BPC security - task profile definition
Hi all,
I am trying to create a task profile which contain only the 'AppSet' task under 'Administration' interface. Here are the situations I faced: (I am using the default user when setting up BPC Server which has all authorizations)
1. If I checked 'System Admin' in Step 1, I can not remove the other task 'Define Security' in Step 2.
2. If I did not check any existing admin role, I can not even see the 'Administration' interface in Step 2.
May I ask your opinion on how could I resolve this?
Thank you all in advance.
Eric Lin
Eric,
You want to create a brand new profile with every task available in BPC.
I had the same problem and found SAP table in BI. I think if you modify this table, you can manage the security as you want but I didn't try this method.
In sap BW, transaction se16, all the security table begin by UJE_ :
UJE_TASK_SEC u2013 Task table (Application, Dimension,u2026),
UJE_TASK u2013 Task Interface (Administration, Audit, u2026),
KR,
Samir
Similar Messages
-
BPC 10 Microsoft Security - Task Profile
My client wishes to assign the ability of Dimension member maintenance to only the System Admins. I have moved the Dimension Member Maintenance out of the available tasks for the other group. However, the other group may still add and delete Dimension members. For example, Account member.
Has anyone experienced this problem?
Thank youHi Sean,
by default dimension mantaince is assigned only to SystemAdmin, if you have other groups that can modify dimensions simply eliminate "Manage Dimensions" and "Manage Models" from their security task profiles.
Regards
Roberto -
Security - Task Profiles - Task Description --- Where to be found?
Hello there,
I have been searching my fingers tips bloody! ... Many BPC 5.1 and 7.0 documentation, dont bother mentioning ANY Description for the any tasks under the task interfaces.
May somebody please post (copy / paste) DESCRIPTION, what exactly each TASK means and / or gives access to?! --- Security would like to know for certain!
It's much appreciated.,
Maximilian
Edited by: Maximilian Weisheit on May 12, 2009 12:15 AMHi peter,
thank you for your note. - I went back into the SAP Library File that came with the BPC 7.0 NetWeaver version. And surprisingly, there was no TASK PROFILE DESCRIPTION Table to be found. I went through every search result coming from the "TASK" search. No such table.
Do you mind taking a moment to Copy / Paste the table you referring to in the forum post here. Alternatively you may contact me through the profile contact.
Eitherway, It is highly apreciated, as I am not able to access a MS BPC Help File from here.
Kind Regards,
Maximilian -
Differences between security tasks in BPC 7.0 MS and BPC 10.0 NW
Hi all,
I am on a migration Project from BPC 7.0 MS to BPC 10.0 NW and I have to migrate task profiles.
The problem is that while uploading the task profiles from a .csv, I realized that there are differences between the tasks to assign in source and destination system. Sometimes the task that exist in MS doesn't exist in NW or there are new tasks in NW that doesn't exist in MS version.
I am attaching an Excel sheet with the comparison between both systems.
The question is simple, how can I move these task profiles on a semiautomatic way? Do you know about any documentation about the differences between security task in MS and NW?
Thanks in advancewe can use flat file upload and custom data manager package for loading data from BI to BPC
-
Hello everybody,
Does anyone know where can i find the description of the activities assigned to each task profile in BPC?
Thanks in advance!
Nidia OlguíThis is not true at all. BPC 7.5 MS has additional tasks that are not defined in the documentation referenced above and others that have been renamed from what the 7.0 MS documentation states.
New for 7.5: ManageDrillThrough, EndUserDrillThrough, ManageEVDREDefaultStyle, RemoveBPFInstances, ReopenBFPStep, ResetBPFInstances, PackageExecute, ManageTransport.
Renamed in 7.5: Lockings now called Manage Data Locks & Work Status
Gone from 7.5: JournalReport
Good luck finding what all this stuff does. It would be nice if SAP updated their documentation or at leats made it clear where their customers can find it. -
How to further restrict the task profile 'dimension' to selected dimensions
Hi All,
We have a dimension which we require users to maintain their own master data. We have used the secondary admin task profile which provides default access to the task 'dimension'. THis allows that user access to the BPC Admin console and also to the dimension to maintain dimension members. However, we wish to limit their access to only certain defined dimensions & not give them access to all dimensions. I have tested using this task profile together with a member access profile to limit the secure dimensions for an application, however my understanding is that member access profiles will not restrict access once a user has logged into the BPC Admin Client...i.e the member access profile restricts the ability to read/write to 'facts'/sign data from a BPC front end tool, EG excel.
Any ideas much appreciated as to how to acheive this,
GlenHi,
As you said for maintaining dimension members, you had to assign a task to the task profile. However, assigning this task will allow the user to modify any of the dimensions.
You cannot give authorization to allow only selected dimensions. BPC doesnt have this feature. Either the user can modify all the dimensions or none of them.
Hope this helps. -
I'm wondering how people migrate security between environments i.e. production to development.
Security is typically quite different in development vs. production. Some users will have more access in development and some users will not be active in development. Also in some cases, users may have different id's because they are on different domains. This means that there are many changes that need to be made before the development environment can be used.
In version 4 of OutlookSoft, security was all contained within an Excel workbook which made it very easy to apply these types of changes very quickly. For example, there was a column that indicated whether or not a user was active. You could very quickly go through this column and change users from Yes to No. Also, security could be processed all at one time.
In BPC, there are many dialog boxes to go through which is time consuming. There does not seem to be a way to flag a user as inactive. I notice that the field still exists in the database table but it is not in the UI. Also, it seems that each of the Task Profiles, Member Access Profiles, and Teams needs to be saved whenever an appset is restored or else you will get errors. There does not seem to be a way to process the security so you do not have to visit each of these dialog boxes.
Is anyone automating this type of migration by modifying the database tables directly instead of going through the UI?Furthermore, in the corporate environment we are in today (i.e. SOX, Enron, etc.), current customers would be very WEARY to implement a "workaround" (not endorsed by the vendor) to migrate security settings into a live production environment.
I suggest you send an enhancement request via the SAP Support portal and ask that something like this be implemented in the next release of BPC.
As a starter here are some security functions that I think should be automated via a menu option in the Security UI of BPC:
Importing Security Information
-Import ALL Security info.
-ImportUsers
-ImportUserGroupNames
-ImportUserGroupMembers
-ImportPrivileges
Exporting Security Information
-Export ALL Security info.
-ExportUsers
-ExportUserGroupNames
-ExportUserGroupMembers
-ExportPrivileges
Deleting Security Information
-DeleteUsers
-DeleteUserGroups
-DeleteUserGroupMembers
-DeletePrivileges
Regards,
John -
Hey folks,
I´m quite new to BPC 7.0 SP01.
I read a lot about Applications Sets, Applications, Dimensions etc.
Now, the next (and last menu) on the left hand in the AdminConsol is "Security". Unfortunately, I can't find any documentation about this.
This menu has 4 subemenus:
1) Users
2) Teams
3) Task Profiles
4) Member Access Profiles
I think, 1) and 2) are self-explanatory. But what about 3) and 4)??? My problem is, that we only con login with bpcadmin to our AppSets, but not with our user-specific users? Is there any access which need to be granted in each AppSet to all users? And what are 3) and 4)?
Any documentation and help will be rewarded!
Thanks a lot!Christian,
I could send you the doc about security if i have your email...
However, I will explain quickly how to set it up:
Basically you have Tasks, Users, Teams and MemberAcess profile. (MAP)
Task answers to the question : WHAT. What does the user/team is allowed to do...
MAP: answers to the question : WHERE. In wich Cube for which entity, which category...
User/Teams answers to the question : WHO. The best is to give your rights to the teams. Never to users. Then you drop the users in the teams you want.
You create a MAP for the cubes you want the users to work on...
Lets say I create a MAP for Japan and in Entity i would select only Japanese entity..
Then you create a MAP for CATEGORYREADANDWRITE and you select category and all categories if you want it only to write on all categories.
Note that categories and Entities are 2 seperate MAP.
Then you create a Task by selecting the task you need: You will find some information about the tasks in http://SERVERNAM/OSOFT/OSOFT/Help/Admin/Task_profile_descriptions.htm
Personnaly I create a task for SUBMIT DATA, a task for FILEACCESS and a task for DATAMANAGER...
Then I create a Team called SUBMITDATA and I give it the task Submitdata. Not any MAP.
Then I create a Team called Japan lets say with no task but with JAPAN in MAP.
THe users is gonna be in the team JAPAN, SUBMITDATA and CATEGORYREADANDWRITE
Hope this helps
Nic -
BPC Security - Edit Logic Script
Trying to find the security task that give edit access to Logic Script(BPC 10 NW SP9). Is this combined with the "Edit Packages" Data Manger task?
Thank you.
Regards,
Vinod SwarnapuriVinod,
I think the one you are looking for is Manage Business Rules.
Akos -
Manage dynamic hierarchies - Task in Task Profile
Hello BPC Cracks,
I have a problem to assign a user/team the rights to manage dynamic hierarchies (DHE), anybody knows witch task should I assign to the user/team in Task Profile. (In the admin guide there is no entry for this topic). The Task Profile has already the Task u201CSubmitDatau201D and the menu eSubmit appears in the Excel front end.
Currently I have a member access profile, with rights for the ownership dimension read and write for all entities, but in the menu eSubmit the entry manage dynamic hierarchies does not appear.
Thanks,
BiagioThanks Biagio,
The Note 1509322 worked for me. Ta
I applied it to a custom task profile that already had various specific tasks assigned to it (Just not Business Rules)
By adding Secondary Admin in the checkbox, it wiped out my original specific tasks, which I then had to remember and re-apply.
All working now.
Regards
Nick -
Task Profile-Worksheet Dimension Lock Options
Setting the security to allow a user to use the Worksheet dimension lock options for a report is simple enough. What I can't find is the lowest level of security settings needed to allow it for Input templates. I have users with task profiles allowing them to edit this for reports, but if they open an input template in the same application, then the option goes away.
Any help would be appreciated. Hopefully I don't have to make them some form of admin.
Thanks,
JasonOK, so let me try to explain it differently. The choice a user can select in the Action Pane is called "Worksheet dimension lock options". This allows a user to lock down the current view for a worksheet. Visually, this results in the dimension selection in the current view becoming greyed out.
Controlling security to this feature for report templates is done via a task profile using AnalysisCollection-ManageTemplate. Granting this security does NOT allow the user this same feature for input templates.
What task needs to be assigned to a task profile to allow the "Worksheet dimension lock options" choice in the Action Pane for input templates?
Thanks,
Jason -
BPC security can be used in SQL Reporting Services?
Hello,
We are trying to implement SQL Reporting Services(RS) as web reports of BPC.
Is it possible to use BPC security user access control in SQL RS?
We know that SQL RS user access can be managed by windows domain, but we like to use BPC security as SQL RS user control.
Thank you in advance.
SamHello,
We are trying to implement SQL Reporting Services(RS) as web reports of BPC.
Is it possible to use BPC security user access control in SQL RS?
We know that SQL RS user access can be managed by windows domain, but we like to use BPC security as SQL RS user control.
Thank you in advance.
Sam
==================================================================
Hi Sam,
Could you be more specific on what you are going to do with RS?
BPC, as you know, uses Windows AD. If you intend to use RS in BPC, you have already introduced Windows AD and BPC access security for RS. But only given RS report is eligible in this case.
If you want to make a report that refers to business data of BPC, and need to pass argument as query parameter such as what category, what entity, not possible actaully, no way to make it happen with standard feature of BPC. But you can think of possibility of customizing and need to find out how to pass the argument for a user(read ACS table containing security info).
Reg. the reporting tool, if you are using 7.5, BO products is aligned well. Xcelsius and Voyager will be a tool for your requirement.
Regards,
YH Seo -
How to add "Team leader" field in standard BPC security report
BPC Expert,
We are using BPC MS 5.0 version.
There is a checkbox in the security setup to make someone a "Team Leader" when you add him/her to a team and this checkbox determines who can post data and who cannot. When we run the user report we see which team the user is in but we do not have visibility to whether or not they are a "Team Leader" which is what business owner needs to see to approve user access.
I figured out "dbo.userteamassign" is the table which hold team leader value. Can anyone please tell me all the steps of adding team leader field in the standard BPC 5.0 security report.
Thanks,
KetanRoberto,
Thanks for the response. I know associated steps to declare business user as a team leader but my original question is "how to add a column in standard BPC security report that says who is team leader or who is not".
Do you know the Dtx package that is responsible to supply the data to Standard BPC security report? We can enhance standard data package to pull/display extra "Team leader" column in standard security report.
Appreciate your inputs.
Thanks,
Ketan -
Hi All,
when I am running LM01 , it gives the error : user 'abc' has no profile definition.
Please help
thanks in advance,
rgds,
Madhuriits checking in the table :LRF_WKQU using FM : L_USER_DATA_GET
some thing related to warehouse users.
from which Tcode this table gets updated?
rgds,
Madhuri
Edited by: madhuri sonawane on Nov 3, 2008 12:51 PM -
User SAPUSER has no profile definition
Hi
i am unable to run RF transaction(LM00, LM01, LM71, LM*) in SAP. I am getting
following error
"User xxxxxx has no profile definition"
Message no. LF192.
Any help would be appreciated.
Regards
RajuHi,
If these transactions are working for other users, RF Queue Management should be missing for your user id in the configuration.
Maintaining your user id in the RF Queue Management should resolve the issue.
SPRO -> IMG -> Logistics Execution -> Mobile Data Entry -> RF Queue Management -> Assign Processor to Queues
Hope this helps!!!
Thanks,
Hemanth Nandigam
Maybe you are looking for
-
When opening Itunes, after placing my ID and password, I'm getting a message that indicates "Itunes has stopped working. A problem caused the program to stop working. Windows will close the program and will notify you if a solution is available. Bu
-
Hey Guys, I am using internal orders as capital investment programs. These are the steps i did 1- created the order( AUC gets creted automatically) 2- entered the budget 3 Posted to the order 4- settled it- Using processing type 1( automatic)- after
-
Have icon banner notification showing updates available but screen is blank when selecting icon to update the apps... Seems to be an apple glitch as im not alone in this and nothing wrong with my ipad. Must repair glitch with system update as, obvio
-
how do i access iphone4. I have voice instructions requesting password and speaking my password number but no password is entered in the empty boxes. I think that a triple tap is involved in the solution but i am stuck. Please assist. Brian
-
Unable to view Content in Design View
Hello Everyone, This is my 1st time creating a manual using Robohelp version 7. For some odd reason, in both of the "Topic List" and "Project Manager" pod. I'm unable to view content in a topic that has "DHTML" feature in the Design View. I'm able to