Roles & Authorizations to execute the scenario

Hi
I need to create the XI Server User ID which will have enough rights to execute the scenario but not to create the XI objects. My workflow is this:
Web Application --> SOAP Adpater --> XI --> RFC Adapter --> SAP R/3
Now in the web application I need to mention the credentials which will post the XML file on XI server through SOAP.
Can you suggest me what roles I should provide to this User ID & I don't want to provide development rights to this user ID with which it can create XI Objects.
Best Regards
Lalit

Thanks Sarvya.
But here in this weblog we are creating roles ( for specific S/W components ) & than assigning users to that role.
In my case we need to create a user & assign him with the roles through which he will not be able to create any XI objects in SLD, IR or ID & we are going to use this User ID for our coming applications also.
In other way I just need create User ID without development rights. Do we have any SAP-XI defined roles for this.
Regards
Lalit

Similar Messages

No authorization to execute the STS

Someone knows how can I solve this problem?
"No authorization to execute the STS."
Regards
Guilherme

hi,
ask basis/security team to grant R_STS_PT authorization for you ?
http://help.sap.com/saphelp_nw04/helpdata/en/c8/ad8438619a7c51e10000009b38f842/content.htm

Authorization issues in executing the chain

Hi Techies,
When im triying to execute the chain, the chain allows me to do so and went well but all the jobs corresponding it were running under my ID. Later I tried to schedule the chain on ALEREMOTE, but it throws error saying ALEREMOTE do not have authorization to execute the infosources as it hits its first infosource.
We made the Trace On and tried to find any unauthorized hits in it, but the trace went well wthout any error.
Need to confirm:
1. ALEREMOTE was assigned with CPIC User role, does this effects?
2. In BW Global Settings, for the field BW suer ALE entry have ALEREMOTE, where earlier it was not there. After making this entry, the chain does not even allow to trigger on my ID and on ALEREMOTE.
3. If this entry effects, whats the significance of this field.
Regards,
Subhash.

Hi Subhash,
for the administration processes that are bundled in a process chain, you require authorization for authorization object S_RS_ADMWB.
To work with process chains, you require authorization for authorization object S_RS_PC. You use this authorization object to determine whether process chains can be displayed, changed or executed, and whether logs can be deleted. You can use the name of the process chain as the basis for the restriction, or restrict authorizations to chains using the application components to which they are assigned.
http://help.sap.com/saphelp_nw70/helpdata/en/35/c7e442e3c15704e10000000a155106/frameset.htm
The BI background user has all the required authorizations to execute all BI process types. Other users have to assign themselves these authorizations so that authorization errors do not occur during processing.
http://help.sap.com/saphelp_nw70/helpdata/en/d3/53e03b8235953ee10000000a114084/frameset.htm
Hope this helps.
Regards
Andreas

Could not execute the RFC sender scenario

Hi,
My Scenario is RFC to File asynchoronous.
RFC is in XI box and I want the file to created on the XI box only.
I have created an RFC destination using Sm59 transaction on XI box. Following are the details
RFC Destination --> SAP_TO_XI
Connection Type --> T
Program ID --> PRG_ID
Activation Type --> Registered Server Program
Gateway Host --> SAPXIS01
Gateway Service --> sapgw00
I have created the Sender CC with the above gateway host, service and the program id.
I want to execute the scenario on SAP XI by executing the RFC on XI box through a report.
The following is the statement used in the report to execute the RFC
Data: LS_CTRY_DTLS TYPE Z_TEST_TABLE.
CALL FUNCTION 'Z_TEST'
DESTINATION 'SAP_TO_XI'
IN BACKGROUND TASK
TABLES
LT_CTRY_DLTS = LT_CTRY_DTLS
EXCEPTIONS
COMMUNICATION_FAILURE = 1
SYSTEM_FAILUE = 2.
COMMIT WORK.
The function module is not giving any error and at the same time, no messages are shown in SXMB_MONI transaction. Can you please let me know the reason for this.
Thanks
Priya

Hi Madhav,
Thanks for answering. I have done as you have said. The connection is working properly. I am getting the following message when I clicked on the Test Connection button.
Connection type:    TCP/IP connection
Logon:                      4 msec
   0 KB:                    1 msec
10 KB:                    3 msec
20 KB:                    4 msec
30 KB:                    5 msec
But, still I am not able to see the messages through SXMB_MONI

Authorization problem for idoc scenario

HI,
Can some one tell me what are the authorizations required to post a custom idoc to R/3 from XI ? I have done a scenario like file->IDOC(custom).When i execute the scenario it is successful in MONI. When i execute the transaction IDX5 in XI, i am seeing the status as No authorization to send IDocs with message type ZMASEMPDETAILSMT....Any help on this will be appreciated.
Regards,
Sudheer.

Hi,
Please check SAP/ERP
WE20 navigate to logical system and check the INPUTPARAMETER (ZMASEMPDETAILSMT must be a value there)
ON XI check WE21 (define a port to your ERP)
On XI create CC IDOC receiver and point to this port
Helpful Link:
https://websmp202.sap-ag.de/~form/sapnet?_FRAME=CONTAINER&_OBJECT=011000358700003604082004E
Daniel

No authorization to execute Dashboard

Hi I have the next problem, when I execute UI WebClient and open dashboard the system send me the error (No authorization to execute The Interaction Center Dashboard).
Somebody know What is the problem?
Thanks.

Hi,
While creating a dashboard, there is a step to assign authorized employee, maybe you need to check this.
You may use role ANALYTICSPRO to search for the concerned dashboard, select it, and click on button
"Settings for Sharing" to check whether your user id has been set as Share.
Hongyan
ps: as this is not a topic related to webui framework, moving it.
Edited by: Hongyan Shao on May 4, 2010 10:21 AM

Error in Executing the process HCM process & Forms

Hello,
When we try to execute the process we encountered an error message "&1 Process only makes sense if employee number specified".
&1 :- Name of the process
Message Class : HRASR00_UI
Message No: 004
Initially we are able to execute the process with other user id in portal.
But now we have created a new portal user with different employee number.
In Backend with t.code HRASR_TEST_PROCESS, we can execute the process by specifying the employee number.
But when we try to execute the process in portal with same employee number, above mentioned error message is flashed.
Please note that Portal user has sufficient authorization to execute the process.
Kindly give suggesion to solve the issue and let me know if you need more information.
Regards,
Vishal Solanki

Hi Tobias,
You are receiving this error due to a current limitation in the Flex server. How you can fix this is to split the iView you are currently working on into two iViews, and embed one within the other. This will decrease the size of the current iView you are receiving the error for and eliminate this problem.
Hope this helps
Cheers,
Scott

Error when executing a scenario based on Variable type Latest Value

Hi,
I have created two ODI varaible -
1) filename of type as "Historize"
2) id of type as "Historize"
I have 2 Models -
1) One is based on FIle Technology with resource name as #CUSTOMER.filename (dynamic filename) (TARGET)
2) second is based on Oracle technology which contains two relational tables (SOURCE)
I have an interface in which one-to-one mapping is done from source to target.
At the junction of two source tables..i have put a query as "CUSTOMER_PAYMENT.CUSTID=CUSTOMER_DETAILS.CUSTID and CUSTOMER_DETAILS.CUSTID !=(#id)"
Package:
drag and drop two ODI variables , interface
Connect two ODI variable to interface and define the variable type as "Declare Variable" in the package.
Define filename as the firststep.
filename(firststep)-----------------------------
INTERFACE
id---------------------------------------------------
It is working fine with java callout and command prompt. It is not working when i invoke it on desginer.
It gives me error:
java.sql.SQLException: ORA-00936: missing expression
     at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:125)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:316)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:282)
     at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:639)
     at oracle.jdbc.driver.T4CPreparedStatement.doOall8(T4CPreparedStatement.java:185)
     at oracle.jdbc.driver.T4CPreparedStatement.execute_for_describe(T4CPreparedStatement.java:503)
     at oracle.jdbc.driver.OracleStatement.execute_maybe_describe(OracleStatement.java:965)
     at oracle.jdbc.driver.T4CPreparedStatement.execute_maybe_describe(T4CPreparedStatement.java:535)
     at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1051)
     at oracle.jdbc.driver.OraclePreparedStatement.executeInternal(OraclePreparedStatement.java:2984)
     at oracle.jdbc.driver.OraclePreparedStatement.executeQuery(OraclePreparedStatement.java:3026)
     at com.sunopsis.sql.SnpsQuery.executeQuery(SnpsQuery.java)
     at com.sunopsis.dwg.dbobj.SnpSessTaskSql.execCollOrders(SnpSessTaskSql.java)
     at com.sunopsis.dwg.dbobj.SnpSessTaskSql.treatTaskTrt(SnpSessTaskSql.java)
     at com.sunopsis.dwg.dbobj.SnpSessTaskSqlI.treatTaskTrt(SnpSessTaskSqlI.java)
     at com.sunopsis.dwg.dbobj.SnpSessTaskSql.treatTask(SnpSessTaskSql.java)
     at com.sunopsis.dwg.dbobj.SnpSessStep.treatSessStep(SnpSessStep.java)
     at com.sunopsis.dwg.dbobj.SnpSession.treatSession(SnpSession.java)
     at com.sunopsis.dwg.cmd.DwgCommandScenario.treatCommand(DwgCommandScenario.java)
     at com.sunopsis.dwg.cmd.DwgCommandBase.execute(DwgCommandBase.java)
     at com.sunopsis.dwg.cmd.e.i(e.java)
     at com.sunopsis.dwg.cmd.g.y(g.java)
     at com.sunopsis.dwg.cmd.e.run(e.java)
     at java.lang.Thread.run(Unknown Source)
Similary when i define the variable type as "Latest Value/Niot Persistent"...giving me same error as above...but working finw with java and command prompt.
Thanks
Edited by: user12420305 on Aug 31, 2010 10:42 PM

Hi,
My Package contains:
First step : customerid and custFileName
Second step : interface
Type of both the variables in package is "Declare"
customerid : type Alphanumeric - Historize
custFileName : type Alphanumeric - Historize
generate a scenario of the package and execute it.
custFileName : abc.txt customerid : 2
The file is created but it is giving me error for customer id.
Operator Description:
select
     CUSTOMER_DETAILS.CUSTID CUSTOMER_ID,
     CUSTOMER_DETAILS.LAST_NAME || CUSTOMER_DETAILS.FIRST_NAME CUSTOMERNAME,
     CUSTOMER_DETAILS.ADDRESS ADDRESS,
     CUSTOMER_PAYMENT.PAYMENTID PAYMENT_ID,
     CUSTOMER_PAYMENT.AMOUNT AMOUNT
from     ODITEST1.CUSTOMER_DETAILS CUSTOMER_DETAILS, ODITEST1.CUSTOMER_PAYMENT CUSTOMER_PAYMENT
where      (1=1)
And (CUSTOMER_PAYMENT.CUSTID=CUSTOMER_DETAILS.CUSTID and CUSTOMER_DETAILS.CUSTID !=(#CUSTOMER.customerid))
Operator Execution:
936 : 42000 : java.sql.SQLException: ORA-00936: missing expression
java.sql.SQLException: ORA-00936: missing expression
     at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:125)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:316)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:282)
     at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:639)
     at oracle.jdbc.driver.T4CPreparedStatement.doOall8(T4CPreparedStatement.java:185)
     at oracle.jdbc.driver.T4CPreparedStatement.execute_for_describe(T4CPreparedStatement.java:503)
     at oracle.jdbc.driver.OracleStatement.execute_maybe_describe(OracleStatement.java:965)
     at oracle.jdbc.driver.T4CPreparedStatement.execute_maybe_describe(T4CPreparedStatement.java:535)
     at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1051)
     at oracle.jdbc.driver.OraclePreparedStatement.executeInternal(OraclePreparedStatement.java:2984)
     at oracle.jdbc.driver.OraclePreparedStatement.executeQuery(OraclePreparedStatement.java:3026)
     at com.sunopsis.sql.SnpsQuery.executeQuery(SnpsQuery.java)
     at com.sunopsis.dwg.dbobj.SnpSessTaskSql.execCollOrders(SnpSessTaskSql.java)
     at com.sunopsis.dwg.dbobj.SnpSessTaskSql.treatTaskTrt(SnpSessTaskSql.java)
     at com.sunopsis.dwg.dbobj.SnpSessTaskSqlI.treatTaskTrt(SnpSessTaskSqlI.java)
     at com.sunopsis.dwg.dbobj.SnpSessTaskSql.treatTask(SnpSessTaskSql.java)
     at com.sunopsis.dwg.dbobj.SnpSessStep.treatSessStep(SnpSessStep.java)
     at com.sunopsis.dwg.dbobj.SnpSession.treatSession(SnpSession.java)
     at com.sunopsis.dwg.cmd.DwgCommandScenario.treatCommand(DwgCommandScenario.java)
     at com.sunopsis.dwg.cmd.DwgCommandBase.execute(DwgCommandBase.java)
     at com.sunopsis.dwg.cmd.e.i(e.java)
     at com.sunopsis.dwg.cmd.g.y(g.java)
     at com.sunopsis.dwg.cmd.e.run(e.java)
     at java.lang.Thread.run(Unknown Source)
When i try to execute the scenario from command promt/java callout ..it is working fine.
Thanks.

How to execute a Scenario from Windows CMD prompt

Please can you let me know how to execute the Scenario from a Windows CMD prompt? I am not sure if it is any different from "ODIStartScen" command that ODI uses to execute the scenario.
Appreciate your help.
Regards
B

Hi SH,
I tried running the scenario from the command line, but the process was not completed and it came back with the below message
Session : 131774001 finished with return code : 7000
Do I need to set up any environmental variables or any other setups before I can run the scenario from the command line?
Appreciate your help.
Regards
B

Execute one scenario parallel

Hi,
I want to execute tha same Scenario with two diferents source files (w/ async session) in the same time.
The data server is configured to receive the file name (with ODI Variables). When I execute the scenario just a once, that is fine.
but when I try to execute the same scenario asynchronously, An error is raised with the following description "name is already used by an existing object".
This error is raising in create work table step, It is obviosly the LKM is trying to create the work table with the same name in this two sessions.
Does any one kwon how to solve this?
Thanks

Is there a specific reason, you are using FILE to SQL.
What is your SQL database where you are trying to load ? If it is Oracle, then for large volumes of data, LKM using SQLLDR is much better.
Anyways, as Nithesh suggested, duplicate the KM and modify the step 11 "Create Work table" and mark it for Ignoring Errors.
And you will also need to remove the step of Drop Work Table.
However, I think that the truncate table command will have a side effect that if file1 is yet being loaded and file2 has finished loading, then the Truncate table for file2 will also wipe out the remaining records loaded for file1.
Since, each record is being loaded one by one and not as a set, this problem may arise.
There is another approach that may be used, assuming that the SQL database is Oracle. Similar constructs may exist in other RDBMS like SQL Server, but I donot know them well enough.
In Oracle, You can create the temporary table as a "Global Temporary Table"
And replace the step 31 "Drop Work Table" of LKM with "Delete * from table".
So, this will wipe out the records only for the session of file1 and not file2.
Hope this helps.

Roles & Authorizations in FICO

Hi frends,
can anybody help me in preparing the Roles & Authorizations.What is the procedure and How can we prepare?what is the base?
Regards
Sap Guru
[email protected]

Fist you decide based on your organosation, how many roles you want, ex: user , officer, manager.
even if you want create like AR users, AP usera, like that also.
Once rolls ready assgin your employees to your rolls.
For Each roll you decide which type of transaction you want give access.
wHAT ARE ALL TRANSACTION CODE YOU GIVE ACCESS TO ROLL , THAT T.CODES ONLY WORKED FOR THAT EMPLOYEES based on the Roll CREATED.
CHANDRA.

Restricting the ATP user for GATP - corrrect roles/authorizations

Hi:
If the dialog user that is used for the ATP check (from ECC to GATP) has more authorizations than needed and this is going to be a problem in production. The user can run SCM transactions from the results screen of ECC and this is not desirable.
Therefore, the ATP user should be a restricted user that has only authorizations for this specific task. If you know what are the exact roles/authorizations to give to the ATP user, could you share them?
Thanks in advance.
Satish

For R/3 please check OSS Note 447543 - APO: Authorizations too comprehensive/not user-specific.
"If it is necessary to have different authorization profiles in APO for different R/3 users when calling in APO, the following solution applies:
Activate the setting in SM59 that is used for the RFC connection CURRENT USER.
In the APO system, create the respective users and assign authorization profiles. This is necessary in order to achieve the necessary flexibility concerning authorizations in the APO system."
For APO :
AuthorizationsObject   C_APO_ATP in APO .
please chose activity as per user role.
01       Create or generate
02       Change
03       Display
04       Print, edit message
06       Delete
16       Execute
39       Check
Manish
Edited by: Manish Kumar Rathi on Oct 21, 2008 1:24 PM

Error when Executing the Report - No Authorization for Multiprovider

Hello Experts,
After the upgrade has carried out in my Quality system, I'm unable to execute a query because of the authorization issue with Multiprovider. But earlier the same Authorization was assigned to the my ID.
The Role in Q and the Role in P is same. Right now P is with 3.1 and Q is with BI7.
In both the system I have the same Role. But in Q it says that: Error You have no Authorization for Multiprovider XXXX
This is happening for only one Multiprovider in Quality system. There is no change in the Multiprovider from earlier structure to the present structure.
Can anyone give me any idea as to how to solve this issue?
Many thanks in Advance..
Thanks
Raman.. This is Emergency for me..

Ok,
Pick up a test user (or your user) and go to transaction su01.
Check the roles that are assigned.
Double-click in each one and choose display. Go to tab authorizations and click on the glasses icon of displaying authorizations data. Then go to menu->Utilities->Technical names On.
You should see the tree with the node name Business Information Warehouse (technical name RS), if you don't see this in this role, than the issue it's not in this role, go back to su01 and check another role the same process until you find this node.
If you expand this node you'll see another nodes, one of them is called Data Warehousing Workbench - InfoCube (technical name S_RS_ICUBE). And you probably can't find another node called Data Warehousing Workbench - MultiProvider (technical name S_RS_MPRO), this is the new node you want.
In the node S_RS_ICUBE expand it and you'll see the authorizations given to InfoCubes with activity, InfoArea and InfoCube. In the older system BW 3.x this object was used to give access to InfoCubes, but also to MultiCubes. So you have to find the role that has this object with InfoCube with the value of MultiCube or with all values, for example, you could have this node in your role with the following values:
Activity                       03
InfoCube Subobject     DATA
InfoArea                     ZFI*
InfoCube                    ZFIAA_C11, ZFIAA_C13, ZFIAA_M02
or with:
Activity                       03
InfoCube Subobject     DATA
InfoArea                     ZFI*
InfoCube                    *
or with:
Activity                       03
InfoCube Subobject     DATA
InfoArea                     ZFI*
InfoCube                    ZFI*
Something like that. The first example give access to specific InfoCubes and one MultiCube, the second one you'll have all the InfoCubes and MultiCubes inside the InfoArea started with name ZFI and the third one you'll have all InfoCubes and all MultiCubes started with name ZFI that belongs to the InfoArea started with name ZFI also.
Got the picture?
So in BI 7 MultiCubes are now controlled by the new object S_RS_MPRO instead of the older object S_RS_ICUBE. What you should do is go to transaction pfcg and insert the role you want to include (or change these new values, i.e., the role that has the access to the MultiCube values inside the object S_RS_ICUBE which the query is built on) the new object S_RS_MPRO and click on change. Go to tab authorizations and click on change authorization data. Then click on manually (ctrlshiftF9) and insert the object S_RS_MPRO. Inside this new object you should insert the authorization data for accessing your multiproviders.
In the 3 examples above you should create these 3 entries:
Activity                          03
InfoArea                         ZFI*
MultiProvider                  ZFIAA_M02
MultiProvider Subobject DATA
or with:
Activity                          03
InfoArea                        ZFI*
MultiProvider                  *
MultiProvider Subobject DATA
or with:
Activity                         03
InfoArea                        ZFI*
MultiProvider                 ZFI*
MultiProvider Subobject DATA
Therefore you continue to have the object S_RS_ICUBE to control only the InfoProviders plus the new object S_RS_MPRO to control the MultiProviders.
Now generate the profile(s), save the role(s) and test it again!
Diogo.

E-Recruiting : Role Authorization in e-recruiting standalone scenario

Hello Friends,
We have EREC on a standalone system (ERD 100). HR ECC is another system (ECD 300), Enterprise portal in another system (EPD 100).
we are on EHP 5, EREC 605, Support Pack 7.
We have activated the single sign on mechanism.
I have following queries regarding role authorizations on EREC in standalone model.
1) We have standard reference users such as recruiter, manager, decision-maker, data entry clerk, rec.admic etc; the" RCF_RECRUIT, RCF_MANAGER, RCF_CAND_INT, RCF_DATA_TYP" etc, Should this reference users be created both in EREC & HR system or only in EREC system ?
2) If the "RCF_XXXX" reference users roles are supposed to be created only in EREC system, how to assign reference user roles to employees whose master data is in HR System. ?
3) Can support teams concept help for mass authorizations? Can someone elaborate on the support team, support group concepts ?
Kindly provide inputs.
Regards,
ER.

Thanks Nicole for the inputs.
Just expanding my query on the 2nd point regarding assigning Reference users like manager, recruiter to certain employees :
Example: Say I have Emp. No 20003000. He is an hiring manager, In HR System, IT105, subtype user id is "20003000".
To assign RCF_MANAGER reference user role to user id 20003000, should i have to recreate the userid in EREC system as well and assign it in SU01 for this user id.
Would like to take your comments.
Thanks,
Regards,
ER.

Execute a scenario from Agent - change the value of variable

hi,
does anyone know, why id doesn't work...
I execute a package with these steps:
1. Declare a variable
2. Execute a Procedure.
I have declared a default Value "123" for this variable.
After I execute this package in Agent (not OSCommand) and overwrite this variable with "456" (it should be a parameter for a user), THE PROCEDURE HAS BEEN EXECUTES WITH "123" - the default value.
Thanks for your help.
br,
marcin

Ok,
Because when you said that just declared the variable, I thought that you was calling the package passing the variable as parameter at a odi command...
There is a bug on that window, it doesn't work. If you execute the same action on Metadata Navigator will work fine.
A possible workaround to execute from Designer is::
1) Create a new package
2) add the scenario to this package.
3) at the propriety window, compose the variable with the value (456 in your case)
4) generate a scenario from this new package
5) execute it. Now it will not show the variable window because you have the variable at command line.
Does it make sense to you?
Cezar

Roles & Authorizations to execute the scenario

Similar Messages

Maybe you are looking for