Query to retrieve user Authorizations

Dear Experts,
Is there anyone with a query to retrieve user names and their respective authorizations.
Regards

As now are aware that Authorization table is not exposed,you can export the authorization as suggested by one of the forum member.
When Exporting the Authorisation the list of user name will be imported first and then the list of authorisation second.
In order to have all the authorisations you will need to expand all the menu and sub menu.
Adminitstration -> system initialisation -> System initialisation -> Authorisations -> General authorisations
   1. In the Authorisations window
   2. Click on expand
   3. With the Authorisations' window active click on Excel icon or go to File -> Export -> Export to MS Excel
   4. In the first 'Save as' window opening
   5. Name your 'User' file and select the relevant folder
   6. At the system message popping :'Do you want to export currency symbols ?'
   7. Click independently on 'Yes' or 'No'.
   8. A security warning message will appear.
   9. Click on 'Enable Macros'
  10. A second 'Save as' window is opened.
  11. Name your 'Authorisations list' file differently.
  12. Execute again step 6 to 9
The two files will then open. One with the list of users one with the list of authorisations

Similar Messages

  • Query related to User authorization

    Dear All,
    I have query that, suppose i a user is having authorization of standard profile; eg. SAP_ALL & SAP_NEW.
    then can we restrict the critical or the sensitive eg. BASIS T-code which can be created problem by the Functional Consultant; without removing these profiles. Is it possible, if yes how to do.
    I have limitation user creation. I cannot create diferent user for all functional consultant and assign then the desired T-code or profile.
    This is my company requriement.
    Please suggest me.
    Thanks n Regards.
    Bhaskar

    Hi Bhaskar,
    I am not telling you to create new user i m only saying to create new roles or profile ..for creating new roles and profiles you need not any license.After creating new roles with specific FI user needs you can assign this new role to user and delete the old one and one more thing Which you can do here is create new profile by copying the SAP_ALL profile and then delete the basis and other rights or transaction from this copied profile and then assign it to user.
    Regards,
    Rohit

  • IS IT POSSIBLE TO EXECUTE A QUERY BASED ON USER

    Hi,
    I need to restrict a set of queries to a user. Is it possible.
    Thanks
    Mini

    This is done by standard parametrization using query groups and user authorizations.

  • Need a Query/User Authorization Report

    Hello All,
    I am looking for tables, function modules, programs etc that will aid in building a report that will show every query and which users have access to them.
    This program I am wanting to build will serve as a periodic "reality check" on our authorizations.
    I am not sure about the tables/programs etc involved in interpreting the user's roles/profiles.
    My current thinking is that there may be a function module or program that is being by the BEx tools that comes up with the list of queries that the user has access to when they first select the query they want to run. Getting a hold of that would be very beneficial.
    Any ideas?

    Hi,
    Refer the below links
    www.das.state.ne.us/nis/security/docs/authorized_agent_manual.pdf
    script.wareseeker.com/PHP/uas-user-authorization-system.zip/18033
    eda.ogden.disa.mil/users_guide/trainMaterial/GeneralAdminMaint.ppt
    www.umaryland.edu/eumb/Documents/user_aff.pdf
    www.mariewagener.de/node/98
    https://wiki.sdn.sap.com/wiki/display/BI/AuthorizationinSAPNWBI?focusedCommentId=78053701
    www.bi-expertonline.com/downloads/Smith.doc
    https://aisweb.wustl.edu/hr/benefits.nsf/pages/files/$file/hrmssecurityauth07.pdf
    www.sapdev.co.uk/sap-bw/queryexit.htm
    naresh

  • User Authorization for a Query

    Hi,
    I have assigned a single role to a user, in which I have authorization for all the Infoproviders, including authorization for reporting. The user is able to access most of the queries, except one query. If there is a problem, he should not have accessed all the queries.
    What problem could have prevented the user from accessing on particular query???
    Any Ideas will be highly appreciated,
    Thanks and Regards,
    Ravi Sankar

    Some possibilities:
    The one query which the user is not able to run , who is the author of this query?
    You need to give authirozation for the object S_RS_COMP1.
    If the user has authorization for this object, then the next possibility is:
    The query may have a filter or a characteristic value for which the value is not set for the user.
    Ravi Thothadri

  • Query to retrieve list of ledgers accessible for a given Applications User

    We've a requirement to find the list of the accessible ledgers for a given Oracle Apps User.I'm from Oracle ATG team,not familiar with GL terminologies. Can someone help with the query to retrieve the ledgers accessible for a given user.In our code flow, we may not have the complete applications context. Is it possible to retrieve that list only with the username. If so, how to do that? Do i need to access some profile values?
    Thanks,
    Senthil

    select * from usr where usr.usr_key not in (
    select usr.usr_key from oiu, usr, obi, obj, ost
    where oiu.usr_key=usr.usr_key
    and oiu.obi_key=obi.obi_key
    and obi.obj_key=obj.obj_key
    and obj.obj_name = :obj_name
    and oiu.ost_key=ost.ost_key
    and ost.ost_status not in ('Revoked'))
    -Kevin

  • Query to retrieve all saved user queries?

    Hi,
    In which table are the user queries saved?
    How can I write a query to retrieve all the user created queries?
    I need to copy all the user queries which are implemented in 1 client implementation to a different client's implementation.
    Thanks.

    Hi Rajesh
    Try This query
    select QName,QString from OUQR .
    You can use the quick copy option if you are using SAP version 9 and if lower you can use the copy express addon..
    SAP Business One 9 - Implemenation Center  Quick Copy  
    Hope Helpful
    Regards
    Kennedy

  • Personnel Admin AdHoc Query not retrieving all records

    Hi, I recently added a custom info type to a copy of the SAP ad hoc query for Personnel Admin by using the menu path in SQ02>Edit>Change Infotype selection . The query is picking up the new info type and runs fine but does not retrieve all records from the table for a given personnel id. It only retrieves 1 record per id.
    Has anyone dealt with this before and have an easy/quick fix for this?

    Have other users try the query, preferably a user with end user authorization.
    I've had this issue before, I'm an IT person and I customized a Standard infoset.
    During testing, I'm only getting 1 (in my case) Insurance record per employee.
    The end user can see multiple record per employee.
    Btw, did you customize a Global or a Standard Infoset?
    Regards,
    Olekan

  • Web Analysis Error -- Error while executing query and retrieving data

    Regarding Web Analysis:
    We have a number of reports that we created. yesterday they were all working fine. today we try to open them and most are generating an error.
    The error is:
    Error while executing query and retrieving data.; nested exception is:
    com.hyperion.ap.APException: [1033] Native:
    1013033[Thu Oct 22 09:08:17
    2009]server name/application name/database name/user name/Error91013033)
    ReportWriter exit abnormally
    Does anyone have any insight into what is going on?
    My version information is:
    Hyperion System 9 BI+ Analytic Administration Services 9.3.0.1.1 Build 2
    Web Analysis 9.3.0.0.0.286
    Thanks in advance for your help.
    DaveW

    Hi,
    And also click on check option by opening the query in Query designer,as Mr . Arun suggested.
    And if you get any error in checking, see the long message(detail).
    With rgds,
    Anil Kumar Sharma .P

  • Variable value to be populated based on user authorization

    Hi all,
    I want to have a variable with single value on plant.
    when the user executes the report, value of the variable has to be populated automatically based on the authorization of the login user and it has to show the output without displaying the selection screen.
    Kindly guide me of, what type of variable to create and to proceed.
    Thanks.
    I

    Hi
    Restriction Plant from user authorization can be achieved by the following steps
    1. Plant infoobject should be authorization relevant.
    2. make authorization object including plant and restrict to the plant u needed and assign the profile to the user
    3. in BEX create variable of authorization type on plant. this variable will get the default values for the plant from the user authorization on the selection screen of the query.
    4. if you dont want to display the variable on the selection screen then remove the chek box in variable that " variable is not ready for input"
    thanks
    radhika

  • OBIEE 11g Active Directory Presentation Service Error retrieving user

    Hi Team,
    It was a great help from all of you on our OBIEE learnings.
    I recently configured Microsoft AD on Weblogic rather than RPD. But felt like I am in a desert of helplessness due to the complicated and lengthy documents and settings :(
    Still when I configured everything and logged in to presentation services using AD Credentials, observed following error!
    Error retrieving user/group data from Oracle BI Server's User Population API.
    Error Details
    Error Codes: GDU6UYHS:OPR4ONWY:U9IM8TAC:OI2DL65P:SDKE4UTF
    Odbc driver returned an error (SQLExecDirectW).
    State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 43113] Message returned from OBIS. [nQSError: 13049] User 'gp06108' with 'oracle.bi.publisher.scheduleReport;AtAGlance;oracle.bi.publisher.accessReportOutput;_all_;oracle.bi.publisher.accessExcelReportAnalyzer;_all_;oracle.epm.financialreporting.accessReporting;Explore;oracle.bi.publisher.accessOnlineReportAnalyzer;EPM_Essbase_Filter;oracle.bi.publisher.runReportOnline;oracle.as.scheduler.security.MetadataPermission' permission can not query user population.Please have your System Administrator look at the log for more details on this error. (HY000)
    Please have your System Administrator look at the log for more details on this error.
    Expression: privileges['Admin: Catalog']['Change Permissions']
    Total blockout! Anyone faced this issue earlier

    You need a user to be present in your Active Directory Base DN that will be used as the BISystemUser. You will either have to create this user in AD or use an existing AD user and then specify its credentials in Enterprise Manager (expand Weblogic Domain > bifoundation_domain (right click) > Security > Credentials). You will need to set system.user credential under oracle.bi.system map. Make sure your AD user's password never expires or you will run into problems in a few weeks time!
    Paul

  • Users Authorization- Restrict value of one variable corresponding to other.

    Dear Experts,
    I have query regarding BEx Authorization for the given selection screen of any variable for any report :
    I have two parameters/variables( Category and Sub Category) which needs to be passed from User. I want to restrict the value of second variable corresponding to the values passed in first variable. For e.g. :  if i passed Category value -Engineering ,Sub Category variable should only show the value related to engineering only other than all the values in sub category field in the selection screen for the user.
    Please suggest.

    Hi Shikhar,
    E.g. Category: Engineering , Arts , Commerce
    Sub Categories for Engg. ECE, IT , CSE.
                                   Arts : sociology philosophy etc
                                   Commerce: economics, accountancy etc
    Now Maintain authorization for Char. related to Engineering and create Auth. variable, follow this steps:
    Transaction Code- RSECADMIN
    Steps to create Authorization based on Division e.g. InfoObject    is 0DIVISION.
    Check for 0DIVISION, it must be Authorization relevant checked, if not then maintain 0DIVISION and check Authorization relevant box.
    Step 1: Create Analysis Authorization Maintenance using RSECADMIN T-Code, in that add 3 special characteristics i.e. 0TCAACTVT , 0TCAIPROV and 0TCAVALID, these are the mandatory Char. along with that add 0DIVISION for which you want to create Authorization, 0DIVISION details restrict value as 01 (EQ 01).
    Step 2: Again goto RSECADMIN -> User tab-> Assignment, enter username (e.g. User1) which you want to restrict. insert Auth. obj. from step1.
    Step 3: Now in Query designer, create Authorization variable for 0DIVISION, i.e. process type Authorization.
    Execute That query with restricted user (e.g. User1) it will only show the data for Division = 01.
    For reference: [http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/c0b7acf2-6121-2e10-5591-eaec182d9315]
    Hope this will meet your requirement, let me know if further explanation required.
    Regards:
    Avinash

  • CRM Analytics - User Authorization Not Suficient

    Hi Guys,
    We have implemented the CRM analytics report, however when I access the menu Sales Pro in CRM and try to open the report Closed Opportunities, I get the error : User Authorization not sufficient.
    If I open the error I get the message :
    Diagnosis
    The user doesnot exist in the BI client or has insufficient authorizations
    Procedure
    Contact system administrator to verify the user is setup properly in both CRM and BI client
    Procedure for System Administration
    Verify that the user exist in BI client with the same user id, if not create it and assign proper authorizations as per the configuration guide.
    When I run the query or the webtemplate in BW I don't have authorization problems, but I can't run from CRM.
    Any suggestion about how to fix it?
    Thanks in advance,
    Fernando

    Hi Fernando,
    The report which you have implemented is doing a RFC call to BI system where some other system program is getting called which have authorization logic check for the RFC user ( or the person who is running the report). here report is terminating with error. I have face the similar issue.
    generally such reports we use to schedule as a background job with batch user which have SAP ALL access but I feel in your case user who runs the report have not sufficent authorization in BI system and also you are not running report as an background job.
    There aretwo tricks to findout the missing authorization which I also have used.
    First option : close all the session except one in CRM and than run the report as soon as the error comes open transaction code SU53 to know the missing authorization - may be you can fail here as the authorization check fail in BI.
    Second option definitely will work. Whenerror is coming double click on the mmessage to know the message detail(class and number) than again run the report in debugging mode (/H- type in address bar to activate debugging) than set breakpoint in the message and press f8( may be system will not set the break point immediately than you need to debug till the RFC calls BI system) . system will take you to the exact authorization code check where the error is coming. there you can find out the missing authorization object which is not included in the user assigned role. than can ask access team to add in the user role.
    I hope this will solve your issue. Please revert with your finding.
    Thanks,
    Prem

  • What User authorization objects needed for connecting to SAP from xMII?

    We eneter a SAP user and password for connecting to SAP from xMII to retrieve the metadata of the incoming IDocs.
    When I specify a user with SAP_ALL user profiles, the IDocs are received properly in xMII. If I specify a user with privileges to run only certain transactions, IDocs are not received in xMII.
    What user authorization objects are needed for this user to connect to SAP from xMII?
    Thanks,
    Sara

    Sam,
    I turned on the SAP System trace for this user and figured out the following auth. objects are required for receiving IDocs in xMII:
    C_TCLA_BKA
    S_RFC
    S_CTS_ADMI
    B_ALE_MAST
    S_IDOCDEFT
    The following auth. object is required for making JCO call to SAP from xMII:
    C_AFRU_AWK
    Thanks,
    Sara

  • All the users authorization report

    Dear Experts,
    I want run the all the users authorization in SAP. I want prepare authorization matrix from all the users.
    Please help me on this. Thanks for advance.
    Regards
    S.Prasad

    Hi,
    post your query in abap forum.
    the following tables are useful to create such report
    ROLES BY  TCODE  ASSIGNMENT
    TSTCT
    AGR_1251
    ROLES BY  USERS ASSIGNMENT
    AGR_USERS
    USER_ADDR
    ROLES BY ORGANIZATIONAL LEVEL ELEMENT ASSIGNMENT
    AGR_1252
    USVART
    regards,
    kaushal

Maybe you are looking for

  • How to configure CISCO ASA 5510 for internal remote desktop ?

    Helo,I have a client that want to install new ASA (5510) in their network. and then I did some experiment to implement it. the topology is like this : --------configuration--------- 2800 router : interface FastEthernet0/0 ip address 172.16.1.1 255.25

  • Can multiple orgs be setup for one account?

    Hi, Is it possible to have multiple organizations setup for the one account? This is in a sales/campaigns context. Thanks.

  • Exchange Server 2007 Cross Mailbox Search using Export-mailbox

    Hi All. We are trying to do some legal discovery but we are having a few problems.  Exchange 2007 (SBS 2008) The command for a single user mailbox works and returns the results i would expect: Export-Mailbox -Identity "User" -SenderKeywords "[email p

  • MRP type: PD

    When using PD for MRP planning, I found some interesting things. For example:Material A,  Safety Stock=12, current stock is 5 and there is a PO of 10 due July 15, today is July 13. Run MRP today, MRP generate exception message 20 to cancel the PO and

  • How can I know which nodes are doing what?

    I have QMaster helping with a Compressor job, is there a way I can tell in the Batch Monitor (or maybe somewhere else) which nodes are working on the task?