Publishing Queries to Roles

Hello Gurus,
I would like your take on the practice of publishing BW queries to roles? For an example there are 10 sets of queries and these 10 are published into a role for each company that exists. So in essence if there were 20 company codes we will have 20 roles containing 10 queries hardcoded with a company code. I spoke to our BW developer to get an idea as to why this is being done instead of restricting access through S_RS_COMP. Response was that this was done due to performance reasons (something to do with the queries linking directly to the infoprovider containing the information rather than going through all of the infoproviders). So,  Rather than leaving the query open and the user entering the parameter themselves it was decided that the queries were to be hardcoded to cut down the time it takes for systems to display the results.
Anyone experience this issue before? My goal is to setup a derived role where the child roles are restricted by S_RS_AUTH for the company codes and query access through S_RS_COMP instead of being published to a single role. Before I do this I would like to figure out a way to move away from this practice without affect performance for end users.
By the way our users access these queries through the Bex Analyzer. 
Thanks,
Wes

Wes,
        Using derived roles in BW or S_RS_AUTH may not be the best design as field for S_RS_AUTH does not appear as org level. So you are not really going to have any advantage by going with derived role concept in terms of maintainence effort.
        With 10 queries  - 20 Company Codes - you will not need 20 roles  because of Company Code, just update the queries with appropriate authorization variable for company code and restrict users on company code. Just 20 company codes should not cause any performance issues
        Also with hardcoding the queries for each single company code - how are you resolving the scenario when user has access to more than one company code/ or global access. 
Regards

Similar Messages

  • Queries Published to Workbook Roles

    Hello Gurus,
    I need some advice on this particular situation.
    I currently have users in our BI systems (BI 7.0) that are assigned to roles specifically for workbooks to use with the BEX analyzer. In this case there are users who can publish queries to workbooks for anyone to use (as long as they're assigned to the workbook role).
    Note:  To be specific, our business users do not create queries in production, but simply create a view of an existing query and make changes based on their specific need, which then can be saved to a workbook.   
    In the past we had workbook roles transported (in error) to production from development, which overwritten the queries published to the workbook in production. Updates to the workbook roles were only being made in production, so when the roles came over from DEV it wiped the queries that were created by the end users.  Iu2019m currently in the process on re-structuring the role authorization concept in our BI system and would like to incorporate workbook authorization to one role (role based security) instead of having multiple on-off roles for workbooks. Having one role means Iu2019ll need to work in DEV and push the changes to production, however with the workbook situation if any queries have been published to the one role it will be wiped every time a transport goes into production.
    I would like to the following:
    1. Is there an alternative method to running queries without utilizing workbooks?
    2. What would be the best scenario or best practice when publishing queries to workbook roles?
    Regards,
    Wes

    Wes:
    User cannot see favorites of another user in BEx Analyzer.
    Instead of saving a workbook to the role and risk having it overwritten the next time the role is transported, your users could save their changes as a view ('save view global' option).  They will not be prompted to save as a favorite or in a role - it inherits whatever role the query is in and will not be overwritten if that role is transported.
    Keep in mind that things like query properties set in the view are not retained like they are with a workbook, however.  The view stores the navigation state, variable values, etc.
    Hope this helps...
    Regards,
    Kerry

  • Publishing queries/workbooks to roles

    I'd like to know what the best practice is for organising the above. Our problem is that we develop a number of workbooks local to production. If we publish these to the roles carrying authorisations then they will be overwritten the next time we make a change to the authorisation values and reimport the roles. Is it necessary to have some roles which are used to hold authorisations and others to act as objects to publish queries/workbooks to?

    Yes,
    And I believe that's the best practice.
    Create a role just to publish the queries/workbooks only (just for the Menu).
    Create another role for the authorization objects.
    Both roles should be assigned to the user but manage independently.
    Diogo.

  • Transport request for BW queries and roles.

    Hi All,
    we need to craete 20 bw queries on 4 multiproviders. We need to save 18 queries as workbooks in one role and the other 2 queries in other role.  Both the roles and queries does not exist and will be created in Developement environment.
    We just want to know how we can transport them in the quality environment. What is the right method to transport them.
    Can we transport all the object queries, workbooks and roles in number of transport requests so that if few queries or workbooks needs any changes then we do not have to transport all objects just the request which includes the changed objects.
    Thanks & Kind Regards,
    Hardeep

    Thanks a lot for all of you for your quick response. But i still have questions.
    If we create one transport for roles and one transport for each query then we will be having 21 transport requests. But the transport request on same multiprovider can lock the clacuated key figures and restricted key figures, if they are present in more than one query, it means they will be present in more than one transport requests, so they can be locked and trasport request will be failed.
    If i just create one transport request for all the objects roles, quaries & workbooks it will not loack any object, and transport request will not fail. But i have to transport all the objects again if i need to change one of the queries.
    Please let me know if there is a method that i can divide my queries as per multiprovider and can create transport requests as per multiprovider so that we can not lock calculated keyfigures and restricted key figures. Is workbooks can be published in the role in the same transport request. If it is and if in more than one transport request we are publishing the different workbooks to the same role, will it lock the role.

  • Publish queries to EP 6.0

    Hi All,
    I am using BI Netweaver 2004s to publish queries to EP 6.0. I was wondering what are the options to publish the queries. Can I publish the queries directly to the roles in the Portal. Can I publish the queries to a BI role and have that role imported to the portal?
    If so how do I maintain the settings in the BI and portal to have these queries directly published in the portal
    Thanks,
    Doniv

    Hi Doniv,
    Prakash has very nice blogs covering the publishing strategies with EP.
    Part 1: /people/prakash.darji/blog/2006/09/04/sap-netweaver-2004s-bi--define-your-publishing-strategy-part-1
    Part 2: /people/prakash.darji/blog/2006/11/19/sap-netweaver-2004s-bi--define-your-publishing-strategy-part-2
    Hope it answers your questions
    Regards, Uday
    Assign points for helpful answers and get one point for yourself.

  • 1)some setting missing in BI Integration to EP 2)publish the BI role to EP?

    Hi All,
    1) We almost done BI EP integration, getting error in step: Maintain User Assignment in Portal.
    - what are settings in BI connection in EP? we are using SAP Logon Tickit method(not Uid Passs method), is there any user with user name and password required in this conneciton? if yes with wich Authorization in EP & BI?
    we have defined system alias in EP, is that same alias any where need to maintain in BI?
    - when i run BI report from RSRT > Java web OR Query desinger run to portal option, its giving me some error and required to check log at portal, what authorization required for My BI developer user id in BI and EP to run the report on EP from RSRT JAVA Wev or query desinger or WAD? in BI i have FULL authorization(SAP_ALL, SAP_NEW, ..) Is there any Authorizaiton required to give in EP as well?
    2) How to Publish the BI role In EP:
    Question is our EP guy is lookin new, and not sure what all authorizaiton to give to me, and how adjuctely creat ivew on top of BI reports,
    so I have already developed one enduser role consists all required authorization to run the BI report/query/view,
    we can publish the our report in existing role, we can also publish direct developed role to EP but from where to download upload this BI role to EP need to know? what all are the Steps authorization required for that? if anyboday have already gone through this.
    Regards,
    Dushyant.

    Hi Dushyant,
    I am supposing you are doing the BI Java x BI ABAP integration, right?
    Let's go per parts... I will try to respond directly some of your questions but frst of all, I think you should have ran the Template Installer (CTC) and after that checked the configuration with the supportdesk tool as per SAP Note 937697.
    What are settings in BI connection in EP?
    You have to maintain in the portal system landscape a system with alias "SAP_BW" which would be your BI Master System for that portal. The template installer creates this automatically.
    we are using SAP Logon Tickit method(not Uid Passs method), is there any user with user name and password required in this conneciton?
    You could use assertion ticket instead. The user mapping is automatic once you configure the system on both sides with the integration process. If you have problems after, we can look deeper.
    we have defined system alias in EP, is that same alias any where need to maintain in BI?
    Kind of... You need to maintain the default portal destination for the relevant portal through SM30 -> table RSPOR_T_PORTAL and it should have a destination in transaction SM59, too.
    when i run BI report from RSRT > Java web OR Query desinger run to portal option, its giving me some error and required to check log at portal, what authorization required for My BI developer user id in BI and EP to run the report on EP from RSRT JAVA Wev or query desinger or WAD? in BI i have FULL authorization(SAP_ALL, SAP_NEW, ..) Is there any Authorizaiton required to give in EP as well?
    RSRT uses the default destination in RSPOR_T_PORTAL. Try to use J2EE_ADMIN user for the first tests, at least. At first, no special authorizations are needed to run reports in BEx Web (which RSRT calls).
    2) How to Publish the BI role In EP: Question is our EP guy is lookin new, and not sure what all authorizaiton to give to me, and how adjuctely creat ivew on top of BI reports, so I have already developed one enduser role consists all required authorization to run the BI report/query/view, we can publish the our report in existing role, we can also publish direct developed role to EP but from where to download upload this BI role to EP need to know?
    There is a tool called "Role Upload" in EP. You could search about. If you need some help, I can get from the EP guys here (I am from BW). Of course, the process must be done with an administrator id.
    I hope it helps.
    Kind Regards,
    Marcio

  • Link between queries and roles

    Hello,
    Could someone tell me if there is a way to have an overview on the link between roles and queries?
    For example a table which give us a role and the liste of queries which are linked to this role.
    Thanks in advance.
    Hicham

    Hi,
    I also had same query :
    mapping between the query/report and the role with technical names - BI Sec
    Its a bit tricky.
    Actually there are no direct linkage between queries and roles. However, you can look up S_RS_COMP in the roles that will help you identify which all queries the role gives access to.
    Regards,
    Zaheer
    Edited by: Zaheer on Aug 28, 2008 4:19 PM

  • Assign queries to roles

    Hi,
    I want to be able to assign queries to role. For this purpose I went into PFCG and created two folders. I have assigned the queries to the two folders ( technical names). However they are not showing up in the roles in BEx.
    Can someone tell me Step-by-Step how this is to be done.
    Any help is deeply appreciated and will be rewarded with points.
    Thanks

    I am on BW 3.5.  We have done the following steps.
    1) Created a Role in BW using PFCG.
    2) Created two folders under the Menu option
    3) Assigned BEx queries to the folders.
    I have a question here:
    When assigning queries to the folders, what options do I choose. What Technical name do I give.
    i think the problem lies there as I am not able to execute the queries from within PFCG.
    Please let me know. Any help appreciated and will be rewarded with points.
    Thanks

  • Publish a BEx role in the portal

         Hello!
         I would like to know if any of you have ever encountered this situation. Is it possible to somehow publish in the portal a link to a BW role, so all the queries/workbooks stored inside can be opened from there? The thing is that the users generate in these folders their own queries from time to time according to business requirements, and they would like them to be available from the portal. If this approach is possible, then the maintenance required for the portal content administrator would be minimal when they create new content under these roles.
    I have used KM content for BO folders, but I do not know if something like this is possible for BW roles. If possible, could you please provide some how to's?
       Thank you very much,
       Victor

    Hi,
    You need not to create web template to publish query in portal.
    there are two ways for publishing
    1)Go to query designer Click on Query -> Publish-> To portal
    here you select the path where you want to create the iview
    2)Log in to portal setect the folder in which you want to publish report.
    right click -> create new iview -> select BI 7.0 iview -> next -> iview name ie report name -> next -> Application parameter -> here you need to write QUERY =Query technical name -> next -> finish
    Try this,
    Regards,
    Ganesh

  • How to assign 5 queries into role?

    hi experts,
    I have created 5 queries.
    i have created a role based on one role(its copied), what ever the queries are asigned to that role has come into my new role which i have created.i want to delete those queries and i want to assign my 5 new queries to the new role?
    regards
    vadlamudi

    Hi there,
    To remove the queries simply go to the Analyzer and inside the role select the query and click on delete. If prompted if you want to delete the reference or the query simple choose remove the reference (it removes the query from the role).
    To assign the new queries to the role, go to the Query designer and open the query and choose from the menu publish-ZtoRole and choose the role to assign the query.
    Do this for all the 5 queries to remove and all the 5 queries to add.
    Diogo.

  • Workbook Transport and Publishing in a Role

    Hi,
      I created a Workbook with some precalculacted queries.
      I transported the queries and Workbook to Quality System from Development.
      I don't want to publish workbook in any ROLE untill it is test in Quality.
      In development it is currently under Favorites,When i transported it to Quality,I can't able to find the workbook under Favorites
    and also
    How can i publish a workbook in roles
    Thanks

    Hi there,
    The favourites are dependent by each client, therefore, in development you'll see that workbook in the favourites and after transporting only the workbook you cannot find it in the favourites.
    To open it in quality system simply click on the find button and search the workbook by its description.
    After to assign it to a role (publish it), simply open the workbook in development and choose save as... of the BEx toolbar and select the role where you want to save it. Afterwards transport the role to quality (the workbook was already transported before).
    Remember that to save the workbook to a role in development you need to have that particular role assigned to your user (only the roles assigned to your user in development are the roles available when you choose save as...)
    Diogo.

  • Queries on Roles

    Hi Friends
    How can we identify the quries on a perticular user. Because we have roles on departments wise.
    Now i want to identify all the queries that comes under a perticular user.
    Regards,
    Chama.

    Hi
    go to table RSZCOMPDIR
    enter the user id in the  owner Field
    it will display the reports created by the user.
    Regards
    Sri
    Also Check with RSRREPDIR Table also.

  • Publishing queries in the Portal

    Hi experts
    I have a requirement for having queries publishe din the portal
    I know I can do it by creating web template, but it time consuming
    I've tried the following:
    1) on query designer I published query to the portal. Issue is that selection criteria of my query will only pop up on the portal if there is some mandatory value. Do you know any workarround for this
    2) I also see that by default all my reports are in the portal.. But I have the same issue stated above... no selection criteria will pop up when exectuting those, except if there is any mandatory criteria~
    Can anyone help with this portal issue? Any tip is highly appreciated
    Many Thanks
    Joana

    Hi,
    If you dont want variable screen then you need set the Web template parameter "Display Variable Screen" to "Turn OFF".
    Then varibale screen should not appear while opening up the web template.
    I will explain How variable screen will work:
    VARIABLE SCREEN NOT SHOWN BY DEFAULT SCENARIOS:
    ===============================================
    1. If a query has no variables, no variable screen will be shown in web.
    It is not at all possible to see variable screen in this case.
    2. If a query has variables (only optional variables but no mandatory
    variables ) then variable screen will not be shown.
    3. If a query has mandatory variable but if it is prefilled, then
    variable screen will not be shown.
    you can enforce to see variable screen only in case 2 and 3 by using the
    parameter '&VARIABLE_SCREEN=X' to the end of context url as shown in
    example below:
    /irj/servlet/prt/portal/prtroot/pcd!3aportal_co
    ntent!2fcom.sap.pct!2fplatform_add_ons!2fcom.sa
    p.ip.bi!2fiViews!2fcom.sap.ip.bi.bex?TEMPLATE=
    <XXX>&VARIABLE_SCREEN=X
    The variable screen wont be shown if there are no mandatory variables
    in the query.  You can force it with the following methods,
    1) Append the parameter '&VARIABLE_SCREEN=X' to the links in your menu.
    2) Change the parameter in the web template used   > template property
       'Force variable screen' in the Web Application Designer, per
       default it is not checked.
    3) In case, no template is specified, the standard web template is
       used   > transaction SPRO. In case, no web template is maintained as
       standard web template in transaction SPRO the standard web template
       delivered by SAP is used. It is recommended not to change
       the original SAP template but to create a copy, apply changes and
       maintain it as new standard web template in transaction SPRO. Please
       review note 643464 for further informations."
    VARIABLE SCREEN SHOWN BY DEFAULT SCENARIOS:
    ===========================================
    Only when there is a mandatory variable which is not filled and has
    to be filled only by user via F4 help, then variable screen will
    be shown automatically.
    Thanks,
    Venkat

  • Cannot publish workbook into role

    Hi all,
    I need to publish a workbook into an existing role. However, this is not possible. I see the role menu when I "save workbook as", but I do not see any of the existing workbooks in this tree and I also cannot save to any of the roles. Can anyone point me to the authorization that is missing?
    Many thanks,
    Andreas

    S_USER_AGR: Authorizations: Role check
    In the field Activity, include the value 22 (Enter, Include, Assign) for to save workbooks.
    In the field Role Name, you should put specific role name which you need.
    S_USER_TCD: Transactions in roles
    In the field Transaction Code have RRMX  "*"
    https://forums.sdn.sap.com/click.jspa?searchID=15063151&messageID=3245181
    Hope it Helps
    Chetan
    @CP..

  • BW Queries menu roles

    Hi All,
    How to identify the menu roles been awarded for the BW queries.
    Is there any transactions to find out.
    Thanks with reggards,
    Vinay H.S

    you can check in the meta data repository.
    Here you can get the roles to which the particular query is assigned to.

Maybe you are looking for