Audit/report on Group Privileges

Hi all,
Does anyone know of a way to report on the permissions given to a particular group, both of whats enabled in Settings-Administration-Manage Privileges and all of the dashboards, reports, etc. a given group has access to.
Something like:
Group X
Access to Dashboards, Granted
Access to Subject area "Data for X", Granted
Catalogue Root/Shared/Dashboards, Read
Thanks in advance

Unfortunately, I'm quite sure you can't do that.
These information are inside the webcatalog.
Thanks to catalog manager, you're able to extract some information and make report with it (ex : the list of reports or dashboard, with owner and so on), but its not available for system properties like permissions.
But if somebody is able to extract, in an other way, these information, it could be great.
Maybe by looking into the files with an xml editor...

Similar Messages

AUDIT action (create, delete, privilege escalation, set and change password from users account and group) users and admins in Solaris 10

Hello.
in Solaris 10 i need auditing process create, delete, privilege escalation, set and change password and etc... from users account and group.
I set settings:
in file syslog.conf:
*.info;mail.none;cron.none;audit.notice            @IP-Remote-syslog-server-SIEM
in file   /etc/security/audit_control:
dir:/var/audit
flags:lo,ad,ex,cc,am,no,fc,fd
minfree:20
naflags:lo
plugin:name=audit_syslog.so;p_flags=lo,ad,ex,cc,am,no
in file   /etc/security/audit_user:
root:lo,ad:no
Now I see in the logs only the fact of a connection via SSH and run processes on behalf of users. Creation. delete users, change passwords for some reason do not is logged.
Many users. For each individual write permissions in the file /etc/security/audit_user not possible, it is likely to forget any new user (or there is a possibility in this file one line to describe the audits for all accounts?)
Where is the mistake?

You are most likely hitting Bug 15779000 user/role/groupadd/mod/del don't audit their use.
And the fix is only available in S11.2.
-- Renaud

Error while running Inventory Audit Report

Hi All,
While running the inventory audit report based on posting date, we get the message,'The report returns too many records for this action and may cause SAP Business One to stop responding for a long time or shut down. Do you want to continue?' Continue, cancel (buttons).'
I have checked SAP Note 1624660 and also https://wiki.sdn.sap.com/wiki/pages/viewpage.action?pageId=98238470
however, no correct solution is provided.
What are the other options that we may use to run this report?? shorten the date range or run by system date??
Any inputs will be appreciated!!
Thanks,
Joseph

Hi!
It would be better if you narrow down your selection like,
More Range of Date with Single Warehouse
Less Range of Date with Multi Warehouse
More Range of Date with Single Item Group
and more....
I have faced a similar issue on Customer Aging for which SAP Support has replied, SAP B1 is a 32 Bit application and when the virtual memory consumption goes beyond a limit (1 GB) ;SAP will close. And they said this is the limitation for all 32 bit applications.

Inventory Audit Report with Batch Number

Hi all.
I am trying to build a query that similar to the inventory audit report but with batch number. I want to know which batch number of each item is being charged out in deliveries or goods issue and which batch of item is being received. I am using SAP B1 2007A. Following is the query that I used to generate the inventory report (warehouse, itemcode, description, price, opening balance, receipt, issue, closing) but I don't know where to get the batch number information for it.
Declare @StrtDate Datetime
Declare @EDate Datetime
Declare @FromDate Datetime
Declare @ToDate Datetime
Declare @Group nvarchar(10)
Declare @Whse nvarchar(10)
Set @FromDate = (Select min(S0.Docdate) from dbo.OINM S0 where S0.Docdate >= @StrtDate)
Set @ToDate = (Select max(S1.Docdate) from dbo.OINM s1 where S1.Docdate <= @EDate)
Set @Whse = (Select Max(s3.Warehouse) from dbo.OINM S3 Where S3.Warehouse = 'QA01')
Select
@Whse as 'Warehouse',
a.Itemcode,
max(a.Dscription) as 'Description',MAX(a.Price) as 'Price',
sum(a.OpeningBalance) as 'OpeningBalance',
sum(a.[IN]) as Receipt,
sum(a.OUT) as Issue,
(sum(a.OpeningBalance) + sum(a.[IN]) - Sum(a.OUT)) as Closing,
MAX(a.Price) * (sum(a.OpeningBalance) + sum(a.[IN]) - Sum(a.OUT)) as ClosingValue
from(
Select
N1.Warehouse,
N1.Itemcode,
N1.Dscription,N1.Price,
(sum(N1.inqty)-sum(n1.outqty)) as 'OpeningBalance',
0 as [IN],
0 as OUT
From dbo.OINM N1
Where
N1.DocDate < @FromDate and N1.Warehouse = @Whse and N1.ItemCode Between '1C2K50NBAC' AND '7S2N40ADAM'
Group By
N1.Warehouse,N1.ItemCode,N1.Dscription,N1.Price
Union All
select
N1.Warehouse,
N1.Itemcode,
N1.Dscription,N1.price,
0 as 'OpeningBalance',
sum(N1.inqty) as [IN],
0 as OUT
From dbo.OINM N1
Where
N1.DocDate >= @FromDate and N1.DocDate <= @ToDate and
N1.Inqty >0
and N1.Warehouse = @Whse
Group By
N1.Warehouse,N1.ItemCode,N1.Dscription,N1.price
Union All
select
N1.Warehouse,
N1.Itemcode,
N1.Dscription,N1.price,
0 as 'OpeningBalance',
0 as [IN],
sum(N1.outqty) as OUT
From dbo.OINM N1
Where
N1.DocDate >= @FromDate and N1.DocDate <=@ToDate and
N1.OutQty > 0
and N1.Warehouse = @Whse
Group By N1.Warehouse,N1.ItemCode,N1.Dscription,N1.price) a, dbo.OITM I1
where a.ItemCode=I1.ItemCode
Group By a.Itemcode
Order By a.Itemcode
I wish to create the report like Inventory audit report merge with the batch number transactions report.
Thanks.

Dear Shobah, it can be possible by some custom report. Try some complementary bi solution for better analysis with SAPB1.

Inventory Audit Report

We used the Inventory Audit Report to determine inventory value ending in a specific period. It seems to work okay but it lists every single item in our inventory.
We are looking for more of a summary report. The only option we have for this is by product category. However, we want it a little more detailed than this.
So, is there any way to show the report summarized by our Style #'s? We have have colors and sizes associated with each style. We do not need to know total for each color and size.
We just want the total for each Style #, which is the first four digits of our Item Code. Theses first four digits are unique for each Style. Can a Query be built to just show this summary?
So...would have the following info...
Style #...Total Items...Total Cost...Most Recent Item Cost
Can something like this be built?
Thanks!!!
Mike

To backdated the history is the most challenge task to complete. Please be patient to check the query results from below:
SELECT Distinct SubString(t0.ItemCode,1,4) 'Style #', Sum(T0.InQty - T0.OutQty) 'Total Items', Sum(T0.InQty - T0.OutQty) *Avg(Case When T1.LastPurPrc = 0 then t2.AvgPrice else T1.LastPurPrc end) 'Total Cost', Sum(T0.TransValue) 'Check', Avg(Case When T1.LastPurPrc = 0 then T2.avgprice else T1.LastPurPrc end) 'Most Recent Item Cost'
FROM OINM t0
Inner Join OITM T1 on T1.ItemCode =T0.ItemCode
Inner Join OITW T2 on T2.ItemCode = t0.ItemCode
WHERE T0.DocDate <= '[%0\]' and T0.InQty != T0.OutQty
Group By SubString(t0.ItemCode,1,4)
Order By SubString(t0.ItemCode,1,4)
I have to get data from OINM table in which to get history quantity is fine but may not be able to find the old value easily.
Thanks,
Gordon

Audit Report Fix (Manual Journal Entries for Inventory)

Hello!
Curious if anyone has been able to fix an inventory audit report using journal entries?
For example: if an item was on inventory account 1500 based on it's item group assignment, then say 20 items are received for $1 each, then 5 are sold at $1 then the item group is switched and now it has an inventory account of 1520 and 5 more items are issued out.
Running the audit report summarizing by accounts will show $15 as the balance in 1500 and -5 in 1520. So when we go to actually check the accounts to reconcile them at the end of a period, our inventory accounts are always off.
I have identified manual journal entries meant to 'fix' a GL account, but these have made the audit report basically unusable for reconciliation.
Is there a way to journalize a change in the inventory accounts while making the change occur in OINM as well??
I have looked through several expert empowerment sessions that acknowledge this as a problem, but do not offer any solutions.
Thanks!
Mike

Hi Mike:
Changing Item groups while inventory is on hand is a problem. I have found a way to correct this, but it is a multi step process. I would try this in DEMO first to make sure you get the proper results.
Try this.
Below is the procedure for correcting the G/L Accounts on your Inventory Audit Report It is complicated and needs to be performed when no other users are in the system. Journal entries will not correct this problem.
Here it is.
1.     Review Inventory Audit Report by Summarize by Accounts for the item.
2.     Do a Misc. Issue to remove the inventory.
3.     Review Inventory Audit Report again.
4.     Change the Acct # on the Item Group for the Inventory Item to match the negative value account number. CAUTION! Make sure that users are not performing transactions on the system when you do this.
5.     Do another Good Receipt for 1 each at price shown in Negative value account number. Enter as a positive number.
6.     Re-run the Inventory Audit to confirm that the negative account has been zeroed out.
7.     Change Item Group Inventory account to remaining positive value account number.
8.     Do an Inventory Issue for quantity of 1 each.
9.     Re-run the Inventory Audit Report for the item. All accounts should now have zero value.
10.     Change Item Group account setting back to correct account for future.
I hope it works for you.
Regards,
Vicki Smith

Stock Audit Report vs Balance Sheet

I am having problems matching the balance sheet to our stock. I presume that the stock audit report is the best report for evaluating our stock but this does not match our balance sheet.
The balance sheet stock looks at 3 accounts, Finished Product, Work in Progress and Raw Materials. I set the audit report to only look at these accounts and to read all groups. I also ticked 'display OB for items/accounts with no transactions'.
This still does not match. The only thing I can surmise is that something has gone wrong or someone has posted something in these accounts to throw it out of balance but if so then I do not know how to find the problem as this could be going back years.
Is there a better stock report / query to use or is there some sort of query that can flag up any obvious errors?
Thanks for your help in anticipation.

Hi,
You can refer SAP Note :
1009070 - How can you identify manual journal entries posted to the inventory G/L account?
Hope this helps,
TVSon

Inventory Audit Report - Zero quantity but with value

Hi All,
Our client are using FIFO costing, due to some backdated transaction we get 0 Qty but the value is not 0 when running Inventory Audit Report base on posting date (system date is fine) at the month end. I understand that the system calculate the cost base on system date and this is system behavior.
So, i just wanted to seek for advice from any expert in accounting especially on costing, will this 0 Qty with value report be accepted by auditor and will it caused any legal issue or this accounting practice is acceptable?
Thanks.

Dear Mr Kong,
From what you said it looks like opening a message for this issue is the appropriate action this time.
The stock group will give you an update on this issue.
Kind Regards,
Marcella Rivi
SAP Business One Forums Team

Zero Quantity, Negative Stock Value in Inventory Audit Report

Hi all,
The Cumulative Quantity of an item has become zero but the Cumulative Value in the Inventory Audit Report displayed as -150. How to adjust it to make it zero?
Kindly advise, thanks.
Regards,
Xavier

HI Xavier,
Mentioned below is teh detail from the note mentioned by J
Symptom
In the Stock Audit Report, generated for a specific warehouse, a value is shown in the 'Cumulative Value' column even if the item does not have quantity.
Cause
Consulting
Solution
The 'Manage Item Cost per Warehouse' setting in the Administration -> System Initialisation -> Company Details -> Basic Initialisation tab determines the information displayed in the Stock Audit Report.
'Manage Item Cost per Warehouse' is selected.
           If this option is selected, each warehouse defined in SAP Business One maintains its own cost. This warehouse cost is calculated whenever there is a movement of the item in the specific warehouse.
           When stocks are issued, the item cost will be from the specific warehouse where the stocks are issued.
           The Stock Audit Report should be viewed per warehouse in order to determine the accurate valuation of the item. The option 'Group by Warehouse' can be used for this purpose.
'Manage Item Cost per Warehouse' is NOT selected.
           If this option is not selected, a single cost is maintained for the item per company. This cost is determined by the movement of the item within all warehouses.
           When stocks are issued, the single item cost determined on the company level will be used.
           When the item cost is calculated per company, a stock value may remain in a warehouse which has zero quantity. However, since the cost is managed across all warehouses this is ok, as long as there is an overall positive quantity.
           If the valuation of the item is required, the Stock Audit Report should be run for all warehouses and not for a specific warehouse. If the report is viewed per warehouse it may not provide an accurate cumulative value of the stock.
           If only the quantity in a specific warehouse needs to be checked then the report can be run per warehouse.
Example:
1. Create new item with standard price 10 in all warehouses, since price is managed per company and not per warehouse.
2. Create goods receipt for this item to two warehouses - quantity 10 to warehouse 01 and quantity 10 to warehouse 02.
3. Create material revaluation, select warehouse 01 (only one warehouse can be selected for posting purposes), and change the price from 10 to 5.
4. Create goods issue from warehouse 02 with issued quantity 10.
5. Run the audit report for this item and:
a) for all warehouses -> cumulative quantity is 10, cumulative value is 50;
b) for warehouse 01 -> cumulative quantity is 10, cumulative value is 0;
c) for warehouse 02 -> cumulative quantity is 0, cumulative value is 50.
For more information see the document 'How to Set Up and Manage a Perpetual Inventory in 2007 A' available in the Documentation Resource Centre (http://service.sap.com/smb/sbo/documentation).
Other terms
Inventory Audit Report, Stock Audit Report, warehouse, cumulative, value, zero, quantity, average cost, System Initialization, per company, use perpetual inventory, SAP Business One

SBO 2007A PL46 - Inventory Audit Report same warehouse exist for twice

Hi All,
Is anyone encounter the same error? As when i trying to generate the Inventory Audit Report for all the warehouses and check the option "Group By Warehouses", i get the results that the same warehouse are appear twice in the report. As for the transactions detail of the warehouse are being split into two portions ... BUT it does not happens to all the items ...
The thing is when i trying to generate the report for an item with same parameter settings EXCEPT to select only single warehouse, then the warehouse is not being split into two ...
Anyone have the idea? I had did some researches in SAP Notes, found there is a similar case for the above error, but it is happened to SBO 2007B and being resolve in PL16 and above.. but cannot find any thing for 2007A about this issue...
Appreciate if anyone of you can provide any feedback on this ...

Hi,
Have you checked SAP Note 1415496? If that applies to your error, it is a bug.
SAP will deliver patches only for selected releases at its own discretion, based on the business impact and the complexity of the implementation.
Thanks,
Gordon

RM Audit Reports Incomplete

I'm having inconsistent results with the Remote Management Audit Reports.
Every time I run a RM Audit report I see increasing numbers of remotes,
and that's a good thing because our Help Desk is being judged based on the
number of remote controls to fix problems before escalating to our Desktop
group. Unfortunately not all attempts are showing up in the reports. I
go to a tech's desktop and watch him perform a remote control (yes, logged
in as himself) but his attempts never show up on the reports. I checked
the ..\system32\auditlog.txt on the target machine and see it logged
there. I had him remote control from my machine (logged in as him) and he
still doesn't show up. I checked the Inventory Database object to ensure
that max records is 100 and expiry time is 180. I created a new user
called ZENTEST and had him login as that user at his desk and at mine and
no attempts for that user ever show up. Still, the RM numbers are
increasing overall and the inventory process is running and STR files are
being processed. Where should I look next? This is very perplexing...

Iretonc,
It appears that in the past few days you have not received a response to your posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at http://support.novell.com in both the "free product support" and "paid product support" drop down boxes.
- You could also try posting your message again. Make sure it is posted in the correct newsgroup. (http://support.novell.com/forums)
If this is a reply to a duplicate posting, please ignore and accept our apologies and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

SM20/SM20N audit report analysis - in background

Hi,
I would like to create an audit log / audit report analysis in background.
I've found an article bu interested to understand if it is the only way to do that ?
article: http://sap.ittoolbox.com/groups/technical-functional/sap-security/security-audit-reports-using-sm20-1019745?cv=expanded
Any idea ?
Dimitry Haritonov

i have not tried it but yes thats what mentioned in the Note 838847
Instructions for Releases 4.6C and 6.20
Creating the RSAU_SELECT_EVENTS program:
Title: "Selection of audit events from the audit files (background variant)"
Type: Executable program
Application: Basis
Package: SECU
Logical database:
See the correction instructions for the source code.
if your question is answered , mark it answered and award the points ..
Regards
dEE

Audit Report Emply

We are currently using Oracle Audit Vault 10.2.0.3 and source database is 10.2.0.4.
We enabled various auditing options like create /drop user, create /drop table, create any user/table privileges.
I have ensured that Oracle Agent and collector is working so is the console. The status is shown Grid in AV COnsole.
But on viewing Audit reports, none of those events are captured. I also refreshed Warehouse couple of times and it was successful.
I do see that Audit vault is captuing all super user options but nothing from normal user.
The audit options in source database:
AUDIT_TRAIL=OS
AUDIT_SYS_OPERATIONS=TRUE
So I think we are missing something basis here as communication to agent is working fine. I do see the records in audit trail also. But somehow they are not getting reflected in AUdit report.
Any clues/options/guidance is highly appreciated.
Viral

Dear viral,
you can resolve your problem by doing following steps,
1) set the environment variables for the AV Server
2) backup the AV database
3) connect as sysdba to the AV database and run :
ALTER SYSTEM SET JOB_QUEUE_PROCESSES=0;
4) Run the following commands in the AV Server environment:
$ cd $ORACLE_HOME/bin
$ ./avmetadata
5) connect as sysdba to the AV database and run:
ALTER SYSTEM SET JOB_QUEUE_PROCESSES=10;
now restart the audit vault server, agent,and source database you will get the audit reports successfully

Is there any OOTB audit report functionality in OAM?

I configure audit policy and audits log to files.
I'm wondering is there any built-in audit report functionality in oam without crystal report or any other outside report tools?

OAM has very limited Audit functionality when it comes to comply the industry standards. It all depends on what exactly you are trying to Audit.
- If you are looking for OAM Components Diagnostics - Refer to Access System - System Management - Diagnostics
- If you are looking to track the access reports of users - Refer to Access System - System Management - Manage Reports. You can create custom reports in this section to track who accessed what and when?
- If you are looking to track the system statistics like number of AU/AZ, LDAP calls, SLA's, Health Monitoring - You can use Oracle Enterprise Manager - Identity Management Pack
http://www.oracle.com/technology/products/oem/prod_focus/idm_mgmt.html
- If you need to track down the changes of what users changed on their profiles and password failures, Group History, Identity/User History, you can go for BI Publisher Reports for OAM. Oracle provides OOTB report templates for most of the reports in OAM. Refer to the Zip file on OAM Home Page
http://www.oracle.com/technology/products/id_mgmt/coreid_acc/index.html
Again, it all depends on your requirement to judge what will be feasible to achieve the desired audit.
Hope this helps !

Audit Reports in Shared Services

Hi guys,
Appreciate if someone could help me with the following query.
I have enabled Auditing for a Planning Application from Administration-> Reporting -> Auditing (tab)
However, when I try to 'View Audit Report' in Shared Services for the same application, it says 'Auditing is Disabled and No Records Audited'. Is there something I'm missing out on?
Dear John, it would be great if you could provide your valuable insight on this.
Thanks & Cheers,
Sahil

1.Using Shared Services Administrator credentials, log in to the Shared Services Console.
2.Select Administration, then Configure Auditing.
3.On the Audit Configuration screen:
a.Select Enable Auditing to activate auditing. If this option is not selected, Shared Services does not support auditing at any level. By default, auditing is disabled.
b.Select Allow Global Settings Override to disable application group and application-level auditing. If this option is selected, application group and application-level task selections are discarded in favor of the global selections.
c.Optional: To remove old audit data from the system, in Purge Data Older than, set the number of days for retaining the audit data and click Purge.
d.From Select Tasks, select the tasks for which audit data is to be preserved. Tasks are categorized based on the applications registered with Shared Services.
e.Click OK.
cheers...!!!

Audit/report on Group Privileges

Similar Messages

Maybe you are looking for