Dynamic Analytic Privilege Concept

HI Frzz,
Could you any one give some idea about what is Dynamic Analytic Privleges and how it works.
Best Regards,
Krishna.

Hi Krishna,
Please refer the below link
http://scn.sap.com/community/hana-in-memory/blog/2014/02/07/dynamic-analytic-privileges-using-procedures-in-sap-hana
Regards
Raj

Similar Messages

  • Problems generating Hana analytic privileges based on BW info provider

    Hi Experts
    We generate Hana views based on BW Info Providers. We follow the guide “SAP First Guidance – SAP NetWeaver BW 7.40 on HANA View Generation”. . The views appear perfectly in Hana Studio but we are not able to generate the authorizations in Hana.
    On the BW side we have a authorizations relevant info object in the DSO that generate the View in Hana. The info object is linked to an authorization object that again is linked to a role. The role is the assigned to a user. We have synced all our users from BW to Hana using the standard concept (same username in BW and Hana).
    When the view is generated we can see that view in Hana and we can see that a role is also create in Hana. But there are no analytical privilege created and there are no entries added in the table RS2HANA_AUTH_STR. The user also do not get the role assigned to him.
    Are there any other steps that need to be done to be able to generate the authorizations in Hana based on BW authorizations?
    We use BW 7.4 and the generate function (not the import function into Hana).
    Kind regards
    Erik

    Hi Erik,
    Please check if below characteristics are included in the analysis authorization assigned to the user:
    0TCAIPROV = Info provider id
    0TCAACTVT = 03
    0TCAVALID = *
    0TCAKYFNM = *
    <authorization relevant characteristic of your info provider> = Required value.
    If you are assigning these authorizations now, run RS2HANA_CHECK tcode for this user. This should generate analytic privilege and user should get the role in HANA.
    Thanks

  • Dynamic Ananlytical privileges

    Helo All,
    We have created dynamic privileges but it has the limitation on tools that can connect directly to the HANA views since what we built is based on  BOUSER (to identify the user who is accessing teh calculation view). But this is a limitation when other tools that connect directly to HANA Data base. I found documents here all using CREATE STRUCTURE PRIVILEGE with xml example. Anyone knows about the syntax for teh CREATE STRUCTURED PRIVILEGE syntax or use a procedure in place of xml.
    Any document would be helpful.
    Thank you,
    Arthur Samson.

    Hi Vivek,
    To set up a dynamic privilege I have done teh following...
    1.      I have created a temp table and this has the BUKRS that are assigned to my user id.
    2.      Ceated a reporsitory procedure to extract the distinct BUKRS for the SESSION_USER.
              and the BUKRS assigned to the out put variable.
    3.     Create a dynamic privilege and used the Repository Procedure under Assign Restrictions
    4.     Created a role and assign this privilege to the rol UNder Analytic privileges.
    5.     Assign the role to my userid
    All objects are activated. But now when I try a sql statment against the calculation view with company code that is not assigned to my user id, it still bring the values...
    Any idea,
    Thank you,
    Arthur.

  • Analytic Privilege : Something went wrong

    Hi folks,
    I am trying Analytic Privilege on SP08 system(doesn't matter what the system level is, but still ).
    I created two tables in the schema "SREEHARIV" associated to the user "SREEHARIV".
    Tables are Products and Desc.
    Then I created one attribute view which joins the Products and descriptions (just like MARA and MAKT ).
    Output result set
    Now my intention is to make the user SREEHARIV to see only the data from country INDIA.
    So I am creating an Analytic privilege with Country as attribute(is it the right way ?) .
    After activating it, I added the same analytic privilege to SREEHARIV user.
    Then, to test the same , I created a XSJS service which will query the attribute view.
    var query = 'SELECT "PNAME","TEXT","COUNTRY","TURNOVER" FROM "_SYS_BIC"."Sreehari/ATR_PRODUCTS"';
    var output = [];
    try{
      var dbconn = $.db.getConnection();
      var pstmt  = dbconn.prepareStatement(query);
      var rs = pstmt.executeQuery();
      while(rs.next()){
      output.push({
      PNAME : rs.getString(1),
      TEXT : rs.getString(2),
      COUNTRY : rs.getString(3)
      $.response.setBody(JSON.stringify(output));
    catch(err){
      $.response.setBody(err.message);
    And I am getting the whole records returned .
    I believe it is a logical mistake I am doing . Please correct me if this is not the exact use of analytical privileges . Please don't pump me the Development guide URL
    Thanks in Advance ,
    Sreehari

    Hi Krishna,
    Even I suspected the same. I assigned the analytic privilege to another user which is not having _SYS_BI_CP_ALL. Still the same    . Should I suspect SP08 anyway ?
    Sreehari

  • Rev. 80: Error with counter and analytic privilege

    Hey guys,
    I have the following structure in my model:
    Attribute View (AT) --> Calculation View 1 (CV1) --> Calculation View 2 (CV2)
    The calculation views only contain the default aggregation. Additionally CV1 has a counter on one of the columns.
    The content is about analyzing roles from ERP.
    AT has columns RIAExtractID (its a GUID), AGR_NAME (Name of the composite role), CHILD_AGR (Name of the single role).
    CV1 has the same columns but also a counter on CHILD_AGR called "NumberofAssignedSingleRoles".
    CV2 has all columns of CV1 but not CHILD_AGR.
    Here is how it looked like in Rev72: (filtered for one AGR_NAME = AC280-RECHERCHE-REPORTS)
    AT:
    CV1:
    CV2:
    (I would not need CV2 to get this result (I could just select these 3 columns from CV1). However, in CV2 the Column NumberofAssignedSingleRoles is of type "attribute" whereas in CV1 it's a "measure", and with this "hardcoded" aggregation in CV2 I can then apply a filter on NumberofAssignedSingleRoles in an OData request giving me for example all roles which have less than 5 single roles assigned. Otherwise you can't filter on a measure.)
    However, now with Rev. 80 the result of CV2 looks like this:
    Although, AT and CV1 still look the same (and return 4 rows with each a different CHILD_AGR). No matter how many child roles have been in CV1, CV2 gives me NumberofAssignedSingleRoles = 1 for every AGR_NAME!
    Trying to track the issue down, I found that using SYSTEM user gives me correct output of NumberofAssignedSingleRoles = 4.
    Since one major difference between my user for testing and SYSTEM are analytic privileges.
    Currently there is a restriction in the analytic privilege for AT: RIAExtractID = 001CC4F....
    When I remove this restriction, the output is correct, too. (i.e. 4 rows in AT, 4 rows in CV1, Counter= 4 in CV2)
    When I add the restriction again, the output is wrong. (i.e. 4 rows in AT, 4 rows in CV1, Counter = 1 in CV2)
    I'm pretty sure this is a bug in SP8/Rev 80.
    What other options do I have to "debug" any further?
    By the way it makes no difference if I move the restriction from AT to CV1 or CV2, behavior is still the same (=wrong).
    Hope you can help me since this is a major problem for my application!
    Kind Regards,
    Fabian

    I cannot believe it. Rev. 91 and still the same Problem.
    @SAP: Do you just don't care or are you not able to reproduce? I could provide small Delivery Unit with Schema, Table, AT and CVs as well as an analytic privilege.

  • How to create analytic privileges from sql command line in hana studio?

    I want to create a bunch of analytic privileges, activate them and assign it a roles. I was wondering if there is a method where I can create these analytical privileges directly from sql?

    Hi Krishna,
    Thanks for the reply.
    The use case is to create a bulk analytical privileges on the pre-existing analytical or calculation views and I'm failing to create it using the simple CREATE STRUCTURED PRIVILEGE.
    The security guide shows below mentioned as the syntax but I'm failing to create it through that:
    CREATE STRUCTURED PRIVILEGE AP_SALES_1 FOR SELECT ON TABLEOWNER.VIEW_SALES WHERE REGION IN ('DE','UK') OR PRODUCT = 'CAR';
    It gives me this error -
    SAP DBTech JDBC: [257] (at 44): sql syntax error: incorrect syntax near "FOR": line 1 col 44 (at pos 44)

  • Difference between analytic privilege and package privilege

    Hello Team
                       Please suggest me on the difference between Analytic privilege and package privilege . Since both the privileges works on package only . So what is the exact difference between them .
    Regards

    Hi,
    SAP HANA have several categories of privileges such as system privileges, object privileges, analytic privileges, package privileges and application privileges.
    For analytic privileges and package privileges, they are very different.
    When you use analytic privileges, you can grant different users to see different data. For example you have an analytic view including some sales data and there is a column LOCATION. You can use analytic privilege to grant the sales in the east US to only see the sales data where LOCATION = "EAST" and grant the sales in the west US to only see the sales data where LOCATION = "WEST". This is just a simple example. In short, you use analytic privileges to grant different users to see different data.
    Regarding package privilege, when you develop on XS projects, you can grant different package privileges to different users. For example, you have a package named "services" in your XS project. You can use package privilege to grant user A to only read the content under "services" and grant user B to edit/activate or even delete the "services" packages.
    Best regards,
    Wenjun

  • Analytic Privilege by script?

    Hello,
    I have a question - Is there any method of creating a Analytic Privilege with script and not a graphical creating?
    I'm asking because the changes made inside the analytic privileges are very complex to change over and over again without script.
    Thank you,
    Or.

    Yes see page 6 of this guide. You can apply APs to individual views or to all views.
    http://help.sap.com/openSAP/HANA1/openSAP_HANA1_Week_02_Unit_09_Analytic_Privileges_Presentation.pdf

  • What is the system privilege required to grant "Analytic Privilege" to a user

    Hi SCN,
    I have the user with following privileges:
    SYSTEM Privileges: CATALOG READ,CREATE STRUCTURED PRIVILEGE,DATA ADMIN,STRUCTUREDPRIVILEGE ADMIN,USER ADMIN
    PACKAGE Privileges: SECURITY
    OBJECT Privileges: _SYS_BI,_SYS_BIC and REPOSITORY_TEST
    Am able to create a AP, but not able to assign to a user.  Checked different threads and documents, Am able to add with "SYSTEM" user but not with the generic user i have
    I can't do tracing as it is disabled in the client system
    Am i missing something here? Can someone help me please?
    Regards,
    Krishna Tangudu

    Thank you so much Raj.
    I was expecting this kind of privilege under SYSTEM PRIVILEGE.
    So other privileges which i mentioned are fine right?
    Regards,
    Krishna Tangudu

  • Dynamic Access Privilege to Workbooks

    Hi,
    How to grant / revoke the access privileges to Folders(Awm) while opening the work books in OracleBI Discoverer Plus 10.1.2.48.18 .
    Detail
    1.I have created a two work books namely orabook1,orabook2 based on two different folders namely folder1 ,folder2 in a user called orauser1.
    2.Orauser1 have "select "privileges on both the folders.
    3.Now user can open the orabook1 and edit the worksheet to replace the existing folder1 dimensions with folder2 dimensions and their measures .
    I want to restrict the user to replace the existing dimensions and their measures with other folder dimensions and measures
    How can I restrict the privileges of folder2 from orauser1 while user opens the orabook1(folder1 based workbook) and vice versa.
    Thanks,
    Natarajan.U

    Hi everyone
    Before anyone starts throwing comments around that Discoverer is poor because it cannot do this, please tell me for a moment how I can dynamiclly restrict database access in SQL to only those tables that are used within a certain piece of SQL code? Of course the answer is - we cannot.
    This is exactly what is being asked for here and is simply not possible. Discoverer is only a front-end to SQL after all and its the database privileges that ultimately control access to the underlying tables. We can't go around granting and revoking those on a query by query basis because how on earth would we ever build a new query or extend an existing one to be able to add a new table?
    Good idea, but please don't knock Discoverer on this one.
    Best wishes
    Michael

  • Dynamic Filename in Fileadapter

    Hi all,
    I like to use the new feature (SP15) of the "Adapter Specific Message Properties" but with out success. I have read Michaels Blog "XI: The same filename from a sender to a receiver file adapter - SP14" but it give me not a clue how to use these properties during the normal receiver configuration and also the manual is not very clear about it. I have set a Variable with "FileName    message:FileName" (I have tried also "message:File_Name") Than I have used this filename Variable in the field "Filename Schema" like %FileName%. But I allways got this error: com.sap.aii.adapter.file.varsubst.VariableDataSourceException: Unknown message header category 'FileName' for variable 'FileName'.
    What have I missed out here?
    Thankx
    Manfred Schmidt-Voigt

    Hi Manfred,
    The dynamic filename generation concept is as follows.
    In your filename field. just give a variable with % symbols. (eg: %file% ).
    Now, under the option Variable Name Substitution, you can give how the value has to be created.
    It can be your interface name, sender service name, etc or it can be some value dynamically from your payload.
    For the former, your give
    message:interface_name ,etc
    and for the payload part you give,
    Payload: "your element root which u wanna acecss"
    Just check this link out,
    http://help.sap.com/saphelp_nw04/helpdata/en/bc/bb79d6061007419a081e58cbeaaf28/content.htm
    And read the contents under variable substitution and it will help you understand the concepts better.
    If you have any clarifications, do get back,
    Regards,
    Bhavesh

  • Dynamic filename in XI

    Hi,
    In XI SP12 is possible to use dynamic filename? I need to generate a filename in Adapter using the content of an element in message, how I do it?
    thanks.

    Hi Elton,
    The dynamic filename generation concept is as follows.
    In your filename field. just give a variable with % symbols. (eg: %file% ).
    Now, under the option Variable Name Substitution, you can give how the value has to be created.
    It can be your interface name, sender service name, etc or it can be some value dynamically from your payload.
    For the former, your give
    message:interface_name ,etc
    and for the payload part you give,
    Payload: "your element root which u wanna acecss"
    Just check this link out,
    http://help.sap.com/saphelp_nw04/helpdata/en/bc/bb79d6061007419a081e58cbeaaf28/content.htm
    And read the contents under variable substitution and it will help you understand the concepts better.
    If you have any clarifications, do get back,
    Regards,
    Bhavesh

  • Dynamic Availability Check for Goods Issue,Transfer Posting

    Dear All,
    Can anyone explain the Dynamic Availability Check??
    I mean the relevance on setting this indicator for a mov.type?
    In OMCM & OMCP I have defined a Checking Rule & also assigned the same to a Mov.type as well the transaction code?
    whether the Dynamic Availability Check concept is same in case of sales ie Say I have a Stock of 100 qtys for a material in a plant & in the availability Scope of Check I have ticked the include safety stock.
    In my material master I have a safety stock of 500 qtys.
    So when I do a transfer posting for this material with Qty as 200, System should allow me do proceed as in my availability check I have enabled the safety stock option.
    But this is not happening & I am getting an error message as deficit of stock 100 nos. Also what is use of setting the dynamic availability check indicator for my mov.type as A - Warning message , B - Error Message etc..
    Kindly suggest valuable inputs.
    Thanks & Regards,

    For e.g. there is Available Stock = 1000 qty and safety stock in material master = 500 qty then system will allow you to use 1000 qty only not 1500 qty
    This is only used for availability check purpose whether system it should be considered or not?
    And following indicators means;
    A  W mess. only issued in the case of non-availability
    B  E mess. only issued in the case of non-availability
    E  Message in any case: W mess. for non-avail., otherw. S mess.
    F  Message in any case: E mess. for non-avail., otherw. S mess.
    S  Availability check only with simulation
    The above indicators indicate whether the system is to check for existing material requirements.
    Award appropriately once the thread is answered.

  • Dynamic  File Name for Receiver File Adapter

    Hi All,
    How can we use dynamic name for Receiver file adapter?
    Can anyone help.
    Thanks in Advance
    Chemmanz

    Hi Chemmanz,
    The dynamic filename generation concept is as follows.
    In your filename field. just give a variable with % symbols. (eg: %file% ).
    Now, under the option Variable Name Substitution, you can give how the value has to be created.
    It can be your interface name, sender service name, etc or it can be some value dynamically from your payload.
    For the former, your give
    message:interface_name ,etc
    and for the payload part you give,
    Payload: "your element root which u wanna acecss"
    Just check this link out,
    http://help.sap.com/saphelp_nw04/helpdata/en/bc/bb79d6061007419a081e58cbeaaf28/content.htm
    And read the contents under variable substitution and it will help you understand the concepts better.
    If you have any clarifications, do get back,
    Regards,
    Bhavesh

  • Dynamic file naming when downlaoding the file to target directory

    Dear friend,
    My requirement is in the Adapter type File, File Name has to be dynamically generated. (i.e., each time the file name will be different according to the input name from the IDoc field). Can someone help me in this regard ???
    Thanks in advance,
    Jose Augastine

    Hi,
    The dynamic filename generation concept is as follows.
    In your filename field. just give a variable with % symbols. (eg: %file% ).
    Now, under the option Variable Name Substitution, you can give how the value has to be created.
    It can be your interface name, sender service name, etc or it can be some value dynamically from your payload.
    For the former, your give
    message:interface_name ,etc
    and for the payload part you give,
    Payload: "your element root which u wanna acecss"
    Just check this link out,
    http://help.sap.com/saphelp_nw04/helpdata/en/bc/bb79d6061007419a081e58cbeaaf28/content.htm
    And read the contents under variable substitution and it will help you understand the concepts better.
    If you have any clarifications, do get back,
    Regards,
    Bhavesh

Maybe you are looking for