Authorizations IP In BI7

Hello
We need to create Cost Centre authorizations for an input ready query in IP, so every Cost Centre responsible is only allowed to plan data for his cost centre.
Actually we are using the old 3.x authorization concept with authorization objects defined in transaction RSSM.
The authorization object is based on 0COSTCENTER infoobject, which is also contained in the aggregation
level, so it can be used for selection in the input ready query.
The problem is that when we restrict the authorization object in a role for a specific cost centre value, we get a system message saying that we don’t have access to the authorization object even when it is already in a role assigned to the user that is executing the query.
As a result the query is in display mode but if we change the role and grant access to all cost centres (i.e: *), the query is executed correctly in planning mode and we can manually enter plan values.
Thanks in advance.
Regards
Marcela

Did you tried defining authorization objects using transaction code RSECADMIN, as this is working of me for Profit Centers.
Thanks.
Sachin

Similar Messages

  • Hierarchy authorization pbm in BI7.0 with Front end of BW3.5

    Hello All,
    We have a problem regarding authorizations for the hierarchies in BW7.0
    We have migrated from BW3.1 to BW7.0. Authorization are OK in our BW3.1 server, the authorization on hierrachy work well.
    Current Issue (in BI7.0) :
    An authorization object for XCOMPROD for a hierarchy 'ZMAT_HIER'.
    There are 2 queries which have variables of XCOMPROD & ZCOMPROD in selection criteria, ZCOMPROD has variable of type 'Hierarchy node'
    I've a test_user which has authorization on Product Group 5 (one of the nodes in the hierarchy-ZMAT_HIER).
    When i run the queries independently with this test_user, the user has access to Group 5 only, which is correct. 
    When i run a web template report with any one query (from the 2 queries), the user has access to Group 5 (as in first case) - correct.
    However when i run a web template report having above 2 queries together, the authorization fails, as user gets access to root node (instead of only Group 5).
    FYI, we're using BW3.5 front end (no PORTALS)  with the OLD authorization concept (of BW3.1).  Not 'Analysis Authorization' as in BI7.0.
    Looking forward to an explanation/solution to the above.
    Regards,
    Nagendra.

    Hi,
    Check out the customization of SPRO to select the authorization concept. I suspect that it's set on the new authorization concept.
    Tomer.

  • No authorization error in BI7

    Hi
      Recently we had migrated to the new authorization concept in BI7 after that, when the business users open an query or workbook they get the selection screen and when they press F4 on company code info object  (Authorization relevant object) to select values they get an message" you don’t have sufficient authorization" and the out put does not get displayed. but as an BW developer i am able to open the same report without any error
    I checked in for authorizations in Su01 and su53 every thing looks fine for the business user.
    Note: This error occurs only to queries having infoobject company code
    Can someone help me out in this issue?
    Thanks a lot
    Sheetal

    Hi sheetal,
    I am facing the same problem what you have faced regarding authorization error in BI queries.
    when users try to open the workbook, select their options in selection screen and run it, they get warning 'you do not have sufficient authorizations'. when i try to run the same, i am able to open it. this is happening in prod.
    how are you able to solve this problem.

  • Authorization Check in BI7 using ABAP

    Dear Experts,
    i've got a question regarding how to check authorizations in BI7 using ABAP.
    How do i check authorizations?
    In Detail: I want to check, whether a user has the appropriate authorization to access an company code. For that i created an authorization in resecadmin restricted to one single company code. My user has this single authirization assigned.
    In my coding i tried using 'RSEC_GET_AUTH_FOR_USER_MDATA' but it returns an empty table.
    Any ideas how to check the authorizations?
    Thanks & best regards,
    Daniel

    Hi,
    I am using RSEC_GET_AUTH_FOR_USER and it works fine as long as I test with rsudo testuser. 
    E_T_RANGESID gives back the authorized characteristic values.
    But I have a problem with users with *-authorization. ET_RAGESID is empty and an exception is thrown "not authorized".
    So, the coding doesn't work properly if I test with my own user, but yes, works in case that user has explicitly limited values. (btw, fetch the user via FM RSEC_GET_USERNAME beforehand).
    I think I'll overcome this problem (maybe in connection with param I_NO_WARNINGS).
    I'll keep you informed, though it's pretty late for Daniel or even you I guess...
    (But maybe somebody else is interested...)

  • Authorizations Issue in BI7

    Dear Gurus,
    I am having an issue with regard to Authorizations.  In BW3.x  with respect to query designer an end user can just change the local view of a query.  How about the same thing in BI7?  What are the procedures i need to follow to give an user authorizations to only the edit query local view.  Is there any BC role or Profile that i can just add to get the desired result.  Kindly give the inputs in a detailed manner as I am new to BASIS part.
    Your Kind Inputs will be definitely rewarded with a great honour.
    Regards
    Mohan Kumar
    Message was edited by:
            mohan kumar

    Did you tried defining authorization objects using transaction code RSECADMIN, as this is working of me for Profit Centers.
    Thanks.
    Sachin

  • Authorization issue in BI7.0

    Hi friends,
    Following is the situation,
    I have created two Authorization Anlysis objects on 0COSTCENTER.
    AUTH1 = COSTCENTER1, INFOPROV = A
    AUTH2 = ALLCostcenters, INFOPROV = B
    I have two queries built on each infoprovider.
    Scenario1.
    Assigned AUTH1 to User XYZ and when i run the Query on INFOPROV A, the variable on costcenter shows only COSTCENTER1 when i do the F4 on variable. : No problem with this scenario.
    Scenario2.
    Assigned AUTH1 and AUTH2 to User XYZ and when i run the Query on INFOPROV A, the variable on costcenter shows ALL COSTCENTERS when i do the F4 on variable but i am expecting only COSTCENTER1.
    Please suggest how to take handle this situation.

    Take a look at these links...
    http://help.sap.com/saphelp_nw04/helpdata/en/e7/56b23bdb0d0156e10000000a11402f/content.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/a0/48f438f3422f2ce10000000a114084/content.htm
    http://help.sap.com/saphelp_nw70/helpdata/en/59/2cf4388818ac2be10000000a114084/content.htm

  • Authorization Concept - BI7

    Hi ,
    I'm working on authorization concept for BI7 which seems to be having a conflicting statement.
    User : Mary
    InfoObject : ZORDER
    Set 1 : Queries built on multiproviders within infoArea ZSALES should display ONLY order number 123.
    Set 2 : Queries built on multiproviders within infoArea ZPROJECT should display ALL order numbers.
    Its a conflicting scenario.
    Its giving an output for ALL orders for both set 1 and set 2 queries.
    Appreciate if anyone could provide some ideas if this is feasible to achieve within RSECADMIN.
    Thank you.
    Regards
    Maili
    Edited by: Maili06 on Jan 12, 2012 1:19 PM

    hi,
    plz try creating the analysis auth objects for the mentioned scenarios can be:
    1)1st auth object can have  infoarea=ZSALES and order number=123
    2)2nd auth object can have infoarea=ZPROJECT and order number=*
    Both these analysis authorization objects can be assigned to the user via RSECADMIN.
    In the auth profile, S_RS_AUTH = Inactive, read analysis auth from RSECADMIN and manual assignement.
    regards
    laksh

  • Authorization in BI7.0 - Estimation

    Hello Experts,
    We need to provide Estimation for Authorization Migration in BI7.0.
    Client is getting migrated from 3.x to Bi7.0 now and we need to provide this estimation.
    Can any one help me with the number of Man days for this aspect and the different topics which we need to take care of BI7.0 Authorization changes with respect to 3.x?
    Thanks in advance for your help.
    Raman

    HI Raman,
    We have recently migrated from 3.5 to BI7. It took 4 months to ramp up the project.
    Stages:
    Project preperation:
    Auth requirement collection.
    identification and assigment of data ownership(identify auth objects, roles and profiles).
    freezing requirements
    Installing BCT for new auth
    System Bulid activities:
    review migration of auth objects.
    perform manual adjustments to bjects or queries..
    User system/acceptance testing.....
    Testing by users....
    Go live........
    Regards,
    Raj

  • Analysis Authorization and Query

    Hi everybody,
    while studying the new analysis authorization concept in BI7 I tested a little bit around. I was wondering how I can realize the following scenario:
    A user should see "0VERSION" "2" and "0DIVISION" "01" as well as "0VERSION" "5" and "0DIVISION" "02" while executing the query with BEx Analyzer.
    Am I right that I have to create two analysis authorizations?  How do I have to model the query? I always get the message that my testuser does not have enough authority.
    Thanks for your suggestions.

    Hi Anja,
    Did you ever get a resolution to the question you asked.  I am facing the same scenario now where i want to restrict a user to seeing seeing the following:
    user must see:
    Division = 001 and Area = A
    Division = 002 and Area = B
    But he must not see Division 001, Area B for example
    Creating the analysis authorizations is not a problem, the problem is modelling the query to return this result.  I always get no results due to lack of authorization as the authorization variables try to return All Division "001" and "002" and All "A" and "B"
    As i see it, you cannot model the query to return the required result.  What would be ideal is if the query would only return what the user is authorized to, rather than returning nothing and giving an auth error.
    Thanks
    Gavin

  • RoleMigration.

    Hi guys,
    we are going to do role migration according to new authorisation concept of 7.0.I have few doubts about this.
    1.does this new concept recommend reporting on multiproviders?
    2.on what BW objects are these reporting roles based?(I am hearing that roles for queries based on Cubes will not work in my project after upgradation to 7.0)
    3.how can roles be based on infoproviders like cubes,multiproviders?
    4.how are roles migrated?
    5.how this new concept differs from old one?what benefits do we get by using new authorisation concept?
    Thanks for your guidance.
    Rgds

    Hey.  Please check the link to the forum discussion, below.  Has many links to all the information you should need.
    Re: Analysis Authorizations in SAP BI7.0
    Thanks

  • F_BKPF_BUK IN QUERY.

    Hello experts ,
    I have query , with parameter 'BUKRS' , i want add to this parameter the confirmation object
    ' F_BKPF_BUK' ,how can i to this in my query ?
    Thanks for your help.
    Avi.

    In systems until release 3.5 there had been authorization objects. As BI 7 changed to Analysis Authorizations the concept of "PERFORM CHECK_AUTH" doesn't work any longer.
    see: Authorization Check in BI7 using ABAP

  • Authorizations for Work books in BI7

    Hi BW Experts,
    I have created a work book by using BI7,and the requirement is to give authorizations to diffrent users to access that work book.I have tried a lot by using diffrent methods.
    Could any body can suggest me how to proceed.
    Thanks & Regards
    Debasish

    Hi,
    Assigning workbook to the user role:
    Goto User Role > select Menu tab(Change mode)>Seelct +Report icon -->Select Radio button BW Report --> Enter your workbook technical name here(Ex:4E9QCMIXFMRS71K9Z0TP7F4T7). Finally check it in user role.
    Or else check this thread
    Save Workbook in end User Favorites
    Regards
    Pcrao.

  • HR - BI7 authorization error trace

    Hi gurus,
    I had a HR structural brought in to BI7 analysis authorization. I got a test user who has access to a particular node in the heirarchy. I run a query which has a customer exit and this what I got from the trace.
    ==========================
    Characteristic
    0ORGUNIT
    0TCAACTVT
    Partially or Fully Authorized (Intersection)
    SQL Format:
    ORGUNIT >= '00000001'
    AND TCAACTVT = '03'
    Result
    Not Authorized
    The ORGUNIT heirarchy doesn't have that value "00000001" in our heirarchy value always starts with the "5???????". I do not know where it is getting it from..
    Can someone of you review and analyze my issue?

    Hi Gaurav, First of all thanks for replying to me that quick.
    This is what I have in my analysis auth:
    Characteristics
    0ORGUNIT
    0TCAACTVT
    0TCAIPROV
    0TCAVALID
    Value Auth
    I     EQ     #
    I     EQ     :
    Hierarchy Auth
    Hier Nm    Tech Node Nm  Typ    Level      AreaVal
    ORGEH     $0ORGUNIT        1     0              0
    ORGEH     REST_H              1      0              0

  • Difference between BI7.0 & BW 3.5 Authorizations

    Hi ,
            can any body explain what is major differences in authorization BI7.0 & BW 3.5.
    please.
    thanks...
    Please search the forums before posting
    Edited by: Arun Varadarajan on Mar 29, 2011 2:12 AM

    Hi there,
    Check in here:
    [http://www.google.pt/url?sa=t&source=web&cd=2&ved=0CBYQFjAB&url=http%3A%2F%2Fcsc-studentweb.lr.edu%2Fswp%2FBerg%2FArticles%2FNWBI70_what_is_new.ppt&rct=j&q=NW2004s%20what_is_new.ppt&ei=y1aQTf_tCIyVswb66c2vAQ&usg=AFQjCNHiTjGx61LWd6dVttxh_WUVdFf05g&sig2=ut14U6malkYRN4AeiyDa0w&cad=rja]
    You'll find all the major differences explained.
    Hope this helps,
    Regards,
    Diogo.

  • User Authorization in BI7 Problem ListCube

    Hi there,
    In NW2004s BI7, under Win-server 2003, Oracle 10g
    I created one custom role for User, to display DSO data only
    Data displayed perfect through Transcation code: LISTCUBE but user can't export data into excel,
    option is disabled or grayed out...
    Here is Screenshot:
    1. Goto ListCube
    http://www.flickr.com/photos/25470985@N07/4171781095/sizes/o/
    2. Display data any DSO and export to excel
    http://www.flickr.com/photos/25470985@N07/4172536260/sizes/o/
    3. User Custom's Authorization
    http://www.flickr.com/photos/25470985@N07/4171781047/sizes/o/in/photostream/
    Where I am getting wrong?
    please advised me
    Thank in Advance
    Angeline

    Hi,
    This article shows to create authorization and making it not visible or Grey (reade this and reverse to unblock the authorization)
    http://ecohub.sdn.sap.com/irj/scn/index?rid=/library/uuid/101fb4f5-eb7c-2c10-5daa-b479c47f0a14&overridelayout=true
    follow the notes procedure it will solve your problem
    Check this note 1145885
    Check note 1222905. You have some settings to be able to export excel file. http://doa.louisiana.gov/ois/Service/Bulletin_Boards/HR/How%20to%20export%20data%20from%20SAP%20to%20Excel.pdf
    hope this will help you
    Thanks & Regards,
    Ravi.

Maybe you are looking for

  • ERROR when I try to open or save an existing WorkBook

    Hi all, Can you help me to solve my problem please. When I try to open some existing WB there is an error message "No entry found". So when I open some existing WB and try to save them as an existing WB it gives me an error message "Document store ac

  • Image doesn't display in the report

    I have a report(template=hide and show region). Below is the code. Any pointers would be helpful select CASE WHEN test = '501' THEN '<img src="#APP_IMAGES#test.png"/>' ELSE '-' END test, select a,b,c from EMPS order by a,b Running this doesn't show i

  • Generic function to display a specific row from any table

    Hi all, I need some help to write a function in PL/SQL or Dynamic SQL (or both), to write a function that would take in parameters only the unique ID of the row to display and the name of the table to display (that could be any table with any format)

  • Migration Assistant not recognizing old macbook

    I am trying to transfer my files from my old MacBook Pro (2006) to my new MacBook Pro (mid-2012) using Time Machine Backup. From Migration Assistant, once I get to where it is "looking for other computers" it is not finding anything. I have my old ma

  • 6680 and other language? how?

    How I can change language of phone on Russian? In adjustments is only English German and Bulgarian. Whether it is possible simply download an additional file and to change language in adjustments or to go in shop and to pay money for an insertion? p.