Bex Explorer 3.5 vs. 7.0: authorization to display workbooks

Hello,
in order to see workbooks created with BEX 3.5, it is sufficiently to have auth. object S_RS_COMP with e.g. given info area, type of reporting component with * and some info cubes. There is no additional authorization for S_USERS_AGR, activity 03 necessary.
Then, if I open BEX analyzer and press button "roles", I will see all workbooks matching the info area / info cube restrictions.
Using now workbooks created with Bex 7.0, it seems that I additionaly need access to S_USERS_AGR with the name of the role containing the workbook and activity 03. Am I correct that activity 03 with S_USERS_AGR will be checked even to display workbooks only?
(For saving workbooks, I know that S_USERS_AGR is to be added.)
Thanks,
Stephan

Yes this has changed. You now need the S_USER_AGR also. This will be checked with ACTV 03 even for display,
I think, that the situation with the Display authority was introduced with the SAP Note 1171537 in SP19 for BW 700. The reason here is that the missing authority check for Roles was considered as a violation of the authorization concept.

Similar Messages

When i open up BEX explorer how to know it is off production or development

SDN Experts,
when i open up BEX explorer how to know it is off production or development? because i always have development,testing and production screens open. Also do anybody know how to change the background color of SAP AWD screen?
Thanks!
York

Pizzaman,
I try exactly like you mentioned from Business Explorer menu, it is showing all the information like you said but it is not displaying anywhere on the screen. please help.
York

Link to BEx Explorer 3.5 report from portal

Hi Experts!
We are running nw2004s with a 7.0 portal and a lot of 3.5 excel based reports to be migrated into new webtemplates eventually. Until then, the customer would like us to make links in the portal that would open up the 3.5 BEx Explorer and execute a certain report.
Does anyone know if this is possible - and how it can be done? It would have to work in a way where the user is automatically logged onto the BEx Explorer - only I'm not sure if this is possible at all. Antoher challenge seems to be that I do not want to include any input values for the variant for a particular report, I want the selection screen to pop-up after having opened the link from the portal. If I try Broadcasting via the BEx Broadcaster - I have to put in values for the selection.
Is the RRMX as an iview working properly - does anyone know? And if you already have another workbook or query open - what will happen then?
Any input is highly appreciated.
Kind Regard
Gitte Kvist Hansen
Accenture Services, ADU, Denmark

HI Gitte,
first thing you need connect your BW system with EP server.
and configure S.S.O between EP and BW
for more info on S.S.O configuration open this link
http://help.sap.com/saphelp_nw04/helpdata/en/1c/ad1640033ae569e10000000a155106/frameset.htm
after this.
if you know the info cube name and query name of the report in BW system.
then you can bring those report into EP as follows.
create a BW repport iview by selecting SAP BW report ivew template
provide the ivew name and id, provide the system to connect BW .
and in the BEx Application query string property
give the value as follows
cmd=ldoc&infocube=<infocue name>&query=<query name>
and see the preview
rgds
srinivas

Authorization Error Openning WorkBook.....

Hi guys i try to set authorizations to a user for use a workbook of Bex Analyzer and when the user try to load the workbook there´s no in his profile the workbook doesn´t appears.
I used the objects
S_RFC      * * *
S_TCODE    RRMX
S_RS_COMP All Activities, all objects
S_RS_COMP1 03,16 All components , owner *
S_RS_ICUBE * * *
The user doesn´t see any workbook in the list of workbooks to open......
Is necesary to include the workbook in the role or something like that...
I hope sombody could help me
Regards

Oscar,
   I think you need to maintain the WorkBook from the PFCG into that Role.
1. Select the Work Book ID from the Query Result (go to properties window from Query Result, in the information Tab, you could WorkBook ID.
2. Go to PFCG, provide ur Role Name and go with Change Mode. in the Menu Tab, you could see add report. click that it will ask for Report ID. Provide the WorkBook id. save that.
then ask him logoff and login again.
If he trying to save the workbook in Fovorites, he should have authorization to S_GUI(activity 60) and S_BDC_DS(Activity 03, 30 and Class Type OT).
If he need authorization to save in Role, he should have authorization to S_USER_AGR(Activity 01, 02, 22 at least. for delete Workbook data 06) and S_USER_TCD(TCODE RRMX).
Check this and Let me know.
All the best.
Regards,
Nagesh Ganisetti.

Error: No authorization to display the message

Hello
Users are getting error : No authorization to display the message,
when they are trying to view the content of the message.
When checked in the error logs, I see teh below log:
Message: Failed (javax.management.MBeanPermission,*,DISPLAY)java.lang.reflect.InvocationTargetException
Category: com.sap.security.core.role.PermissionData
Location: com.sap.security.core.role.PermissionData.get(ClassLoader)
Application: sap.com/tclmitsamcouinwalocalnavigation~wd
Can you please advice , as what actions has to be added to user.

Where do you get this error? Basically user is not having proper credentials to view the message. Talk to Basis team.

Differences between authorization role display and display change document?

Dear All,
I want to know what are the differences between activity authorization between display and display document change?
Regards
Aishah

Dear Mr Robert,
thanks for replying me. actually, it is to prevent user from other dept to change the PO even print/message. when i check inside authorization the configuration is only for their own dept by putting dept code at pur org field of change. but still can change. it is because of the me22 layout screen?

Insufficient authorization to display object Message Mapping

Hi there
Every now and then when I try and open a message mapping object I get this error: Insufficient authorization to display object Message Mapping. I then restart my Integration Builder then it works again.
Any Idea how I would fix this?
Thanks,
Jan

hi,
apart from what was said you can try changing
com.sap.aii.ib.util.server.auth.activation
parameter in exchangeprofile to false
if you don't use any data-dependent authorizations
then you should never see this error
maybe this will help
but remember that if you want to use data-dependent authorizations
in the future you need to put it back to true again
Regards,
Michal Krawczyk

Role or Profile with Full Authorization in DISPLAY MODE

Hi all,
Can anyone help me or tell me if there is any standard role or profile which has full authorization in display mode.
I wanted to assign this to all our support team for the PRD server who shud only have the display auths so that the pre-production client can be safe.
I have checked many places for this kind of activity, but found no threads on the same and also realted links.
Can anyone tell me how to get this task done....
I have also tried few possible ways which never helped me and all my efforts failed.
Waiting to hear from SDNs, for which i can assure REWARD POINTS.
Thanks to all in advance
Regards
Hari Haran

Hi,
By enabling the permission level as 'read', the authorized user/group/role can:
1. View the object in the Portal Catalog using the browse and search capabilities.
2. Open the object in its respective primary and secondary editors in read-only mode; the object cannot be modified.
3. Create instances (delta links and copies) from the object.
4. Gain access to and choose templates in the object creation wizards.
This permission level can be used to prevent portal administrators from editing a particular object, while still allowing them create an instance of the source and use the new instance in any way
Regards
Srinivasan T

"No authorization to display partner in role".

Hi
We are in SRM4.0 SP12 and we have buyer completion workflow -after which the SC goes for cost center owner approval.
In case of goods SC the cost center owner carries out the approval process as desired. However, in case of service shopping cart when the approver tries to approve the SC he gets an error "No authorization to display partner in role".
Please note that this error is coming for Brazilian approvers only. We recently did Brazil specific configuration in our system.
For all other countries the approval is working fine for goods as well as service SCs.
Please proviide inputs to resolve the issue.
Regards
Ashish

Hi Sanjeev
Org. structure is correct ,attribute user_role is assigned and all other pointers you suggested are inline. Still the problem persists.
The surprising part is the approval is happening for limit shopping cart as well as goods shopping carts.Only for service sc we have an issue.
I managed to find the massage no. (R1-277) and there is a mention of function module BBP_BUPA_EVENT_AUTH1 in the where used tab. The code is commented in German. May be you have some pointers on this.
Awaiting reply.
Regards
Ashish

Personal ID : You have no authorization to display.

Hi,
we have EP 7.0 and have deployed ESS/ MSS 1.0 buisness package.
When i go to Personal IDs in Personal information workset of ESS. It gives me following error :-
You have no authorization to display
com.sap.pcuigp.xssfpm.java.FPMRuntimeException: You have no authorization to display
     at com.sap.pcuigp.xssfpm.java.MessageManager.raiseException(MessageManager.java:112)
     at com.sap.pcuigp.xssfpm.java.MessageManager.raiseException(MessageManager.java:122)
     at com.sap.xss.per.helpers.MessageHelper.raiseException(MessageHelper.java:43)
     at com.sap.xss.hr.per.in.pid.fc.FcPerPidIN.readRecord(FcPerPidIN.java:269)
     at com.sap.xss.hr.per.in.pid.fc.wdp.InternalFcPerPidIN.readRecord(InternalFcPerPidIN.java:535)
     at com.sap.xss.hr.per.in.pid.fc.FcPerPidINInterface.readRecord(FcPerPidINInterface.java:146
For some of the employee it is working, but for some its not working.. i tried giving them Administrator role still it shows same error.
I dont know what authorization i am missing..

Hi Supraja,
Thanks for replying...the link you provided talk about NWDI and CMS.....i am not importing my package into NWDI..
I get following error when an employee is trying to view his personal id from ESS role in portal..
i mean..when a user clicks on Personal ID link in portal..it gives me :-
You have no authorization to display.
Thanks and regards,
Jigar Oza

How to control the authorization as display only in ECC system?

Hi all,
I want to control the IT users' authorization as display only for each Authorization Object.
As i know, there are 177 Item of field "ACTVT" in ECC system, But i'm not ture which the value can limited the authoirzation as display only.
Im worry about IT users have not authorization for the work if just keep "03-display" in authorization object, I plan to remove below value of ACTVT:
01-create, 02-change, 05-Lock,06-Delete,07-Activate, generate
But i'm not sure whether should be removed for below values:
52-Change application start
60-Import
61-Export
62-Create automatic Ledger
63-Activate
64-Generate
70-Administer
75-Remove
C3-Maintenance of manual auth.
C4-Develope Payment Card
FP-Change customer field selectn
Could anyone can tell me, Which values of ACTVT can limited the authorization as display only. at the same time, it havent an effect on work of IT users.

Yep, I agree with Jurjen. It is not only limited to ACTVT, but rather fields of other objects as well which are "action" or "activity" related.
I would start the other way around - give them '03' only and investigate any transaction specific claims that it is not enough. There will be a few...
Cheers,
Julius

Authorization for display only in tx MIGO

Dear Guru's,
can we give an authorization for display (i.e.Display material document ) only in Tcode MIGO for particular user ,
if possible please let us know the authorization object for the same.
Thanks,
Ashish.

Hi,
Create a custom profile via tcode PFCG.
Add the required tcode 'MIGO' to the 'Menu' tab.
Then goto 'Authorizations' and open expert mode for authorization. Here you can control the field values for authorization object. Once done, generate the profile and assign user to role along with user master comparison run.
Regards,
Srikishan

Why "You do not have authorization to display company codes" ? Thanks

Hello,
Using the Tutorial BAPI which comes with the JCO Tutorial,I just wanna call the first function.
When I run the code, it display "You do not have authorization to display company codes".
Could any body please help me to explain why?
Thanks a lot
BELOW IS THE CODE:
package com.sap.slc.teamweb.test;
import com.sap.mw.jco.*;
public class TestBapi1 extends Object {
    JCO.Client mConnection;
    JCO.Repository mRepository;
    public TestBapi1() {
        try {
            // Change the logon information to your own system/user
            JCO.createClient("001", // SAP client
              "<userid>", // userid
              "****", // password
              null, // language
              "<hostname>", // application server host name
              "00"); // system number
            mConnection.connect();
            mRepository = new JCO.Repository("SAPJCO", mConnection);
        } catch (Exception ex) {
            ex.printStackTrace();
            System.exit(1);
        JCO.Function function = null;
        JCO.Table codes = null;
        try {
            function = this.createFunction("BAPI_COMPANYCODE_GETLIST");
            if (function == null) {
                System.out.println("BAPI_COMPANYCODE_GETLIST" + " not found in SAP.");
                System.exit(1);
            mConnection.execute(function);
            JCO.Structure returnStructure = function.getExportParameterList().getStructure("RETURN");
            if (!(returnStructure.getString("TYPE").equals("") || returnStructure.getString("TYPE").equals("S"))) {
                System.out.println(returnStructure.getString("MESSAGE"));
                System.exit(1);
            codes = function.getTableParameterList().getTable("COMPANYCODE_LIST");
            for (int i = 0; i < codes.getNumRows(); i++) {
                codes.setRow(i);
                System.out.println(codes.getString("COMP_CODE") + '\t' + codes.getString("COMP_NAME"));
        catch (Exception ex) {
            ex.printStackTrace();
            System.exit(1);
        try {
            codes.firstRow();
            for (int i = 0; i < codes.getNumRows(); i++, codes.nextRow()) {
                function = this.createFunction("BAPI_COMPANYCODE_GETDETAIL");
                if (function == null) {
                    System.out.println("BAPI_COMPANYCODE_GETDETAIL" + " not found in SAP.");
                    System.exit(1);
                function.getImportParameterList().
                setValue(codes.getString("COMP_CODE"), "COMPANYCODEID");
                function.getExportParameterList().
                setActive(false, "COMPANYCODE_ADDRESS");
                mConnection.execute(function);
                JCO.Structure returnStructure = function.getExportParameterList().getStructure("RETURN");
                if (!(returnStructure.getString("TYPE").equals("") ||
                returnStructure.getString("TYPE").equals("S") ||
                returnStructure.getString("TYPE").equals("W"))) {
                    System.out.println(returnStructure.getString("MESSAGE"));
                JCO.Structure detail =
                function.getExportParameterList().
                getStructure("COMPANYCODE_DETAIL");
                System.out.println(detail.getString("COMP_CODE") + '\t' +
                detail.getString("COUNTRY") + '\t' +
                detail.getString("CITY"));
        catch (Exception ex) {
            ex.printStackTrace();
            System.exit(1);
        mConnection.disconnect();
    public JCO.Function createFunction(String name) throws Exception {
        try {
            IFunctionTemplate ft = mRepository.getFunctionTemplate(name.toUpperCase());
            if (ft == null)
                return null;
            return ft.getFunction();
        catch (Exception ex) {
            throw new Exception("Problem retrieving JCO.Function object.");
    public static void main(String args[]) {
        TestBapi1 app = new TestBapi1();

Hi Mao,
R/3 comes with some predefined Company Codes and we also
can define our own Company Codes.
visit this link this may help you.
http://help.sap.com/saphelp_erp2004/helpdata/en/8e/1a5217171311d28e1d080009b6ab29/frameset.htm
Regards,
Narinder Hartala

BEX 3.5 , enter to role, which authorization object?

Hi all,
I want to give user an authorization in BW 3.5 in BEX to enter a query into role, but i can not find authorization object that is used for this.
Regards,

Hi,
For Publish query in to role you must have authorization of perticular role.
Go to query designer -> open query -> Query -> Publish-> To Role.
Here you select the role and save it.
try this.
Regards,
Ganesh

BI Bex Query prompt based on User's Authorization....

Hi
In BI, I created 1 BEx Query based on Authorization. If a user runs the query, it prompts for 'Customer Name' to get data of particular customer. And Customer values are populated in the prompt based on User's Authorization.
For example:
User1 is authorized to see data of Customer1 & Customer2. So, Query prompt will show 2 values: 'Customer1' & 'Customer2'.
But User2 is authorized to see data of Customer1, so Query prompt will show 'Customer1' only.
I created 2 variables on Customer field:
1) Authorization Variable in Filter Section
2) Manual, Single Entry, Mandatory on Default Value section.
My Requirement:
If user is authorized to link with only 1 Customer, he should not get prompt & on the background prompt value should be populated from his authorization value. But if user is authorized to see multi-customers, then prompt should appear.
If possible pls. provide some suggestions....
Thanks...

Yes, this can be done.
but there is little work around.. Using guided navigations
1. Create a report with column fx as case when 1=0 then markets.region else user() end
2. apply filter on this column is equal to User_1
3. Create another report with column fx as case when 1=0 then markets.region else user() end
4. apply filter on this column is equal to User_2
5. Now add all your prompts to dashboard, but each prompt should in each section object of dashboard.
6. For first section click on section properties, go to Guided Navigation...
7. Browse Source Request as first report.. and keep If request returns rows selected.
8. Repeat above step for another section.. but this time browse 2nd report.
9. Just save dashboard.
Check now..
Hope you understood..
Regards
Kishore Guggilla
Edited by: Kishore Guggilla on Feb 18, 2009 12:57 PM

Bex Explorer 3.5 vs. 7.0: authorization to display workbooks

Similar Messages

Maybe you are looking for