Authorization settings for BI in RSSM

Hi SDN Experts,
                         I have provided authorizations for 0Profit_ctr (Hierarchy) in RSSM,
maintained a role in PFCG, assigned the User that role in SU01 and then publised the query in to that role.
                                    Now when i run the query in BEx entering the variable name (i.e. SOUTHZONE, on which the hierarchy in restricted), then i'm not getting any data, and if i enter apart from SOUTHZONE then there is no message saying that there is NO AUTHORIZATON.
This is happening for 0PCA_C01(Profit Center Accounting) cube, and the query name is ZPCA_C01_q0003.
                                                  I heard from my Colleague that there are some basis setting to be done for BI-BCS or i have missed any step. Please help i'm facing trouble with this. Please help.
Regards,
Anjali
Message was edited by:
        Anjali

Hi,
Did you see this document?Or else,please check this
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/b849e690-0201-0010-9b88-c00cca40736f
Rgrds,
Renu

Similar Messages

RSSM: Checks Authorization Objects for Infoprovider are not activ

Hello,
we have BW 3.5 and we use RSSM Authorization Objects.
When we create a new cube with an Infoobject that is authorization relevant, in our development-system in rssm the flags for the checks are automatically activ.
When we transport the new cube to our production-system, the flags in RSSM for the authorization object are not activ.
Sometimes the new infoprovider is not in the list of the infoprovider in rssm, so we have to "update check status" with the appropriate icon.
My question:
It is possible, that when we import the new cube in our production-system, that all authorization objects are activ??

Hi,
Normally system would check all the authorization relevant objects whenever a new Info cube is imported and in case if you want to transport these changes to Production system manually then follow the below listed steps:
1) In Development system, check or un-check the authorization relevancy using the transaction RSSM on a given Info provider
2) These changes are stored in table RSSTOBJDIR
3) Create a manuall transport request and include these entries covering the required Authorization objects manually.
R3TR TABU RSSTOBJDIR
Ex: If Info object 'A' is authorization relevant in Development system but not in Production system and you want to transport this change to Production system then include object 'A' table entries manually.
Hope this helps.
Cheers
Bala Koppuravuri

Authorization object for the "global settings" of a workbook of BW 7.0

Hi colleagues,
I search for a authorization object for the "global settings" of a workbook in the analyzer of BW 7.0.
The normal user should not have the authorization to change the "default workbook" .

Hello Hans-Dieter,
have you solved the issue? I think it is not clearly defined and needs to be enhanced even Note 332738 has been applied. S_RS_TOOLS is not working, that's my opinion.
I opened a customer message in Marketplace to become a solution.
May be you have a solution already done?
I would appreciate this very much.
Best regards
André
Edited by: Andre Brachert on Apr 14, 2009 1:42 PM

Contribute 4 - no proxy settings for outgoing CPS authorization

Does CS4 have any access to proxy settings for publishing
server identification?
There are three outgoing requests in Contribute:
1) FTP or SFTP --> this has a proxy setting
2) contribute browser -> this uses proxy settings inside
of Start->Settings->Control panel -> Internet Options
3) HTTPS: validating CPS un/pw -> this has no proxy
setting that I can find.

Thank you for the quick reply! But the solution provided by you, it seems, has still not been able to address my issue. I ran the program at command prompt with your said parameters, but the download still gave an error in the App window.
Also, is there some way of defining these parameters in the source code? I am keen in using NetBeans to run the program.
Cheers!

How to block the Form Settings for Main Menu to use ONLY "My Menu"?

Hi everyone:
Our customer wants to define an User Menu (My Menu) for each B1 user within the company and restrict the Modules at main menuu2026
How can I block the Form Settings for the Main Menu?... It is possible to give an user Only access to My Menu and denied Authorization to the Modules?.
I appreciate your help!!. Thanks very much
Claudia Gutiérrez

Hi,
'My Menu' refers to the third tab on the Main Menu, and the
authorization of 'Organize My Menu' works as below:
- Full Authorization: Allows the user to access the Organize User Menu
window (Tools -> User Menu -> Organize) and customize the menu.
- No Authorization: The user cannot open this window.
Check the Note [1062635|https://websmp130.sap-ag.de/sap(bD1odSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=1062635] if you are looking for it.
Regards,
Jitin
SAP Business One Forum Team

How to change settings for all users?

Hi All,
In cPro we have User Settings button. On clicking that we get a Tabstrip where you will find "User" tab.
my question is: How can we change the default settings for all users e.g setting the checkbox "Scheduling only manually" to true ?
Best Regards,
Arti.

Hi Arti,
In cProjects the authorizations can be managed either by authorization profile administration by system administrator for General authorizations or by Project specific authorizations for individual cProjects elements by Project owner.
Try the first one and I hope you will get the solution.
Regards,
Nishit Jani
Award points only if you find the information useful.

How i can obtain the authorizations settings suing SDK or SQL??

Hi all,
There is some way to obtain the "standard settings for authorizations" for every user in B1 using SDK or SQL on the database company.
I know that is possible to add and recover the "additional authorizations", but i need to generate the reports over "standard authorizations" for auditing peoples.
I am in 2005 A.
thanks.

>It is possible to copy a whole binary field from one row to another.
Row???
The whole standard authorizations are stored as 1.
>Frank, Do you know how much work does it require to set the same authorization/configuration for each user?
>Do you know that sometimes this authorization/configuration gets reseted and you have to set them again?
1) Not sure what you are trying to say:
This thread is about some kind of report about users vs. authorizations.
2) You are raising a different issue - which is NOT a SDK question + has 2 different aspects:
a) Setting the same authorizations for multiple users in the same company:
Simply Drag&Drop a "user" over another to give the latter the same authorizations as the first one.
b) Setting the same authorizations for multiple users in the different company:
As Harold already pointed out:
In 2005 you can use the CopyExpress SAP Add-On to do this; I am not sure whether it was possible with the old "BC Sets" Add-On...
3) You talk about some bug where authorizations got reset.
Did you remember to report it on SAP Service Marketplace?
Regards,
Frank
PS: I have sent a mail to the responsible persons.

'Sensible' Definition & Security settings for a Production APEX environment

Hi Folks.
What's the feeling on Definition and Security settings for a production APEX application?
Here are my settings for my UAT environment (not quite in production just yet)
Debugging: NO
Status: AVAILABLE
Build Status: RUN APPLICATION ONLY
Authorization Scheme : MUST NOT BE PUBLIC USER
Session State Protection: ENABLED
In the APEX Administration setup, access to my site is restricted by IP also. As a consequence I think it's buttoned down quite tightly but, eventually, we plan to open this up to the Big Bad Web!!
What are your thoughts on the pro's and con's, the why's and wherefore's of one setting or another.
I'm hoping this thread will prove to be a good forum for discussing APEX application security configurations and a reference for others.
Please feel free to link to whitepapers of relevance.
Maybe someone could take up the challenge of producing an 'UNHACKABLE' :-) APEX website?
Simon.

Hi Simon,
If you're just talking about instance settings, then you might also add to that using the 3.1 runtime only instance.
If we're opening it up to application design, well...that's a whole other matter ;)
John.
http://jes.blogs.shellprompt.net
http://www.apex-evangelists.com

How to turn off the authorization checks for a object in infoproviders?

Hi - how can I turn off the authorization check for an object (ex: 0orgunit) in infoproviders?
I have 0orgunit as an authorization-relevant object and is used in one of the cubes. When reports are run for this cube, this is causing authorization issues. The object is present in other cubes also but I have to remove or turn off the authorization check of this cube alone. How to do this? Please help.
Thanks,
Raj.

Hi Raj,
Srinivas, is right , however in BI7 the correct transaction is RSECADMIN and not RSADMIN.
In BW3.5, use RSSM transaction to do thins.
OR
Go to transaction RSECAUTH ---> Choose the authorization object that has been created for org unit(and has been assigned to the user). Go to change mode. Remove the cube from the dimension 0TCAIPROV
If you are using old authorization concept in 3.5 or in 7.0
Go to RSSM. In the checks for infoprovider, enter your infoprovider name. Choose change.Here you will see a checkbox to switch off the authorization.
Hope this helps you,
Best regards,
Sunmit.

Authorization Object for Classification

Dear all
Is there any Authorization Object for Classification?
Regards
Sandeep

Hi Sandeep ,
Following are the authorisation for classification.
C_CLA_PROF Profile Maintenance/Assignment of Settings in Classification
C_CLAS_ERS Replace Characteristic
C_TCLS_BER Authorization for Org. Areas in Classification System
C_TCLS_MNT Authorization for Characteristics of Org. Area
C_KLAH_BKL Authorization for Classification
C_KLAH_BKP Authorization for Class Maintenance
if useful reward points
Regards,
nitin

Authorization object for ML81N

Hi
I am trying to know what is the authorization object that controls :
when going to transaction ML81N and you click on the colorful icon on the right (configuration) it opens the table settings window
what is the authorization object for the administrator button
regards

well.......to be honest, i did my research based on some intuition and some research
I know that the settings could be changed not only for the transaction you mentioned, but i remember that i was taught that this could be changed for Sales order transactions too, which suggests that this is not bound to a specific transaction but more on a "generic plane"
whenver it is system wide settings, the first think i check for (just a habit) is on S_ADMI_FCD, earlier experiences taught me a lot on the importance of this object, make sure that you never have a * for this object (at least that is my personal learning and opinion)
Good luck for the future

Deselect auth. check for infocubes (Checks for infocubes) in RSSM

Hi,
An infocube I installed contains an authorisation relavant object (already exists) in BW3.5 system. By default the infocube is selected for auth. check in RSSM.
After I transported the cube to target system I realised the auth check in RSSM has also been transported with the cube.
Hence, I have deselected the auth. check for the infocube "Checks for infocubes" in RSSM and saved it. Then, I created a second transport and only transported the cube. But the changes I made in RSSM hasn't been transported.
Please can you advise me how to transport the changes I made in "Checks for infocubes" in RSSM?
Thanks a lot
Murali

Hi,
check this threads:
Re: RSSM: Checks Authorization Objects for Infoprovider are not activ
Re: RSSM Transports
Normally system would check all the authorization relevant objects whenever a new Info cube is imported and in case if you want to transport these changes to Production system manually then follow the below listed steps:
1) In Development system, check or un-check the authorization relevancy using the transaction RSSM on a given Info provider
2) These changes are stored in table RSSTOBJDIR
3) Create a manuall transport request and include these entries covering the required Authorization objects manually.
R3TR TABU RSSTOBJDIR
Ex: If Info object 'A' is authorization relevant in Development system but not in Production system and you want to transport this change to Production system then include object 'A' table entries manually.
Regards
Andreas

Failed to activate authorization check for user SAPSYS

Hi Experts
I am trying to run the sdcc, it was throwing time_out error. i have increased the work process runtime. now
i am getting a error Failed to activate authorization check for user SAPSYS.
Please help me to solve this issue.
Regards
Venkat

Hi, Mr. Joe Bo.
Thanx for your reply. We are using ECC6 (HP Unix with Oracle)
Basis Patch - 15, Kernel 159
I have seen the the note but it's showing ccms method defination settings, but for my case we are yet to go live we have not made any settings from sap they are planning to run a session for the go live. When i am running sdcc i am getting a error in the system log "Failed to activate authorization check for user SAPSYS"
Thanks & Regards
Venkatesan J

Not clear with the Authorization concept for Marketing Plan

Hi All,
I am new to CRM and was going through some of the prescribed document for CRM marketing
when i encounter with the authorization concept in marketing plan,for example how
can i restrict a user with a campaign manager role from changing marketing plan.please
provide the step by step procedure.
Regards,
Sanju

Hi Sanju
User with a campaign manager role can be restricted for changing marketing plan using authorization group.
We define authorization groups for use in the Marketing Planner. Authorization groups can be maintained at both marketing plan level and campaign or trade promotion level. Authorization groups enable us to control which users are authorized to change which of these two types of marketing project. We could, for example, define one authorization group to be assigned to a marketing plan, then define further authorization groups to be assigned to the different campaigns within the marketing plan. In the Marketing Planne.
Follow below steps
1. Define authorization group using following IMG Path
Customer Relationship Management / Marketing / General Settings / Define Authorization Group.
2. In authorization object CRM_CPGAGR of the role Campaign manager maiantian activity 01, 02, 03 ,06 (this will allow user to create, change, display and delete)
3. IMG defined authorization group ex: ABC can be seen under the tabstrip Basic Data of marketing plan.
4. Now user have to choose the Authorization group ABC from the drop down in Basic tab to create a marketing plan. User will get the change access for all the marketing plan which have the authorization object ABC.
Hope this will help...
Rgds
Mallikarjun

Email Form Settings for Array

I am using David Powers 'Training from the Source'. I now have the emails working.
It has worked with a Basic Form and Resetting Forgotten Passwords.
However I had a slight problem with the Travel Inquiry section. The array (Destinations, How many, Interests etc) appeared OK in the browser but they are missing when sent to my email inbox - only have name and comments.
Graham White

Hi,
Have you tried the "Copy Form Settings" function in "users - Setup" window? You can copy the form settings for one user to other users.
Prerequisites
You have write authorization for the Users – Setup window.
All other users are logged off from SAP Business
One.
All SAP add-ons to SAP Business One, including ISV
add-ons, are disconnected.
All other SAP Business One related tools (for
example, EarlyWatch Alert, database administrator connected to SAP Business One
via server management tools) are disconnected.
Regards

Authorization settings for BI in RSSM

Similar Messages

Maybe you are looking for