Building roles in BEx

Hi,
Please advise on how to build filters into a role for BEx in BI7
Thanks

Hi,
The requirement is for me to build a role that allows access to certain Queries, Planning Functions & Sequences, and Filters. Looking at my role from PFCG, in the Menu I selected other then added the respective type (e.g. SAP BW Planning Function or SAP BW Query URL). I am now not sure of what type of URL should filters be.
Please assist.

Similar Messages

I have 100 groups in planning for those 100 groups i want to build roles like interactive,view user,planner etc.for those how to change in export -import folder .xml file in that edit how to change user roles in that xml it will generate automatic id.h

I have 100 groups in planning for those 100 groups i want to build roles like interactive,view user,planner etc.for those how to change in export -import folder .xml file in that edit how to change user roles in that xml it will generate automatic id.how to do that in xml file ?

Thanks john for you are reply.
I had tried what you sad.I open shared service in that foundation project i had export shared service.after that in import-export file.In that role.csv,user.csv,group.csv.Like this file have.When i open user file added some users after i trying save in excel it shown messgse
I click yes and save the .csv file and import from share servie. i got error like this
am i doing right way john.or explain clearly

Builder role see only own app?

Can i have a confirm that if i have more Builder Role accounts every account see only the app that that have created (and not all app)?
Only Admin and DPS master licence account see all app! Confirm?
Really thanks!

I Neil, yes i understand but what is the benefit to have 1 or more builder account if i can see all.
Here we have client with more library linked to some client but we can not send builder account: the customers would see applications created for other clients, and this makes no sense! We would like a simple management: a builder account per customer.
How to do this setup?

ERROR: "You are not assigned to a role" in BEx

Hi,
I have a user BEXUSER. In PFCG, I have assigned this user to a role ZR_USER_ROLE.
However, when I tried to open a query in BEx Anlyzer through Open > Workbooks > Roles toolbar, I could not find any workbooks assigned to this user.
Next, I tried to open a query using Open > Queries toolbar, I chose a query and tried to click Enter in Role icon. However, I am prompted with a message saying "You are not assigned to a role".
How is this possible when I have already assigned this user to a role. I have checked PFCG and confirmed that the particular role contains this user. Can someone explain about this?
Thanks

I am getting this exact same error, and the values that I have set in my query developer's job role are the following :
S_USER_AGR
ACTIVITY = 01, 02, 06, 22
ROLE NAME = {list of roles that the user should be able to save queries to}
S_USER_TCD
TRANSACTION CODE = RRMX
The user still receives the "you are not assigned to a role" error message when pressing the "save to role" button for a workbook.
In the ST01 authorizations trace, I see that the user is FAILING the authorization check for S_USER_AGR, but is failing the check for role names that he / she not supposed to modify.
So those failures are good, but they seem to prevent from saving the workbook to any role ...
How can it be setup so that the user can save workbooks to roles that were inteded to be saved to, without getting the "your are not assigned to a role" error when trying ?

Text variable to be removed from the description on Roles in Bex Analyzer

Dear Experts,
I am using BI 7.0. I have text variables in the query description. When the queries are assigned in Roles, they are displayed alongwith the text variable. I need to change the description of the query only in Roles. I am successful in doing this change on portal. But, in Bex Analyzer, I tried changing the description of these queries in Roles, but still they are not changed. Strangely, I can see the new descriptions in Roles when executed through RSRT.
Can anyone please help me in resolving my issue.
Thanking you in advance,
Best Regards,
Pradnya Rane

Hi Parth,
Yes, I mean in 'Open Query' option. This is working in BEx 3.5, but not in 7.0.
Is this some missing functionality in BI 7.0?
-Pradnya

Taking over app/folio building role

Hi all,
My firm has a published DPS app that I will be assuming responsibility for. Previously, a colleague uploaded/published (under his email) the folios that I created and he then built the app.
I'd like to update the folios and the app, using my credentials -- email, .p12's, etc., and I'd like it to be as transparent to the end users as possible. To be clear -- I'd prefer that the app merely appear to the user as an update -- with previously published folios appearing as updates as well. Here's my thinking and please let me know if I've missed something;
Email - may not be possible to update folios using my email and still have them be linked to the app? I may have to continue to use his email creds.
.p12 - I should be able to rebuild/update the app using my .p12/certificates/mobileprovisioning files, etc. and it wont show as a new app as long as I use the iTunes Connect tool to update.
Does this sound about right? Am I forgetting something?
BTW, we are both on the Apple Dev account.
thanks
dw

So it is possible to update an existing app and folios, invisibly to the end user, using new credentials. Yes it's posible. When you update the app, existing users will get an update as soon as it's approved by Apple. When the update is downloaded, it'll completely replace the old app with whatever content is published from the new e-mail.
To do so;
Republish the exisiting folios under the new email, but you must use the same ProductID from the previous published version/email.
On the iOS dev site, create new profiles (dev and dist), under the existing AppID.
That sound right?
The previously published folios wont show in the updated app, because theyre tied to the old email, through the old app. So I should leave the old folios in place for users that havent upgraded, correct? Correct, the old folios will be replaced with whatever is published from the new e-mail. So, if there's any folio from the old e-mail that you want to present and still be downloadable after the update, those folios needs to be published with the new e-mail too.
Also, if your app is enabled for subscription, the same Shared Secret Key from your iTunes Conntect In-App purchase must be copy-pasted into your new e-mail account using the DPS account administration panel for the subscription to entitle existing subscribers. Making sure the same product ID's for the old folios from the previous e-mail is used. Also the subscription product ID should remain the same.

"Enter in role" button missing in BEx Analyzer 7

Hello all,
I cannot see the button/option to enter an existing query into an existing role. I simply do not see the button "Enter in Role" in BEx Analyzer 7. I have SAP_ALL / S_RS_EXPL_A / S_USER_AGR access.
I do not want to do this thru Designer or WorkBook.
Please help me identify if I am missing on anything.
Regards
Sanjyot

i have done it.. i have inserted query into the role.
Go to query designer and assign the queries into the role.
First you have assign a user into the role where you want to insert the queries. login with the userid then roles will be displayed in the open POPUP.
There click the enter to role tab and it will display the all the roles. you have to select the role to insert the query.
Hope this would help you.

BeX-Analyzer : no visible role and working-sheets

Hello experts,
after creating new working-maps under a role, i can't find it anywhere for the next day.
For example: After launch BeX-Analyzer 7.0 -- then open working-map -- then connect over BW/BI Developer-System -- then
roles. I can't find my saved user-working-maps or local objects who are saved one day before. They were under the "PFCG-created"
user-role : "example :Z_Role_External_".
When i open the map : QUERIES, i have the include for user-role and can manage and call the designed sheets
in my workaround.
In this case one more information that happens before this items. In the last week i had patched the BW-BI 7.0 with then following patches.
SAPKA70020
SAPKB70021
SAPKA70021
KIPYJ7K und KIPYJ7L
SAPKW70022
SAPKW70023
After this action i heard from this problem in BW-BI "No User-Role and no Test-working-maps" under my User-Profile.
Have anybody an idea to solve this problem ?
Thanks
Michael

Found this thread with an allegeded fix from SAP
Unable to see Roles in Bex Analyzer - even with SAP_ALL!

Bex-Role

Hi,
HOw can i create a new folder (Role) in Bex to place the reports.I don't need to create a a folder as a node to another folder...i want to create a new folder
Thanks

Hi Tony,
In order to save the reports, workbooks in a FOlder, you have to create a role, and in that role you have to create the folder that you want.
After that, you have to :
1)Open the report
2)Save the report
3)Choose the option "Role"
4)Select the new role, and it shows up the folder
5)Save
End
Asigns points if useful.
Regards

Role for a key user in BW

Hi gurus,
I want to build a role for my BW key users - they should be able to build queries in BEx Query Designer on all available InfoProviders and display the results.
Which authorization objects should they get?
Is there any standard role good for that?
Regards,
Dorota

hi,
below are some of the roles:
S_RS_RREDE: Reporting Developer on Development System
S_RS_COMP & S_RS_COMP1: Authorizations for using different components for the query definition. This authorization object is very important for reporting
regards,
Arvind.

Please Help PI Data Dependent Integration Builder Authorizations NOT Workng

Dear Friends / Experts,
I had spend many days and explored all Weblog and links on this website and implemented all the steps required to acheive Data Dependent Integration Builder Security and I am not successful so far. I am just giving up now - Please Help Me ---
As I said, I already read all the important Forum Links and SAP Web links and Followed Each and Every Step - service.sap.com/instguidesNW04 ® Installation ® SAP XI
Security Requirement - Data Dependent/Object Level Authorizations in XI / PI
In distributed teams or in a shared PI environment it might be necessary to limit authorization for a developer or a group of developers to only one Software Component or objects within a Software Component or to specific Configuration Objects.
Our Environment - PI 7.0 SP 16
Created a new role in the Integration Builder Design
u2013Add Object Types of any Software Component and Namespace
- Enable usage of Integration Builder roles in Exchange Profile
Integration Builder u2013Integration Builder RepositoryParameter com.sap.aii.util.server.auth.activation to true
Assign users to the newly created Integration Builder roles
u2013Create dummy roles in Web AS ABAP, these roles are then available as groups in Web AS Java
u2013Assign users to these roles
u2013Assign the Integration Builder roles to the above groups in Web AS Java
u2013Assign unrestricted roles to Super Users
Please help - How to validate whether Data Dependent Authorizations are Activated?
I am working with XI Developers and Basis Team and we did updated all the Required Exchange profile parameters.
Per this Document - User Authorizations in Integration Builder Tools - Do we need to update the server.lockauth.activation in Exchange Profile. When We updated, It removed Edit Access from all XI Developers in PI
In both the Integration Repository and the Integration Directory, you can define more detailed authorizations that restrict access to design and configuration objects.
In both tools, you define such authorizations by choosing Tools ® User Roles from the menu bar. The authorization for this menu option is provided by role SAP_XI_ADMINISTRATOR_J2EE. Of course, this role should only be granted to a very restricted number of administrators. To activate these more detailed authorizations, you must set exchange profile parameter com.sap.aii.ib.server.lockauth.activation to true.
The access authorizations themselves can be defined at the object-type level only (possibly restricted by a selection path), where you can specify each access action either individually as Create, Modify, or Delete for each object type, or as an overall access granting all three access actions.
http://help.sap.com/saphelp_nw04/helpdata/en/f7/c2953fc405330ee10000000a114084/frameset.htm
I was able to control display and maintain access from ABAP Roles, but completely failed to implement Integration Builder Security?
Are there any ways to check Whether Data Dependent authorization or J2EE Authorizations are activated?
Thanks a lot
Satish

Hello,
so to give you status of our issue.
We were able to export missing business component .
But we also exported some interfaces after that and we had some return code 8, due to objects still present in change list on quality system (seems after previous failed transports , the change list was not cleared completley...).
So now we have checked that no objects is present in the change list of quality system and we plan to export again our devs on quality system.
Hope after that no more return code 8 during imports and all devs transported correctly on quality system.
Also recommending to read that, which is pretty good.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/7078566c-72e0-2e10-2b8a-e10fcf8e1a3d?overridelayout=t…
Thanks all,
S.N

User Getting Errors when lauching Report Builder 3.0

All,
I have a native mode report server 2008 R2 and need to give Report Builder access to some of my power users. I've added a new Report Builder role with the following rights (view reports, view folders, manage models, consume reports) and added it to
site settings and give the role system user assignment. When users I assigned to the role come in the report manager portal, they can see the Report Builder app. icon on the menu. When they launch Report builder they are getting the error below. Thanks
for your help:
PLATFORM VERSION INFO
Windows    : 6.1.7601.65536 (Win32NT)
Common Language Runtime : 4.0.30319.269
System.Deployment.dll   : 4.0.30319.1 (RTMRel.030319-0100)
clr.dll    : 4.0.30319.269 (RTMGDR.030319-2600)
dfdll.dll    : 4.0.30319.1 (RTMRel.030319-0100)
dfshim.dll    : 4.0.31106.0 (Main.031106-0000)
SOURCES
Deployment url   :
http://dmzreportserver/ReportServer/ReportBuilder/ReportBuilder_3_0_0_0.application
ERROR SUMMARY
Below is a summary of the errors, details of these errors are listed later in the log.
* Activation of
http://dmzreportserver/ReportServer/ReportBuilder/ReportBuilder_3_0_0_0.application resulted in exception. Following failure messages were detected:
  + Downloading
http://dmzreportserver/ReportServer/ReportBuilder/ReportBuilder_3_0_0_0.application did not succeed.
  + The remote server returned an error: (401) Unauthorized.
COMPONENT STORE TRANSACTION FAILURE SUMMARY
No transaction error was detected.
WARNINGS
There were no warnings during this operation.
OPERATION PROGRESS STATUS
* [8/30/2012 11:44:25 AM] : Activation of
http://dmzreportserver/ReportServer/ReportBuilder/ReportBuilder_3_0_0_0.application has started.
ERROR DETAILS
Following errors were detected during this operation.
* [8/30/2012 11:44:25 AM] System.Deployment.Application.DeploymentDownloadException (Unknown subtype)
  - Downloading
http://dmzreportserver/ReportServer/ReportBuilder/ReportBuilder_3_0_0_0.application did not succeed.
  - Source: System.Deployment
  - Stack trace:
   at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
   at System.Deployment.Application.SystemNetDownloader.DownloadAllFiles()
   at System.Deployment.Application.FileDownloader.Download(SubscriptionState subState)
   at System.Deployment.Application.DownloadManager.DownloadManifestAsRawFile(Uri& sourceUri, String targetPath, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)
   at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestDirectBypass(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, SubscriptionState& subState, IDownloadNotification notification, DownloadOptions
options, ServerInformation& serverInformation)
   at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestBypass(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, SubscriptionState& subState, IDownloadNotification notification, DownloadOptions
options)
   at System.Deployment.Application.ApplicationActivator.PerformDeploymentActivation(Uri activationUri, Boolean isShortcut, String textualSubId, String deploymentProviderUrlFromExtension, BrowserSettings browserSettings, String& errorPageUrl)
   at System.Deployment.Application.ApplicationActivator.ActivateDeploymentWorker(Object state)
  --- Inner Exception ---
  System.Net.WebException
  - The remote server returned an error: (401) Unauthorized.
  - Source: System
  - Stack trace:
   at System.Net.HttpWebRequest.GetResponse()
   at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
COMPONENT STORE TRANSACTION DETAILS
No transaction information is available.
Francis, MCTS: BI 2008, MCITP: BI 2008 Stay Thirsty My Friends

Hello,
I have similar issue and my side report server is configured in SharePoint integration mode. I already have the FQDN configured for report manager but still it fails when the end user is trying to access the report builder 3.0.
Please suggest what could be the issue.
Thanks
Mahesh
Thanks Mahesh Dhinge
Additional issue details
PLATFORM VERSION INFO
Windows    : 6.1.7601.65536 (Win32NT)
Common Language Runtime : 4.0.30319.18444
System.Deployment.dll   : 4.0.30319.18408 built by: FX451RTMGREL
clr.dll    : 4.0.30319.18444 built by: FX451RTMGDR
dfdll.dll    : 4.0.30319.18408 built by: FX451RTMGREL
dfshim.dll    : 4.0.41209.0 (Main.041209-0000)
SOURCES
Deployment url   :
http://server.domain.com/_vti_bin/ReportBuilder/ReportBuilder.application?model=http://server.domain.com/XXX%20Report%20Models/XX%20Report%20Models/XXX%20XXX%20Report%20Model.smdl
ERROR SUMMARY
Below is a summary of the errors, details of these errors are listed later in the log.
* Activation of
http://server.domain.com/_vti_bin/ReportBuilder/ReportBuilder.application?model=http://server.domain.com/XXX Report Models/XXX Report Models/XXX XXX Report Model.smdl resulted in exception. Following failure messages were detected:
  + Downloading
http://server.domain.com/_vti_bin/ReportBuilder/ReportBuilder.application?model=http://server.domain.com/XXX Report Models/XXX Report Models/XXX XXX Report Model.smdl did not succeed.
  + The remote server returned an error: (500) Internal Server Error.
COMPONENT STORE TRANSACTION FAILURE SUMMARY
No transaction error was detected.
WARNINGS
There were no warnings during this operation.
OPERATION PROGRESS STATUS
* [9/19/2014 4:42:13 PM] : Activation of
http://server.domain.com/_vti_bin/ReportBuilder/ReportBuilder.application?model=http://server.domain.com/XXX Report Models/XXX Report Models/XXX XXX Report Model.smdl has started.
ERROR DETAILS
Following errors were detected during this operation.
* [9/19/2014 4:42:16 PM] System.Deployment.Application.DeploymentDownloadException (Unknown subtype)
  - Downloading
http://server.domain.com/_vti_bin/ReportBuilder/ReportBuilder.application?model=http://server.domain.com/XXX Report Models/XXX Report Models/XXX XXX Report Model.smdl did not succeed.
  - Source: System.Deployment
  - Stack trace:
   at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
   at System.Deployment.Application.SystemNetDownloader.DownloadAllFiles()
   at System.Deployment.Application.FileDownloader.Download(SubscriptionState subState)
   at System.Deployment.Application.DownloadManager.DownloadManifestAsRawFile(Uri& sourceUri, String targetPath, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)
   at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestDirectBypass(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, SubscriptionState& subState, IDownloadNotification notification, DownloadOptions
options, ServerInformation& serverInformation)
   at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestBypass(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, SubscriptionState& subState, IDownloadNotification notification, DownloadOptions
options)
   at System.Deployment.Application.ApplicationActivator.PerformDeploymentActivation(Uri activationUri, Boolean isShortcut, String textualSubId, String deploymentProviderUrlFromExtension, BrowserSettings browserSettings, String& errorPageUrl)
   at System.Deployment.Application.ApplicationActivator.ActivateDeploymentWorker(Object state)
  --- Inner Exception ---
  System.Net.WebException
  - The remote server returned an error: (500) Internal Server Error.
  - Source: System
  - Stack trace:
   at System.Net.HttpWebRequest.GetResponse()
   at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
COMPONENT STORE TRANSACTION DETAILS
No transaction information is available.
Thanks Mahesh Dhinge

Change description of Bex Workbook in 2004s

How do we change description of the workbooks? Change description option from Bex analyzer is not available.
How would one move or copy a query / workbook from a role to another role ( There was an option with 3.5 in Bex browser and Bex Analyzer)
Option of saving a workbook and query to a role from Bex Analyzer > Open screen is not available
Rgds
Dinesh

Workbook settings -
<a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/54/a493f7256b43698191a2623e5a0532/content.htm">http://help.sap.com/saphelp_nw2004s/helpdata/en/54/a493f7256b43698191a2623e5a0532/content.htm</a>
Global Settings-
<a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/f1/0a551ce09411d2acb90000e829fbfe/content.htm">http://help.sap.com/saphelp_nw2004s/helpdata/en/f1/0a551ce09411d2acb90000e829fbfe/content.htm</a>
Hope it Helps
Chetan
@CP..

Assigning a Report to Role

Dear All,
I know many times this question has been asked and answered, but even after following those threads I am not getting solution (of course problem is at my side for sure but that needs to be identified).
I have designed a BEx query , saved it and published it to a role from menu --> Go to Publish --> To Role (say role X). And transferred it to PROD. But still that report is not available in that role. Users who are having this role are not able to view that report.
I followed the steps to check a role for that report.
SUIM --> Authorization --> By Value --> Authorization Object 1 = S_RS_COMP --> RSZCOMPID - Name(ID) of a reporting component = my report name
I can not find my role x over here.
I followed the steps to assign a role to that report.
PFCG --> Entered my role name (say role X) and change --> Authorization --> Change Authorization Data --> Business Information Warehouse --> Business Explorer Components --> Added my reports to Name(ID) of a report component --> Generate and Save it.
But still that report is not available in that role and users can not see that report.
Please guide.
PS: followed threads
Thread Name
Description
assigning bi report to particular role
It explains about how to assign a role to a report. Open query designer, open your query in it, for to menu bar, click on query, go to publish and say publish to role...
BI Folder Roles
This thread is basically for folder role.
Issue while adding BW reports to role menu | SCN
It explains about PFCG.
adding reports(queries) in BI to a role in bex ... | SCN
About roles for queries and workbooks.
Steps to add Query to a role (SAP BW)
A very good step by step explanation for adding a query to role.
Adding report (query & workbook, templates) in roles
Best explanation of two ways to add a report in a role.
Add BW Query into role
Explained easiest way i.e. Open query designer, open your query in it, for to menu bar, click on query, go to publish and say publish to role...
AUTHORIZATION FOR BI REPORTING - Business Intelligence (BusinessObjects) - SCN Wiki
Perfect step by step guidance for authorization for BI reporting
SAP BW BI - PFCG - Añadir Libros en los Roles.avi - YouTube
The simplest video which explains how to use PFCG.

When I follow your steps.
I got an error.
"You do not have the authorization for components report_name".
"Incorrect call of OLAP layer CL_RSR_OLAP;error in BW-BEX-ET()"
Futher it is showign me
Diagnosis
You do not have the authorization for the selected component.
System Response
The selected component cannot be edited.
Procedure
lease speak to the person responsible for authorization, if you require authorization for the editing of this component. The function is protected by the object "Business Explorer - components" with the following fields:
InfoCube ZSD_IS02
Type of a component REP
Component ZSD_IS02_DV_Q001
Activity 16
Message Number BRAIN 800
Please help.
Message was edited by: BI DEVELOPER

Workbook in role but not on user menu

Hi All
I have a workbook saved under a certain role menu. The workbook apeears fine under the role when using BEx.
However, the workbook has disappeared from the User-Menu in SAP-GUI.
I have tried to refresh the user menu, change and re-save the workbook in the role (via BEx and via PFCG), I checked report: RSWB_ROLES_REORG but nothing helped.
I searched for notes but nothing seemed relevant.
Any help?
Thanks,
Yaniv

Hi,
The issue because of MS 2007. it would not be compatible sometimes.
for that you have install the latest patch for the BEx and dotnet framework on your desktop.
it would be available in the service market place.
or
We have had several issues similar running SAP BW 7.0 with BEx 3.5 workbooks after upgrading to Excel 2007. There are several SAP Notes concerning various Excel 2007 related errors. Most of these seem to be bundled in the just-released SAP BEx 3.5 Add-On Patch 7 for SAPGUI 710, so my advice would be to download this patch if you have not done so already.
Regards,
Marasa.

Building roles in BEx

Similar Messages

Maybe you are looking for