BI 7.0 Security: Replace SAP_ALL with alternative solution

Hello,
In an effort to remove SAP_ALL from user accounts in BI 7.0, I need to find an alternative solution for allowing users to create, execute, and delete BEx queries. Initially, I was thinking of creating two roles, derived from the SAP_ALL template. One role would allow users to create, execute, and delete queries; the other role would allow users to only execute BEx queries. Since I'm new to BI 7.0, I'm not quite sure if this is the best approach. If someone has experience with this scenario, please advise.
Thank you in advance.

Hi Cedric,
You definitely need to move away from SAP_ALL in BI 7.0. The blog mentioned explains how the new features of BI 7.0 work, but I feel your issue is a bit more fundamental. Do you have a security strategy / design for your BI reports that you are trying to deploy?
You need to consider who can access what data in BI as well as which sets of queries. Once you have an idea for that if you look at how the S_RS_COMP authorisation object works, implementing roles with restrictions on that object will achieve restrictions on which users can access which queries.
There are SAP delivered templates for query execution roles, that you can look at to get you a starting point - but you'll still need to having a good naming convention for queries as well as an understanding of where your BI data is stored, to be able to restrict access.
Once you've considered the data and reports, you may need to further restrict information by the use of analysis authorisations on specific characteristics, which is where the blog will help you.

Similar Messages

Replace cable with alternatives...???

I'm going to get rid of Charter Cable, mainly because we never what TV, only movies...
Is it possible to:
- Download movies from netflix, itunes, etc... to my iphone, ipad or ipod and connect to the tv to watch?
- Rent movies and do the same as above?
Looking for advice, so if you have any, chime in.
Thanks
Tony

What you want is the new AppleTV.

Replace standard view with alternative view

Hi Gurus,
In CRM 5.0 we were able to replace a view with a different view (whether it was SAP standard or bespoke) by adding the appropriate substition controller details in the Runtime Framework Profile.
We are now trying to do the same in CRM 2007 but we have not been successful. I have gone into the SPRO entry "Maintain Runtime Framework Profile" and created "Z_RUNTIME" which is called in the Business Role. It is set up with the following Work Area Definition:
Application: BSPWD_BASICS
View Set Name: WorkAreaHostViewSet
View Area Name: WorkAreaView
I have tried to replace the following controller as a test to change the standard view:
BSP Application: ICCMP_BT_TIMERC
Controller To Be Replaced: SrvTTimeRep
BSP Application: IC_KNOWS_SEARCH
Replacement Controller: MainWindow
This hasnt worked, the view SrvTTimeRep still showed.
Just to reiterate, I'm not trying to enhance a view, I am trying to replace it with a totally different one.
Any help offered is greatly appreciated, and will be reqarded with points! Thanks in advance!
Andrew G.

Andrew,
The difference is in CRM 2007 is that you don't modify the runtime framework profile globally. Instead each application has concept of a component repository.xml that needs to be adjusted. You actually need to enhance each component where you want to include the view into the viewset. This will then create a Z-component repository of enhancements for the application, including a copy of the respository.xml file. You then adjust the repository.xml using the tools provided to replace adjust the viewset defintion. Now if your view lives in another component you will also have to define the proper component usages to use the view.
I would recommend downloading or getting access to the CRM 2007 OKP materials or taking the CRM UI class which has an example of this method in further detail.
Take care,
Stephen

Replace org_organization_definitions with mtl_parameters

Hi,
I need to replace org_organization_Definitions with mtl_parameters for performance reasons.. But as I see that OOD is a view and has some security applied through hr_organization_units, I doubt if I can directly replace OOD with MP as follows:
Old:
select organization_id from org_organization_definitions where organization_code in ('X','Y');
New:
select organization_id from mtl_parameters where organization_code in ('X','Y');
In some cases, "Old" query might not return a row due to restricted access to user through security profiles, but "New" might return which can cause incorrect results. Please correct my understanding and let me know if anyhave any alternative than including all base tables of the OOD view in "New" query
Thanks !!
Mukthi
Edited by: 979003 on Dec 27, 2012 11:35 PM

Hi,
Question- Are you trying to findout the 11i warehouse code which has been migrated to R12 as inventory org?
Regards
Raghavendra

Can java.security packages work with applets? Help required urgently.

I recently developed an applet using java.security.KeyPairGenerator, from which I called the KeyPairGenerator to generate a pair of keys for RSA.
The code :
KeyPairGenerator kpg = new KeyPairGenerator.getInstance("RSA");
However my applet refused to work and couldn't find the algorithm specified. When I replaced it with DSA, it could work. Why is this happening?

I think your browser is using older or its own Java Virtual Machine to run the applet.
For example IE, it has its own Microsoft Virtual Machine and if you choose to use it, it will definately fail. You can try use the JRE 1.4 Release Candidate version. Because the security is bundle with it, not sure with JRE version 1.3
Or alternatively, you can use the appletviewer to execute the applet. Again, make sure you run the correct version of appletviewer.
Good Luck.

I have a MacBook Pro 15.4" 2.53GHz Core 2 Duo (A1286) - Mid 2009 MC118LL/A and I think the MATSHITA DVD-R UJ-868 is going out. Should I replace it with the exact same drive or is there a better one that is compatible?

I have a MacBook Pro 15.4" 2.53GHz Core 2 Duo (A1286) - Mid 2009 MC118LL/A and I think the MATSHITA DVD-R UJ-868 is going out. Should I replace it with the exact same drive or is there a better one that is compatible?

I went to my local Apple store last weekend with a similar issue on my 2007 C2D MBP and they quoted me a price of around £60 (excluding VAT) to replace the optical drive. That's about the same price as the external optical drive a bought for my RMBP.
Alternatively you could just buy a 3rd party external drive if you want to save cash but note that the external Apple superdrive is not compatible with MacBooks with built in optical drives.

HT5925 I have an iCloud email on my iPhone that is now old as hacked and unused. I can't access anything as it asks for that account info and I don't remember the password etc. How do I delete it and replace it with my new iPad email? ! Help..

I have an iCloud email and Yahoo email on my iPhone that is now old as hacked and unused. I can't access anything as it asks for that account info and I don't remember the password etc. How do I delete and replace it with my new iPad email? ! Help..

Welcome to the Apple community.
If you are unable to remember your password, security questions, don’t have access to your rescue address or are unable to reset your password for whatever reason, your only option is to contact AppleCare(or Apple ID Support), upon speaking to an operator you should explain that your problem is related to your Apple ID, this way you will not be charged for assistance, even if you don’t have an AppleCare plan.

Hello everybody,i've forgot my apple password and i wanted to reset it to a new one but i also forgot the security question and the alternative email does not work and i am really need to log in to my apple i d because my iPhone 4g won't let me access it

Hello everybody,i've forgot my apple password and i wanted to reset it to a new one but i also forgot the security question and the alternative email does not work and i am really need to log in to my apple i d because my iPhone 4g won't let me access it so anyone can help me with it or can i put another apple id to it without putting the first password?THANKS FOR YOUR HELP.

Then call AppleCare and talk to someone in account security.

Satellite C850 - boot from DVD issue - want to replace Win8 with Win7U

Got a new C850-1JZ yesterday and am trying to replace pre-installed Win 8 with Windows 7. I did create the recovery media (3 DVDs).
The laptop is driving me "insane" as it seems to block any attempt to boot anything else other than Win8 on the preinstalled hdd.
1.) Inserted Win 7 Ultimate DVD and tried to boot, would not boot from disk.
2.) Loaded advanced boot menu and tried to boot from ODD, would not boot from disk it. (Options are LAN, USB, HDD, and ODD (assuming this is optical disk drive)
3.) Changed regular bios settings boot priority to boot from ODD first, then HDD, would not boot from disk.
4.) Learned there is a "security boot protection" mechanism enabled by default in the bios. Turned it off. Machine starts loading from ODD and says "Windows is loading files" then hangs. This is a MS original Win7 Ultimate disk from the Microsoft store, no scratches. Makes no sense. We actually have 2 of them, so I tried the other, same result.
5.) Thought screw that, let's just put the hard drive from the other computer (T61) in here then and do clean new setup another time. Replaced hdd with other sata hdd that has Win 7 ultimate installed and system configured. When booting from hdd, it says "No OS" found and reboots. When booting from ODD, it starts with windows is loading files again and then freezes.
What kind of other extra protection/virus blocker/stupid setting am I missing here? This is puzzling me. Thanks.

*Thanks as***, that solves the problem.*
After 10 days Toshiba Support in Germany came back with the same answer.
Basically it seems the UEFI Firmware has some reference to Win 8 or the original OS and key and boat loader that is checks, and you cannot load anything else until you disable it by:
1) In the BIOS, disable "secure boot" mode
2) In the BIOS advanced settings, switch from UEFI to CMS mode.
Then you should be able to install anything as the new OS.
Also, if you want to write down your product key / serial number , since it is not printed anywhere (e.g. no sticker on the bottom of the laptop) [Belarc Advisor - Free Personal PC Audit|http://belarc.com/free_download.html] is a good tool to retrieve this from the registry and write it down.
As far as I know it's "glued" to this particular hardware, so not portable, but it might be a good idea to write it down in case you lose the system recovery disk but would want to re-install it with the original serial number.

My iMac Seagate 1T hard drive crashed. I replaced it with a Western Digital 1T hard drive. Where can I get the Lion OS?

My iMac Seagate 1T hard drive crashed. I replaced it with a Western Digital 1T hard drive. Where can I get the Lion OS?
The iMac comes up with a ? in a folder, even after starting with Option/Command/R keys pressed.
Please help.

Call Apple to purchase replacement discs or order a copy of Snow Leopard from Apple's Online Store. Follow these instructions:
Drive Preparation and Install Snow Leopard
1. Boot from your Snow Leopard Installer Disc. After the installer loads select your language and click on the Continue button. When the menu bar appears select Disk Utility from the Utilities menu.
2. After DU loads select your hard drive (this is the entry with the mfgr.'s ID and size) from the left side list. Note the SMART status of the drive in DU's status area. If it does not say "Verified" then the drive is failing or has failed and will need replacing. SMART info will not be reported on external drives. Otherwise, click on the Partition tab in the DU main window.
3. Under the Volume Scheme heading set the number of partitions from the drop down menu to one. Click on the Options button, set the partition scheme to GUID then click on the OK button. Set the format type to Mac OS Extended (Journaled.) Click on the Partition button and wait until the process has completed.
4. Select the volume you just created (this is the sub-entry under the drive entry) from the left side list. Click on the Erase tab in the DU main window.
5. Set the format type to Mac OS Extended (Journaled.) Click on the Security button, check the button for Zero Data and click on OK to return to the Erase window.
6. Click on the Erase button. The format process can take up to several hours depending upon the drive size.
7. When completed quit DU and return to the installer. Install Snow Leopard. Once you boot from Snow Leopard you should open Software Update and install all the available updates required. After you complete this and restart the computer open the App Store application in the Dock or Applications folder.
8. Sign into the App Store with your Apple ID and password. Purchase and download Lion.
9. After Lion's installer downloads, install Lion.

Replace systemd with uselessd?

Hi,
I heard it's possible to replace systemd with uselessd. How can I do in Archlinux? Can I do either in archlinuxarm?
Thanks,

@xanb, there are essentially two directions this thread can move in. If you were to build, install and configure uselessd on your own systemd, work out some of its shortcomings, and then post your results here, I suspect you'd get a decent amount of positive feedback from like-minded people who prefer something different from the complete systemd suite.
If, however, you expect someone here to walk you through how to install an unofficial, mangled version of systemd you're going to get resoundingly negative feedback. Everyone here is tired of this "Fight the power!" crap with systemd. If you want to use an alternative to systemd then go for it---that's the beauty of Arch, and there are several other init/service management systems some hard-working folks have put together. But don't expect anyone here to hold your hand.

Replace WRT54 with WRT600N, xp-vista problem

In the wired network are: XP (host) 1Vista 32 and 1 Vista 64.
With WRT54GS everything worked fine. I replaced WRT54GS with WRT600N. The VISTA32 and XP are working finne. The VISTA 64 does not see the router as computer anymore and also does not see the XP computer. The XP can not access the VISTA64.
Any ideas?

Problem solved, The security settings in Norton detected that the router did change and prohibited the see and access.
BTW, if you have similar problems you can call up the drive attached to the router by entering \\WRT600N and see it, than map it. You mostlikely will have to enter the access user and password (default admin and admin if not changed)
Everything works fine now.

Replacing ACS with ISE

What is required to replace ACS with ISE in simple terms?
I am looking to basically authenticate wired and wireless access against the local/AD) user database via Cisco kit
I am thinking all I need is the BASE (perpetual) license rather than the advanced/wireless licenses
Is there a limit to how many devices or users the base can deal with in its simplest form.
I would also like to be able to push out a splash screen for wireless users during authentication. Can this be done just with the ISE Base License alone for a wireless solution (via WLC with LWAPS or Autonomous APs)
thanks
dave

yes you can authenticate the user using the ISE and but you need a advance license if you want to use both wire and wireless here is small table to help you understand the license requirements also the max. devices support depends on the type of deployment and with advance feature you have the abilitity of profiling and posturing which provide very good control for admins in the network
Software Packages
Options
Base
Capabilities: Basic network access and guest access
Network deployment support: Wired, wireless, and VPN
License prerequisite: None
Perpetual license
Licenses are available for 100, 250, 500, 1000, 1500, 2500, 3500, 5000, 10,000, 25,000, 50,000, and 100,000 endpoints
Advanced
Capabilities: Profiler and feed service, posture, MDM integration, automated endpoint onboarding, and Security Group Access (SGA)
Network deployment support: Wired, wireless, and VPN
License prerequisite: Base license
Term license: 1, 3- and 5-year terms
Licenses are available for 100, 250, 500, 1000, 1500, 2500, 3500, 5000, 10,000, 25,000, 50,000, and 100,000 endpoints
Wireless
Capabilities: Basic network access, guest access, profiler, posture, and SGA
Network deployment support: Wireless
License prerequisite: None
Term license: 1, 3- and 5-year terms
Licenses are available for 100, 250, 500, 1000, 1500, 2500, 3500, 5000, 10,000, 25,000, 50,000, and 100,000 endpoints
Wireless Upgrade
Capabilities: Basic network access, guest access, profiler, posture, and SGA
Network deployment support: Wired, wireless, and VPN
License prerequisite: Wireless license
Term license: 1, 3- and 5-year terms
Upgrade licenses are available for 100, 250, 500, 1000, 1500, 2500, 3500, 5000, 10,000, 25,000, 50,000, and 100,000 endpoints
***Do rate Hekofuls posts***

Replace EDI with XI-Webservices

Hi,
We currently have a scenario where we sendinf bill of lading information to the railroad for shipments going out of XYZ plant using EDI 404. Now our receiver party also have web services, and we want to use web services with XI. Is it possible to replace EDI with webservices?
What would be the approach? What information we should know from receiver party about thier web services?
How about security? Should we able to do it with XI-Webservices over the DMZ's? Any information on this would be very appricate.
Thank you,
Navin

Hi Navin,
Apart from the above threads go through this urls also which may give you some idea about your query:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/818a20be-0601-0010-e3b8-ac3d5f975319
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/135b0b94-0701-0010-f6a9-86a14057544a
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/6dc02f5d-0601-0010-cd9d-f4ff9a7e8c33
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/9f72e81d-0b01-0010-149a-81cc4803c773
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/4f58802d-0a01-0010-e58b-d135f1b01dc5
Apart from this go through this urls which may help you:
ALE/EDI : IDoc Setup
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/9c08451d-0b01-0010-f19b-f58712bb55d1
can u any body send EDi and XI materail
Regards,
Abhy

Can you replace iCloud with a local cloud?

I know that this is not Apple's plan, and I know that there's no easy way to do it.
However, is it possible to replace iCloud with a local cloud? I'd like to use my Apple Time Capsule or my WD My Passport wireless drive to store my iTunes, iPhoto and e-mail libraries, as well as to be the cloud that has my keyword chain, and other app syncing, like contacts & notes, for my Macs and IOS devices.
There are a number of reasons:
- I have several TB of storage
- It is much more secure as I can encrypt everything and have control of the physical storage devices
- It is more portable - I can take the cloud onto an aeroplane, or into the desert and it'll still work, unlike iCloud that needs a wi-fi connection
I can see other people would have the same requirement. If you have a business with sensitive data, for example, you'd not want it stored remotely, you'd want full control of all the encryptions, backup, access control and so forth.
Any ideas? It'd be great if one could simply change DNS so that icloud.com points to your own device, but I know it's nothing like as simple as that!

Try http://www.infogenra.com/how-to-setup-icloud-on-windows-computer.html
Allan

BI 7.0 Security: Replace SAP_ALL with alternative solution

Similar Messages

Maybe you are looking for