Authorization Migration Effort

Hi Experts,
We are planning to upgrade BW3.0 to NW2004S BI. Understand that migrating from report authorization to analysis authorization is strongly recommended, we are planning to take that approach.
Can you advise me what are the factors we should use to consider on estimation of the effort for such a migration? And how much effort is usually required from other projects?
Thanks.
Peter

Hi,
It depends of the way your authorizations has been setup. If you did it role based or profiles direct to the customer. You should also look into the fact that the migration tool can create direct a profile (not a role with a profile). My way of working in a role based application was that I looked for the roles with objects s_rs_mpro, s_rs_icub, s_rs_odso, s_rs_iset(these are the objects that needs to be replaced with RSECADMIN) and the own build objects with rssm. I added the authorization object s_rs_auth to the role and the new objects made with RSECADMIN. If you transport then the roles and objects made in RSECADMIN it works good. Bottom line beaware of profiles that are not created by the profile generator.
Also pls chk this links:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/ded59342-0a01-0010-da92-f6b72d98f144
SAP BI Security Features
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/659fa0a2-0a01-0010-b39c-8f92b19fbfea
BI Authorizations for Reporting
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a6c54319-0e01-0010-20a4-fb81ad32f330
Hope this helps,
regards
CSM Reddy

Similar Messages

  • Analysis Authorization Migration Question

    Analysis Authorization Migration Question
    This is detail Question
    1)     I am testing Analysis Authorization Migration in NW2004s SP9 and have applied all OSS notes that are relevant to SP09 and are coming in SP10.
    2)     We have 2 Info object flagged as Authorization relevant 0COMP_CODE and 0COSTCENTER
    3)     We have Object level security set-up in BW 3.x system and for a role we have specified values like 0COMP_CODE has value 1000, 1800. “:”. In the same role we have specified 0COSTCENTER value 130001 to 180001, “:”  and hierarchy node.
    4)     When we migrate to Analysis Authorizations, using RSEC_MIGRATION, this program creates 2 Authorizations ZCOCODE00 & ZCOSTCTRH00. Both of them have 0COMP_CODE and 0COST_CENTER Objects.
    5)     ZCOCODE00 authorization gets value 0COMP_CODE values 1000, 1800. “:” and 0COSTCENTER Value “:”.
    6)     On the same line ZCOSTCTRH00 gets value 130001 to 180001, “:”  and 0COMP_CODE “:”.
    1st Question:
    1)     Why does it create 2 Authorizations?
    2)     During Checking it does not pass the authorizations, because it seems to me that it fails in Optimization process.
    3)     I manually merge the authorizations in “ONE” object then authorization check passes.  In other word if I combine ZCOSTCTRH00 & ZCOCODE00 then Query authorization check passes.
    Any one is struggling on this.
    Please note, I am doing Migration so that it updates existing Profiles (Roles now from SP9).
    Any comments will be very help full.
    Pankaj Gupta

    Hello Pankaj
    There are some basic misunderstandings on your side.
    Let me try to clarify:
    First we should distinguish between migration of authorizations and of what a query does with them.
    You had 2 auth objects before migration (in 3.x).
    Of course, they must be migrated to 2 new analysis auths.
    There is no general possibility to combine authorizations to a single one as the may appear in different roles and users. Moreover this would kill performance and finally, nobody would recognize the origin.
    Only in very restricted cases one could think of a combination of auths which come out of migration. But, then people loose overview about what goes on.
    Before the corrections in note "Migration IV" the : had not been inserted but now it is for good reasons.
    Now, accept for the moment that you receive 2 auths.
    Then, you cannnot (must not) combine the 2 resulting authorizations!
    <b>Authorization 1</b>
    COMP_CODE : 1000, 1300, “:”
    Cost Center : “:”
    <b>Authorizations 2</b>
    Comp_Code “:”
    Cost Center : 3100001-31999999; “:” plus a Hierarchy Node.
    This means that e.g. combination
    COMP_CODE 1000
    COST_CENTER 3100001-31999999
    <u>is not allowed!!!</u> Therefore, they must not be combined!
    Also, the query and its optimization is comepletely independent of the migration. And here, during query run time the auths cannot be combined. It is no failure!
    Moreover, the merging optimization is just a performance optimizaiton and has nothing to do with whether the query result is authorized or not.
    If you combine them manually you have authorized different combinations.
    Well, now you may wonder why you get 2 auths at all which leads to a "no auth" result in the query execution.
    The reason is, that in 3.x where you got a result with your 2 auth objects the modeling was wrong.
    If you want to authorize any combination of characteristic values, you should combine these characteritics together in one auth object, not in 2!
    (In BI7.0 it works like that but not in 3.x)
    But you defined 2 which may be valid even in several other InfoProviders independently and not even at the same time. Moreover, the auth objects may come from different roles and may be assigend to different users which then have completely different auth content. In general it is not possible to combine different auth objects or to find out those special situations which nevertheless allow for such optimizations. If you re-do a migration with more objects and users you could even receive different results which is also not satisfying.
    Therefore, instead, the mechanism was introduced to insert a : auth to those characteristics that are auth relevant (and checked now with 7.0) but not in the currently processed auth object.
    In you special case it may have made sense to combine them but not in general. And a migration can only try to work as general as possible.
    For your application you may combine the 2 auths manually if you want to allow also the crossover combinations
    COMP_CODE 1000
    COST_CENTER 3100001-31999999
    Best regards
    Peter John
    BI Development

  • SVM - Storage array migration effort

    We have several Solaris servers which have both internal drives not under SVM control and Array based SVM devices built into filesystems.
    We need to do 2 things:
    1) Migrate internal drives to Array based luns
    2) Migrate existing SVM luns to new storage array.
    I found and read through the Admin guide for SVM, and it appears to address "migration" only in relation to creating a mirror for an existing volume.
    What I would like to do is replace (or mirror) the underlying devices of an existing filesystem, not the entire filesystem at the top level.
    Im much more familiar with Linux LVM, where I would add new PV's to an existing VG and use the pvmove command.
    I don't see a similiar capability in Solaris 10 LVM so wanted to check with the more experienced folks on how to proceed with this array migration effort.
    Thanks

    We are moving from an 10+ yr old HDS to a new VNX.
    While EMC can physically move the data, I don't have any way to change the config on the SVM (that I know of) to use the new devices.
    AFAIK I would have to do the migration at the SVM layer in order for the FS to be properly linked to it's underlying LUNS.
    As for the existing FS on the local disk, that can be done by umounting the FS and moving, but I don't see an easy way to migrate the root volume without a rebuild of the root filesystem...

  • Migration Effort estimation.

     
    Hi All,
    Now days we are getting a lot of enquiries regarding the migration of SharePoint 2007 to SharePoint 2013 from Customers. Biggest challenge I am facing in migration is, the cost of migration.
    We are using the Content DB upgrade approach for Migration.
    Do anyone know any free tool that can help me in migration efforts estimation?
    Regards Restless Spirit

    It will help  but you might end up in errors if you have lots of customizations. so I would say the best approach is
    migrate VIA SP 2010 and then to SP 2013 from SP 2007. you need to plan in such a way that migration application/database by application. should perform no of dry runs in the test envionments and find out what are the potentiall issues and making note of
    them.etc. by direct approach you will not have issues interms of data loss and customization and metadata, effort is more but it will be good and smooth, where as with quest or any other third party tool cannot not say you will have smooth migration
    depends on my past experience with it.
    Thanks, Ram Ch

  • Report Authorization issues after Authorization Migration in BI 7.0

    Hi SAPians,
    we are facing report access for the customers after migration of authorizations (3.x to 7.0). All these are Customer reports and need to restrict their customer codes only. In two ways, i have tried to resolved this.
    1. Roles - Maintained Customer Number in the authorized object CUSTOMER - Not working.
    2. Created new authorization object through RSECADMIN and maintained the Customer Number with proper activity, validity etc.. - Not Working
    (For Ex. Customer Number is "11500" and length of Char is 10)
    While executing the report, i am getting below error:
    Value "0000011500" for variable "Customer Authorization(Multiple Optional)" is invalid
    Message no. BRAIN643
    Diagnosis
    Characteristic value "0000011500" is not valid for variable Customer Authorization(Multiple Optional).
    Thanks and Regards,
    Venkat

    Hi,
    It depends of the way your authorizations has been setup. If you did it role based or profiles direct to the customer. You should also look into the fact that the migration tool can create direct a profile (not a role with a profile). My way of working in a role based application was that I looked for the roles with objects s_rs_mpro, s_rs_icub, s_rs_odso, s_rs_iset(these are the objects that needs to be replaced with RSECADMIN) and the own build objects with rssm. I added the authorization object s_rs_auth to the role and the new objects made with RSECADMIN. If you transport then the roles and objects made in RSECADMIN it works good. Bottom line beaware of profiles that are not created by the profile generator.
    Have fun
    Jan van Roest

  • Authorizations migrations....

    Hi all,
      Now our project in the upgrade position.i have to taken care about the migration work for authorization..please respond any one for my questions...
    1) Total we have 28 authorization objects.In these 5 authorization obj are based on the hierarchy obj's.how can i migrate the these obj's.
    2) At the time of migration i have to instal any sap defiend roles or obj's.?
    3)IN the migration   i want to elemenate the some roles and users.how can i elemenate.For example...we have two users with haveing two aauth obj's a1 & a2.user one haveing both obj's and the second user haveing only a2 auth obj. i dont want to incude the second user in migration(i want to delete) ,how can i do this one...?
    4) If any one have a step by step approach to do the migration manually... please forward it to me.
    <removed-by_moderator>
    Thanks
    Bharath

    Cross-posting is not allowed, as in [this thread|Authorizations; where you wrote:
    > after your response i will assign the points and close the thread.
    Thread locked => and read the rules of engagement of this site.

  • Running Service pack and Authorization migration at the same time

    Hi BI Experts,
    We are in a situation where planned to run new Enhance pack 3 (from EHP1) in BI 7 system and also in same system migration of Bw 3.5 Authorization concept to BI 7 analysis Authorization. Both the activities are planned at the same time in same system.
    Do you guys see any risk running two activities at the same time in same BI 7 system?
    Would you please highlight your thought or opinion on this?
    My System is on BI 7.0 with EHP1, Authorization still using 3.5 concepts
    Br
    Deepak

    I got the way , no need to reply to this query.
    Br
    Deepak

  • Authorization Migration BW 3.5 BI 7.0

    HI all,
    I notice, there are a lot of documents about the authorization's migration;
    In spite of this fact some aspect  for me  is not still  too clear.
    I have BW 7.01 with a very simple authorization scenario.
    In fact all the roles are used just to allow the users to access to informations of a specified Cube (Ex. ZUSER1 can access just  all the cubes which the technical name start by ZPC*).
    I tried to migrate this scenario with the program  RSEC_MIGRATION .
    Now, the authorizations that before the migration were in the authorization object S_RS_CUBE seem to be in the object 0TCAIPROV (I understood well?), but when I try to open that interval with RSECADMIN  transaction, the system warning me that "0TCAIPROV is not a relevant auth object."
    I have to change the configuration of the infoobject in business Explorer and  to flag auth Relevant?.
    If anyone have an "how to" that can help me I'll be grateful to him if he'll send it to me.
    Best regards.
    Rino

    Check the link below.
    http://wiki.scn.sap.com/wiki/display/BI/Authorization+in+SAP+NW+BI
    Check the differences and it gives the whole insight.
    Cheers!
    Suyash

  • Authorization migration in BI 7.0 from BW 3.5

    Hi Guys,
    Can anyone shed some light on whether RSEC_MIGRATION needs to run in every single BI 7.0 system or if changes can be transported from DEV to QA to PROD.
    Thanks
    Krish

    Hi,
    It depends of the way your authorizations has been setup. If you did it role based or profiles direct to the customer. You should also look into the fact that the migration tool can create direct a profile (not a role with a profile). My way of working in a role based application was that I looked for the roles with objects s_rs_mpro, s_rs_icub, s_rs_odso, s_rs_iset(these are the objects that needs to be replaced with RSECADMIN) and the own build objects with rssm. I added the authorization object s_rs_auth to the role and the new objects made with RSECADMIN. If you transport then the roles and objects made in RSECADMIN it works good. Bottom line beaware of profiles that are not created by the profile generator.
    Have fun
    Jan van Roest

  • Authorization migration – from BW2004 to BI2004s

    Dear Experts,
    I’m working in a project migration from BW production (Ver 3.5) to BI development (Ver 7). My questions are the follow:
    Before migration the reporting user role and administration user role through report RSEC_MIGRATION, I need transport all of role from BW2004 to BI2004s and after that migration in BI2004s environment. What would I do before use to report RSEC_MIGRATION? I have to transport by transaction RSA1 in BW2004 or transaction PFCG and creating customizing package.
    Thank for all,
    Luis

    Dear Chetan,
    I try to explain with more detail:
    I need to understand all process…
    Before upgrade(from 3.5 to 7.0) I have some role in 3.5 Prod. After that I transport the role in 3.5 Prod to 7.0 Dev. Them I migrate trough transaction SE38 with RSEC_MIGRATION all of roles transported from 3.5 Prod.
    Thank for all,
    Luis

  • Re: [iPlanet-JATO] Re: CSpMultiSQL after migration

    Alex,
    I just switched over to Netscape Messenger from OutLook and I didn't
    realize that emails were displayed in threaded hierarchies and therefore
    did not see that you had already had responses to your post. Sorry for
    the confusion in my previous response.
    matt
    njdoe123 wrote:
    Hi,
    I have tested another simple MultiSQL. The Update, Delete, Insert
    are not funcitonal. I'm using only one single database table (no
    join). It worked great in netD. The database is Oracle.
    We're using migtoolbox-1.1.1 with Jato 1.1. Do we have to modify
    the UpdataQueryModel.java file or other ? Or could i use jato 1.2
    to replace 1.1 ?
    The following is log from AppServer. Could i receive the migtool
    1.2 beta ?
    Thanks,
    Alex Lin
    <Dec 21, 2001 11:18:36 AM PST> <Error> <HTTP> <[WebAppServletContext
    (1572805,Tes
    t3AppWar,/Test3AppWar)] Root cause of ServletException
    com.iplanet.jato.model.ModelControlException
    java.sql.SQLException: ORA-00933: SQL command not properly ended
    at oracle.jdbc.dbaccess.DBError.throwSqlException
    (DBError.java:168)
    at oracle.jdbc.ttc7.TTIoer.processError(TTIoer.java:208)
    at oracle.jdbc.ttc7.Oall7.receive(Oall7.java:543)
    at oracle.jdbc.ttc7.TTC7Protocol.doOall7
    (TTC7Protocol.java:1405)
    at oracle.jdbc.ttc7.TTC7Protocol.parseExecuteFetch
    (TTC7Protocol.java:822
    at oracle.jdbc.driver.OracleStatement.executeNonQuery
    (OracleStatement.ja
    va:1446)
    at oracle.jdbc.driver.OracleStatement.doExecuteOther
    (OracleStatement.jav
    a:1371)
    at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout
    (OracleStateme
    nt.java:1900)
    at oracle.jdbc.driver.OracleStatement.executeUpdate
    (OracleStatement.java
    :693)
    at com.iplanet.jato.model.sql.QueryModelBase.executeUpdate
    (QueryModelBas
    e.java:1788)
    at com.iplanet.jato.model.sql.QueryModelBase.update
    (QueryModelBase.java:
    420)
    at
    com.iplanet.jato.view.RequestHandlingViewBase.executeAutoUpdatingMode
    l(RequestHandlingViewBase.java:1070)
    at
    com.iplanet.jato.view.RequestHandlingViewBase.executeAutoUpdatingMode
    ls(RequestHandlingViewBase.java:938)
    at
    com.iplanet.jato.view.RequestHandlingViewBase.handleWebAction(Request
    HandlingViewBase.java:821)
    at Test3App.Test3.PgUpdateViewBean.handleUpdateRequest
    (PgUpdateViewBean.
    java:838)
    at java.lang.reflect.Method.invoke(Native Method)
    at com.iplanet.jato.view.RequestHandlingViewBase.handleRequest
    (RequestHa
    ndlingViewBase.java:341)
    at
    com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewB
    eanBase.java:481)
    at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandler
    (ViewBeanBase.
    java:431)
    at com.iplanet.jato.ApplicationServletBase.dispatchRequest
    (ApplicationSe
    rvletBase.java:645)
    at com.iplanet.jato.ApplicationServletBase.processRequest
    (ApplicationSer
    vletBase.java:431)
    at com.iplanet.jato.ApplicationServletBase.doPost
    (ApplicationServletBase
    .java:296)
    at javax.servlet.http.HttpServlet.service
    (HttpServlet.java:760)
    at javax.servlet.http.HttpServlet.service
    (HttpServlet.java:853)
    at weblogic.servlet.internal.ServletStubImpl.invokeServlet
    (ServletStubIm
    pl.java:265)
    at weblogic.servlet.internal.ServletStubImpl.invokeServlet
    (ServletStubIm
    pl.java:200)
    at
    weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppSe
    rvletContext.java:2456)
    at weblogic.servlet.internal.ServletRequestImpl.execute
    (ServletRequestIm
    pl.java:2039)
    at weblogic.kernel.ExecuteThread.execute
    (ExecuteThread.java:139)
    at weblogic.kernel.ExecuteThread.run
    (ExecuteThread.java:120)
    --- In iPlanet-JATO@y..., "Matthew Stevens" <matthew.stevens@E...>
    wrote:
    EDITED
    -----Original Message-----
    From: Matthew Stevens [mailto:<a href="/group/SunONE-JATO/post?protectID=029166114165042198028082000056130080177026031196061130152150">matthew.stevens@e...</a>]
    Sent: Thursday, December 20, 2001 4:32 PM
    Alex,
    If your implied question is, "Looks like the iMT did not migrate
    this block
    of code. What is my next step?" Then I have an answer for you. If
    I
    misinterpreted your email then please clarify.
    The procedure for ND migration using the iMT (as outlined in the
    documentation
    under <iMT_install_dir>/docs) is that customized code originally
    provided by
    the ND developer is purposely commented out so that the file can
    compile.
    Our experience in migration efforts shows that it is preferrable to
    the
    migrator to be able to select which part of the application they
    want to
    work
    on by uncommenting specific blocks of code - allowing for
    incremental
    edit/compile/test cycles. If we left all this arbitary code un-
    commented,
    then nothing would compile after migration and you would have a huge
    roadblock for moving forward.
    Judging from the "spider" APIs which are still seen in your code
    block, you
    must not have run the Regular Expression API mapping tool which
    will take
    care of many of this code. I believe that the API mapper will
    migrate this
    block of code almost 100% and you just need to uncomment it.
    matt
    -----Original Message-----
    From: njdoe123 [mailto:<a href="/group/SunONE-JATO/post?protectID=230176091112175091130232203140129208071">first.us@a...</a>]
    Sent: Thursday, December 20, 2001 4:04 PM
    Subject: [iPlanet-JATO] Re: CSpMultiSQL after migration
    Oops !
    The following (very simple) customized code was not migrated.
    In business logic - after update, goto another page.
    My backend database is Oracle.
    Thanks.
    Alex Lin
    -------------------------+
    // The following code block was migrated from the Update_onWebEvent
    method
    // MigrationToDo : THIS CODE MUST BE MANUALLY ADJUSTED
    int command = PROCEED;
    CSpPage nextPage =(CSpPage) CSpider.getPage("PgDistrict");
    executeAllUpdatingDataObjects();
    return nextPage.load();
    --- In iPlanet-JATO@y..., "Craig V. Conover" <craig.conover@s...>
    wrote:
    Alex,
    CSpMultiSQL migrate just fine. You may have had to do something
    extraordinary for your
    particular database in your select statement.
    Can we see the entire exception stack trace, and the code that is
    executing the model?
    Also, what database are you hitting?
    c
    njdoe123 wrote:
    Hi,
    It's a bit strange while doing CSpMultiSQL (select and update).
    I have received the following error on the AppServer.
    Web event invoked: Test3App.Test3.PgWebUserViewBean.Update
    <Dec 19, 2001 2:20:05 PM PST> <Error> <HTTP>
    <[WebAppServletContext(168087,Test3
    AppWar,/Test3AppWar)] Root cause of ServletException
    com.iplanet.jato.model.ModelControlException
    java.sql.SQLException: ORA-00933: SQL command not properly ended
    'SQL command not properly ended ?' - i haven't touched the sql
    code,
    it's just simple select and update to one table.
    Could iMT do MultiSQL ? If not, what is the solution after
    migration
    Thanks,
    Alex Lin
    For more information about JATO, including download information,
    please visit:
    http://developer.iplanet.com/tech/appserver/framework/index.jsp
    For more information about JATO, including download information,
    please
    visit:
    http://developer.iplanet.com/tech/appserver/framework/index.jsp
    For more information about JATO, including download information,
    please
    visit:
    http://developer.iplanet.com/tech/appserver/framework/index.jsp
    For more information about JATO, including download information, please visit:
    http://developer.iplanet.com/tech/appserver/framework/index.jsp

    Thank you - Jin and Todd.
    Will try that.
    Atul
    --- In iPlanet-JATO@y..., Byung Jin Chun <bchun@n...> wrote:
    try using kregedit and modify the key for the jvm args, using the -x
    parameters for the 1.2 runtime
    Jin
    -----Original Message-----
    From: Todd Fast [mailto:<a href="/group/SunONE-JATO/post?protectID=101233080150035167169232031248066208071048">Todd.Fast@S...</a>]
    Sent: Tuesday, February 19, 2002 8:40 PM
    Subject: Re: [iPlanet-JATO] Re: OutOfMemoryError
    Atul--
    Out of curiosity - How do you modify the memory parameters for
    the container's VM ?? I know I should try to do some research but
    figured you may already have some insight and willingness to
    share.
    Please consider this as low priority.It differs by container; I don't remember details of any particular one.
    >
    Todd
    For more information about JATO, including download information, please
    visit:
    http://developer.iplanet.com/tech/appserver/framework/index.jsp
    <http://developer.iplanet.com/tech/appserver/framework/index.jsp>
    [Non-text portions of this message have been removed]

  • Analysis Authorization (Role, Profile and Direct Assignments)

    <b>Analysis Authorization Question:</b>
    1)     In BW 3.x environment, customers have used Role Maintenance Process to assign proper object level security and then assign to the users.
    2)     Most of the places R/3 security team takes over support/administration function of BI Security and they continue to use Role method to assign “Reporting Authorizations” as per the process defined in BW 3.x system.
    3)     Customer sometime have 100 + Roles to have 3.X “Reporting Authorizations”. This is Managed, assigned, approved using role concept.
    <b>
    Migration Options:</b>
    1)     New Analysis Authorization makes process of Role Maintenance like "hierarchy authorizations" of BW 3.x. You have to create Value in other transactions and assign them in Role as a pointer or link object. With Analysis Authorization concept, Actual value of the Object Assigned “Like Company code 1100” not visible in Role Maintenance PFCG transactions. It is only visible in Transaction code RSECADMIN.
    2)     Analysis Migration Tool - RSEC_MIGRATION does not update “ROLES”. It creates or changes “PROFILES”.
    3)     Profiles are assigned to the users and Roles does not reflect any Impact by Analysis Authorization migration.
    <b>Questions</b>
    a)     This means customer need to update all the roles by hand. If they want to use Roles to manage the assignment of the Security to users. Migration Tool does not update Roles, it only updates PROFILES.
    b)     Does any one use direct assignment to Users? It is good business practice?
    c) Is <b>Profiles</b> recommended method of Authorization Maintenance?
    d) Can we run migration tool to create Analysis Authorizations, but not assign to the users as a Profile. But stop at creating Analysis Authorizations. If Customer wants to use Roles maintenance process then, they can do not have delete profile assignments from all users before updating Roles using Analysis Authorizations.
    Just want to check how other folks have done migration that can be supported going forward.
    Pankaj Gupta

    Hey Pankaj,
    In general, assigning the analysis authorization directly to user makes a lot of sense for granular levels of authorization. For example, if you had 3,000 users, 3,000 specific authorization combinations, and 3,000 roles, using roles is a lot of additional overhead. If you had 12 roles and 3,000 users, your role concept makes a lot of sense.
    Therefore, the recommendation is that it varies on what makes the most sense logically. Authorization groups can be created to group analysis authorizations and combine them. Also, you have the ability to generate analysis authorizations using the Content Datastores for this. That is an option as well.
    RSEC_MIGRATION does use profiles as you've stated. If you want, there would be manual work to convert to roles afterwards. In case you haven't seen Marc's presentation on security, it's pretty good and covers how to generate authorizations from the datastore.
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/media/uuid/ac7d7c27-0a01-0010-d5a9-9cb9ddcb6bce

  • What is Analysis Authorizations in BI 7.0?

    Hello BW Gurus,
    Greetings!!!!
    Please forward the relevant documents (<b>Analysis Authorizations and also about data migration from 3.0 to 7.0</b> ) to the ID- <b>[email protected]</b>
    Points will be rewarded..
    Best Regards,
    Priya

    Hi Priya,
    These would be great help to you,
    Upgrading to SAP NetWeaver 7.0 BI - The Details doc.
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/10564d5c-cf00-2a10-7b87-c94e38267742
    Please check these blogs for full details:
    /people/prakash.darji/blog/2006/09/22/rolling-out-the-new-sap-netweaver-2004s-bi-frontend-tools?page=last&x-showcontent=off&x-order=date [original link is broken]
    https://weblogs.sdn.sap.com/pub/wlg/4668?page=last&x-order=date [original link is broken] [original link is broken] [original link is broken]
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/6a19f233-0e01-0010-6593-c47af5a8df3b
    Some Insights..
    NW2004s Upgrade - Front-End Migration Strategy
    https://forums.sdn.sap.com/click.jspa?searchID=3914335&messageID=2331907
    Migration of Data Sources
    https://forums.sdn.sap.com/click.jspa?searchID=3914335&messageID=3369391
    Migration - Web Templates from 3.x to NW2004s
    https://forums.sdn.sap.com/click.jspa?searchID=3914335&messageID=2052465
    Migration question
    https://forums.sdn.sap.com/click.jspa?searchID=3914335&messageID=2935414
    Migration Transformation NW2004s Datasource
    https://forums.sdn.sap.com/click.jspa?searchID=3914335&messageID=3034054
    Analysis Authorization Migration Question
    https://forums.sdn.sap.com/click.jspa?searchID=3914335&messageID=2537477
    NW2004s Data flow
    https://forums.sdn.sap.com/click.jspa?searchID=3914335&messageID=3447826
    Visual composer migration
    https://forums.sdn.sap.com/click.jspa?searchID=3914335&messageID=3775098
    Rfer thez threads.. u will get good idea..
    /thread/439486 [original link is broken]
    /thread/377643 [original link is broken]
    Migrate Transformations
    /message/3034624#3034624 [original link is broken]
    /thread/178564 [original link is broken]
    For Data Flow:
    http://help.sap.com/saphelp_nw2004s/helpdata/en/43/f00e2696d24c5fe10000000a155369/content.htm
    /people/prakash.darji/blog/2006/09/22/rolling-out-the-new-sap-netweaver-2004s-bi-frontend-tools
    Assign points if it helps,
    Regards,
    Mani

  • PS migration: How to stop auto-creation of PR for completed activities?

    We are migrating project master & transactional data from R/3 4.7 to ECC5. In the old system, majority of the ext. activities in our projects already carries the status REL. Purchase Requisition was auto-created > PO done > GR/IR done > actual cost for the ext. activity already posted into the project.
    In our migration effort, we are transferring the whole project structure & master data from the old 4.7 to ECC5 and subsequently updating the system & user statuses of the whole project structure.
    How can we stop the system from auto-creating a PR again when the statuses are updated for those activities that are already completed, i.e. actual cost posted, as in 4.7 system?
    We thought of using the logic if a PO exist for the activity in the 'old' system, then the field AFVGD-AUDISP (Res/Pur.req) for the activity in CJ20N should be set to 'Never'. However, my ABAPer was saying this could not be done as AFVGD is a structure and not a table.
    Have any one of you face similar predicament? Is there other method to address this issue? Appreciate your assistance.
    Edited by: Quah Ai Ling on Jun 10, 2008 5:36 AM

    Hi Varshal,
    Thanks for the suggestion.
    However, we thought of an alternate method that does involve changing the customers existing business process.
    1) Change the field AUDISP in the network profile to 1 "Never" for the conversion.
    2) Migrate the data. Program will create Networks, Activities & Components with the field AUDISP set to "Never create Reservation or Purchase Requisition".
    3) Change the field in AUDISP in the network profile back to "2 From Release".
    We will have to get the users to clean-up their data (close outstanding PRs or convert those PRs to POs) before this exercise for a clean cut-over.

  • E130 - Migrate WIn 7 Pro to SSD

    Hi!
    I have a Lenovo Edge E130 and I have recently inserted a 128 GB SSD into the extra mSATA slot in addition to the 500 GB HDD. Now I want to migrate Win 7 Pro 64 bit and my programs from the HDD to the SSD, in order to start the laptop from the SSD only in the future. The 500 GB HDD will just be used for data storage.
    However, my migration efforts from HDD to SDD so far failed  I attempted it twice, using a) the migration option in Easeus Partition Master 10.2, and b) an image of partition C: from an external USB drive.
    I assume that it could have failed due to the Lenovo setup of Win 7. There is a partition "Windows_7_OS" on C: and a "System_Drv" partition labeled with a "*". I don't have Win 7 installation CDs/DVDs, only those for Win 8.1, but I want to keep on using Win 7.
    What do I have to do to successfully migrate Win 7 Pro 64 bit and my programs to the SSD?
    Thanks for your answers!
    Solved!
    Go to Solution.

    Dear Alex5723,
    thanks a lot for this helpful link. Now that I am back to a running system and to the Windows desktop, I will go on following the suggestions for optimization of SSD performance suggested there.
    But first I had to solve some other problems. Here's the story how I succeeded to migrate Win 7 and programs from an HDD to an SSD, both of which now run parallel in my Lenovo E130 with Win 7 on the SSD:
    1) I installed the 128 GB SSD into the additional mSATA slot.
    2) Using the existing Win 7 system on the HDD, I chose Acronis True Image 2015 (free demo version available) to save an image of partition C: (OS and programs) to an external USB drive.
    3) Next I created an Acronis rescue CD. 
    4) I have shut down the laptop and removed the HDD.
    5) I booted from the Acronis rescue CD and copied the saved image to the new SSD.
    6) Then I restarted and changed the boot sequence to first boot from the SSD and started windows. This stopped after a while before getting to the desktop with a blue screen telling me Windows was not genuine (build 7601). My Win 7 Pro 64 bit is genuine (pre-installed OEM version). The problem was that the new OS was not in the C partition. Apparently, you can avoid such a screen when you don't assign a partition and a partition letter to the new SSD, so that the space on the SSD just remains unallocated. That's what I did (made the SSD a primary partition, partition letter was E). The very easy and quick solution to that problem is nicely described here: http://www.anotherwindowsblog.com/2011/02/windows-​7-not-genuine-after-disk-clone.html
    7) Now that my desktop is back again (everything looks and works like on the HDD before), I have shut down the laptop again and reinstalled the HDD. I went on deleting the old operating system partitions on the HDD and reallocated this space to my data storage partition, but you might prefer to do something else.
    8) Next step I will take is to follow the optimization of SSD performance suggestions that are included in the instructions Alex5723 referred to:
    http://www.howtogeek.com/97242/how-to-migrate-wind​ows-7-to-a-solid-state-drive/

Maybe you are looking for

  • Want to reinstall OS X -- recommendation for back up appllication data?

    Hi, I want to reinstall OS X on my iMac. But I need to backup some Apple application data first so I can restore it later. Specifically, all the email in Mail.app, all the songs/albumart/otherdata for iTunes, and the data in Address Book. Can someone

  • PLEASE HELP...TIVO WONT WORK WITH MY BEFW11S4

    I contacted Tivo and they said it might be my port 443...but linksis wont support. Please help me out here.

  • Multiple choices when creating a form

    Hi all! I thought I had this figured out, but it's I can't get it to work. I'm using Acrobat 9 Pro. I'm creating a form. I have questions that require an "either/or" answer AND I've got "choose all that apply" questions. I've got the either/or boxes

  • Exchange 2010 SP3 RU 6 failed to install 1603

    I just finished installing SP3 and trying to update to RU6 using the same admin account. It's failing and rolling back on both our servers. Event Viewer says: Product: Microsoft Exchange Server - Update 'Update Rollup 6 for Exchange Server 2010 Servi

  • Windows 8.1 Enterprise N Build 9600 skype app crash

    Hello when i open skypeapp i see the skype logo screen then the app crash and return to desktop with no errors but i check the event log viewer and here is the log - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> - <System>   <