Authorization for a particular Query

Hi,
I have a query say "X".I want that query to be executed by an user say "Y".Now I want to restrict user "Y" to that particular query only.User Y should not be able to access/execute any othr queries except query "Y".
Could you provide me the detailed approch for this.
Thanks,
Neetu

Hi neetu,
are you using which system BW 3.5 or BI 7.0?
first create the role for with required authorization object then same to user.
RSD1 - maintain the authorization
PFCG- to create and maintain roles
RSECADMIN -To maintain analysis authorization and role assignment to user.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/c0b7acf2-6121-2e10-5591-eaec182d9315?quicklink=index&…
Authorization in BI 7 - Part 1
Thanks,
Phani.

Similar Messages

List of users who have authorization for a particular transaction?

Hi All,
Can anyone guide me how to know the list of users who have authorization for a particular transaction?
I need this to find out the list of authorizations that are obsolete ,when the particular trnsaction is obsolete in an Upgrade process.
Thanks in advance.

we can get the list of users for a particular transaction as below.
get the tcode and place in AGR_TCODES and we get the list of roles .
loop the roles and pass each role to AGR_USERS and we get list of users for that role.
finally we got the list of users for that tcode.

No authorization for the component (query name)!

Hello all,
when i am publishing the query in web, the following error message is displayed!
"No authorization for the component (query name)!"
i had installed and configured everything here, so the person responsible for authorization is none other than me. what i shud do now? shud i add any other authorization profile to the username created? or still any configuartion is required?
please let me know!
Thanks,
Ravi

Hi ARK,
thanks for the info.
i had assigned SAP_ALL and SAP_NEW profiles to the user.
let me say clearly that when i am executing the Query in the designer it is working fine,no issues in Bex browser too. but when i want to publish safely exexuted query in web (clicking the button publish the query in web) i am getting the above mentioned error!
do suggest me what is the authorization profile that is needed to serve my purpose?
hope this time i am clear!
Ravi

How to remove authorizations for a particular transaction

Hi,
I have an SAP_ALL authorisation for a user. I need to remove authorization for a particular transaction (FK01) for this particular user.
How do i make that.

Hi Marcus ,
u can remove authorization Objects for a given tcode ,but what i am thinking is SAP_ALL will get ride of this child objects , may be i am wrong.
But what i am saying is check that are the authorization which are required to run FK01/XK01 and remove them from that Role .
2.Otherwise check for Object S_Tcode and remove FK01 and XK01.
Regards
Prabhu

Authorization for Create a Query

hi all!
I need that the users can have access to create queries but I don't have the authorization for this, could you tell me which object i need?
Thanks!

Hi Carlo,
adding to Venkat, there is an other object called:
<b>S_RS_FOLD</b>
Display authorization for folder. This object is new in SAP BW 3.0.
With this the reporting user should only be able to see their Favorites folder and their assigned roles. They cannot look at other InfoAreas to which they have not been granted access.
Hope it helps.
Please award points if it is useful.
Thanks & Regards,
Santosh

How to find Webtemplates builld for a particular query ?.?.?.?.?.?.?.?.?.?

Hi Gurus,
I wanted to find out what all are the web templates (in WAD) build/used for a partiuclar query in Query designer.
I tried "where-used" in BEx query designer, didn't work.
It's urget plz.
Regards,
Venkat

Hi,
You can set the properties of Web templates for all Web applications in Customizing.
You make these settings in the SAP Reference IMG > SAP Customizing Implementation Guide > SAP NetWeaver > Business Intelligence > Settings for Reporting and Analysis > BEx Web > Determine Settings for Web Templates.
Specifying standard Web templates for ad hoc analysis and reports
For more information, see the SAP Reference IMG > SAP Customizing Implementation Guide > SAP NetWeaver > Business Intelligence > Settings for Reporting and Analysis > BEx Web > Set Standard Web Templates
http://help.sap.com/saphelp_nw04/helpdata/en/9e/9f653ade969f4de10000000a114084/content.htm
http://help.sap.com/saphelp_nw04/helpdata/en/1f/37813b650cdc0be10000000a114084/content.htm
http://help.sap.com/saphelp_nw70/helpdata/en/23/fea042b443c56ae10000000a155106/content.htm
Regards.

Restrict authorization for saving BI query bookmark on BEx Portfolio

Hi experts,
I would like to find a way to control the saving query bookmark functionality on BEx Portfolio. The problem is that every BI user can save in the BEx Portfolio which is observable to every user at global level. Is there a functionality to restrict the authorization so that only Power users are allowed to save bookmarks under BEx portofolio and where as non power user are allowed to access them
Thanks

Hi All,
i'm also having same requirement, please reply with solution if any one did it,
http://scn.sap.com/message/13836154
Thanks
Naga

Authorizations for Publishing a Query in a Role

Gurus,
I have S_USER_AGR (activity as: 01, 02, 03 06, 78) and S_RS_TOOLS as webpublish and Themes...but my users are not able to Publish a Query to a Role from Query Designer in a Edit mode, but they were able to add the Query to a Role using "Enter in Role" button from BEx pop up screen...what Authorizations I am missing in my role?
And also in QA and Production how can the Power Users can publish a Query or a Wrk book to a Role without editing a Query or Work book?
Can some one share their thoughts..
Thanks,
KK

Hi,
I also facing same issue in Query designer. Unable to publish the roles in query designer. It is showing no roles assigned to you error mesg. I have added this object and given the * values. Then the problem is solved.
Please user s_user_agr object with activity * and values *. They will get access to publish to roles, portals and broadcasting in query designer.
Regards
anil.

LIV Authorization for a particular type of Purchase Order

We are having a particular type of purchase order.We want to give permission only to a particular user,who will be able to do LIV related to only this type of purchase order,
Example.
Purchase order type is : NZ:PO for issue to vendor.
we want when user run t.code MIRO,he only posting NZ document type of P.O.
Can anyone help me how I configure it.........
Thanks in advance
Bhuban

Hi,
Unfortunately there is no standard SAP option for this.
The existing authorisation config does not include a check for the PO document type.
If you really must have this then you need to get your ABAP programmer to look for a suitable user exit and control it this way.
It might make the coding a bit easier if you give this docmunet type a unique number range e.g. 9900000000 to 999999999, so that the code only has to check the doucment number entered without having to read the PO and obtain the document type.
Steve B

Authorization for BEX Query

Hi all,
      I badly need your help.i need to give authorization for a particular query.As of now when i execute that query it gives me "No Authorization" message. what authorization object i need to include in that role? Am sure that there should be some business content authorization object for the current situation.
Thanks in Advance

Hi Nanda,
you need:
s_rs_comp    -- for querries
s_rs_comp1   -- for querries including the username, this is usefull if you would like to allow a user to change and create only his/her querries
s_rs_hier    -- if hierarchies used in the querrie
s_rs_icube   -- if autorization is switched on for the Cube
s_tcode for rrmx of course
s_gui and s_rfc for workbooks
you can check the authorization process for a user with su53 and rssm
Regards
Pierre

How to give authorization for create and change particular Condition Type

Hi...
In my requirement is , Only one user can be authorized to create and change a particular condition type 'ZABC' in vk11 and vk12 .
For remaining condition type can be used as in normal .
How to do this ? How to give authorization for a particular user for particular condition type ?
Plz guide me ..
Thanks in advance .
Deepa .

Hi Deepa ,
u can check A.Object V_KOND_VEA, in user profile u can assign condition type or tables.
have a word with ur basis guy , so he can help u in better way.
aand also ref FM SD_COND_AUTH_CHECK
Regards
Prabhu

Authorization for User to Jump the Query

Hi,
The user1 (log is not generating for this user in RSSM) cannot use the jump target in the reports which have been placed under a role, whereas the other user2 (log is able to generate for this user in RSSM) is able to jump target in the reports in SAP BI.
I need to give the proper authorization to user1 same like user2.
How can I solve this issue.
Thanks in advance.
Regards,
Ravi Sankar

I dont understand what you mean with "(log is able to generate for this user in RSSM)"
In RSSM you can create authorization objects....
If you want to give some authorizations for a specific query you must check the SU53 in order to see the objects that you need to add to the users profile.....
The procedure is.......give th user the Query link in order to open the query....and obviously that action gives you an authorization error.....then enter to the SU53 and this transaction shows you the authorization object you need to add to the profile.....
I hope this helps
Regards

Authorizations for Query loading

Hi,
We provided the authorization for EP screen and backend is BW while opening an screen we are getting an error " no authorizations for Loading a query" please can anyone will help me for this.. which authorization is require for laoding up query...
Thanks
Sonu

Hi,
Please create a role for the reporting user in T code PFCG.
Assign execute authorization for the query using authorization object
S_RS_COMP and S_RS_COMP1.
Assign the role to the user.
Basic idea is to make sure the user has execution authorization for the query you are running in Portal.
Please see below link
http://help.sap.com/saphelp_nw70/helpdata/EN/f8/7913426e48db2ce10000000a1550b0/frameset.htm
Regards,
Nitin

Itunes authorization for an account that doesn't exist?

My new MacBook is asking for an Itunes store authorization for a particular song under an account name that doesn't exist. My apple ID is an old e-mail address; I've already successfully authorized the computer to play songs from that account, into which I can log in with no difficultly. The account name that is supposedly attached to this song is a newer e-mail address (maybe I unsuccessfully tried to change the Apple ID at some point?), but when I click on "forgot password" in the authorization window, it says that the account for which it had prompted me to authorize doesn't exist. Suggestions?

Click here and fill out the form for assistance.
(34501)

Authority-check for a particular company code

Hi,
   I need to check authorization for a particular company code.In my bdc call transaction program i'm fetching mass data from excel file and for every record i've to check the company code field.If the company code is not the required one then that record should not be processed.
So before filling the bdc data i wrote like
LOOP AT gt_inrec INTO gs_inrec.
     AUTHORITY-CHECK OBJECT 'F_BKPF_BUK'
               ID 'ACTVT' field '02'
               ID 'BUKRS' field '2800'.
    IF NOT sy-subrc = 0.
      MESSAGE e058(zz) WITH gs_inrec-bukrs.
      EXIT.
    ENDIF.
     PERFORM fill_bdc.
ENDLOOP.
but it is not exiting for different company codes and is allowing records with all company codes.
can anybody pls tell me how to rectify this?
thanks in advance,
poornima

I need to perform authority check on the field NAME1 present in the standard screen - customer master ( T.Code-XD02). Only certain users should be allowed to edit the field and others should be restricted.
I have created a field exit FIELD_EXIT_AD_NAME1 for the ADRC-NAME1 field.
Now inside this field exit i need to write the authority-check code.
I have created the authorisation object Z_KNA1_NAM for the field NAME1 using the SU20 and SU21.
For this scenario how do i write the authority-check code in my field exit?
Below is my field exit code,is that correct?
FUNCTION FIELD_EXIT_AD_NAME1.
""Local Interface:
*" IMPORTING
*" REFERENCE(INPUT)
*" EXPORTING
*" REFERENCE(OUTPUT)
AUTHORITY-CHECK OBJECT 'Z_KNA1_NAM'
ID 'NAME1' FIELD SY-UNAME
ID 'ACTVT' FIELD '03'.
IF SY-SUBRC = 0.
MESSAGE 'Not Allowed to Edit the Name 1 Field' TYPE 'E'.
ENDIF.
ENDFUNCTION.
In the above code i have given SY-UNAME in the code line 2 - ID 'NAME1' FIELD SY-UNAME ,is that correct? what should i give there?
Please help me on this issue.
Cheers,
P.S.Chitra

Authorization for a particular Query

Similar Messages

Maybe you are looking for