How to provide user authorization in PI objects

Hi experts,
I am working in PI 7.1, I wanted to know that if there is any way to control the access to PI objects developed in ESR & ID.
For example in my project team there are 3 team members and suppose I've developed some objects in ESR, say I have developed a Data type and for security reasons I wanted that the other two members of my team team can not edit/change that data type, So is there any way to do that in PI 7.1.
I have also tried to provide the authorization based on the userID, but it won't worked.
please suggest me, how it can be done or is it posible in PI.
As well as please suggest me what type of security can I provide to PI objects developed by an user.
Thanks,
Nitin

Check this related post: Re: reg:Acess to Software Component version
A link reference is given to an elearning material...have a look at it.
Regards,
Abhishek.

Similar Messages

How to give user authorizations for a Program or an ICF service

Hi,
1)How to give user authorizations for a report program or an ICF service.
2)How to create an user authorization object.
Regards,
Vinay.

check this online help for more info on authorization object creation
http://help.sap.com/saphelp_nw04/helpdata/en/52/67168c439b11d1896f0000e8322d00/frameset.htm
for question no1.
ICF - you either maintain the auth obj relevant at the icf service level itself or you can code call authority object and block access
for abap programs:
you maintain auth object at the tcode or code the call authority object within the program
Regards
Raja

How to provide user authentication to a PDF form

Guys I have develop a webservice on XI , and I am calling that webservice using PDF forms developed in WebDynpro . The problem is the webservice needs user authentication and I don't know how to pass user id and password from pdf form to web service . Can anybody help me out
Thanks
Manish

I don't know what you mean by "printed entries"; you mean filled-in form fields?

How to link two authorizations to an object.

Hello,
In the EWA report I received the following recommendation:
"If you do not want to disable development in your system, you have to exclude OBJTYPE=DEBUG with ACTVT=02 from the profile and allow any other object type for S_DEVELOP. This means that development and debugging with visualization are still possible.
You can do this by linking two authorizations to object S_DEVELOP: One with all object types (except "DEBUG") and all activities and another for object type DEBUG only with all activities (except 02)."
How to achieve this?
Thanks
Galina

> I try not to maintain transactions in SU24.
>...
> We have a small user population.
I can understand that, however it still has a downside when your user base grows, or you move on and someone else needs to take over, or the functional consultants leave the building and when you upgrade or apply support packs and need to make some changes, then you don't know why the authorization was added manually - at least not without having to sieve through a sea of documentation and mails etc.
It is easier to find a transport request and it's documentation IMO, and who knows about it, approved it, tested it, etc.
It is just a little organizational discipline thing, but it does go a long way.
Cheers,
Julius

How can the user authorization "Display , not Edit" be fixed?

Hi,
I need to give users the authorization to "DISPLAY" a transaction (e.g. VKM1). They are not allowed to "EDIT" or "RELEASE DOCUMENTS".
How can I do that?
Thank you for your feedback.
Kind regards,
Linda

for every transaction code there will be objects which is linked to the transactions code.
For ex:- For VKM1 Transaction code there are two objects (V_KNKK_FRE, V_VBUK_FRE) with activity 03(display) and 23(maintain). So, give the authorisation activity 03 to the transaction. So, users can able to see the data but not having the authorisation to release or maintain.
Reward points if helpful

How to popup User defined window(No object table)

after clicking defined new value in combobox of user defined screen(screen painter)

Hi rajeswar,
You must launch your own form with a grid with the existing value. Then you must update/add the modified/new records.
Regards,
Vítor Vieira

DIR User Authorization

How to provide user authorization and restrictions for DIR's?

Hi,
Please refer link below
http://wiki.sdn.sap.com/wiki/display/PLM/AuthorizationObjectsin+DMS
It has list of authorization objects for DMS using which you can control access to DIR.
Hope this is useful.
Regards,
Deepak Kori

Copying User authorization between databases

Hi All,
Let us say i got two DB. How to copy user authorization between them.
Thanks and Regards,
Vin

Hi Vin.......
You can use Copy express in order to transfer Authorizations from one DB to Other......
Regads,
Rahul

How to provide a same user SU01 for admin and display authority on PFCG

Hello Security Experts,
I am working on a requirement where I have to create a role for user administrator with Display access in PFCG but user should be able to use SU01 to do user administration meaning create , change user ( including role assignments) , delete , lock/unlock user.
First I have maintained S_USER_AGR as ACTVT 03,08,22 / S_USER_AUT as ACTVT 03,08,22 / S_USER_GRP as ACTVT 01, 02, 03, 05, 06, 08, 22, 78 / S_USER_PRO as ACTVT 03, 08, 22.
Disabled Objects S_USER_VAL and S_USER_TCD.
While testing the role I got authorization error where my SU53 and trace pointing at missing value in S_USER_AGR as ACTVT 02.
After assigning S_USER_AGR as ACTVT 02 the role assignment is allowed in SU01 however the role change is also enabled from PFCG where my test user is able to get in to the role in edit mode (however he cant do any changes in role or generate the role as I have disabled S_USER_VAL and did not provide 02 on S_USER_PRO ) and save the role. This should not happen as per requirement.
How can I restrict PFCG to display and allow user to assign roles to end users ? Kindly suggest and help.
Thanks in advance for your help.
Regards
Murali

Hi
Run pfcg and try to go to change with your restricted settings then click on the error message to get the table entries in performance assistant. Put those in prgn_cust via sm30.
Then use 22 instead of 02 in newly called object S_USER_SAS.
Make sure you have at least one user with * in that object for full access across the landscape before transporting the table.
Cheers
David
Edited by: David Berry on Oct 23, 2010 10:25 AM
Edited by: David Berry on Oct 23, 2010 10:26 AM
Forgot to say - when you have the new object value 22 in your restricted role and assigned to test user prior to moving to PROD the only way to go into change mode is to first go to the USER tab and then press change. Anywhere else and you'll still get the 'you are not authorised' message.
Edited by: David Berry on Oct 25, 2010 8:04 PM

How to determine role authorization of user in MAM?

Hi everyone,
I'm new to SAP and SAP MI, and I am currently implementing (or "enhancing") a MAM. I have the following question on user authorization:
In terms of role authorizations, does anyone know how I can determine what roles an authenticated user have from SAP? For example, if user A logs into the MI Client, and if this user accesses the MAM, is there a way for the MAM to know what kind of user roles he/she has? Is there a SyncBo that will give me such info? I checked the JavaDocs for the SyncBo's, but they have NO descriptions. The closest thing that I found was in MAM090 (Interface com.sap.mbs.mam.bo.MAM090). There are getter methods for getRoleGen(), getProfileResource(), and getPartnerRole(). Are any of these usable?
Are there any good documents that I can look at to determine what each SyncBo's does?
Many thanks!
Jeffrey

Hi Jeffrey!
Here are the 3 different checks you have to look at"Users & Authorizations" for setting up your MAM Users.
(1) SAP Backend:
(1a) The SAP MAM User who synchronizes with the Backend from the MI Client should have all necessary authorizations for Plant Maintenance Components of the SAP System that are associated with your MAM Scenarios.Pl refer to the following SAP Authorization Objects I_ALM_ME ,I_AUART,I_BEGRP,I_BETRVORG,I_CCM_ACT ,I_CCM_STRC,I_ILOA,I_INGRP,I_IWERK,I_KOSTL ,I_QMEL,I_ROUT ,I_ROUT1,I_SOGEN,I_SWERK,I_TCODE ,I_VORG_MEL,I_VORG_MP ,I_VORG_ORD,I_WPS_MEB ,I_WPS_REV in your Backend System and have it assigned to the User Profile, based on your requirement.
(1b) Service User for setting up the MAM & MI Landscape: This user logon info has to be setup in the RFC Destination that is associated with your MAM25 SyncBOs, to logon to the Backend System and this user should have the basic authorizations required to establish the connection.
(2) MI Middleware: The SAP MAM User who synchronizes with the Backend from the MI Client should have the following Authorization Objects assigned to his/her profile. S_ME_SYNC, S_RFC, S_TCODE.
(3) MI Client: Refer to MI Security Guide.Pl note that the MI Client MAM User is same as the Middleware User and the Backend User.You should be taking care of this already.This is just a FYI.
Let me know, if you are looking for any other additional info.
Thank You
Gisk

How we can show authorization object at infoprovider level

hi all
how we can show authorization object at infoprovider level..
shalini

S_RS_ICUBE:
          Auth objects for working with Infocubes and their sub-objects. For example,
          protecting users who can define the Infocube, applying update rules, and
          looking at the data in the Infocube.
In order to execute any query, u must have access to R_RS_ICUBE and S_RS_COMP. S_RS_COMP is
a powerful object that enables u to make choices on how to secure.

How to provide text formatting options to user from a text field

Hi,
My requirement is - in the interactive form, a comments field needs to be provided where user should be able to enter text with formatting options like
Headers
indentations
bold/italic
bullet points and numbers
Once user enters the formatted texts in a text field, data needs to be displayed/printed in the same format. Could you help me on how to provide these formatting options to the user for a particular text field?
I understand that once I define the text field with format XHTML (with RTF), user formatting can be captured and displayed in the same way. But I am not sure on how to provide the formatting options for the text field.
Thank you,
Madhu

Hi,
if you select a text field for Rich Text and the press Ctrl + E you'll get a bar for all available text formatting options in Acrobat/Reader.

How to set user preferred timezone in OBIEE for all objects.

How to set user preferred timezone in OBIEE for all objects based on users TZ(may be from @{session.timeZone}). without changing My Account -> Preferences

Check
Time Zone Specification from http://docs.oracle.com/cd/E12844_01/doc/bip.1013/e12187/T421739T481157.htm#4535403
just in case https://blogs.oracle.com/xmlpublisher/entry/how_to_keep_your_dates_from_go

How to create a new user without any sample objects from any other user?

Question as the title.
I had the example dababase installed when I installed the Oracle database.
Every time, when I create a new user, there will be some example objects coming
with the new user.
How can I remove these objects from the new user?
Or, how can I create a new user without the example objects?
Thanks in advance.

I think the easiest way for you would be to use OEM.
Just locate each object that you want to remove and right click->remove. Don't bother doing this for any indexes as these will be removed when you drop the corresponding tables.
If you want to try command line through sqlplus then identify the objects you want to remove by selecting from the user_objects view while logged in as this user. This will give you the name and type of object. Then issue the relevant drop command.
It's probably worth making sure you have a valid backup first, just in case things go wrong!

How to Get user profile properties in provider -cloud hosted app in sharepoint online - office 365 using REST API?

How to Get user profile properties in provider -cloud hosted app in sharepoint online - office 365 using REST API?
any idea?

Hi,
From your description, my understanding is that you want to get user profile properties in provider-hosted app in SharePoint online using REST API.
Here is sample code for getting user profile properties:
http://www.vrdmn.com/2013/07/sharepoint-2013-get-userprofile.html
Here is a blog below about accessing data from the provider-host apps:
http://dannyjessee.com/blog/index.php/2014/07/accessing-sharepoint-data-from-provider-hosted-apps-use-the-right-context/
Best Regards,
Vincent Han
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

How to provide user authorization in PI objects

Similar Messages

Maybe you are looking for