Reg : Authorization of SAP in CMC
Hi Mates ,
i have created the WebI reports using the universe , and have published into Infoview , for that report SAP User with roles assigned , i have tested the query in BW it works fine. but when calling the webi report in Infoview using the sap user its not giving the exact company level data , the authorization doent work , is there any setting to follow in CMC.
Integration Kit Installed .
Is there any steps to follow.
Thanks
Hi
When you created the universe did you choose sso when you created the connection? probably you have configured the connection with a fixed username and password?
Regards
Roland
Similar Messages
-
I want authorization for SAP classes
my company are provided computer courses.I want authorization for SAP classes.what are i doing for this process
Hi,
can you please reformulate your question? Are you looking to become an authorized training partner? If so which country?
Thanks,
Arnold -
Question regarding Authorizations in SAP CRM 7.0
Hello,
The problem is this:
We have a client who will use two ways of accessing SAP CRM 7.0 data -
1. CRM Web UI
2. Mobile devices via standard SAP CRM BAPIs
Now the situation is that the client wishes to control display authorizations based on the Business Role. Certain Business Roles can allow its User to see Accounts where the User is also Employee Responsible and certain other Business Roles can allow its User to see all those Accounts that are associated with that Role. In summary Business Roles control what an User can see.
This has already been implemented for the CRM Web UI using the Access Control Engine (ACE).
Now the questions are:
1. How do we implement this for BAPI Access?
2. Should we recreate what has been achieved by ACE, via PFCG Authorization Profiles?
3. Can we not reuse what has been done by ACE?
4. What are the runtime APIs that allow somebody to use the authorization checks of ACE?
5. Does the standard Function Module CRM_ORDER_CHECK_AUTHORITY_ACE help in this regard?
Any help here will be greatly appreciated. Please let me know if you need any clarifications.
Thanks in advance.
Best regards,
SudhiHello,
Normally, some notes are recommended in addition to the current support package implementation because they were developed to solve any known issues. These known issues occurred as side effect of any note which belongs to the implemented support package.
If you take a look at older release notes, you will see the same.
This is a part of implementation stack.
1345085 SAP SRM 7.0 SP Stack 04 (09/2009):Release & Information Note
1365574 SAP SRM 7.0 SP Stack 05 (12/2009):Release & Information Note
1436687 SAP SRM 7.0 SP Stack 06 (03/2010):Release & Information Note
Kind regards,
Ricardo -
ICSS: authorization in SAP CRM 7.0
Hello Experts,
Is it possible to restrict via authorization acces to diffrent types of transaction in ICSS in SAP CRM 7.0? For example some clients can have acces to complaints, some to service request and some for both.
Regards
PiotrOf course, you can. If you are creating the Z: roles for SAP_CRM_ECO_ISE_WU_B2B, then in this role, in the CRM Component, there is an authorization object called CRM_ORD_PR and a field name PR_TYPE. You can go an change the individual users with access to different transaction types or create Z: object or Z:role for each group as you wish. Use the field name ACTVT to control the access to the transaction type.
Please note, there may still be some discrepancies in the search selection in the ICSS. Though you may want to restrict the user to not to access "Complaints", the restriction may work at the transaction level, but not at the search level. You may still see "Complaint" object in the Search dropdown list. I am not sure if SAP has covered all the features of ICSS to abide by this role. -
Window Authorization of SAP B1
Hi all,
what kind of authorization(windows) do we need to run SAP B1. I want to list all the possible reason if add-ons gives error 'cannot connect to DI API, Corrupt Memory'.
Thanks
RahulHi Rahul,
To install B1, users need admin right. To run it, normal user authorization is fine.
Thanks,
Gordon -
Customized Authorizations in SAP ISA Frame work
Hi All,
I am using SAP ISA Frame work in my project and displaying customized Authorizations in my Project and i want to add new Authorizations in my Project.
Please let me from where these authorization data is coming whether it is coming from back end or front end.
If it is front end from which file these data is coming.
I am expecting it is coming from some xml file and i would like to know from file name of xml.
regards,
sureshHi All,
Any suggestions please
Regards
G.s.naidu -
Hi all,
dealing mainly with authorizations in ERP I am new to authorizations in PI. Therefore I am facing a problem with this situation:
1.Three roles with authorizations in ABAP and Java are expected: Developer, Supporter, Monitoring.
2. HR data is strictly confidential. FI, CO etc. data is not quite so confidential.
I am asked to find out if there is a way to create a scenario that differentiates which data - HR or ERP - are displayed e.g. on the level of the sender.
The display of the payload is another point which I will have to consider.
I have seen that there are SAP roles but I am not quite sure how and if I can use them and adapt them to my needs.
Help is greatly appreciated.
best regards
AugustHi,
please have a look at <a href="http://help.sap.com/saphelp_nw04/helpdata/en/89/05793c05f0807be10000000a11405a/frameset.htm">Roles and Tool Access</a>, especially at Roles for ABAP and Java Tools, these are the authorizations needed.
You can assign roles from transaction SU01
refer the below link also.
http://www.erpgenie.com/sap/netweaver/xi/xiauthorizations.htm
Regards
srinivas -
Authorizations for sap bw consultant
Hello,
Need to know that roles and authorization objects must have a bw consultant in the production environment.
In my project we are two consultants, and we have assigned our profile SAP_ALL. This profile so we have to remove and assign the appropriate permits.
"I can stay here for a list of the most relevant authorizations?
Sincerely,Hello Pmarques,
It is always though to come up with this specific role (SAP has no recommended composite role for consultants) list since it depends on specific customer preferences. I would suggest to use the following authorization objects and customize per your needs - this should cover all typical support activities.
S_RFC
S_TCODE
S_BTCH_JOB
S_BTCH_NAM
S_C_FUNCT
S_DATASET
S_GUI
S_OLE_CALL
S_RZL_ADM
S_TABU_DIS
S_DEVELOP
S_TRANSLAT
S_ALV_LAYO
S_APPL_LOG
S_BDS_D
S_BDS_DS
S_IDOCCTRL
S_IDOCDEFT
S_IDOCMONI
S_IDOCPART
S_IDOCPORT
S_OC_DOC
S_RO_OSOA
S_RS_ADMWB
S_RS_BITM
S_RS_BTMP
S_RS_COMP
S_RS_COMP1
S_RS_DS
S_RS_DTP
S_RS_FOLD
S_RS_HIER
S_RS_ICUBE
S_RS_IOBJ
S_RS_IOMAD
S_RS_ISET
S_RS_ISOUR
S_RS_ISRCM
S_RS_MPRO
S_RS_ODSO
S_RS_PC
S_RS_TR
And S_TCODE containing transactions RRMX, RSA1, RSPCM, RSKC, RSPC, RSPRECADMIN, RSU3O, SE16, SM37, SM50, SOST, ST22, SU53.
Hope this Helps!!
... Venkat. -
Authorizations in SAP Solution Manager
Hello all,
does anyone know how can i (of if i can) give permissions for the workcenters but only for a Solution ?
For example, a client has two landscapes and they want to use one solution manager for monitoring, but they want to restrict access to both landscapes by two teams. Each team should ony have access to "their" systems.
Do you know how to do this ? Is there an organizational level per Solution ?
Best Regards,
Maria SerraHi Martha,
As Jared said, there is always an option to restrict the access to solution via this object:D_SOL_VSBL. You still have a way to restrict access on workcenter via the role :SAP_SMSY_* and inside it on the Authorization object : S_SMSYSYST.
But i would still suggest to have separate solutions for each landscape considering your requirement as it offers wider authority for each process. Like setup and operation for each elements in monitoring. You can find solution for your scenario in solman [security guide|https://websmp106.sap-ag.de/~sapidb/011000358700000370562009E/SM_SECURITY_SPS23.pdf].
Hope this helps.
Regards,
Jagan -
Reg :authorization objects
hai..
This is manny...i would like to congrats for all sdn users.plz let me know about.. what is the exact meaning of authorization object and object classes and authorization fields.i have little bit confusion regarding dis on.i want exact meaning of those ones.plz provide any documentations.
what is the use of authorization object and authorization fields and object clases and .where we used..?
Thanks and Regards,
MANNY..Hi Manyam,
Please see the links and get the solutions.
http://help.sap.com/saphelp_nwmobile71/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
http://help.sap.com/saphelp_nw70/helpdata/en/52/6716a6439b11d1896f0000e8322d00/content.htm
Regards,
Anil -
Authorization from SAP BW 3.5 in Portal
Hi Experts,
i am buidling a scenario in SAP BW 7.0 using the authorization concept from SAP BW 3.5.
Now i publish the reports in the portal. Everything is working good.
Now my question:
That we are using the old authorization concept, will it be a problem to adapt the concept into the portal?
Could you please provide documents how to deal with BW Roles in Portal or a setps by steps indication?
Thank you for your input.
Cheers
GiloHi Gilo,
Below is the thread which has good discussion on the authorizations of BI and BW.
Re: BI 7 Security
There should be no issue in executing a BI report which runs on BW authorizations in portal, because the authorizations will be checked in the back end(BI/BW) not in portal.
Hope this helps !!!
Thanks,
Ansar. -
Hi Experts,
I need access for SAP-BI , So for that Please tell me the T-CODES which i need authorization to work on SAP-BI
I need for Modelling, Advanced Modelling ,Reporting and Extraction
Regards,
Marasa.Hi Marasanaidu,
Basically u need authorization for Tcodes RSA1,RSA3,RSO2,RSA5,RSA6 etc.
You can find better information in below links:
in first PPT 43 slide u can know how to assign authorizations:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/659fa0a2-0a01-0010-b39c-8f92b19fbfea
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a6c54319-0e01-0010-20a4-fb81ad32f330
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/ded59342-0a01-0010-da92-f6b72d98f144
For Tcodes:
http://wiki.sdn.sap.com/wiki/display/BI/BI%20FAQ%20-%20Important%20Transaction%20Codes%20in%20SAP%20Business%20Intelligence
http://wiki.sdn.sap.com/wiki/display/BI/Frequently%2bused%2bTransaction%2bCodes%2bin%2bBI
http://sap.seo-gym.com/
http://sbpatil.wordpress.com/2008/02/29/frequently-used-transaction-code-in-sap-bi/
Hope you get clear picture.
Ravi
Edited by: Ravi Naalla on Jan 12, 2010 5:20 AM -
Dear Experts,
we are currently trying to restrict our authorizations per function within our business, eg. HR, IT, CONTROLLING. However, we have the following situation. More than 1 personnel area per company code (SAP Std), and nowhere else in IT0001 do we store this information for an employee. However, tracing the cost center structure, we found field functional area exists for the cost center. Has anyone used this before? Do you know which authorization object this field belongs to?
Thanks.hi,
I don't think we ca restrict from functional area in HR. Yes we also can restrict according to KOSTL. please check this once again. but it is better to maintainauthorizations according to Personal area. check if the Table P0001 is having any personal area ornot.
Regards,
Vasu. -
Authorizations in SAP BW version 5.x
I am looking for information regarding the authorizations in BW, primarily for the roles that have limitations, which only have access to certain accounts.
Why EMVI information.Hi,
Have a look at the following link :
http://help.sap.com/saphelp_mic10/helpdata/en/69/1810a4c51144dc833353183155ec88/content.htm
Thanks -
Reg: Client User SAP*ALLOWED
Hi
How to clear the. program. and how to change cube.
No changes for user SAP* allowed
Choose 'Display object' or 'Cancel'.
Thanks & Regards.
S.N.SenthilkumarHi,
This is a special user with admin access.Please dont use this id and ask Basis people to
create user with required authorization so that you can work in rsa1.
Thanks,
Saveen Kumar
Maybe you are looking for
-
When I start homesharing I get an error 310 message and it won't let me go any further
When I log in to home sharing I get an error message, it says ERROR 310 and I have to close the programm. Can someone help. Kind regards Tony R
-
ArchiveLink attach note to document.
Hello Experts- I am trying to attach a component of the type 'note' to an ArchiveLink document. I have an image of the document class 'TIF' stored on a repository configured with HTTP CS 4.5 protocol. I need to be be to insert a new note to this Arch
-
After effects help & adobe air
i'm in the after effects cs5 application (creative suite production premium) on a power mac 10.5.8 and when i go to the help pull down and click on after effects help, i get the following error message: don't even know what abobe air is. i'm assuming
-
The cambece file server is down
We just got our file server up and then it went down again, it seems the server is having conflict with the windows server. what could the problem be? J.A. Cambece Mac OS X (10.4.3)
-
last night, 3.25 grid failed, and i saw in the morning DB is down. i got these logs, i cant understand the cause of problem, which parameters should i check, if you guide me i will be happy, Oracle 11gr2 RAC on OEL 5.5 i have IBM ds2500 ds thank you,