Authorization migration in BI 7.0 from BW 3.5

Hi Guys,
Can anyone shed some light on whether RSEC_MIGRATION needs to run in every single BI 7.0 system or if changes can be transported from DEV to QA to PROD.
Thanks
Krish

Hi,
It depends of the way your authorizations has been setup. If you did it role based or profiles direct to the customer. You should also look into the fact that the migration tool can create direct a profile (not a role with a profile). My way of working in a role based application was that I looked for the roles with objects s_rs_mpro, s_rs_icub, s_rs_odso, s_rs_iset(these are the objects that needs to be replaced with RSECADMIN) and the own build objects with rssm. I added the authorization object s_rs_auth to the role and the new objects made with RSECADMIN. If you transport then the roles and objects made in RSECADMIN it works good. Bottom line beaware of profiles that are not created by the profile generator.
Have fun
Jan van Roest

Similar Messages

  • Analysis Authorization Migration Question

    Analysis Authorization Migration Question
    This is detail Question
    1)     I am testing Analysis Authorization Migration in NW2004s SP9 and have applied all OSS notes that are relevant to SP09 and are coming in SP10.
    2)     We have 2 Info object flagged as Authorization relevant 0COMP_CODE and 0COSTCENTER
    3)     We have Object level security set-up in BW 3.x system and for a role we have specified values like 0COMP_CODE has value 1000, 1800. “:”. In the same role we have specified 0COSTCENTER value 130001 to 180001, “:”  and hierarchy node.
    4)     When we migrate to Analysis Authorizations, using RSEC_MIGRATION, this program creates 2 Authorizations ZCOCODE00 & ZCOSTCTRH00. Both of them have 0COMP_CODE and 0COST_CENTER Objects.
    5)     ZCOCODE00 authorization gets value 0COMP_CODE values 1000, 1800. “:” and 0COSTCENTER Value “:”.
    6)     On the same line ZCOSTCTRH00 gets value 130001 to 180001, “:”  and 0COMP_CODE “:”.
    1st Question:
    1)     Why does it create 2 Authorizations?
    2)     During Checking it does not pass the authorizations, because it seems to me that it fails in Optimization process.
    3)     I manually merge the authorizations in “ONE” object then authorization check passes.  In other word if I combine ZCOSTCTRH00 & ZCOCODE00 then Query authorization check passes.
    Any one is struggling on this.
    Please note, I am doing Migration so that it updates existing Profiles (Roles now from SP9).
    Any comments will be very help full.
    Pankaj Gupta

    Hello Pankaj
    There are some basic misunderstandings on your side.
    Let me try to clarify:
    First we should distinguish between migration of authorizations and of what a query does with them.
    You had 2 auth objects before migration (in 3.x).
    Of course, they must be migrated to 2 new analysis auths.
    There is no general possibility to combine authorizations to a single one as the may appear in different roles and users. Moreover this would kill performance and finally, nobody would recognize the origin.
    Only in very restricted cases one could think of a combination of auths which come out of migration. But, then people loose overview about what goes on.
    Before the corrections in note "Migration IV" the : had not been inserted but now it is for good reasons.
    Now, accept for the moment that you receive 2 auths.
    Then, you cannnot (must not) combine the 2 resulting authorizations!
    <b>Authorization 1</b>
    COMP_CODE : 1000, 1300, “:”
    Cost Center : “:”
    <b>Authorizations 2</b>
    Comp_Code “:”
    Cost Center : 3100001-31999999; “:” plus a Hierarchy Node.
    This means that e.g. combination
    COMP_CODE 1000
    COST_CENTER 3100001-31999999
    <u>is not allowed!!!</u> Therefore, they must not be combined!
    Also, the query and its optimization is comepletely independent of the migration. And here, during query run time the auths cannot be combined. It is no failure!
    Moreover, the merging optimization is just a performance optimizaiton and has nothing to do with whether the query result is authorized or not.
    If you combine them manually you have authorized different combinations.
    Well, now you may wonder why you get 2 auths at all which leads to a "no auth" result in the query execution.
    The reason is, that in 3.x where you got a result with your 2 auth objects the modeling was wrong.
    If you want to authorize any combination of characteristic values, you should combine these characteritics together in one auth object, not in 2!
    (In BI7.0 it works like that but not in 3.x)
    But you defined 2 which may be valid even in several other InfoProviders independently and not even at the same time. Moreover, the auth objects may come from different roles and may be assigend to different users which then have completely different auth content. In general it is not possible to combine different auth objects or to find out those special situations which nevertheless allow for such optimizations. If you re-do a migration with more objects and users you could even receive different results which is also not satisfying.
    Therefore, instead, the mechanism was introduced to insert a : auth to those characteristics that are auth relevant (and checked now with 7.0) but not in the currently processed auth object.
    In you special case it may have made sense to combine them but not in general. And a migration can only try to work as general as possible.
    For your application you may combine the 2 auths manually if you want to allow also the crossover combinations
    COMP_CODE 1000
    COST_CENTER 3100001-31999999
    Best regards
    Peter John
    BI Development

  • Migrate all Open Sales Orders From Legacy System (SAP) To SAP System using

    Hi Experts,
                 I've to Migrate all Open Sales Orders From Legacy System (SAP) To SAP System using Business Objects with a new SALES ORDER DOCUMENT NUMBER referencing the older one.
               I'll get all the required data with field in an excel file.
                 Does any standard transaction exist for it ? Or how to go ahead with it ?
    Thanks and regards,
    Jyoti Shankar

    Hi
    If you are checking for CREATE option then Sales Doc Type
    For more Info goto SWO1 transaction -> BUS2032 --> DIsplay --> Execute --> There SELECT the method which you want to perform... There you can fine the MANDATORY parameters also....
    Or in DISPLAY mode PLACE Cursor on the Required Method and CLick the PARAMETERS button on toolbar...
    That will show the MANDATORY parameters...
    Reward if helpful....
    Message was edited by:
            Enter the Dragon

  • How do I authorize my new PC to purchase from itunes store? (it says go to Store menu and choose Authorize Computer but i don't see that option anywhere)

    How do I authorize my new PC to purchase from itunes store? It prompts me to go to STORE menu, then choose Authorize this Computer (which i don't see anywhere) or Advanced (which I don't see anywhere).

    There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
    The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
    If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
    Then you'll find the control in the Store menu:
    Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them:

  • I use migrate assistant to move files from my old pc to the new Mac , but it creates the user account. How can i delete the unwanted user account.

    i use migrate assistant to move files from my old pc to the new Mac , but it creates the user account. How can i delete the unwanted user account.

    Welcome to Apple Support Communities
    That's the classic behaviour after using Migration Assistant and that's normal.
    To transfer the data from the new user account to your old user account, you can follow some steps. Here is all the information you need to do this > https://discussions.apple.com/docs/DOC-5472

  • I migrated all of my photos from my PC to my mac but I can't find them on my laptop!?

    Hi
    I hope someone can help me. It took hours on end to successfully migrate my photos and documents from my Windows PC to my new MacBook. (I'm a professional photographer)
    When The Migration Assistant was completed, I closed the window and went to my documents and... cannot find ANY of the files that I migrated over?   The instructions said something along the lines of I'd find all of my files and documents where I'd expect to... um... I can't find ANY!
    Please help
    Thank you

    How did you do your migration? Did you follow Apple support article and check help menu for tips?
    Note: This process will create a new user account on your Mac to contain the Windows PC information that is migrated over.  It will not merge the information with an existing user account on the Mac.
    http://support.apple.com/kb/HT4796
    Before you did so, did you use Windows Easy Transfer? do you have your files on external or on a drive you can connect?
    The best utility driver to mount PC NTFS drivers comes from Paragon-Software.
    Apple only has read only support and more limited as well.

  • Why am I still getting this message after logging in - This computer is no longer authorized for apps that are installed on the iPhone "Myron Liptzin's iPhone". Would you like to authorize this computer for items purchased from the iTunes Store?

    why am I still getting this message after logging in?  "This computer is no longer authorized for apps that are installed on the iPhone “*************s iPhone”. Would you like to authorize this computer for items purchased from the iTunes Store?"  - after I have logged in and get the message that the computer is already authorized!!!?? - and then the above message pops up again?

    Click here and follow the instructions.
    (71175)

  • When i pluged in my ipod,computer start scanning,it says"your computer is no more authorized for  app that are installed in"yadav ipod",would you like to authorizes this computer for item purchased from itune" what should i do to fix this problem,,,

    when i pluged in my ipod,computer start scanning,without finishing scan,it says"your computer is no more authorized for  app that are installed in"yadav ipod",would you like to authorizes this computer for item purchased from itune" what should i do to fix this problem,,,

    What the message says.  In iTunes g the the Store tab in ther upper part of the screen and then clink on Authorize this computer.

  • This computer is no longer authorized to play purchased items that are on the iPhone. Would you like to authorize this computer for items purchased from the iTunes Store?

    My itunes on my iMac for the passed few weeks now keeps on comming with the message "This computer is no longer authorized to play purchased items that are on the iPhone. Would you like to authorize this computer for items purchased from the iTunes Store?"
    or "This computer is no longer authorized to play purchased items that are on the iPad. Would you like to authorize this computer for items purchased from the iTunes Store?"
    This while everything was working fine.
    Please advise what I can do with this message.
    When I press autorize, it comes up with a unknow appleID. When I use apple ID's that work - it comes with the message that the computer is autorized. but then the autorization message comes back.

    You can't change the Apple ID that the Authorize dialog comes up with by default. It's showing you that Apple ID for a reason: it means that the items you want to play were purchased using that Apple ID and therefore you need to authorize your computer with that Apple ID. Changing the Apple ID given completely defeats the entire purpose.
    If you don't know the password to the given Apple ID, then you will no longer be able to play those items.

  • HT1386 Hello, When trying to sync, I get the following message.  This computer is no longer authorized for apps that are installed on the iPhone "Terri George's iPhone". Would you like to authorize this computer for items purchased from the iTunes Store?

    while trying to sync with my iphone I recieve the message: This computer is no longer authorized for apps that are installed on the iPhone “Terri George’s iPhone”. Would you like to authorize this computer for items purchased from the iTunes Store?  When I put in my password and hit authorize, I get a message telling me there was an unknown error (-50).  Would love to sync today.  Any help would be appreciated.

    The -50 error is documented in this article:
    iTunes: Specific update-and-restore error messages and advanced troubleshooting
    Here is a synopsis:
    Error 13, 14, 35 and 50 (or -50)
    These errors are typically resolved by performing one or more of the steps listed below:
    Perform USB isolation troubleshooting, including trying a different USB port directly on the computer. See the advanced steps below for USB troubleshooting.
    Put a USB 2.0 hub between the device and the computer.
    Try a different USB 30-pin dock-connector cable.
    Eliminate third-party security software conflicts.
    There may be third-party software installed that modifies your default packet size in Windows by inserting one or more TcpWindowSize entries into your registry. Your default packet size being set incorrectly can cause this error. Contact the manufacturer of the software that installed the packet-size modification for assistance. Or, follow this article by Microsoft: How to reset Internet Protocol (TCP/IP) to reset the packet size back to the default for Windows.
    Connect your computer directly to your Internet source, bypassing any routers, hubs, or switches. You may need to restart your computer and modem to get online.
    Try to restore from another known-good computer and network.

  • TS1389 This computer is no longer authorized to play purchased items that are on the iPod “Mac0217’s iPod”. Would you like to authorize this computer for items purchased from the iTunes Store?

    This computer is no longer authorized to play purchased items that are on the iPod “Mac0217’s iPod”. Would you like to authorize this computer for items purchased from the iTunes Store?
    If you do not authorize this computer, 117 songs, including “Der Kommissar”, will be removed from the iPod.
    I have authorized the computer but keeps giving me the message above.
    I recently had my mother board replaced but my hard drive was spared.  Ever since the replaced mother board I been getting this message.

    You can't change the Apple ID that the Authorize dialog comes up with by default. It's showing you that Apple ID for a reason: it means that the items you want to play were purchased using that Apple ID and therefore you need to authorize your computer with that Apple ID. Changing the Apple ID given completely defeats the entire purpose.
    If you don't know the password to the given Apple ID, then you will no longer be able to play those items.

  • Using Migration Assistant to move files from old PC laptop to new MacBook Pro that has Windows 8 installed containing Outlook

    When using Migration Assistant to move files from old PC laptop to new MacBook Pro, that has Windows 8 installed containing Outlook, will emails, contacts and calendar entries be moved to Outlook on the new MacBook or into Mail, Contacts and Calendar?

    I doubt they will. But then I'm not sure as I used a migration program once about 18 years ago and totally FUBARed the system I had at that time and I've never used one again.
    For me the reason to have a new system is to start fresh. Installing only program that I now use and manually copying data over from the older system.
    Not sure your older version of Outlook, and the outlook mail boxes, are compatible with Office/Outlook for Mac 2011.
    A better place to ask this question would be on the MS Office for Mac forums.
    Hope it all works out for you.

  • HT2518 I used Migration Assistant to tranfer files from an old PC to New Mac.

    I used Migration Assistant to tranfer files from an old PC to New Mac. Now I have two user accounts with slightly different names on the Mac. Any way to merge into one account? Thanks.

    Combine two+ Users Accounts on the same machine

  • Can i use windows migration assistant to transfer files from my windows formatted external hard drive to my mac?

    I have a windows formatted external hard drive and a macbook pro. I was wondering if i could use the windows migration assistant to transfer files from my external hard drive to the mac

    No.
    Just connect the drive to your Mac. The Mac can read most Windows formats (it cannot WRITE Windows New Technology File System (NTFS) formatted drives.

  • Just bought a used MacBook pro after my previous died. I want to migrate my applications, data, etc from a time machine backup of the old computer to the new. Will this affect, or overwrite the Apps., data, etc existing on the new machine?

    Just bought a used MacBook pro after my previous died. I want to migrate my applications, data, etc from a time machine backup of the old computer to the new. Will this affect, or overwrite the Apps., data, etc existing on the new machine?

    No. Only those Apps that are not installed on the new will migrate over.

Maybe you are looking for

  • HP 4630 will not scan

    I have a new HP Officejet 4630 which has given me volumes of problems to the point that I will take it back to the shop and get a different make. Initially after following all the instructions, it would not do an alignment print.  I eventually manage

  • Firefox 37 crashes when using Peacekeeper browser test

    Hi guys, I updated my browser with Firefox 37 and it crashes on me every time I use the Peacekeeper browser benchmark test. I've had no issues using the website in the past. Every time I update my browser I run the test to compare previous results as

  • Hyperlinks to pages, how to remove or edit?

    Once a hyperlink to a page is made, I cannot delete or edit it. In the hyperlink panel 'new hyperlink' and 'hyperlink options' are not active. The only way seems  to delete the text which contains the hyperlink and type it again; a bit annoying!

  • Weblogic 9.2 - Problem with Connection Pool not releasing resources

    We have a third party application that is running Weblogic 9.2 and has a connection pool to a SQL 2005 db for queries within it's batch process. What I have noticed is that it does not seem to be releasing SQL cpu back after the batch and this is cau

  • Generating PDF with XML and XSL

    Hi, quick basic question... I'm trying to generate pdf doc from xml with xsl. I'm using following sample code from xml.apache.org response.setContentType("application/pdf"); Driver driver =new Driver(); driver.setOutputStream(response.getOutputStream