Creation of Analysis Auth from SU21

Hi All,
I gave a try to one auth. Just wanted anyone of you to clarify this.
I created one customised object from SU21, and created the field, which we have used in the Analysis Auth (rsecadmin) like, Compcode, salesorg, co area, etc.
I have entered the field values and generated. Now included this in a role for a reporting user which contains the objects s_rs_comp and s_rs_comp1 for which Comp1 given full *.
Now the test user is able to create the queries based on the restrictions assinged, like company code. But he is not able to execute his own query, where he was given full access. SU53 shows that he doesn't have the access to Execute in S_rs_comp1, where I have maintained * for that.
Does this mean that, the Charateristics for Analysis Auth will not work if assigned through the objects created from SU21. / or do i need to do something more.
Can anybody help please.
Thanks for the help.
Regards,
Venkat

Hi JC,
The idea given by you is good. I tried, it. But its not working securely.
I created one analysis auth for all common characteristics. and dvarious for different company codes and controlling areas.
like grouped the following as one
Company Code, Controlling Area, Keyfigues.
I assigned a user a role like this. Take for example ODS A and B. Comp Codes, CC1 and CC2, Controling areas CA1 and CA2.
assigned the Reporting roles like this. where
1) ODS A > CC1 (CA ) (KF)
2) ODS B > CA2 (CC) (KF)
when checked user is able to see all the controlling areas on ODS B,where i gave him only CA2.
That is the problem..

Similar Messages

Analysis auth obj assigment

Hi
Iam created one auth obj in rsec admin. how can i assign the auth obj to user .My answer is 1)direct assigment 2) through roles.
for example: created analysis auth obj is : ztest_1
It have the info obj : 0customer. and iam entered two values(values : A & B) in detail tab.
In role tab where i have to find the created analysis auth obj.to assign values .like below
Now i would like to assign this auth obj to user1 through role only for the customer value A .
For user2 i have to restricted vale B.
In direct assigment path will be the user>assign>specify the user name (user A)> give the created analysis auth obj (ztest_1)>select insert.
This is the process ...right?
Now i would like to assign only one value (value A for the user A).How it is possiable in direct assigment..
Other wise i have to create diff analysis auth obj(ztest_1...etc) for diff values(A &B)f or particular info obj(customer)?
Thanks
B.K
Edited by: B.K on Jul 15, 2008 12:44 PM

Hello B.K.,
When you create an authorization ztest_1 with 0customer with values A & B, this will always have the two values for the customer just like it was before with the old authorization method.
So no matter what way you assign this authorization to the user it will always have the two values!
To separate (filter) only one value (A or B) you have to create two different authorizations, one for customer A and one for customer B.
To assign, the direct assignment is just like you referred.
To assign with the roles, go to the desired role in PFCG, enter in change mode, go to tab Authorizations tab and click on change authorization data (pencil button).
Inside there, click on manual insert objects (something like this) and insert the object name S_RS_AUTH.
You'll have a yellow sign.
Expand that tree where the yellow sign is and click on the pencil button in front of the last yellow sign of the tree.
In "Value from" in that next window insert the name of the authorization (in your example ztest_1).
Generate your role.
Now if you assign that role to the user "user1" in transaction su01.
If ztest_1 has the values A & B for customer then user1 will have both values. If you separate the two authorizations let's say ztest_1A and ztest_1B with respectively the values A and B separate for the 0customer object.
You could assign in the role the value ztest_1A in S_RS_AUTH values, and assign that role to the user "user1" in su01, and you could direct assign (just like you referred before) to the user2 the authorization object ztest_1B.
Therefore you'll have user1 with the value A and user2 with the value B.
Please assign points,
Diogo.

Analysis auth issue

Hi,
We have a scenario where we have 2 user IDs:
X
Y
We have a report R1 which has values for an infoobject IO as 1,2,3,4,5
Now User X is restricted to see only data for values 1,2,3 and Y is restricted for 4,5
We have created Analysis auth object and assigned it to users. Then we added an auth variable in the report which will restrict data as per user authorization.
Now the issue is that when we execute the report for User X, only values for 1 is displaying and data for 2 and 3 are not showing up inspite of data being avalable in the underlying Infoprovider.
Same is the case with User Y where the data is only visible or 4.
What can be the issue?

Hi Debanshu,
Though I could not understand the exact issue, I would rather suggest you to check the authorizations checked while executing the report in Transaction RSECADMIN. In the Transaction goto Analysis tab ->Log Administration. there in the Configure Log recording provide the userid for which you want to test the authorizations And save it.
When that perticular user runs the report will will be able to see the logs for it using the option "Authorization Logs" screen. And this log will have a detailed information regarding the entire authorization trace for that user for that report.
Regards,
Pratap Sone

Creation of backend contract from SRM system?

Dear Experts,
I am bit confused with the scenario of creation of backend contract from SAP SRM system? It says in few cases, based on the BAdi 'BBP_DETERMINE_Logsys', the system creates a backned contract directly in a backend ERP system. Why do we need when we have central contract?
We can meet the same requirement through central contract where we will authorize only purchasing organizations of a backend system and block the contract for local sourcing in SRM?
Secondly, How to find a contract / scheduling agreement created in a backend system when a central contract is distributed to the backend system?
Thanks and regards,
Ranjan

Hello Ranjan
question on contracts?
Note 1476307 - Importing parameter not filled in BADI BBP_DETERMINE_LOGSYS
in classic scenario , The Business wanted to create a contract from cockpit or via BID
this BADI helps
Symptom
You have implemented BAdi BBP_DETERMINE_LOGSYS to control the system in which contract is created in following scenarios:
1. Creation of contract from an accepted quote / bid.
2. Creation of contract from a requisition in SOCO.
In the method IF_EX_BBP_DETERMINE_LOGSYS~CONTRACT_LOGSYS_DETERMINE of the BAdi implementation, importing parameter IT_ORG doesnot have any values.
Other terms
Backend contract
Reason and Prerequisites
some business wants to create a backend contract from SRM . see some Dinesh Powale / Claude threads for more understanding.
Muthu

Issue during automatic Creation of Work Order from Notification

Hi,
I have a issue during automatic Creation of Work Order from Notification.
BADI implemented: NOTIF_EVENT_POST
BAPI called in BADI: BAPI_ALM_ORDER_MAINTAIN
I am able to create Work Order successfully but after that i need to update notification header with created work order number.
But i am unable to update the same (VIQMEL-AUFNR).
Can anybody provide solution for the same!
Thanks,
Kumar.

Hi,
Any inputs on above posted issue!
Thanks in advance.
Thanks,
Kumar.

Creation of Collaboration Room from the backend.

Hi,
I need to create the collaboration room from the backend. When I tried to do so, its showing the error "Error in RFC Connection". I checked the RFC connection, its working fine.
Do i need to set any configuration properties either in portal or R/3 to enable the creation of collaboration room from the backend.
Kinldy provide your valuable inputs.
Thank you.
Regards,
Eben

Hi,
If ur talking abt creating rooms from backend in e-learning then thier is some configuration document for that
Please check..
Thanks and regards,
sarang

How we can block creation of PM order from non released notification

Hi ,
how we can block creation of PM order from notification if notification is not released.
Regards
AM

Hi Luke and Maheshwaran ,
thanx for your reply.
One more thing the option 2 has not been suggested by some users in the thread mentioned by Maheshwaran.
Can I still use BS22 or option 1 is the best one.
REgards
AM

Shopping cart Creation Time is different from system time

Hi ,
Shopping Cart Creation Time is Different from System time.
Could you tell me,        to which time it is refering to.
How to change it.
Create By is      webseruser
Where can I find the required settings for the same
Thanks In advance

Hello,
Are you checking this in BBP_PD?
If you go to SU01 and check parameter "Personal Time Zone" -> "of the user", this time will appear to end user when creating document (document header in web).
                                                                                If you do not have informed any value, it will be populated the pattern system timezone, defined in SU01 as well.
                                                                                - I created a RFX in my test system with a user who's timezone (in tx SU01) is set as:
Sys. Time Zone     CET
of the User        INDIA
- CET time was 20:01:55
- GMT time was 18:01:55
- India time was 23:31:55
Looking at this RFX in BBP_PD I see the following:
Same user (India timezone and CET as "Sys. Time Zone"):
Created_At: 20:01:55
Changed_at: 20:01:55
DETAILS (header):
Created at: 18:01:55
Changed at: 18:01:55
RFX header (description): 23:31:55
So, for end users, you should populate field "of the user" in SU01.
In BBP_PD header details, you will have the GMT time (which is stored in internal tables).
In BBP_PD created_at and changed_at you will have the system time zone, as defined in SU01.
Regards,
Ricardo

Process instance creation on 5.5 from a process A to a process B Dif engine

Process Instance creation on 5.5 from a Process A to a Process B on different engine.
I have 5.5 enterprise with 2 engines.
I want to create a process instance from process a to process b
this is the example that is working if processes are deployed on the same engine
argumentos = this.buildInstanceArgs(arg_processID : AltaDeCuentas, arg_xmlObj : xmlObj);
suc = suc + "/AltaDeCuentasSucursales";
ProcessInstance.create(processId : suc, arguments : argumentos, argumentsSetName : "BeginIn");
break;
This example uses the OU and the process id I also need to set the engine where the process is deployed
Thanks In advance!
Nico

Hi, just an update, at least now I have an error message on the first button,
there was a condition that I left over preventing it to work,
I have also amended the JavaScript code removing " from the "dataType"
Its now
function PrintSelectedItems()
var r = confirm("In print selected items");
apex.server.process('DISPLAY_SELECTED_ITEMS',
{"x01": "Sent from Page 5",
dataType: "text"},
{success: function(data){alert("here->" + data);}}
and I get Error: parsererror - SyntaxError: JSON.parse: unexpected character

':' in SQL Format causes analysis auth failure

Hi,
When running a SEM-BPS planning folder it fails due to analysis authorisation errors. On doing a trace it fails as the SQL Format has PLANT = ':' and SALESORG = ':'. These values are not within the analysis auths set-up.
Talking to the SEM-BPS person here they don't know how those got into the query.
Any ideas how we can get round this?
Thanks,
Nick.

hello,
does oracle showing any errors in user_scheduler_job_run_details for this job ? I would advise try inserting some debug statement to identify where exactly its stuck. Also please check sample configurations syntax for user_scheduler_jobs.
Cheers
Sush

Exception when connecting to Reporting and Analysis services from Java API

Hello,
I'm trying to connect to Hyperion Reporting and Analysis services from Java API using [Developer's guide|http://www.bidw.in/docs/hs_developer.pdf] .
I get this error:
com.sqribe.rm.ReportMartException: com/hyperion/css/CSSException
     at com.sqribe.rm.SessionImpl.convertError(Unknown Source)
     at com.sqribe.rm.AASessionImpl.open(Unknown Source)
     at com.sqribe.rm.AASessionImpl.internalInit(Unknown Source)
     at com.sqribe.rm.AASessionImpl.<init>(Unknown Source)
     at com.sqribe.rm.SessionFactory.getInstance(Unknown Source)
     ...My code:
String user = "user";
String pwd = "password";
String host = "my.hyperion.server";
int port = 6800;
try {
     Session theSession = SessionFactory.getInstance(user, pwd, host, port);
     Repository theRepository = theSession.getRepository();
} catch (UserValidationException e) {
     e.printStackTrace();
} catch (UnknownReportMartException e) {
     e.printStackTrace();
} catch (ReportMartException e) {
     e.printStackTrace();
}I have tried to look at my services running, and it all looks OK. I've checked user/passowrd/port for GSM. What can be wrong?
I also tried to run samples from \BIPlus\SDK\samples\java, e.g. Login.java:
#> java Login user password my.hyperion.server 6800with this effect
com.sqribe.rm.ReportMartException: SystemExceptionError
        at com.sqribe.rm.SessionImpl.convertError(Unknown Source)
        at com.sqribe.rm.AASessionImpl.open(Unknown Source)
        at com.sqribe.rm.AASessionImpl.internalInit(Unknown Source)
        at com.sqribe.rm.AASessionImpl.<init>(Unknown Source)
        at com.sqribe.rm.SessionFactory.getInstance(Unknown Source)
        at Login.<init>(Login.java:36)
        at Login.main(Login.java:69)I'm sure that I'm connecting to the server because when put wrong passowrd or user as input to Login class I get this:
com.sqribe.rm.ReportMartException: AUTHEN_CSSLoginFailed
        at com.sqribe.rm.SessionImpl.convertError(Unknown Source)
        at com.sqribe.rm.AASessionImpl.open(Unknown Source)
        at com.sqribe.rm.AASessionImpl.internalInit(Unknown Source)
        at com.sqribe.rm.AASessionImpl.<init>(Unknown Source)
        at com.sqribe.rm.SessionFactory.getInstance(Unknown Source)
        at Login.<init>(Login.java:36)
        at Login.main(Login.java:69)so it is there but something is wrong later. Any idea what?
Please help.
regards,
Pawel
Edited by: Paoro on 2010-09-27 02:02

HI,
I am getting the same error while running the Login file, Did any one resolve this issue?
Please share the solution.
Thanks.

Is it possible to manage Analysis Authorizations from the portal?

Hello,
We are using NW04s SP9 and BI 7.
Is it possible to manage BI's Analysis Authorizations from the portal? If yes than how?

hi
In portals there is a saying all authentication in portal while authorization in ackend so it goes here also BI authorization has to be done at backend . a way arround may be that u can migrate roles from backend to portal but in that case you need not create portal contents but authorization still remains at backend,hope this helps you please do not forget to give points
With Regards
subrato kundu

BI Role with Analysis Auth Object

Hi
How can i use Authorisation Object created in RECADMIN with all the list of Infoproviders in S_RS_COMP and S_RS_COMP1
So that user can perform mentioned action on the data providers mentioned in analysis authorization object.
As i need one place to list all the data targets user can access insted of maintaining in S_RS_COMP and S_RS_COMP1 and in Analysis Authorization object
Thanks in advance

Thanks Everybody for giving suggestions; I really appreciate alll your efforts.
I followed step by step book of kamaljeet and findout that , I was missing to add related info objects of the inforprovider .added those info objects to auth analysis object.
Now query is working fine without errors;
problem is i am not able to restict the query since it showing all the data ; i am trying to put only few values in "0wbs_elemt " .
I added 0wbs_elemt in my analysis auth object;
Clicked on 0wbs_elemt and kept values in value authorizations and also kept wbsh in hierarchy name , selected type 1, HI 0.
still i am unable to restrict the data;
Functinal consultants build WBSE set up on a hierarchy. like
18ICT-07/2011
      18ICT-07/2011-1
            18ICT-07/2011-1-AUDTM
                  18ICT-07/2011-1-AUDTM-01
            18ICT-07/2011-1-CETX_
                  18ICT-07/2011-1-CETX_-01
they want to restrict like if we are giving 181ct-07 then they want to access every thing under it;
same way like 181ct-08 etc etc..
looks like they want to restrict the date very granuler level like restriction on " Attribute Navigation   "
Can anybody please do let me know how can we achieve Navigation Restriction.
Thanks.

BI Analysis Auth Error

Hi Have two analysis auths
1)
0TCAACTVT        02 03
0TCAIPROV          X
0TCAKYFNM       *
0TCAVALID          *
ZOBJ1                    A
ZOBJ2                     B
ZOBJ3                 1
2)
0TCAACTVT        02 03
0TCAIPROV          X
0TCAKYFNM       *
0TCAVALID          *
ZOBJ1                    *
ZOBJ2                     *
ZOBJ3                 2
Both Auths will go together to same user.
I want to restrict access to A and B for ZOBJ1 & ZOBJ2 for value 1 (ZOBJ3)
but I want to give * access for ZOBJ1 & ZOBJ2 for value 2.
When I assign both auths user get * access for ZOBJ1 & ZOBJ2 for for 1 also.
Is there any way I can limit this access.

Closing so that I can post new quesiton

ENT-06965: Creation of BIBeans MetadataManager from OLAP .... has failed

Hi!
I tried to change a dimension definition in OWB (also changed its corresponding mapping). I deployed the modifications succesfully and executed the mapping.
However, when I try to see the data from the Design Center I get this error:
ENT-06965: Creation of BIBeans MetadataManager from OLAP and the Catalog informatation has failed.
I have never worked with BIBeans or deployed anything to AW (I use a relational implementation).
There is this post (ENT-06965: Creation of BIBeans MetadataManager from OLAP .... has failed.
which says that I have to use some PL/SQL packages owned by OLAPSYS, but I don`t know which one.
Does anybody know how to solve this problem?
Thank you,
Yorgos

Hi Thomas,
Just look at the above link (ENT-06965: Creation of BIBeans MetadataManager from OLAP .... has failed. you can find there the solution.
I`m copying here the relevant part:
"You may have invalid OLAP metadata left over within your CWM catalogs".
"there are some views owned by OLAPSYS user that show all the dimension and cubes that are "OLAP enabled"
"You will need to use the following packages:
CWM2_OLAP_DIMENSION.DROP_DIMENSION(owner, dimension_name)
CWM2_OLAP_CUBE.DROP_CUBE(owner, cube_name)
Use this view to find the names of installed dimensions : ALL$OLAP2_DIMENSIONS
Use this view to find the names of installed cubes : ALL$OLAP2_CUBES"

Creation of Analysis Auth from SU21

Similar Messages

Maybe you are looking for