Roles for MSS Reports

We are having some authorization issues with MSS reports. When we try to display the report from MSS , It says no authorization for transaction (name). When we give SAP_ALL to the manager at the backend, it works fine from MSS side. Please suggest if we are missing some thing. What are the standard MSS roles for the reports.
Thanks

Hi,
The MSS reports must have some Program name, say REPORTX or it may be called by some transaction.
Add the report name to the auth object P_ABAP for the MSS role or add the transaction name to the authorisation object S_TCODE and P_TCODE.
Either way, the problem will be resolved.
Or you can remove the SAP_ALL from the manager profile; Login with the userid of the manager. Try to run anyone of the reports and then after it throws the missing authorisation error, type in /nsu53 in the transaction bar and trace the missing authorisation. Accordingly add the same to the managers role.
Thanks and Regards,
Pinki

Similar Messages

How to define roles for the reports that i have created using WAD?

Hi all,
Can anyone let me know how to define roles for the reports generated using WAD. And what is the procedure for creating and defining roles. Is this process take care of Bw consultant nor the basis guys.
Can anyone let me know the entire procedure about the roles in bw 3.5
thanxs
haritha

Following links might helps you
create a role
https://www.sdn.sap.com/irj/sdn/wiki?path=/display/bi/authorizationinSAPNWBI&

SSO for MSS Reporting doesn't work

Hello Experts!
I've a litte Problem: When a Portal-User (Manager) wants to call a Report from MSS Reporting, there comes a litte popup where he has to fill in his logon data for the HCM-System (target system).
I have already imported the certificates from Portal into the target system (Transaction strustsso2) as describes in this weblog (Connecting SAP systems to Enterprise portal with SSO.). The portal user and HCM-System user names are indentical, too.
do you have any suggestions?

Hi Matthias,
Let me know which version of MSS and HCM system are you using. I assume that your you are using saplogonticket in the system property.
Few questions:
- Is that appearing for all the screens or applications in MSS business package ?
- Are you using the standard SAP business package or have you customized it ?
- As mentioned in your message, you have imported the certificates but have you added them to ACL and set the value in 2 parameters login/create_sso2_ticket and login/accept_sso2_ticket and restarted the target system (HCM system) ?
Regards,
Sunil

OrgPublisher for MSS reports

Dear All,
If any of you have used Orgpublisher for some MSS reports on portals?
i wanted to know what are pros and cons for the same and also do we need to take a seperate licence for this.
Thanks and Regards,
Sudhir

Closing old messages, not relevant now.

SCCM 2012 R2 - Setting security Role for SCEP reporting shows nothing.

Have an issue.
I've created a new security role for a user so he can view reports about Endpoint Protection(Just copied Endpoint Manager role and set all permissions to Read) .
But when user runs reports, he gets nothing:

Try setting the "Audit Security" permission to Yes on "Collection" within your custom security role.

Assigning a role for multiple reports

Hello,
Is there an easy way (drag-and-drop) for assigning 30-40 reports to a role?
Now, I'm doing it one by one, with Query Designer
In PFCFG transaction neither, I couldn't see an easier way..
Thanks.

Hi,
If bunch of queries have some particular naming convention then you can you REP* pattern to assign query to role in PFCG.
e.g. : REP_ABC , REP_XYZ , REP_MNO etc.. then just assign REP* for these queries.
Regards,
Avinash

Roles for accessing reports

Hi,
which roles should be assigned to the users for accessing the reports.
regards,
kv

Minimum authorisation required for reporting user
1. Analysis authorisaton for Info Provider
2. S_RS_COMP
3. S_RS_COMP1
4. S_RFC (BEX ANALYSER OR BROWSER ONLY)
5. S_TCODE
A Reporting User must have authorisation for S_RS_COMP
S_RS_COMP1
Authorisation object as well as analysis authorisation for Infoprovider on which the query is based .
In addition if the reporting user will be using the BEX analyser reporting tool they will need authorisation for S_RFC and S_TCODE with authorisation for RRMX transaction code .
Assign marks is the best way to appreciate help

Roles for showing reports only

Hi experts,
I have created one role in PFCG for BEx in which it is showing like this:
Infoarea -> Infocube -> Reports
Now I want to show only reports and to bypass Infoarea and Infocube.
Please help me to solve this..
Points assured.
Vinod.
Vinod Nagre

Dear Vinod,
what I understood from your query is that u dont want to show the BW Objects user just needs to access the reports. For this do the following
create one role in pfcg goto menu tab there click other (add other objects) button, select the SAP BW Query URL option -> Create Node window will open there u give the Report text and URL in Object description, then under role menu folder that url will come.
Assign this role to user.
When the user login to bw he can see these urls where he can access directly.
Assign Points please.........
Best Regards,
SG

Roles for MSS on EHP5

Hi,
What roles are necessary to configure a manager on MSS EHP5? I´ve assigned the role SAP_MANAGER_MSS_SR_NWBC_2 to my user, but i get the following error, when executing http://server:8000/sap/bc/webdynpro/sap/HRMSS_HOMEPAGE?sap-client=400&sap-language=EN:
The following error text was processed in system ECX : Error in BUSINESS_GRAPHICS "BG" of view "HRMSS_C_CATS_APPR_DASHBRD.V_GRAPHICS": Context binding of property ? cannot be resolved: Node V_GRAPHICS.1.XML does not contain any elements
If I leave the user with SAP_ALL the funcionality works fine.
We have already applied "Note 1617448 - WD ABAP Team Calendar needs S_DEVELOP authorization to load", but without success.
Any tip?
Thanks
Bruno

check here
The backend PFCG MSS Role shipped in Ehp5 is SAP_MANAGER_MSS_NWBC and Portal Role is available via BP Manager Self-Service (SAP ERP) 1.51
The backend PFCG MSS Role shipped in the Add-On on top of Ehp5 is SAP_MANAGER_MSS_NWBC_2 and the Portal Role is available via BP MSS Add-On 1.0
ALso note 1617448 will solve this issue.

Bypass P_orgin auth check for standard MSS reporting

Hi SAPers,
on my HR system, I have 2 types of users : ESS/MSS users (via portal) and backend users (via sapgui).
ESS/MSS role does not contain any P_ORGIN authorization because it should be added to their authorizations if they are also backend users.
The problem is coming from standard MSS reports : the "time statement overview" among other report needs P_ORGIN (IT 0, 1, 2, 7, 8, ...) !
Is there a way to bypass the standard authorization check for MSS reports ?
Thanks in advance,
Olivier.

>
Olivier TACA wrote:
> Example :
>
> Portal Role for ESS user contains P_ORGIN for IT 0006 (Address)
>
> Backend Role for backend user contains P_ORGIN for IT 0002 (Personal data) ... and S_TCODE for PA30 of course.
>
> The backend user, who is also an ESS user, can manage IT 0006, which is not foreseen in the backend role.
>
> I use P_PERNR for the portal role to manage access to infotype.
I see two issues here:
1. ESS is NOT setup correctly.
- You don't need P_ORGIN for ESS. You only need P_PERNR. The trace might even show an error looking for P_ORGIN but you do not need it. This is an example of a role I have using ESS services for addresses. I don't have P_ORGIN, P_ORGINCON or P_ORIGXXCON. Do NOT use PA30, for ESS, that is very dangerous. The ESS services can be added to a role and should be use for ESS.
Here is an example of what I have:
Manually   HR: Master Data - Personnel Number Check                     P_PERNR
Manually   Address Change - Permanent and Emergency
     Authorization level            D, E, M, S, W                                                               AUTHC
     Infotype                       0006                                                                        INFTY
     Interpretation of assigned per I                                                                           PSIGN
     Subtype                        *                                                                           SUBTY
2. MSS - I can't find the service for the report you are looking for. If you provide the MSS service I can run some traces and probably help you isolate your problem. Example of an MSS service (sap.com/mss~pla/PlanningPrimaryCosts).
I hope I didn't sound too harsh; I am just trying to help.
Regards,
-John N.
Edited by: John Navarro on Aug 5, 2008 5:46 PM

Reports available in the Business Package for MSS and ESS

Hi,
I have searched sdn.sap.com throughout looking for a comprehensive list of reports available in the business packages for both MSS and ESS, i got a little bit of joy and found some of the MSS reports but not all on sdn.sap.com, can anyone please advise where i would find such information on both these packages, just to re-iterate, i am looking for a list of reports these business packages offer? any help much appreciated.
Thanks
John
P.s any documents can be sent to [email protected]

@John
(1) ESS- We built our own custom PORTAL role/workset in which one of the worksets we created is called "Tools and Forms". Under that workset, we placed various pages/iViews that either are simple URL iViews that link to external documents and such (like vacation request forms since they do not do online leave requests yet) as well as a couple ot t-code iViews that run reports in ECC for the employee. Nothing very mind blowing there. Just some content creation on the portal side.....oh, and some config on the backend to create a Homepage Framework Area Page and all for it (I liked that part!)
(2) Wow....talk about perfect timing...I just had to document the way MSS sees the MDT reports in it's "reporting" area yesterday! haha Here goes the quick explaination....in configuration for MDT, you have various "scenarios". These kinda determine which "groups" of reports will show in MDT. For MSS for the Reporting webdynpro/service, the scenario is RPT0 (in ECC 5.0, at least). Soooo if you look at the function CODES assigned to RPT0, you will see several for Training and one for Accounting (Cost Centers)...you can reference the function CODES listed back to the "pool"/library of function codes a bit up/previous in the same config area for MDT(I think it is called "Define Function Codes"). However, there is one more piece you will see listed under RPT0....it is a DIRECT call to function MODULE "HR_HIS_READ" (this was a bugger to find because I could not find the "Maternity" report listed in the function codes and had to figure out where the heck it was coming from! haha). Anyways....what the function MODULE actually does is call the HR Information System (HIS) passing it the RPT0/MSS scenario. This returns the particular reports for Employee Data and Time&Attendance. You can see this if you run the HR_HIS_READ function directly and enter RPT0 for the second input value (first and third are not needed or you can just enter "*". Sooooo that is how the "magic" happens. Hope that explained it. From there, you can simply config you own scenario/reports to add into MSS if you like.
Hope this helped!

BW reports for MSS via Portal

Hello,
I'm trying to start BW report from MSS without any luck.
I created a function code for the report with function type BWR3 in R/3 IMG for Manager's desktop.
I Enterd the function code in table T77MWBBWS (the table is not in the IMG !) with :
object type = 'O', Reference char. = 0ORGUNIT ,
BW rep.temp. ID = ZHR_ZHOP (the tecnical name of the BW report).
When trying to start the report from Portal-MSS i get error message
" java.lang.NullPointerException "
I don't know if I created the function code correctly (On documentation
only example for SAP Quary Report exist).
Thanks in advance,
Pazit Atar.

Hi Atar,
I am having same issue. I want to integrate custom BI Query in MSS but its giving null pointer exception even after maintaining entries in T77*BW table.
I am hoping that you could have solved issue by now. If yes, please share end to end configuration steps.
Appriciate your help as we are near to Go-Live and became show-stopper.
Thanks,
~Ketan

What are the roles required for MSS

What are the roles required for MSS in R/3.
I have created ESS roles. But need to find for MSS.
I am able to see the PERNR in ESS on portal which created in R/3.
I need to get my staff on portal.
What config is required for this.
MSS User.

HI
you will have to create manager as portal role and assigned to them necessary worksets containing necessary worksets look into the PCD in migrated content and line *?? folder you will have necessary ESS and Mss packages. and all configs is related to iviews system properties and transactions and applications you need to do it .please do not forget to give points
with regards
subrato kundu

Identifying Roles for Reports

Hello,
Can some one suggest me where to find the role folder a particular report is published under?
Thanks,
Kris

Thank you for your response, but I have around 100 reports where I need to find the roles for. If its one report I can find the info from Metadatarep...I'm sure there will be a system tables where I can find all the info in one shot. Please let me know if you have info about the tables.
Thnaks,
Kris

Roles & Authorizations for Web Reports...

Hello Experts,
We are newly implementing Web Reports in our organization. I need your great thoughts regarding implementing Authorizations for users to access the reports.
We are using a report menu page that contain links to all the reports. The page opens by clicking on a link on the portal. The individual reports are basically accessed from this page by clicking on the corresponding button (links a URL ).
I wonder if there is any way to look into the menu page (XHTML code of that web page/application) when ever the users click on the reports link and disable those buttons that the users are not allowed to access depending on the roles users are assigned to. Otherwise is there any better way to do it.
And also how to call a function from web applications.
This is a kind of urgent issue any quick ideas would be greatly appreciated.

I apologize for the difficulty in reading this I will repost.
We have had no training or received any documenation on WAD. The below was created from internet research. Hence there may be WAD functionality that would allow easier maintenance, however; this is what we use.
With our dashboard, I have a web template that contains hyperlinks for our reports. I will call this HeaderTemplate1. For each web page I have report templates. These report templates have the HeaderTemplate1 mentioned above as well as the report tables, charts, text elements, tabs, etc.
The JavaScript logic for accessing the urls of the specific report templates is contained within our HeaderTemplate1.
Below is how our setup was tested. Keep in mind, this was only for testing basic functionality. If this is something we use I will most likely create a master data table that houses the user ID and an attribute for the header type. Thus, any report menu changes can be altered quickly without changing the javascript of each report template. Also this will accomodate the few thousand users we have.
To add the functionality of different 'menus', I created another header template with the same hyperlinks of HeadertTemplate1 with the exception of one or two hyperlinks. This, HeaderTemplate2, was added to each report template just below HeaderTemplate1. Note that both HeaderTemplate1 and HeaderTemplate2 were set as visible on each report template.
Also, on each report template I added a text element. The 'List of Text Elements'property was set as such; Element Type = General Text Sympol, Element ID = SYUSER. This Text Element was linked to a query or view from BEx via the dataprovider. On the HTML side, I surrounded this Text Element with
<Font ID="UserID",,,textelement....</Font>
Each Report template has this javascript function, fnRepOnLoad, which is triggered at the OnLoad event.
[<SCRIPT language = "JAVASCRIPT">
function fnRepOnLoad()
    var user_ID=document.getElementById("UserID").innerHTML;
    if (user_ID=='USER123')
      document.all["HEADTMPLT1"].style.visibility = 'hidden';
      document.all["HEADTMPLT1"].style.position = 'absolute';
    else
      document.all["HEADTMPLT2"].style.visibility = 'hidden';
      document.all["HEADTMPLT2"].style.position = 'absolute';
</script>
The function results as this. If the user is USER123, HeaderTemplate1 is hidden, leaving only HeaderTemplate2 visible. Otherwise HeaderTemplate2 is invisible leaving on HeaderTemplate1 visible.
We do not use buttons as our global leaders prefer hyperlinks but buttons can be enabled or disabled similarly.
As mentioned before, if this method is implemented, I will create a reportable master data table. Create a customer exit variable to retrieve the header template required for the user. This header template variable value will then be pulled by a text element on each report template. The script function will act as follows. If many report headers are necessary I may use a case statement.
Var User_template=document.getElementById("UserTmplt").innerHTML;
If UserTmplt = HeaderTemplate1
--> make all header templates other than HeaderTemplate1 invisible
else
--> make all header templates other than HeaderTemplate2 invisible
etc...
I hope this helps. Please keep me posted with your solution. I am very interested to learn what others are doing.
Best Regards,
Larry

Roles for MSS Reports

Similar Messages

Maybe you are looking for