BEx Roles question

/thread/750293 [original link is broken]
Edited by: sam on Feb 20, 2008 4:18 PM

Hello Sam,
You have to create Roles in PFCG and assign appropriate reports authorization to the roles. For example you can create roles for End User , Power User etc.
Once this is done, then assign the user to the Roles.
For more details
[Advanced Features of SAP BW Reporting Authorizations|https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/1b439590-0201-0010-ea8e-cba686f21f06]
[Authorizations in a SAP Business Information Warehouse Project|https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/adeac294-0501-0010-5a97-9ac5d562b1be]
[SAP NetWeaver 2004s BI Authorizations for Reporting - Webinar Powerpoint|https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a6c54319-0e01-0010-20a4-fb81ad32f330]
[Authorizations in a SAP Business Information Warehouse Project|https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/b014a2fa-fc1c-2a10-6ab2-e8e288de0e08]
[Field Based Authorizations in BW BEx Queries|https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/4753ed83-0e01-0010-e186-f98413f868cb]
[An Expert Guide to new SAP BI Security Features|https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/659fa0a2-0a01-0010-b39c-8f92b19fbfea]
Hope it helps
Thanks
Chandran

Similar Messages

Assigning a BEx role to BSP - BSP application is missing in PFCG

Hi everybody,
at first I will describe our problem.
We constructed a mixed environment web application, consisting out of a BSP application and WAD web templates. Unfortunately the url of web templates and the bsp-application differs - meaning the server is the same, but the port is different. That's why it is not easy to link the application each other, because for transportation reasons, we would like to have relative url paths.
After searching the SDN and reading several help files I draw the conclusion, that I have to put my BSP application into a BEx role. Correct? If anybody has a better approach, please raise your hand now!
So, I tried to create a role for my BSP application in the transaction PFCG. To specify the target I choosed entry type OTHER and BSP application. But in the appearing list of all BSP applications, my application was missing.
I really wondered about it, because similar BSPs from other authors within the sap/bc/bsp - folder appeared in the list.
Question: What are the prerequisites that a BSP application is available in the PFCG transaction?
Thanks for any comments and helps
Best regards,
Sebastian

Hi Raja,
thank you for your quick reply.
you are looking at constructing the BW WAD url and call it from BSP, however the host address (port) differs and coz of that you cannot use relative urls.
Almost. I'm actually searching for the other way round. I want to call the BSP in an inlineframe of a WAD web template. But its exactly that port change issue, that causes the problem.
My BSP application is located in a subfolder of default_host/sap/bc/bsp/ ?
There are other BSPs in that folder which already appear in the PFCG transaction under OTHER.
Best regards,
Sebastian

BEx Broadcaster Question

Hello All.
Just a quick question since i'm getting inpatient.
I'm trying to set up schedules thru bex broadcaster thru the BI Portal.
Is there any other way to do this? Meaning is there a tran code i can go to in the system and do the same.
This just seems to be very slow way of doing it, and just thought i'd throw the question out there.
Thanks in advance.
Amit

Hi Amit,
Use the below tcode
RSRD_ADMIN - Broadcasting (7.x) Administration
go through the below link
http://wiki.sdn.sap.com/wiki/display/BI/UsefulTransactionsandNotesgoeswithNetWeaver+7.0
Hope this helps.
Regards
KP

Managed Roles Question

I have just a basci question. If I have a role in the form of :
cn=MDMS, ou=Industrial, dc=test, dc=com
Does the organization Industrial have to exist soemwhere in LDAP as a real ou?
I am using the Java API and I need to associate the cn with an organizational unit, but I do not want to have
someone phisically managing these groups.
And if this can be done, are there any drawbacks and or gotchas that I need to be aware of.
Thanks in advance...

You can do this, there should be no gotchas.

Rename of Workbooks in BEx roles

Hello together,
how can I rename workbooks which are published/saved in BEx menu roles ?
I use BW 7.0
I tried to rename the workbooks in the role administration, but this changes have no influence of the view in the "Open Workbook" menu in BEx. And a change in the se16 table RSRWBINDEXT is not possible.
Thank you for your help in advance.

hello,
Try to go to the role in PFCG, reimport the menu under the Menu tab.
did u try in the open workbook menu if you could rename it.
did u try to log off from the sys and do a login again to BEX and check?
Regards,
Dhanya

Privilege and roles Question

Hi All
I did a queries
SELECT GRANTEE, PRIVILEGE,GRANTABLE FROM DBA_TAB_PRIVS
WHERE TABLE_NAME='TABLE1' AND GRANTEE IN ('USER1', 'USER_ROLE');
GRANTEE PRIVILEGE GRANTABLE
USER1 SELECT NO
USER1 INSERT NO
USER1 DELETE NO
USER1 UPDATE NO
USER_ROLE SELECT YES
USER_ROLE INSERT YES
USER_ROLE DELETE YES
USER_ROLE UPDATE YES
SELECT 'ROLE' TYP, GRANTEE, GRANTED_ROLE, ADMIN_OPTION FROM DBA_ROLE_PRIVS WHERE GRANTEE ='USER1';
TYP GRANTEE GRANTED_ROLE ADMIN_OPTION
ROLE USER1 CONNECT NO
ROLE USER1 RESOURCE NO
ROLE USER1 USER_ROLE NO
My question is since the USER1 is granted the role of USER_ROLE, will it cause conflict to the table privilege?
Because I can't perform Insert when I'm using USER1. It give me an error of ORA-01031L insufficent privileges SQL source: ..

Since you did not mention how you are performing the Inserts/DML's on the TABLE1, and you are facing privileges issues, I presume you are performing it from a PL/SQL Block. However, the priviliges acquired via a Role are not valid in Function/Procedure. You need to have explicit privileges to perform an action in Function/Procedure.
Even without the privilege, you would be able to perform the Inserts/DML's as in static SQL statements that are not contained in PL/SQL blocks.
Try:
grant insert on table1 to user1;

Bex-Role

Hi,
HOw can i create a new folder (Role) in Bex to place the reports.I don't need to create a a folder as a node to another folder...i want to create a new folder
Thanks

Hi Tony,
In order to save the reports, workbooks in a FOlder, you have to create a role, and in that role you have to create the folder that you want.
After that, you have to :
1)Open the report
2)Save the report
3)Choose the option "Role"
4)Select the new role, and it shows up the folder
5)Save
End
Asigns points if useful.
Regards

Certificate Authority CA Role question

Well I haven't asked a question on here in quite some time.
Does anyone know if I can export my CA role and cert from first primary servwer ZEN internal CA store and import on another primary for redundant internal zen CA servers?
Not sure if this is supported or even works in case one bites the dust.
Thanks in advance

Originally Posted by mark7508
Well I haven't asked a question on here in quite some time.
Does anyone know if I can export my CA role and cert from first primary servwer ZEN internal CA store and import on another primary for redundant internal zen CA servers?
Not sure if this is supported or even works in case one bites the dust.
Thanks in advance
No, you can't have "redundant".
But the CA server is only needed when Generating Certs such as when building a new Primary or configuring an Auth Satellite.
I've seen folks lose their CA server and not know it for a year or more )
Simply make sure you have followed the steps for backup up your CA and if you ever lose your CA server permanently, you can use those files to install the CA service on another server.

Publish a BEx role in the portal

     Hello!
     I would like to know if any of you have ever encountered this situation. Is it possible to somehow publish in the portal a link to a BW role, so all the queries/workbooks stored inside can be opened from there? The thing is that the users generate in these folders their own queries from time to time according to business requirements, and they would like them to be available from the portal. If this approach is possible, then the maintenance required for the portal content administrator would be minimal when they create new content under these roles.
I have used KM content for BO folders, but I do not know if something like this is possible for BW roles. If possible, could you please provide some how to's?
   Thank you very much,
   Victor

Hi,
You need not to create web template to publish query in portal.
there are two ways for publishing
1)Go to query designer Click on Query -> Publish-> To portal
here you select the path where you want to create the iview
2)Log in to portal setect the folder in which you want to publish report.
right click -> create new iview -> select BI 7.0 iview -> next -> iview name ie report name -> next -> Application parameter -> here you need to write QUERY =Query technical name -> next -> finish
Try this,
Regards,
Ganesh

Role Question

The SCOTT user has been granted the CONNECT and RESOURCE roles only.
The database administrator (DBA) grants MGR_ROLE to the SCOTT user by using this command:
SQL> GRANT MGR_ROLE TO SCOTT WITH ADMIN OPTION;
Which statement is true about the SCOTT user after he is granted this role?
A: The SCOTT user can grant the MGR_ROLE role and the privileges in it to other users.
B: The SCOTT user can grant the privileges in the MGR_ROLE role to other users but not
with ADMIN_OPTION.
C: The SCOTT user can grant only the MGR_ROLE role to other users but not the privileges
in it.
D: The SCOTT user can grant the privileges in the MGR_ROLE role to other users but cannot
revoke privileges from them.
what is the true answer And why?
Thanks in advance

SYS@orcl > create role mgr_role;
Role created.
SYS@orcl > grant create any view to mgr_role;
Grant succeeded.
SYS@orcl > grant mgr_role to scott with admin option;
Grant succeeded.
SYS@orcl > connect scott/tiger
Connected.
SCOTT@orcl > grant create any view to mike;
grant create any view to mike
ERROR at line 1:
ORA-01031: insufficient privileges
SQL> grant mgr_role to mike;
Grant succeeded.(C) The SCOTT user can grant only the MGR_ROLE role to other users but not the privileges in it. (if this means that Scott cannot grant the individual privileges)
Enrique
Edited by: Enrique Orbegozo on Dec 18, 2008 7:40 PM

BEX: Aggregation question

Hi to all,
I think I need some help of a BEX expert.
I have an issue with a query. Following scenario:
In my cube I post the following values:
Org-unit Employee Position P E
00000001 00000001 00000001 0 1
00000001 00000002 00000001 0 1
00000001 00000000 00000001 2 0
00000001 00000003 00000002 0 1
00000001 00000004 00000002 0 1
00000001 00000000 00000002 1 0
00000001 00000005 00000003 0 1
00000001 00000000 00000003 2 0
P = Capacity of the Position
E = Capacity of the Employee
Now to the issue.
In the query I need to calculate the difference of E - P as well as to create new keyfigures for storing a negative result and storing a positive result. At the end my query should look like this:
Org-unit Position P E diff. neg. pos.
00000001 00000001 2 2 00000 0000 0000
00000001 00000002 1 2 -0001 -001 0000
00000001 00000003 2 1 00001 0000 0001
and if I remove the position similar
Org-unit P E diff. neg. pos.
00000001 5 5 00000 -001 0001
The difference should not be displayed, but the rest should. Does anybody have an idea for solving this issue. I am playing around with constant selection on Employee and/or Position but the result is never as I expect it to be.
If you still have some problems understanding my issue feel free to ask.
Seeing forward to get your valueable and helpful hints.
regards
Siggi

Hi all,
well what I did so far was creating a calculated keyfigure E - P and additionally the two keyfigures negative and positive and the results are as expected if the position and/or the employee is initially displayed in the query. But if I take both out and any other characteristic in the result is not what I want to display. I want to get
this:
Org-unit P E diff. neg. pos.
00000001 5 5 00000 -001 0001
but I get this:
Org-unit P E diff. neg. pos.
00000001 5 5 00000 0000 0000
There is an issue with the aggregation level. The keyfigures diff., neg. and pos. should always show the results depending on the position/employee combination.
Hope it is clearer now.
Siggi

"SUIM User Users by Complex Selection Criteria by Role" question

Hi all,
Suppose the situation is:
Composite role ZCR contains single role ZSR (profile T-001) . Composite role ZCR assigned to below two users with different expire date (both users are not locked and not expire):
UserA - 01.01.2013
UserB - 01.01.2024
(Case 1) SUIM -> User -> Users by Complex Selection Criteria -> by Role (either specify ZCR or ZSR) the result is:
UserA
UserB
(Case 2) SUIM -> User -> Users by Complex Selection Criteria -> by Profiles (T-001) the result is:
UserB
Is SUIM has error or other assumption on Case 1? I expected the result is UserB only.
I knew there is program PRGN_COMPRESS_TIMES to remove assignment which have already expire and all the related tables. Please let me know if the result in case 1 is SAP standard or can be fixed by OSS notes? Thanks.
Regards,
Donald

Hi Donald,
If the user having validity expired role in his user master SU01, then the expired role can be seen under 'Role' tab in SU01 with 'Valid to' date, but the role relevant profile will be removed from user at the time of role expiration date.
So when you search for users based roles (Case 1), the SUIM lists all users who are assigned to that particular role, irrespective of expired role assignments. So in Case 1, please follow below step for accurate results.
1. (Case 1) SUIM -> User -> Users by Complex Selection Criteria -> by Role (either specify ZCR or ZSR) the result is:
UserA
UserB
2. Then select all users in SUIM output (UserA & UserB), and click on 'In Accordance with Selection' button. So that you can see the users and the (ZCR) ZSR role 'Valid to' (End Date) date for each user.
By doing second step here, you will get the accurate results. This is how the SUIM works.
Thanks
Sridhar
>point begging removed by Moderator - last warning!<

BEX Display Question

We have a key figure(key figure 1) that has different Sales Unit of Measurements - BOX, Pallet Pieces, another key figure(key figure 2) with one Unit of Measure PC. We are trying to display like this:
BOX PAL PC         PC
Key Figure 1          Key Figure 2
However we are getting
BOX PAL PC         BOX PAL PC
Key Figure 1          Key Figure 2
even though we restrict key figure 2 with PC only
our Columns area in Bex is
Structure
Key Figure 1
Key Figure 2
Sales Unit
Is this possible - I have tried a lot of different combinations with nothing working. Any help is appreciated.

You can try...
Create a formula variable (ZZVAR) with the correct units (PC) with default value 1, optional, not ready for input.
For KF 2, instead use a formula where you add NODIM(KF2)*ZZVAR

BEx general question

Hi All,
At present our client SAP system is BW 3.x. and we have BEx related to that. and ou client Sand Box system is having SAP BI 7.0.and from this Sandbox, when giving rrmx transaction it is showing BEx 3.x version only. because BI 7.0 bex is not available. so can we have both the bex versions on the same system. because we want bi7.0 Bex .
Thankyou.

HI SAPBI INDIA,
Yes, U can have both the versions of BEx installed on the same system. When both the versions are installed U can see Business Explorer (SAPBW 3.x) under the node Business Explorer of the Programs tree thru the start button. U can use either of them depending on the requirement.
For the version BI7.0 to work U need to have the SAP GUI 7.1 version (or) higher.

Mitigated Role Question

I have created a mitigating Control for a role and added the specific Risk ID. If I run Risk Analysis on the role; it now shows up clean. But if I run Risk Analysis on the users that have the role; the still show the risk. Do I need to create the mitigating control for the role as well as each user that has the role?
Thank You,

Hi Ryan,
When you run the risk analysis on user level, did you selected the option "Exclude mitigated risks"?
In addition, you have set the configuration parameter "Include Role/Profile Mitigating Controls in User Analysis"
to YES by going to Configuration -> Additional Options.
In the configuration -> Risk Analysis -> Default Values -> Exclude Mitigated Risks needs to be set to YES.
In addition put * after the risk((ex: F001*) in your mitigation control.
Hope this helps.
Best Regards,
Sirish Gullapalli.

BEx Roles question

Similar Messages

Maybe you are looking for