AUTHORIZATION ISSUE: cube level data restriction in BI

Hi all,
I have few cubes and ODS which are containing data. The requirement is to restrict the cube level data.
Eg : we have option to see the cube data in RSA1( ADMIN WORKBENCH).Right click on cube manage data.
the requirement is to restrict to see the data company code = 111(only)
Likewise for few users only company code = 222.
If they try to see other than 111, they should get u201Cno authorization messageu201D.
Cube data
company code         distribution channel         account     amount
111                         10                                   10002     100
222                        20                                      10002     200
333                        30                                       10002     300
444                        10                                      10002     400
1111                20                                       10002     500
1111                30                                      10002     600
2222               30                                           10002     700
Thanks in advance.
Jo

Hi MaikI,
Thank for the inputs.
Actually i want restrict the data based on the ANALYSIS AUTHORIZATION - 0TCAIPROV.
I want to give s_rs_comp-provider value *, and i want to control the query (data) access through analysis authorization. i want to create zanalysisauth which contains 0TCAIPROV = $variable.
variable is populated with one/two provider values at runtime .
based on the runtime variable population user should get access.
But with this implementation user is able to open all queries.where i am going wrong? how can i do this?
Regards,
Joseph

Similar Messages

User Level Data Restriction in OBIEE

Hi Experts,
Need your help in implementing the below logic in OBIEE.
I have a requirement where user needs to view only particular data. Say for example ,
UserA   Bangalore
UserB   Delhi
UserC   Mumbai
Once User A logins he / she should be able to view only Bangalore and the same follows with the other users.
I have this User and area/city relation stored in a table.
Please let me know how can I achieve this.
I have these user created and I am unable to establish a relation between the user and the city .
Please let me know your suggestions on how can I implement this.
Appreciate your immediate response.
Regards,
Veena A

Hi,
Detailed description is as follows
1. Create 3 users -> userA, userB, userC from Manage->Security->Users in Administration Tool.
2. Create Intialization Block from Manage->Variables->Intialization Block right click on white space in Administration Tool. Give a name to it
3. Click on Edit Data Source in Intialization Block that you have created and write the query
SELECT 'user_city', column of city FROM table_name which has city column.
4. Create 4 session variables USER, USER_CITY, GROUP, LOG_LEVEL(Note : The order of creation of variables should be same). for USER , LOG_LEVEL and GROUP an alert will come saying that these varibles are of special purpose, click on Yes to create it.
5. Go to Manage->Security->Users in Administration Tool and double click on userA->Permissions click on Filters tab and click on Add button. Select the table which has city column. click on '...' button next to Business Model Filter Column to get the Expression Builder - Security Filter.
6. In the Expression builder select logical tables, and then select table which has city column and click on Insert button. Click on '=' in Expression builder. Click on Session Variables. double click on user_city session variable. (for example : Employee_Manager."Locations Ma"."Loc Name" = VALUEOF(NQ_SESSION."UserLocation")) and then click on ok. save reporsitory. restart BI server from services and launch the BI Answers and login as userA and check the city.
For more details visit
http://www.oracle.com/technology/obe/obe_bi/bi_ee_1013/bi_admin/biadmin.html
Scroll down to topic -> Using Initialization Blocks and Variables
Thanks and Regards,
Mahesh
Edited by: magu on Apr 27, 2009 3:10 PM

Authorization issue to view cube contents

Hi Gurus,
I am getting Authorization issue to view cube contents in Production server, When I execute the cube it is showing me the following statement.
"You do not have sufficient authorization for the infoprovider ZMMG_C05".
Please provide me a possible solution for this.
Thanks,
Jackie.

Hi,
Two things to be checked with respect to authorization for this one.
1) Functional Roles: Check whether Info cube is present in the functional roles that are assigned to you.
                              If not you need to get the functional role in which the Infocube is assigned.
2) Data Access Roles: Check in the data access roles assigned to you, whether you have the access
                                  to the selection that you are using to see the data in the info cube. Else, request
                                  BASIS team to assign the appropriate data access roles to you.
Hope this helps.
Regards,
Bharat

Master Data is missing for Specified Matierials at cube level !!

Hello Experts,
Good Day..!!
I have been facing an issue in my project, Master Data is missing for a KF and values are not displayed in a report for the specified matierial Nos. Where as other matierial nos KF values are displaying.
Intially, i checked from Cube End and found the issue is in Cube level only.
For that in the data flow, i already checked whether the data has been loaded perfectly or not.
Tried to reran the DTP once again and checked the values for the KF in the report and unfortunately KF values are not displaying for specified matierials only.
Kindly advice how can i move further..
Thanks,
SN.

Hi,
Check if SIDs are generated for the infoobject, if not try to do the change run attribute and then load the data to Cube.
Hope this helps...
Rgs,
Ravikanth.

Authorization issue when I display data from ODS, Infocube, Multirprovider

Hi Experts,
When I'm trying to display data for ODS, Infocube, Multiprovider, Infoset in production system, facing aurhorization issue.
Can anybody have idea what is authorization objects to display data from Infoproviders.
SIRI

Check for below authoriztions in your role:
S_RS_ICUBE
ACTVT          03
RSICUBEOBJ     AGGREGATE, CHAVLREL, DATA, DATASLICE,   DEFINITION, EXPORTISRC, UPDATERULE
RSINFOAREA     *
RSINFOCUBE     <your cubes>
S_RS_ODSO
ACTVT          03
RSINFOAREA     *
RSODSOBJ     <your DSOs>
RSODSPART     DATA, DEFINITION

Navigational Attribute data is not display in Cube level and reporting

Hello ALL
Iam facing a problem like,I created Navigational attribute and I selected that navigational attribute in cube level also but data is not display in cube level.
What will be the problem?Pl help me out.
regards
balaji

Hi Dinesh
You mean base characteristic means loading data after creating Navigational attribute?Is it this way,(orelse can u tell me about this base characterstic)
Yes after making that particular attribute as a navigational attribute I loaded data in master data tables.
How to run Attribute change run?can u give me steps
regards
balaji

Restrict Authorization at Material level during production confirmation

Hi SAP Gurus,
I would like to ask if its possible to restrict authorization at Material Level during production confirmation.
Our scenario is we have SFG and FG which are handled by different group of people but it has the same Order Type. Now we want to restrict authorization such as one department can only confirm SFG and the other department can confirm FG only.
Is it possible to set authorization at material type or production scheduler level. IF not possible, is there other way except creation of new Order Type?
Thanks,
Raymond

Hi Raymond,
DO you mean I should create a customized table for this?
Yes
Are there no standard way?
As per my knowledge, you can control through production order type, so you need to create seprate order type for this
Thanks,
Sankaran

Authorization Issue on creating New Data Source

Hi Experts,
   We met several issues after we upgrade one of our BW system from 3.5 to BI 7.0.
   We have a customized role for our BW developer which name is SYN:BC_USER_FOR_BWDEVELOPER. When we assign this role to the users, the users should have access to create new data source, create/change on ODS, infocube, infobjects,etc. The developers also need access transformation roles and BEX Web Templates.
   After we upgrade our BW system from 3.5 to BI7.0. All the access has been denied. Then I tried to added many authorization objects in the developer role, then the developer role can access all the data source except transformation rules.
The following is the authorization objects which I have added:
S_RS_BCS
S_RS_BITM
S_RS_COMP
S_RS_COMP1
S_RS_CTT
S_RS_ERPT
S_RS_HIER
S_RS_ICBE
S_RS_IOBJ
S_RS_IOMAD
S_RS_ISET
S_RS_ISOUR
S_RS_ISRUM
S_RS_THJT
S_RS_TOOLS
S_RS_UOM.
S_RS_DS
S_RS_ISNEW
S_RS_DTP
S_RS_TR
S_RS_PC
S_RS_OHDST
S_RS_DAS
S_RS_BTMP.
I am not sure whether there are any other authorization objects or sth should be added to the developer role, could you give me some suggestions?
Thanks,

When i execute create transformation rules with the account which already have bw_all role, the system shows you have no authorization.
The following is the error after i execute /nsu53:
Authorization check failed.
Authorization Obj. S_RS_TR Data Warehousing Workbench -Transformation
Object Class RS Business Information Warehouse
   Activity                                03
   Source                                 ZM_SUM
   Target                                   ZWHYTEST
   Subtype of the Source
   Subtype of the Target
   Type of Source                      ODSO
   Type of Target                       TRCS
-fran

Hide all members' value for specify date from CUBE level

Hi There,<o:p></o:p>
With my current CUBE data available for yesterday, but 2-5 % data also get loaded through ETL for today as it's live data feed and process all data
at CUBE level.<o:p></o:p>
Now problem here till yesterday all data are okay and that make send to end user, but chunk of data for today (2-5 %) don’t make any sense…. now question
here is any way I can hide value for all members for today which is (2-5 %) only, that way data visible from CUBE level only till yesterday.<o:p></o:p>
Exactly what I mean if anyone connect to my CUBE they can only see data till yesterday (day-1), but not for today.<o:p></o:p>
Regards,<o:p></o:p>
Nagen<o:p></o:p>
Thanks, Nagen

Hi,
two possibilities:
1) Create a security implementation, so that the users are allowed to see the data until yesterday. Dimension Security on your Date Dimension)
2) Scope the Dimension Member for future Dates to NULL
Kr Jürgen

Cant view rdbms level data in HOLAP CUBE

i have created an holap cude using EIS
But i am unable to view the rdbms level data.
for ex i have a market dimension.
in which i have enable hybrid analysis for city level data....
but i am unable to access it in spreadsheet add-in or in obiee answers. niether can i see in essbase(preview data).
hence my cube formed isnt an HOLAP one..
kindly help guys......

Have you updated the essbase.cfg file with
HAENABLE Appname dbname TRUE
Then Analytic Services retrieves all members of a Hybrid Analysis Relational Source through API's, reports, or Spreadsheet Add-in.
If HAENABLE is on, requests can transparently span across the Hybrid Analysis Relational Source.
By default it is set to FALSE.
If it is false Analytic Services turns off retrieval of members of a Hybrid Analysis Relational Source for all clients.

Authorization issue in BPS

Hi guys,
I've the authorization issue in a BPS application, where a user can upload a flatfile into a BPS-cube, but only when I select in the authorization object S_RS_AUTH 0BI_ALL.
Without selecting 0BI_ALL (another analysis authorization) yields to the message, that the user has not enough authorization...
Now the user gets access to data in the BW reporting to all the organizational marks like the organization unit (0ORGUNIT).
How is it possible to design the authorizations / analysis authorization, that the same user can upload data via flatfile, but gets only access to transaction data for organizational data which he should see???
How should the analysis authorization should be designed? Has it something to do with the techn. char. like 0TCAACTVT?
THX in advance!
Clemens

Hi,
Have you tried creating Authorization Variable for organizational Unit ?
This will give restricted access to data based on the authorization assigned .
Thanks
Pratyush

Data load issue with export data source - BW 3.5

Hi,
We are facing issues in loading data with the help of export data source.
We have created export data source of 0PCA_C01 cube. With the help of this export datasource, we are loading data to other custom cube. Scenario is working fine in development server.
But when we transported objects to quality server data is not getting loaded to custom target cube.
It is extracting zero records. All transports are ok and we have generated export datasource in quality before transports .Also regenerated export datasource after transport and activated infosource, update rule via RS* programs. Every object is active but data is not getting extracted.
RSA3 for 80PCA_C01 datasource isn't extracting any record in Quality. Records getting extracted in development. We are in BW 3.5 with patch level 19.
Please guide us to resolve the issue.
Thanks,
Aditya

Hi
Make sure that you have relevant Role & Authorization at Quality/PRS.
You have to Transport the Source Cube first and then Create a Generate Export Data Source in QAS. Then, replicate data sources for BW QAS Soruce System. Make sure this replicated Data Source in QAS. Only then can transport new update rules for second cube.
Hope it helps and clear

Authorization Issue to Upload file in Integrated Planning

Hi All
I have included the planning role for the user...which is the same as mine..I can execute and upload the file..when I login with the user iD, it says you are not authorize to upload zFILE_SEQ/...in my role..there is Z* values also..
No idea how to rectify as I dont see any problem??
pppls help..

Hi,
Could you please look into the authorizations that restrict data selection for the user, say if he control one or two costcenters and you have access to all costcenters. Also you need to have that object in the Aggregation level that allow the user selection. You need to include that info object restriction based on authorization value in the aggregation level and in the upload file.
Also try to execute the input ready query from RSECADMIN T-CODE . Use the 3rd tab and choose the user id and choose with log .Then on the next screen will be RSRT and choose your input ready query and execute. Then choose back button and the pervious screen choose display log, which will give you detail log on the authorization issue ...
hope it helps...
cheers,
Balaji
Edited by: Balaji NS on Jun 4, 2011 1:47 AM

BW authorizations at report level

hi,
i have a requirement to restict user's access to certain cost centers on a report.
i have created a new authorization object and switched on the reporting authorization on the cube for this object. i have created an authorization variable and this report is working like it should. But the issue is that when i switching on reporting authorization at the cube level, every query on the cube is getting affected. is there a way i can turn on this reporting authorization on the report level rather than the cube level and not affect the other queries?
thanks,
Parthava.

Mark the Cost center Infoobject as Authorization relevant (RSD1 -> infoobject -> Business Explorer tab -> Authorization relavent) and restrict the user to the corresponding costcenters using correspnding authorization objects.
http://help.sap.com/saphelp_nw70/helpdata/en/a0/48f438f3422f2ce10000000a114084/frameset.htm
Assign points if helpful!
Regards, Uday

Authorization issue regarding Bex Query

Hi All,
User Requirement: When ever the user is executing the report in Design Studio, user can able to see all the company codes (summary data) in the main page of the dashboard. If user wants to drill down to a particular Comp code, then user should access only which are authorized. Ex: If the user Test4444 is executing the report, then he/she can able to see all the comp codes data in the main page of the dashboard. If the user wants to drill down further to see the comp code wise data, then he/she should not allowed to see except comp code-4444 or what and all authorized .
Back ground work:
I have a Bex query, which is using the Design Studio. In this query, "0COMP_CODE" is a char InfoObj and I have created a Auth variable on this InfoObj. There are 4 autho objects created based on this "0COMP_CODE". And also 4 Roles and 4 users have created.
Each autho_Objet has assigned to that corresponding Role and that Role is assigned to that correspond User. Details are as follows.
Autho_Objet
Role
UserID
ZTEST_MAIN (which includes all - 23 compny codes)
ZMain_Role
All users have to access this role
ZTEST_1111 (which includes only CC- 1111
Z1111_Role
Test1111
ZTEST_2222 (Which Includes only CC - 2222)
Z2222_Role
Test2222
ZTEST_3333 (Which Includes only CC - 3333)
Z3333_Role
Test3333
ZTEST_4444 (Which Includes only CC - 4444)
Z4444_Role
Test4444
To achieve this requirement, I have created 1 auth.object for all Comp.Codes and assigned to one main role and this role is assigned to all users. This looks fine and hopefully it will work.
The problem is the next step of drill down to comp.code. Here I have created individual autho.object per Role per User and mapped accordingly. Unfortunately, user can able to access all the comp.codes data because of the main role assigned. I got stuck here in this second level restriction. Could some one can through a light how we can achieve this in authorization. It would be a great assistance if some one help here. I would be much appreciated and grateful to your assistance and inputs. Thank you in advance!
BR
Venkat...

In the role ZTEST_MAIN,
You need to remove all company codes as this is overriding the rest
Then add aggregate authorization, ie "0COMP_CODE" = ":"
This is a special authorization which grants authorization to see the summation of all the 0COMP_CODE without giving detailed authorization to any.
The rest of your design is fine.
You should then use RSECADMIN to check any authorization issue you have.

AUTHORIZATION ISSUE: cube level data restriction in BI

Similar Messages

Maybe you are looking for