Authorisation on 0ORGUNIT Hierarchy
Hi Everyone,
I have a requirement wherein I need to assign authorisation to each employee as per his/her ORGUNIT. We have a hierarchy on ORGUNIT and the authorisation should be such that the employee should be able to see the data from his ORGUNIT and all the from all the ORGUNITs which are below his node in the hierarchy.
ORGUNIT is an attribute of EMPLOYEE. I've created an authorisation object on ORGUNIT and created a hierarchy authorisation structure. Now I'd like this Authorisation object to pickup the ORGUNIT values from the EMPLOYEE master data when I assign the Authorisation object to a certain EMPLOYEE instead of me creating an Auth. object for each ORGUNIT node in the hierarchy and assigning it to each EMPLOYEE manually.
I'd like to automate it so that the ORGUNIT is picked up from the EMPLOYEE master data. Any ideas how I can achieve this?
Thanks,
Ram
Edited by: Ram Pandey on Jul 23, 2009 6:06 PM
Alright Ram,
There are standard DSO that do this for you. Look at the following:
http://help.sap.com/saphelp_nw2004s/helpdata/en/01/a7fb3a72a05546e10000000a114084/frameset.htm
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/business-intelligence/a-c/bw_hr%20authorization%20-%20asap%20for%20bw%20accelerator
cheers,
Nick
Similar Messages
-
0ORGUNIT Hierarchy load failure in BW, Source system : CRM
Hi Experts,
From last 3 days 0ORGUNIT hierarchy load was failing.Iam getting below messages.
Node 25047465 already exists
Node 25034957 already exists
Node ID 00006105,Char.Value 25081567,exists several times under node id 00003508
Node ID 00005752, Char Value 25081567,exists several times under node id 00003150
1. Assuming that node values were changed,in order to bring AS IS how hierarchy is there in source and fresh reload will correct the duplications, I have deleted existinsg Hierarchy,and tried to reload Hierarchy from CRM system. But now i am not able load and getting same error and my old Hierarchy also deleted.
2.Could you please help how we can check the 0ORGUNIT hierarchy in CRM system, I have checked through Tcode PPOSE, There i'm not getting any duplication of records i.e i have single value for the respctive Char Value.
3.We cannot check Hierarchy data through RSA3 or in the PSA how can we check how we are getting data from source system
Looking for your Help
Sree.
Edited by: Sree216 on Oct 3, 2011 3:50 PMHi Sree,
Seems like Hierarchy structure is not correct in CRM. I have seen this issue, but loading data from another client (Where structure is correct) usually resolved my issue.
not sure about CRM, but in ECC there are different Tcodes to see hierarhcies ( depends upon the Area). E.G to see profit Center hierarchy you can use KCH3 in ECC.
Regards
Amandeep -
0ORGUNIT Hierarchy load failure
Hi Friends,
I have loaded 0ORGUNIT hierarchy through proicess chain. load is getting failed with the below error message
Node ID 00000613 , char.value 40000136 , exists several times under node ID 00000153
Node ID 00002561 , char.value 40000136 , exists several times under node ID 00001212
Node ID 00002281 , char.value 40000136 , exists several times under node ID 00001064
Node ID 00001897 , char.value 40000136 , exists several times under node ID 00000890
hierarchy table contains all the records in M version.
This error is occuring for past 4 days with same node values.
I have not tried activating manually. this is not visible in RSA1 Manual hier/attribute change run option.
I am using BW3.5.
Please give me some inputs if you have faced similar issue.
Regards,
RameshHello,
If your hierarchy is time dependent then check if for org unit 40000136 u getting right time frames and there is no overlap.
Also check if you have created right hierarchy type in the infopackage.
Regards.
Shashank -
No authorisation for displaying hierarchy
Hello all,
some user mentioned that there can not activate hierarchy for an InfoObject within an web application. When I do this, the hierarchy is displayed correct. Also within the simulation for those users in TA RSSMQ the hierarchy can be displayed.
However: The user gets the message: No authorisation for reporting hierarchy.
Where can I allow the user to see the hierarchy?
The BW release is 3.5. Any ideas would be great.
best Regards,
Stefan from Munich/GermanyHi Stefanos.
Please check the authorizations for the user. Make sure that he has the S_RS_HIER object specified correct.
Hope it helps.
BR
Stefan -
Hello,
We are loading the 0ORGUNIT hierarchy from SRM DataSource 0BBP_ORGUNIT_HR01_HIER. We also need the extra purchasing group as the last level which is there in orgunit heirarchy in SM . We have enhanced the 0ORGUNIT InfoObject as "External Chars. in Hierarchies" and added InfoObject 0BBP_PURGRP. Now how should we get these extra values for 0BBP_PURGRP?
Thanks in advance,
AmitPascal,
You cannot directly delete the lines since the integrity in terms of parent and child nodes will get disturbed.
What you could do is extract to a csv file and then post process the same using some native coding of yours and then re upload it using a standard hierarchy infosource with the flat file...
Arun -
0ORGUNIT hierarchy version assignment problem using BI7 Query Designer
Dear All,
I have a problem with Hierarchy Version for 0orgunit using BI7.0 Query Designer.
for activating heirarchy i have selected the hierarchy in the query designer but version it is not showing , instead of 01 it is showing as #.
what may be the problem with BI7.0 Query designer.
If I use BW3.5 query desingner there version in showing and I can able to show the heirarchy.
We are using BI7.0 and SP level is 13.
Best Regards,
SGKDear SGK,
did you get this problem solved ?
I have the same problem.
Regards,
Gerhard -
0ORGUNIT Hierarchy and Not Assigned
Hello Everyone,
I am using 0ORGUNIT and the associated ORGEH hierarchy.
I execute my query with a date of 01/01/2006 - 12/31/2006 and the Org Unit hierarchy display always shows :
Organizational Unit
Not Assigned Organizational Unit (s)
1000 Division South
1001 Division SouthEast
Why do I always get the 'Not Assigned Organizational Unit (s) displayed? Even if I change my date range it doesn't matter.
I did notice that if I go into RSD1 for 0ORGUNIT and maintain hierarchy the short description for this hierarchy is displayed in German. Could this be it? If so, how to translate?
Thank you everyone, ColleenHello Ajay,
I just realized it is the REST_H 'Not Assigned' node. I read the documentation on this, but still don't understand fully it's purpose or how to get rid of it.
Your help is appreciated.
Thanks so much, Colleen -
Hi All,
I am installing/setting up HR PAPA Cubes. As part of that I am moving Organizational unit hierarchy to BW (ORGEH on 0ORGUNIT). The default version of Org Unit hierarchy in BW queries is version 000. My HR consultant does not know this version and wants to use version 01. What is the version 000 for?
Any advice on what version to use?
Thanks, ReynirReynir,
Check this link:
[http://help.sap.com/saphelp_nw70ehp1/helpdata/en/80/1a6466e07211d2acb80000e829fbfe/frameset.htm]
Regards,
Ramesh -
0Orgunit(hierarchy) and authorization object display getcell error in Webi
Hello,
We are facing with GetCellData error in WebI to SAP BEx Query.
This works perfectly fine in Bex for a particular test user who has access to particular org unit value.
But in Webi we are getting this Getcelldata error.
Tried all the options and message as recommended in sdn group.
mdxtest returns no value.
looked at all below messages but no luck.
GetCellData error in WebI to SAP BEx Query
Re: SAP BO WebI Report on top of BI Bex Query with Authorization Variable
in the rsecadmin, we get the same error like mentioned in below message
Hierarchy Authorization doesn't work for MDX but works for BEx Query.
Is any authorization required for this user to execute and view the authorized values in Webi?
or we have to assign any authorization ?(0BI_ALL is not assigned).
Please find below screenshots of BEx query auth log or Webi auth log (differences)
Bex auth log:
The Following Attributes Are Authorized and Thus Are Visible
0BBPPURGRPX
0BBPPURORGX
0BBP_BUYID
0BBP_ISCOMP
0BUS_AREA
0COMP_CODE
0CO_MST_AR
0CRMSALGRPX
0CRMSALOFFX
0CRMSALORGX
0CRMSRVTGRP
0CRM_SALGRP
0CRM_SALOFF
0CRM_SALORG
0CRM_SRVORG
0LEAVERS
0LOGSYS
0MAST_CCTR
0PERS_AREA
0PERS_SAREA
0PLANT
0PURCH_ORG
0PUR_GROUP
0SALESORG
0SALES_GRP
0SALES_OFF
This above log is missing for mdxtest auth log.
Is this the issue?
Any quick reponse or help really appreciated.
Regards,
Ravi
Edited by: Ravi Gadicherla on Feb 28, 2010 5:36 PMHi,
Here is the log of MDXtest:
Buffering the Authorization Data
Buffering for InfoProvider 0PA_C01 and Users HRTEST93
InfoObject Properties Defined
Reading of Directly Assigned Authorizations
Direct Assignment Does Not Include Universal Authorization 0BI_ALL
Reading the Indirect Assignments with Authorization Object S_RS_AUTH
Does user have OBI_ALL?
No, the User Does Not Have Universal Authorizion 0BI_ALL
Negative Entry in SU53 Result of Failed Check for 0BI_ALL
Indirect assignments found; no universal authorization
Regards,
Ravikanth -
CRM, function module, extractor or table for 0orgunit hierarchy mapping?
Dear all,
In BW I have an HR-based orgunit hierarchy.
In CRM, orgunits are also HR-based but subsequentially assigned a CRM-own key through some kind of mapping.
Now, when I extract master data from the CRM product catalog which contains a characteristic orgunit, I get the CRM keys.
It would be nice to map these back to the original HR-values in the extractor.
I've looked at two BI-content extractors which might give me back the mapping: 0BP_RELATIONS_ATTR and 0CRM_ORGUNIT_HR01_HIER but both do not deliver the mapping.
Does anyone know of a FM or extractor (or maybe a table) that I can possibly use?
Rgds,
JanSeemed that the CRM and ECC link is in a Z-relation in ECC
-
Organizational Unit - 0ORGUNIT : Hierarchy Issue
Hi Guys,
Lot of Organisation Structure changed in the last year, when we run the report for the last year it is not displaying any historical Organisation Structure, but it is displaying the new Organisation Structure.
The requirement is when we run it should display the current Organisation structure and if we run for historical data it should display the historical Organisation Structure.
We assigned 0ORGUNIT as Time - dependent also but still we are facing the problem.
For Example
Org A and B
2010 ABC is assigned to Org A
2011 ABC is moved to Org B
When we run report for 2010 it is showing as Org B, but we need Org A.
Can any one please help in solving the problem.
Regards
JaganHi jagan,
If you refer to any time dependent master data, there should be always key date. If the key date is not given it takes system date as default. So as on today what ever is ur time dependent master data it will show you that even you ran for 2010 on some other date.
Regards
Vamsi
Edited by: vamsi talluri on Jun 27, 2011 9:18 PM -
Hi Friends, Can anyone please give me step by step how to configure or wht datasource has to be replicated in order to get the organizational structure for a company.....I need this urgently.....plzzzz
Hi dear,
go to RSA5 transaction in your source system and install 0ORGUNIT_HR01_HIER, then replicate in BW, install there what you need (to link this datasource to the infosource) and...voilà !
Hope it helps!
Bye,
Roberto -
Hi All,
We have 0ORGUNIT hierarchy shown in one of the Webi reports. 0ORGUNIT is time dependent hierarchy.
In BW report we can see below nodes for hierarchy
Hierarchy Valid From Valid To
Z05 Root Company 01.07.2013 31.12.9999 - Parent node
Z05 Branch 2 01.10.2013 31.12.9999 - Child Node
Z05 Division 09.12.2013 31.12.9999 - Child Node
In BO webi we can see only two nodes
Z05 Root Company 01.07.2013 31.12.9999 - Parent node
Z05 Division 09.12.2013 31.12.9999 - Child Node
Any idea why in BO webi the other node is not shown ? This is happening only for time dependent hierarchy and only in BO not in BW.
Thanks,
ShraddhaHi Shraddha ,
Check at webi query panel level any restrictions applied to hierarchy levels.
Check at BEx query level,select 0ORGUNIT ,hierarchy -Expand to level .
Here specify Max level.
lastly, check any filters/restrictions applied on data.If yes,remove restrictions. -
Problem in hierarchy authorisation
Dear all, I have two questions now regarding as the hierarchy authorisation:
1, As you know the infoObject 0TCTAUTHH should be actived and allowed to be authorised? How do I know that is already activated?
And how to activated it?
2, When I define the authorisation for the hierarchy, in the option "Type of authorisation". I don't understand the use of "2". Can anybody explain it to me?
Thanks!Hi,
I tried ur sugesstion but the same problem persists.i tried it in other way by giving the unit price at the item master level itself.in such case the unit price field in the PO displays the value.But the TAB pointer jumps to the next row directly instead of moving to the Tax Code Field in the PO.it means it doesn't allow me to enter the tax code.I think the problem is due to mistake in setting user authorisation.Could u clear me.
Regards,
Badri. -
Bw time dependent hierarchy authorization in Hr - Key date problem - 0orgunit
Hello Gurus,
I'm facing a problem with the 0Orgunit hierarchy authorization.
In the Rsecadmin screen we set the hierarchy authorization for 0orgunit characteristic, before selecting the hierarchy node, we enter the key date.
I tried many cases, but neither of the key dates gives the correct results in the report. (Todays date, 01.01.1900, 31.12.9999 etc..)
In the report the key date variable is generated by RSTHJTMAINT transaction. I guess, this is creating a problem with the authorization key date.
A similar problem is told in the following link as well:
http://scn.sap.com/thread/1437951
I spend some hours, and tried many possibilities (validity period etc.), but I could'nt get it worked.
I'm not sure if I had this error before 7.31 update.
With this opportunity, I want to thank you every one in the Sdn community. It helps a lot for resolving our issues and sharing the knowledge.
Thanks a lot.
Regards.Hi Norbert,
Can you check that the SAP note 1301644 has been applied in your system.
Best Regards,
Des Gallagher
Maybe you are looking for
-
SWF to play mp3 files located on the server
Hello, Does anyone know if it is possible to create an SWF file that can play mp3 files directly from the server, without the need for a streaming media server or external JS. And also for the application to read the current directory its located in
-
IPod and Windows: Demuxing video for transfer??
I have been working on this for almost a week now downloading all sorts of crap that i read on this forum but to no avail. Can any one help me?! I have Windows XP MCE and i can rip the video fine into avi, mpeg2, or mpeg, and videora will convert it
-
Is it possible to export/burn downloaded videos to DVD for viewing on a standard DVD player. I would like to watch TV episodes on my TV without having to connect it to the iMac (if that would even work.)
-
Hi All, I want to restrice some User to log on from specific IP Address. No any other user are allowed to logon from that IP except which I defined. e.g. From IP address 111.111.111.11, only User ID TEST1 is allowd to logon in SAP server. If User ID
-
How may I use in the Basic_Properties.vi the coordonnates system imput? wath appened for X,Y,Z inputs for a cylindric or spheric chose? MF