Publishing queries/workbooks to roles

I'd like to know what the best practice is for organising the above. Our problem is that we develop a number of workbooks local to production. If we publish these to the roles carrying authorisations then they will be overwritten the next time we make a change to the authorisation values and reimport the roles. Is it necessary to have some roles which are used to hold authorisations and others to act as objects to publish queries/workbooks to?

Yes,
And I believe that's the best practice.
Create a role just to publish the queries/workbooks only (just for the Menu).
Create another role for the authorization objects.
Both roles should be assigned to the user but manage independently.
Diogo.

Similar Messages

Listing Queries/Workbooks in Roles

Hi! Is there a way to list queries/workbooks by role?
Thanks in advance!
Marnie

Hi,
When you log on to the BEx by workbook or query and when you press the role button, you should be able to see all the workbooks and queries by role.
You can also check the listing in PFCG. Give the role name and all the workbooks and queries attached to that role can be found in the menu area.
Cheers,
Kedar

Queries Published to Workbook Roles

Hello Gurus,
I need some advice on this particular situation.
I currently have users in our BI systems (BI 7.0) that are assigned to roles specifically for workbooks to use with the BEX analyzer. In this case there are users who can publish queries to workbooks for anyone to use (as long as they're assigned to the workbook role).
Note: To be specific, our business users do not create queries in production, but simply create a view of an existing query and make changes based on their specific need, which then can be saved to a workbook.
In the past we had workbook roles transported (in error) to production from development, which overwritten the queries published to the workbook in production. Updates to the workbook roles were only being made in production, so when the roles came over from DEV it wiped the queries that were created by the end users. Iu2019m currently in the process on re-structuring the role authorization concept in our BI system and would like to incorporate workbook authorization to one role (role based security) instead of having multiple on-off roles for workbooks. Having one role means Iu2019ll need to work in DEV and push the changes to production, however with the workbook situation if any queries have been published to the one role it will be wiped every time a transport goes into production.
I would like to the following:
1. Is there an alternative method to running queries without utilizing workbooks?
2. What would be the best scenario or best practice when publishing queries to workbook roles?
Regards,
Wes

Wes:
User cannot see favorites of another user in BEx Analyzer.
Instead of saving a workbook to the role and risk having it overwritten the next time the role is transported, your users could save their changes as a view ('save view global' option). They will not be prompted to save as a favorite or in a role - it inherits whatever role the query is in and will not be overwritten if that role is transported.
Keep in mind that things like query properties set in the view are not retained like they are with a workbook, however. The view stores the navigation state, variable values, etc.
Hope this helps...
Regards,
Kerry

Publishing Queries to Roles

Hello Gurus,
I would like your take on the practice of publishing BW queries to roles? For an example there are 10 sets of queries and these 10 are published into a role for each company that exists. So in essence if there were 20 company codes we will have 20 roles containing 10 queries hardcoded with a company code. I spoke to our BW developer to get an idea as to why this is being done instead of restricting access through S_RS_COMP. Response was that this was done due to performance reasons (something to do with the queries linking directly to the infoprovider containing the information rather than going through all of the infoproviders). So, Rather than leaving the query open and the user entering the parameter themselves it was decided that the queries were to be hardcoded to cut down the time it takes for systems to display the results.
Anyone experience this issue before? My goal is to setup a derived role where the child roles are restricted by S_RS_AUTH for the company codes and query access through S_RS_COMP instead of being published to a single role. Before I do this I would like to figure out a way to move away from this practice without affect performance for end users.
By the way our users access these queries through the Bex Analyzer.
Thanks,
Wes

Wes,
        Using derived roles in BW or S_RS_AUTH may not be the best design as field for S_RS_AUTH does not appear as org level. So you are not really going to have any advantage by going with derived role concept in terms of maintainence effort.
        With 10 queries - 20 Company Codes - you will not need 20 roles because of Company Code, just update the queries with appropriate authorization variable for company code and restrict users on company code. Just 20 company codes should not cause any performance issues
        Also with hardcoding the queries for each single company code - how are you resolving the scenario when user has access to more than one company code/ or global access.
Regards

Cannot publish workbook into role

Hi all,
I need to publish a workbook into an existing role. However, this is not possible. I see the role menu when I "save workbook as", but I do not see any of the existing workbooks in this tree and I also cannot save to any of the roles. Can anyone point me to the authorization that is missing?
Many thanks,
Andreas

S_USER_AGR: Authorizations: Role check
In the field Activity, include the value 22 (Enter, Include, Assign) for to save workbooks.
In the field Role Name, you should put specific role name which you need.
S_USER_TCD: Transactions in roles
In the field Transaction Code have RRMX "*"
https://forums.sdn.sap.com/click.jspa?searchID=15063151&messageID=3245181
Hope it Helps
Chetan
@CP..

Roles, queries,workbooks and users

Dear Experts,
I have an urgent requirement to join information about roles, queries, workbooks and users.
Can you tell me which all tables I should be looking into?
Regards,
Kris

Hi Kris,
Please see this link below : -
roles table in sap
It is for roles, i think you have table for queries already in your previous post.
Regards
Sunny

How to save Query in a workbook and Role

Hello All
What are this workbook and role?How to save the query into this and how it helps/use us.
can anyone tell about this?
regards
balaji

Hi,
You need to assign a role to a user. WHen this user enters the system s/he will be able to save queries under the role (the button 'Roles' will be seen).
See here an example of working with roles:
Re: How to protect Queries from being modified ?
Best regards,
Eugene
Message was edited by: Eugene Khusainov

Publish queries to EP 6.0

Hi All,
I am using BI Netweaver 2004s to publish queries to EP 6.0. I was wondering what are the options to publish the queries. Can I publish the queries directly to the roles in the Portal. Can I publish the queries to a BI role and have that role imported to the portal?
If so how do I maintain the settings in the BI and portal to have these queries directly published in the portal
Thanks,
Doniv

Hi Doniv,
Prakash has very nice blogs covering the publishing strategies with EP.
Part 1: /people/prakash.darji/blog/2006/09/04/sap-netweaver-2004s-bi--define-your-publishing-strategy-part-1
Part 2: /people/prakash.darji/blog/2006/11/19/sap-netweaver-2004s-bi--define-your-publishing-strategy-part-2
Hope it answers your questions
Regards, Uday
Assign points for helpful answers and get one point for yourself.

Publish the query to roles ?

HI ,
i want to publish the query to the roles , which is on top of multiprovider & which is on top of INfocube .
my question is , do i need to assign both multiprovider & infocube to auth object or only multiprovider is enough ?
2) i have a RRI on this query , do i need to publish the target query also ?
thanks ,
Edited by: BIuser on Sep 15, 2011 12:40 PM

Hi,
For the first part, you need to provide authorizations for the cube.
For the second part, the user should have autorizations for both queries (main as well as target query). So publish both queries in the role.
Hope this helps.
Regards,
RahulM

BW workbook and role

Hi,
The user has two roles zrole1 and zrole2. When the user save workbook Analyzer suggests to choose a folder zrole1 or zrole2. The user saved workbook zworkbook1 in a role zrole1 and zworkbook2 in a role zrole2. When the user tries to open the workbooks the role zrole1 and zworkbook1 is displayed only. The role zrole2 was created under recommendations of the note 373979, and the role zrole1 has even no access on transaction RRMX.
If a role zrole1 to remove then the user can open zworkbook2.
Thanks,
Raf

Hi,
If you check the [BW security guides|http://help.sap.com/saphelp_nw70/helpdata/en/be/076f3b6c980c3be10000000a11402f/frameset.htm] in SAP Help or in SMP BI Area or [Collaboration Workplace|https://cw.sdn.sap.com/cw/docs/DOC-16439] you will be able to find out how the restriction of query is imposed. Based on the values you provide in the RS authorization Objects (specially S_RS_COMP, S_RS_FOLD and S_RS_COPM1) in the roles the security restriction is available. This part you need to judge from the values available in the different roles which refers to similar entities in terms of Queries of Same InfoArea.
regards,
Dipanjan

Queries added to role in PFCG don't show up under role folder in BEX

Hello Guruu2019s
Currently I am experiencing a very strange problem regarding the visibility of queries in the role menu of BEX. Please find below some investigation already done:
Just to avoid any authorization questions/assumptions, I have a user with SAP_NEW and SAP_ALL. He also has 2 roles (R1 and R2, no other roles) in which reports are entered using: PFCG -> +OTHER -> SAP BW Query URL.
In his SAP user menu all reports from both roles show up and are executable.
When this user open BEX Analyzer and goes to u2018Openu2019 -> u2018Open Queryu2019 and then go to u2018Rolesu2019 only R1 and its contents is visible.
The roles however are identical and contain only the following authorization objects (apart from menu entries):
S_USER_TCD: RRMX
S_TCODE: RRMX
The only difference between them is that the R1 has been created some time ago while the R2 is new.
I expect that people will tell me that S_USR_AGR is required but this isnu2019t the case since he is able to see one of the two mentioned roles (R1) and its contents in SAP BI due to SAP_ALL and SAP_NEW.
When I copy R1 to R3 and add it to the user he is also able to see this R3 in the Bex analyzer. However, when I remove all reports from R3 and add some myself in PFCG these new entries do not show up in Bex analyzer, even though I re-added the report(s) I removed earlier in the exact same way.
The same for the original R1, when I add new entries they arenu2019t visible although the u2018oldu2019 ones are.
When I check the only table I know that holds SAP menu entries all links show up, this also explains why in his SAP user menu he sees all links. Does anyone know how (which tables) the BEX Analyzer gets the appropriate roles and role entries when a user wants to open a query?
What can be the issue here; to me it feels like something has changed in the system that prevents BEX to read all roles properly?

Hi Casper,
there is a known issue at the moment whereby workbooks/queries and roles are no longer
visable due to the following.....
The settings in SSM_CUST defines a compress mechanism for the user menu
known as "Redundancy avoidance" and described in notes 357877 and 357693
Redundancy avoidance deletes easy access menu entries for doubled
transaction codes whenever SSM_CUST contains
1. an entry CONDENSE_MENU with PATH = 'YES' and
2. either an entry DELETE_DOUBLE_TCODE with PATH = 'YES' or no entry
DELETE_DOUBLE_TCODES, at all.
If you don't want doubled transaction codes to be deleted, then simply
add an entry DELETE_DOUBLE_TCODES with PATH = 'NO' into table SSM_CUST.
Please enter
DELETE_DOUBLE_TCODES with PATH = 'NO' into table SSM_CUST
and retest this issue...
I hope this helps
best regards
Orla.

Publish Bex workbooks in LDAP

Hi,
Can any one give me a step by step on how to publish Bex workbooks or queries on LDAP.
Thanks...

Hello,
LDAP:
http://help.sap.com/saphelp_erp2004/helpdata/en/4e/4d0d40c04af72ee10000000a1550b0/frameset.htm
You should review these notes and links:
736471 - UME Configuration of multiple LDAP datasources
777640 - Using an LDAP Directory as UME Data Source
718383 - NetWeaver: Supported UME Data Sources and ChangeOptions
Thanks,
Michael

Bulk assignment from Queries to a role

Hey folks,
we would like to transport more than 100 queries (not Workbooks) - from an Excel-list.
Unfortunantely, it is not possible to filter queries in Transport Connenction, compared to Workbooks.
Therefore we created a temp-Role, assigned all Queries to this role, selected that role in the transport connecntion and we had our 100 queries selected by selecting only the temprole - this is much faster.
As we´d like to improve this, I would like to know, what is the fastest way, to assign 100 reports to a temp-role? Any suggestions on that?
Best regards,
Christian Röttgers

Any suggestions?

How to remove Queries in menu roles?

Hi,
I am removing unneccessary quries added in menu roles!
How to remove those queries from the roles?
Raj

Hi,
Open your role in PFCG with edit mode -> you can see list of reports assigned here, right click on delete which is not required.

Error when creating the queries with BI Roles.

Hello,
Business Requirement :
We need to see the BI query reports to show up in User Menu.
Action Taken :
I tried to add the BI queries to BI Role on Menu tab with BW report ID/name by clicking other button. But still not showing up in User Menu.
Anything else I should check? Please advise.

Hi Pranav,
The way in which Sap has customized BEx is it won't show the roles which doesn't have Queries.
The roles tab of Bex shows only show the roles which user is assigned, among the assigned roles only the roles which has queries will be displayed.
Hope this helps,
Thanks,
Rakesh.T

Publishing queries/workbooks to roles

Similar Messages

Maybe you are looking for