BI-IP Authorizations: Accessing own Cost Center only
Hi,
We are currently implementing BI-IP in our company. We have created the ready-input templates and we are prepared for roll-out.
There is still one concern though which I haven't resolved. I am currently looking for an AUTHORIZATION that will let users access their respective COST CENTERS only. For example, if I am part of the Marketing Group, then I will only be able to access the budget of my respective cost center.
Can anyone lead me to the right AUTHORIZATION OBJECT in BI-IP to implement this restriction.
Your reply is much appreciated. Thanks.
Regards,
Ramon
Hi Ramon,
authorizations for transaction data in BI (and therefore in BI-IP) are not based on authorization objects. You have to make the cost center InfoObject authorization relevant and then create so called Analysis Authorizations for it. Please see the online help:
http://help.sap.com/saphelp_nw70/helpdata/en/66/019441b8972e7be10000000a1550b0/frameset.htm
BTW, you can upload the cost center authorizations from SAP R/3 or ERP.
http://help.sap.com/saphelp_nw70/helpdata/en/59/fd8b41b5b3b45fe10000000a1550b0/frameset.htm
Regards,
Marc
SAP NetWeaver RIG
Similar Messages
-
BW Analysis authorization issue on cost center range
Hello BIW security experts
I have a problem where I created an analysis authorization on a cost center range and it looks like the interval is not working. The report is just a list of cost centers (demo to users to prove that analysis authorizations work in order to skip 2 managerial cost centers.
. Cost centers are numeric. Example: 2000100. In the drop down list they appear as such.
. I want to have the following cost center range: 1000000 to 1000771, 1000773 to 2000771, 2000773 to 9999999.
Thereofore 1000772 and 2000772 should not appear in the list.
. In the analysis authorization I have put the 3 ranges above on 3 separate lines. 'BT' is the operator. The cost centers have been selected from the drop down list.
Results: I get only 1 record from the report.... 2000772. (which is one I want to exclude..
Steps tried to debug:
. When I put a list of cost centers in the analysis authorization on separate line with the 'EQ' operator, then the report works.
. I tried putting ' ' delimiters since cost center is a char field but it fails.
. I tried adding leading and trailing zeros to fill up the char(10) but no luck.
. I tried creating a hierarchy with the interval and put it in the hierachy auth. tab and it does not work either. It gives the same number of records than the first step.
. A hierarchy with single values work.
I do not know what else to try..
Thanks.
YB.Good morning
Here it is from RSECVAL
ZCC_TEST 0COSTCENTER I BT 1000000 1000771
ZCC_TEST 0COSTCENTER I BT 1000773 2000771
ZCC_TEST 0COSTCENTER I BT 2000773 9999999
ZCC_TEST 0COSTCENTER I EQ #
ZCC_TEST 0COSTCENTER I EQ :
ZCC_TEST 0INFOPROV I CP *
ZCC_TEST 0TCAACTVT I EQ 03
ZCC_TEST 0TCAIPROV I CP *
ZCC_TEST 0TCAKYFNM I CP *
Thank you for your help. -
Authorization Object for Cost center
Hi Experts;
We are using SRM 7, classic scenario.
We are copying SRM tcode: BBP_BW_SC4 to a Z report and modify it. The users will be given the access to display the status of thier SC.
How can I restrict the user from displaying the SC of other department's? Is there an authorization object for cost center in SRM? is there any other away to restrict the users from displaying SC related to other depts.
Appreciate your helpby the way, why are you not using the standard SAP powl queries? they anyways restrict you from viewing others SCs except your team
any ways, if you are copying that report this BBP_BW_SC4, then change this
PARAMETERS pa_coce TYPE kostl OBLIGATORY DEFAULT lv_costcenter.
to
PARAMETERS pa_coce TYPE kostl OBLIGATORY DEFAULT lv_costcenter no-display.
Edited by: Soumyaprakash Mishra on Jan 31, 2012 3:48 PM -
BW report authorization for restrict cost center
dear all,
i have problem on BW report authorization for restrict cost center.....when i execute the query, after selection screen, appear error message 'you cannot change zv_cctr for characteristic 0COSTCENTER during query'.
note : zv_cctr is variable restriction for costcenter, type processing = customer exit.
below the customer exit :
WHEN 'ZV_CCTR'.
IF i_step = 2.
DATA : gt_mstuidvscc TYPE TABLE OF ztbw_mstuidvscc,
gs_mstuidvscc TYPE ztbw_mstuidvscc,
wa_final2(10) TYPE c.
SELECT * FROM ztbw_mstuidvscc INTO CORRESPONDING FIELDS OF TABLE gt_mstuidvscc
WHERE userid = 'sy-uname'.
LOOP AT gt_mstuidvscc INTO gs_mstuidvscc.
wa_final2 = gs_mstuidvscc-kostl.
l_s_range-opt = 'EQ'.
l_s_range-high = wa_final2.
APPEND l_s_range TO e_t_range.
ENDLOOP.
ENDIF.
Regards,
Tonyi defined variable as ready for input and mandatory.
regards,
Tony -
Determine a GL account using the cost center only as reference
hello, Is it possible to determine a GL account using the cost center only as reference?
If so, could you please provide me with the details?Hello,
I am really not clear on your question.
If you want to make default cost center, then please go and maintain OKB9 settings.
If you want to generate a report based on a cost element (GL account in FI), go and execute KSB1
Regards,
Ravi -
Hide a managers own cost center when he or she fill it's own timecard
Hi,
Does anyone know how to hide a managers own cost center when he or she fill it's own timecard? For transparancy we want to hide the managers own costcenter when filling out his or her own timecard.
If not possible does anyone know in witch CO, VO or AM to code this most efficently?
If you have any clue or examples, please let my know.
Thanks
Best Regards
GjermundCost Center is basically a column. If it is then you have to extend the page controller & set the column render property to false.
Depending upon the Manager login.
Thanks
--Anil -
Create cost center only can use the fixed controlling area ?
Hi all,
When i create a cost center, i find the controlling area is fixed. How to change it ?
Regards,
Yinyan LuIn KS01 initial screen access the menu
Extras --> Set Controlling area
or press F6
to change the controlling area -
How do I change Resource Cost Center only and retain historical cost center data?
How would a Project Server Admin accommodate changes in the resource's cost center itself?
For example, Ken (timesheet submitter) records Feb time in cost center C1, but then transfers to a new team, which is in cost center C2 on Mar 1st.
When I change his cost center at the resource level, reporting indicates all of his previous C1 time as a resource under the C2 cost center, and all of his C1 time looks like it's incorrectly in C2.
I am thinking about adding custom resource fields to track these changes, but it seems like a lot of extra work, if something already exists that I can use.
Thanks,
MartyMarty,
AFAIK, there is no way to do this OOB as Resource Fields are not 'time-phased'.
A 'possible' alternative, like you mentioned, could be be to use custom fields to track, the change (like Effective Date, Old Cost Center), and then somehow write a query to consider the old cost center between the dates. I have not tried this personally,
just a thought.
Cheers,
Prasanna Adavi, Project MVP
Blog:
Podcast:
Twitter:
LinkedIn:
-
Authorizations for non cost center manager in transaction CADO
I have project managers that need to run transaction CADO, usually against a specific sales order. Since many employees from different cost centers may charge their time against this sales order and that time data needs to be in the CATSSHOW report. Normal Structural Authorizations prevent the PM from seeing any of this data. If I remove the project manager from table T77UA (from transaction OSSB) then they are able run the CADO report without restriction, but also loose their restrictions in other HR transactions which is unacceptable. Is there a workaround solution to this issue?
Hi Richard:
I'm not too sure what "other" HR transactions you are referring to, but have you tried looking in to activating the P_ORGINCON auto object? That had solved my issues with restricting MSS yet still allowing access through other transactions.
Regards,
Jonathan -
Authorization based on cost center for manual actual postings
Hello,
We tried to use customer function (COCCA001)/EXIT_SAPLKBER_001 for actual postings (as this is not feasible in standard with PFCG).
Unfortunately, this exit seems not to be working for actuals postings (kb11n, kb15n, KB21n).
I found in SPRO those exit EXIT_SAPMKAL1_001 and EXIT_SAPMKGA2_001 for periodic reposting and allocation or EXIT_SAPLKBER_002 for organizational authorization (not used for our project).
Do you have any clue about how to handle this requirement?
Regards,
FrançoisGive a try in similar lines (CO Validation) as mentioned in the below link and check the transaction codes:
https://wiki.sdn.sap.com/wiki/display/PLM/COValidationstoadditionalauthorisations+checks
Regards
Sreenivas -
Authorization: data level security by cost center to finance line items
We have a business unit request requiring implementation of cost center data level security through FI transaction codes for financial line items. Example requirement: Cost center manager can execute FS10N GL account line item display, drill into the balance and only return those line items to which the cost center manager has access. Cost center managers currently report their cost center expenses via cost center accounting report and through those reports are able to drill into the FI line items to display document and line item details. Cost Center managers, due to their varied responsibilities, also have access to tcode FS10N, from which if they execute reports directly, can access data for cost centers which they are not responsible for.
Our security team has stated that the determination of authorization objects which are checked at transaction code/program execution are not configurable. We’ve found when debugging that it would be possible to implement user exits for additional authorization checks, but that in order for the authorization check to actually get called, the object must be set as ‘checked’ within SU22/SU24.
Has anyone had a request to implement such cost center data level security for financial line items through Financial transaction codes? If so, what steps were taken to be implemented? Was this able to be accomplished via security configuration and PFCG security role updates or was custom code logic needed? If custom logic was needed, to what extent was this implemented (what tcodes/programs were included; how was the decision of what to include and exclude determined). What was the duration of this effort?
Has anyone had a request to implement such cost center data level security request for financial line items via Financial transaction codes and not implemented the request? How was this communicated to the business that the request for data level security goes against SAP’s authorization design?
Thank you in advance for your input,
Becky ZickHi Becky
Have you tried with object K_REPO_CCA? You have available these fields to filter authorizations.
I hope this helps you
Regards
Eduardo -
Control user access to FBL3N by cost center
Hi Expert,
Need your advice.
Our user wish to control the staffs access to FBL3N by cost center.
This is due to the FBL3N contains salaries posting for different department.
However the FBL3N GL listing report also contain documents without cost center.
Any ideas how can we perform the control ? If the FBL3N can amend with include cost center as checking, for the rest of GL without cost center, is it accessible by all users ?
thanks.
rgds,
teeHi Experts,
Sorry for misleading. Initiate the request was to retrict the access with cost center object, since it is not possible. So we will advice the user to restrict the GL access.
Just need to confirm, can we modify the FBL3N object F_BKFP_BES : Account authorization for G/L accounts from Check to Check/Maintain ? So that we can assign certain GL only accessible by normal users.
And any impact on this once the changes is make ?
thanks.
rgds,
tee -
Hello,
SAP IP , old authorization concept.
Cost center and controlling area are compaunding objects and authorizatiin relevant
There is an authorization object that includes :
hierarchy node (of cc)
cost center
0COSTCENTE Cost Center
0TCTAUTHH Authorization for hierarchy
Shall I unclude controlling area as well?
ThanksYes. Because authorizing cost center 1000 might grant access to cc 1000 in two or more controling areas.
Regards,
Marc
SAP NetWeaver RIG -
FBL3N Cost Center Authorizaton
Hi, each user has its own cost center and only can see the data of its own cost center
The setting of cost center authroizatoin is done. It works for KSB1. However, when user use FBL3N, there are no such authorization-check. Any Solution ?? Please helpDon't think it's possible to restrict using Cost Centre as there no authorisation object that has this field cost centre for FBL3N.
Why not consider the option of not providing authorisation to FBL3N T code itself?
Regards
Sreenivas -
HI,
We have a security requirement on one the G/L plan to actual BEX report for Cost center. the report has cost center hierarchy. but the 3 levels we need security are:
1) managers that can access all cost centers
2) managers that can access a range of cost centers
3) managers that can access one cost center
we have updated 0COSTCENTER as authorizations relevant, but it works for 1 & 3 from above but not for 2. we have changed the authorization relevant to hierarchy, selection, interval and it seems like the range doesnt work.
Any help would be appreciated.
thanks,In rsecadmin you added the hierarchy to your object and the analysis authorization is in your role(check transaction PFCG)?
Maybe you added the hierarchy, but has the user somewhere else full authorization.
Please let me know.
Kind regards,
Benno Mateman
Maybe you are looking for
-
One of my apps is called Shelf Wallpaper and in these wallpapers there are Icon wallpapers and it says VIP Only on them so when i press save on a wallpaper i like in this section it says: Please upgrade through in app purchase to view and save all vi
-
Can't explain where my credit has gone
In May I got a skype landline and the account was credited with £10. Since then the auto recharged has credited the account twice with another two orders of £10 each. So a total of £30. My balance currently reads as £12.77 so Skype claims I have used
-
last night i was downlading updates for my macbook pro. this morning when all the programs were downloaded and i restarted my computer it didn't restart. the screen only displays a black background with white text. the text says: exited abnormally: B
-
How can I save a card I created in iphoto to print as a photo?
I created some collages a few years ago and was able to save them to print as a large photos at the photo shop. I would like to do the same with a card I created but can't seem to do it so it saves a jpeg that is big enough. Can anyone help? Thanks
-
hello all, what is the diffrence between updating and extracting the registers. is registers are not updated automatically when excise invoice is posted? also explains the excise depot purchasing scenario from mm point of view. pls explan me in detai