Linking Query group to an SAP role

I am able to link the Query group to the role but when we test the user does not have access to it. I know this used to be a problems years ago that I thought was fixes. Any ideas on how to get this to work?

Hi,
Assign the required user groups to the user in Sq03. if user still getting same error even after assignments in Sq03, ask user to please change query areas as below and check.
Sq01 --> Environment --> Query areas --> select "Stanard area (client-specific).
Regards,
Gowrinadh

Similar Messages

  • User does not appear in group created from SAP role

    Hello --
    I have a user that has logged into InfoView successfully with SAP authentication and is showing in the CMC under the "User List." When I view the list of users in the group that was created from the SAP role he was a part of, he is not there.   When I go to the user account and view "Member of," the group IS shown in the list. 
    Any idea?  Any way I can "refresh" the group or anything like that?
    Thanks
    Casey

    Thanks for the replies.
    We are on XI 3.1 FP1.8 and we do have a CMS cluster.  Server reboots this weekend seem to have resolved the problem. I am curious why this question was asked, though:
    "Did you reassign the user to another SAP role after the user has already logged at least once in the InfoView?"
    Is this something that could have caused the problem or is it a possible workaround if we run into the issue again? 
    Thanks again...
    Casey

  • Announcing General Availability of PowerShell Connector and Release Candidate of Generic SQL and SAP Roles/Users

    The FIM team is pleased to announce the availability of some additional Connectors for FIM2010R2.
    General Availability of PowerShell Connector
    The PowerShell Connector can be used to communicate with a system through PowerShell scripts. This allows an easy and flexible way to communicate with other systems but also to pre-/post-process data and files before handed over to the FIM Synchronization
    Service. We believe the community will help providing scripts for this Connector for various systems and will open a place where scripts can be published for reuse.
    TechNet docs:  
    http://go.microsoft.com/fwlink/?LinkID=393057
    Download:         
    http://go.microsoft.com/fwlink/?LinkID=393056
    Release Candidate of Generic SQL Connector
    The Generic SQL Connector will allow you to connect to any database where you have an ODBC driver available. It enables new features compared to the built-in MA such as support for Stored Procedures, running SQL scripts, built-in delta import support, import
    multiple object types, connect to multiple tables, and much more. This Connector is built on ECMA2.3 which allows schema discoverability to be customized in the Sync Engine UI. A pre-release of the next Sync Engine hotfix is included with the Connector download
    and is required for the Connector to work.
    Download:         
    https://connect.microsoft.com/site433/Downloads/DownloadDetails.aspx?DownloadID=52652
    Release Candidate of SAP Users and Roles/Groups
    The updated SAP templates for Users and Roles/Groups allows you to manage Users, Roles, and Groups in SAP. This also include password sync for Users to SAP. The Connector will make sure roles are represented as groups to make it possible to manage these
    with bhold. This template will require the previously published WebService Connector:
    http://go.microsoft.com/fwlink/?LinkID=235883.
    Download:         
    https://connect.microsoft.com/site433/Downloads/DownloadDetails.aspx?DownloadID=52651
    If you have participated in any other Connector preview program you will have access to the Release Candidate downloads. If you have not participated before then to get access to the preview programs on Connect either join the program “Identity and Access
    Management”, “FIM Synchronization Service Connectors Pre-release” on
    http://connect.microsoft.com/directory or follow this link
    http://connect.microsoft.com/site433/SelfNomination.aspx?ProgramID=6709&pageType=1
    We have also published an update to the Generic LDAP Connector adding support for some additional LDAP directories, see
    http://support.microsoft.com/kb/2936070/. If you have additional LDAP directories you think we should support, please feel free to contact me.
                    On behalf of the FIM Sync team,
                    /Andreas Kjellman

    On Tue, 18 Mar 2014 08:09:43 +0000, David Burghgraeve wrote:
    We've been using the OpenLDAPXMA to be able to connect to ACF2 CA-LDAP (from Computer Associates) running on a IBM Z-OS Mainframe System. We've been using it for password synchronization since 2004 on MIIS. Today it's still used via the
    OpenLDAPXMA (64bit) on FIM 2010 R2.
    We had to tweak the password management component in the OpenLDAPXMA to support the error messages we get from the ACF2 System, as we support a multi-master password setup between Mainframe and Active Directory (one can change the password on
    MF and/or on Windows). by example  "LDP0406E ACF2 error modifying lid(ACF00155 NEW PASSWORD CANNOT BE THE SAME AS CURRENT PASSWORD)".
    Additionally, we cannot get the delta import to work with the CA-LDAP, there's no capability in it and we tried to use the time attribute to use in the query for recent changes, but it does not work. (I think we need it in a large integer format
    or unix time integer).
    Would be great to have Microsofts' support in this :)
    In a case like this where your follow-up has nothing to do with the
    original post you should create a new thread.
    Having said that, neither of the MAs to which you refer are official
    Microsoft MAs and as such there is no support from Microsoft available.
    Also, keep in mind that the ECMA1/XMA extensibility framework has been
    deprecated and replaced by the ECMA 2.0. You should plan on replacing
    existing ECMA1 management agents with ECMA2.0 connectors.
    Paul Adare - FIM CM MVP
    "It's 106 light-years to Chicago, we've got a full chamber of anti-matter,
    a half a pack of cigarettes, it's dark, and we're wearing visors."
    "Hotsync." -- Paul Tomblin & Peter da Silva

  • BO authorization model with sap roles / access tot folders, functionalities

    Hi Specialists,
    As authorization cunsultant in BI, I have little knowledge of the security setup in Business Objects.
    I have to setup an authorization model were the authorizations are assigned via sap roles in the backend BI system. These roles are imported in BO were they can serv as 'user groups' and access to folders, functionalities.
    Can anyone provide me a overview, guide, training document... on how the authorizations are managed in BO and best practice when they are linked to sap backend roles.
    The goal will be to user the sap BI backend roles and user them to grant users in BO specific access to specific folders. Eg; User A can access folders 1 as "refresher only", User B is able to publish reports in folder 2, User C has only view access in folder 2...
    Any help would be great!
    Thanks very much in advance.
    rgrds
    Kristof

    Hello,
    this is the best approach you mentioned here.
    I prefer to create roles serverd as functionalities in the Backend. For Example you have a "View" role, a "Refresh" role and so on.
    On the other hand i saw some setups where there is only on role in the Backend with all the BO Users. Then you have to create you functional groups in BO and have to assign the Users there to the Groups.
    Check the Adminguide of BO XI 3.1 for more Informations.
    Regards
    -Seb.

  • Search criteria is not working in Responsible Group field in sap crm could you please help me this how to achieve.

    search criteria is not working in Responsible Group field in sap crm could you please help me this how to achieve.I have writen code on EH_ONSEARCH .as per below...what changess i need to do..and through partner function and adding the selection params please send the sample .
    code. partner funtction - ZRG DATA :
    DATA : lv_partner_fct type .
    types: begin of ty_resp,
           partner    type but000-partner,
           name_last  type but000-name_last,
           name_first type but000-name_first,
           mc_name1   type but000-mc_name1,
           mc_name2   type but000-mc_name2,
           end of ty_resp.
    DATA: lv_resp_bp type STANDARD TABLE OF ty_resp INITIAL SIZE 0,
           lw_resp_bp type ty_resp.
    IF lv_attr_name = 'Rgroup'.
    lr_entity->get_property_as_value( EXPORTING iv_attr_name = if_crm_srqm_uiu_const=>gc_attr_low
                                       IMPORTING ev_result = lv_low ).
    IF lv_low IS INITIAL.
    SELECT partner
           name_last
           name_first
           mc_name1
          mc_name2
    FROM but000 INTO table lv_resp_bp
    WHERE mc_name2 = lv_low and bu_group = '0010'.
    loop at lv_resp_bp into lw_resp_bp.
        lv_low = lw_resp_bp-mc_name2.
      lr_query_service2->add_selection_param( iv_attr_name = 'Rgroup'
                                                iv_sign = lv_sign
                                                iv_option = lv_option
                                                iv_low = lv_low
                                                iv_high = lv_high ).
      ENDLOOP.
    if lv_partner_fct = 'ZRG'.
      lr_entity = lr_iterator->get_next( ).
    CONTINUE.
    ENDIF.
    lv_attr_name = 'BU_PARTNER'.
    ENDIF.

    <b>You can acheive   this .... first by creating the search help exit    ... by  creating the maintaince  view   then   using it in the   Creation of the search help </b> ...
    see the link for attaching the view   to the serach help .
    <a href="http://">http://www.sapdevelopment.co.uk/dictionary/shelp/shelp_elementary.htm</a>
    reward  points if it is usefull...
    Girish

  • Query Group in Query Category different with Authorization's group number

    Hi All,
    In Authorization screen, it allowed to authorize up to 20 query group
    Whereas in Query Category window, it has only max 15 query group.
    Anyone has idea on why is the difference?
    Thanks in advance,
    MH

    You have a very good point.  I believe something must be for system to use during development.  You may post a development request to see if the next version could have matched numbers of query groups.  The forum is on this link:
    /community [original link is broken]
    Thanks,
    Gordon
    Edited by: Paulo Calado on Jun 19, 2009 3:33 PM

  • Multiple linked query report in 6i

    Hi,
    I have a report with multiple linked queries.
    Group 1 (1st query)
    Group 2 (2nd query linked to 1st query)
    Group 3 (3rd query linked to 1st query)
    There is a page protect on group 2, when group 2 goes to a the second page it sometimes leaves room for group 3 to print on the first page.
    I do not want group 3 to print until group 2 has finished printing entirely.
    How can I push group 3 to print on the second page if there is room on the first page??
    Any help would be great!
    Kelly

    Hi Kelly,
    Typically, group 2 will be in a variable sized frame (M_2). If group 3 is below "M_2" (and there's nothing between them) then group 3 should be implicitly anchored to "M_2". That is, as "M_2" expands, group 3 will move down to make room for "M_2".
    The implicit anchor that would normally be created in the above scenario would be against group 3 with the following print conditions:
    - Print Object On: "Last Page"
    - Base Printing On: "Anchoring Object" (ie: "M_2")
    In this case, Group 3 would only print when "M_2" has completed - by the sounds of, this should be the bahaviour you want.
    Check the above values against your Group 3. You can always re-set the "Print Object On" property to "Default" to get Reports to create these values for you.
    If you have to, you can create an explicit anchor between Group 3 & "M_2" and set the above print conditions manually against Group 3.
    Robin.

  • Getting Java error while connect BEx query to WebI report (SAP BI4.0 )

    Not able to connect BEx query to WebI report (SAP BI4.0 ) . Below is the error I get while creating a new BEx connection to BOBJ WebI report .
    Please find the below error and help me ,
    "Select a BW Bex query window box "  displayed "Nothing to display " and server error as mentioned below
    Java.uti.concurrent.executionException: Com.sap.sl.sdk.repository.service.repositor******
    at Java.uti.concurrent.futuretask (Unknown source )
    at java.swing.swing.timer.fireactionperformed(Unknown source )
    at java.awt.event.invocationEvent.dispatch(Unknown Source)
    Thanks ,
    Pradeep Gorpadu

    Hi,
    I am on BO 4.0 SP05 Patch 6. Webi reports are just showing processing but not giving results. When I try to create new report it is throwing java security error.
    Tried applet patch upgrade(From link : https://websmp207.sap-ag.de/~sapidb/011000358700000902752013E) for webi certificate but didn't help.
    Please suggest what could be done.
    Thanks and Regards,
    Ankit Sharma

  • SAP roles- "getResourceObjects" search options?

    Hi,
    I'm trying retrieve all the roles (activity groups) from a SAP resource. I use the "getResourceObjects" form util method to do this. This method retrieves all the roles on SAP system. But I need to get only the roles starting with a particular character (say "X"). I went through the java docs for "getResourceObjects". I see only "map" in the arguments. I'm not sure which options to user get the roles starting with "X" only. Any direction would be highly appreciated.
    Thanks,
    kIDMan.

    Hi MV
    Thanks for responding.
    I was trying my hands at Closing Cockpit.
    In CLOCOC i was able to create hierarchies. One question regarding hierarchies: Is it possible to do closing for any one of the organizational unit like PRCTR or CCode? Or is the closing applicable to all the units in the hierarchy?
    Secondly: I am not clear about task list. What exactly goes in there. SAP help is not that helpful in this regard.
    What are dependencies?
    I understand that we need to register programs and transactions: prerequisites for CLOCOC. But I didn't understand why we need to do that. Whats the logic.
    I was going to try out all the steps but I ended up getting an ABAP Run time error which is not yet resolved, therefore, I may have asked more questions than I should have.
    One last thing, why do we need CLOCOS?
    Thanks in advance and excuse my novice knowledge level in this area.
    Regards,
    Vj

  • SAP roles and BW

    I am new to SAP and BW.  A goal of mine, straight from my GEM form, is to "Increase my knowledge of the security in the SAP application by understanding SAP roles and how they apply to Business Warehousing".  Please point me to websites, books, white papers, etc.
    [email protected]

    Zip
    Please check these links and hope it helps
    http://help.sap.com/bp_biv235/BI_EN/documentation/Authorization_BW_Proj.pdf
    http://help.sap.com/saphelp_nw04/helpdata/en/52/671595439b11d1896f0000e8322d00/frameset.htm
    Thnaks
    Sat

  • Link Query and Ref Cursor Query

    Hi all!!
    How can I link Query and Ref Cursor Query??
    I mean, How can I pass input parameters to the PL/SQL procedure if they are not User parameters but they come from another table??
    Thanks a lot
    F.

    I have searched the forum and this is the closest to my problem.
    Just started using ref cursors in my reports.
    The problem I am running into is that I have two ref cursor queries in my report - they each contain a column named seq_no which forms a join (in the database) .
    My report returns the correct number of records in each query, but I can't find a way to enforce the join. I've tried all the methods I can think of including combining the results into one query.
    The IDE won't let me join on a column and when I join on the group (which I make only contain the seq_no fields) that join is ignored.
    Can anyone help me on this?

  • Is it possible to create a Material Group Hierarchy in SAP ECC?

    Hi,
    I'm trying to create a Material Group Hierarchy (not a Product Hierarchy) in SAP ECC.
    I've read some discussions about this theme:
    MM Material group hierarchy ?
    but still I'm sure if it is possible to create a Material Group Hierarchy  in SAP ECC or if it is only an IS Retail functionality.
    Thanks in advance,
    Luis.

    Please check this answered link:
    Re: Material Group Hierarchy
    Re: Material Group Hierarchy
    Re: Material Group Hierarchy
    Edited by: Afshad Irani on Jul 1, 2010 1:03 PM

  • Configure custom query group in navigation menu

    How do we configure custom query groups? Say for example: I have created a custom query group and added my custom query definitions to it. How do I configure this so that when I click on Contract Management Tab on the workbench, my custom query group is invoked?
    I need to configure custom query group in navigation menu. Any help would be appreciated.
    Regards,
    Bindu Sharma

    Hi Bindu,
    As per my understanding, it is standard and query group cannot be added in the navigation but you can add your quries under Agreement and Claus Library.
    Kindly refer the blog for the same: http://scn.sap.com/docs/DOC-55733
    Let me know if you need any other information.
    Thanks,
    Kushagra A

  • Erro when importing SAP roles into BO Edge XI 3.1

    Hello,
    I'm currently setting up the SAP Best Practices on a BO Edge XI 3.1 system (32 bit) and trying to link up with an SAP ECC 6 EHP 4 system (64-bit).
    When getting to the authorisation step I go to the CMC > Authentication > SAP > Role IMport.
    There I receive following error: 
    JCO.classInitialize(): Could not load middleware layer 'com.sap.mw.jco.rfc.MiddlewareRFC' JCO.nativeInit(): Could not initialize dynamic link library sapjcorfc. Found version "2.1.9 (2010-01-28)" but required version "2.1.8 (2006-12-11)".
    After closing and re-entering the same tab I receive following message: org.apache.jasper.JasperException
    I have not even the possibility to enter the roles manually. The system doesn't allow me.
    There is no specific SNC security set up for my SAP system.
    I have been able to connect to the logical system of SAP because when I updated on the tab: "Entitlement Systems" it proposed my logical system name that I created in SAP.
    As I found on another SAP forum the version 2.1.9 should also be the good version.
    Can someone help me out with this one (does anyone has still the older SAP Java connector version 2.1.8)?
    thanks in advance
    Thierry

    Hello,
    That's what i did but didn't help.
    I finally managed to find the problem. I had also to install a file named librfc32.dll in the same directory. When installing the necessary files apparently the version of this file librfc32.dll was not the correct one because it didn't match with the version that is installed together with the Sap gui (I presume). So by re-installing the former version of this file librfc32.dll it finally worked.
    thanks anyway

  • Third party background ID requires standard SAP role

    We are connecting to a 3rd party through a background ID that we have created on the ABAP side.
    However, in testing this access, we notice that this connection does not work if we assign a custom role (or even SAP_ALL) to it.  It works ONLY if we assign a specific SAP-delivered role (SAP_XI_ADMINISTRATOR_J2EE) to it.
    We have logged into the J2EE UME and assigned our custom group (which corresponds to our ABAP role - ZSAP_BATCH_XI) TO the Administrator Role in the UME.  But this still doesn't seem to fix the problem, and it is still requiring the standard SAP role.
    Can you pls. let me know if there is another step I should do, to force my background ID to use my custom role, rather than the standard SAP role.
    Thank you,
    Ashish

    Hi,
    This is standard in SAP and you would only need to assign the WBS to the Sales Order for which the Material is being Procured for and the Cost / budgets can be tracked through this WBS element.
    This activity can be seen thru PS Reports
    Best regards
    Amit Bakshi

Maybe you are looking for