Authorisation requirment in reporting

Hi,
My requirment follows....
client currently create a concept for authorization topics for BW. and want to base these authorizations on the existing XYZ reports. First of all we need to find out which authorization objects do we need to differenciate customers. The target is to create a role for every customer which restricts his access to his own data.
Your task will be to create an overview of the status of the different potentially authorization relevant objects (Excel file). This file shall contain the object (based on the XYZ queries), the current restriction (like XYZ or the XYZ customer number), the current status of the infoobject regarding its authorization relevance in the different systems and a suggestion of the infoobjects which shall be authorization relevant for every infoprovider we use in the following queries.
could any one please help me out on this...
Thanks.
Kiran.

hi,
check if relevant oss note 641614-InfoProvider in RSSM not displayed for authorization object.
the solution support package may out of date, you may try this ?
... You can avoid this problem by using the 1KYFNM field in the authorization object. In this case, all InfoProviders will be always displayed.
Symptom
An InfoProvider is not displayed in transaction RSSM for checking authorization objects. Consequently, the setting that indicates whether this InfoProvider should be checked for the authorization object cannot be changed.
Other terms
Authorization object, InfoProvider, InfoCube, RSSM, check
Reason and Prerequisites
The InfoProvider contains a referencing characteristic, which is authorization-relevant, as a navigation attribute. As a result, the usage is not found as the navigation attribute in the where-used list for the InfoObject in the authorization object and consequently, the InfoProvider is not found either.
You can avoid this problem by using the 1KYFNM field in the authorization object. In this case, all InfoProviders will be always displayed.
In addition, it will also be easier to implement a check on key figures at a later stage because once authorizations exist for an authorization object, no more fields can be added.
Solution
BW3.0B
Import Support Package 15
BW3.1C
Import Support Package 09 for 3.1C

Similar Messages

  • AUTHORISATION REQUIRED FOR REPORT LEVEL POP UP WINDOW

    RESPECTED ALL
    I HAVE CREATED ONE REPORT AND CREATED ONE CHARACTERISTIC AND DUE TO WHICH WHEN I AM EXECUTING, IT FIRST ASK THE SELECTION CRITERIA WINDOW LIKE POSTING DATE AND MATERIAL SELECTION. BUT WHEN  I AM DOING THE SAME THING THROUGH THE DIFFERENT USER, THE SYSTEM IS NOT ASKING ME THE SELECTION WINDOW.
    I THINK THERE MUST BE SOME AUTHORISATION RELEVENT ISSUE. PLS GUIDE ME.
    THANKS ALL
    REGARDS
    ABHAY

    Hi
    I think the user has made the  selection as personalized . Remove the same. this will work fine.
    Cheers
    Chanda

  • Stock/requirment list report

    Require a report to display the month stock requirment for the next two years based on the plant and mrp.

    Hi Raju,
    Please check this FM MD_STOCK_REQUIREMENTS_LIST_API.
    Hope this will help.
    Regards,
    Ferry Lianto

  • Required standard report

    Hi,
    Please help me in getting the report.
    Require a report which should have  PO No., Material Code,  PO qunatity, GR quantity  and payment to supplier with respect to GR.
    Thanks...

    Go to MB5S for this report
    and add the fields which you don't see on the screen from Current display varinat from the header
    you will get all this information

  • Is separate licensing required for Report Builder 3.0 ?

    Is separate licensing required for Report Builder 3.0 ?

    No report Builder 3.0 is just the client side light-weight component to work with published reports & does not need any specific license however the server over which the reports are published (Eventually) must be appropriately licensed
    Good Luck! Please Mark This As Answer if it solved your issue. Please Vote This As Helpful if it helps to solve your issue

  • IE versions PC - Windows XP required to Report a Problem

    IE versions PC - Windows XP required to Report a Problem

    Could you explain the problem you're having in some more detail, please? (As things stand, I don't understand what might be going on.)

  • Give me some scnearios or require in reporting .. i want to learn reporting

    Hi friends ,
    Iam new to reporting.. infact learning.
    give me some scnearios or requirements in reporting.. i will work on them and let you know the output.
    Pavan
    my mail id  is [email protected]

    Hi ,
    Closing this thread

  • Authorisation check in report

    Hi ,
    we have developed a z report which is fetching grade from infotype 8 .All the users here dont have authorisation for infotype 8.Is it possible somehow that the users who don have authorisation for infotype 8 can rum that report.Right now when they are trying to run the report its showing 'No Authorisation for infotype 8'.Or is there some other place from which grade can be retrieved .
    Regards
    Saurabh

    Create an authorisation object (SU21)
    Put an authorisation check for this object in your report (AUTHORITY-CHECK)
    Create a role that contains this object (PFCG)
    Assign this role to all the users who require access to the report (SU01).
    <REMOVED BY MODERATOR>
    Edited by: Alvaro Tejada Galindo on Feb 27, 2008 2:07 PM

  • Authorisation issue . - Report is running and running

    Hello , By mistanly i resolved the last thread .
    Yes , i have excuted the report by using RSSMQ and with the user id . I found the below messge .
    Full Authorisation is requiered for this selection option .
    A displayed hierachy requires option .
    Could you please let me know , how i can solve this issue now .?
    Thanks in advance.
    Any way.
    Run that report in tcode RSSMQ with that particular user id and try to check SU53 Tcode in another window for that user id immediatly after getting error message while running the report
    RSSMQ - Runs report with other user ids
    SU53 - gives information on authorisation problems if any (It is authorisation Trance)
    Thanks.
    Edited by: BI Dev on Jan 3, 2008 5:29 PM

    I feel this is not authorisation issue. But i am not sure.
    Any way.
    Run that report in tcode RSSMQ with that particular user id and try to check SU53 Tcode in another window for that user id immediatly after getting error message while running the report
    RSSMQ - Runs report with other user ids
    SU53 - gives information on authorisation problems if any (It is authorisation Trance)
    Thanks.
    Edited by: BI Dev on Jan 3, 2008 5:29 PM

  • How  to create  authorisation object for  report

    hi
    experts..
    hw  can u  create authorisation object for  the  custom report.
    Thanks&  Regards
    Spandana

    Hi,
    In general different users will be given different authorizations based on their role in the orgn.
    We create ROLES and assign the Authorization and TCODES for that role, so only that user can have access to those T Codes.
    USe SUIM and SU21 T codes for this.
    Much of the data in an R/3 system has to be protected so that unauthorized users cannot access it. Therefore the appropriate authorization is required before a user can carry out certain actions in the system. When you log on to the R/3 system, the system checks in the user master record to see which transactions you are authorized to use. An authorization check is implemented for every sensitive transaction.
    If you wish to protect a transaction that you have programmed yourself, then you must implement an authorization check.
    This means you have to allocate an authorization object in the definition of the transaction.
    For example:
    program an AUTHORITY-CHECK.
    AUTHORITY-CHECK OBJECT <authorization object>
    ID <authority field 1> FIELD <field value 1>.
    ID <authority field 2> FIELD <field value 2>.
    ID <authority-field n> FIELD <field value n>.
    The OBJECT parameter specifies the authorization object.
    The ID parameter specifies an authorization field (in the authorization object).
    The FIELD parameter specifies a value for the authorization field.
    The authorization object and its fields have to be suitable for the transaction. In most cases you will be able to use the existing authorization objects to protect your data. But new developments may require that you define new authorization objects and fields.
    http://help.sap.com/saphelp_nw04s/helpdata/en/52/67167f439b11d1896f0000e8322d00/content.htm
    To ensure that a user has the appropriate authorizations when he or she performs an action, users are subject to authorization checks.
    Authorization : An authorization enables you to perform a particular activity in the SAP System, based on a set of authorization object field values.
    You program the authorization check using the ABAP statement AUTHORITY-CHECK.
    AUTHORITY-CHECK OBJECT 'S_TRVL_BKS'
    ID 'ACTVT' FIELD '02'
    ID 'CUSTTYPE' FIELD 'B'.
    IF SY-SUBRC <> 0.
    MESSAGE E...
    ENDIF.
    'S_TRVL_BKS' is a auth. object
    ID 'ACTVT' FIELD '02' in place 2 you can put 1,2, 3 for change create or display.
    The AUTHORITY-CHECK checks whether a user has the appropriate authorization to execute a particular activity.
    This Authorization concept is somewhat linked with BASIS people.
    As a developer you may not have access to access to SU21 Transaction where you have to define, authorizations, Objects and for nthat object you assign fields and values. Another Tcode is PFCG where you can assign these authrization objects and TCodes for a  profile and that profile in turn attached to a particular user.
    Take the help of the basis Guy and create and use.
    Sy-SUBRC values
    4              User has no authorization in the SAP System for
                   such an action. If necessary, change the user
                   master record.
    8              Too many parameters (fields, values). Maximum
                   allowed is 10.
    12             Specified object not maintained in the user
                   master record.
    16             No profile entered in the user master record.
    24             The field names of the check call do not match
                   those of an authorization. Either the
                   authorization or the call is incorrect.
    28             Incorrect structure for user master record.
    32             Incorrect structure for user master record.
    36             Incorrect structure for user master record.
    http://www.sap.ittoolbox.com/groups/technical-functional/sap-basis/please-how-to-create-an-authorization-object-386391 - 78k -
    http://www.sap-abaprogram.blogspot.com/2007/11/what-is-use-of-
    authorization-checks-to.html - 75k -
    www.sapworld.hpg.ig.com.br/download/ab4query.pdf
    with thanks,
    Abaper.

  • Debug Authorisation for z report

    hi all
    i have requirment like this. one of the user wants to debug the report. i do not want to give debug authorisation for all z reports. i want user to debug only perticulatar program.
    please tell me how to do programatically.
    regards.
    ulhas

    Dear
    contact for this to BASIS people they will give the authorisation .

  • Authorisation for ageing reports

    Can anyone tell me which authorisation to allow for module : Business Partner>Business Partner Reports>Customer receivables Ageing?
    I have already given full authorisation on Business Partner reports and tried various other authorisations without success..

    Open 'Administration ->System Initialization -> Authorizations.'
    Select a User and Navigate  to Financials -> Financial Reports -> Aging ->Customer Receivables Aging'
    Set the required authorization here.

  • Software Requirements for Reports on NT

    I am testing Oracle Reports on my personal
    NT box and using SQL*Net to go against Oracle 8.0.5 on an NT server for my data. I will need the NT server/Oracle 8.0.5 to service my production reports. It is not clear what software (for Oracle Reports) will need to be installed on the server. Help please. I've seen references to a "Report Server" and don't know what that is or if it is needed or required. Any help would be appreciated.

    System requirements | Adobe Premiere Pro
    (for initial activation of individual licensees, an adobe connection is required.)

  • Different authorisations in different reports?

    Hello,
    I'd like to ask: how can I assign different authorisations for the same user for different reports?
    Example:
    I have a report of sales by customer, additionally groupped by Key Account Manager (KAM)
    KAM
    ....\_____ Customer
    and another one, where data is presented for Customers, groupped by Consultants (CON):
    CON
    ....\_____ Customer
    Both reports are based on the same multiprovider.
    Moreover, both KAM and CON are IObjects which have Customer as a reference char. I'd like to present reports to Key Account Managers and Consultants, showing their sales to respective Customers. But only theirs, not other KAMs' or CONs' sales.
    The point is - one person can be a KAM for one sale, and a CON for another one (although, those are two separate IObjects, they share master data with Customer).
    I have therefore made an authorisation for one user, giving him rights to view 'his' KAM, and ":" CON. After that, I have used this authorisation in a role, and assigned it to the user. This way, the report No. 1 provides correct data - only sales where KAM is the chosen user, regardless of values of CON (the IObject itself is not even present in the query, therefore the ":" has been used).
    How can I arrange the authorisations, so that this user can open the second report, presenting him sales to customers for which he was assigned as a CON?
    To put it shortly:
    How can I give user 001 rights to view all objects AA and only one value of object BB in report ABC1
    but give him rights to view only one value of object AA and all values of object BB in report ABC2?

    Hi,
    OK! try this following work around:
    Make it language dependent again . and unmap in transfer rules  ( cross symbol ).
    remove the info object in right panel too. and write the routine as follows.
    IF TRAN_STRUCTURE-sprache = ' '. ( write code of japanese langauge )
    And tran_structure-sprache = ' ' ( write code for chinese langauge )
      RESULT = 'e'.
    else.
    RESULT = TRAN_STRUCTURE-sprache.
    endif.
    activate the transfer rules and try uploading data again!
    Thanks,
    Ravi

  • TABLES REQUIRED FOR  REPORTS

    please any body CAN YELL ME THE TABLES INVOLVED IN THESE FOLLOWING TWO REPORTS  
    VERY URGENT
    IT IS SVERY USEFULE TO ME
    PLEASE HELP ME
    &#61656;Contract Compliance Report : This report looks at the actual customer purchases (QTY) by period vs. targeted quantities.
              The report created will list all the contracts quantity vs. shipped quantity in the period specified for a given customer or material or sales organization or contract number along with details such as material numbers, contract start date, contract end date, etc.
    &#61656;     Contract Expiration Report : Contracts need to be monitored and quotations sent out for renewal as they approach their expiry date. A report is required to show the contracts expiring.
              This report will list all the contracts expiring in the period specified for a given customer or material or sales organization or contract number along with details such as equipment numbers, material numbers, contract start date, contract end date, etc.
    WITH REGARDS
    VENUMADHAV

    Hi Venumadhav,
                             Check table EKKO , EKPO,VBAK,VBAP
    Regards,
    Hemant

Maybe you are looking for