorScheme2.HeaderColor, WebClient.Cache.Objects.HeadlinesPageTTL, WebClient.SmartPages.ColorScheme.ColorScheme0.FooterColor, WebClient.Internal.Cookies.EncryptCookies, WebClient.UserInterface.PortalColor.MainFrame.General.ColorMainWizard, WebClient.SmartPages.ColorScheme.ColorScheme0.HeadingColor, WebClient.UserInterface.Localization.localCountryCode, WebClient.Cache.Domain.DomainInfoTTL, WebClient.SmartPages.ColorScheme.ColorScheme3.BCMessagesColor, WebClient.SmartPages.ColorScheme.ColorScheme2.BackgroundColor, WebClient.SmartPages.ColorScheme.ColorScheme1.Name, RCPDirectoryURL2, WebClient.Cache.Objects.CategoryCacheSize, WebClient.UserInterface.JobOutput.MIMETypeToDisplayForSQRProgramOutput, WebClient.Cache.Objects.TaskListingTTL, WebClient.Cache.Objects.CategoryTTL, SmartViewContext, WebClient.Internal.Transfer.PassDCByStream, WebClient.SmartPages.ColorScheme.ColorScheme2.FooterColor, WebClient.SmartPages.ColorScheme.ColorScheme2.LinkColor, WebClient.SmartPages.ColorScheme.ColorScheme1.BCMessagesColor, WebClient.SmartPages.ColorScheme.ColorScheme0.HeaderColor, OfficeAddinSupport, WebClient.SmartPages.ColorScheme.ColorScheme0.BackgroundColor, WebClient.SmartPages.ColorScheme.ColorScheme1.HeaderColor, WebClient.Applications.iHTML.PollingTimeSec, WebClient.SmartPages.ColorScheme.ColorScheme3.LeftColor, WebClient.Cache.Objects.CacheModifyTTL, WebClient.SmartPages.ColorScheme.ColorScheme1.LeftColor, WebClient.Cache.Objects.CacheListTTL, WebClient.UserInterface.Subscription.ShowSubscriptions, WebClient.SmartPages.ColorScheme.ColorScheme2.LeftColor, WebClient.Diagnostics.Log.Configuration, WebClient.UserInterface.JobOutput.ShowHTMLOutputForSQRPrograms, WebClient.UserInterface.Localization.ShowTimeOrder, WebClient.Applications.DAServlet.DASResponseTimeout, WebClient.Applications.DAServlet.PollingTimeSec, WebClient.UserInterface.Localization.localVariant, WebClient.SmartPages.ColorScheme.ColorScheme0.LinkColor, WebClient.UserInterface.SmartCut.ShowAsLink, WebClient.SmartPages.ColorScheme.ColorScheme3.BackgroundColor, WebClient.UserInterface.JobOutput.ShowSPFOutputForSQRPrograms, WebClient.SmartPages.ColorScheme.ColorScheme3.FontColor, WebClient.SmartPages.ColorScheme.ColorScheme3.LinkColor, WebClient.SmartPages.General.MaxNumberOfInitializedFromPublished, WebClient.Internal.Upload.MaxFileSize, WebClient.SmartPages.ColorScheme.ColorScheme2.RightColor, WebClient.SmartPages.ColorScheme.ColorScheme3.HeadingColor, WebClient.SmartPages.ColorScheme.ColorScheme1.LinkColor, WebClient.SmartPages.ColorScheme.ColorScheme1.HeadingColor, WebClient.SmartPages.ColorScheme.ColorScheme2.HeadingColor, WebClient.UserInterface.Localization.ShowDateOrder, WebClient.Cache.Objects.BrowseQueryTTL, RelatedContentProtocol, WebClient.Cache.Objects.PublishedSmartPagesQueryTTL, WebClient.CorporateWorkspage.Folder, WebClient.UserInterface.PortalColor.MainFrame.General.ColorMainFrame, WebClient.SmartPages.Publish.Location, WebClient.SmartPages.General.MaxNumberOfSmartPages, WebClient.SmartPages.ColorScheme.ColorScheme2.Name, WebClient.SmartPages.ColorScheme.ColorScheme3.Name, WebClient.SmartPages.DefaultSmartPage.DefaultColorScheme, WebClient.Cache.Objects.CacheListSize, WebClient.UserInterface.Configuration.EnableMSReportsIntegration, WebClient.SmartPages.ColorScheme.ColorScheme2.FontColor, WebClient.SmartPages.ColorScheme.ColorScheme2.BCMessagesColor, WebClient.SmartPages.ColorScheme.ColorScheme0.RightColor, WebClient.Internal.Temp.Location, WebClient.SmartPages.ColorScheme.ColorScheme0.BCMessagesColor, WebClient.Applications.iHTML.BQServiceResponseTimeout, RAFVersion, customSmartcutUrl, WebClient.UserInterface.PortalColor.MainFrame.Title.ColorMainTitleUnderline, WebClient.SmartPages.ColorScheme.ColorScheme1.FontColor, WebClient.Applications.iHTML.DiskCachePollingPeriod, WebClient.UserInterface.PortalColor.MainFrame.General.ColorMainWizardBorder, WebClient.Cache.Objects.JobTTL, WebClient.SmartPages.General.ShowHeadings, WebClient.SmartPages.ColorScheme.ColorScheme3.FooterColor, WebClient.Applications.DAServlet.ZAC, Folder0, WebClient.SmartPages.ColorScheme.ColorScheme3.RightColor, WebClient.Cache.Notifications.NotificationQueryTTL, WebClient.Internal.Cookies.KeepCookiesBetweenBrowserSessions, WebClient.SmartPages.DefaultSmartPage.ShowBookmarks, WebClient.SmartPages.DefaultSmartPage.PreconfiguredEmbeddedObjects, WebClient.Cache.Browse.JobOutputSummaryListing, WebClient.SmartPages.DefaultSmartPage.ShowExceptionsDashboard, WebClient.SmartPages.ColorScheme.ColorScheme0.Name, WebClient.UserInterface.PortalColor.MainFrame.Text.ColorMainLinkFont, WebClient.SmartPages.ColorScheme.ColorScheme3.HeaderColor, WebClient.Internal.Redirect.RedirectPolicy, WebClient.SmartPages.ColorScheme.ColorScheme0.LeftColor, WebClient.SmartPages.ColorScheme.ColorScheme1.RightColor, WebClient.UserInterface.PortalColor.MainFrame.Text.ColorMainFont, WebClient.SmartPages.ColorScheme.ColorScheme1.FooterColor, WebClient.UserInterface.Localization.Show24HourTime, WebClient.SmartPages.ColorScheme.ColorScheme0.FontColor.
Recommended Action: Ensure that you ran the config tool and configured the RAF Web App component.
0 seconds
PASSED RA: Reporting and Analysis Check if Job Factory data folder exists.
Data file locations are valid.
1 seconds
PASSED RA: Reporting and Analysis Check if IR DAS Services are available.
All IR DAS Services are available: IRDAS_AGENT_MODULE (Agent on dc-hyperiont01).
0 seconds
PASSED RA: Reporting and Analysis Check if Event Server data folder exists.
Data file locations are valid.
1 seconds
PASSED RA: Reporting and Analysis Check if the Interactive Reporting Product (INTERACTIVE_REPORTING_PRODUCT) component exists.
Found: 1.
0 seconds
FAILED RA: Reporting and Analysis Check if the Reporting and Analysis Setup (RA_SETUP) component exists.
Error: Found: 2, which is more than 1. This indicates some problem.
Recommended Action: Ensure that you ran the config tool and configured the Reporting and Analysis component.
0 seconds
PASSED RA: Reporting and Analysis Check if all required RAF properties exist under the Reporting and Analysis Setup component.
All required properties exist.
0 seconds
PASSED RA: Reporting and Analysis Check if the RAF Logical Web App (LOGICAL_WEB_APP) component exists.
Found: 1.
0 seconds
PASSED RA: Reporting and Analysis Check if Agent Modules and corresponding Agents belong to the same host.
Agent Modules and corresponding Agents belong to the same host.
0 seconds
PASSED RA: Reporting and Analysis Check if Agents are available.
All Agents are available: Agent on dc-hyperiont01.
0 seconds
PASSED SDKC: SDK checker Launch external checker with next command: D:\install03092012\user_projects\epmsystem1\config\validation\11.1.2.0\launchChecker.bat PingBQService ****** localhost 6800
11 seconds
PASSED SDKC: SDK checker Launch external checker with next command: D:\install03092012\user_projects\epmsystem1\config\validation\11.1.2.0\launchChecker.bat FetchCategory ****** localhost 6800 /Sample Content
16 seconds
FAILED WA: Essbase connectivity Check connectivity between Web Analysis Server and Essbase Server.
Error: An error occurred while running the check.
Recommended Action: Ensure that: 1) Essbase Server is configured properly and started; 2) Web Analysis Web Application is configured and started.
0 seconds
FAILED WA: HFM connectivity Check connectivity between Web Analysis Server and Financial Management Server.
Error: An error occurred while running the check.
Recommended Action: Ensure that: 1) Financial Management Server is configured properly and started; 2) Web Analysis Web Application is configured and started.
0 seconds
FAILED WA: Login Check the possibility to login on Web Analysis Server.
Error: An error occurred while running the check.
Recommended Action: Ensure that Web Analysis Web Application is configured and started.
1 seconds
PASSED WEB: Web Application Availability of Web application context http://DC-HYPERIONT01:9000/WebAnalysis
0 seconds
Many many thanks in advance,
Zain

Unable to register Hyperion Reporting and Analysis with Shared Services

Hello everybody,
I'm trying to install and configure Foundation Services in order to schedule Brio Query documents execution and distribution.
IBM DB2 Express has been installed and configured.
Shared Services have been installed and configured.
Reporting and Analysis - System 9 Services have been installed and not yet configured.
Reporting and Analysis - System 9 UI Services have been installed and not yet configured.
When proceeding with Hyperion Reporting and Analysis configuration in registering with Shared Services, provided with the same host, port, user profile and password used for configuring Shared Services, I get the following message:
"An unknown CSS error occured.
Please check that the information entered is correct."
Messages from configtool.log file:
"(Aug 21, 2008, 09:32:32 AM), com.hyperion.cis.config.CmsRegistrationUtil, DEBUG, Getting CSS instance
(Aug 21, 2008, 09:32:32 AM), com.hyperion.cis.config.CmsRegistrationUtil, DEBUG, URL for CSS.xml = https://itblq001.wincor-nixdorf.com:58080/interop/framework/getCSSConfigFile
(Aug 21, 2008, 09:32:32 AM), com.hyperion.cis.config.CmsRegistrationUtil, DEBUG, Authenticate LStoppa user to CSS.
(Aug 21, 2008, 09:32:32 AM), com.hyperion.cis.config.CmsRegistrationUtil, ERROR, Failed to authenticate user = LStoppa"
I can't understand what's happening. May you help me?
Thank you for every hints.
Regards
Lucia

The service runs until I try to confirm the registration while configuring HRA. Then it stops.
Apologies for the simple question, as I am trying to make the whole Hyperion System 9 running with little knowledge of it: how do I log to shared services?
Thanks

Checklist for installation of Financial reporting and web analysis

Hello All,
Can anyone give me a checklist for installation of Financial reporting and web analysis. The checlist should contain the points/information that the installed FR and WA is proper or not. Please let me know if this this is the correct forum for reporting doubts, if not then plz guide me to the correct oracle forum.
Thanks a lot
Ashu

For which version?
Here is the link for 11.1.1.3 EPM Deployment:
http://download.oracle.com/docs/cd/E12825_01/nav/portal_1.htm
And specifically for Reporting and WA:
http://download.oracle.com/docs/cd/E12825_01/epm.111/readme/ra_1111300_readme.html
Hope this helps.
A

Analysis Authorization not working - Empty demarcation

Can someone help me on this Analysis Authorization? I read many threads in SDN, it seems that I followed the correct steps. The restriction on S_RS_COMP is working well but the restriction on the Analysis Authorization is not working. Surely I'm making some mistake, but can't find what's wrong.
I'm a User (say USER_00) in a test system, assigned to a Role (say Z:BI_USER). This is a broad role:
- S_RS_COMP and S_RS_COMP1 have full authorization (*) to all the fields,
- S_RS_AUTH has the BIAUTH field with Name of Authorization = *.
Also I have an InfoArea (ZIA_TEST) and an InfoCube (ZIC_TEST). The IC has some characteristics and key figures. The only authorization relevant characteristic is ZCA_CLI (client). The IC has only 5 lines, one for each client ("CLI_01" to "CLI_05").
Also there's a query (ZQR_TEST) on this IC, with an Authorization Variable (VAR_AUTH_CLI) restricting the characteristic ZCA_CLI.
I'm trying to create a new User and restrict him to this IC and only to the data of client "CLI_01". If it works I'll apply to a production system.
What I did:
1) With tcode SU01 created a new User (USER_01) with no Role neither Analysis Authorization.
2) With tcode PFCG copied the Role Z:BI_USER as Z:ROLE_TEST then made some changes:
a) S_RS_COMP
- Activity = 03 and 16
- InfoArea = ZIA_TEST
- InfoCube = ZIC_TEST
- Type of report component = *
- Name of report component = *.
b) S_RS_COMP1
- Kept * to all fields.
c) S_RS_AUTH
- I inactivated and deleted this Authorization Object.
(I don't want to keep characteristic values restriction inside the role. The idea is to associate different users to the same role, allowing them to see the same ICs and execute the same queries. And differentiate wich characteristic values each one can see by manually associating different analysis authorization to each one.).
3) With tcode RSECAUTH I created an Analysis Authorization (Z_AA_CLI_01) to restrict access only to client "CLI_01":
- ZCA_CLI = "CLI_01"
- 0TCAACTVT = "03"
- 0TCAIPROV = "ZIC_TEST"
- 0TCAVALID = "*".
4) With tcode PFCG I assigned User "USER_01" to the Role " Z:ROLE_TEST" and made Complete Comparison.
5) With tcode RSU01 I manually assigned Analysis Authorization " Z_AA_CLI_01" to User "USER_01".
It seems to me that these steps are enough. But:
a) When I log as USER_00 and go to tcode RSRT2, searching by InfoAreas I can see all the InfoAreas and all the InfoCubes, select and execute the query. That's OK.
b) When I log as USER_01 and go to RSRT2, searching by InfoAreas I can see only ZIA_TEST and under it I can see only ZIC_TEST. That's OK. Then I select and execute the query.
Wich means that S_RS_COMP is OK and each user is assigned to the correct Role.
c) The problem is that in both cases the query brings data from all Clients.
Under Information and Variable Values (when I run with HTML display) the message is "Empty demarcation".
I changed the variable to be Ready for Input, just to see wich values it brings. In both cases (as USER_00 and as USER_01) in the Variable Screen it brings all the 5 Clients from the IC and I can select and execute any value.
So the problem is with the Analysis Authorization or with the Variable, but I can't find what's wrong.
Any help will be very appreciated.
César

OK Marc, it worked.
Sorry for not answering earlier, but I could get back to this front only some days ago, then began testing your suggestions.
1) Security Concept
Authorization Mode was set to "Obsolete Concept with RSR Authorization Objects" (it would never work with this setting).
I changed to "Current Procedure with Analysis Authorizations".
Anyway, what's the function of this setting? Do old Reporting Authorizations work with "Current Procedure with Analysis Authorizations" setting?
2) Variable Representation
With "Multiple Single Values" it really led to problems.
With "Selection Option" it worked well.
3) 0TCAKYFNM
I don't understand why, but if the AA doesn't have the char/dimension 0TCAKYFNM, when the User tries to run the query (tcode RSRT2) it accuses "You do not have sufficient authorization".
Info Cube ZIC_VE95 has two KFs (ZKF_QTL95 and ZKF_VLT95). These KFs are used only on this IC (also in the KF Catalog, but it doesn't impact). This IC is used only on Query ZQR_VE95 (also in Transformation and DTP, wich doesn't impact).
Well, I inserted 0TCAKYFNM and it worked, either with CP, "*" or with EQ, the two KFs.
4) Authorization Policy Definition
The situation I'm working on is very typical. Ex.: Some users are Administrators, Managers, Operator 1, Operator 2 and so on. Each Role needs authorization to access some queries. At the same time, they can access information only of the Cost Centers to wich they are related.
There are many ways to implement it (I tested some of them and they worked well). My point is to define a most practical way, easy to understand and to maintain.
I'm now sympathetic to this way:
a) Create functional Roles (ex.: "Administrator", "Manager", "Operator 1", "Operator 2" and so on) defining only the Queries (or Info Areas, Info Providers, etc) each Role needs. No S_RS_AUTH definition.
b) Create Char Value Roles (ex.: "CC_100_to_199", "CC_200_to_299", etc), only with S_RS_AUTH definition, each one associated with a corresponding AA (ex.: AA for CC 100 to 199, AA for CC 200 to 299 and so on).
c) Create Composite Roles associating functional and char value Roles. Ex. Composite Role "Administrator for CC 100 to 199", composed of the Roles "Administrator" and "CC_100_to_199".
d) Associate Users to the Composite Roles.
Anyway, I'd appreciate if you could indicate some literature (blogs, articles, etc) on this theme.
Well, thank you very much for your answers. Now I can go on with my studies on this subject.
César Menezes

Need analysis authorization help

Hello Gurus,
Could someone please help me out with my Analysis Authorization issue?
We have a BW query and workbook outputting "Tcode usage" like the following:
UserGroup| Username| Tcodename| Frequency
This one has been running long time without any problems in reporting authorization, but now We want to get it restricted and only allow data associated group HR to display using new Analysis authorization. The scenario for this report is as follows:
1. Rsecadmin >Maintenance> Create New authorization "Group" which consists of 4 characteristics: 0TCAACTVT, 0TCAIPROV, 0TCAVALID and 0TCTUSRGRP(which is the characteristic about group name and already authorizatio relevant). Set 0TCTUSRGRP "EQ HR".
2.Assigned this authorization to a role using PFCG through the S_RS_AUTH. Other authorization objects in this role are: S_BDS_D, S_BDS_DS, S_RS_MPRO, S_RSEC, S_RS_COMP, S_RS_COMP1, S_RS_HIER, S_RS_ICUBE, S_RS_ODSO.
3.In BEx analyzer, set type: Characteristic Values and Variable filled from authorization and value "Selection Option". Unselected "ready for input". Put the characteristic associated with group name to filter windown on the top righ hand side of the Query Designer. Also compare users in PFCG.
The question is the I still get all data about all groups. Looks like the authorization group doesn't work. I used the "execute as " and get no errors back.
Note: I didn't use "generation" to create the new authorization in Rsecadmin
Thank you very much for any answers!
Haifeng

I guess i have found the reason why my authorization dosen't work. I don't activate infoObjects 0TCA* and 0TCT* and infoCubes 0TCA* as well. But another thing I am confused about is :
Should I activate HR and CO businees content for authorizations 0TCA_DS02OTCA_DS05 and 0CCA_O010CCA_O03 before i get started? or should i run generation everytime i create a new authorization using Maintenance in Rsecadmin?
Haifeng

Query Level Analysis Authorization

Experts,
I have a requirement to provide Analysis Authorizations at a QUERY level. For example, I have two analysis authorizations: (1) Org Unit and (2) Material Number. I populate each of these Analysis Authorizations using a BEx Variable (through RSECAUTH) and customer exit "EXIT_SAPLRRS0_001". In the user exit I look up what authorizations the user has for each field in a custom table. For example, User A has access to Org Unit ORG1 and Materials M1, M2, M3. User B has access to Org Unit ORG2 and Materials M4, M6, M8. The Analysis Authorizations are assigned to the users via S_RS_AUTH object and it works perfectly.
However, we now have a new report, where we would like continue restricting the user to ORG1 but allow them to see ALL Materials. But this requirement is only for a couple of reports. All other reports should continue to enforce BOTH restrictions.
I don't see a way to determine which query the user is running. In the user exit for normal variable exits, I can reference the field i_s_rkb1d-compid which has the query technical name. But when filling the authorization variable in I_STEP = 0, that field is not populated.
Has anyone experienced a way to create authorizations at a query level? Is there an SAP InfoObject like 0TCAACTVT where I can specify a query name? Your help is greatly appreciated. Thanks!
J

Hi,
SAP BW Authorization is definitely different from R/3 authorization. Why? Well, first, R/3 authorization usually involves up to the transaction code level. But for SAP BW, the mostly used transaction is "RSA1" and "RRMX". Therefore, authorization based on transaction code alone, is definitely not sufficient.
So how do we design authorization in SAP BW? There's a few authorization objects that relates to SAP BW.
For reporting, you will most probably use the following SAP BW authorization object:
S_RS_COMP - Reporting Component, here is where you control the query authorization blah blah.
S_RS_COMP1 - Reporting Component Owner, you can control users to only be able to access report created by Power Users, here.
S_RS_FOLD - Disable/Enable the 'InfoAreas' button.
Besides that, you will also need to configure the following authorizations:
S_RS_ICUBE - Infocube authorization
S_RS_ODSO - ODS Objects
S_RS_HIER - Hierarchy Authorization
For SAP BW administration purposes, aside from the above, you also need to configure the following authorization objects:
S_RS_ADMWB - Administrator Workbench
S_RS_IOBJ - Info Objects authorization
S_RS_ISOURCE - Transaction Infosource
S_RS_ISRCM - Master Data Infosource
There that's what you need for authorization. Anyway, to achieve "field level" authorization like those in R/3, you can create a customize object, select the infoobject that has been set "authorization relevant", and add it in the authorization matrix, and walla, you got "field level" authorization.
and refer the below link,
Re: BI 7.0 Analysis authorization- How to control
Hope it helps you,
Regards,
Ravindra.

Analysis Authorization In Dev and impact of reports and roles in prod trans

Similar Messages

Maybe you are looking for