Authorization for InfoSets

Hi All.
I have a strange situation that only exists in my BW production environment (version 7.0). Starting out of the blue a few days ago, all of my users are now recieving authorization errors trying to execute queries against any InfoSet. Specifically, the error message is "You do not have authorization for InfoSet xxxx." We have four other environements, sandbox, dev, quality, and training where there is no problem. I've re-transported all of the user roles from Dev to production and compared them line-by-line with the other environements, but I don't see any problem. Can anyone provide any guidance on where I might look to resolve this issue? Below is my PFCG configuration. All of the InfoSets and related cubes, DSO's are in the indicated InfoAreas. Thanks in advance.
 Manually Business Explorer - Components
 Manually Business Explorer - Components
 Activity Create or generate, Change, Display, Delete, Execute <...>
 InfoArea ZCRM_CA, ZCRM_OPP, ZCRM_SALES_A, ZCRM_SALES_O, ZCUSTOM_DSO, ZELM, ZLEA<...>
 InfoCube *
 Name (ID) of a reporting compo *
 Type of a reporting component Calculated key figure, Query View, Query, Restricted key figure <...>
 Manually Business Explorer - Components: Enhancements to the Owner
 Manually Data Warehousing Workbench - Hierarchy
 Manually Data Warehousing Workbench - InfoCube
 Manually Administrator Workbench - InfoCube
 Activity Display
 InfoCube Subobject Data
 InfoArea ZCRM_CA, ZCRM_OPP, ZCRM_SALES_A, ZCRM_SALES_O, ZCUSTOM_DSO, ZELM, ZLEA<...>
 InfoCube *
 Manually Data Warehousing Workbench - InfoSet
 Manually Administrator Workbench - Infoset
 Activity Display, Maintain
 InfoArea ZCRM_CA, ZCRM_OPP, ZCRM_SALES_A, ZCRM_SALES_O, ZCUSTOM_DSO, ZELM, ZLEA<...>
 InfoSet *
 Manually Data Warehousing Workbench - DataStore Object
 Manually Administrator Workbench - ODS Object
 Activity Display
 InfoArea ZCRM_CA, ZCRM_OPP, ZCRM_SALES_A, ZCRM_SALES_O, ZCUSTOM_DSO, ZELM, ZLEA<...>
 DataStore Object *
 Subobject for ODS Object Data

Hi Casey,
Have you tried what roles or authorization objects are missing thru SU53 t-code? Other posibility to see what is happeining is doing a trace.
Go to ST01-> select the checkbox Authorization -> run trace.
Then execute the query that gives your the authorization error.
Stop the trace, and see the analysis, check those rows with RC = 8 or 4.
Regards, Federico

Similar Messages

No authorization for InfoSet

Hello all,
I want to create an InfoSet, but when I define the technical name and description and select the first ODS and click OK, a message appaers "no authorization for InfoSet". So far I can create ODS objects and InfoCubes, but it is not possible to create an InfoSet.
Where can I make the setting to be able to create an InfoSet. The BW release is 3.5. As far as I can see I have all necc. rights to develop in BW.
Any ideas would be great.
Best Regards,
Stefan from Munich

Hi
See this link
Authorizations for creating an infoset
Assign points if useful
Thanks
N Ganesh

Issues with Analysis Authorization on Infoset

Hi all
We are facing an issue with Analysis Authorization on Infoset, it doesnt seem to throw authorization error when we access a record that is outside the authorization. We tried to use the same authorization set up from the same user we try to access the a record that is outside the authorization it behaves correctly.
Here is my setup
0CRM_MKTELM__0CRMCAMPTYP = ZA11
0TCAACTVT = *
0TCAIPROV = *
0TCAVALID = *
When I tried to access ZA12 it should throw an authorization error but for infoset it doesnt seem to work. Is there anything that we should take note for Infoset?

Hi Chee,
I am getting similar issue.
I believe navigational attribute was already a authorization relevant in your case.
What and where did you set it as authorization relevant to make it work on infosets.
Regards,
Ramz

How many ways we can create authorization for user groups in sap query reports

Hi Gurus, I am getting a problem when I am assigning users to user group in sap query report .The users other than created in user groups are also able to add &change the users .So please suggest me how to restrict users outside of the user group.
Please send me if u have any suggestions and useful threads.
Thank You,
Suneel Kumar.

I don't think it can be done. According to the link below 'Users who have authorization for the authorization object S_QUERY with both the values Change and Maintain, can access all queries of all user groups without being explicitly entered in each user group.'
http://help.sap.com/saphelp_46c/helpdata/en/d2/cb3f89455611d189710000e8322d00/content.htm
Although I think you can add code to your infoset and maybe restrict according to authority group, i.e.:
Use AUTHORITY-CHECK to restrict access to the database based on user.
Press F1 on AUTHORITY-CHECK to find out how to use it in the code

Analysis Authorizations on Infosets

Hi,
I just wonder if analaysis authorizations work on infosets in SAP BW(701) SP8.
I have got Infoobject A, which is authorization relevant. When I use this object in DSO/Cubes/Multiproviders then data level authorizations(analysis) are work fine.
But when I use this infoobject into an infoset then it has become F35_XXX. When I create authorization variable on F35 and restrict value of A to certain values in RSECADMIN(analysis Auth). then it is simply allowing user to all values of A instead of restricting access to values specific in RSECADMIN.
At the moment my analysis auth is restricted as follow:
0TCAACTVT = 03
0TCAIPROV = Infoset name
0TCAVALID = *
A = 100
Am I missing anything?
Regards,
Ramesh

Hi Ramesh,
Infoset authorization should also work for authorization relevant navigational attributes.
Navigation attribute has it's own setting for authorization relevant. It is set in RSD1 attribute tab.
Can you check whether it's set to authorization relevant there?
In addition, if a use has full authorization(*) for a certain characteristic (or navigation attribute), it might not be listed in the authorization log as detailed check does not need to be done for it.
Best regards,
Patricia

No authorization for InsoSet?

Dears,
I create a query based on an InfoSet. I assigned this query to a role, however, the user doesn't have the authorization to access this InfoSet even if I've set this InfoSet into this role.
My role profile for InfoSet is:
S_RS_ISET: Activity-03,InfoArea - ; InfoSet-.
Any suggestions are appreciated.
B.R
Gerald

Hi Ravi and Pradhiba,
Thanks for your help!
The root cause is that we're referring to the BW authorization template,the default profile for InfoSet is:
Auth. InfoObject: S_RS_ISET
Activity - 03
InfoArea - your InArea List
InfoSet - your InfoSet List
This profile is not correct,you need to remove this Auth. InfoObject, then add it manully. Set as following:
Auth. InfoObject: S_RS_ISET
Activity - 03
InfoArea - your InArea List
InfoSet - your InfoSet List
 InfoSet-Subobject - Data. -
Root cause for my issue
After you complete this, you have the correct authorization.
Hope you guys got the score I committed.
B.R
Gerald
Message was edited by:
Gerald He

Add authorisation for infoset

Hello,
I have created an infoset on material / mat_sales, and created queries on it.
I want that my users can lauch the query only on the material of their sales organisation.
When I go to transaction RSSM, and check the authorisation objects for my infoset, i get an empty list. For my others ODS and Cubes, I can see the authorisation objects available.
How does it works for infoset ?
Thanks in advance.
Aussie

I add to create a new authorization object and delete it. Programs have been regenerated I supposed.
So now I can choose the authorization objects for my new infoset.

Problem with Authorization for Planning folder

Hi an having a problem with providing authorization for a planning folder
i am getting the following error when i test it with test user
Error while calling up RFC
Message no. UPC202
Diagnosis
You have selected a function, to execute this the system must set up an RFC connection to another SAP System. However, setting up this connection was not successful. The following internal error message was generated:
"You do not have authorization for InfoCube ZT_MR_T "
Procedure
Inform the system administrator.
we are not pulling the data from any other server, all the data is on the sif any one has faced the same issue let me know.
Regards,
Abraham

Calling Thru Trans code: BPS0 in ECC 6
getting this error:
Error while calling up RFC
Message No. UPC202
Diagnosis
You have selected a function, to execute this the system must set up an RFC connection to another SAP System. However, setting up this connection was not successful. The following internal error message was generated:
"An error occurred during the receipt of a complex parameter."
after i check in bw trans code:st22
Following this error message:
Category                   Internal Kernel Error
Runtime Errors         PARAMETER_CONVERSION_ERROR
Application Component BC-MID-RFC
Short text
    An error occurred during the receipt of a complex parameter.
What happened?
    During a remote function call, an error occurred while converting
    a complex parameter.
What can you do?
    Note which actions and input led to the error.
    For further help in handling the problem, contact your SAP administrator
    You can use the ABAP dump analysis transaction ST22 to view and manage
    termination messages, in particular for long term reference.
Error analysis
    An error occurred during the conversion of a complex parameter.

Problem with Authorization for BW BPS planning Folder

Hi an having a problem with providing authorization for a planning folder
i am getting the following error when i test it with test user
Error while calling up RFC
Message no. UPC202
Diagnosis
You have selected a function, to execute this the system must set up an RFC connection to another SAP System. However, setting up this connection was not successful. The following internal error message was generated:
"You do not have authorization for InfoCube ZT_MR_T "
Procedure
Inform the system administrator.
if any one has faced the same issue let me know.
Regards,
Abraham

HI ,
I Checked it out we dont have that cube in our system.
Regards,
Abraham

Authorization for opening & Closing posting periods - OB52

Hi,
Is there any way to set authorization for opening & closing of posting periods in OB52?
My scenario:
I have 2 company codes - A & B assigned to 2 different posting period variant - say PPA & PPB.
The user belonging to CoCd A should not be able to open/close posting period of CoCd B and vice versa.
Is this possible through any authorization settings?
Request your help on this.
Regards,
Sridevi

Hi Sridevi
Please go through the following:
You can assign authorization groups for permitted posting periods. This means that, for example, some posting periods can only be opened for particular users within monthly or annual closing. You can only assign the authorization group at document header level and it only affects period 1. The authorization object is called F_BKPF_BUP (Accounting document: Authorizations for posting periods). Read the corresponding chapter on "User maintenance" in the "Assigning authorizations" topic.
"User maintenance"
Due to the modular authorization concept of the system, you can define authorization profiles which are tailored to the workplace of your employees. You can, for example, assign authorization to a workplace in the Accounts Receivable, Accounts Payable or General Ledger Accounting areas.
By assigning authorizations you define which business-related objects your employees are allowed to process and which editing functions are allowed.
In the following activities for authorization management, you must carry out the following for employees who are to work with the system:
Assign authorizations
The authorizations are assigned by specifying permitted values for the pre-defined objects.
Define profiles
In the SAP system, authorizations are grouped together in workplace profiles. Therefore one or more profiles must be allocated to the individual employee in the master record.
I hope this helps.
Regards
Kavitha

Authorizations for materials and material groups

Hello experts,
Is it possible to limit the authorization to make purchase requerisiton of some materials or material groups depending on the user?
I heard that it is possible be able to update some materials using the authorization M_MATE_MAT and including them in the material master, material group and user. But this also works for the creation of purchasing documents (PR,PO,RFQ,...)? Do I have to include this authorization for all the materials? If they do not have I understand that works for every people.
Thanks in advance for your help
Best regards,

Hi Madii,
actually Authorization works at the object level, i.s if you have provided the authorization for the user to makePR with certain Material Grp, then if you dont define that grp in the PO role, but still user will get the authorization from the PR role.
why you want to allow the user to make the PR of certain Mtrl Grp for which he should not be making the PO.
or let a different Body take care of the other mtrl Grp.
Hope it helps.
Regards,
Yawar Khan

Authorization for certain warehouse in stock transfer

I'm trying to create an authorization for stock transfer when To Warehouse equals a certain value. Is there a way to do it?

Hi,
How could I do it with an approval procedure?
You can create approval stages and template by using query
Is it with a query?
Yes
Will it be similar to a formatted search?
Yes
Try this query for row level with only one item.
Select Distinct 'True' FROM OWTR T0 inner join WTR1 T1 on T0.docentry = T1.docentry
Where $[$23.5.0] = 'ExScrap'
Note: Replace Exscrap with your warehouse name.
Thanks & Regards,
Nagarajan

Cancel a SD invoice error message "no authorization for transaction FB08"

Hi Gurus,
I am trying to cancel a SD invoice and am receiving the error message " no authorization for transaction FB08" is coming. Never has this happened in past, i have checked all the security authorizations also and they are in place. Accounting document status is showing as not cleared. Also, as per my understanding cancellation of invoice happens through VF11 which does not calls FB08. Please point out reasons as to why this could be happening and the possible solution thereof.
regards
Anmol Pareek

Hi Anmol
Once you got the error screen, immediately after that goto T code SU53 and expand all link. Take the screen shot and send it to your BASIS team to provide you proper access.
Yes you are correct cancellation is done through VF11 but sometime some programs internally calls other T codes.
take help of your basis team.

BW report authorization for restrict cost center

dear all,
i have problem on BW report authorization for restrict cost center.....when i execute the query, after selection screen, appear error message 'you cannot change zv_cctr for characteristic 0COSTCENTER during query'.
note : zv_cctr is variable restriction for costcenter, type processing = customer exit.
below the customer exit :
WHEN 'ZV_CCTR'.
    IF i_step = 2.
      DATA : gt_mstuidvscc TYPE TABLE OF ztbw_mstuidvscc,
             gs_mstuidvscc TYPE ztbw_mstuidvscc,
             wa_final2(10) TYPE c.
      SELECT * FROM ztbw_mstuidvscc INTO CORRESPONDING FIELDS OF TABLE gt_mstuidvscc
        WHERE userid = 'sy-uname'.
      LOOP AT gt_mstuidvscc INTO gs_mstuidvscc.
        wa_final2 = gs_mstuidvscc-kostl.
        l_s_range-opt = 'EQ'.
        l_s_range-high = wa_final2.
        APPEND l_s_range TO e_t_range.
      ENDLOOP.
    ENDIF.
Regards,
Tony

i defined variable as ready for input and mandatory.
regards,
Tony

How to set authorization for BW Workspace in backend and Portal ?

Hello Expert,
                     I have developed one BW Workspace in development environment . I have some query regarding BW workspace authorization for access in portal . Some of the queries are as follows:
1) How many composite provider we can build up inside of one workspace that we can go by Tcode ---RSWSPW ?
2) After activating the workspace it shows in RSWSPW ,but this workspace/composite provider will be available in Info Area(in RSA1) or some area else from where we can see this ?
3) Now our requirement is like that -- we have to provide some workspace for SD power user ,Finace Power user & Marketing Power users, in this situation how can we put authorization in bw workspace like SD power user should not see the FI Power user's & Marketing Power user's Workspace rather than his own workspace ?
4) In our requirement, we are going to produce some bex query on top of bw worksapce composite provider . For creating this query ,we searched provider by puting provider name directly in serach option , but is there any option to search the bw worksapce related composite provider by putting info area name in query search ?
5) In another senerio, we gone to create BO AA OLAP report on top of bw workspace composite provider but in source option we cant see the provider ,infact we could not search the composite provider in search option in source selection ----   do i need to navigate any step in compostie provider to make it enable for BO AA OLAP creation on top of composite provider ?
Expecting and appreciating your guidence and suggestion asap .
Thanks & Regards,
Surajit Pal

Hello Expert,
                 Do you have any idea regarding below questionaries about BW Workspace ?
1) How many composite provider we can build up inside of one workspace that we can go by Tcode ---RSWSPW ?
2) After activating the workspace it shows in RSWSPW ,but this workspace/composite provider will be available in Info Area(in RSA1) or some area else from where we can see this ?
3) Now our requirement is like that -- we have to provide some workspace for SD power user ,Finace Power user & Marketing Power users, in this situation how can we put authorization in bw workspace like SD power user should not see the FI Power user's & Marketing Power user's Workspace rather than his own workspace ?
4) In our requirement, we are going to produce some bex query on top of bw worksapce composite provider . For creating this query ,we searched provider by puting provider name directly in serach option , but is there any option to search the bw worksapce related composite provider by putting info area name in query search ?
5) In another senerio, we gone to create BO AA OLAP report on top of bw workspace composite provider but in source option we cant see the provider ,infact we could not search the composite provider in search option in source selection ----   do i need to navigate any step in compostie provider to make it enable for BO AA OLAP creation on top of composite provider .
Appreciating your early responds and thanks in advance .
Regards,
Surajit

Authorization for InfoSets

Similar Messages

Maybe you are looking for