Postpone sequence of authorization
We have some services where we want to 'postpone' the authorization task until another task has been completed by a performer. For example, we want the provider/performer to enter a price for the service (via a field in the form) before we send the requisition containing the price for authorization. Until now, we only have services that start with authorization before proceeding to the next steps/tasks.
I hope someone has tried this and can give a step-by-step instruction on how to 'plan' a service in the following sequence:
Task for a performer to enter important information
Authorization to the nearest manager
After approval forward the task to same or another performer, or even another system linked to newScale.
Thanks.
BR/Christine
While there is not a way to "postpone" an authorization task, the use case you describe is an ideal one for the use of either a Review task or a Pricing Moment task. I belive a Review task the better approach here. I'd be interested to see what others think.
Review task:
(1) In ServiceDesigner on the Authorization tab for you service, click the Service Group Review radio button.
(2) Configure the review task.
(3) Ensure that, in Administration > Authorizations, you have the sequence of Authorization tasks configured so that Service Group Review tasks occur prior to Service Group Authorization tasks.
(4) If you are using newScale 9: Use the "Set Price" action in a conditional rule to set the transactional price of the service to the price in the target field on the form.
Pricing Moment task:
(1) In ServiceDesigner on the Offer Tab > Pricing subtab for your service, set the Pricing type (Estimated/Fixed field) to Pricing Required.
(2) This will automatically trigger a Pricing Task prior to any Authorization tasks.
(3) Pricing tasks all go to the Default Service Delivery Queue. You will need to give the performer(s) of the pricing task the "Acess Queue" permission for the Default Service Delivery Queue.
Similar Messages
-
ACS 5.3 Authorization problem with using Identity Groups in Access Policy Rule
Hello guys, I am found a problem which I can't solve regarding authorization with using Identity Groups in Access Policy rule.
ACS version: 5.3.0.40.6 (internal build B.839)
I have very simple RADIUS Authorization rule which authorize user on behalf of right Identity Group.
Requested Identity Group exist
Testing user is created in Internal Users and has assigned requested Identity Group
Radius Access Policy:
Authentication against Identity Store Sequence, where authorization server is external RSA SecurID device and additional attributes retrieval is configured from Internal Users.
Authorization is very simple – One Rule with only one Condition which is: Identity Group - in - Requested_Testing_Rule. Then Default rule is set to Deny.
When I will try login with my testing user then authentication against RSA SecurID is OK, but authorization will be denied by Default rule – It looks like my Rule with Identity Group is totally omitted.
I am managing several other ACS servers (version 5.3 but with older patches) where similar rules are working without problem.
What I am tested:
Remove testing user and create his account again.
Rename Identity Group
Use another Identity Group
Remove Access Policy rule and create it again
Use Compound Condition: System:Identity Group
Use Compound Condition: System:UserID instead of Identity Group in Rule (it is working without problem)
Do you have any idea where problem can be?OK guys, it started working yesterday without any configuration change. Maybe it was some database inconsistence wich was solved by ACS itself.
-
Aggregation Level authorization Error
Experts,
When i try to create a aggregation level in integrated planning i come across authorization error.
Once i give the technical name and description for aggregation level when i choose transfer, i get this error " NO AUTHORIZATION FOR OBJECT ALVL XXXX"
where XXXX - technical name for aggregation level.
Anyone familiar with this error? Please reply ASAP.I am also getting same authorization error while trying to create aggregate level in planning modeler. Even in Info Provider tab, whatever real time info cube is specified, I get authorization error.
There was a posting by Cecilia Guerra for similar type of auth error few weeks back. It seems the problem was resolved, but solution is not written. I requested yesterday in the same posting to find out the solution. But no reply yet.
We have verified that we have authorization for the following new authorization objects
S_RS_ALVL: Authorizations for working with aggregation levels
S_RS_PLSE: Authorizations for working with planning functions
S_RS_PLSQ: Authorizations for working with planning sequences
S_RS_PLST: Authorizations for working with planning function types
S_RS_PLENQ: Authorizations for maintaining or displaying lock settings
But we are still getting authorization error ...
Best regards,
Sanjeeb -
Hi,
When i am executing planning layout i am getting following error.
"You have no authorization for the requested data".
i am able to execute actual layout,in actual layout having the data but while executing plan layout it's getting messages.in My planing area don't have any authorization aobjects.
Thanks.Hi,
the authorizations that users require for BI Integrated Planning are the same as they require to analyze the data in a query. In addition to the authorization for displaying data, the authorization for changing data is also required in the analysis authorizations.
Check for standard authorizations: The system checks authorization object S_RS_COMP which contains the activity 'Execute'. You require this authorization for the InfoProvider on which the query has been defined.
Additional you have to check if you have included the following objects:
Planning function/S_RS_PLSE
Authorizations for working with planning functions
Planning sequence/S_RS_PLSQ
Authorizations for working with planning sequences
Check this links:
http://help.sap.com/saphelp_nw70/helpdata/EN/c8/ad8438619a7c51e10000009b38f842/frameset.htm
http://help.sap.com/saphelp_nw04s/helpdata/en/43/fd53821d702ae4e10000000a422035/frameset.htm
Regards
Andreas -
Problem While calling Planning Modeler thru T Code RSPLAN
Hi All,
When I am starting the planning modeler and after entering the log on details on SAP Netweaver, the web is showing blank tabs of Info Provider/Aggregation level/etc.. Only blank tabs are appearing without any data.
I have gone thru the SAP Note 919850 (Problems with Planning Modeler..) but it didn't help. Also let me know that is their any connection of plannning modeler with the BI Web Template Maintenance??
Thanks in advance.
Amit VermaHi Amit,
You need the following authorizations to work on planning modeler.
Authorization objects for business planning:
S_RS_ALVL: Authorizations for working with aggregation levels
S_RS_PLSE: Authorizations for working with planning functions
S_RS_PLSQ: Authorizations for working with planning sequences
S_RS_PLST: Authorizations for working with planning function types
S_RS_PLENQ: Authorizations for maintaining or displaying lock settings
Also you need to be on SPS12 for the input ready queries to work effectively.
Some times there could be an issue with the JCo connectivity between the Webdynpro and the BI system.The user assigned to the JCo destination for BI metadata in webdynpro does not have enough authorization in the BI system.
The above authorizations would sort and also check with your Basis team about the JCO.
Refer this too
/thread/227167 [original link is broken]
Hope this helps and assign points if it does.
Raja -
IP in NW2004s - Security error for object ALVL
Hi,
When we try to create aggregation level on a realtime infoprovider getting security error. It says "No authorization for object ALVL..."
We are at NW2004s -SP7. This object was included in the role with an "*". Security trace for ABAP as well Java does not tell anything. The infoprovider is a regular one with out any We did try with much broader security like SAP_ALL.
Did anyone encountered this type of Issue?
Any help is appreciated.
Regards,
Surges AblactatingSuresh,
Check out thread
Integrated Planning Object - ALVL
You will need the following
Authorization objects for business planning:
- S_RS_ALVL: Authorizations for working with aggregation levels
- S_RS_PLSE: Authorizations for working with planning functions
- S_RS_PLSQ: Authorizations for working with planning sequences
- S_RS_PLST: Authorizations for working with planning function types
- S_RS_PLENQ: Authorizations for maintaining or displaying lock settings
Dennis -
Hi all,
I've been asked to create a new user profile similar to SAP_ALL but with restrictions, because we don't want this kind of user to modify the basis configuration of SAP as it is shared with other projects.
What are the steps to make this?
Thanx in advance.Hi again,
There is no standard document which helps you on the same because the user profiles are generally unique as per the scenario. This is generally a BASIS activity. You might get answers in service market place or help.sap.com sometimes.
Some tcodes which will help-
SU21
SU22
SU53
SUIM
SU01
You have to do little bit of search on SDN and other forums to get the answers. There are blogs, documents etc on the same. Few as under-
/people/sudheer.junnuthula2/blog/2007/03/22/sequence-of-authorization-check-for-a-transaction
/people/kristoffer.engh2/blog/2007/04/03/roles-and-authorizations
Authorisation Objects
There is a very good document in SDN - "Authorization Objects A Simple Guide" which tells you how to create and use the Authorization Concept in the most simplest of conditions. Authored by Glen Spalding.
Do reward with Points:)
I am sure that the above information will help you to get going.
thanks
Yash -
When I try to display the infoproviders in Planning modeler ...I get this authorization error:
"You do not have authorization for InfoCube ZIP_CUBE.
Any help is appreciated.Hi,
You don't have authorization objects for your role/profile.
These are the objects that you need for IP related access
S_RS_ALVL: Authorizations for working with aggregation levels
S_RS_PLSE: Authorizations for working with planning functions
S_RS_PLSQ: Authorizations for working with planning sequences
S_RS_PLST: Authorizations for working with planning function types
S_RS_PLENQ: Authorizations for maintaining or displaying lock settings
S_RS_ICUBE : for infoarea and cubes
Please refer the link for BI-IP authorization
Link: [http://help.sap.com/saphelp_nw2004s/helpdata/EN/43/fd53821d702ae4e10000000a422035/frameset.htm]
Thanks
Pratyush -
Hi All,
Can any one send me the complete Configuration guide of Out put determination and Batch determination(Automatic and Manual)
Please any would take more pain to explain
After Configuring the Output and Batch Determination .
1)How to Use Out Put detremination and where all it can be used and what errors are we going to get while we are working in Support Project related Output.
2)Where exactly it comes into picture and how to use Batch determination appropriately and what errors are we going to get in support project related Batch Determination.
Thanks in advance
Please send it on Priority basis.
Regards
SKBatch Management
Step (1) - Create Characteristic
Create Characteristic:
Go to CT04
Characteristic Z250ML
Go to BASIC DATA
Description Production
Format Data Type Character Format
No. Of Character 5 Enter & Save
Message Character 250ML Created
Step (2) Create Class
Create Class
Go to CL01
Class Syrup
Class Type 023 [023 Batch]
Basic Data
Description TONIC
Characteristic
Characteristic Z250ML Enter & Save
Message Class Type 023: Class SYRUP Created
Step (3) Create Material
Note While Creating Material Select view Classification Compulsory.
In Classification View Enter SYRUP
Type 023
In Sales: General/Plant Data
1. Select Availability Check [02] Individual Requirement
2. [-/] Batch Management ( Active this Batch Management)
Message Material CADILA Created
Step (4) Create Sort Sequence
Creating Sort Sequence
Go to CU70
Sort Sequence 700
Authorization
Maintain Sort Sequence [1]
Characteristic
Characteristic Z250ML Enter and Save
Note Sort Sequence give any Number as you like
Message Sort Sequence 700 is created
Step (5) Strategy Type
Creating Strategy Type
Go to VCH1
Strategy Type [SD01] (SD01 Fix Selection)
Click on the Key Combination
Select Material and Enter
Enter Material CADILA
Click on Selection Criteria
Class SYRUP Enter & Go back Screen
Click on SORT
Sort Rule 700 Enter & Save
Message: Condition saved
Step (6) Create Batch
Create Batch
Go to MSC1N
Material CADILA
Batch 180, Plant 1000, Storage Location 1000 and Enter
BASIC DATA
Expiration Date
Production Date 30.01.2008 Enter & Save
Message: Creation Batch 180
Step (7) Stock Posting
Go to MB1C
Note Enter Batch No 180
Step (8) Maintain Condition
Go to VK11
Step (9) Batch Determination.
Go to VOV7
Select the Item Category TAN and Check Batch Determination (Activate)
OR
Go to V/CA
Select the Item Category TAN and Check Auto Batch Determination.
Step (10) Search Procedure for Batch and Determination in Sales Document
Go to V/CA5
Select the Sales Area and Sales Document Type Assign SD0001 (Search
Procedure) and Active the Check Batch.
=========================0000000000000===========================
This complite Batch Determination with Step by Step process -
We have recently refreshed our test system and when I try to access ip>Start wizard I get a log on window, then when I enter my user name and password it says that I am unauthorized. Normally, this log on window is not present, when you click on the Start Wizard button it goes straight into the IP Workbench. Please help,
many thanks,
DavidThis is strange...check for host entries in your system and also for authorization on IP.
Check for JCO auth...(BASIS will do that)
[Troubleshooting SAP Java Connector (JCo) |https://wiki.sdn.sap.com/wiki/display/EP/TroubleshootingSAPJavaConnector%28JCo%29]
Also check these auth object:
S_RS_ALVL: Authorizations for working with aggregation levels
S_RS_PLSE: Authorizations for working with planning functions
S_RS_PLSQ: Authorizations for working with planning sequences
S_RS_PLST: Authorizations for working with planning function types
S_RS_PLENQ: Authorizations for maintaining or displaying lock settings
Hope it helps...
Regards,
Ashish -
No Authorization error in executing a planning sequence
Hi,
We are using BI 7.0 Integrated Planning.
We have implemented Mark Bernaud's file upload solution. We have used a planning sequence that uploads the file and stores it in a cube. Using it, we are able to upload files without any problem when executing with a SAP User Id which has all the authorizations (the user id has SAP_ALL specified in its list of profiles). Now, we have a requirement where we need to execute the file upload using a user id which has limited authorizations. When we are trying to execute the file upload with the userid that has limited authorizations, we are getting the following authorization error.
'You are not authorized to execute sequence PL_SEQ_FL_UPLOAD'
where PL_SEQ_FL_UPLOAD is the name of planning sequence we are using. We have also included the authorization variable in the filters being used as suggested in one of the blogs but this didn't help.
Could anyone please let us know the authorization objects to be added to the user id to enable access to this file upload.
Many Thanks,
Narendra.Thank you very much Diogo,
The objects you suggested were already there. We have successfully traced the error by switching on the trace using ST01. We found the reason for the error to be that display authorization is not provided for S_RS_PLSQ whereas execute authorization is already present for that.
Once again thanks Diogo.
Many Thanks,
Narendra -
Planning Sequence error - You do not have sufficient authorization
Hello Experts,
I am encountering the following error during execution of my planning sequence:
You do not have sufficient authorization
Message no. EYE007
Diagnosis
You do not have sufficient authorization for the requested data records.
Procedure
Either select other data or get the required authorizations from your administrator.
Can anyone please suggest me what could be the possible cause of this error and how can I overcome it?
Thanks in advance,
Nitish.
Edited by: Nitu_0105 on Jan 12, 2012 11:54 AMCheck the planning level on which planning sequence is based for values restriction.Looks like values for which it is been restricted you are not authorized or Roles assigned to you are not restricted with values in planning level.
Also check if level is been restricted with any variable on which authorization is been restricted.Some are user specific example specific business area are assigned to only some users ...so you need to add your user ID to those variable. -
Issue with Planning sequence authorization in WAD
Hi,
There is a planning sequence which I can execute through Modeler without any issue. However I am not able to execute the same from WAD. It says 'You are not authorized to execute planning sequence....'
Please advise.
Regards,
SSChI,
You need to create one role in which add planning related authorization object ie
S_RS_PLSE Planning Function
S_RS_PLSQ Planning Sequence
S_RS_PLST Planning Service Type
S_RS_PPM Authorization Object for BI Planning Process Management etc....
and attach to your id.
I think you do not have authorization for S_RS_PLSQ.
try this.
Regards,
Ganesh -
Authorizations for BPS planning interface with global planning sequence
Hi Experts,
I am creating authorizations for BPS project. I have a web interface with BPS layout (excel) and after users enter data there is a global planning sequence to be triggered. However there is some authorization missing in my concept as I receive "no authorization to display data" message.
I have found authorization objects for BPS and put full access everywhere but it is still happening:
<b>R_AREA
R_PLEVEL
R_PACKAGE
R_METHOD
R_PARAM
R_BUNDLE
R_PROFILE
R_PM_NAME</b>
On different web interface without global planning sequence everything is ok and data is saved. If I use SAP_ALL I am able to save data also with the sequence so obviously I am missing some authorization. RSSM su53 and st01 don't show anything.
If you know something please advise.
Thank you.
PavolPavol
Take a look at this, might help you...
http://help.sap.com/erp2005_ehp_02/helpdata/en/c8/ad8438619a7c51e10000009b38f842/frameset.htm
R_BUNDLE should do it but maybe this would throw some ideas.
Srikant -
[ISE] What is the best Authorization rules sequence ?
Hello,
like a FW set of rules, I think that ISE's authZ rules should also be ordered with care ?
What are the best practices ?
Most used first ?
Guest, MAB and Webauth at the end ?
Tell me...
Any screencap is welcome
Regards.Hi,
The first rule matched is the rule that applies. Best practices are outline by one of the tac engineers in this document.
https://supportforums.cisco.com/community/netpro/security/aaa?view=blog
You can set attributes such as network device groups to determine if the wired, wireless, or vpn policies need to be in effect (which I am sure you are aware of).
Thanks,
Tarik Admani
*Please rate helpful posts*
Maybe you are looking for
-
I am getting an error message "Could not resolve <Script> to a component implementation." This is the code I am attempting to run, from the tutorials offered by Adobe. <Script> {import mx.controls.Alert;} </Script> I've tried this without brackets, w
-
In the Bookmark Toolbar, the icons for websites take up too much space and are distracting. I used to use the Bookmarks - Deiconizer add-on but after updating to Firefox 22 it doesn't work anymore. I tried adjusting the userChrome.css as in other pos
-
Why do apps close immediately after opening?
I updated to iOS 4.3.3 on my iPad, now my apps close immediately after I open them. Built-in apps are OK, but all my added apps no longer run! Help! I have rebooted using the sleep button held down for 10 seconds. No joy. Now, I was advised to hold
-
How do I Extract Raw Clips of my captured HD footage?
This is probably a newb question, but what I want to do simply is to get raw pieces in the original format of my captured HD footage. I shot with the Sony F900 in 1080 true 24p (not 23.97) and captured with the Sony JH-3 deck. I captured the footage
-
Accessing page metadata on a content web part to generate a custom link.
This is what I am trying to do in Sharepoint 2013... Page1 has a metadata element which tags the page to a department (e.g. Finance, HR, Operations etc) and another element that tags the page to a location (NY, London, Brussels etc). On a new web par