Query authorization: Exclude users

Hi,
We have a role that enable our users to execute all the reports that we publish in the portal. But there is only one report that we would like to allow the managers only to run it but not the other users.
So my question is how to prevent the users from executing a specific report while they can execute all the other reports?
Thanks,
Mohamad

Hi ,
try this link u will find the pdf the same.
http://help.sap.com/bp_biv170/documentation/Authorization_BW_Proj.pdf
If helpful then assign the points

Similar Messages

How many ways we can create authorization for user groups in sap query reports

Hi Gurus, I am getting a problem when I am assigning users to user group in sap query report .The users other than created in user groups are also able to add &change the users .So please suggest me how to restrict users outside of the user group.
Please send me if u have any suggestions and useful threads.
Thank You,
Suneel Kumar.

I don't think it can be done. According to the link below 'Users who have authorization for the authorization object S_QUERY with both the values Change and Maintain, can access all queries of all user groups without being explicitly entered in each user group.'
http://help.sap.com/saphelp_46c/helpdata/en/d2/cb3f89455611d189710000e8322d00/content.htm
Although I think you can add code to your infoset and maybe restrict according to authority group, i.e.:
Use AUTHORITY-CHECK to restrict access to the database based on user.
Press F1 on AUTHORITY-CHECK to find out how to use it in the code

Query to retrieve user Authorizations

Dear Experts,
Is there anyone with a query to retrieve user names and their respective authorizations.
Regards

As now are aware that Authorization table is not exposed,you can export the authorization as suggested by one of the forum member.
When Exporting the Authorisation the list of user name will be imported first and then the list of authorisation second.
In order to have all the authorisations you will need to expand all the menu and sub menu.
Adminitstration -> system initialisation -> System initialisation -> Authorisations -> General authorisations
   1. In the Authorisations window
   2. Click on expand
   3. With the Authorisations' window active click on Excel icon or go to File -> Export -> Export to MS Excel
   4. In the first 'Save as' window opening
   5. Name your 'User' file and select the relevant folder
   6. At the system message popping :'Do you want to export currency symbols ?'
   7. Click independently on 'Yes' or 'No'.
   8. A security warning message will appear.
   9. Click on 'Enable Macros'
10. A second 'Save as' window is opened.
11. Name your 'Authorisations list' file differently.
12. Execute again step 6 to 9
The two files will then open. One with the list of users one with the list of authorisations

BI Query Authorization issue

Hi,
When a test user execute a query he is getting Insuffucient athorization
In RSECADMIN i executed as a test user and got the log
Please update me how to resolve the issue
No Sufficient Authorization for This Subselection (SUBNR)
Following CHANMIDs Are Affected:
17 ( 0TCAKYFNM )
Thanks

Hi there,
Regarding the 0TCAKYFNM "containing" information of all key figures, that's why I put the "", because this object doesn't contain anything, it is simply an InfoObject standard that SAP has with the flag marked in authorization relevant in transaction RSD1. This object exists for assigning key figures authorization used through the transaction RSECADMIN.
Even without the user notice, this object is checked against all the queries over all the InfoProviders.
If you go to transaction RSD1 for the InfoObject 0TCAKYFNM click on display on the Business Explorer tab you'll see the option AuthorizationRelevant marked. This will force the check for key figures assignment for all the queries against the authorization grnated through this object assigned to the user.
So if in this transaction RSD1 you change on the tab Business Explorer for this object 0TCAKYFNM and uncheck the AuthorizationRelevant, none of the key figures will be checked against the authorizations the users have to the InfoObject 0TCAKYFNM (since this InfoObject will no longer be authorization relevant).
If you leave the flag AuthorizationRelevant for the InfoObject 0TCAKYFNM as it is (marked), then in RSECADMIN as you did before, instead of granting * values (all values, all key figures) for the 0TCAKYFNM, you granted for instance the value 0QUANTITY and assign this authorization to the users, if this user executed a query with only the 0AMOUNT key figure he/she would receive lack of authorization, since he/she was only authorized to see values for 0QUANTITY key figure. So resuming, the values you assign for the InfoObject 0TCAKYFNM will be the key figures the user is authorized to see the query, and if you assing * it will be all the key figures (all values)
Hope this helps,
Regards,
Diogo.

Query authorizations and the result in Bex Analyzer

Hi,
Is the following possible to achieve by nesting authorizations?
User X has the following 2 authorization roles:
role 1 (description: FIGL)
|--- Query 1
role 2 (description: FIGL)
|--- Query 2
Visualisation in BEx:
Folder FIGL
|--- Query 1
|--- Query 2
At the moment I see
FIGL
|--- Query 1
FIGL
|--- Query 2
I hope the ASCII art is a little bit clear
As you can see, both roles are technical 2 different objects, so they are split. Any possibility to let the queries from role 1 to appear in role 2 (merge them in the visualisation)? I already played with the "derive from role" option, but this totally replaced the menu from the receiving role...
kr,
Rutger Hennico

Hi.
'ZCDAY' = User date Variable on 0CALDAY. (If User will give date).
'ZDYS'   = Formula Variable with Customer Exit, Dimension ID = Number.
DATA: DY TYPE SY-DATUM.
WHEN 'ZDYS'.
      LOOP AT i_t_var_range INTO loc_var_range WHERE vnam = 'ZCDAY'.
        CLEAR l_s_range.
        DY = loc_var_range-low+6(2).
        l_s_range-low = DY.
        l_s_range-sign = 'I'.
        l_s_range-opt = 'EQ'.
        APPEND l_s_range TO e_t_range.
        CLEAR l_s_range.
      ENDLOOP.
if there is no User Input then use..**
WHEN 'ZDYS'.
      LOOP AT i_t_var_range INTO loc_var_range.
        CLEAR l_s_range.
        DY = loc_var_range-low+6(2).
        l_s_range-low = DY.
        l_s_range-sign = 'I'.
        l_s_range-opt = 'EQ'.
        APPEND l_s_range TO e_t_range.
        CLEAR l_s_range.
      ENDLOOP.
Thanks
Reddy

Query authorization

Dear All,
Want to set user wise query authorization, is it possible.
Regards
Bharat.

Dear Bharat,
Yes its possible.
Query authorization
Regards
MANGESH PAGDAHRE.

InfoArea change effect on Query authorization

Hi Gurus -
If we move an InfoProvider to a different InfoArea, does the users will run into Authorization issues? Do we need to re-define the query? As far as I know, it shouldn't effect the users. Please advise me. THANKS.

It depends what authorization given to users.
If it is just query display authorization for user, should not effect users.
If authorization defined in info area level also, will effect.
Thanks.

Simulate query with different user

Hello all,
sometimes I receive calls from our user in BW that some query is not running/no authorization, but when i run the query it works, because I have rights to see everything.
Is there any way to simulate how a query is running under a different user (which has restricted authorization). I want to check e.g authorization but I do not want to copy existing user to a test user.
I saw in the TA RSTRACE that I can enetr a different user, but how can I run a query with this user profile.
Any help/ideas would be great. Thank you in advance.
Best Regards,
Stefan from Munich/Germany

Hello Edwin,
works perfect. Thank you.
BR,
Stefan

Infoset Query Authorization

Hi guys,
I've created some infoset queries, and assigned those queries to specific user group. My purpose is to let only specific user group (e.g. Accounts User Group, to access only relevant queries)
But later I found out, those users can actually switch to another group (at SQ01 -> Other User Group), and access those queries that they shouldnt be accessing.
May I know if there's any way to prohibit this switch of group? Or is there any authorization that can be set?
All ideas are appreciated. Thanks ^^

Hi TY Ng,
By including the InfoSet query in a role, you ensure that the InfoSet query is started with an InfoSet (and a query), and can therefore be easily used for appropriate reporting within the role.
The basis for this is the assignment of user groups to roles, the option of calling the InfoSet query from different roles, and, in doing so, noting the specified context for this role.
You assign user groups and InfoSets with transaction SQ10. You can also create and manage menu entries for the InfoSet query with this transaction.
In order to include the InfoSet query in a role, you have to assign user groups first to the role and subsequently to one or more InfoSets.
Check
Please check administrator authorization for the SAP Query (authorization object S_Query, field ACTVT, value 23).
Check whether the correct work area is set before you reassign user groups. If you call the role administration by using transaction SQ02 (see above), the work area set in transaction SQ02 is transferred.
Hope you get some help
Atul

IS IT POSSIBLE TO EXECUTE A QUERY BASED ON USER

Hi,
I need to restrict a set of queries to a user. Is it possible.
Thanks
Mini

This is done by standard parametrization using query groups and user authorizations.

How to use the same POWL query for multiple users

Hello,
I have defined a POWL query which executes properly. But if I map the same POWL query to 2 portal users and the 2 portal users try to access the same page simultaneously then it gives an error message to one of the users that
"Query 'ABC' is already open in another session."
where 'ABC' is the query name.
Can you please tell me how to use the same POWL query for multiple users ?
A fast reply would be highly appreciated.
Thanks and Regards,
Sandhya

Batch processing usually involves using actions you have recorded. In Action you can insert Path that can be used during processing documents. Path have some size so you may want to only process document that have the same size. Look in the Actions Palette fly-out menu for insert path. It inserts|records the current document work path into the action being worked on and when the action is played it inserts the path into the document as the current work path..

How to Control authorization for users with certain status for level 2 WBS Element

Dear All,
Is there any standard way or enhancement available to control authorization for users with certain status for WBS Element i.e. for example
Pre-requisite:
There is only 2 level of project i.e.
Lev_ WBSE_______Description
1___ 7-14.E_______summay outage controller
2___ 7-14.E.2310__ Plant/unit # 2310
2___ 7-14.E.2310__ Plant/unit # 2220
Project Controller (authorization role assigned "Z_PS_OP7_OTGCON_C") have all project level authorization
Plant/Unit Controller (authorization role assigned "Z_PS_OP7_PLNTOTG_C_2310") have only level 2 authorization with enhancement that we did in system by Z table.
User ID_ Plant #
123345_ 2310
122455_ 2220
Issue:
After System Status released and User Status approved the WBS basic date for Plant/Units should be restricted from updating/changing by Plant/Unit Controller level and only project controller should have this authority.
Solution required:
Can any one tell how to control this scenario either by standard or enhancement available to control authorization
BR
Saqib Usman

Hi,
Did you explore SAP Enhancement CNEX0002 Using Transaction CMOD?
Thank you and regards,
Varshal Kachole
The SCN Rules of Engagement

HT1338 What's going on with iCloud (MobileMe)? I'm able to sign in here, but I can't access mail on my Macbook Pro, iPhone, or work computer. I always get an authorization error (user-id or passwork wrong). This has been going on for almost a week now.

What's going on with iCloud (MobileMe)? I'm able to sign in here, but I can't access mail on my Macbook Pro, iPhone, or work computer. I always get an authorization error (user-id or passwork wrong). This has been going on for almost a week now.

The single download means that you won't be able to redownload it from the store without paying, either on a computer's iTunes or an iOS device - it doesn't stop you from copying the audiobook to your other computers or syncing it to your iOS devices, you just can't redownload it. (I believe that they are all supplied to Apple by audible.com, so I assume that it's them requiring the one-time download.)
You can download audiobooks on your computer's iTunes and sync them to iOS devices, you do not have to buy them directly on the device (if you do then you can copy them back to your computer's iTunes library by connecting the device and using the File > Devices > Transfer Purchases menu option on your computer's iTunes).
What you are doing to sync them should work i.e.
- connecting the iPad to your Mac
- selecting the iPad on your Mac's iTunes
- selecting its Books tab and selecting the audiobooks that you want to sync to the iPad and syncing/applying that selection.
You should then get an audiobooks option in the Music app on your iPad. If they aren't appearing there then do they show in Settings > General > Usage > Music on the device - if you have audiobooks on the iPad then they should be listed there under an 'audiobooks' heading.
By 'restart the iPad' do you mean a soft-reset : press and hold both the sleep and home buttons for about 10 to 15 seconds (ignore the red slider), after which the Apple logo should appear - you won't lose any content, it's the iPad equivalent of a reboot.
You could also try closing its Music app via the iPad's taskbar : Force an app to close in iOS.
And do a soft-reset and retry syncing.
I assume that music and other items sync ok ?

Document search error in webshop(Error in authorization check: user unknow)

Hi All
actually we have implemented the document search functionality in webshop to access all the documents in webshop who have created order in the webshop.
actually when i am logging into the portal with userid "skumar" after that there was role called "Document Search" when i click that document search role then the document search will be opened, based on the selections in the selection criteria then the documents will be displayed generally.
actually come to my error when i select in the selection criteria "order acknowledgement" and i select the one more column called "period" after that i click the search button then i am getting the error as follows.
Error in authorization check: user unknown.
Can you please help me where to check the authorizations in the system for accessing the documents.
Regards
Sunil

Hi Sunil generally this kind of error will occur when you choose acknoledgement
for Future Periods,eventhough input is past date if the same problem occurs you should check for Su05 Internet USer authoriasations
Reward if helpful
Venkat

How to view a BI query with anonymous user in the portal

Hi Gurus,
Does anybody knows how to view a BI query in the portal with anonymous user?
Cause when i try to view a query the portal always ask for authentification. And i don't want to sign with a user cause my portal is for everybody and if the user logged in it shows the roles that previously were assigned.
I have the Netweaver 2004 with SP9
Thank you Very Much

do you have sso configured between portal and BW server, if yes the authentication pop up should not come.
if you dont want to do sso between portal and bw server and still want to logon to BW query with anonymous user,
in you bw server go to transaction sicf and navigate to DEFAULT_HOST->SAP->BW->BEX and double click on bex node in the resulting window, log on details section provide a default userid/password
Raja

Query authorization: Exclude users

Similar Messages

Maybe you are looking for