Authorisation objects while BI upgrade

Hi Guru's,
We are planing to upgrade our BW system from 3.5 to 7.x. We have some authorisation objects in our system. Before upgrading should we do any consistency check for these objects.
Regards
Savi

Hi,
I need to develop field level authorization.
I need to create BW Role that will restrict access based on region.
I made region as authorisation reveleant.
In BW 3.5
In RSSM i used to create authorisation object based on region and in PRCG i use that authorisation object and restrict it with a value i desired.
What is the procedure in BI 7.0
Thanks

Similar Messages

Upgrade Authorisation Objects between 4.6c and ECC 6.0

Hello Guru's
I am in the early stages of upgrading from 4.6C TO ECC6.0 and I have worked through transaction SU25. During step 2c all of our Z Roles required editing and regenerating, during this step a number of authorisation objects appeared in the roles that I could not find within the individual profiles from SAP_NEW for each release. These objects are F_FAGL_LDR, F_FAGL_SEG, B_BUPA_RLT among others.
Does anyone know how these objects will have been added to the roles at this point in the process ?
Thanks
Simon

When you have finished the conversion of profiles to roles, during the step 2C of transaction SU25, all roles that are affected by newly added authorization checks and must be correspondingly supplemented. Edit and regenerate their authorization profiles. The system assigns the status Profile comparison required to the affected roles. (Step 2C uses a traffic light system to display which roles must be checked after an upgrade. For revised roles, the traffic light is green. For roles that have not yet been revised, the traffic light is red. You can call the report repeatedly without overwriting adjustments that you have already made).
Transaction SU25 would have produced no output for profiles. It makes sense to create the roles beforehand, in order to find out which roles authorization checks have been added for.
·        Call step 2D to find out if transaction codes have been changed in the new release. You can also download this list to a Microsoft Excel sheet and then remove the old transaction codes during the test phase once the testers are satisfied with the new transactions.
Step 2D uses a traffic light system to display which roles have already been revised after the upgrade. For revised roles, the traffic light is green. For roles that have not yet been revised, the traffic light is red. You can switch the traffic light from red to green by double clicking it. You can call the report repeatedly without overwriting adjustments that you have already made.
In Step 2D, you can use the following pushbuttons to add new transactions to roles or to replace old transactions with new ones:
§         Manually adjust menu
You can manually replace or add transactions.
§         Automatically adjust menu
Old transactions are automatically replaced by new ones.
§         Automatically add menu
You can use this function to add the new transactions to each role. The system checks whether the role already contains each individual transaction. It is only added to the role if this is not the case. In this way, the users can continue using the old transactions until they have had time to learn how to use the new ones.
if may be useful rewards point are appreciated

New authorisation object not working after upgrade

Hello there
We have created a new authorisation object ZCODE for the customized transaction codes ZPA20 and ZPA30. This was all fine until the upgrade. Now we can't even access the data e.g. in ZPA20 with SAP_ALL and SAP_NEW profile. It gives an error that says "You have no authorisation..." The trace shows no errors.
Are there any important steps that we've missed after the upgrade?

You might have excluded custom objects from SAP_ALL (see the PRGN_CUST switch for this), or need to regenerate SAP_ALL again (there us a button for this in SU21).
Another possibility is that a field of your custom object is a data element which is now obsolete or changed with the upgrade.
Please provide more infos about the object, and what you have found so far.
Cheers,
Julius
ps: Are ZPA20 and ZPA30 copies of the original PA20 and PA30? The upgrade would have brought in some changes to the standard codes, which might not be (completely, consistently) included in the copies, depending on how you copied them.
Edited by: Julius Bussche on Nov 4, 2008 10:15 PM

Authorisation object for cost center

Hi all,
     I need to know the authorisation object for the field COST CENTER in ME21N(creation of PO) screen. How to find it? Since I am creating roles for users with help of BASIS I need to know it. I need to restrict the values for the cost center field while creating the purchase order.
Thanks in advance.
Regards,
Raj

Hello,
Master Data:
CO: Cost center master      (K_CSKS)
CO: Cost center groups      (K_CSKS_SET)
CO: Cost element master      (K_CSKB)
CO: Cost element groups      (K_CSKA_SET)
CO: Activity type master      (K_CSLA)
CO: Activity type groups      (K_CSLA_SET)
CO: Statistical key figures      (K_KA03)
CO: Stat. key figure groups      (K_KA03_SET)
Planning:
CO: Version      (K_KA09_KVS)
CO: Planner profiles      (K_TKA50)
CO: Cost center planning      (K_CSKS_PLA)
CO: Cost element planning      (K_CSKB_PLA)
CO: Budgeting      (K_CSKS_BUD)
Regards
Mahesh Naik

Authorisation Object in Order & Notification for Partner

Dear All,
Does Maintenance Order or Notification has an Authorisation Object which has Partner as an Authorisation field?
My requirement is to restrict the view & Change Authorisation based on the Partner assigned in the Notification & Order.
Regards,
MLN Prasad

Hi Prasad
One suggetion, Why you are not using the field user responsible for that? Are you give SAP login ID to each service provider to access the SAP from SAP netware? Then Provide him access to IW38 & IW28 & make the partner function USer responsible & make the field requirred field.
While access the report , system will ask the user responsible field to service provid er & service provider will give his user ID & he will get the data for his id only.
I hope this may help you.
regards

Deletion of Authorisation object from many roles

Hi Gurus,
How can we deleted one customized authorisation object included in many roles at once?
Do it one by one is little bit time consuming. Please help me out.
Thanks
Firoz.

>
Jurjen Heeck wrote:
> > You can use CATT/eCATT to record the steps and try it out. While recording you can include a step to click the find button and input the authorization object which you want to delete and then delete it.
>
> I do not think ECATT can handle the correct cursor positioning.
>
> My question to the original poster is:
> How many roles are affected? This gives an idea about the amount of investigation which is reasonable to find a workaround.
I believe it can be done with SECATT using the "find button" to locate the auth object thus addressing the cursor positioning but I will NEVER advise or go the SECATT or ECATT script route for regeneration of roles. I just do NOT trust a script to automatically regenerate a role unless they number in the thousands or several hundreds.
To answer your question, I'll do it one at a time. And as Jurjen pointed out you need to run a query to find out exactly how many roles are affected, you might be pleasantly surprise. Run SE16->AGR_1251 to find out how many auth objects need to be corrected.
Good luck!

What is authorisation object?

hi gurus,
what is authorisation object in bw?
thnaks in advace
srinivas

Hi Srinivas,,
check out this sap help...
http://help.sap.com/saphelp_nw04/helpdata/en/52/6715e3439b11d1896f0000e8322d00/frameset.htm
check out this thread as well....
/thread/267505 [original link is broken]
check this
http://help.sap.com/saphelp_nw2004s/helpdata/en/ce/17533e5ff4d064e10000000a114084/frameset.htm
S_USER_AGR
Authorization system: Check for roles
This authorization object protects roles. The roles combine users into groups to assign various properties to them; in particular, transactions and authorization profiles.
You can use this authorization object together with the authorization objects S_USER_GRP, S_USER_AUT, S_USER_PRO, S_USER_TCD, and S_USER_VAL to set up a distributed user administration.
S_USER_TCD
Authorization system: Transactions in roles
This authorization object determines the transactions that an administrator can assign to a role, and the transactions for which he or she can assign transaction authorization (object S_TCODE).
Note that a user can only maintain ranges of transactions for the S_TCODE authorization object in the Profile Generator if he or she has full authorization for the S_USER_TCD authorization object. Otherwise, he or she can only maintain individual values for the S_TCODE object.
S_USER_TCD
This authorization object determines the transactions that an administrator can assign to a role, and the transactions for which he or she can assign transaction authorization (object S_TCODE).
A user can only maintain ranges of transactions for the S_TCODE authorization object in the Profile Generator if he or she has full authorization for the S_USER_TCD authorization object. Otherwise, he or she can only maintain individual values for the S_TCODE object.
so it gives authority to assign transaction to other users.this object in should be present in role which is assignes to administrator
You cannot make a key figure as authorization relevant but while creating an authorization object you can inculde 1KYFNM object which serves as Authorization object for key figures.
Hope this helps you
****Assign Points If Helpful****
Regards,
Ravikanth

SRM 7.0: Authorisation object? Aliases for services in java portal?

Here's how we did in old SRM 5.0 system (the old and working scenaio):
In SRM 5.0 we employed S_ICF object to determine, whether a particular user who has just logged in to a system via web using a particular alias - is authorised to use this service.
We want external and internal users to use different ways to get into system. We have two aliases:
for internal users: http://srm5.domain.com/srmint
for external users: http://srm5.domain.com/srmext
We make aliases using transaction SICF:
/srmext
/srmint
to service /default_host/sap/bc/gui/sap/its/bbpstart
For alias /srmext we set field SAP Authoriz. = EXT.
For alias /srmint we set field SAP Authoriz. = INT.
We make 2 roles, both containing just a S_ICF auth object with differend values of field ICF_VALUE, an appropriate role to a user. If a particular user logs in to the system using an alias matching to the authorization value set in his role, he gets in, otherwise he gets an error upon logon. So that his logon is only successful if he used the right alias in URL (provided correct login name and password of course).
Question. How do we apply similar scenario in new SRM7?
Is there an authorisation object for java portal in SRM 7.0 - similar to S_ICF object for ABAP portal in SRM 5.0?
Is it possible and how to make an aliases to java portal, or otherwise automatically detrermine at runtime upon logon, which way (which URL or using some parameter in address line) the user has logged in?

This question has been answered by the following blog:
/people/ulli.hoffmann2/blog/2009/10/07/srm-70-running-it-without-the-portal

Populating a authorisation object at runtime...

Hi,
how to populate a authorisation object at runtime? is it possible to have a variable etc that can be populated a runtime?
I have a object zsales_off which has different values for different users. i need to create separate roles just to have different values for sales office for different users. i would like to avoid this by having a single role with the zsales_off getting populated at runtime.
Details steps with code will be appreciated.
thank you.

Hello AHP,
i am not still very clear about the detailed steps to be carried out as i am a novice in abap.
i have created the authorisation variable and am using it in the query. if i manually assign values for sales office in the role, it is working fine.
i want to assign values at run time. i am confused with the process as such.
few doubts like:
1> the variable should be of "authorisation" processing type or "customer exit" processing type.
2>what to use I_step=0 or I_step =1? how to use? where to use?
3>to write a abap code or use a func module, which one? how to use.
any example(like in my case different sales office values for diffrent users) with DETAILED STEPS & CODE would be appreciated.
also i need to have multiple single values for each user(but not interval).
Please help.

How to see the object while moving on the artboard?

hello everyone;
maybe a silly question; how to see the object while moving on the artboard? i dont wanna see only the objects bounding box(outline of the object). i wanna see the object it self. thank you.

What have they gone and messed up now?
When I drag an object (with bounding boxes turned on), the object moves and the bounding box stays still until I stop dragging, upon which it snaps to the object’s new position.
If I don’t have bounding boxes turned on (as I usually work), the object moves when dragged.
If what Bedri says is right, they’ve gone and mended something that wasn’t busted.

I am unable to use services for objects while creating a PO

Hi All,
I am unable to use services for objects while creating a PO ie in me21n / Me22n .
Our client wants to attach some doucument along with the PO, we want to use services for object for this. I use this services for objects in admin level , but unable to use this at user level.
System gives the following message
No service available
Message no. SGOS_MSG002
Regards
Gsg

Hi,
Refer the following OSS notes 552127, 598073
For getting Object for services icon in ME21N and ME51N refer OSS note 913251

Authorisation object for "PO text in the material master"

Hi,
My requirement is as below:
"All users can see the Purchase Order Text as usual, but only a few users should be allowed to create / change the PO Long Text.
For other users, the same should appear in display mode only (both in creation & in change mode, MM01 & MM02)."
Please let me know, How to map this.
As per my knowledge thsi is possible only thru authorisation. But I want to know what is the authorisation object for "PO text in the material master" (Pl note that only for PO text in the material master field). we want control on "PO text of material master"
Regards.
Chinna

Hi,
The authorisation object is "M_MATE_MAT", pl check
Regards
Merwyn

Authorisation object for Supplier field in Shopping Cart

Hi Team,
In Shopping Cart Source of Supply tab field Supplier is not getting displayed as it in hidden for some users, sor those users an authorisation object has to be provided to display the Supplier field.
Can you please Suggest me the authorisation object to be used to display Supplier field in Source of Supply tab of Shopping Cart.
Thanks & Regards,
Goutam Kolluru.

Question is solved.
Answer can be find in bellow link
Field Supplier is not displaying in Shopping Cart with Std Roles SRM 7.0

Runtime error 429, activeX component cant create object while using netbet pro on windows 7 & 8.1 HELP!!!

runtime error 429, activeX component cant create object while using netbet pro
does anyone know what I could do to fix this problem??? netbet pro was't available for a while then it's back but has yet to run

What's netbet pro?
I'd recommend asking questions about third party applications in the vendor's forum, not a Microsoft forum meant for admin scripting.
EDIT: Ah, some gambling website...
Don't retire TechNet! -
(Don't give up yet - 12,950+ strong and growing)

Sharepoint 2003 Message please wait while setup upgrades your sharepoint sites. This may take a few minutes to a few hours depending on the size of your sites.

Hi All,
We have recently installed Service Pack 4 In SharePoint 2003 I,e SPS 2.0 , we ran the stsadm upgrade command from the Command Prompt , since 5 days the upgrading the sites windows showing and does it completes or not or is there some thing wrong ?.
Environment:
SharePoint 2003 Service Pack 3
SharePoint 2003 Message :
Please wait while setup upgrades your sharepoint sites. This may take a few minutes to a few hours depending on the size of your sites.
We have applied in development box it was completed in 8 hours , but when we do the same in production it was never coming back since 5 days. Not sure what happening
Thanks in Advance
Ravishankar Maduri MCTS,MCPD,MCP

how large are your site collections and content databases?
sounds to me like you're WELL past the recommendations, which could certainly cause such an impact.
Scott Brickey
MCTS, MCPD, MCITP
www.sbrickey.com
Strategic Data Systems - for all your SharePoint needs

Authorisation objects while BI upgrade

Similar Messages

Maybe you are looking for