Authorization issues in executing the chain

Hi Techies,
When im triying to execute the chain, the chain allows me to do so and went well but all the jobs corresponding it were running under my ID. Later I tried to schedule the chain on ALEREMOTE, but it throws error saying ALEREMOTE do not have authorization to execute the infosources as it hits its first infosource.
We made the Trace On and tried to find any unauthorized hits in it, but the trace went well wthout any error.
Need to confirm:
1. ALEREMOTE was assigned with CPIC User role, does this effects?
2. In BW Global Settings, for the field BW suer ALE entry have ALEREMOTE, where earlier it was not there. After making this entry, the chain does not even allow to trigger on my ID and on ALEREMOTE.
3. If this entry effects, whats the significance of this field.
Regards,
Subhash.

Hi Subhash,
for the administration processes that are bundled in a process chain, you require authorization for authorization object S_RS_ADMWB.
To work with process chains, you require authorization for authorization object S_RS_PC. You use this authorization object to determine whether process chains can be displayed, changed or executed, and whether logs can be deleted. You can use the name of the process chain as the basis for the restriction, or restrict authorizations to chains using the application components to which they are assigned.
http://help.sap.com/saphelp_nw70/helpdata/en/35/c7e442e3c15704e10000000a155106/frameset.htm
The BI background user has all the required authorizations to execute all BI process types. Other users have to assign themselves these authorizations so that authorization errors do not occur during processing.
http://help.sap.com/saphelp_nw70/helpdata/en/d3/53e03b8235953ee10000000a114084/frameset.htm
Hope this helps.
Regards
Andreas

Similar Messages

  • Issue While executing the Query for Pagination using ROWNUM with like

    Issue While executing the Query for Pagination using ROWNUM with like.
    Database is Oracle11G.
    Oracle Database Table contains 8-9 lakh records
    1) SQL equal (=)
    SELECT /*+ FIRST_ROWS(n) */ ROWNUM RNUM, A.* FROM LINE A
    WHERE A.REFERENCE = 'KMF22600920'
    Execution Time:- 0.00869245 seconds
    Returns 2 resultsets
    2) SQL like (one %)
    SELECT /*+ FIRST_ROWS(n) */ ROWNUM RNUM, A.* FROM LINE A
    WHERE A.REFERENCE = 'KMF22600920%'
    Execution Time:- 0.01094301 seconds
    Returns 2 resultsets
    3) SQL like (two%)
    SELECT /*+ FIRST_ROWS(n) */ ROWNUM RNUM, A.* FROM LINE A
    WHERE A.REFERENCE like '%KMF22600920%'
    Execution Time:- 6.43989658 seconds
    Returns 2 resultsets
    In Pagination, we are using Modified version of SQL Query 3) with ROWNUM as mentioned below :-
    4) SELECT * FROM (
    SELECT /*+ FIRST_ROWS(n) */ ROWNUM RNUM, A.* FROM LINE A
    WHERE REFERENCE like '%KMF22600920%' AND ROWNUM <= 20 ) WHERE RNUM > 0
    Execution Time:- Infinite
    ResultSets:- No as execution time is infinite
    a) Instead of like if we use = in the above query it is returning the 2 resultsets (execution time 0.02699282 seconds)
    b) Instead of two % in the above query, if use one example REFERENCE like 'KMF22600920%' it is returning the 2 resultsets (execution time 0.03313019 seconds)
    Issue:- When using two % in like in the above query i.e. REFERENCE like '%KMF22600920%' AND ROWNUM <= 20 ) , it is going to infinite.
    Could you please let us know what is the issue with two % used in like and rownum
    5) Modified version of Option1 query (move out the RNUM condition AND RNUM <= 20)
    SELECT * FROM (
    SELECT /*+ FIRST_ROWS(n) */ ROWNUM RNUM, A.* FROM LINE A
    WHERE REFERENCE like '%KMF22600920%' ) WHERE RNUM > 0 AND RNUM <= 20
    Execution Time:- 7.41368914 seconds
    Returns 2 resultsets
    Is the above query is best optimized query which should be used for the Pagination or still can improve on this ?

    This would be easier to diagnose if there was an explain plan posted for the 'good' and 'bad' queries. Generally speaking using '%' on both sides precludes the use of any indexes.

  • Authorization issue to execute query via analyzer

    Dear,
    We are experiencing an authorization issue that we can not solve...
    We have grant to user the expected objects to execute query (S_RS_COMP & S_RS_COMP1) and the central objects like S_GUI, S_USER_AGR.
    When we test in RESCEADMIN, everything is fine. We can execute the query.
    When we test it in the analyzer, the variable screen does not pop-up and we get the error message:
    "There is no variable in the workbook, which allows user input"
    Does anybody have a direction to help us to orientate our investigation?
    Many thanks,
    Rodolphe

    Hello,
    What is the basic settings you have in the Query Properties basic setting tab
    Try making it mandatory
    Regards
    Nitin Bhatia

  • Authorization issue while executing a Web Template in SAP BI

    Hello All,
    I am facing an issue while executing a webtemplate .
    I have a webtemplate which is being executed by end user, upon execution user must be able to fill in the value for data and submit. The query uses a characteristic KPI identifier ,SBU,BU,product, Region,Affiliate etc . All the mentioned charcaterisitics in Analysis authorization have * value except  KPI identifier and SBU. And Activity 02,03 is provided for the infoprovider.
    When a single value (Ex:KPI01) is provided in KPI identifier the webtemplate works fine in change mode. But when additonal value (Ex KPI02) is being added to the characterstic KPI identifier the webtemplate opens only in display mode. There is no authorization failure as well in the RSEC trace.
    Actually we created two separate roles for each KPI identifier earlier but when two roles provided to a user in combination it was behaving the way i mentioned above. So we tried to create a single role with two values of KPI Identifier in single analysis authorization and it is still the same.
    Please suggest what might be the reason for this behavior. Thank you
    Regards,
    Mohammed Ghouse

    Hi Brian,
    Thanks for your reply
    RSECADMIN does not show any missing authorizations when checked , but what is observed is that the check happens only on display
    These are the characteristics being checked by the query
    Characteristic      Content in SQL format
    OTCACTVT         GRI_IC005 IN ('KPI054','KPI055')
    GRI_IC005          AND GRI_IC007 = 'MFE'
                                AND 0TCAACTVT = '02'
    GRI_IC007
    Comparison with Following Authorized Set
    Characteristic      Content in SQL format
    0TCAACTVT      I CP *
    GRI_IC005        I EQ KPI054
                               I EQ KPI055
    GRI_IC007          I EQ MFE
    And it says its authorized. But still the screen is in display mode. What might be the reason for this behavior.

  • Authorization issue while executing F110 tcode

    Dear All,
    User is facing the proble while executing the tcode F110, user wants to change some payments, but does'nt have change option(pencil mark button is not appearing).
    according to su53 screen shot analysis, fdkuser tcode is missing. this fdkuser is asssociated with all critical obects.
    Kindly do the neeful.
    Thanks & Regards,
    Ganesh.

    >
    Jurjen Heeck wrote:
    > > Recommendation is to do it in dev as it slows down the system performance.
    >
    > If you have production data in your DEV system, which is hardly ever the case, you can do that. I'd do it either in an up to date testsytem or in production. Running a trace on one user and only for authorization checks will not be too big a performance issue as long as you remember to stop the trace after the analysis is finished.
    I agree.  If a trace causes perceptible system performance degradation then it is undersized and likely to come to a standstill during financial closing etc.

  • Database Alert Macros issue while executing the macros in Background

    Hi All,
    I am facing some problems while executing the Database alert macros in Background/Process Chain.
    There are two macros for which the problem exists.
    1.Excess Projected Inventory above Max
    The logic here is, the alert should work for Only Fixed Lot size Procedure.
    If the Stock on hand (projected EA) > (Safety Stock (EA) + Full SOQ (EA)) then alert = "Projected inventory is XX% above MAX".
    XX is the Percent above Max. 
    Note: SOQ => fixed lot size.
    2.Excess Actual Days of Supply
    The Logic here is, the alert should work for all Lot size Procedures except for "Fixed lot size".
    Actual Days Supply >=180 days. (current -> future buckets)
    -  For every receipt cell check the Actual Days Supply - if >= 180 days.
    The macros are working perfectly as expected.

    Hi Abhi,
    Hope you are doing good.
    Yes exactly, the macros are working in foreground/Interactively but not in the Background via Process chain. Let me send the details again.
    Issue :
    I am facing some problems while executing the Database alert macros in Background/Process Chain.
    There are two macros for which the problem exists.
    1.Excess Projected Inventory above Max
    The logic here is, the alert should work for Only Fixed Lot size Procedure. But in Background the alerts are getting created for Lot for Lot and other Planning procedures..
    If the Stock on hand (projected EA) > (Safety Stock (EA) + Full SOQ (EA)) then alert = "Projected inventory is XX% above MAX".
    XX is the Percent above Max. 
    Note: SOQ => fixed lot size.
    2.Excess Actual Days of Supply
    The Logic here is, the alert should work for all Lot size Procedures except for "Fixed lot size". But in Background the alerts are getting created for the Fixed Lot size procedures too..
    Actual Days Supply >=180 days. (current -> future buckets)
    -  For every receipt cell check the Actual Days Supply - if >= 180 days.
    The macros are working perfectly as expected in Foreground/Interactively but the samething is not happening while executing the macro in Background/Process Chain.
    I have tried running these macros in different sequences(Default/Start/Macro) but couldn't able to resolve the issue.
    Thanks in Advance,
    Jay.

  • Authorization issue while opening the query in Bex Analyzer

    Hi All,
    I get the below error mesage while executing a report.I have executed the same query in RSRT and i get the below message.
    I have created some roles and added to a test user for testing purpose and when i log in as a tets user i get the below meesage.
    I am not sure what i am missing in the roles.When i tried executing the query in my id then no issues.
    No authority for the node from characteristic 0EMPLOYEE__0MAST_CCTR, hier
    Your user master record is not sufficiently maintained for object Authori
    Kindly let me how to overcome this.
    Thanks in advance.
    Regards,
    Kumar

    Hi Harish,
    Just check this query by this way:
    Use Tcode RSECADMIN -> Analysis ->Execution as -> In Execute as user: Put your Test user Id also tick With log and select RSRT. Now use Start Transaction.
    Might be the chance to get more details about this issue for resolution.
    Also ensure, Have you did the User Comparison while assigning test user id in role?
    Regards,
    Abdullah

  • Issue while executing the discovery command from target nodes

    Hi Experts.
    I had to create cluster two node using openfile, after creation of successful lun and associated partition from all the nodes i have changed the ip address of openfiler.
    After changing the IP on open filer.
    A) openfile version:-
    [root@san ~]# uname -r
    2.6.26.8-1.0.11.smp.pae.gcc3.4.x86.i686
    B) Linux Oel5:-
    [root@rac1 ~]# uname -r
    2.6.18-194.el5xen
    [root@rac1 ~]#
    1:- I am able to ping and ssh etc from any node to openfiler.
    However, while executing the below command i am facing the below exception..
    service iscsi restart
    Stopping iSCSI daemon:
    iscsid dead but pid file exists [  OK  ]
    Starting iSCSI daemon: [  OK  ]
    [  OK  ]
    Setting up iSCSI targets: iscsiadm: No records found!
    [  OK  ]
    [root@rac1 ~]#
    Moreover, tried to discover the targets, unfortunately no message is getting displayed after execution of this below command.
    [root@rac1 ~]# iscsiadm -m discovery -t sendtargets -p 192.168.37.200
    [root@rac1 ~]#
    The quick response will be appreciated as my whole test case is down as of now due storage issues.
    Thanks,
    Arch.

    Are you running a firewall that needs to be adjusted to support your changed Openfiler IP network?

  • Data conversion Issue while executing the package

    I am executing a package for which the source is XML and destination is SQL server. I have created the package by using xsd and xml as source. When I am trying to execute the package I am getting the below error.
    Any help here would be appreciated.
    -kccrga http://dbatrend.blogspot.com.au/

    The error is obvious. The datatypes of source and destination table solumns dont match. Please change datatypes of your sqlserver table to correspond to those coming from the XML as given by error message above.
    Alternatively apply derived column task after XML source to convert datatype of columns to be same as that of your table assuming you'll have only compatible data values coming from source.
    Please Mark This As Answer if it helps to solve the issue Visakh ---------------------------- http://visakhm.blogspot.com/ https://www.facebook.com/VmBlogs

  • Issue while executing the report

    Hello experts,
    I have an issue related to executing the BI Report. In one report , i get an issue of Time Out, as the report is executed for a single day only with a single restriction. Also i execute the same report in RSRT, there also it gives a short dump. I checked the data into the related component for the same selection parameter values. here I get the data but it is creating issue while executing in RSRT or analyser or EP.
    what is happening there am not able to understand. please advice.
    Also searched in SDN but not get the relevant thread.
    Thanks in advance
    Neha

    hii
    The query does not includes any RKF, CKF any complex calculations. as I said before also query is based on MP which is designed on a single Cube. There are no such navigational Attributes used for selection, Number of records are not more than 300 on that particular selection parameter
    there is only one info object which is creating issue & it is a master info object. If i am restricting this info object in the query & then executes the query , it gives the error msg also i put a variable for input parameter, & there I restrict the value, then also query executes with an error msg
    But if query is not restricted with  any value for that info object then query executes with in a second.
    Thanks
    neha

  • Issue While Executing the Internal Order in KO8G

    Hi,
    Whle executing the internal order in KO8G,I am getting the below error.
    Complete Allocation Structure A1   and Message no. KD503
    I have reversed/cancelled all the relevent Material documents related to that PO,even after i am getting the same error.
    Error is as follows-
    Complete allocation structure A1
    Message no. KD503
    Diagnosis
    During settlement, the system puts the sender debits into groups (assignments), which are settled using the same settlement cost element. The settlement assignment is made in the allocation structure, which is stored in the settlement rule for the sender (under settlement parameters).
    Cost element 414126 cannot be assigned to a settlement cost assignment in allocation structure A1, and therefore it cannot be assigned to a settlement cost element.
    Procedure
    Possible solutions are as follows:
    If the posting under cost element 414126 was made to the sender because of an incorrect entry, and you can reverse the posting, and do not need to update the allocation structure. You only need to reverse the incorrectly assigned posting before repeating the settlement. Exception: For an investment measure with a line item settlement, you need to extend the allocation structure, even after the reversal.
    If the posting was made correctly, you can do the following:
    a) You can assign a different allocation structure to the sender: In the master data maintenance for the sender, choose "Settlement rule -> Goto -> Settlement parameters" and then enter a different allocation structure.
    If necessary, also check whether the correct allocation structure is entered in the settlement profile. The allocation structure is defaulted in the settlement profile when you create sender master data or when you maintain the settlement rule.
    You can update allocation structure A1
    Kindly advice me how to fix this error
    Thanks
    Supriya

    Hi,
    Thanks for your reply,I have added that cost element in allocation structure.Now i am getting one more error related to this even i have maintained Receiver type FXT and settlement cost element for that.Kindly help me on this.
    Define a settlement cost element for receiver type FXA
    Message no. KD506
    Diagnosis
    In allocation structure A1 (controlling area AFCO), you did not define which cost element should be used when settling costs/revenues of the sender. Nor did you define receiver type FXA.
    Procedure
    Assign a different allocation structure to the settlement sender (-> Master data -> Settlement rule -> Goto -> Settlement parameters), or maintain allocation structure A1.
    Thanks
    Supriya

  • Authorization restriction for executing the ABAP queries

    Hi
    In ABAP queiries how the restriction can be done for where users should not execute /authorized
    of other plant or company code - Projects/ WBS/NWA and its related components. I tried the following methods but not working - seems something is missing .
    method 1) restricting based on the profit center ( free coding )
    AUTHORITY-CHECK OBJECT 'C_PRPS_PRC'
             ID 'PRCTR' FIELD PROJ-PRCTR
             ID 'PS_ACTVT' FIELD '02'.
    (or)
    method 2 -(free coding)
    *---Authorization for Company code entered by the users.
    *---This code will restrict users to see data for company
    *---codes which they are not authorized to.
    *---Select all the company codes based upon selection entered by the
    *---user
    SELECT bukrs
       FROM t001
       INTO TABLE li_bukrs
      WHERE bukrs IN z_bukrs.
    IF sy-subrc EQ 0.
    *---Clear Screen variable for Company code
       CLEAR z_bukrs.
       REFRESH z_bukrs.
    *---Filter and prepare Select options for Company code table to be
    *---passed to query. Table will only have values of company codes he is
    *---authorized to for display.
       LOOP AT li_bukrs INTO lwa_bukrs.
         AUTHORITY-CHECK OBJECT 'F_BKPF_BUK'
                           ID 'BUKRS' FIELD lwa_bukrs
                           ID 'ACTVT' FIELD '03'.
         IF sy-subrc = 0.
           z_bukrs-sign = 'I'.
           z_bukrs-option = 'EQ'.
           z_bukrs-low = lwa_bukrs.
           z_bukrs-high = space.
           APPEND z_bukrs.
         ELSE.
           lv_flag = 'X'.
         ENDIF.
       ENDLOOP.
    *---Give warning message to the user in case he is not authorized to see
    *---data for all the company codes that he has entered.
       IF lv_flag = 'X'.
         MESSAGE ID 'ZF_MSS_FNG' TYPE 'W' NUMBER '015'.
       ENDIF.
    ENDIF.
    Just make sure that Z_BUKRS field is available in selection tab.
    Also, declare below mentioned variables in INITIALIZATION.
    DATA: li_bukrs TYPE TABLE OF bukrs,
           lwa_bukrs TYPE bukrs,
           lv_flag TYPE c.
    Kindly help if there is missing anything on the above or is there any other alternative.
    Regards
    PP

    Hi,
    Kindly help if there is missing anything on the above or is there any other alternative.
    Carlos is right about the Authorization check.
    If you further wants to explore something extra, just visit these links:
    1. http://help.sap.com/saphelp_NW70EHP1core/helpdata/en/52/671449439b11d1896f0000e8322d00/frameset.htm
    2. http://help.sap.com/saphelp_wp/helpdata/en/52/67129f439b11d1896f0000e8322d00/content.htm
    3. http://help.sap.com/crmcg_en/5c/deaa74d3d411d3970a0000e82de14a/content.htm
    4. http://www.sap-img.com/bc042.htm
    May this information helps you.
    Regards.
    Deepak Sharma.

  • Issue while executing the sample.ear

    Hi All,
    I have deployed the sampl.ear file into an existing SES Installation and trying to access the application using the URL:
    http://<oc4j_host>:<oc4j_port>/sample/search
    and getting following exception:
    ã vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocolvInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol
    Any suggestion is appreciated.
    Thanks
    Krrish

    This would be easier to diagnose if there was an explain plan posted for the 'good' and 'bad' queries. Generally speaking using '%' on both sides precludes the use of any indexes.

  • Authorizations setting for running the process chain

    Hai
    Iam planning to run the process chain for loading the data into ODS. But i dont have authorization for it.
    so what are the authorizations i need to run the process chain in my system. And how can i set all those authorizations to my user-id.  I have all authorization rights .
    Pls let me knw
    kumar

    Hi,
    Authorizations for Process Chains
    Use
    You use authorization checks in process chain maintenance to lock the process chain, and the processes of the chain, against actions by unauthorized users.
    ·        You control whether a user is allowed to perform specific activities.
    ·        You control whether a user is allowed to schedule the processes in a chain.
    The authorization check for the processes in a chain runs when the system performs the check. This takes place upon scheduling or during synchronous execution. The check is performed in display mode. The check is performed for each user that schedules the chain; it is not performed for the user who executes the chain. The user who executes the chain is usually the BI background user. The BI background user automatically has the required authorizations for executing all BI process types. In attribute maintenance for the process chain, you can determine the user who is to execute the process chain.
    See also: Display/Maintenance of Process Chain Attributes ®  Execution User.
    Features
    For the administration processes that are bundled in a process chain, you require authorization for authorization object S_RS_ADMWB.
    To work with process chains, you require authorization for authorization object S_RS_PC. You use this authorization object to determine whether process chains can be displayed, changed or executed, and whether logs can be deleted. You can use the name of the process chain as the basis for the restriction, or restrict authorizations to chains using the application components to which they are assigned.
    Display/Maintain Process Chain Attributes
    Use
    You can display technical attributes, display or create documentation for a process chain, and determine the response of process chains during execution.
    Features
    You can display or maintain the following attributes for a process chain:
    Process Chain ® Attribute ® ...
    Information
    Description
    ( Rename)
    You can change the name of the process chain.
    Display Components
    Display components are the evaluation criterion in the process chain maintenance. Assigning the process chains to display components makes it easier to access the chain you want.
    To create a new display component, choose Assign Display Components in the input help window and assign a technical name and description for the display component in the Display Grouping dialog box that appears.
    Documents
    You can create and display documents for a process chain.
    For more information, see Documents.
    Last Changed By
    Displays the technical attributes of the process chain:
    ·        When it was last changed and who by
    ·        When it was last activated and who by
    ·        Object directory entry
    Evaluation of Process Status
    If you set this indicator, all the incorrect processes in this chain and in the overall status of the run are evaluated as successful; if you have scheduled a successor process upon error or always.
    The indicator is relevant when using metachains: Errors in the processes of the subchains can be evaluated as “unimportant” for the metachain run. The subchain is evaluated as successful, despite errors in such processes of the subchain. If, in the metachain, the successor of the subchain is scheduled upon success, the metachain run continues despite errors in “unimportant” processes of the subchain.
    Mailing and alerting are not affected by this indicator and are still triggered for incorrect processes if they have an upon error successor.
    Polling Indicator
    With this indicator you can control the response of the main process for distributed processes. Distributed processes, such as the load process, are characterized as having different work processes involved in specific tasks.
    With the polling indicator you determine whether the main process needs to be kept until the actual process has ended.
    By selecting the indicator:
    -         A high level of process security is guaranteed, and
    -         External scheduling tools can be provided with the status of the distributed processes.
    However, the system uses more resources; and a background process is required.
    Monitoring
    With the indicator in the dialog box Remove Chain from Automatic Monitoring?, you can specify that a process chain be removed from the automatic monitoring using CCMS.
    By default CCMS switches on the automatic process chain monitoring.
    For more information about the CCMS context Process Chains, see the section BW Monitor in CCMS.
    Alerting
    You can send alerts using alert management when errors occur in a process chain.
    For more information, see Send Alerts for Process Chains.
    Background Server
    You can specify here on which server or server group all of the jobs of a chain are scheduled. If you do not make an entry, the background management distributes the jobs between the available servers.
    Processing Client
    If you use process chains in a client-dependent application, you can determine here in which client the chain is to be used. You can only display, edit, schedule or execute the chain in this client.
    If you do not maintain this attribute, you can display, edit, schedule or execute the process chain in all clients.
    Process variants of type General Services that are contained in a process chain with this attribute set will only be displayed in the specified client.
    This attribute is transported. You can change it by specifying an import client during import. You must create a destination to the client set here in the target system for the import post processing (transaction RSTPRFC)  The chain is activated after import and scheduled, if necessary, in this client.
    Execution User
    In the standard setting a BI background user executes the process chain (BWREMOTE).
    You can change the default setting so that you can see the user that executes the process chain and therefore the processes, in the Job Overview. You can select the current dialog user who schedules the process chain job, or specify a different user.
    The setting is transported.
    The BI background user has all the necessary authorizations to execute all BI process types. Other users must assign themselves these authorizations so that authorization errors do not occur during processing.
    Job Priority
    You use this attribute to set the job priority for all of the jobs in a process chain.
    Hareesh

  • While executing the query in the web template I am  facing below issue

    Hello SAP geniuses,
    Please help me on my issue  ,
    while executing the query in the web template i am  facing below issue.
    The variable for characteristic (region) is appearing but this characteristic (region) is not appearing in the free characteristic zone  but when we are executing the query with out webtemplate it is showing both variable and free characteristic
    can anybody help us to identify what is the issue with the web template.
    Thanks
    Alok

    Hi,
    Plz check ur report and execute at the designer and take its technical name and go to RSRT. log out and log in and try..
    if not check ur authorisation.
    Regards....KP

Maybe you are looking for