BI-IP Authorizations: Accessing own Cost Center only

Hi,
We are currently implementing BI-IP in our company. We have created the ready-input templates and we are prepared for roll-out.
There is still one concern though which I haven't resolved. I am currently looking for an AUTHORIZATION that will let users access their respective COST CENTERS only. For example, if I am part of the Marketing Group, then I will only be able to access the budget of my respective cost center.
Can anyone lead me to the right AUTHORIZATION OBJECT in BI-IP to implement this restriction.
Your reply is much appreciated. Thanks.
Regards,
Ramon

Hi Ramon,
authorizations for transaction data in BI (and therefore in BI-IP) are not based on authorization objects. You have to make the cost center InfoObject authorization relevant and then create so called Analysis Authorizations for it. Please see the online help:
http://help.sap.com/saphelp_nw70/helpdata/en/66/019441b8972e7be10000000a1550b0/frameset.htm
BTW, you can upload the cost center authorizations from SAP R/3 or ERP.
http://help.sap.com/saphelp_nw70/helpdata/en/59/fd8b41b5b3b45fe10000000a1550b0/frameset.htm
Regards,
Marc
SAP NetWeaver RIG

Similar Messages

  • BW Analysis authorization issue on cost center range

    Hello BIW security experts
    I have a problem where I created an analysis authorization on a cost center range and it looks like the interval is not working. The report is just a list of cost centers (demo to users to prove that analysis authorizations work in order to skip 2 managerial cost centers.
    . Cost centers are numeric. Example:  2000100. In the drop down list they appear as such.
    . I want to have the following cost center range: 1000000 to 1000771, 1000773 to 2000771, 2000773 to 9999999.
    Thereofore 1000772  and 2000772 should not appear in the list.
    . In the analysis authorization I have put the 3 ranges above on 3 separate lines. 'BT' is the operator. The cost centers have been selected from the drop down list.
    Results:  I get only 1 record from the report....  2000772. (which is one I want to exclude..
    Steps tried to debug:
    . When I put a list of cost centers in the analysis authorization on separate line with the 'EQ' operator, then the report works.
    . I tried putting ' ' delimiters since cost center is a char field but it fails.
    . I tried adding leading and trailing zeros to fill up the char(10) but no luck.
    . I tried creating a hierarchy with the interval and put it in the hierachy auth. tab and it does not work either. It gives the same number of records than the first step.
    . A hierarchy with single values work.
    I do not know what else to try..
    Thanks.
    YB.

    Good morning
    Here it is from RSECVAL
    ZCC_TEST     0COSTCENTER                    I       BT        1000000                                                      1000771
    ZCC_TEST     0COSTCENTER                    I       BT        1000773                                                      2000771
    ZCC_TEST     0COSTCENTER                    I       BT        2000773                                                      9999999
    ZCC_TEST     0COSTCENTER                    I       EQ        #
    ZCC_TEST     0COSTCENTER                    I       EQ        :
    ZCC_TEST     0INFOPROV                         I       CP        *
    ZCC_TEST     0TCAACTVT                        I       EQ        03
    ZCC_TEST     0TCAIPROV                         I       CP        *
    ZCC_TEST     0TCAKYFNM                       I       CP        *
    Thank you for your help.

  • Authorization Object for Cost center

    Hi Experts;
    We are using SRM 7, classic scenario.
    We are copying SRM tcode: BBP_BW_SC4 to a Z report and modify it. The users will be given the access to display  the status of thier SC.
    How can I restrict the user from displaying the SC of other department's? Is there an authorization object for cost center in SRM? is there any other away to restrict the users from displaying SC related to other depts.
    Appreciate your help

    by the way, why are you not using the standard SAP powl queries? they anyways restrict you from viewing others SCs except your team
    any ways, if you are copying that report this BBP_BW_SC4, then change this
    PARAMETERS pa_coce TYPE kostl OBLIGATORY DEFAULT lv_costcenter.
    to
    PARAMETERS pa_coce TYPE kostl OBLIGATORY DEFAULT lv_costcenter no-display.
    Edited by: Soumyaprakash Mishra on Jan 31, 2012 3:48 PM

  • BW report authorization for restrict cost center

    dear all,
    i have problem on BW report authorization for restrict cost center.....when i execute the query, after selection screen, appear error message 'you cannot change zv_cctr for characteristic 0COSTCENTER during query'.
    note : zv_cctr is variable restriction for costcenter, type processing = customer exit.
    below the customer exit :
    WHEN 'ZV_CCTR'.
        IF i_step = 2.
          DATA : gt_mstuidvscc TYPE TABLE OF  ztbw_mstuidvscc,
                 gs_mstuidvscc TYPE  ztbw_mstuidvscc,
                 wa_final2(10) TYPE c.
          SELECT * FROM ztbw_mstuidvscc INTO CORRESPONDING FIELDS OF TABLE gt_mstuidvscc
            WHERE userid = 'sy-uname'.
          LOOP AT gt_mstuidvscc INTO gs_mstuidvscc.
            wa_final2 = gs_mstuidvscc-kostl.
            l_s_range-opt = 'EQ'.
            l_s_range-high = wa_final2.
            APPEND l_s_range TO e_t_range.
          ENDLOOP.
        ENDIF.
    Regards,
    Tony

    i defined variable as ready for input and mandatory.
    regards,
    Tony

  • Determine a GL account using the cost center only as reference

    hello, Is it possible to determine a GL account using the cost center only as reference?
    If so, could you please provide me with the details?

    Hello,
    I am really not clear on your question.
    If you want to make default cost center, then please go and maintain OKB9 settings.
    If you want to generate a report based on a cost element (GL account in FI), go and execute KSB1
    Regards,
    Ravi

  • Hide a managers own cost center when he or she fill it's own timecard

    Hi,
    Does anyone know how to hide a managers own cost center when he or she fill it's own timecard? For transparancy we want to hide the managers own costcenter when filling out his or her own timecard.
    If not possible does anyone know in witch CO, VO or AM to code this most efficently?
    If you have any clue or examples, please let my know.
    Thanks
    Best Regards
    Gjermund

    Cost Center is basically a column. If it is then you have to extend the page controller & set the column render property to false.
    Depending upon the Manager login.
    Thanks
    --Anil                                                                                                                                                                                                                                                                                                                                                                                       

  • Create cost center only can use the fixed controlling area ?

    Hi all,
    When i create a cost center, i find the controlling area is fixed. How  to change it ?
    Regards,
    Yinyan Lu

    In KS01 initial screen access the menu
    Extras --> Set Controlling area
    or press F6
    to change the controlling area

  • How do I change Resource Cost Center only and retain historical cost center data?

    How would a Project Server Admin accommodate changes in the resource's cost center itself?
    For example, Ken (timesheet submitter) records Feb time in cost center C1, but then transfers to a new team, which is in cost center C2 on Mar 1st.
    When I change his cost center at the resource level, reporting indicates all of his previous C1 time as a resource under the C2 cost center, and all of his C1 time looks like it's incorrectly in C2.
    I am thinking about adding custom resource fields to track these changes, but it seems like a lot of extra work, if something already exists that I can use.
    Thanks,
    Marty

    Marty,
    AFAIK, there is no way to do this OOB as Resource Fields are not 'time-phased'.
    A 'possible' alternative, like you mentioned, could be be to use custom fields to track, the change (like Effective Date, Old Cost Center), and then somehow write a query to consider the old cost center between the dates. I have not tried this personally,
    just a thought.
    Cheers,
    Prasanna Adavi, Project MVP
    Blog:
      Podcast:
       Twitter:   
    LinkedIn:
      

  • Authorizations for non cost center manager in transaction CADO

    I have project managers that need to run transaction CADO, usually against a specific sales order.  Since many employees from different cost centers may charge their time against this sales order and that time data needs to be in the CATSSHOW report.  Normal Structural Authorizations prevent the PM from seeing any of this data.  If I remove the project manager from table T77UA (from transaction OSSB) then they are able run the CADO report without restriction, but also loose their restrictions in other HR transactions which is unacceptable.  Is there a workaround solution to this issue?

    Hi Richard:
    I'm not too sure what "other" HR transactions you are referring to, but have you tried looking in to activating the P_ORGINCON auto object? That had solved my issues with restricting MSS yet still allowing access through other transactions.
    Regards,
    Jonathan

  • Authorization based on cost center for manual actual postings

    Hello,
    We tried to use customer function (COCCA001)/EXIT_SAPLKBER_001 for actual postings (as this is not feasible in standard with PFCG).
    Unfortunately, this exit seems not to be working for actuals postings (kb11n, kb15n, KB21n).
    I found in SPRO those exit EXIT_SAPMKAL1_001 and EXIT_SAPMKGA2_001 for periodic reposting and allocation or EXIT_SAPLKBER_002 for organizational authorization (not used for our project).
    Do you have any clue about how to handle this requirement?
    Regards,
    François

    Give a try in similar lines (CO Validation) as mentioned in the below link and check the transaction codes:
    https://wiki.sdn.sap.com/wiki/display/PLM/COValidationstoadditionalauthorisations+checks
    Regards
    Sreenivas

  • Authorization: data level security by cost center to finance line items

    We have a business unit request requiring implementation of cost center data level security through FI transaction codes for financial line items.  Example requirement:  Cost center manager can execute FS10N GL account line item display, drill into the balance and only return those line items to which the cost center manager has access.   Cost center managers currently report their cost center expenses via cost center accounting report and through those reports are able to drill into the FI line items to display document and line item details.  Cost Center managers, due to their varied responsibilities, also have access to tcode FS10N, from which if they execute reports directly, can access data for cost centers which they are not responsible for.
    Our security team has stated that the determination of authorization objects which are checked at transaction code/program execution are not configurable.  We’ve found when debugging that it would be possible to implement user exits for additional authorization checks, but that in order for the authorization check to actually get called, the object must be set as ‘checked’ within SU22/SU24.
    Has anyone had a request to implement such cost center data level security for financial line items through Financial transaction codes?  If so, what steps were taken to be implemented?   Was this able to be accomplished via security configuration and PFCG security role updates or was custom code logic needed?  If custom  logic was needed, to what extent was this implemented (what tcodes/programs were included; how was the decision of what to include and exclude determined).   What was the duration of this effort?
    Has anyone had a request to implement such cost center data level security request for financial line items via Financial transaction codes and not implemented the request?  How was this communicated to the business that the request for data level security goes against SAP’s authorization design?
    Thank you in advance for your input,
    Becky Zick

    Hi Becky
    Have you tried with object K_REPO_CCA? You have available these fields to filter authorizations.
    I hope this helps you
    Regards
    Eduardo

  • Control user access to FBL3N by cost center

    Hi Expert,
    Need your advice.
    Our user wish to control the staffs access to FBL3N by cost center.
    This is due to the FBL3N contains salaries posting for different department. 
    However the FBL3N GL listing report also contain documents without cost center.
    Any ideas how can we perform the control ?  If the FBL3N can amend with include cost center as checking, for the rest of GL without cost center, is it accessible by all users ?
    thanks.
    rgds,
    tee

    Hi Experts,
    Sorry for misleading.  Initiate the request was to retrict the access with cost center object, since it is not possible.  So we will advice the user to restrict the GL access.
    Just need to confirm, can we modify the FBL3N object F_BKFP_BES : Account authorization for G/L accounts from Check to Check/Maintain ?  So that we can assign certain GL only accessible by normal users.
    And any impact on this once the changes is make ?
    thanks.
    rgds,
    tee

  • Authorization for cost center

    Hello,
    SAP IP , old authorization concept.
    Cost center and controlling area are compaunding objects and authorizatiin relevant
    There is an authorization object that includes :
    hierarchy node (of cc)
    cost center
    0COSTCENTE  Cost Center
    0TCTAUTHH     Authorization for hierarchy
    Shall I unclude controlling area as well?
    Thanks

    Yes. Because authorizing cost center 1000 might grant access to cc 1000 in two or more controling areas.
    Regards,
    Marc
    SAP NetWeaver RIG

  • FBL3N Cost Center Authorizaton

    Hi, each user has its own cost center and only can see the data of its own cost center
    The setting of cost center authroizatoin is done. It works for KSB1. However, when user use FBL3N, there are no such authorization-check. Any Solution ?? Please help

    Don't think it's possible to restrict using Cost Centre as there no authorisation object that has this field cost centre for FBL3N.
    Why not consider the option of not providing authorisation to FBL3N T code itself?
    Regards
    Sreenivas

  • Cost Center Security

    HI,
    We have a security requirement on one the G/L plan to actual BEX report for Cost center. the report has cost center hierarchy. but the 3 levels we need security are:
    1) managers that can access all cost centers
    2) managers that can access a range of cost centers
    3) managers that can access one cost center
    we have updated 0COSTCENTER as authorizations relevant, but it works for 1 & 3 from above but not for 2. we have changed the authorization relevant to hierarchy, selection, interval and it seems like the range doesnt work.
    Any help would be appreciated.
    thanks,

    In rsecadmin you added the hierarchy to your object and the analysis authorization is in your role(check transaction PFCG)?
    Maybe you added the hierarchy, but has the user somewhere else full authorization.
    Please let me know.
    Kind regards,
    Benno Mateman

Maybe you are looking for