Reporting Authorization - InfoObject/Navigational Attributes

We have a custom infoobject for Vendor to which access needs to be controlled. Certain users are not supposed to have access to a number of the navigational attributes on the object however we want these users to have access to all other navigational attributes (meaning we don't want these 'fields' to be visible but everything else). We have other reporting authorization objects that prevent access to the entire 'record' if the user is not authorized for a certain value (cost center, etc.).
Thanks.

Hi Joerg,
navigational attributes are treated like characteristics. You can make them authorization relevant and restrict access, e.g. by granting ":", which allows to see overall results without details on this attribute.
Regards, Klaus

Similar Messages

  • Authorization for navigational attribute

    Hi Gurus,
    I am facing an authorization issue with respect to infoobject hierarchy. I have created authorizations as below.
    There one infoobject 'A' and a navigational attribute 'B' in infoobject 'A'. This navigational atribure A_B is used in an infocube.  And hierarchy is uploaded to Infoobject 'B'. Now I want to give authorization for this hierarchy in infoobject 'B'.
    Now coming to authorization.
    1. I have made Infoobject 'B' as authorization relevant in Business explorer tab.
    2. Created authorization object say ABC in RSSM and inculded infoobject 'B' & 0TCTAUTHH (since I want to authorize the hierarchy and we are using 3.5 authorization concepts in BI 7.0).
    3. Activate this authorization object for the infocube.
    4. Included this authorization object in the role included for my user. In the field 'B' of authorization object I have given ' ' (space) and in the field 0TCTAUTHH I have given the technical name of the hierarchy.
    4. In 3.5 query designer I have put this navigational attribute A_B in the filter area and activated the hierarchy in the properties tab for the same hierarchy that I inculded in previous step.
    5. Created a variable with processing type authorization.
    Now when I run this report I get an error as no authorization for object ABC.
    Can someone help me if I have done anything wrong.
    Thanks,
    Sandeep

    Hi,
    In the infoobject A maintenance screen check the chekc box for field "AuthorizRelevant" for B to make it authorization relevant navigational attribute.
    Then go to RSECADMIN and ope your relevant authorization.
    In the menu bar just above the "Authorization Structure" you will find the button with icon of infoobject.
    Chick on this icon this will give you a screen to enter characteristic name of which attributes are to be added to authorization.
    Enter the infoobject A name here and click on continue.
    This will give you list of all authorization relevant navigational attributes present for A.
    Add B from this list to the authorization.
    Hope this helps.
    - Geetanjali

  • Need help on Authorization on Navigational Attribute.

    Hi All,
    I am working on Authorizations.
    I am using the info Object "Material group" which is the Navigational Attribute of 0MATERIAL.
    In Reporting, I have created the Authorization Variable for Material group.
    And after this, i have created the Authorization Object in RSECADMIN and added the info Object "Material group" and harded coded the value as "1000". After this, i have created the Authorization Role in PFCG and added this authorization Object over there.And this role is assigned specific User.
    While Running the report on specific User, for Material group, filteration is not happening over there (Material group = 1000). It is showing all values for this user.
    Can you please help on this issue.
    Thanks,
    Shahina A

    Thanks for your reply. I was on leave for the past 2 days. I have checked as you suggested.
    In 0MATERIAL, 0MATL_GROUP is the attribute and i have made Authorization Relvent for this Attribute.
    And i activated the Info object 0MATERIAL.
    Then i have run the query in RSRT and found an error while running the Report.
    Can u pls help on this issue.
    Diagnosis
    The system determined the authorized characteristic values for the characteristic 0MATERIAL__0MATL_GROUP. It determined that you do not have the (analysis) authorization to view transaction data for any characteristic values or range.
    System Response
    If this situation occurs when a variable is being filled, the query cannot be executed.
    Procedure
    You must have authorization for at least one characteristic value for the characteristic 0MATERIAL__0MATL_GROUP.
    Create the appropriate analysis authorizations for the user.
    If you are only authorized for evaluations that aggregate using the characteristic 0MATERIAL__0MATL_GROUP (for ":" authorizations), use a query without this characteristic. If the characteristic is not used as a filter or in the drilldown, variables should not be used.
    Procedure for System Administration
    Notification Number EYE 018 
    Thanks,
    Shahina A

  • Authorization on Navigation Attribute

    Hi experts,
    i'm faced with a problem. I have a navigation attribute in my data model which is authorization relevant. The problem is that the basic characteristic is not authorization relevant. I am not able to make my setting in the analyse authorization as the basic characteristic is not authorization relevant. The basic characteristic is used in some other projects so that i am not allowed to make this characteristic an an authorization relevant one.
    Has anyone an idea how to solve this problem?
    Thanks all in advance.
    Best Regards,
    Ali

    You did not mention what BW version you are on.  This scenario is allowed in 7.0 Analysis Authorizations, but is not allowed in 3.x 
    In 7.x you can make any navigational attribute authorization relevant on the Attributes tab in RSD1, and the base characteristic does not have to be authorization relevant.
    What problems are you having?

  • Analysis Authorization on Navigational attribute

    Hi All,
    We are using RSECADMIN (BW 7.0), I want to know whether its possible to make a navigational attribute - ZPAYE_SA__0SALES_OFF - to authorization relevent. The object (ZPAYE_SA) with this is associated is not an authorization relevent.
    Even if I am able to make it authorization relevent is there any other setting changes to be done for it to work properly.
    Regards
    Deepesh

    Hi Deepesh
    First need to check Authorization relavent check box for navigational info object "ZPAYE_SA__0SALES_OFF"
    Tcode RSA1 --> Info Object --> Find "ZPAYE_SA" ---> Attributes tab ---> Detail/Naviogation Attibute --> Authorization Check box in front of "0SALES_OFF".
    Goto to RSCEADMIN
    Create a Authorization object and maintain this navigation attribute "ZPAYE_SA__0SALES_OFF"
    Pls let me know incase of further details
    Best Regards
    Rohit

  • Hi all can anyone let me know about navigational attributes?

    hi all,
    Can anyone let me know the importance of navigational attributes with examples.
    if docs pls email at [email protected]
    regds
    haritha

    HI haritha,
    Navigational attribute is used for drilling down in the report. We don't need to maintain Navigational attribute in the cube as a characteristic (that is the advantage) to drill down
    0MATERIAL has a Display attribute called MATGROUP and a Navigational attribute called MATTYPE.
    If you want your report to show MATGROUP, you need to have 0MATERIAL in the query too. A Display attribute always 'tags' along with the 'parent' characteristic.
    However you can include MATTYPE in your report without using 0MATERIAL. For reporting purposes a navigational attribute behaves just like another characteristic. This means that you can also have variables for navigational attributes.
    One drawback is that since they are stored outside your Info Cube (in master data tables), the OLAP has to perform an extra step to pull in this data and this leads to some performance impact, although in most cases this is negligible.
    When you double click on a cell in a report which contains a characteristic value, the report is filtered for this value and the entire characteristic column is removed from the results area. If you double click on material 1001, the material column goes away from the results and in the filter cells above the report, you can see value 1001 against Material.
    If you double click on a key figure value, nothing
    happens.
    If you double click on a Char column heading, the char is removed from the drill down.
    If you double click on a key figure column heading, all key figures go away, and the values that are left are for the key figure you double clicked. Again you can verify this by looking at the filter cells against the key figure structure.
    Re: Navigate Attribute
    assign points if helps,
    regards,
    yunus

  • Navigational attribute Vs normal infoobject in Query

    Hi
    I have  some infoobjects named ..1)ITEM....2)STATUS....3)SALES etc in cubes...
    I have to design a query showing this data...the report should show Item Status also...I can use normal infoobject STATUS from infocube in report to show Item Status....I have one more possibilitySTATUS is added as navigational attribute of infoobject ITEM..So I can use this navigational attribute also..which one should I use normal infoobject STATUS or navigational attribute STATUS of infoobject ITEM to show item status in report?how to decide on this?
    Thanks for your guidance.

    Hi Hayward,
    Status as direct Object
    When you use Status as an object added in cube you get the data of the day the cube was loaded. Let say for example your cube is loaded weekely on sundays, so the field status will give status as on sunday, even when it is run on other subsequent days of the week. So as correctly pointed in above posts values you get in status are not real time but historical.
    Status as Navigational Attr of Item
    When you use Status as Navigational attribute of Item then you get current data because in almost all cases Master Data Objects are loaded on daily basis and thus it picks the latetst Status of Items.
    In case your cube is loaded daily then it won't make much difference that whether you are using it as a standalone object or as navigational attribute of Item.
    Hope it helped
    Regards
    Raj Rai

  • Navigational Attribute in Reporting

    Hi experts,
    Suppose I have created one attribute as navigational attribute in my infoobject characteristic.This Characteristic is in Infocube.
    Now after executing query on this infocube,Can I drilldown from thic characteristic to Navigational attribute to analyse my results more?To achieve this,is it necessary to Switch On my navigational attribute in Infocube?or Can I achieve this even without switching navigational attribute in my infocube?
    rgds,
    P Olin

    Hi experts,
    Thanks for your replies.
    Suppose if I donot want to create Navigational Attribute,how can I do technically,so I can drilldown to this characteristic from my original characteristic infoobject in the report to see more analysis...
    I am thinkiing of creating hierarchy manually from top to bottom by creating one characteristic and adding it as 'external characteristic' in hierarchy tab of my infoobject characteristic which has this hierarchy..Is this an option?Can I still drilldown and see detailed analysis in my reports?
    Thanks for your replies.
    P Olin

  • Navigational attribute data not visible in BEx Report

    Hello All,
    I am facing following problem in one of my BEx reports:
    I am fetching data from an ODS. With other columns of ODS,  I have also to show few navigational attributes( which are master data of some info-object) . In report the corresponding data in navigational attributes is not visible for few records, although when I see the master data of this Info-object (whose navigational attributes I have to include), in  Adm. Wrkbench the data is visible. I wonder what step is missing.
    Many Thanks for helping me out.
    Best Regards,
    Sumita

    Hi Roberto,
    While trying to activate the Infoobject's master data (by right-click) I get the following message,
    "Lock NOT set for: Loading master data attributes"
    And the data is not activated.
    Can you please suggest what needs to be done.
    Thanks & Regards,
    Sumita

  • Navigational Attribute Authorization

    Hello,
    We have a requirement to turn on the authorizatiorelevant flag for number of navigational attributes in a master data. 
    After turning on the flags we have created an analysis authorization object and included the navigational attributes with :.
    We were expecting the report to return with no data. 
    Security tracing did not show any authorizty check against the navigation attributes which were turned on as the athorizatiorelevant on the master data.
    The Master data is authorization relevant however the individual navigation attributes are not authorization relevant objects.
    Do I need to turn the authorization relevant flag for individual nav attributes on their own maintenance screen?

    Hi,
    Check whether this doc helps
    http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/7052dee3-bce5-2d10-5299-cd5d00ebeb72?QuickLink=index&overridelayout=true
    The Authorization at the Navigational attribute will restict the data for that attribule at the report level.
    You can restrict that Nav Attr specific to  InfoProvider, Roles etc.
    Thanks & Regards,
    Vishnu

  • WAD - Navigation Attribute authorization

    Hello Expert,
    I have created a WAD report containing analysis and two dropdown items.
    One filters a characteristics (profit centrum) and the other one filters navigation attribute of the same characteristics (resp. person of PC). Both the caracteristics and the attiribute are marked as authorization relevant.
    If I run the report under my account having profile SAP_ALL and analytical authorizaction 0VI_ALL the reports works as it should. But if I run it under a test account that has a role ZBI_BEX_ENDUSER that should contain all sufficient authorizations to run any report and analytical authorization 0BI_ALL then the report runs also OK,  just the dropdown with the navigation attribute (responsible person) is disabled (greyed out) with a text "no data". The other dropdown (PC) works fine.
    The navigation attribute is even included in the analysis and all the values are displayed there and I can even filter on it and then the filtered value is populated into the previously disabled dropdown list.
    Since I do not see any difference between the two users beside the authorisation I reckon that the issue must be somehow authorization related but I cannot find how.
    Can anyone help?
    Regards
    Jiri

    Hi Haran,
    You have to consider in ABAP code of user exit variable this:
    In a DSO you alreay have the user name and vaules, which he is allowed to see. Just go into this DSO and read the entries from DSO with user ID as selection criteria. Example:
    USERID     PLANT
    XY     1000
    XY     2000
    YZ     3000
    DSO name: ZOPLANT
    iKey fields in DSO: UserID & Plant
    Abap code would look like: select plant from /bic/azoplant00 where userID = sy-uname.
    I hope this helps.
    Aban

  • How to see Navigation attribute in Report

    Hi ,
      I am working on BI7.0.
      In my Query , material is a characteristic which has 3-4 Navigation attributes. But when I execute the report , I can only see Material data displayed (because only material is in the rows). I also want to see data of its attributes in report results. I dont have authorisation to change the query.
    Also I am unable to open the Query in Local view (some connectivity issues).
    Can you please suggest How I can drill-down those attributes.??
    Also these attributes are not visible in free characteristics.
    Thanks,
    Su

    Hi there,
    To use the navegational attributes with drill down, they have to be available in either rows, columns or free characterisitic.
    For that you have to edit the query. There's no other way.
    But each navegational attribute is also a display attribute.
    Therefore, you can after executing the query, right-click over material and select properties. You'll see a tab named attributes where you can add the avilable attributes to the left (so they will be displayed), and change the settings of each one of them (see only key, key and text, etc.), but you can't filter by any of those attributes, or do any drill down options over them. They are only display attributes.
    Hope this helps.
    Diogo.

  • # values for navigational attributes in report . (Urgent)

    Hi Gurus,
    I have a navigational attributes for time dependent master data. In the report I am not able to see values for that navigational attribute. I see # values for the navigational attributes. I checked the master data of main info-object. every thing looks fine.
    please help me in regarding this.
    thanks,
    Regards,
    Aarthi

    Check the following two things again just to make sure you are doing everything right. These are already mentioned by Bhanu...
    1) Go to the master data table (Q  table or the M table) and check to see if there are M version records (OBJVERS = M). If yes, you need to activate the master data using the program RSDDS_AGGREGATES_MAINTAIN (Change Run). If there are no M version records then check the second step
    2) If you do not enter any key date in the query, it takes the system date as the default key date. So check and see if any master data exists for today's date ?
    Also just curious, which version and support pack level are you on ?

  • How to Get Navigational attributes of dso in Report ...

    Hi i have a dso with many fields ,
    In the report i need to get some navgational attributes which are in dso..
    How to Get Navigational attributes of dso in Report ..??
    Thanks All..

    hai naiduz,
    in the dso u find folder with navigational attributes, there select the Navigation check box the fields which u need in the report.
    and further if ur dso through multiprovider and also identify them at multi provider level.
    then u will be able to see the fields at query designer level, then u can use the nav. fields u need in the report.
    regards,
    Vj

  • Data issue with Navigational Attribute in the report

    Hi Experts,
    We have a report which has Material and Material Group in the report. Material Group is a navigational attribute of 0Material. We have some 31 material groups in the ODS. However, the report is diaplaying only 3 material Groups. If I use Material Group directly( not as an attribute of material) then it is displaying all the 31 material groups correctly.
    We have a hierarchy which is loaded through Flat file on Material Group. We need the hierarchy to be displayed for all the material groups in the ODS. Please let me know what could be causing this issue?
    Thanks and Regards,
    Kavitha Jagannath

    Hello Kavitha,
    Check if the Material Masterdata is having these Material groups. If not then load this Material masterdata and activate it.
    As your query is using Material group as Navigational attribute then the data should come from this Material Masterdata.
    If your Material has only 3 of th eMat Groups then report will show only 3. Better update this Material masterdata.
    Regards,
    Pratap Sone

Maybe you are looking for