BPC security - task profile definition

Hi all,
I am trying to create a task profile which contain only the 'AppSet' task under 'Administration' interface. Here are the situations I faced: (I am using the default user when setting up BPC Server which has all authorizations)
1. If I checked 'System Admin' in Step 1, I can not remove the other task 'Define Security' in Step 2.
2. If I did not check any existing admin role, I can not even see the 'Administration' interface in Step 2.
May I ask your opinion on how could I resolve this?
Thank you all in advance.
Eric Lin

Eric,
You want to create a brand new profile with every task available in BPC.
I had the same problem and found SAP table in BI. I think if you modify this table, you can manage the security as you want but I didn't try this method.
In sap BW, transaction se16, all the security table begin by UJE_ :
  UJE_TASK_SEC u2013 Task table (Application, Dimension,u2026),
  UJE_TASK u2013 Task Interface (Administration, Audit, u2026),
KR,
Samir

Similar Messages

  • BPC 10 Microsoft Security - Task Profile

    My client wishes to assign the ability of Dimension member maintenance to only the System Admins.  I have moved the Dimension Member Maintenance out of the available tasks for the other group.  However, the other group may still add and delete Dimension members.  For example, Account member.
    Has anyone experienced this problem?
    Thank you

    Hi Sean,
    by default dimension mantaince is assigned only to SystemAdmin, if you have other groups that can modify dimensions simply eliminate "Manage Dimensions" and "Manage Models" from their security task profiles.
    Regards
         Roberto

  • Security - Task Profiles - Task Description --- Where to be found?

    Hello there,
    I have been searching my fingers tips bloody! ... Many BPC 5.1 and 7.0 documentation, dont bother mentioning ANY Description for the any tasks under the task interfaces.
    May somebody please post (copy / paste) DESCRIPTION, what exactly each TASK means and / or  gives access to?! --- Security would like to know for certain!
    It's much appreciated.,
    Maximilian
    Edited by: Maximilian Weisheit on May 12, 2009 12:15 AM

    Hi peter,
    thank you for your note. - I went back into the SAP Library File that came with the BPC 7.0 NetWeaver version. And surprisingly, there was no TASK PROFILE DESCRIPTION Table to be found. I went through every search result coming from the "TASK" search. No such table.
    Do you mind taking a moment to Copy / Paste the table you referring to in the forum post here. Alternatively you may contact me through the profile contact.
    Eitherway, It is highly apreciated, as I am not able to access a MS BPC Help File from here.
    Kind Regards,
    Maximilian

  • Differences between security tasks in BPC 7.0 MS and BPC 10.0 NW

    Hi all,
    I am on a migration Project from BPC 7.0 MS to BPC 10.0 NW and I have to migrate task profiles.
    The problem is that while uploading the task profiles from a .csv, I realized that there are differences between the tasks to assign in source and destination system. Sometimes the task that exist in MS doesn't exist in NW or there are new tasks in NW that doesn't exist in MS version.
    I am attaching an Excel sheet with the comparison between both systems.
    The question is simple, how can I move these task profiles on a semiautomatic way? Do you know about any documentation about the differences between security task in MS and NW?
    Thanks in advance

    we can use flat file upload and custom data manager package for loading data from BI to BPC

  • BPC Task Profile description

    Hello everybody,
    Does anyone know where can i find the description of the activities assigned to each task profile in BPC?
    Thanks in advance!
    Nidia Olguí

    This is not true at all.  BPC 7.5 MS has additional tasks that are not defined in the documentation referenced above and others that have been renamed from what the 7.0 MS documentation states.
    New for 7.5: ManageDrillThrough, EndUserDrillThrough, ManageEVDREDefaultStyle, RemoveBPFInstances, ReopenBFPStep, ResetBPFInstances, PackageExecute, ManageTransport.
    Renamed in 7.5: Lockings now called Manage Data Locks & Work Status
    Gone from 7.5: JournalReport
    Good luck finding what all this stuff does.  It would be nice if SAP updated their documentation or at leats made it clear where their customers can find it.

  • How to further restrict the task profile 'dimension' to selected dimensions

    Hi All,
    We have a dimension which we require users to maintain their own master data. We have used the secondary admin task profile which provides default access to the task 'dimension'. THis allows that user access to the BPC Admin console and also to the dimension to maintain dimension members. However, we wish to limit their access to only certain defined dimensions & not give them access to all dimensions. I have tested using this task profile together with a member access profile to limit the secure dimensions for an application, however my understanding is that member access profiles will not restrict access once a user has logged into the BPC Admin Client...i.e the member access profile restricts the ability to read/write to 'facts'/sign data from a BPC front end tool, EG excel.
    Any ideas much appreciated as to how to acheive this,
    Glen

    Hi,
    As you said for maintaining dimension members, you had to assign a task to the task profile. However, assigning this task will allow the user to modify any of the dimensions.
    You cannot give authorization to allow only selected dimensions. BPC doesnt have this feature. Either the user can modify all the dimensions or none of them.
    Hope this helps.

  • BPC Security Migration

    I'm wondering how people migrate security between environments i.e. production to development.
    Security is typically quite different in development vs. production.  Some users will have more access in development and some users will not be active in development.  Also in some cases, users may have different id's because they are on different domains.  This means that there are many changes that need to be made before the development environment can be used.
    In version 4 of OutlookSoft, security was all contained within an Excel workbook which made it very easy to apply these types of changes very quickly.  For example, there was a column that indicated whether or not a user was active.  You could very quickly go through this column and change users from Yes to No.  Also, security could be processed all at one time.
    In BPC, there are many dialog boxes to go through which is time consuming.  There does not seem to be a way to flag a user as inactive.  I notice that the field still exists in the database table but it is not in the UI.  Also, it seems that each of the Task Profiles, Member Access Profiles, and Teams needs to be saved whenever an appset is restored or else you will get errors.  There does not seem to be a way to process the security so you do not have to visit each of these dialog boxes.
    Is anyone automating this type of migration by modifying the database tables directly instead of going through the UI?

    Furthermore, in the corporate environment we are in today (i.e. SOX, Enron, etc.), current customers would be very WEARY to implement a "workaround" (not endorsed by the vendor) to migrate security settings into a live production environment.
    I suggest you send an enhancement request via the SAP Support portal and ask that something like this be implemented in the next release of BPC.
    As a starter here are some security functions that I think should be automated via a menu option in the Security UI of BPC:
    Importing Security Information
    -Import ALL Security info.
    -ImportUsers
    -ImportUserGroupNames
    -ImportUserGroupMembers
    -ImportPrivileges
    Exporting Security Information
    -Export ALL Security info.
    -ExportUsers
    -ExportUserGroupNames
    -ExportUserGroupMembers
    -ExportPrivileges
    Deleting Security Information
    -DeleteUsers
    -DeleteUserGroups
    -DeleteUserGroupMembers
    -DeletePrivileges
    Regards,
    John

  • BPC Security DOcumentation

    Hey folks,
    I´m quite new to BPC 7.0 SP01.
    I read a lot about Applications Sets, Applications, Dimensions etc.
    Now, the next (and last menu) on the left hand in the AdminConsol is "Security". Unfortunately, I can't find any documentation about this.
    This menu has 4 subemenus:
    1) Users
    2) Teams
    3) Task Profiles
    4) Member Access Profiles
    I think, 1) and 2) are self-explanatory. But what about 3) and 4)??? My problem is, that we only con login with bpcadmin to our AppSets, but not with our user-specific users? Is there any access which need to be granted in each AppSet to all users? And what are 3) and 4)?
    Any documentation and help will be rewarded!
    Thanks a lot!

    Christian,
    I could send you the doc about security if i have your email...
    However, I will explain quickly how to set it up:
    Basically you have Tasks, Users, Teams and MemberAcess profile. (MAP)
    Task answers to the question : WHAT. What does the user/team is allowed to do...
    MAP: answers to the question : WHERE. In wich Cube for which entity, which category...
    User/Teams answers to the question : WHO. The best is to give your rights to the teams. Never to users. Then you drop the users in the teams you want.
    You create a MAP for the cubes you want the users to work on...
    Lets say I create a MAP for Japan and in Entity i would select only Japanese entity..
    Then you create a MAP for CATEGORYREADANDWRITE and you select category and all categories if you want it only to write on all categories.
    Note that categories and Entities are 2 seperate MAP.
    Then you create a Task by selecting the task you need: You will find some information about the tasks in http://SERVERNAM/OSOFT/OSOFT/Help/Admin/Task_profile_descriptions.htm
    Personnaly I create a task for SUBMIT DATA,  a task for FILEACCESS and a task for DATAMANAGER...
    Then I create a Team called SUBMITDATA and I give it the task Submitdata. Not any MAP.
    Then I create a Team called Japan lets say with no task but with JAPAN in MAP.
    THe users is gonna be in the team JAPAN, SUBMITDATA and CATEGORYREADANDWRITE
    Hope this helps
    Nic

  • BPC Security - Edit Logic Script

    Trying to find the security task that give edit access to Logic Script(BPC 10 NW SP9). Is this combined with the "Edit Packages" Data Manger task?
    Thank you.
    Regards,
    Vinod Swarnapuri

    Vinod,
    I think the one you are looking for is Manage Business Rules.
    Akos

  • Manage dynamic hierarchies - Task in Task Profile

    Hello BPC Cracks,
    I have a problem to assign a user/team the rights to manage dynamic hierarchies (DHE), anybody knows witch task should I assign to the user/team in Task Profile. (In the admin guide there is no entry for this topic). The Task Profile has already the Task u201CSubmitDatau201D and the menu eSubmit appears in the Excel front end.
    Currently I have a member access profile, with rights for the ownership dimension read and write for all entities, but in the menu eSubmit the entry manage dynamic hierarchies does not appear.
    Thanks,
    Biagio

    Thanks Biagio,
    The Note 1509322 worked for me. Ta
    I applied it to a custom task profile that already had various specific tasks assigned to it (Just not Business Rules)
    By adding Secondary Admin in the checkbox, it wiped out my original specific tasks, which I then had to remember and re-apply.
    All working now.
    Regards
    Nick

  • Task Profile-Worksheet Dimension Lock Options

    Setting the security to allow a user to use the Worksheet dimension lock options for a report is simple enough.  What I can't find is the lowest level of security settings needed to allow it for Input templates.  I have users with task profiles allowing them to edit this for reports, but if they open an input template in the same application, then the option goes away.
    Any help would be appreciated.  Hopefully I don't have to make them some form of admin.
    Thanks,
    Jason

    OK, so let me try to explain it differently.  The choice a user can select in the Action Pane is called "Worksheet dimension lock options".  This allows a user to lock down the current view for a worksheet.  Visually, this results in the dimension selection in the current view becoming greyed out.
    Controlling security to this feature for report templates is done via a task profile using AnalysisCollection-ManageTemplate.  Granting this security does NOT allow the user this same feature for input templates.
    What task needs to be assigned to a task profile to allow the "Worksheet dimension lock options" choice in the Action Pane for input templates?
    Thanks,
    Jason

  • BPC security can be used in SQL Reporting Services?

    Hello,
    We are trying to implement SQL Reporting Services(RS) as web reports of BPC.
    Is it possible to use BPC security user access control in SQL RS?
    We know that SQL RS user access can be managed by windows domain, but we like to use BPC security as SQL RS user control.
    Thank you in advance.
    Sam

    Hello,
    We are trying to implement SQL Reporting Services(RS) as web reports of BPC.
    Is it possible to use BPC security user access control in SQL RS?
    We know that SQL RS user access can be managed by windows domain, but we like to use BPC security as SQL RS user control.
    Thank you in advance.
    Sam
    ==================================================================
    Hi Sam,
    Could you be more specific on what you are going to do with RS?
    BPC, as you know, uses Windows AD. If you intend to use RS in BPC, you have already introduced Windows AD and BPC access security for RS.  But only given RS report is eligible in this case.
    If you want to make a report that refers to business data of BPC, and need to pass argument as query parameter such as what category, what entity, not possible actaully, no way to make it happen with standard feature of BPC. But you can think of possibility of customizing and need to find out how to pass the argument for a user(read ACS table containing security info).
    Reg. the reporting tool, if you are using 7.5, BO products is aligned well. Xcelsius and Voyager will be a tool for your requirement.
    Regards,
    YH Seo

  • How to add "Team leader" field in standard BPC security report

    BPC Expert,
    We are using BPC MS 5.0 version.
    There is a checkbox in the security setup to make someone a "Team Leader" when you add him/her to a team and this checkbox determines who can post data and who cannot.  When we run the user report we see which team the user is in but we do not have visibility to whether or not they are a "Team Leader" which is what business owner needs to see to approve user access.
    I figured out "dbo.userteamassign" is the table which hold team leader value. Can anyone please tell me all the steps of adding team leader field in the standard BPC 5.0 security report.
    Thanks,
    Ketan

    Roberto,
    Thanks for the response. I know associated steps to declare business user as a team leader but my original question is "how to add a column in standard BPC security report that says who is team leader or who is not".
    Do you know the Dtx package that is responsible to supply the data to Standard BPC security report? We can enhance standard data package to pull/display extra "Team leader" column in standard security report.
    Appreciate your inputs.
    Thanks,
    Ketan

  • Has no profile definition

    Hi All,
    when I am running LM01 , it gives the error : user 'abc' has no profile definition.
    Please help
    thanks in advance,
    rgds,
    Madhuri

    its checking in the table :LRF_WKQU using FM : L_USER_DATA_GET
    some thing related to warehouse users.
    from which Tcode this table gets updated?
    rgds,
    Madhuri
    Edited by: madhuri sonawane on Nov 3, 2008 12:51 PM

  • User SAPUSER has no profile definition

    Hi
    i am unable to run RF transaction(LM00, LM01, LM71, LM*) in SAP. I am getting
    following error
    "User xxxxxx has no profile definition"
    Message no. LF192.
    Any help would be appreciated.
    Regards
    Raju

    Hi,
    If these transactions are working for other users, RF Queue Management should be missing for your user id in the configuration.
    Maintaining your user id in the RF Queue Management should resolve the issue.
    SPRO -> IMG -> Logistics Execution -> Mobile Data Entry -> RF Queue Management -> Assign Processor to Queues
    Hope this helps!!!
    Thanks,
    Hemanth Nandigam

Maybe you are looking for