Cannot see BEx Query in user role profile in BEx query designer

I assigned several BEx query objects into user profile menu via t-code PFCG first.
Then expected - when I need and open them in BEx query designer I could find them after clicking "Role" button in "Open" window. But unfortuantely I'm not able to do that.
Do I miss anything to archive that? Is other customizing activity else neccessary?
Thank you for any suggestion.

Hi Brad.Ma,
If you can open query from Area "button", after that, you publish it to roles you want assign.
You try generate Authoriation in Role in Tcode PFCG.
Hope help you to solve the problem.
Dao
Edited by: xuandao_sap on Sep 20, 2011 3:33 AM

Similar Messages

Trying to understand "User/Role/Profile Synchronization" and Batch Analysis

Hello,
Im trying to understand what exactly and from which tables these jobs are copying to which tables in CC. I have a understanding that these jobs are moving also deleted roles from backend. This is causing unnecessary delay to long lasting job.
I would appreasite if some one could explain the logic behind these jobs. What the fullsync and incremental is reading ? What kind of changes are causing a role/user/profile to be included to the full and incremental jobs?
How the incremental analysis logic is built ?
br Janne

Janne,
In my current implementation we are going for an offline risk analysis due to the heteregoneus system landscape of our client (several SAP and non SAP systems and several SAP systems under 4.6C). Eventhough within our approach we don't perfrom the backend synchronization (we use CC data extractor to pull data from backend into CC) hope the following info could hel you:
The tables such jobs you mention access to, are all the SAP backend system tables related with users, roles, profiles, action and permissions. If you check the data mapping appendix of the "user and configuration guide for 5.2" you will see all the data that CC retrieves. For instance, in order to extract user info (UserID, FName, LName, Email, Phone, Email, Department) tables USR21, USR02, ADRP, ADR6 and ADCP must be accessed.
In terms of CC tables:
VIRSA_CC_SYSUSR >> UserIDs and Systems ID relationship
VIRSA_CC_GENOBJ >> User, Role and Profile master data
VIRSA_CC_GENACT >> User-action, role-action and profile-action data
VIRSA_CC_GENPRM >> User-permission, role-permission and profile-permission
VIRSA_CC_SAPOBJ >> Action-permission
VIRSA_CC_OBJTEXT >> Objects descripcions (ACT, PRM, FLD, VAL, ORG)
Hope this helps.
Regards,
Imanol

Solution Manager 4.0 Solution Monitoring User -Roles-Profiles for Satellite

Hi All,
I have installed Solution Manager 4.0 (OS -Linux ,Database - DB2) .
Now i need to connect solution manager to the R/3 4.6C
Satellite Systems (DEV, QAS ,PRD) for Solution Monitoring
and Service level Reporting .
I have read the configuration guide , but unable to get clear idea .
1) what users (alos type of user -Dialog , Service, Communication etc) do i need create in DEV , and Test in QAS for solution Monitoring .
2) what exact roles /profiles need to be assigned to these users in satellite systems .
3) what users/roles /profiles needs to be done in SOLMAN system
i have applied all the required plug ins and support packs
in satellite systems and solman 40 ..
Please advice . Your response will be a great help for me .
Satish

Hello Satish,
Just clarify, if u have meant connecting the satellite systems for EWA reports to be precise. Early watch Reports. If its is the case, then repond so that i can putin my inputs which may be helpful for you in this config.
Rgds,
Sri

Function module to modify the user roles & profiles

Hi All,
I am working on user maintenance and i need a function module to modify the user roles & profiles.
Thanks in Advance.
Phani.

i used the below fms
BAPI_USER_ACTGROUPS_ASSIGN for assigning the roles.
delete the profiles of the user qnd assign the profiles to the user:
BAPI_USER_PROFILES_DELETE
BAPI_USER_PROFILES_ASSIGN
i used the above FMs for my requirement.
Regards,
Phani.

Compliance Calibrator 5.2 user/role/profile sync

I have run into an issue with a user. Where the user is getting flagged as having risks associated in basis for having a combination of transactions. Under CC it is saying that she has S_Develop Auth Obj with Activity 1 and 2. However when we check the user in R3 all of her profiles and roles that have a Basis associated and have the auth object she has activity 3. So the information is not synchornizing properly.
Thanks for any help

when was the last time you ran a user/role/profile synchronization or a batch risk analysis for this user ?
In case you need more info, check : https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/50cd7177-5c22-2a10-8cba-8e0c64bc4ea8
Regards.

Cannot see BEx Query in Creating Universe Connection

Hi,
I have a BEx query based on Multiprovider
I did check the box "Allow External Access to this query" from "Release for OLE DB for OLAP".
When I come to Designer create a connection, that query does not show up.
This has happened with some other query create on that Multi Provider too.
I checked the query for operators.
Note: Queries containing formulas with the operators %RT, %CT, SUMRT, SUMCT and LEAF cannot be released for OLE DB for OLAP. Mentioned in
http://help.sap.com/saphelp_nw04/Helpdata/EN/07/0ab63c71f41d5ce10000000a114084/content.htm
I cannot explain why.
What could be possible reason?
Thank you,

Check to make sure the BW role that is used has auth obj S_RS_COMP that provides Display access to the InfoProvider that your query is built on. The userid that runs the Bex query would also needs Execute access to that query. You may need to get your SAP security person to run a trace when you start designer and try to create your connection if you find that your BW role already has the auth I mentioned.
SAP made a recent change with 7.0 SP22 / 7.01 SP5 that applied BW security to the display of queries in the Designer. We could no longer see out BEx quereis in Designer after we applied SP22 until we added Display access to the role we use for our Business Objects service acct we setup.
From SAP Note 1364715 - MDX: Authorization check of BEx queries
Symptom
You use the BAPI "BAPI_MDPROVIDER_GET_CUBES" to read the BEx queries
available in the BW server that have been released for OLE DB for OLAP
(ODBO) (indicator "Allow External Access to this Query" is set in the Query
Designer).
Authorizations are ignored.
Cause and Prerequisites
The authorization check is ignored.
Solution
The authorization check is performed for the user that calls the BAPI. If
an RFC is used to call the BAPI, the check is performed for the RFC user.

User, Role, Profile Synchronization Job Fails

Hi Gurus,
When I am scheduling a job the User, Role, and Profile Sync. job fails giving an error
"Cannot assign a java.lang.String object of length 53 to host variable 5 which has JDBC type VARCHAR(40)."
This happens when the synchronization happens with a portal system. We dont have a ruleset for the portal system, So if I put in a "*", it includes this system and results in the error, If I manually select all other system, it works fine. Is there any way to remove this error so that I can schedule the jobs without having to select every system manually.
Regards,
Chinmaya

Hi,
As per my knowledge, in the Portal system, you should perform only user sync. Roles/profile sync will not work since portal will have workset roles.
Please refer SAP Note 1168120, which may help you to understand the limitations
Hope this helps!!
Rgds,
Raghu
Edited by: Raghu Boddu on Nov 4, 2010 7:39 PM

Copy user roles/profiles : Su01

Hello,
I want to copy user roles /privileges from one user to other?
how do we do this and which user can do this ? my pisuper does not seem to have authority to copy user profiles from one user to other?
Thanks

Try to Copy the user(Src user to Target user) from SU01 by logging in your user. When it displays authorization error, open a new Session of SU53. It will tell you the missing authorization objects. Add those authorizations to your user & you will be able to copy Users using ur userid.
If you want to keep it simple.. Give yourselves SAP_All. You can do whatever you want.
Copying Users
http://help.sap.com/saphelp_nw04/helpdata/en/52/6711c5439b11d1896f0000e8322d00/content.htm
Regards,
Siva Maranani

RAR: Best strategy for users/roles/profiles synchronization

Hi all,
Assuming that:
1) we will be never interested about profiles risk analysis (just users and roles)
2) roles risk analysis will be run first and after sometime (threee weeks) we will run it for users.
and we will run batch risks analysis:
Question 1) Is it possible to synchronize just roles and do it for users just when we want to execute risk analysis for them? Or is a best practice to synchronize always for users/roles and profiles eventhough risk analysis will not be done for all three?
Question 2) If we execute just full sync and full risk analysis, users/roles or profiles deleted in backend between executions are also deleted from DB? or removal takes place only when executing incremental sync?
Many thanks in advance. Best regards,
Imanol

Hi Imanol,
Answer Q1: Yes, you can just select user and roles for the snych and risk analysis. Go to configuration-background jobs - shedule job. If you don't run risk analysis for profiles, you shouldn't sync and select them.
Answer Q2: Both, the Full risk analysis will alwaly update your DB. I will recommend you, to do this job in some periodic times. The incremental sync job will as well update your DB, if anything changed in the backend system. Normally your are going to run your daily or weekly jobs with this selection.
Thanks,
Martin

XIUSER - Service users role/profile at R/3 system

All,
Currently, we have the following scenarios
1) IDoc to XI to 3rd Party System
2) 3rd Party System to XI to R/3 RFC
3) R/3 RFC to XI to 3rd Party System
These scenarios are working using service user XIUSER with SAP_ALL, SAP_NEW access at R/3.
I would like to know the Roles needs to process the above scenarios.
Thanks,
Peter

hi Peter,
>>>>2) 3rd Party System to XI to R/3 RFC
it depends what does your RFC do
if you're posting MM transaction then you'll need MM roles if SD then SD, etc
>>>>1) IDoc to XI to 3rd Party System
SAP_XI_APPL_SERV_USER <-- user role on the XI
http://help.sap.com/saphelp_nw04/helpdata/en/d4/d12940cbf2195de10000000a1550b0/content.htm
Regards,
michal

See & in query Designer for variable

Hi guys,
When i turn the technical name on in the Query designer, sometimes I see & in front and end of a variable. Sometimes, I dont see them. I was wondering why.

I see & in the query designer for the variables. Sometimes, for the same variable I dont see & sign in front and back.
This is what I have observed which in no way is a complete assesment.
When you have multiple variables on Active hierachy char. and you delete one, you see '&' in the other variables.

User cannot see workbook assigned to his Role

Hi,
One of my users have a role (Z_T1_USER - T1 User) assinged to them in the backend. I have created a workbook and saved it under this role under Roles Menu in RSECADMIN - Role Maintenance and there is a green light for Menu. The workbook executes when I execute it from here. This shows that there is no problem so far.
But when the user logs in to BEx Analyzer, he is not able to see this role (T1 User) and hence is unable to run the workbook. What is causing this?
Thanks

Hi,
Its an authorization problem.
Pls check the RSSM T code. There enter the cube on which query was built and search for authorization object.
In the authorization object, there must be atleast one authorization object maintained for the info cube.
Suppose if you find a company code pertinent authorization object, you need to maintain the same in the role that you have assigned to the user.
In the authorization tab of the role maintain the authorization object and you are done with it

How to check user role/profile

Dear all,
I'm finding function module to get a list of profile/role of user. Would you please suggest me on this?
Btw, if you have any other advise please feel free to let me know.
Thanks in advance.
Peersit

I've just found the related threads on this site.
User Profile Details
Re: User Profile Details
User Wise Authorization/profile report needed
User Wise Authorization/profile report needed
Have a good day.

Home folder name change, cannot see enable the root user option

Hi I am using Mac OS X (10.6.8)..got it from others.. I would like to change the home (small home symbol in finder) folder name. Went through many discussion in apple support. My problem is, I am unable to enable the root user. I went through the following steps: Apple menu -System Preferences- Accounts- authenticated as an administrator account- Login Options- Join- Open Directory Utility- Directory Utility window- administrator account name and password, then clicked OK. After this I can not see option with name Enable root user ( I can see only Active directory, BSD flat file and NIS, LDAPv3, Local). If I click active directory then the edit section will be activated. If I click edit, its showing active directory domain). I can not understand this.
Can anybody help me out please..
Thank you in advance

Here are the instructions from Apple on changing user short name or home directory name. I've used this on a couple of used MacBooks I've bought on eBay. And remember to go into System Preferences>Sharing and change the Computer Name in there.
http://support.apple.com/kb/HT1428

Cannot see video from certain users

I have a PC and Mac in the house. If I log in to the PC and Mac with 2 of my own separate accounts, and video skype myself, the video works okay. I would infer from this that.
-my router and ISP are okay
-that my PC and Mac have Skype set up correctly.
Earlier today I connected with two new people on Skype, and in both cases, they could see me, but I could not see video of them. Audio was okay. Does this mean the problem is at the other users side? I am suprised by the difficulties i am having, given that I can video skype myself with 2 different accounts, and 2 of my own computers.

The three main causes would be incompatibles due to the Skype version being used by your contacts, bandwidth related, or computer/device hardware related. If your contact's computers are over 10 years old and don't support the P4 and above SSE2 instruction set then video will be disabled on both ends.

Cannot see BEx Query in user role profile in BEx query designer

Similar Messages

Maybe you are looking for