BW Team and access to R/3

In our organization we have a handful of people who manage BW infrastructure and create reports for the rest of the organization. Our Basis team does not allow us to have access to R/3. I personally feel that the BW should have access to view R/3 tables as well as run certain standard SAP reports. The ability to see the underlying data at it's source would be beneficial when there are problems with data loads. Also it would be helpful to be able to run standard reports to validate new reporting based on new infocubes.
My question is. As a general rule do BW teams typically have view access to R/3?

In many company they follow such policy due to below mentioned reasons,
Due to constraint User Licenses, Each company purchase Licenses from SAP on base of USER's Number e.g. 100 Licenses in R3 Production side. Mostly it's given to Functional consultant and END User's. So some Business can't afford to create USER ID for BW Consultant in R3. Instead that we require take help from Functional Consultant who will give the details about Table, Field as well approach require to follow for capturing the requirement.
According to it's right procedure because by doing it we understand their Domain, Also we will be in safer side as Functional Consultant have to do identify the source of Data as well as Validating Data.
But we should have Access of R3 Dev. or Quality
Regards,
Sushant

Similar Messages

Account Team Members and access to Open and Closed Activities

Is there not a way to allow account team members access to view other members on the teams activities?

If you are the owner of the pertinent Account, then for the other users on the Account Team, the Default Access Profile would be applicable, which you should change.
For the Account record type, the access level can be kept as anything (read only, read/edit or read/edit/delete). In the related information for the Account record type, have the access levels of Completed and Open Activities as View.
So, if you add the account team members in the Users section in the Account activities, the activities (appointments/task) would appear in each of the user’s calendars and tasks section.
Aditya

I have a private Adobe ID and I have a Lightroom Testversion running there! Now my university gave me access to Creative Cloud for Teams and I want to use my Lightroom catalogues with this ID! How can I do this?

I have a private Adobe ID and I have a Lightroom Testversion running there! Now my university gave me access to Creative Cloud for Teams and I want to use my Lightroom catalogues with this ID! How can I do this?

Hi,
thank you, it’s done! The Chat helped me! Now I cannot go into this forum anymore with my old password, but that’s not a big problem.
Best wishes,
Christian
Von: JimHess <[email protected]<mailto:[email protected]>>
Antworten an: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>>
Datum: Montag, 20. April 2015 18:38
An: Christian Kogler <[email protected]<mailto:[email protected]>>
Betreff: I have a private Adobe ID and I have a Lightroom Testversion running there! Now my university gave me access to Creative Cloud for Teams and I want to use my Lightroom catalogues with this ID! How can I do this?
I have a private Adobe ID and I have a Lightroom Testversion running there! Now my university gave me access to Creative Cloud for Teams and I want to use my Lightroom catalogues with this ID! How can I do this?
created by JimHess<https://forums.adobe.com/people/JimHess> in Photoshop Lightroom - View the full discussion<https://forums.adobe.com/message/7454915#7454915>

SAP Roles and Access for SAP Implementation team members

Hi,
Is it correct practice to give SAP_ALL role access for all SAP Implementation team members in Dev and QA?
If not, what is the correct practice?
Kindly let me know

Madhu,
It is NOT correct practice to give anyone SAP_ALL in any of the systems; not DEV, not QAS, and certainly not PRD. However, many implementation teams (and particularly consultants from SIs) insist that they cannot possibly do their jobs without it. This is completely incorrect as there are specific roles for them to use for that purpose. The only circumstance where it could be justified is if you require a special "firefighter" role - and even then, I would still be a bit doubtful.
You should also consider that once you have given someone SAP_ALL, they will fight tooth and nail to keep it. It also means that they probably are not testing the user roles correctly. Most of those that insist they need it simply do not understand the security issues and probably don't care.
Just think; if they have access to do soemthing that they shouldn't and then cause a big problem, are they the ones that will have to fix it or are they going to expect you to do it? If they expect you to clear up after them, then you have the right to insist on restricting their access to cause issues in the first place.
But I know just how demanding they can be....
Best of luck
Tony

PBC 10 user users/teams/roles and access data profiles

Hello experts,
couples of questions with regards to BPC 10 security
1) In PBC 10, version SAP NetWeaver , if a team or a user was created in BPC not in BW, can the created user/team has access to SAP BW? Can the created team/user be imported and assigned assigned rights in BW? Or , if I need a user who will have acces to both SAP BW and BPC , do I HAVE to create the user in SAP NetWeaver (BW) and assign rights?? or
2)
If the defined attributes are Currency=Euro: Read and Country=France: Write, then Entity102 is writable.
Assuming that a write access to Currency = Euro : Write produce the same output as in the above, How can ensure that I can give a write access on a dimension without having allowing the write access to the whole entity as in the above case?
Thanks
Jh

Hi John,
For your 1st question, to add a BPC user, you need to create BW user first on BW. Then add this BW user as BPC user. When you create a BW user, you need to assign two roles
/POA/BUI_FLEX_CLIENT, /POA/BUI_UM_USER.
Actually, once you created the BW user, you can use this BW user to log on to BW now, but this user has few rights, such as no rights to execute some t-code RSA1, etc. To make this BW user more powerful, you need to assign the corresponding rights directly on BW, not from BPC. The rights(Data Access profile or task profiles) added from BPC only works on BPC object, such as members, cube, etc.
Best Regards,
Charlie

Creating a chart in TFS showing test cases that pass and failed using lightweight chart in Team Web Access

How to you build a chart in TFS that show test cases results.
I'm using lightweight charts in Team Web Access.
In Team Web Access I go into my project, then I create test cases under the TEST tab and then run my test manually. Now I want to create a testing progress result chart. I go into the TEST tab, then click on test plan and notice that
there is no Chart tab.
Is this tab configurable or am I missing something?

To my knowledge, charts are only available for work item queries in TFS web access. If you want to generate test result charts, you can do that using the TFS reporting data in the data warehouse (if your administrator configured it when setting up TFS).
"You will find a fortune, though it will not be the one you seek." -
Blind Seer, O Brother Where Art Thou
Please Mark posts as answers or helpful so that others may find the fortune they seek.

Correct binding order in a Cluster with logical switches, NIC teams, and vNICs on the host.

I have seen many recommendations to set the network binding order on you Hyper-V hosts to something similar to:
Management NIC
Cluster NICs
iSCSI NICS
However, all of these recommendations are for scenarios where the NICs are all physical NICs in the host.
Using Server 2012 R2, I am building converged networks with logical switches, NIC Teams, and vNICs on the host. So when I go set the network binding order, I now have all these components to deal with as well. For example, on a 4 adapter blade,
I might typically have the following items in the binding order drop-down.
4 - physical NICs (2- teamed for the 1 virtual switch, the other 2 used for iSCSI)
1 - Team interface (Datacenter_Switch)
5 - vNICs (Management, Cluster, LiveMigration, iSCSI-1, iSCSI-2)
So, should you only worry about order of the vNICS (placed at the top) and let the other components just fall to the bottom of the list? This seems to be likely to me, since the binding order applies to service access to the resources, and the other
components are not being directly accessed by network services?
Or, should the order start out with the physical resources needed to access the vNICs, followed by any intermediate resources (switches or team interfaces, then the vNICS themselves, to ensure that the resources are available to the subcompnents accessing
them?
Any help would be appreciated.
Thanks.
-Tim Reid

If by 'network binding order' you mean the order set in the Advanced Settings of the Network Connections of the Control Panel, then the most important one is to make sure the domain network is at the top of the list. Whichever network is at the top
of the list is used first for auth functions. So auth functions perform best when the proper network is placed first in the binding order. After that, I don't know that it makes much difference at all. (If it does, I'm sure my statement will
start a lively discussion. <grin>)
. : | : . : | : . tim

OTPC Teams and SVN Repo -- cannot use the same SVN repo for different teams

Can one Subversion repository be used as the versioning repository for two teams?
I recently installed OTPC Server and client.
As the administrator, I created a Rally connection, and a Task connection, and a Subversion connection.
I created a team, and attached the three connections.
All worked fine.
Next I created a second team, attaching the three connections.
In the JDeveloper OTPC client, the Rally and Task connectors work for BOTH teams that I am on.
The subversion connection will not.
In the Team Navigator Panel, under the "Versioning" accordion subpanel, for one team it has a SVN connection, for the other team it says "Create Connection."
When I double-click on it, enter the repository information, and test read access, it says "Access granted."
When I press Okay to close the dialog it says:
"A repository connection with the supplied URL already exists."
Is this an intentional feature that one subversion repository cannot be used on both teams? Or is it a bug? Or is it my error?
Thanks,
Arie

the proxy env is ok in superuser env
➜ ~ git:(master) ✗ export | grep proxy
ftp_proxy=http://proxy.zte.com.cn:80
http_proxy=http://proxy.zte.com.cn:80
https_proxy=http://proxy.zte.com.cn:80
rvm_proxy=''
➜ ~ git:(master) ✗ su
Password:
[root@myhost jinleileiking]# export | grep proxy
declare -x ftp_proxy="http://proxy.zte.com.cn:80"
declare -x http_proxy="http://proxy.zte.com.cn:80"
declare -x https_proxy="http://proxy.zte.com.cn:80"

Authorization objet for the support team and message processer

Hi,
Is it possible to ristict access to the message processers for the field support team and message processer in crm_dno_monitor. Iwant to restrickt message processer should only change message processer field .
Regards
S.Manu

Hi manu,
in BADI ORDER_SAVE, Method PREPARE you can check for changes of ticket values and cancel the save process.
So you could check if the user is in partner function "message processor" and has changed the value in partner function "support team". If so, you could cancel the process, the change will not be saved and the user gets an error message!
Hope this helps,
Christoph
Edited by: Christoph Kronauer on Apr 1, 2010 10:20 AM

Assign tester to test case in Team Web Access

Hi,
In order to assign a tester to a test case in Team Web Access you have to right-click the test case and pick "Assign tester" from the context menu. This is straightforward, however, the only user shown in the appearing sumenu is myself, which is
not really helpful. Assigning the test case to a user other than myself is possible in MTM, so I'd assume this is not a permissions-related issue.
We're using TFS 2013 Update 3; the process template being used in this particular team project is Visual Studio Scrum 2013.3.
Thanks,
Andreas

Hi Andreas,
Thanks for your post.
If you want to use the “Assign tester” feature assign test case to other users, you need add other users or group in your Team group first, then you can see other users display in “Assign tester” context menu. Or you can double click test case to open it
in Web Access, then select user in Assigned To field for this test case.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Windows Server 2012 R2 NIC Teaming and DHCP Issue

Came across a weird issue today during a server deployment. I was doing a physical server deployment and got Windows installed and was getting ready to connect it to our network. Before connecting the Ethernet cables to the network adapters, I created a
NIC Team using Windows Server 2012 R2 built-in software with a static IP address (we'll say its 192.168.1.56). Once I plugged in the Ethernet cables, I got network access but was unable to join our domain. At this time, I deleted the NIC team and the two network
adapters got their own IP addresses issued from DHCP (192.168.1.57 and 192.168.1.58) and at this point I was able to join our domain. I recreated the NIC team and set a new static IP (192.168.1.57) and everything was working great as intended.
My issue is when I went into DHCP I noticed a random entry that was using the IP address I used for the first NIC teaming attempt (192.168.1.56), before I joined it to the domain. I call this a random entry because it is using the last 8 characters of the
MAC address as the hostname instead of the servers hostname.
It seems when I deleted the first NIC team I created (192.168.1.56), a random MAC address Server 2012 R2 generated for the team has remained embedded in the system. The IP address is still pingable even though an ipconfig /all shows the current NIC team
with the IP 192.168.1.57. There is no IP address of 192.168.1.56 configured on the current server and I have static IPs set yet it is still pingable and registering with DHCP.
I know this is slightly confusing but I am hoping someone else has encountered this issue and may be able to tell me how to fix this. Simply deleting the DHCP entry does not do the trick, it comes back.

Hi,
Please confirm you have choose the right NIC team type, If you’ve previously configured NIC teaming, you’re aware NIC teams usually require the assistance of network-side
protocols. Prior to Windows 2012, using a NIC team on a server also meant enabling protocols like EtherChannel or LACP (also known as 802.1ax or 802.3ad) on network ports.
More information:
NIC teaming configure in Server 2012
http://technet.microsoft.com/en-us/magazine/jj149029.aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

I am looking into Lightroom (Creative Cloud) to allow a Team Member access my Catalog to keyword search which images will work for our Social Media platforms.

I am looking at LR Creative Cloud to allow a Team Member access my catalog so she can keyword search which images will work for our social media campaigns. My catalog has both personal and business images (which are in separate folders), however, I only want them to access the business images. What is the best way to do this?
and a second question as I am new to the Cloud LR product. I am assuming that my images still stay on my external drive...how am I or her able to view these images if I am out of town on another computer?

My catalog has both personal and business images (which are in separate folders), however, I only want them to access the business images. What is the best way to do this?
I think the only way in Lightroom to make this happen is to use two catalogs, one for business and one for personal, and then prevent access to the personal catalog via putting it on a disk or location that your team member does not have access to.
I am assuming that my images still stay on my external drive...how am I or her able to view these images if I am out of town on another computer?
Situations like this require you to put the catalog file AND photos on the external HD and then move the external drive to whatever location and whatever computer is needed. An alternative is to put the photos on a network drive and the catalog file on a local disk and access the catalog locally and the photos via network, but that limits you to using a single computer.
I am looking at LR Creative Cloud to allow a Team Member access my catalog so she can keyword search which images will work for our social media campaigns.
As far as I know, this does not require Creative Cloud, nor does Creative Cloud help in this situation. Furthermore, if you are thinking about a situation where you and your team member have simultaneous access to the catalog(s) of interest, this is not possible in Lightroom. Lightroom is a single user application.
If you are interested in a true multi-use application, where more than one individual can access a catalog at the same time, you might want to look at Daminion. Note: I am not endorsing or recommending Daminion, as I have never used it; I simply point out the that it has the feature being discussed.

Inside of idm and access control products

Hello Friends,
For the past few months I was working on a blog where I shared my past experiences with the IAM products, New technologies and problems faced in the products at a conceptual level. I thought of sharing that with experienced team of technocrats like you. Please have a look into this and let me how how can I improve this.
blog URL --> http://identitycontrol.blogspot.com/
Thanks
idmguru

Frinends,
Visit my blog http://identitycontrol.blogspot.com to get inside working of the identity and access control products. My efforts here is to explain insides in a simple language.
Latest topic i added is "SAML in action"
Please post your comments also so I can improve the contents.
Thanks

How do I change a primary admin from Teams and remove the original primary admin?

I have added another admin to Creative Cloud for Teams, and need to change that user to primary admin, and then remove my Adobe account (the original primary admin) from the Teams group. Is it possible to do this?

Currently you cannot change the primary admin on a CCT membership. As a workaround, follow these steps:
Cancel the existing team membership: You can cancel the membership without any penalty. The accounts for team members change to trial mode. Members can still access their saved data in the cloud storage. To cancel the membership, click theChat Now button at the bottom of this page to initiate chat with a live agent.
Buy a new team membership; use the Adobe ID for the new primary admin.
Reinvite team members using the new primary admin account.
The team members have to accept the invitation and log in to the Creative Cloud Desktop app again. Their apps are activated under the new team account.
from adobe... basically... suck it up

Poor performance on admin console after adding 1k+ teams and member profile

We run v7sp3p2 (MS) now but even back on v5.1 see degraded performance in form of response times over 60 seconds when browsing security hierarchy in admin console after adding over 1000 teams and member access profiles. We need the granularity in access for our many users. Does anyone know any tricks to prevent the glacial and disappointing response times while maintaining the necessary security? This behavior reflects poorly on the product's scalability.
Thanks,
Erik

Sorin, I want to make sure I understand your recommendation.
First, we do have more than 1000 users. Each location has a unique team to which their users belong, and each of these teams has a member access profile with corresponding read/write access to the dimension member representing their location. The users at each location only view data for their own location.
Is your recommendation to use another interface besides the admin console for accomplishing security updates?
We have a custom package that uses an API to upload data files with mass updates to security assignments and definitions, but hesitate to use this method for mundane changes for add/remove/change just a few users as this method bypasses the domain validation we get on the front end wherein we can only add users to the domain they correctly belong to.
To dodge the risk of a bad user/domain matchup we'd like to use front end but it appears to not support our scale well.
Thoughts on a setting or configuration we could manipulate to resolve the poor performance would be great - what levers can we pull? If this is all the tool can support we just live with it and pay the cost in wasted man hours over the life of the product...

BW Team and access to R/3

Similar Messages

Maybe you are looking for