Restricting keyfigure attributes under an authorisation relevant characs.

Hello Experts,
As per our business requirment, we need to restrict attributes under a particular characteristic through the authorisations. Attributes are key figures. The characteristic has been marked as authorisation relevant.
The scenario is, we have 5 attributes under one authorisation relevant characteristic. Requirement is security should restrict the authorisations in such a manner wherein when a user executes this particular query he should be able to view only 2 out of those 5 attributes and and a special authorisation would in turn give them access to remaining three attributes (Keyfigures).
Can we restrict a characteristic at the keyfigure level?
I am struggling with designing the security for this requirement. I would appreciate if someone could really help me. In anticipation of your reply. Thanks in advance.
Best Regds,
Suyog Chakot.

Hello Dirk,
Thanks for your inputs. Just a thought that clicked my mind, if we are going to create a new infoprovider which will be a copy of this primary infoprovider can we restrict the access and the infoprovider level. i.e we will be removing these sensitive atributes from the primary infoprovider and add the same in the newly created infoprovider. So the users who would have access to these new infoprovider will be able to view the sensitive attributes and users who are not accessed to this new infoprovider will not be able to view the sensitive keyfigures. This would save the efforts of filling the infoprovider by a virtual keyfigure..Need your view on this approach.
Also Dirk, I checked in our legacy BW3.5 system, there was an customised authorisation object created through RSSM tcode and a field 1KYFNM was updated by the corresponding values for these sensitive keyfigures. There were characteristics related to these sensitive attributes in OLD system which also exist in the upgraded BI system that were mainatined in this 1KYFNM field.
If this approach worked in the legacy BW system, can this same approach be implemented in BI system through RSECADMIN. If yes how,I tried at my level but unfortuantely was not able to restrict at an individual attribute level. Can you please guide if you have any leads on this..
In anticipation of your reply. Appreciated your response. Thanks in advance.
Best Regds,
Suyog Chakot.

Similar Messages

  • How to restrict selected Role under a Role???

    Hi Friends,
    I have 3 roles, which are Role-1, Role-2, Role-3.
    Role-2 & Role-3 are Under/Part of Role-1.
    Now, I have assigned Role-1 to a user. By doing this, When he logs in he is able to see the Role-2 and Role-3 also eventhough we havent assigned Role-2&3.
    Now My question is, How to restrict a role under a role. For example, I dont want to show Role-3.
    When i checked the user roles assigned, i see only Role-1 but not 2 other roles.
    Could anyone advice on how to make unwanted role in role. Assuming, no one is going to assign directly with Role-2 & Role-3. They got assigned only Role-1.
    Thanks for u r time!!
    Thanks,
    Raghavendra.P

    Hi Praveen,
    Thanks for important/useful information. I really dont understand is., Inspite of giving the properties to the each of role/workset, How do we call the approprite under the role. for example :
    If we have Role-2 with propery dept=sd,
    and Role-3 with propert dept=xi, etc.
    Now i have Role-1, within which i have Role-2 and Role-3.
    Now, if i want to see only roles with dept=xi then where should i mention and what should i mention.
    I understood till creating the properties, assigning the properties to roles/worksets, giving values to properties.
    Only i doesnt understood is how to activate which we want in the scenario.
    Thanks for your time..!!!
    Thanks,
    Raghavendra Pothula

  • How to restrict keyfigures in my bex query which is built of infosets?

    Hi all,
    How to restrict keyfigures in the query which is built of infosets?
    the query display likes
    cost     taxamount        units
    1000     100                     10
    i want my report to be displayed like this
    cost      taxamount          units
    100       10                      1.
    I have used conditions by restricting using units. like
    units equal to 1. but still it display like the above one.
    can anyone help me on this??
    thanxs
    haritha

    Hi Haritha,
    Do u want to display units 10 as 1?????
    If this is the requirement then u can write a new formula by using IF condition.
    Khaja

  • Can we perform restriction on attribute in query designer?

    Hi
    can we perform restriction on attribute in query designer? My scenario is to restrict on an attribute..Could any one help me out i this issue?
    Regards,
    Suman

    Hi,
    Restriction can be done only for navigational attribute.U cannot do restriction for display attirbute.
    if it is a display attribute u want to restrict -make it navigational for that infoobject.
    Also the attribute must be 'checked on' as navigational in the infoprovider as well on which the query is built.
    hope it helps.
    Regards,
    Rathy

  • Difference between Restricted KeyFigure and Filter

    Hi Experts
    Could anyone tell me what is the main difference between Restricted Keyfigure and Filter.. Normally in which scenario we will use Restricted Key Figure and when we will use in Filter...
    Thanks
    Ajay

    Restricted Key Figure
    In your sales analysis report you have customer,material,sales qty,value for an year..You want to show current month sales one more column.You will create a restritcted key figure based on the current month and show it in the report.You will end up with a report
    customer,material,sales qty,value,Current Month Qty,Current Month value.
    Filters
    The above report you want to show only the current month sales.You will create a filter where the 0CALMONTH = current Month with customer,material,sales qtym,value for the current month only.
    Regs
    Gopi

  • Copy Calculated/Restricted Keyfigures between DIFFERENT InfoProviders

    Hello Gurus,
    I am struggling with a problem and there doesn't seem to be any clear help on the web. But maybe you can help me.
    How can one copy a restricted keyfigure from one infoprovider to another different one when all the infoobjects used for the restricted keyfigure are present in both the providers? (multicubes)
    And of course TCode RSZC doesn't work with non-identical infoproviders.
    Thank you very much for your help!
    Marius

    Thank you Cornelia, but this method was clear for me from the begining... it is not an option though... there are about 30 InfoObjects (and another 40 Multiproviders) so there has to be another way. And there is a way because there is an article on BWExpertOnline which describes an easy method (unfortunately this answer is not worth a thousand dollar subscription for me):
    Quick Tip
    Copy Queries Between InfoProviders Painlessly
    by Joerg Boeke, syskoplan AG BEx Analyzer, InfoCubes, Performance, Query, Debug Mode, InfoProvider
    Perhaps, like me, you have spent countless hours successfully creating great queries that contain complex structures for a particular InfoProvider. Then, down the road, you find you need this exact query again for another InfoProvider, but the new InfoProvider has a single characteristic that differs from the one that was the object of your original query. Using SAP transaction RSZC (copying queries between InfoCubes), query definitions can be copied only for use on InfoProviders with the same characteristics. If the key bfigures and characteristics of the new InfoProvider do not match the original 100 percent, this standard method fails.
    So close and yet so far, right? I’ll show you a way, however, to copy the query definition from one InfoProvider to another, regardless of the characteristics of the new target. This method works with both BW 2.x and 3.x installations.
    Source: [http://www.bw-biexpertonline.com/archive/Volume_03_(2005)/Issue_06_(July)/V3I6A2.cfm?session=|http://www.bw-biexpertonline.com/archive/Volume_03_(2005)/Issue_06_(July)/V3I6A2.cfm?session=]
    The above mentioned method handles the copying of queries but when we copy the queries we copy the restricted/calculated keyfigures also.
    Does anybody know this painless method?
    I thank you in advance.
    Marius
    Edited by: Marius Grunca on Feb 12, 2008 6:35 PM

  • Effect of Restricted Keyfigure & calculated keyfigure in query performance

    Hi,
             What is the effect of Restricted Keyfigure & calculated keyfigure  in Query Performance?
    Regards
    Anil

    As compared to formulas that are evaluated during query execution, calculated key figures are pre-calculated and their definitions are stored in the metadata repository for reuse in queries. The incorporation of business metrics and key performance indicators as calculated key figures, such as gross profit and return on investment (which are frequently used, widely understood, and rarely changed), improve query performance and ensure that calculated key figures are reported consistently by different users. Note that this approach improves query runtime performance but slows InfoCube or ODS object update time. As a rule of thumb, if multiple and frequently used queries use the same formula to compute calculated fields, use calculated key figures instead of formulas.
    RKFs result in additional database processing and complexity in retrieving the query result and therefore should be avoided when possible.
    other than performance, there might be other considerations to determine which one of the options should be used.
    If the RKF's are query specific and not used anywhere in majority of other queries, I would go for structure selections. And from my personal exp, sometimes all the developers end up with so many RKF and CKF's that you get easily lost in the web and not to mention the duplication.
    if the same structure is needed widely across most of the queries, that might be a good idea to have global structure to be available across the provider, which might considerable cut down the development time.

  • Create local restricted keyfigure

    Hi
    Someone told me, that it is possible to create restricted keyfigures in a local view, e.g. the restricted keyfigure is only valid for the query, where it was created. I have not yet, found a way to do that. everytime I create a restricted keyfigure, it is created globally, e.g. the restricted keyfigure, can be used for all queries in the infocube.
    Can anyone tell me, if there is a way to create restricted keyfigures locally ?
    Many thanks
    Birgitte MC

    Hi,
    u can create restricted kfs locally.create a RKF in u r structure(in rows or columns).i.e rght click on u r structure--->new Selection...drag and drop u r KF and characteristics and provide description.then save u r query....it doesnt have any tech name.it means its defined locally. to make it global.....go to properties of RKF and provide tech name and save Query...then its global one.
    i guess u r creating RKF.....by rght clicking on 'restricted keyfigures' tree in the left most most window.here it will prompt for tech name.If u provide tech name then it will be defined as globally..
    but when u create rkf by rght clicking on structure.....>new selection...here u dont need to provide tech name.only descripyion is enough.and it will be defined as locally.
    hope its clear now.
    regards
    Message was edited by: c c
    Message was edited by: c c

  • Restricted KeyFigures confusion

    Guys,
             Is it possible to make a restricted keyfigure with one keyfigure and 2 chars?
    for example:
    If I use Amount keyfigure, one time char and another char(We can call it CHARA)
    then I restrict my time char to some time and this charA by something else.  Is this scenario possible?
    if so, does it mean I am saying: Give me all the amount for certain time and that certain charA?
    Thanks,
    RG

    the only difference could be that the RKF"s are usable entities that is you can reuse them from one query to another based on the same infoprovider
    Ajeeth,
    I do agree with you, but when you save the structure (mind you it becomes global now) in which the selection is used, Doesnt it make it reusable ??? 

  • Automation error while creating restricted keyfigure

    Hi Friends,
    I'm trying to create one restricted keyfigure on amount field with characterstic restriction value type is 10 , so here getting automation error: The object invoked has diconnected from its clients.  The same i tried to on IDES system,and able to create restricted key figure without any problem. What might be the problem.
    Appreciate ur help with points.
    thanks,
    RP

    hi,
    yes i have tested with other values, but same error getting. After clicking Ok button(or close window button), i'm disconnected from query designer. If it is excel connectivity issue with server,
    what have to be done?
    For resolving this, do we need to do any settings? If yes, pls suggest so that i can inform to admin team.
    thanks,
    RP

  • No description displayed for attributes under user settings

    All,
    We want default settigns for Requistioner under User setting. We added Plant, Ship to address and Requistioner(as GR recipient) attributes under user settings, but we are not able to see the descriptions of Ship to address and Requisitiner attribute.
    Do i need to do any changes in configuration.
    Thanks
    Ravi

    Thanks for quick reponse,
    I made flag as default and saved the changes under user setitins.
    now when i create SC, this default recipient is not picking up.
    if all the users in the organization wants to see all the recipient, do i want to mainitain all the user ids in root org unit or there is any other way to display all recipient
    one more question, i am not able to see description for Delivery address also, we can see only number. what config changes need to be done to see delivery address description
    Thanks
    Ravi

  • Restrictions on attributes

    Can you put restrictions on attributes in XML Schemas?
    Grateful for a quick answere / Elin

    <xs:attribute name="attrib">
    <xs:simpleType>
    <xs:restriction base="xs:string">
    <xs:pattern value="[A-C]"/>
    </xs:restriction>
    </xs:simpleType>
    </xs:attribute>

  • Simple way to restrict keyfigures with authorizations

    Good day!
    I need to restrict some users from viewing some keyfigures in some infoproviders. Total amount of keyfigures is about 40. BW auth concept doesn't allow to use NE operator. The only way I see now is to list all keyfigures for each infoprovider. That is not very convinient.
    Second idea is to use BT operator, but I need four intervals for restricting three key figures.
    Any other ideas?
    PS: I need to restrict different keyfigures for different infoproviders...

    Hi,
    You can do this using a Characteristic 0TCAKYFNM. This characteristic is used for authorization analysis. Authorization-relevant display attributes are hidden in the query if the user does not have sufficient authorization. You can read about this characteristic at http://help.sap.com/saphelp_nw2004s/helpdata/en/2a/9f2d42b75eda2ce10000000a1550b0/frameset.htm
    http://help.sap.com/saphelp_nw2004s/helpdata/en/b1/0c9441b8972e7be10000000a1550b0/frameset.htm
    Hope this helps.
    Thanks and Regards,
    Praneeth.

  • How to restrict the attribute values for the user in query designer

    Hi All,
    I have a requirment where certain user would see certain vailes in the query desiner of the attribute.
    The requirment is we have planing material which is attribute of material
    When X user want to restrict the  values for planning material ,where he is able to see all the planning material.But who is not authorized for all the value.
    Ex: X user has authorization for see planning material 100,101,102. of material But when he try to restrict the planning material in query designer where is getting all values of planing material.
    Or
    is there way to blank the restriction help.so that he can't able to see values while restricting
    Please some one can advise me on it..

    Hi,
    Let me sum up:
    you have an object ZPLNMAT for the planning material
    you have the object 0MATERIAL for material and this object has ZPLNMAT as attribute.
    If you can restrict in the query designer, I suppose this attribute is then as navigationnal and also added in the multi-provider.
    The object ZPLNMAT is checked as relevant for authorization, and you set up a role with the attached values of ZPLNMAT this user should have access to.
    Are you sure the users are restricting on the ZPLNMAT object and not 0MATERIAL, because you should have everything now
    PY

  • Unable to Restrict Navigational Attribute in Query Designer

    Hi BI Experts,
    I had a Requirement to restrict on navigational attribute.......
    i have checked in every levels such that
    1.at info object level ....checked  type as navigational
    2.at info cube level checked the navigational on.
    still iam unable to restrict on navigational attribute................in the context menu its giving the options cut, remove and where used list .........its not giving option to restrict...........
    its very urgent ...........please give any suggestions how to restrict on navigational attr

    Dear Ram,
    Dont expand the InfoObject and see the Attributes ( They r Dis Attrs )
    Just expand the Dimension --- Nav Attrs are available  ?
    Dont put them in Filter pane..( if available )
    Drop them under Rows.
    But restrict them under Default values ( By clicking on Filter pane ).
    Regards,
    Ram.

Maybe you are looking for

  • Custom Search Help for Business Agreement field in transaction BP.

    Dear Experts, My requirement is to add Custom search help to Businees Agreement field (BUPA_CRMM31-BUAG_ID) in transaction code BP. PLease guide me how to add Custom search help to Businees Agreement field which dont have search help option. Regards,

  • ICloud photo library and iCloud storage

    How do I clear up my iCloud photo library because I uploaded all my photos to my Mac so they're safe and I deleted a lot from my phone because I had no use for them since they're  on my computer but I still have like no storage on my iCloud. So is it

  • Autoplay for SD Card doesn't work anymore

    When I right click on properties of an inserted SD Card I see Autoplay, but nothing happens when I click on it. When I click on Autoplay the Properties tab of the drive, and tell which program should open the SD Card, nothing happens. According to Tw

  • Trapping in shell export and import errors

    I'am exporting a table with a unix shell and reimporting data to another database . Both database are ORACLE 11g How i can handle errors during export or import ? Thanks

  • Do we need to add "ByRef" to this method?

    private void p (int i, double t, double cp[], double spline[], int index) It is a private method inside a class, we need to retrieve/collect "spline[]" on exit from p, why the original author didn't put byref to "double spline[]", let me know if he w