Enterprise/ SAP Authorization in CMC

Hi Experts,
Just need to clarify that if we are using CMC with Enterprise Authorization, is it necessary to use InfoView with same Authorization or can we use SAP Authorization with it?
Thanks & Regards,
Sumeet

Hi,
thats the most common way you are explaining.
End- Users are using the SAP Auth. for InfoView and the Administrator(s) are using the Enterprise Administrator with the Enterprise Authentication in the CMC.
Regards
-Seb.

Similar Messages

Error while configuring SAP authentication in CMC

Hi,
I am trying to set up SAP authentication in CMC to a SAPBI system to which I am able to connect successfully in Designer and Voyager. I have the SAP Integration KIT also installed.
As a first step I created Entitlement and then filled up the options tab ( Have checked the option Automatically Import Users).
But when I click on Role Import Tab, I get the following error.
com/sap/mw/jco/JCO$Function
Is it because I need to install SAP JCo? Please suggest.
If I need install SAP JCo is it freely available? Which version has to be installed?
Any suggestions will surely help.
Thanks in advance,
Suma

Same issue here.
Business Objects Enterprise 3.0 is installed on a dedicated machine. I have followed the documented installation procedure, step by step, but I am still facing two issues:
#1. SAP Authentication does not work. When trying to log into InfoView using SAP Authentication, I get the following error:
Account information not recognized:
CSecSAPR3Binding::XRFCCnxBroker::BorrowConnection() failed. See following log entries for details.
Failed while trying to log on to SAP system.
The following RFC error was returned: [Group, Key, Message]:
[103, "RFC_ERROR_LOGON_FAILURE", "Name or password is incorrect (repeat logon)"].
The entitlement system has therefore been disabled in memory.
This may be because the SAP system is unavailable or because the credentials are invalid.
The entitlement system has to be re-enabled before it can be used again.
#2. BOE is unable to import the SAP roles (from CMC SAP Authentication configuration). The application throws the following error:
An error has occurred:
com/sap/mw/jco/JCO$Function
I am using JCo v 2.1.8. sapjco.jar was extracted to C:\Program Files\Business Objects\Tomcat55\common\lib and sapjcorfc.dll was extracted to C:\Program Files\Business Objects\BusinessObjects Enterprise 12.0\win32_x86. librfc32.dll was installed in a prior step by the SAP Front End, and the file exists in C:\Windows\system32.
Any other ideas?
Edited by: Eric Axelrod on Feb 3, 2009 11:24 PM

No logical sytem found in the drop down under SAP authentication in CMC

Hi Swapna,
This is quite simple. Click on New and enter the following information:
System e.g TS6
Client e.g. 800
Application Server e.g. yourservername
System number e.g. 00
Username e.g. Crystal
Password e.g Password
and Language e.g. EN
Press Update and and go to the Role Import tab. Import your role and don't forget the set the checkbox Enable SAP Authentication under the Options tab when using sap authentication.

Hello,
We are trying to integrate existing BO environment in our company with existing BW installation.
BO Environment - 3.1
BW/ECC Environment - (BW - BI 7.0 SP20, ECC 6.0)
So got the pre-requisites completed and the transports imported into both BW and ECC environments. Upon these steps we went ahead and installed the integration kit for 3.1 system.
There were no error messages, after we completed the installation went into infoview and in the authentication drop down checked to see if I can get "SAP" in there....which it did. So, I am assuming there were no issues till this point which we might have missed out.
Upon this, when I went into SAP authentication in CMC and double clicked on SAP and in the next screen clicked on "NEW" and added in the application server, system number, id and password and updated it...this automatically updated the logical system.
But when I go into the role import, it gives me the following error message....
Exception in JSP: /jsp/auth/sapsec_import_role.jsp:22:19:20: <%21:string context.........lot of other message
The only thing is we have not assigned the CRYSTAL_ENTITLEMENT role to it as we are at this point only trying to see if we can log into webi...
Can you please help me out on this.
Thanks
Dharma.

Sap authorizations in Webdynpro

I have a question regarding the use of authorizations from WebDynpro. We wants to use standard SAP authorizations when accessing the BAPIs through WebDynpro. For example: A sales person having a SAP logon should be allowed to see the data he would see using the transactions through SAP GUI. On the other hand persons without rights to the transactions should not be allowed to access the sales order data.
How do you do this?

Hi Rama,
According to me ,Upto Now thr is no such readymade facility available.But we can implement it.
1)Create a Bapi for Autherization Or Use standard Bapis if any.
2)Use those Bapis in ur Project.
3)Before u executing ur Actual Bapi U can execute Ur Autherization Bapi.
4)According to The Result of Autherization Bapi ,U can Execute Ur Actual Bapi.
Regards,
Ramganesh.

Importing SAP Roles in CMC

HI
when I importing SAP Roles in CMC there is an error, following is the error information:
CMALLC:rc=27>Connect from SAP
gateway to RFC server failed Connect_PM GWHOST=192.168.1.66,
GWSERV=sapgw00,SYSNR=00
Location SAP-Gateway on host saptest/sapgw00
Error   timeout during allocate
Time   Tue Feb 22 15:25:58 2011
Release 720
Component SAP-Gateway
Version 2
RC      242
Module gwr3cpic.c
Line     1911
Detail    no connect of TP sapdp00 from host 192.168.1.66 after 20 sec
Counter 2
Thanks

HI,
are you using the details for an application server or for a message server ?
Ingo

SAP Authorization Query

Hi,
Iam working in SAP Authorization team. Recently we had one issue, and it is long days back we have added one single role to many of the composite roles. But suddenly last week that single roles got deleted in some of the composite roles only from production system.
Could you tell me how it is happened?
Thanks!

> This is because one of your team member have transported the single role with the same role name frm development to production unknowingly thats reason it been overwritten in prd server
Then I think the changes should reflect even in DEV & TEST as well. But here the issue is only in PRD which is very surprising.
Regards,

SAP Authorization

Dear All,
Good Day!
Hi! I would like to know if there is an site or link that discuss of SAP Authorization ( SAP R/3 System version 46c or 4.6c ), complete and detailed particulary. Since I am new in this field or environment I'm asking for your guidance and help being as SAP Basis Admin assigned in SAP Authorization Group. Your suggestion and help mean a lot to me.
Thanks A Lot,
Armin

Hi
for a detailed explanation of the Authorization concept & how to handle that, please go thru this ..
http://www.*********************/tutorials/authorization_analysis.htm
hope this info helps you!
with regards,
raj
<i>pls, award points</i>
<i>if, your query is answered, pls, mark this issue as answered. thanks!</i>

Regarding sap authorizations

hi all
is there anyway to limit the users access to only their own batch input sessions in tcode sm35 using sap authorizations.
thanks in advance
mohan

hi,
check this
Checking User Authorizations in your ABAP Program
How to set Authorization to an ABAP Programs?
Much of the data in an R/3 system has to be protected so that unauthorized users cannot access it. Therefore the appropriate authorization is required before a user can carry out certain actions in the system. When you log on to the R/3 system, the system checks in the user master record to see which transactions you are authorized to use. An authorization check is implemented for every sensitive transaction.
If you wish to protect a transaction that you have programmed yourself, then you must implement an authorization check.
This means you have to allocate an authorization object in the definition of the transaction.
For example:
program an AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT <authorization object>
ID <authority field 1> FIELD <field value 1>.
ID <authority field 2> FIELD <field value 2>.
ID <authority-field n> FIELD <field value n>.
The OBJECT parameter specifies the authorization object.
The ID parameter specifies an authorization field (in the authorization object).
The FIELD parameter specifies a value for the authorization field.
The authorization object and its fields have to be suitable for the transaction. In most cases you will be able to use the existing authorization objects to protect your data. But new developments may require that you define new authorization objects and fields.
Use T/Code SE80 to Create Authorization object.
if u find it useful mark the points
Regards,
Naveen

SAP Authorizations: ST01 - return code 12 (RC=12)

Hi All!
re: SAP Authorizations: ST01 - return code 12 (RC=12)
When using ST01 to trace SAP authorizations and you come accross a return code 12 (RC=12), how do change the authorization object to check?
Thanks for your help.

Hi - some standard ST01 info I follow
Main RC codes
RC =0 Successful (user is authorised)
RC =4 Failed - user does not have authorisastions but does have the authorisation object in their buffer (different authorisation combination though)
RC = 12 Failed - user does not have the authorisation AND does not have not have the authorisation object in their buffer
With RC =0 it can be due to:
1. The user has access via authorisations
2. SU25 has switched the object off system wide
3. SU24 has switched the object off for the transaction
As a note with RC=12 - I find these fails can identify a misleading authorisation check. That is, the user is not meant to have access. Take care on RC=12, especially for object S_ALV_LAYO, S_DEVELOP, S_CTS_AMDI, S_USER_GRP and when investigating a typical end user.
IF the missing authorisation (RC=12) is required, you will need to fix the PFCG role and generate the authorisations so the user receives it. If the user has the access you will need to check user buffer or role generation/corruption issues.

How to create users in SAP BO (in cmc)

Hi All,
How to create users in SAP BO (in cmc) (pls step by step).
Thanks in Adavance,
Nitin

Hi Erika
I need your help
"Account information not recognized.The secLDAP Security Plugin is not enabled.contact your system administrator for details."
I am getting an error page when i am try to access BO reports from Flex UI.
This BO reports should work in the same single sign on session with Flex UI as per the application developed.
Note :The same users when login directly login to BO get access..

Multimedia tutorials & online courses in SAP authorization

Hello,
Could someone please guide me to where I can find multimedia tutorials or online courses, or even conventional courses related to SAP authorizations.
Thank you in advance for your cooperation.
Best regards.
Reda Khalifa
IT Department - Almansour Automotive Group - Egypt

Hi Reda,
The "traditional" SAP auth courses are ADM940, ADM950 & ADM960
ADM940 is your standard auth concept stuff, 950 is mainly regarding Audit & 960 is looking at system level security (the most technical of the three)
There is loads of info on the individual courses on the SAP education site: http://www.sap.com/services/education/index.epx
Alternatively there is some pretty good (if not 100% accurate in all cases) info here:
http://www.*********************/
The security section of OSS is very, very useful with a whole load of guides on there:
https://websmp205.sap-ag.de/security
You will need an OSS ID to access the documentation. Your BASIS team will have one that they should let you borrow if you don't already have one.
A few other resources are a book/pdf called Authorizations Made Easy and the R/3 Security Guide: VOLUME I, II & III
If you enter those terms into google/another search engine you will get links to where you can buy those.

Cannot add BW SAP system in CMC Authentication\Entitlement System

Hi,
I've re-installed Edge XI 3.1 SP3, Explorer/Polestar SP2 and finally SAP Integration Kit SP3 on Windows 2008 & SQL Server 2008 after a consultant came onsite to do this 4 months ago. I wanted the practice and its a pilot installation only.
I cannot seem to add my SAP BW Dev system to the Entitlement system from within the CMC - Authentication - SAP section however. I 've got the .dll's in the right places, I've tried uninstalling and reinstalling the Integration Kit. restarting the Tomcat server, etc to no avail. I've also had a read of Ingo's blog and am sure I've followed all his steps correctly.
Can this only be a case of not following the installation correctly or am I missing something else? Any help appreciated please.
Thanks.

Hi,
I've had success in getting the Entitlement System connected.
Basically on top of completely uninstalling everything SAP and BO related, renaming folders to .OLD and rebooting, then installing Edge and SAP GUI....I then followed these steps before installing Integration Kit:
To install InfoView automatically, you must install and configure SAP Java Connector components:
To do this, copy librfc32.dll and librfc32u.dll, to the appropriate folder.
u2022 On 32-bit Windows: %windir%\system32
u2022 On 64-bit Windows: %windir%\sysWOW64
Copy sapjcorfc.dll to <BusinessObjects install directory ..\win32_x86.
Then copy sapjco.jar to the application serveru2019s shared library folder. For example, on a 64-bit Windows system with Tomcat 5.5, copy sapjco.jar to H:\Program Files (x86)\Business Objects\Tomcat55\shared\lib
N.B. Had to create folder shared\lib in H:\Program Files (x86)\Business Objects\Tomcat55.
Rebooted.
This is similar to and in addition to Ingo's steps, however he does refer to the Integration Install guide, which is where the above is mostly taken from.
I could then UPDATE the new BW Dev system from the CMC and then see all available roles.
Thanks for your prompt advice and support Ingo.

Configure SAP Authentication in CMC ..

Hello,
i ve installed a BO Edge Server and realized after Completion of installation, that i only have Enterprise/AD/ ..etc. SAP Authentication is missing.
Question:
How can i install the SAP authentication ??

perfect .. Thanx ..

Duet Enterprise - SAP Microsoft

Hi,
I need to give a demo for Duet Enterprise.
I am planning to give the leave application and cancelation approval process (workflow for couple of leave types).
Q 1) What all are the initial configuration /steps which I have to do from HCM point of view?
-     Hire employees /approvers
-     Configuration of leave types and quotas
-                    User ids created in SAP r/3 and IT0105 email
-                    My understanding is basic SAP workflow should be there for share point to access. Hope its correct.
-                    What esle to do??
Regards
Thomas
Edited by: Thomas Padiyara on May 25, 2011 10:39 AM

Hello Thomas,
Please find my inline reply to your questions.
+I need to give a demo for Duet Enterprise.+
For giving duet demo. First you have to install & configure Duet Enterprise in your Landscape. after that you have to configure wat you want to do in HR.
for out of box possiblity is below in Duet Enterprise
1. Workflow Approval
2.Reporting
3.Mysite
4.Profile Synchronization
5. Enterprise Collaboration
6. SAP intgration- Starter Services.
others you can customorize as you want to do.
I am planning to give the leave application and cancelation approval process (workflow for couple of leave types).
In out of box here only Leave approval/cancellation is possible.
For applying Leave you need to design custome development
Q 1) What all are the initial configuration /steps which I have to do from HCM point of view?
create two personal numbers with 1 reportee and 1 his approver.
maintain correct data in infotype 105 and maintain Leave Quota in Infotype 2006
Appy a Leave in R3 using PTARQ t code with Test Application Tab with reportee personal number
- What esle to do??
For Duet enterprise. Give access to Leave workflow Task in SharePoint. go to Transaction SE 38 and Run ABAP Report- RSWNSEL and OSP_FULL/OSP_DELTA you configured in ERP and then run ABAP Report- S_OSP_WF_ITEM_SELECTION.
Then check you will get Leave workflow approval Task in SharePoint. Login with approver employee id in SharePoint and approve the Leave .
Regards,
Shashank

Not able to see SAP Authontication in CMC

Hi,
We have installed SAP BO XI3.1 SP3 linux version. We have been successfully installed business objects XI 3.1 SP3 on linux X64bit version. We have installed SAP integration also on same server we have installed it sucessfully. I was able to see SAP credentials at logon screen of CMC and Infoview. We login using adminsitrator we are not able to see SAP underr CMC authontication tab.
Can any one have faced same issue and how it was resolved can you please step by step instructions.
If any one have document that related to sap integration kit installation on linux please provide.
Thanks in advance,
Druthi Sri.

Hi Druthi Sri,
Have you specified the path of sapjco.jar file in catalina.sh ( file location: /../tomcat/bin)
pls see below procedure to set classpath
CLASSPATH="$CLASSPATH":"$CATALINA_HOME"/bin/bootstrap.jar:"$CATALINA_HOME"/bin/commons-logging-api.jar:"$CATALINA_HOME"/BO/bobje/tomcat/common/lib/sapjco.jar
and restart tomcat server.
Regards,
Ram

Enterprise/ SAP Authorization in CMC

Similar Messages

Maybe you are looking for