Authorization Issue in Opening BPC client 7.0

Hi All,
I am very new to this BPC and configuration.
Here is my situation.
We have a BPC server and client in the same host connected with BW system.
All configuration were made and was up and running fine. since dynamic ip was allocated to the system the old IP got changed bcoz of which we were not able to connect to the bpc system.
So we made changes for the IP in the BPC webiste properties, but got error saying that domain\bpcadmin user does not have administrator rights. (the mentioned user is in admin groups )
Since we cannot figure out the solution we got back the OLD ip and made it static.
Still we are facing the same error.
domain\bpcadmin is used during the installation.
all the problems started after the IP issue, now the old ip is back.
Need some help as soon as possible.
Thanks and Regards
Jaianandh V

HI Jaianandh,
Your problem its not related to your IP (the best practice is to let it static) , the problem is that you are trying to access the bpc server with a user that is not the administrator of the application, so what you have to do is log in to the server with the user that you configure as the system administrator when you installed the application (see page 20 of the bpc 7.0 nw installation manual ) ( this user has to be also windows administrator). If you do not remember the user you can enter to transaction se38 and run the program UJA3_WRITE_SYS_USERS and select the new user that is going to be the application administrator (Domain\user).
Hope this helps,
Edited by: Guillermo Ferro on Mar 11, 2011 8:00 PM

Similar Messages

Authorization issues on opening a dataset

hello,
I am not sure if this is the correct forum for this or not.
I have an ABAP program that was written before I got here that performs the following statement
OPEN DATASET w_file FOR OUTPUT IN TEXT MODE ENCODING DEFAULT.
where w_file is a file on the app server. the users that run this program have no issues.
I have made a copy of the program to add some additional functionality and when the users run this program, the program is abending with the following error messages when trying to execute the same command stated above
Runtime Error OPEN_DATASET_NO_AUTHORITY
Except. CX_SY_FILE_AUTHORITY
I have talking to the security person and he is going to make another role with the authorizations needed to run the program but I am curious as to why the same person can run the one program successfully and my program (which does basically the same thing when it comes to the file processing) abends with the authorization issue.
thanks in advance for your help

Hi Timothy
Well it is the correct forum
When ever your accessing the file system the authorization object S_DATASET is checked.
This object has Filename, activity and <b>program name</b> as input parameter.
Best Practice would require you to limit access as much as possible, so my guess is that access only has been given to the original program, and not your new one - that's why your getting the ShortDump.
You can find the documentation here: http://help.sap.com/saphelp_webas620/helpdata/en/fc/eb3d5c358411d1829f0000e829fbfe/frameset.htm
Regards
Morten Nielsen

Authorization issue while opening the query in Bex Analyzer

Hi All,
I get the below error mesage while executing a report.I have executed the same query in RSRT and i get the below message.
I have created some roles and added to a test user for testing purpose and when i log in as a tets user i get the below meesage.
I am not sure what i am missing in the roles.When i tried executing the query in my id then no issues.
No authority for the node from characteristic 0EMPLOYEE__0MAST_CCTR, hier
Your user master record is not sufficiently maintained for object Authori
Kindly let me how to overcome this.
Thanks in advance.
Regards,
Kumar

Hi Harish,
Just check this query by this way:
Use Tcode RSECADMIN -> Analysis ->Execution as -> In Execute as user: Put your Test user Id also tick With log and select RSRT. Now use Start Transaction.
Might be the chance to get more details about this issue for resolution.
Also ensure, Have you did the User Comparison while assigning test user id in role?
Regards,
Abdullah

Issue in opening client context - segmentation

Hi,
I am new to CQ5. I've created a new segment. To test that, I selected the segment and pressed Ctrl-Alt-C to open the client context.
But the client context is not opening. Is there any other way to open it? Pl help.
Thank you!!!
Regards
Dilip B S

Try to open it from sidekick.

Authorization issue with Inbound Delievries

Hi,
Can we control authorization of Inbound Delivery creation/Change (VL31N/VL32N) based on receiving point or storage location.
Currently we are only able to control authorization at Plant level which is wide open and client needs restriction at Receiving Point or Storage Location Level.
Let us know the Autho Object to resolve thie security restriction issue.
Regards,

Hi,
As i know, we can control the authorization at the Receiving Point level, but i am not sure about the Storage Location level.
You need to check the authorization object with Basis people.
Thanks
Aktar

Performance issues with SAP BPC 7.0/7.5 (SP06, 07, 08) NW

Hi Experts
There are some performance issues with SAP BPC 7.5/7.0 NW, users are saying they are not getting data or there are some issues while getting data from R/3 system or ECC 6.0. Then what things do I need to consider to check, such as what DataSources or Cubes I need to check? So, how to solve this issue?
What things I need to consider for SAP NW BI 7.0 u2013 SAP BPC 7.5 NW (SP06, 07, 08) Implementation?
Your help is greatly appreciated.
Regards,
Qadeer

Hi,
New SP was released in February, and now most of the new bugs should been caught ,This has a Central Note. For SP06 it's Note 1527325 - Planning and Consolidation 7.5 SP06 NetWeaver Central Note to fix any issues. Most of the improvements in SP06 were related to performance, especially when logging on from the BPC clients.There you should be able to find a big list of fixes/improvements and Notes that describe those. Some of the Notes even have test description how to reproduce that issue in the old version.
hope this will help you
Regards
Rv

BI 7.0 Analysis Authorization issue: some reports displaying a blank page.

Hi All,
This is regarding BI 7.0 Analysis Authorization issue.
Overview:
we have restricted some queries at infoobject level.
Issue:
a. For some of the queries, we can see the selection screen but when we try to execute the query by clicking on the execute button (Queries WAD) we get a blank page, meaning nothing is displayed on the output (white/Blank screen).
b. When we execute the same query through RSRT, we get a message which says "Disconnecting from BW server..".
c. Let me explain further on this. Basically we are doing this in order to have limited access to Auditors at the client side. At the same time normal users should not get impacted due to this, hence we created two roles. One for normal users and other for Auditors.
d. Now the thing is that we execute the same report with normal user ID's the report executes properly and displays the output. it does not show the blank page.
e. But when we execute the same report with Auditors ID then we get a blank page.
Any idea why this is so?

Hi Neha,
I tried the below also,
GL Acnt
I EQ 0000134010
I EQ :
but still it didn't work.
No Infoobject is missing in Authorization Object.
For your point, "rsecadmin - > analysis -> execute as -> check for the desired user & analyze the log" it didnu2019t allow me to analyze, since as soon as click on execute button a pop-up comes up saying "Disconnecting from the BW server..."
As mentioned earlier also it is giving me the below message,
""I>> Row: 103 Inc: AUTHORITY_02 Prog: CL_RSR_RRK0_AUTHORIZATION RS_EXCEPTION 301CL_RSR_RRK0_AUTHORIZATION AUTHORITY_02"
Kindly suggest, since this is a show-stopper for us!
Thanks,
Ishdeep Kohli.

Issue with Opening a PDF file

We have just completed an upgrade of one of our servers executing Reporting Services.   The upgrade was from 2005 to 2008.
After we have rendered a report and have it saved in PDF format, we start having issues.
If we try to open the PDF by double clicking on the file name in Windows Explorer, Adobe Reader starts, but sits unresponsive and consumes an excessive amount of CPU cycles.    It never completes the open and we have to kill the Adobe Reader process in Task Manager.
If we start Adobe Reader, and then use the Menu to do FIle -> Open, the PDF file opens immediately.
We have attempted both methods using several different versions of Adobe Reader.    The issue occurs on all versions prior to 9.3.
Since we are a service organization, we are unable to force our clients to upgrade to a more current version of Adobe Reader without providing assurances that this will correct this issue.
Has anyone else seen this type of issue with opening PDF files rendered by Reporting Services?   And if so, what is the cause and how did you correct it?
Thanks
Steve

Hi there,
Please find attached a word document which contains the error that comes up when I try to open the PDF file. This PDF was e-mailed to me from one of the Safety companies that I receive e-mails from on a regular basis. I believe I am running Windows XP and the version of Adobe is Adobe Reader X. I hope this is enough info for you.
Janice Nadeau
[signatue deleted by host]

Uncaught exception raised in Open Directory client-side plugin

I am having an issue whenever I try to access my Open Directory. It says Uncaught exception raised in Open Directory client-side plugin.
In updateConfigurationViewFromDescription: NSInvalidArgumentException *** - [NSplaceholderMutableString initWithString:]: nil argument.
I'm having a hard time finding a directory with the relative plugin. Could you point me the right way? Perhaps finding and deleting that little bugger would help? I'm running Lion Server 10.7.3 with the 10.7.3 Server Admin tools. The goal here is to set up Deploy Studio for our organization, which I had working for a little while until this little guy started rearing his ugly head.
Thanks much-

Dear cdolan92,
not really. It has been a while. I think I also deleted server.app and admin tools and reinstalled those.
Perhaps I even did a backup of open directory and turned off the master to local and back to master.
But I am not sure any more.
Sorry.
Best
H.

ABAP dump on authorization issue

hello,
I am not sure if this is the correct forum for this or not.
I have an ABAP program that was written before I got here that performs the following statement
<b>OPEN DATASET w_file FOR OUTPUT IN TEXT MODE ENCODING DEFAULT.</b>
where w_file is a file on the app server. the users that run this program have no issues.
I have made a copy of the program to add some additional functionality and when the users run this program, the program is abending with the following error messages when trying to execute the same command stated above
Runtime Error      OPEN_DATASET_NO_AUTHORITY
Except.               CX_SY_FILE_AUTHORITY
I have talking to the security person and he is going to make another role with the authorizations needed to run the program but I am curious as to why the same person can run the one program successfully and my program (which does basically the same thing when it comes to the file processing) abends with the authorization issue.
thanks in advance for your help

I believe you can use FM to check if user has sufficient authorization.
NOTE: authority-check uses PROGRAM NAME, so it looks like your profile should be updated with new program name.
Here is what help says :
                                                                                Check file access authorization
Functionality
This function module allow you to check the user's authorization to
    access files (with the key words OPEN DATASET, READ DATASET, TRANSFER and
    DELETE DATASET). A check should be performed before opening a file.
The authorization check is performed uwing the authorization object
    S_DATASET.
Description of function parameters:
o PROGRAM: Name of the ABAP/4 program that contains the file access. If
       no program name is specified, the system assumes the current program.
o ACTIVITY: Access type. The possible values are:
- READ:              Read file
       - WRITE:             Change file
       - READ_WITH_FILTER: Read file with filter function
       - WRITE_WITH_FILTER: Change file with filter function
       - DELETE:            Delete file
o FILENAME: Name of accessed file
Example
TYPE-POOLS SABC.
CALL FUNCTION 'AUTHORITY_CHECK_DATASET'
         EXPORTING PROGRAM          = 'ZDATASET'
                    ACTIVITY         = SABC_ACT_READ
                    FILENAME         = '/tmp/sapv01'
         EXCEPTIONS NO_AUTHORITY     = 1
                    ACTIVITY_UNKNOWN = 2.
Notes
The values to be passed as the ACTIVITY are defined as constants in the
    TYPE-POOL SABC.

APPLICATION created in Admin BPC client can't see in Office BPC client

`Hello Gurus,
I am an SAP BI Consultant and having around 4 years of experience. I have started to work on BPC 7.5. I have created dimensions and APPLICATION as well successfully. however when i try to open my Microsoft office BPC client, i am able to get my App.set but i can't see my Application.
Can anybody tell me what should i do now ? Also guys if you have documentation on simple scenarios in BPC then do please share the links or documents on komikshah at google account.
Regards,
Komik Shah
Edited by: komik shah on Nov 25, 2010 4:49 AM

Hi Both of you.
Thanks for your prompt response. When i try to click on SECURITY - > Member Access Profile. i am getting exception which is mentioned below.
just-in-time (JIT) debugging instead of this dialog box.
Exception Text **************
System.Exception: <webservicelayer><Exception><ExceptionInfo><exType>System.NullReferenceException</exType><exMessage>Object variable or With block variable not set.</exMessage><exSource>Microsoft.VisualBasic</exSource><assembly>Microsoft.VisualBasic.CompilerServices.LateBinding, Microsoft.VisualBasic, Version=7.0.5000.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</assembly><stackTrace>   at Microsoft.VisualBasic.CompilerServices.LateBinding.LateGet(Object o, Type objType, String name, Object[] args, String[] paramnames, Boolean[] CopyBack)
   at OSoft.Services.Webservice.UserService.UserService.GetMProfilesForTreeView(String sParameter, String strContext)
</stackTrace><exTime>11/25/2010 1:44:09 AM</exTime></ExceptionInfo><WebServiceLayer><machineName>SAPDEV10</machineName><userName>SAPDEV10\idhasoft</userName><csnComponent>EPM-BPC-NW</csnComponent><className>UserService</className><MethodInfo><methodName>GetMProfilesForTreeView</methodName><Params><strSecurity><SECURITY><CheckSum><![CDATA[J3P2vSZgeynH49mQHt4622csEiI=]]></CheckSum><IsZipped><![CDATA[False]]></IsZipped><IsEncrypted><![CDATA[True]]></IsEncrypted></SECURITY></strSecurity><strParameter><Parameter><Param1 Name="DomainName"><![CDATA[sapdev10]]></Param1><Param2 Name="ID"><![CDATA[sapdev10\idhasoft]]></Param2><Param3 Name="TaskType"><![CDATA[USER]]></Param3></Parameter></strParameter><strContext><Context><AppSet><![CDATA[ZRB_GM_PLAN]]></AppSet><UserID><![CDATA[sapdev10\idhasoft]]></UserID><App><![CDATA[MemberAccessProfiles]]></App><Language><![CDATA[EN]]></Language><Session><SessionID><![CDATA[]]></SessionID><Machine><![CDATA[192.168.4.137]]></Machine><Machine_Name><![CDATA[KOMIK-PC]]></Machine_Name><ModuleName><![CDATA[ADMIN]]></ModuleName></Session><CurrentView><Dim><Name></Name><Value></Value></Dim></CurrentView></Context></strContext></Params></MethodInfo></WebServiceLayer><additionalInfo></additionalInfo><displayMode>ERROR</displayMode></Exception><webservicelayer>
   at Microsoft.VisualBasic.CompilerServices.LateBinding.LateGet(Object o, Type objType, String name, Object[] args, String[] paramnames, Boolean[] CopyBack)
   at OSoft.Consumers.Admin.AdminTrvMenu50.TrvMenu.GetDataForTreeView(String strID, String strTag, String strAppname)
   at OSoft.Consumers.Admin.AdminTrvMenu50.TrvMenu.GetNodeMember(String strFullPath, String strTag)
   at OSoft.Consumers.Admin.AdminTrvMenu50.TrvMenu.AddDataNode(TreeNode& SelectNode, Boolean bQuery, Boolean bDraw)
   at OSoft.Consumers.Admin.AdminTrvMenu50.TrvMenu.trvApSet_AfterSelect(Object sender, TreeViewEventArgs e)
   at System.Windows.Forms.TreeView.OnAfterSelect(TreeViewEventArgs e)
   at System.Windows.Forms.TreeView.TvnSelected(NMTREEVIEW* nmtv)
   at System.Windows.Forms.TreeView.WmNotify(Message& m)
   at System.Windows.Forms.TreeView.WndProc(Message& m)
   at System.Windows.Forms.ControlNativeWindow.OnMessage(Message& m)
   at System.Windows.Forms.ControlNativeWindow.WndProc(Message& m)
   at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)
Regards,
Komik Shah

Authorization issue in WAD when executing planning function

Hi All,
I am facing the bellow authorization issue-
Termination message sent
WARNING BRAIN (800): You do not have the authorization for component !!AZF2PO_AGR
MSGV1: ZF2PO_AGR
MSGV2: REP
MSGV3: !!AZF2PO_AGR
MSGV4: 16
ABEND RSBOLAP (002): No Authorization
I am getting this issue When Calling Planning function from WAD application using button. This authorization fail is happening in portal when the Planning function is executed.
Error explains that there is no authorization for component u201C!!AZF2PO_AGRu201D.Where as in actual we donu2019t have any component as stated.
Instead we have an aggregation level with technical name ZF2PO_AGR.
We have already Assigned the below Planning objects-
S_RS_ALVL
S_RS_PLENQ
S_RS_PLSE
S_RS_PLSQ
S_RS_PLST
To Summarize-There is a web application with button linked to planning functuion.When clicked on this button after execution of web template we get the above error.
Have found note 1000006,but it says Support package 12 and all but we in support package 20

Hi Guys,
I know this thread is answered but I have a similar problem I think.
I have a WAD that is published to the portal. I have added the WAD to a page via a hyperlink, the page resides in KM. When a user opens the page, via a URL iView, the see the page, but when they click on the link to open the WAD, I get the following error:
Portal runtime error.
An exception occurred while processing your request. Send the exception ID to your portal administrator.
Exception ID: 07:19_26/02/10_0067_18934750
Refer to the log file for details about this exception.
When I assign the Super Admin (UME Role) to the user, they can execute the WAD no problem.
I am not an Authorizations person, so any pointers as to where I should start looking would be greatly appreciated.
Thanks.
Freddie.

Authorization Issue in SM50

Hi All,
One of our user is facing authorization issue in SM50. He goes to SM50 and tries to open a work process. This is where he gets message "You are not authorized to use function Work Process List".
When I check the trace, I see only missing access for SM04. I checked trace for my own id (with no error) and found that SM04 is not even checked for my id and rest all authorization checked are same for both ids.
I assigned a BASIS role to this user and that resolved the issue. But strange thing is still that user's trace shows SM04 missing. (SM04 is not there in that Basis role).
Now I don't understand what exactly is the missing authorization for this user. Definitely SM04 is not the one and I can't assign this basis role to him. Could any one guide with this issue? Below is the trace for the user in both cases (without Basis role assigned and with this role assigned).

Hi Julius,
I created a test id with same rights as the user. My id has SAP_ALL assigned. Now I am doing exactly same activity (double click on same work process). But I don't see SM04 access being checked for my id.
Even if I assume that I am doing something different than the user. The thing which is strange to me is: when I assigned a basis role which doesn't have SM04 access, to the test user, I still see the same trace results but this time there is no authorization error. I don't think there are authorization checkes which are not recorded in ST01 trace.
There could be one tiny possibility that SM50 is throwing an error message (authorization error) but its not triggered through failed authorization check, instead based on some other condition. For that I would need to bedug the tcode. But that doesn't seem likely as this is a standard and widely used tcode.
Thanks

BPC Client tool configuration for multiple appset selection

Hi Expert,
is there any way to configure BPC client to select multiple applications simulteniously instead of closing one application to select another application, nothing but multiple BPC sessions at a time like SAP GUI sessions.
thanks
Venkata

Hi,
I guess you are talking about BPC excel. You cant have different sessions in BPC. If you open a report1 from application1 and then if you want to open report2 from application2, you need to change the CV. Once the report2 has been opened in application2, the CV of report1 will still show application1. However, if you want to refresh report1, it will access application2. The CV of the last opened report holds valid for all the previously opened reports.
Having said this, we do have a workaround for the above problem. When you open report1 from application1, go to workbook options and click on "save the active session CV with this workbook". Then you can change your CV to application2 to open report2. And again do the same thing for report2 as well. With this, both the reports will work in their own region. However, you wont be able to change the CV. Even if you do change the CV, the report will not be refreshed based on the new CV. It will still work for the saved CV.
Hope this helps.

PGI for STO - Mvmt :351 - Authorization issue

Hi,
I have an authorization issue while posting GI. In my scenario, user does GI by movement type 351 for Plant A to Plant B or Plant A to Plant C. To execute this transaction, he needs authorization for Plant A, Plant B and Plant C. Restricting the authorization to only Plant A does not allow him to post GI, But if he is authorized for Plant A , B and C then he can do GI for B to C or B to A as well. Please suggest if there is any authorization object to sort it out.
Yuvnish

I am also experiencing this issue with movement type 351 in my Project.
The Project authorisation design has restricted roles to particular movement types and users to particular plants.
We are seeing that movement type 351 is requiring authorisation access to both the issuing and receiving plant (presumably becuare the movement puts the stock into 'stock in transit' stock of the receiving plant, so needs access to this plant).
However, giving the user access to multiple plants means the user can transact other movement types in these other plants - because the authorisation has been opened up for multiple plants and the authorisation check on plant seems a higher level than movement type.
In our design users should be restricted to just their own plant and in the case of the 351 movement be able to transact the movement 351-GI out of their plant successfully without needing the access to the 'receiving plant' as well. Is there a solution?
I note that movement type 303 does not require this open plant authorisation, and that movement puts the stock in 'transfer', whereas 351 movement puts the stock 'in transit', so I'm wondering what is the difference from an authorisation check perspective between these 2 movements? We will use 303 movement for the time being until a solution is sought for 351. We want to use Stock Transport Orders (with movement 351) from an MRP perspective (movement 303 doesn't work with planning).
Many thanks

Authorization Issue in Opening BPC client 7.0

Similar Messages

Maybe you are looking for