Authorization for cube in multiprovider

Greetings,
I am chasing what would seem to be a common and simple issue.
User X does not have authorization to the S_RS_ICUBE authorization object for a cube. If user X attempts to run a query over the cube he receives an authorization error. That's good.
User X does have authorization to a multiprovider (S_RS_MPRO) that includes the basic cube. If user X attempts to execute a query over the multiprovider he is able to get data from the basic cube. That's bad. I had hoped that a user would need authorization to the basic cube in order to see any data from that cube, even from a multiprovider.
If a user has authorization to a multiprovider does that mean the user also has authorization to all the cubes in the multiprovider?
Thanks for your generous help,
David Eady
Reporting Team
SI Corporation

This seems like a good chase ....
If the user does not have access to S_RS_ICUBE at the same time has access to
This seems like a good chase ....
If the user does have access to S_RS_MPRO and the data access on the cube it will give the results ....having S_RS_ICUBE this auth does not mean that he can get the data he has to have the DATA access on the cube ....
In the current scenario i assume that's what is going on or else the user has access on the other cube of the multi provider and also the S_RS_MPRO ...so he is getting the results which might not be right ...
SCAN the PFCG in that authorizations look under that you should be able to control S_RS_CUBE
Let me know ...so that i can throw some more light if you can be more elaborate ....

Similar Messages

Error when Executing the Report - No Authorization for Multiprovider

Hello Experts,
After the upgrade has carried out in my Quality system, I'm unable to execute a query because of the authorization issue with Multiprovider. But earlier the same Authorization was assigned to the my ID.
The Role in Q and the Role in P is same. Right now P is with 3.1 and Q is with BI7.
In both the system I have the same Role. But in Q it says that: Error You have no Authorization for Multiprovider XXXX
This is happening for only one Multiprovider in Quality system. There is no change in the Multiprovider from earlier structure to the present structure.
Can anyone give me any idea as to how to solve this issue?
Many thanks in Advance..
Thanks
Raman.. This is Emergency for me..

Ok,
Pick up a test user (or your user) and go to transaction su01.
Check the roles that are assigned.
Double-click in each one and choose display. Go to tab authorizations and click on the glasses icon of displaying authorizations data. Then go to menu->Utilities->Technical names On.
You should see the tree with the node name Business Information Warehouse (technical name RS), if you don't see this in this role, than the issue it's not in this role, go back to su01 and check another role the same process until you find this node.
If you expand this node you'll see another nodes, one of them is called Data Warehousing Workbench - InfoCube (technical name S_RS_ICUBE). And you probably can't find another node called Data Warehousing Workbench - MultiProvider (technical name S_RS_MPRO), this is the new node you want.
In the node S_RS_ICUBE expand it and you'll see the authorizations given to InfoCubes with activity, InfoArea and InfoCube. In the older system BW 3.x this object was used to give access to InfoCubes, but also to MultiCubes. So you have to find the role that has this object with InfoCube with the value of MultiCube or with all values, for example, you could have this node in your role with the following values:
Activity                       03
InfoCube Subobject     DATA
InfoArea                     ZFI*
InfoCube                    ZFIAA_C11, ZFIAA_C13, ZFIAA_M02
or with:
Activity                       03
InfoCube Subobject     DATA
InfoArea                     ZFI*
InfoCube                    *
or with:
Activity                       03
InfoCube Subobject     DATA
InfoArea                     ZFI*
InfoCube                    ZFI*
Something like that. The first example give access to specific InfoCubes and one MultiCube, the second one you'll have all the InfoCubes and MultiCubes inside the InfoArea started with name ZFI and the third one you'll have all InfoCubes and all MultiCubes started with name ZFI that belongs to the InfoArea started with name ZFI also.
Got the picture?
So in BI 7 MultiCubes are now controlled by the new object S_RS_MPRO instead of the older object S_RS_ICUBE. What you should do is go to transaction pfcg and insert the role you want to include (or change these new values, i.e., the role that has the access to the MultiCube values inside the object S_RS_ICUBE which the query is built on) the new object S_RS_MPRO and click on change. Go to tab authorizations and click on change authorization data. Then click on manually (ctrlshiftF9) and insert the object S_RS_MPRO. Inside this new object you should insert the authorization data for accessing your multiproviders.
In the 3 examples above you should create these 3 entries:
Activity                          03
InfoArea                         ZFI*
MultiProvider                  ZFIAA_M02
MultiProvider Subobject DATA
or with:
Activity                          03
InfoArea                        ZFI*
MultiProvider                  *
MultiProvider Subobject DATA
or with:
Activity                         03
InfoArea                        ZFI*
MultiProvider                 ZFI*
MultiProvider Subobject DATA
Therefore you continue to have the object S_RS_ICUBE to control only the InfoProviders plus the new object S_RS_MPRO to control the MultiProviders.
Now generate the profile(s), save the role(s) and test it again!
Diogo.

Is there function module for looking up CHANGE AUTHORIZATION for a cube?

Hi All,
In our BPS program we would like to look up the change authorizations a user has for his company in a cube. The problem is that with our current function module: RSSB_GET_AUTH_FOR_USER , SAP returns the values for "acitvity" DISPLAY and we would like to have "acitvity" CHANGE permissions.
In other words:
Is there a function module which we can use to look up authorizations for BW 7.0 on infocubes?
Thank you very much.

Hi
Function module <b>BAPI_PO_CHANGE</b> enables you to change purchase orders. The Change method uses the technology behind transaction ME22N.
Regards,
Viven

Data in ODS, Info cube ans Multiprovider(List cube) are in Sync.

Hi,
My query is built on multiprovider. The data flow is data source u2013 ODS then ODS u2013 Info cube and multiprovider contains Info cube only.
Data in ODS, Info cube ans Multiprovider(List cube) are in Sync.
The query results are not tie up ODS, Info cube ans Multiprovider(List cube).
Any one let me know why this is happening and how do I resolve it.
Regards,
Sharma.

HI;
thanks for help.
I resolved the issue in my own.
Regards,
Sharma.

Problem with Authorization for BW BPS planning Folder

Hi an having a problem with providing authorization for a planning folder
i am getting the following error when i test it with test user
Error while calling up RFC
Message no. UPC202
Diagnosis
You have selected a function, to execute this the system must set up an RFC connection to another SAP System. However, setting up this connection was not successful. The following internal error message was generated:
"You do not have authorization for InfoCube ZT_MR_T "
Procedure
Inform the system administrator.
if any one has faced the same issue let me know.
Regards,
Abraham

HI ,
I Checked it out we dont have that cube in our system.
Regards,
Abraham

How to create suitable aggregates for queries on multiprovider ?

hi all,
goal reduce db time of query and improve performance
i have queries on a multicube. I have 5 cubes under the multiprovider. I having performance issue with one of the cubes. it had
high slection/transfer ratio. The same cube had high 94% DB TIme. All the BW and DB indexes and stats are green. I chose
the path of aggregates. when i tried suggest from proposal it is giving me query time and date range and i gave last
3 days and query time 150 sec. it is suggesting huge number of aggregates like 150 of them and not getting reduced much
when i tried optimize funcitonality.
The faulty cube had nearly 9 million records and 4 years of data
1. generally how many aggregates do we need to create on a cube?
2. how do i use propose from last navigation? it is not creating any aggregates
3. is there a way for system to propose less number of aggregates?
4. if nothing works i want to cut the volume of the aggregates base on years or quarters. how do i do that?
i created with time charactersitic 0calquarter and dragged in ocal day and 0calmonth. activated and filled in ..but
query is not hitting it when i do a monthly selection. i tried bringing in all the other dimensions...except line item
dimenisons....no use ...it is not hitting the manual aggregates in RSRT.the slection on 0calquarter is * .
5. should i change it to fixed value and bring in the line items too and create it?
6. I wanted to try propose aggregate from query option..but my query is on multiprovider...and not able to copy it to cube..
plz help me how to find the suitable aggregates for query on multiprovider
7. should i create any new indexes on the cube using the chractrestics in the where condiotion of select statment...but in
that case, select statement changes with drill down.......how do i handle it ?
8. how will i make sure the aggregates work for all queries run time imporvement?
9. plz suggest other approaches if any with procedures
this is a urgent problem plz help...
<b>thanks in advance
points will be assigned for inputs</b>

1. generally how many aggregates do we need to create on a cube?
it depends on your specific needs, you can need none or several.
2. how do i use propose from last navigation? it is not creating any aggregates
Can you elaborate?
3. is there a way for system to propose less number of aggregates?
In any of the menus of screen for creating aggregates you have an option for sytem propose aggregates for one specific queries i am not sure it worked with multicubes.
4. if nothing works i want to cut the volume of the aggregates base on years or quarters. how do i do that?
You should delete 0calday from aggregates in order to accumulate data for any greater time unit. Other solution for times is to study try to do a partition in cube.
5. should i change it to fixed value and bring in the line items too and create it?
Can you elaborate?
6. I wanted to try propose aggregate from query option..but my query is on multiprovider...and not able to copy it to cube..
Answered before, maybe you can create a query only with data on that cube that appears in multicube query in order to proposal any aggregate in thath cube.
7. should i create any new indexes on the cube using the chractrestics in the where condiotion of select statment...but in
that case, select statement changes with drill down.......how do i handle it ?
is not recomendable create new indexes in multidemensional structures. Try avoid selections for navigational attributes, if necesary add navigate attributte as dimension attributes, put filters in filter section in BEX.
8. how will i make sure the aggregates work for all queries run time imporvement?
try transaction st03
9. plz suggest other approaches if any with procedures
Some other approches yet answering
Good luck

Problem wih analysis authorization for two scenarios on same data provider

Dear all,
I am looking for a solution on the following authorization scenario (using the new analysis authorization). Unfortunately everything that I tried did not work out as expected:
User A is allowed to manually access query 1 (based on cube A) with authorization on all sites A-Z
The same user A shall get an email distribution automatically (derivation of the filter in the query out of the authorization) for query 2, which is as well based on cube A, but this time the authorization shall be limited only to site A.
As both queries are based on the same infoobject (0PLANT) and the same infoprovider (0TCAIPROV) I always get the result for all sites A-Z. The 0TCAACTVT is in both cases 03 (display), so I have no chance to distinguish between reporting and email distribution.
Probably the only chance would be to derive the values for the email distribution scenario not from the authorization directly, but using a customer exit to fill the filter - but I would prefer a "standard" solution...
Any ideas??
Thanks,
Andreas

Dear Andreas,
Before give you an alternative for you problem, Iu2019d like to comment the combining authorization concept:
http://help.sap.com/saphelp_nw70/helpdata/EN/46/98cd87f37d19ace10000000a11466f/frameset.htm
For this reason I suggest you which combing restriction through authorization and query filter. For query 2 try to use in 0PLANT characteristic the single value u201Csite Au201D, this restriction give you only authorization for see this value.
Otherwise, you have to use customer exit.
I hope that alternative help you to find a solution,
Luis

Error - No authorization for object while viewing transformations in BI 7.0

Folks,
In BI 7.0, In the Data flow diagram, when I had tried to click on the transformation sybmol, system is throwing an error message No authorization for object   (authorization object ) Message no. RS_EXCEPTION250
Do I need to request for authorization to just view transformations or is this error something different ?
Thanks

Did SU53 and below is theauthorization info. Does quality system usually not have access even to display/read transformations for func people ???
Authorization check failed
Object Class RS   Business Information Warehouse
    Authorization Obj. S_RS_DTP   Data Warehousing Workbench - Data Transfer Process
      Authorization Field ACTVT Activity
                                                                                03
      Authorization Field RSONDTPSRC Source
                                                                                DTP_46UAQF4V7BE5JR0I3HKLLC6D2
      Authorization Field RSONDTPTGT Target
                                                                                ZSD_DEL
      Authorization Field RSSTDTPSRC Subtype of the Source
      Authorization Field RSSTDTPTGT Subtype of the Target
      Authorization Field RSTLDTPSRC Type of Source
                                                                                DTPA
      Authorization Field RSTLDTPTGT Type of Target
                                                                                ODSO
User's Authorization Data xxxx
Object Class RS         Business Information Warehouse
    Authorization Object S_RS_DTP   Data Warehousing Workbench - Data Transfer Process
      Authorizat. Z:GEFUNONC00 Data Warehousing Workbench - Data Transfer Process
        Profl. Z:GEFUNONC   Profile for role Z:GENAPO_FUNC_ONCALL
        Role Z:GENAPO_FUNC_ONCALL Generic APO Fucntional Oncall Role
        Authorization Field ACTVT Activity
                                                                                03, 16, 23
        Authorization Field RSONDTPSRC Source
        Authorization Field RSONDTPTGT Target
        Authorization Field RSSTDTPSRC Subtype of the Source
                                                                                ATTR, HIER, TEXT
        Authorization Field RSSTDTPTGT Subtype of the Target
                                                                                ATTR, HIER, TEXT
        Authorization Field RSTLDTPSRC Type of Source
                                                                                CUBE, IOBJ, ISET, ODSO, RSDS, TRCS
        Authorization Field RSTLDTPTGT Type of Target

Error InfoObject inactive while activation of Business content for cube

I am facing error "InfoObject 0COMP_CODE is not available in active version" while simulate installation of business content of cube 0FIGL_C10. Please guide me for the same.
Edited by: Nilesh Vakil on Jul 15, 2010 1:07 PM

Hi Sriniva and All,
I have been trying to activate business content- info objects catalogue, and have been gettin the below errors. I have activated ocomp-code and checked it with transaction sm37, and it says the job has finished.But i am not sure if i have to activate all the info objects thereof one by one.
EDI: Partner profile not available 1
Source system E33CLNT003: No authorization for remote activation of DataSources
Source system T90CLNT090 is inactive
Object '0CUSTOMER_ATTR BM_GIS_DAT' (ISMP) of type 'Transfer
Rules' is not a
I hope to hearing from someone soon !
-- Armstrong Kwakye

Authorizations for Hierarchies in BW-BEx

Hello, Experts!
I am having some problems in order to give specific access for specific nodes on the hierarchy on the profiles creation. For example, we need to give permission to the profile "Profile_one" (that can be viewed on the PFCG transaction) to access only the node "Node_one" of our hierarchy ("E_ERP01" - object 0city_code) and we need to give this authorization to a range of users.
We have studied some options like the one suggested on RSSM transaction and we have already tried creating an authorization object named "ZHIER". But the problem found on this transaction is that we have to create a profile authorization for EACH user that is mentioned on the range of authorization and then we need to link it on the transaction PFCG. But the users assigned on PFCG transaction don't receive all the same profile authorization (ZHIER), only the one that was mentioned on RSSM transaction.
Could you please help us to find a way to assign specific nodes of a hierarchy to a specific range of users? We have already searched and studied some notes without success.
Many thanks for your help.
Best regards,
Isabela.

If the account type keep changing every month , you must have to maintain that field out side the cube though.
I guess you can use the hierarchies (or) add the flag as an attribute to the GL account master data,then you can filter on this field in reports.
But hierarchies gives more visibility on data/navigation.
Hope this helps.
cheers
Martin

Universe Designer: Error getting dimensions for cube

-Using Business Objects Edge 3.1 SP2
-SAP BW 7.0 (patch level 21)
This is quite odd behavior that seemed at first an authorization issue, but now I am uncertain.
-Attempting to create a Universe based on a Infocube.
-Universe connection is created with no problem using user 'ABC'
-Using Universe Designer on the BOBJ server, no issues creating the Universe
-Using Universe Designer on a users desktop, the Universe fails to create with error message:
A runtime exception has occurred. (Error getting dimensions for cube $0SD_C03 (catalog $INFOCUBE): Unknown error)
-Change the connection to use user 'DEF', the Universe creates just fine on the desktop
-Behavior is not exclusive to one BW object, happens no matter what 'ABC' tries to access from this desktop
So, at first I am thinking authorizations, but then the universe create would fail on the server as well. If it is environmental, what could possibly affect this behavior.
Any ideas before I submit to SAP Support?
Edited by: Kevin Smolkowicz on May 5, 2010 12:40 PM
Edited by: Kevin Smolkowicz on May 5, 2010 12:41 PM

Oddly enough it was an authorization issue.
When authenticating against the SAP source system from Universe Designer on either the workstation or server, both traces show a missing authorization for RFC_NAME = RASB
This setting is not found in referenced SAPu2019s guides or whitepapers under suggested authorizations for Universe create. What remains unexplained is why using the same credentials from 2 different computers had a different response.

Authorization for query

Dear Experts,
If i do not have access to S_RS_COMP for activity 16 (Execute) but i have full authorization for S_RS_BCS for broadcasting can I broadcast queries.
Thanks,
Mihir

Authorization for a query fully depends on these BEx related authorization objects.
S_RS_COMP, S_RS_COMP1, S_RS_MPRO, S_RS_ICUBE.
you have to mention your info area and info cubes, where your query was built on.
if you are not having access to S_RS_COMP with activity 16(execute), or if the auth object S_RS_COMP1 is missing. you cannot execute queries at all.
Even broadcasting depends on this authorization. i think you cannot execute or broadcast queries.
Please raise a ticket to your BASIS team and request them to give display and execute access to you.
Hope this would help you more.

Do not have authorization for access with activity 03 on the InfoProvider

Hi,
I have developed new cube & ODS and created new Web Templates based on queries on these Infoproviders.
I have created new role and adde these templates to menu of this Role.
In Authorization profile i have used following Authorization objects.
S_RS_BTMP
S_RS_COMP
S_RS_COMP1
S_RS_ICUBE
S_RS_ODSO
In all these objects i hace selected activity 3.
Infoarea used for these new Cube & ODS is also added and for cube & ODS selection ihave used * (full authorization)
But when user is opening the web template it is showing error messahe
"You do not have authorization for access with activity 03 on the InfoProvider ZICXEROX."
Is there is any authorization object missing in the profile?
Regards
SSS

Dear SSS,
Have the same problem ' You do not have sufficent authorization for the infoprovider'. so could you please send the document from my mail id
[email protected].......
plaase very very urgent
Regards
Ahmed.

You have no authorization for the requested data

Hi Gurus,
While trying to display data in manual layout it shows the erros as
You have no authorization for the requested data.
Any reason behind that.
Thanks,
Debasish

Hi Debasisha
I faced the same problem yesterday, as Ivan told apply the transaction code rssm. In Business Information Warehouse Authorizations window go to checks for InfoProvider and select your Cube and click the change button. in that window you can see the which infoobjects are selected under switched on column deselct the checkboxes for authorization obj. save - refresh
and go to BPS screen execute your layout you can find your layout. I solved my problem like that.
Hope it helps you.
Regards,

Authorization for BEX Query

Hi all,
      I badly need your help.i need to give authorization for a particular query.As of now when i execute that query it gives me "No Authorization" message. what authorization object i need to include in that role? Am sure that there should be some business content authorization object for the current situation.
Thanks in Advance

Hi Nanda,
you need:
s_rs_comp    -- for querries
s_rs_comp1   -- for querries including the username, this is usefull if you would like to allow a user to change and create only his/her querries
s_rs_hier    -- if hierarchies used in the querrie
s_rs_icube   -- if autorization is switched on for the Cube
s_tcode for rrmx of course
s_gui and s_rfc for workbooks
you can check the authorization process for a user with su53 and rssm
Regards
Pierre

Authorization for cube in multiprovider

Similar Messages

Maybe you are looking for