Assigning BW Reports to Roles

Hi, I have 200 BW Reports that I need to Assign to 13 Roles. At present the only way I can think of doing it is by trawling through each query one-by-one and publishing to the role from Query Designer.
Can someone tell me if there is a much quicker way of doing this. I cant believe that this is the only way to do this.
Regards
Matt

Hi Tajinder,
Have a look @ S_PROGRAM.
Though you have the report attached to TCODE its good you attach the report to Auth Group.
With the help of the auth group you control who runs the report in SE38 or SA38.
For variant modification, you can achieve that as well using auth group.
S_PROGRAM.,
User action ABAP program.,
SUBMIT - Start the program
BTCSUBMIT - Schedule the program to run as a BG job
VARIANT - Maintain variants (The SUBMIT authorization is necessary here as well, since programs are executed during variant maintenance)
Authorization group ABAP program
Value VARIANT will allow to maintain variants for only those programs in Auth Group.
Read the object documentation for more information.
Thanks.
Regards,
Muthu Kumaran KG

Similar Messages

Assigning a Report to Role

Dear All,
I know many times this question has been asked and answered, but even after following those threads I am not getting solution (of course problem is at my side for sure but that needs to be identified).
I have designed a BEx query , saved it and published it to a role from menu --> Go to Publish --> To Role (say role X). And transferred it to PROD. But still that report is not available in that role. Users who are having this role are not able to view that report.
I followed the steps to check a role for that report.
SUIM --> Authorization --> By Value --> Authorization Object 1 = S_RS_COMP --> RSZCOMPID - Name(ID) of a reporting component = my report name
I can not find my role x over here.
I followed the steps to assign a role to that report.
PFCG --> Entered my role name (say role X) and change --> Authorization --> Change Authorization Data --> Business Information Warehouse --> Business Explorer Components --> Added my reports to Name(ID) of a report component --> Generate and Save it.
But still that report is not available in that role and users can not see that report.
Please guide.
PS: followed threads
Thread Name
Description
assigning bi report to particular role
It explains about how to assign a role to a report. Open query designer, open your query in it, for to menu bar, click on query, go to publish and say publish to role...
BI Folder Roles
This thread is basically for folder role.
Issue while adding BW reports to role menu | SCN
It explains about PFCG.
adding reports(queries) in BI to a role in bex ... | SCN
About roles for queries and workbooks.
Steps to add Query to a role (SAP BW)
A very good step by step explanation for adding a query to role.
Adding report (query & workbook, templates) in roles
Best explanation of two ways to add a report in a role.
Add BW Query into role
Explained easiest way i.e. Open query designer, open your query in it, for to menu bar, click on query, go to publish and say publish to role...
AUTHORIZATION FOR BI REPORTING - Business Intelligence (BusinessObjects) - SCN Wiki
Perfect step by step guidance for authorization for BI reporting
SAP BW BI - PFCG - Añadir Libros en los Roles.avi - YouTube
The simplest video which explains how to use PFCG.

When I follow your steps.
I got an error.
"You do not have the authorization for components report_name".
"Incorrect call of OLAP layer CL_RSR_OLAP;error in BW-BEX-ET()"
Futher it is showign me
Diagnosis
You do not have the authorization for the selected component.
System Response
The selected component cannot be edited.
Procedure
lease speak to the person responsible for authorization, if you require authorization for the editing of this component. The function is protected by the object "Business Explorer - components" with the following fields:
InfoCube ZSD_IS02
Type of a component REP
Component ZSD_IS02_DV_Q001
Activity 16
Message Number BRAIN 800
Please help.
Message was edited by: BI DEVELOPER

Restricting assignment of reports under roles to specific infocubes

Hi,
We have a kind of authorization problem in our BW with respect to roles.
The problem is that users of the BW may assign a new query to any of their assigned roles regardless of which infocube the report is generated from.
Is there anyway to restrict this assignment such that certain roles can only be assigned reports/queries from specific infocubes?
Thanks in advance,
Rasmus

Hi,
I believe that's not possible...
If you give authorization for your user to retrieve queries from InfoCubes A and B, he or she will be able to save them on every role he has access (for instance, roles R and S).
You want:
A --> only to R
B --> only to S
But, as you can see, on S_USER_AGR you specify authorized operations for specific roles, but nothing about object types. So, if you allow adding entries to a role menu user will be able to add whatever object he has access to.
Maybe someone has a workaround... though I believe it's not possible.
Regards,
David.

Urgent: How to add BEx Reports to Role

Dear all,
I have created BEx reports and they are present in INFOAREA tab in Query Designer and Analyser.
Now I want to assign these reports to Role area. I have tried thru tcode PFCG but couldn't find the solution.
Please help me in finding the solution. Its urgent.
Thanks in advance.
Vinod.

hi Vinod,
check
add query in role
you can try,
in PFCG, click '+other', choose 'bw query url', in next screen give description for text and object description =
<bsp_protcl>://<bsp_server>/sap/bw/BEx?sap-language=<language>&bsplanguage=EN&cmd=ldoc&INFOCUBE=infocubename&QUERY=querytechnicalname
or open Query Designer, find your query,
before open the query click button Enter in Role.
select role/folder in which you want to put the query
hope this helps.

Report to fetch assigned transactions for multiple role.

Hi,
I am looking for some report or the way, i can get the list of transaction assigned to multiple roles in one go.
Actually i tried SUIM, but here i have to specify one role at a time and have the list of transactions assigned to it.
My scenario is, i have around 100 composite roles. Now there is a requirment for a report, which gives information of transactions assigned to each role. If i do it one by one, i have to do it for 100 times.
Please suggest the best and quickest way.
Thanks & Regards,
Pravin

> Another way could be to look into the AGR_1251 table for object S_TCODE values. But, this will populate transactions that could possibly not have included intentionally (in the menu). For eg there are many transactions which need authroization for another tcode in the background which have to be inserted as an authroization value.
Which is good, because those are the actual tcode rights, not only the intended ones......
To do this for composites I disagree with Julius on using Excel or Acces
Try the SAP query tools, they're there for you. If you go to the quickviewer (SQVI) you can easily join tables AGR_AGRS and AGR_1251 by AGRNAME. Now if you look for object S_TCODE you can see the relation between a tcode assignment and a composite role.

Issue while adding BW reports to role menu

Hi All,
Today, I was trying to assign a list of BW reports to a partcular role in our project. As i started assigning the reports from menu
tab in PFCG, I observed that all the reports are getting stored with same name "RRMX - Business Warehouse report "
I also observed that all the reports have only one auth obj S_TCODE, when I checked in auth tab.
As, Iam new to BW security, I need guidance here.
->Is it normal for all the reports to get saved with same name in role menu?
->Also, I need to confirm if the reports given to me are already created and active reports, How can i check it?
->Also suggest me the proper way to assign reports to the role.
Regards,
Brahmeshwar.

> ->Is it normal for all the reports to get saved with same name in role menu?
Unfortunately these BW-reports are all started by t-code RRMX. PFCG does not know what is behind RRMX. The t-code in PFCG is always 'RRMX'
> ->Also, I need to confirm if the reports given to me are already created and active reports, How can i check it?
hmmm,.... maybe execute them?
> ->Also suggest me the proper way to assign reports to the role.
well normally simply press the 'add report' button on the menu tab of pfcg, then select as per your choice.
BW-REports (RRMX) are a bit different....
There is a note from BW giving some information for BW-admins who have to work on backend and maintain roles....
note # 316470
b.rgds,
Bernhard

Users assigned to CRM Business Roles

Is there a report that can show what users are assigned to what Web UI business roles. We have business roles assigned to positions and not PFCG roles. If not, what table to show business roles assigned to positions numbers so I can atleast query names on positions that have specific business roles.
Thank You,
Alex

Hi Alex,
Normally the AGR_USERs table through SE16 can give you this output
in AGR_USERS table go and set the ORG_FLAG and COL_FLAG to get the output, you could also do this just for roles
AGR tables.
also if you have a proper naming convention please search by "UIU" string most of the WEBUI roles supplied by SAP has this key word "UIU"
Also you can go through SPRO ("UI Framework") to see the default business roles assigned to the "UIU" roles supplied by SAP.

How to authorize report developer to access role(Save reports in role)

Dears,
I created a role and assigned it to a report developer. This role is restricting the reeport developer the Display Data of InfoCubes and ODSes, and the full authorization for report development. However, when saving the new report, the role is empty. I'm expecting the user in this role has the access to save the report in this role. Any suggestions are appreciated.
B.R
Gerald

Hi Gerald,
In our 3.5 environment, I created roles specifically for this purpose. Within the Authorization Data, I manually added authorization object S_USER_AGR. Here we use activity 01, 02, 03, 06, 08. The Role Name should be the technical name of the role you created for the folder.
If you need clarification, let me know.
Larry

Report on Roles

Report on Roles
Hello,
How do i generate the report by user and their attached roles?
Thank you
Rao

William Culley
2:08pm, May 10
I am having the same issue. I've made the request from Customer Care and they were unable to provide me with the query. Are there any other support options for this information?
Thanks!
I am having the same issue. I've made the request from Customer Care and they were unable to provide me with the query. Are there any other support options for this information? Thanks!

Error assigning users to application Role in Obiee 11.1.1.7.0

Hello
I installed Obiee 11.1.1.7.0 both on Windows and Linux platform and after that, I successfully set Active Directory integration. I have a problem assigning users to Application Role in EM. When I'm trying to search a user on Display name, the Principal userName returned is blank and the error is : Java Null Pointer Exception
After that I install a fresh copy of 11.1.6.0. After AD Integration, I was able to assign users to Application Role. I made 11.1.1.7.0 upgrade and same error has come. I think this is a bug because same AD settings on 11.1.1.6.0 works.
The error:
ava.lang.NullPointerException
#{viewScope.emas_pagemodel_security_EditAppRole.searchPrincipal}: java.lang.NullPointerException
Hide Additional Trace Information
javax.faces.FacesException: #{viewScope.emas_pagemodel_security_EditAppRole.searchPrincipal}: java.lang.NullPointerException at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:118) at org.apache.myfaces.trinidad.component.UIXCommand.broadcast(UIXCommand.java:190) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:92) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96) at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:103) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:92) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96) at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:97) at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.broadcastEvents(LifecycleImpl.java:1086) at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:434) at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:207) at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265) at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227) at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125) at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300) at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.emSDK.license.LicenseFilter.doFilter(LicenseFilter.java:101) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.adf.model.servlet.ADFBindingFilter.doFilter(ADFBindingFilter.java:205) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:128) at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446) at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60) at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446) at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:271) at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:177) at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.help.web.rich.OHWFilter.doFilter(Unknown Source) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.emas.fwk.MASConnectionFilter.doFilter(MASConnectionFilter.java:41) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.adf.library.webapp.LibraryFilter.doFilter(LibraryFilter.java:180) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.eml.app.AuditServletFilter.doFilter(AuditServletFilter.java:179) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.eml.app.EMRepLoginFilter.doFilter(EMRepLoginFilter.java:203) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.core.model.targetauth.EMLangPrefFilter.doFilter(EMLangPrefFilter.java:158) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.core.app.perf.PerfFilter.doFilter(PerfFilter.java:141) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.eml.app.ContextInitFilter.doFilter(ContextInitFilter.java:542) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119) at java.security.AccessController.doPrivileged(Native Method) at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:324) at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:460) at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103) at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171) at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:163) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3715) at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3681) at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321) at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120) at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2277) at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2183) at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1454) at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209) at weblogic.work.ExecuteThread.run(ExecuteThread.java:178) Caused by: javax.faces.el.EvaluationException: java.lang.NullPointerException at org.apache.myfaces.trinidad.component.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:51) at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:102) ... 67 more Caused by: java.lang.NullPointerException at oracle.sysman.emas.model.security.DialogAdminBean$1.compare(DialogAdminBean.java:567) at java.util.Arrays.mergeSort(Arrays.java:1270) at java.util.Arrays.mergeSort(Arrays.java:1281) at java.util.Arrays.sort(Arrays.java:1210) at java.util.Collections.sort(Collections.java:157) at oracle.sysman.emas.model.security.DialogAdminBean.fetchPrincipals(DialogAdminBean.java:563) at oracle.sysman.emas.pagemodel.security.identity.EditAppRolePageModel.searchPrincipal(EditAppRolePageModel.java:496) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at com.sun.el.parser.AstValue.invoke(Unknown Source) at com.sun.el.MethodExpressionImpl.invoke(Unknown Source) at org.apache.myfaces.trinidad.component.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:46) ... 68 more
Any suggestion?
Thx
Gabriel
Edited by: Gabbriel on Apr 23, 2013 10:46 PM

We received from Oracle a work-around of this problem.
It seems to be related to the virtualize flag set to true. I f you set it to false the problem disappear (it works for me).
(rif. http://docs.oracle.com/cd/E28280_01/bi.1111/e10543/privileges.htm#BABDCJBH)
There's an open BUG on this problem: Bug 16808088 - 11G JAVA.LANG.NULLPOINTEREXCEPTION ADDING USER TO ROLE AFTER UPGRADE TO 11.1.1.7.
Hope this works.
S.

Participant Assignment to BPM Process Role

Hi everyone ;
I need to custom application for participant assignment to BPM process role. You know, this operation has been made under Business Process Workspace > Administration Areas > Organization > Roles But this page is not useful for Administrator user. I want to develop an application that it makes set Participant to BPM App Role. But, i haven't any API.
Firstly, is this possible? And than, how can i implement it?
Thanks.

Is restart of the engine server on which ProcessP deployed is the only solution since the error messages shows up as 'Process Execution Engine has not re-synchronized with the Directory Service. '

Reference and Assignment Synchronization Report for FBL5N Transaction

is ther any standard report for ...Reference and Assignment Synchronization Report for FBL5N Transaction.

Hi,
FBL5N is a standard TCode which is used to see Open, Cleared and All line items of customer as per company code.Line items means whatever transaction has been posted to the customer.
These line items may be related to invoices raised against the customer, payments received from customer and advance receipt from customer.
Hope you have understood
Regards
Tapan

Group chart of account assign consolidation report

Hi All,
Group chart of account assign consolidation report is throwing error in SAP. Kindly please let me know the process.
Thanks...
Saravana
Edited by: saravana j on Jan 6, 2010 8:00 AM
Edited by: saravana j on Jan 6, 2010 9:03 AM

Hi,
1. chart of accounts--> common set of accounts.
2. Group of acts--> group chart of acts.
Generally we use common set of acts.
For common set of A/c-->OB13.
For A/C groups>OBD4>new entries> give your chart of A/C, A/C group, name, from A/C and to A/c> SAVE.
Assigning company code to chart of accounts-->OB62.
Thanks.
If this helps you please reward with points.

How to assign Users to process roles?

Hi All,
I have designed a process and I have consolidated all the roles,
when I intiate the process from the runtime workset it asks to assign users to these roles(I have consolidated all the roles to three mail roles). The problem that I am facing is that the user should not see this screen, depending upon the user login id the approvers should be automatically assigned to the respective roles.
Is this possible...
Kindly guide me
Thanks in Advance
Sivaprasath

Hi Sivaprasath,
assuming that I've got you wright you could try to model the following using the callable object "business logic" and the callable object "assign user to process role".
With the help of the first CO you can implement the logic to assign the respective approvers to the users (initiator) and let the processflow go on directing it to the appropriate step where the above mentioned second CO assigns the user to the process role (using the result states of the bussiness logic CO)
At least you are supposed to need an appropriate Parameter that you can consolidate with the User ID.
Just a quick idea, hope this will work with you.
Greetings
Berndt

Reporting Point role autoinstall several times

Hi,
I am using SCCM 2012 R2.
At Central Site there are the following messages at SMS_SRS_REPORTING_POINT component every day:
SMS Executive could not start this component because it could not load \"D:\SMS\bin\x64\srsrp.dll\" using the MFC AfxLoadLibrary() function. The operating system reported error 126: The specified module could not be found.
Possible cause: The DLL was somehow corrupted or deleted.
Solution: Restore the DLL by manually copying it from your installation media to \"D:\SMS\bin\x64\srsrp.dll\".
Possible cause: The file "D:\SMS\bin\x64\srsrp.dll" exists, but something else has changed the permissions or attributes of the file or the directory containing it.
Solution: Restore the file's permissions or attributes so that this ConfigMgr component can access the file.
Possible cause: The DLL depends on another DLL, which does not exist or cannot be found via the PATH environment variable.
Solution: Determine all of the DLLs that this DLL depends on (using Depends.exe from the Win32 SDK) and insure they exist and can be found via the PATH environment variable for the user account that the SMS_EXECUTIVE service runs under.
Site Component Manager is reinstalling this component on this site system.
Site Component Manager successfully reinstalled this component on this site system.
Site Component Manager started this component on this site system.
The Site Server is located at Azure, and D:\ is the Temporary Storage disk.
The questions are:
There are guides/best practices about installing SCCM at Azure?
How would be installed the reporting point role at a server in Azure but not use the Temporary Storage disk?
Is it possible to change settings for reporting point to avoid the use of the Temporary Storage disk and use another disk (normal permanent disk)?
Thanks in advance!

Not that I know. Also, I'm not even sure it's already officially supported;
You could use the NO_SMS_ON_DRIVE.SMS file to prevent the usage of a specific disk (for more information, see:
http://blogs.technet.com/b/configurationmgr/archive/2012/09/17/controlling-configuration-manager-2012-using-hidden-files.aspx);
See previous answer.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Assigning BW Reports to Roles

Similar Messages

Maybe you are looking for