Authorizations InfoCube in BW

We are planning to build our own BW Infocube for Authorizations.
This required because we want to consolidate the authorization reports across our
production landscape (8 Systems) for the various interest groups - Adminstrators and Auditors.
I would appreciate if anyone can share their experiences if they have done anything like this before.

Hello Mushtaq,
you can use standard functionality. There are scenarios available where you don't have to build custom InfoCubes or even develop programs.
Please have a look at the documentation.
1) Using existing authorizations
http://help.sap.com/saphelp_nw04/helpdata/en/a7/5ab43b6a596660e10000000a114084/frameset.htm
2) Generating authorizations
http://help.sap.com/saphelp_nw04/helpdata/en/56/25dc886b0611d5b2f50050da4c74dc/frameset.htm
Regards
Marc
SAP NetWeaver RIG, US BI

Similar Messages

Creating Infocube

Hi,
I am trying to create infocube in SAP BI 7.0 but facing a lot of problem.As I donu2019t have screen shot to
refer. I am referring SAP BW composed by fufu but it is mainly focused on sap bw old version.
Can any one send me all the steps along with screen shot. I am looking for all steps
Business Scenario and SAP BW
Creating an InfoCube
Loading Data into the InfoCube
Checking Data Quality
Creating Queries and Workbooks
Managing User Authorization
InfoCube Design
Aggregates and Multi-Cubes
Operational Data Store (ODS
Business Content
Generic R/3 Data Extraction
Data Maintenance
Performance Tuning
Object Transport
BW Implementation Methodology
Hoping prompt response from members of this group
Regards,
Vivek

Hi,
Creating infocube in 7.0 is almost similar the only difference in 3.5 u have to create update rule & transfer rule in 7.0 DTP is used for transformation.
if u mention the errors u faced while creating infocube then it is easy to find out the solution.
Pls go thru this links,
http://help.sap.com/saphelp_nw04/helpdata/en/cd/cae63b60c24c6ee10000000a11402f/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/cd/cae63b60c24c6ee10000000a11402f/frameset.htm
Hope it helps u,
Thanks & Regards,
SD

Is it possible to use a multiply authorization objects to one infocube?

Hello!
BPS-BW implementation required to use security on several CHAR including hierarchies for one infocube. What the right way to implement this requirement?
I created (RSSM) several authorization objects: one per CHAR, and assigned it to infocube. Then I created a role and included the craeted objects. But cube data didn't display in a queries or planing folders. But, when I created the auth object for the required CHARs and assigned it to role the cube data displayed accordance setted values.
What's wrong?

Hi,
I think u have checked the check box for authorization relevant in the maintanance screen of chraracteristics ,thats the reason.
Regards-
Siddhu

Analysis Authorizations with two infoobjects in a infocube

Dear Experts,
I have a infoprovider which is
having two infoobjects Z1 and Z2 both are auth relavant
i have two queries Q1 and Q2, Q1 has Z1 only and Q2 has Z2 only.
if i have two sets of users, one group have access to only query Q1 and second group
has access to Q2.
my doubts
1. do i have to give both the group users authorization for two info objects Z1 and Z2 eventhough they both together
are not in one query but only one at a time in a query.Becuase all the queries are on th same infocube.
2 or else can i create one authorizatio and include both the info objects in it and then assign it two all the users irrespective of the group.
Thanks and Regards
Neel
Edited by: Neel Kamal on Apr 12, 2009 1:34 PM

Hi Neel,
Answers to your questions in bold.
1. do i have to give both the group users authorization for two info objects Z1 and Z2 eventhough they both together
are not in one query but only one at a time in a query.Becuase all the queries are on th same infocube.
Answer - Yes, I think you would need to give both user groups, authorization to both the infoobjects.
You may need to check in RSSM, that both authorization objects are marked for authorization check for infoprovider. If both have been checked, then I guess you need to give authorization for both infoobjects. In RSSM, in infoprovider , give the infocube name on which the query is created and check the authorization objects checked for this infoprovider. Check the definition of the authorization objects in the same transaction.
2 or else can i create one authorizatio and include both the info objects in it and then assign it two all the users irrespective of the group.
Answer - Yes, you could do it this way as well. But this means that all the users in the two user groups will be authorized to see the same authorized dataset.
Hope this helps,
Best regards,
Sunmit.

Creating Authorization on queries, infocubes

Hi All,
Can any one help me by providing step by step procedure in creating authorization on queries, infocubes, infoarea etc.
Thanks,
Satya.

Dear,
Kindly check these:
https://forums.sdn.sap.com/click.jspa?searchID=10176073&messageID=386657
https://forums.sdn.sap.com/click.jspa?searchID=10176073&messageID=1232504
https://forums.sdn.sap.com/click.jspa?searchID=10176073&messageID=4618200
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/media/uuid/696affac-0701-0010-f7b5-cc431fc9365d
http://help.sap.com/bp_biv235/BI_JA/documentation/Authorization_BW_Proj.pdf
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/b849e690-0201-0010-9b88-c00cca40736f
http://help.sap.com/saphelp_nw04/helpdata/en/80/1a6859e07211d2acb80000e829fbfe/frameset.htm
Thanks

Authorization error when trying to view Infocube content

Hi,
I have created one Infocube and loaded the data.When I am trying to view the contents from manage screen,im getting the below mentioned error.
Your user master record is not sufficiently maintained for object Auth Obj for Personnel Area - 0PERS_AREA
Message no. BRAIN805
Diagnosis
When checking your authorizations for object 'Auth Obj for Personnel Area - 0PERS_AREA' (technical name: ZHR_0PERSA) it was established that you do not have authorization in your user master record for this object (return code 12).
Procedure
How you continue depends on the return code. See the online documentation for ABAP language element "AUTHORITY-CHECK". Please note:
With a return code of 12, the object 'Auth Obj for Personnel Area - 0PERS_AREA' has not been maintained in the user master, meaning there is no profile in the user master record in which this authorization object has been entered. This is, however, absolutely necessary, as all of the authorization objects created in the development class RSR are validated in the 'and' link. If the authorization is missing for only one object, the request is rejected as unauthorized.
Get the person responsible for your authorization to create you a profile containing authorization for object Auth Obj for Personnel Area - 0PERS_AREA.
need help on this
Thanks In Advance..

Hi,
First check in RSSM whether your InfoProvider is checked for authorization object 0PERS_AREA. Also determine whether do you need this authorization object ?If yes, then it should be checked otherwise check mark should be unchecked. If 0PERS_AREA is checked for your InfoProvider, then you should have some value in this object when you create the role. Either * for all values or restricted value for it. Goto Pfcg select the role and add the authorization values for the 0PERS_AREAobject.
GSM.

RSPLAN - You do not have authorization for InfoCube

Hi Friends,
I have SAP_ALL and SAP_NEW access .
I can access RSPLAN and can Start Modeler.
I could see the Info Provider Selection(webpage).
When I click START I get list of INFOPROVIDERS List.
But When I select any of them.....
I get a message on the top like "You do not have authorization for InfoCube 0RSTT_C02".
Every time I select different object respectively it is looking for different authorization.
Any help is appreciated....
Thx
James

Hi Lucimar and Bindu,
We are on BI 7 System.
There are no missing authorizations from SU53.
We have also traced using ST01 Authorization Check. It doesn't really point show any missing authorizations.
On using the new authorization concept(RSECADMIN), Im not familier with it.
Also we have found a useful note 913852, But this code correction is already existing in the system. And I can't find this support pack(SAP_BW_VIRTUAL_COMP) on the Marketplace.
At the end the bug is still out there....we have to kill it....
Come on folks post your thoughts....

Authorization issue when I display data from ODS, Infocube, Multirprovider

Hi Experts,
When I'm trying to display data for ODS, Infocube, Multiprovider, Infoset in production system, facing aurhorization issue.
Can anybody have idea what is authorization objects to display data from Infoproviders.
SIRI

Check for below authoriztions in your role:
S_RS_ICUBE
ACTVT          03
RSICUBEOBJ     AGGREGATE, CHAVLREL, DATA, DATASLICE,   DEFINITION, EXPORTISRC, UPDATERULE
RSINFOAREA     *
RSINFOCUBE     <your cubes>
S_RS_ODSO
ACTVT          03
RSINFOAREA     *
RSODSOBJ     <your DSOs>
RSODSPART     DATA, DEFINITION

Authorization object MultiCube InfoCube

Hi BW people,
Suppose I have a MultiCube with a couple of InfoCubes beneath. These <b>InfoCubes</b> have authorization objects and profiles are maintained in the roles. The authorization on InfoCube level works perfectly.
My Question...
Do I also have to maintain the authorization objects for the multicube seperately? Or will the system still check the authorization objects of the InfoCubes even when the query is not on the InfoCube but the Multicube above it?
To be honnest, I would be supprised if I had to maintain all the links between authorization objects and the MultiCube separately as the way of authorization can be different between the infocubes underneath... But hey, I didn't invent it
Thanks in advance!
Best regards,
Bart

Hi Bart,
The system still check the authorization objects of the InfoCubes even when the query is considered with the multicube. So there is no need to maintain the authorization objects for the multicube seperately.
I hope u r clear now...let me know
Regards,
R.Ravi

BW authorization for new field in infocube

hi guys,
I'm still new in using RSECADMIN . There is new field ZUCC_ZREGIOn added in cube zmacola02.
In RSECAUTH , how can i make field ZUCC_ZREGIOn to be an authorized character ? I want to add this field as part of aut. check

make the object as authorization relevant in RSA! and include the object in RSECADMIN, so that you will make that object as part of authorization check.

Error in Opening a query after Authorization.

Dear Experts,
in a requirement to restrict the users to access some specific queries only I have created the role and assigned some queries to those role in PFCG. The user is able to see only the authorized queries when he login to BEx Analyzer . Now the problem is that when he opens the query instes of getting the prompt for variable values entry he is getting some message as
" Error in specifying the value for variable for Fiscal year and plant."
however the query is opened success fully with my ID which has all authorization.
in Role maintenance I have provided following authorization to the user .
1. Business Explorer - Global variables
2. Authorization Check for RFC Access
3. Transaction Code Check at Transaction Start
4.BI Analysis Authorizations in Role
Business Explorer - Components
Business Explorer - Components: Enhancements to the Owner
Business Explorer - Enterprise Reports
Business Explorer - Folder View On/Off
Data Warehousing Workbench - Hierarchy
Data Warehousing Workbench - InfoCube
Data Warehousing Workbench - InfoObject
Data Warehousing Workbench - MultiProvider
Data Warehousing Workbench - DataStore Object
Authorization Object for RS Trace Tool
5. Business Explorer - Variants in Variable Screen
could please some one tell where i am missing , are what is wrong with it.
Thanks !

you may wish to try executing the queries using the RSECADMIN and analyzing the log for the same.
Hope it Helps
Chetan
@CP..

Final user's can not see the data due to limited authorization.

We have created a InfoSet with three info Objects, 0Account, 0Costcenter and 0COMP_CODE. 0Costcenter have an attribute retail location 0RT_LOCATIO.
0RT_LOCATIO is an authorization relevant object. We as consultants can execute the infoset properly, but final user's with limited authorizations can not see the data because of authorization failier
We hae several options to solve the issue, deleselect the auth. flag in the infoobject; delete the infoobject from the attributes of the cost center or create an authorization object and assign it to the final user's profile. But we don't want to go that way.
My question is, is there any way to avoid including this attribute in the infoset definition? We are not using it in the query and we don't need it, so if we could delete it from the infoset (in the same way you add or delete infoobjects from an Infocube) without changing the cost center aster data, we will have our problem solved.
Does anyone how to do this (if possible)?
Thanks in advance!

Just do two things to find the authorization check failed for that user.
1. Execute SU53 output and find out the authoirzation check failed. If yes, please send that to BASIS Team.
2. Next one, switch on the authorization trace in ST01 and ask that user to see that data. if the user is failed with authorization issue. switch off the trace in ST01 and find out the issue.
Do this way, if it is not successful you can go for any other alternate way.
Hope this would help you.

How to assign authorization objects to a cube

Hello,
My cube includes 0profit_ctr which is marked as authorization relevant. Still in RSSM my cube is not included in the list of infocubes for an authorization object (zprofit) linked to 0profit_ctr. I'm therefore not able to enable that authorization object for my cube. I have a few ODSs which are included in the list. Why is my cube missing? Is there something I must do to include it, or is it a bug?
When checking the infocube for authorization objects in RSSM this list is empty as well. I don't see any option to add authorization objects in that list.
I have read the following document:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/b849e690-0201-0010-9b88-c00cca40736f
I'm using BW 3.5.
Regards,
Christoffer

Hi Christoffer,
In RSSM you will find a button "Update Check Status ( Authorization Objects, Info providers) ". After this update you should find your cube in the list.
Jaya

Problem with Authorization for Planning folder

Hi an having a problem with providing authorization for a planning folder
i am getting the following error when i test it with test user
Error while calling up RFC
Message no. UPC202
Diagnosis
You have selected a function, to execute this the system must set up an RFC connection to another SAP System. However, setting up this connection was not successful. The following internal error message was generated:
"You do not have authorization for InfoCube ZT_MR_T "
Procedure
Inform the system administrator.
we are not pulling the data from any other server, all the data is on the sif any one has faced the same issue let me know.
Regards,
Abraham

Calling Thru Trans code: BPS0 in ECC 6
getting this error:
Error while calling up RFC
Message No. UPC202
Diagnosis
You have selected a function, to execute this the system must set up an RFC connection to another SAP System. However, setting up this connection was not successful. The following internal error message was generated:
"An error occurred during the receipt of a complex parameter."
after i check in bw trans code:st22
Following this error message:
Category                   Internal Kernel Error
Runtime Errors         PARAMETER_CONVERSION_ERROR
Application Component BC-MID-RFC
Short text
    An error occurred during the receipt of a complex parameter.
What happened?
    During a remote function call, an error occurred while converting
    a complex parameter.
What can you do?
    Note which actions and input led to the error.
    For further help in handling the problem, contact your SAP administrator
    You can use the ABAP dump analysis transaction ST22 to view and manage
    termination messages, in particular for long term reference.
Error analysis
    An error occurred during the conversion of a complex parameter.

Problem with Authorization for BW BPS planning Folder

Hi an having a problem with providing authorization for a planning folder
i am getting the following error when i test it with test user
Error while calling up RFC
Message no. UPC202
Diagnosis
You have selected a function, to execute this the system must set up an RFC connection to another SAP System. However, setting up this connection was not successful. The following internal error message was generated:
"You do not have authorization for InfoCube ZT_MR_T "
Procedure
Inform the system administrator.
if any one has faced the same issue let me know.
Regards,
Abraham

HI ,
I Checked it out we dont have that cube in our system.
Regards,
Abraham

Authorizations InfoCube in BW

Similar Messages

Maybe you are looking for