BI7 Analysis Authorisations - relationship between value & hierarchy auths

Hi all
Does anybody know how we can set up the new analysis authorisations to allow a user to use a Query selection for cost centre based upon a hierarchy and yet restrict the cost centre data they can display by value authorisations?

SDN is the place to discuss technical problems..
Please avoid such weird post.
G@urav.

Similar Messages

BI7 Analysis Authorisations?

With the introduction of analysis authorisations in BI7, am I correct in thinking the old roles such as S_RS_COMP are no longer used and we, instead, create a role which contains 0TCAACTVT, 0TCAIPROV and 0TCAVALID?

Hi,
If we want field level security then in 3.5 is called Reporting Authoizations in 7.0 is called Analysis Authorizations.....
Prerequisite for AA is infoobject should be authorization relevent.
one AA can contain multiple characteristics.We can add AA directly to the user...
If we want assign to a role then use S_RS_AUTH then assign this role to the user.....
WE HAVE TO INCLUDE ATLEAST ONE OF THESE (0TCAACTVT, 0TCAIPROV and 0TCAVALID) IN ANALYSISAUTHORIZATION
HOPES THIS HELPS
GTR

Authorisation - Pasting of values into AUTH fields

Hi Friends,
I am working on 4.6c version - Authorisation under PFCG (Role maintenance). Is it possible to paste >8 values into the AUTH fields of an authorisation object in a single shot?
If so, kindly share the solution.
Regards,
Vijay

>
vj vijay wrote:
> Hi Friends,
>
> I am working on 4.6c version - Authorisation under PFCG (Role maintenance). Is it possible to paste >8 values into the AUTH fields of an authorisation object in a single shot?
>
> If so, kindly share the solution.
>
>
> Regards,
> Vijay
Hey Vijay,
you sound like a man on the mission - want everytihng done in a SINGLE SHOT
I am not sure if i understand your requirement correctly, but my infernce is that you want to copy data from clipboard to the object values with little / no effort........(prime criteria )
Well, have the values listed one below the other in a notepad, copy them ctrl+C and in SAP have the quick cut and paste option active.
Now go to the object values and right click - you will have 7 rows of data copied, if you want more - repeat the exercise
If you want to reach the moon, you have to pass-by some stars as well (Dumb and in-appropriate quote - I KNOW)
If my understanding of the discussion is wrong - Blame it on the Monday morning Blues...............and have fun

N: 1 relationships in Value Mapping 3.0

Hi,
in our Value Mapping we need to process n:1 relationships between values. E.g. 2 different codes for reason-for-rejection in the sending system need to be mapped to 1 value in the receiving system.
As we see now, and this is also mentioned somewhere in this forum, this doesn't work. Is this correct?
As suggested in this forum one option would be to add the sending value in the receiving value and use mapping to trim the value. So e.g.
Agency: SystemX                    Agency: SystemY
Scheme: Augru                      Scheme: Augru
Value                              Value
A1                                 B
A2                                 B
would become
A1                                 A1_B
A2                                 A2_B
Of course, this would work, but just one-way (from SystemX to SystemY). From SystemY to SystemX this would not work, since only value B is available at that time. If you apply the same logic, so implement another value, this would eventually mean:
Agency: SystemX                    Agency: SystemY
Scheme: Augru                      Scheme: Augru
Value                              Value
A1                                 A1_B
A2                                 A2_B
C_A1                               C_B
D_A2                               D_B
So you end up with a lot of values to maintain.
Another option would be to use different Value Mapping scheme's, but this would influence the reusability of the mapping.
Any suggestions?
Thanks a lot!

When you have an n:1 mapping and want to use this in both directions, you need a logic, how the values are determined, if you have several entries to choose.
In your example:
A1 -> B
A2 -> B
If you come from the other side, what value should B have?
For the default value you could use a unique prefix (eg: 1_) and add that prefix to the value before calling the value mapping.
Let us assume, you have maintained the table like this:
A1 -> 1_B
A2 -> 2_B
A3 -> 1_C
A4 -> 1_D
A5 -> 2_D
A6 -> 3_D
so you have B ->A1, C -> A3, D -> A4
Regards
Stefan

BI analysis authorisations direct assign to user in RSECADMIN

Hello,
In RSECADMIN it is possible to directly assign the 'analysis authorisations' to user-id's
It is also possible to assign the 'analysis authorisations' to a role via the authorisation object S_RS_AUTH
Can somebody tell me
-    what are the pros and cons of directly assigning the analysis autorisations to the users in the RSECADMIN ?
-    In which situation is direct assigning in RSECADMIN used ?
-     IS dirtectly assigning to users in RSECADMIN in a production environment critical?
-     what does SAP propose: directly assigning in analysis authorisations our via a role
In our case we have the situation of
       BI system with a large number of analysis authorisations. The values of the analysis authorisations should be
       maintainable in production environment.
       We have also to take in mind:
                          - Roles are added to users via CUA ( RSECADMIN is not maintainable via CUA)
                          - Business Objects is coming. So set up the authorisations that they can be used for Business Objects
                          - Flexible ( new autorisation relevant info Objects) should be easy adeptable.
       What we want to use is
                                 - assigning analysis authorisations via a single role ( in a composite ) to the user
                                 - a variable in the analysis authorisations as field value of a characteristic. In that case the values can be
                                    assigned dynamically in production.
                                   the data access role has the link to the analysis autorisations in the RSECADMIN.
                                  this analysis authorisation contains variables instead of a fixed field value.
                                  The values of the variables are maintained in a table in a production environment
         Is using directly assigning analysis authorisations to users in the RSECADMIN in the production environment an alternative ?
    Thanks for your answers
    With Kind Regards,
    Vincent
Edited by: Vincent Willems on Apr 7, 2011 10:37 AM

Hello Vincent,
My way of working is to follow the structure you have in the providing systems. If you have created a role for a production employee then try to translate the roles for the production analysis the same way in BI. You can use the s_rs_auth object. In HR you can use structural authorizations, you can use some programs to set the structural authorizations in BI and that will be done by creating an analysis object and add this to the user involved. Also updates from structural authorizations will be done automatically by these programs. I should not add your own objects to single users, that is a lot of maintenance you do not want. Use in BI the same concept as in the providing systems, it is more clear for anyone who has to work with it.
Have fun
Bye
Jan van Roest
PS. Did you solve your problem? If so please close your question
Edited by: J. van Roest on Jul 7, 2011 12:51 PM

BI7. Analysis Authorisations: 0TCA_DS01 to 0TCA_DS05

Good day
For those who have already implemented Analysis authorisations, PLEASE help?
I am investigating analysis authorizations and also need to implement at our site.
What I need to know is what objects are delivered with the template DSO's 0TCA_DS01 to 0TCA_DS05? Should they have any transformations, DTP's and datasources?
I am a bit lost on how this should work. I have gone through numerous links and instructions, with no success at all. Seems as if this whole concept of analysis authorisation is escaping me.
Please assist with any detailed information regarding the HOW TO, or STEP-BY-STEP instructions.
Thanks in advance.
Cj

Hi Cornelius,
you're right, there is no data flow available for those DSO objects. What dataflow would you expect? You want to upload the auth data via flat file? Or you want to load from another source system by an dedicated logic or perhaps with an workflow as a trigger? You see, it's not that simple to deliver "the one and only" dataflow. The mentioned objects are templates as the program to generate the analysis auth expects a special order of the fields which are given when you use the ODS objects..
Read more here, http://help.sap.com/saphelp_nw70/helpdata/en/59/fd8b41b5b3b45fe10000000a1550b0/frameset.htm
You have to create the dataflow by your own, regardless if you want to use 3.x dataflow or 7.0. The only thing you have to ensure is the correct order of the field in the DSO whit the values you want to use later in the generation.
Hope that helps a bit.
Best regards,
Maik.

OBIEE 11g Unable to browse multiple value hierarchy for analysis.

Hi All,
We are using OBIEE 11g Value Hierarchy feature to display GL Segment Hierarchies.
-     We have set the hierarchies to be Ragged and Skipped Levels in the RPD Business Model.
-     We have dragged the hierarchies from Business Model to Presentation Layer.
-     When selecting the hierarchies during Analysis, the first hierarchy that is browsed appears correctly. The next hierarchy when browsed just hangs.
For example:
Step 1: Browse Hierarchy1 (Block). The values show correctly.
Step 2: Browse Hierarchy2 (Account). The hierarchy does not open with a blinking circle remaining forever.
Alternatively;
If we selected, Hierarchy 2(Account) first, the hierarchy shows correctly, but when selecting Hierarchy1 (Block) a blinking circle appears and remains for ever without opening the hierarchy.
The nqquery.log shows correct result. My suspicion is that the issue is on the front end presentation services/javascript side.
Is there any additional setup/configuration required to open multiple value hierarchies during analysis.
Thanks and Regards,
Sasi

I have a pretty good guess at the hanging problem, unforntunitly i have no solutions yet.
I having same type of issue, hangs when building filters on for 2nd or 3rd dim table.. I can see obiee fireing off the query to populate the dropdown by running
select distinct on and joining to the fact table and dimensions that the users usually have selecte prior to start creatinng the filters.
It is sort of like doing a intra dimension filter.. Sounds good but if user does not cut way down on number of fact rows by the time 2nd filtered column is selected the generated query to populate the drop down can run and run.
OBI SE Once and discoverer dd not do this, at least not out of the box.

Hierarchy Analysis Authorisation

Hi All
We are trying to limit the output of a HR Sickness report depending on the user's position in the Org Structure hierarchy. We can't use structural authorisation as its not maintained in ECC.
We have the org struct in BI and we want to setup dynamic Analysis Authorisation (AA). So we want to create AA with hierarchy restriction on 0orgunit based on a variable. Then at runtime the variable is populated by ABAP with the user's org unit. The report then shows the data for the user's org unit (and all other org units below in the org structure).
In RSECADMIN I can create a new authorisation object and add 0orgunit to it. On the Hierarchy Authorisations tab I hit the create button and select orgeh hierarchy . Then I press the 'select variable' button and I get the error message 'No variable of type Customer/SAP exit for characteristic 0ORGUNIT exists'.
What am I doing wrong? Where do I specify a variable for 0ORGUNIT so that it can be available in the selection screen?
Thanx
Asif

https://wiki.sdn.sap.com/wiki/display/BI/AuthorizationinSAPNWBI
http://www.sdn.sap.com/irj/scn/events?rid=/library/uuid/ded59342-0a01-0010-da92-f6b72d98f144&overridelayout=true
Go through these links. Hope this would help you.

EYE 007 Aggregated Value for Analysis Authorisations

Hi there,
I'm attempting to unit test a new report in our development environment via RSECADMIN. Having created the role and assigned to the test user I get the error that aggregated values for particular characteristics are empty. However I've already added these to an analysis authorisation and used this for another report where it finds the characteristics.
I'm stumped as to why this report doesn't find the same values. I've generated the role and run a user master compare, but this still fails. Any help is appreciated.
Thanks.

1. Please take the InfoProvider on which you have created your query and find which characteristics are Authorization Relavant for that MultiProvider/InfoProvider.
2. Make sure all these characteristics are added to the analysis authorizations assigned to the user: Detailed feild values for the one your report is about and aggregated value for the other one and all the relevant 0TCA* content as well
The report should work, however in your case it seems like you are assigning the characteristics using separate analysis authorizations, in that case make sure the concerned InfoProvider is mentioned in each analysis authorization under 0TCAIPROVfor the analysis authorizations to combine.

Two analysis authorisation

Dear Gurus,
I have the turned two navigation attributes as auth. relevant,
global cost center: this is based on hierarchy authorisation
local cost center: this is based on value authorisation.
There is one-to-one mapping between glocal cost center and local center. Users would request authorisation on either of them but they can ask for authorisation for more than one role with different combination.
I have created three analysis authorisation for the below scenarios:
1: Role_1 has Auth_1 with the below values
global cost center: X (node)
local cost center: * (as users have no knowledge about the mapping)
This works fine.
2: Role_2 has Auth_2 with the below values
global cost center: * (as users don't know the mapping)
local cost center: A
This works fine as well.
3: Role_3 has auth_1 and auth_2.
This doesn't work. It throws authrisation error.
Can you please suggest how can scenario 3 work.
Thanks in advance
Regards

Hi Max,
Unlike ECC Auth Objects, Analysis Auths always work on the concept of Intersection. Which means when you run query for a particular input selection and you have multiple analysis auth assigned, then queries will only be executed if input selection falls within the intersected region for the characteristics in two analysis auths.
Therefore effectively when you assign auth_1 and auth_2 to an user, user gets the following access:
global cost center: Node
local cost center: A
Can you confirm if the user is selecting the above values while executing queries and still getting authorization error?
I didn't understand the requirement of Role_3 = Auth_1+Auth_2 though, but if you can explain the requirement, I can try to suggest some solution.
Thanks,
Deb

Analysis Authorisation Table

Hi all,
I've just started working on a new project and am familiarising myself with the build. Part of this is the BI analysis authorisations, of which there are over a hundred. Rather than attempt to view these inividually is there a table that can give me this info, rather like AGR_1251 but for analysis auths?
Thanks,
Nick.

Hi,
tables of analysis authorization for RSECADMIN are
RSECHIE_CL Change log of hierarchy authorizations
RSECUSERAUTH BI Analysis authorization assignment to users
RSECUSERAUTH_CL BI Analysis authorization assignment to users
RSECTXT_CL Change log of authorization texts
RSECVAL_CL Change log of Authorization Value Status
RSECBIAU Changes to Authorization (Last Changed By]
You can find more table start with RSEC* just check with F4 in SE16.
Hope this helps
Edited by: connecpk on Feb 1, 2010 4:49 PM

Creating a relationship between one table and the PK in another

Sorry the subject of this message is a bit vague. I'm not sure how to describe this problem in one sentence.
So here's the issue: I've just created a new block on my form based on table2. Table2 contains t1_id which is the FK link to Table1.
What I want is when one of the fields in Table2's block is changed and inserted, the t1_id is inserted in the applicable row. Essentially, I need :table2.t1_id to have the 'Copy From Item' property set at :table1.id
I cannot seem to see where in designer this option is. I asked a friend and he said what I need to do is 'create a relationship between the two values in designer'. Huh? In the Table Definitions the FK is set for the two, so I'm not sure how to do this.
Another problem, which I'm believing will be solved when this is, is that when the form loads, this new block, table2, is not automatically populated with the applicable values from the table.
Thanks for any help. It's greatly appreciated!

Do you mean that you want to create a Master-Detail Form using Designer?
If yes, you need to define the entity usage from the Function Hierarchy Diagrammer, then attribute usage definition. Generate the module using Application Design Transformer. You need to define the Context so that master table's PK will be carried over to the detail table.

How to create the relationship between ESSBASE 11 and DM in OBIEE11

Hi Experts,
I have one requirement that there is one property table named 'Store Master' in DW,and it contains a lot of attribute, such as Open Date, Close Date, IS 24 Hour etc.
But another data source is essbase and based on this source, I create all reports.
In ESSBASE, it has one dimension and hierarchy Location, and it has four level, Country(L1),Region (L2),Province(L3),Store(L4)
So I want to know how to create the relationship between Location (ESSBASE) and Store Master (DM).
I try to create one relationship in physical layer between Gen4,Location and Store, then drag the open date and close date into Location Dimension in BMM,then Presentation Layer.
When I drag column 'Open Date' ,'Gen4,Location ' and 'Sales' into reports, it will generate the following error message:
State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 43113] Message returned from OBIS. [nQSError: 43119] Query Failed: [nQSError: 14020] None of the fact tables are compatible with the query request Dim Region.Store Open Date. (HY000)
However, when I remove the column 'Open Date'. it will be ok.
So what I missing the steps? Please help me. Thanks.

>
'2. Now, pull the 'Store' column from relational DB onto the Gen5, Location column from Essbase. This action now creates, two logical sources for your 'Store' column.'
If the length from different data source is not same,such as 1001(DM),L_1001(ESSBASE), can I drag the 'Store' column from relational DB onto the Gen5, Location column from Essbase?
I think it does not work.Right?Hi,
I am not sure if you are talking about the length(as in varchar(128)) of the member value being different in different sources, or the member itself is different in both the sources.
I am still assuming, that you are referring to the members not same in both the sources.If it is, the whole concept of federation is based on conforming dimensions. So, it needs that the same dimension information is present in both the sources and then only, you know we can analyze the numbers based on this dimension. So, either the dimension being different in both sources, or the members not present in both the dimensions might lead to incorrect numbers.
So I select Store Attributes in relation DB and Location in ESSBASE in physical layer, then create the physical join, such as right("Hour Sales"."H_Sales".""."H_Sales"."Gen6,Location",4) = "Authorization".""."EDW"."T_EDW_MDM_STORE"."US_CODE", then drag the OPEN_DATE and CLOSE_DATE in relation DB to Location in ESSBASE in BMM,finially drag them into presentation layer.We create physical layer relationships, to send over the same relation to the underlying database during querying. So, creating a physical relationship between essbase cube and relation database would not help here.
When you set up this federation, BI Server sends individual queries to each source and maps the conforming dimension members internally.
Hope I was clear, and this helps.
Thank you,
Dhar

How to create the relationship between ESSBASE 11 and DM in OBIEE 11G?

Hi Experts,
I have one requirement that there is one property table named 'Store Master' in DW,and it contains a lot of attribute, such as Open Date, Close Date, IS 24 Hour etc.
But another data source is essbase and based on this source, I create all reports.
In ESSBASE, it has one dimension and hierarchy Location, and it has four level, Country(L1),Region (L2),Province(L3),Store(L4)
So I want to know how to create the relationship between Location (ESSBASE) and Store Master (DM).
I try to create one relationship in physical layer between Gen4,Location and Store, then drag the open date and close date into Location Dimension in BMM,then Presentation Layer.
When I drag column 'Open Date' ,'Gen4,Location ' and 'Sales' into reports, it will generate the following error message:
State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 43113] Message returned from OBIS. [nQSError: 43119] Query Failed: [nQSError: 14020] None of the fact tables are compatible with the query request Dim Region.Store Open Date. (HY000)
However, when I remove the column 'Open Date'. it will be ok
So what I missing the steps? Please help me. Thanks.

>
'2. Now, pull the 'Store' column from relational DB onto the Gen5, Location column from Essbase. This action now creates, two logical sources for your 'Store' column.'
If the length from different data source is not same,such as 1001(DM),L_1001(ESSBASE), can I drag the 'Store' column from relational DB onto the Gen5, Location column from Essbase?
I think it does not work.Right?Hi,
I am not sure if you are talking about the length(as in varchar(128)) of the member value being different in different sources, or the member itself is different in both the sources.
I am still assuming, that you are referring to the members not same in both the sources.If it is, the whole concept of federation is based on conforming dimensions. So, it needs that the same dimension information is present in both the sources and then only, you know we can analyze the numbers based on this dimension. So, either the dimension being different in both sources, or the members not present in both the dimensions might lead to incorrect numbers.
So I select Store Attributes in relation DB and Location in ESSBASE in physical layer, then create the physical join, such as right("Hour Sales"."H_Sales".""."H_Sales"."Gen6,Location",4) = "Authorization".""."EDW"."T_EDW_MDM_STORE"."US_CODE", then drag the OPEN_DATE and CLOSE_DATE in relation DB to Location in ESSBASE in BMM,finially drag them into presentation layer.We create physical layer relationships, to send over the same relation to the underlying database during querying. So, creating a physical relationship between essbase cube and relation database would not help here.
When you set up this federation, BI Server sends individual queries to each source and maps the conforming dimension members internally.
Hope I was clear, and this helps.
Thank you,
Dhar

Analysis authorisation tables

Hi, is there any table I can use to determine the content of analysis authorisations assigned to users rather than look individually in each user via RSECADMIN? Thanks, Mark.

Hi Mark,
I hope you have posted the question in multiple areas. Please post all the BI related questions in BI forums. However, you can refer all the RSEC* tables. Below are the tables that stores analysis authorizations information:
RSECHIE - Status of hierarchy authorizations
RSECTXT - Authorization text
RSECVAL - Authorization Value Status
RSECBIAU - Changes to Authorization (Last Changed By]
RSECUSERAUTH - BI Analysis authorization u2013 assignment to users
Change log tables:
RSECUSERAUTH_CL - Assignment of users
RSECHIE_CL - Change log of hierarchy authorizations
RSECTXT_CL - Authorization texts
RSECVAL_CL - Authorization Value Status
Hope this helps!!
Rgds,
Raghu

BI7 Analysis Authorisations - relationship between value & hierarchy auths

Similar Messages

Maybe you are looking for