Roles, queries,workbooks and users

Dear Experts,
I have an urgent requirement to join information about roles, queries, workbooks and users.
Can you tell me which all tables I should be looking into?
Regards,
Kris

Hi Kris,
Please see this link below : -
roles table in sap
It is for roles, i think you have table for queries already in your previous post.
Regards
Sunny

Similar Messages

Assigning Queries and workbooks to user roles

Hi Guys,
I was hoping that someone could explain, how the queries, workbooks and Web Templates can be assigned to roles.
What are the steps involved in creating the roles and assigning the queries.
How are these reports accessed by the users (by URLs or through SAP GUI) If I would want to use the URLs to access them, how do I open the workbooks?
I seem to have a lot of questions, hope to find answers to a few of them.
Thanks,
Doniv

Hi Doniv,
Queries, workbooks and web templates can be assigned to roles during the time that they are being saved. The assignment can also take place in PFCG > role. These kind of roles are usually basic placeholders that are assigned to different users as per requirements. This ensures that the usersa can see only those objects which are on the roles assigned to them.
The workbooks are not accessed by a URL in the internet explorer, they are accessed in the BEx Analyser.
Hope this helps...

How to save Query in a workbook and Role

Hello All
What are this workbook and role?How to save the query into this and how it helps/use us.
can anyone tell about this?
regards
balaji

Hi,
You need to assign a role to a user. WHen this user enters the system s/he will be able to save queries under the role (the button 'Roles' will be seen).
See here an example of working with roles:
Re: How to protect Queries from being modified ?
Best regards,
Eugene
Message was edited by: Eugene Khusainov

Publishing queries/workbooks to roles

I'd like to know what the best practice is for organising the above. Our problem is that we develop a number of workbooks local to production. If we publish these to the roles carrying authorisations then they will be overwritten the next time we make a change to the authorisation values and reimport the roles. Is it necessary to have some roles which are used to hold authorisations and others to act as objects to publish queries/workbooks to?

Yes,
And I believe that's the best practice.
Create a role just to publish the queries/workbooks only (just for the Menu).
Create another role for the authorization objects.
Both roles should be assigned to the user but manage independently.
Diogo.

BW workbook and roles

Hi guru
I have a problem :
I have one role in PFCG for access from BEX to the query of an infocube.
Under this role there are some workbook saved by the user.
My question is : if I cancel the role all the workbook are lost ? Is there a Way to save the workbook and assign the workbook to another role ?
This is because I need to recreate the roles in PFCG for query access reorganization, but i'm confused on assigning the workbook to the new roles
Thank' in advance

Hi Antonio,
This is a very simple task , copy the role as per other experts steps
go to your original roles authorization data , see where the workbook is inserted in Z1 ( A1 )
in Z2 ( w1...... )
note down the authorization object where its inserted
take down the field values also from the original role.
NOte down
Authorization object
Field name --- values
Now come to your New/Copied role
Search for the authorization object
enter all the values that you need into this role against its field name.
Actually you dont need to copy roles too.....
just open the role Z2 , find where the A1 is inserted, then add all that you need next to A1
Siddarth varma has provided the steps to follow very clearly to do this
Look at threads like this
Re: Save Workbook in a role in SAP BI
Edited by: Franklin Jayasim on Jul 7, 2010 8:59 PM
Edited by: Franklin Jayasim on Jul 7, 2010 9:03 PM

Workbook in role but not on user menu

Hi All
I have a workbook saved under a certain role menu. The workbook apeears fine under the role when using BEx.
However, the workbook has disappeared from the User-Menu in SAP-GUI.
I have tried to refresh the user menu, change and re-save the workbook in the role (via BEx and via PFCG), I checked report: RSWB_ROLES_REORG but nothing helped.
I searched for notes but nothing seemed relevant.
Any help?
Thanks,
Yaniv

Hi,
The issue because of MS 2007. it would not be compatible sometimes.
for that you have install the latest patch for the BEx and dotnet framework on your desktop.
it would be available in the service market place.
or
We have had several issues similar running SAP BW 7.0 with BEx 3.5 workbooks after upgrading to Excel 2007. There are several SAP Notes concerning various Excel 2007 related errors. Most of these seem to be bundled in the just-released SAP BEx 3.5 Add-On Patch 7 for SAPGUI 710, so my advice would be to download this patch if you have not done so already.
Regards,
Marasa.

Listing Queries/Workbooks in Roles

Hi! Is there a way to list queries/workbooks by role?
Thanks in advance!
Marnie

Hi,
When you log on to the BEx by workbook or query and when you press the role button, you should be able to see all the workbooks and queries by role.
You can also check the listing in PFCG. Give the role name and all the workbooks and queries attached to that role can be found in the menu area.
Cheers,
Kedar

Trying to understand "User/Role/Profile Synchronization" and Batch Analysis

Hello,
Im trying to understand what exactly and from which tables these jobs are copying to which tables in CC. I have a understanding that these jobs are moving also deleted roles from backend. This is causing unnecessary delay to long lasting job.
I would appreasite if some one could explain the logic behind these jobs. What the fullsync and incremental is reading ? What kind of changes are causing a role/user/profile to be included to the full and incremental jobs?
How the incremental analysis logic is built ?
br Janne

Janne,
In my current implementation we are going for an offline risk analysis due to the heteregoneus system landscape of our client (several SAP and non SAP systems and several SAP systems under 4.6C). Eventhough within our approach we don't perfrom the backend synchronization (we use CC data extractor to pull data from backend into CC) hope the following info could hel you:
The tables such jobs you mention access to, are all the SAP backend system tables related with users, roles, profiles, action and permissions. If you check the data mapping appendix of the "user and configuration guide for 5.2" you will see all the data that CC retrieves. For instance, in order to extract user info (UserID, FName, LName, Email, Phone, Email, Department) tables USR21, USR02, ADRP, ADR6 and ADCP must be accessed.
In terms of CC tables:
VIRSA_CC_SYSUSR >> UserIDs and Systems ID relationship
VIRSA_CC_GENOBJ >> User, Role and Profile master data
VIRSA_CC_GENACT >> User-action, role-action and profile-action data
VIRSA_CC_GENPRM >> User-permission, role-permission and profile-permission
VIRSA_CC_SAPOBJ >> Action-permission
VIRSA_CC_OBJTEXT >> Objects descripcions (ACT, PRM, FLD, VAL, ORG)
Hope this helps.
Regards,
Imanol

Visual Totals and users in multiple roles

Hello,
I have a few questions regarding dimension security and visual totals enabled.
The infrastructure:
- multiple roles
- users are members of multipe roles
1) if I have multiple roles and the user is member of multiple roles - if I set "Visual Totals" to true on one role it does not work?
2) same as "1" but if I set the visual totals on all roles it does not work?
is this the intended behavior? - does it only work if the user is only in one role? or do I do something wrong?
We want to have on two roles visual totals and on the others not - if possible. And if the users is member of other roles it would be OK if he sees all values..
3) How would Visual Totals work if I allow some nodes but deny all children of the node?
4) Is there some advanced documentation - which extens the information from "ms-help://MS.VSCC.v80/MS.VSIPCC.v80/MS.SQLSVR.v9.en/uas9/html/b028720d-3785-4381-9572-157d13ec4291.htm"
Thanks for your help.
HANNES

Years after I am going to search for the same answer I was looking 7 years ago....
Maybe someone out there can answer them now?
http://www.hmayer.net/

Is it possible to export and import the roles and users tables?

Hi,
is there any possibility to export and import the role and user definitions?
We have a SAP MDM repository with a lot of roles and users and also with a lot of changes.
And now I'm searching for a fast and efficient way of managing the roles and users.
Thanks and Regards, Melanie

Hi Melanie,
There is no export/import functionality for roles and users. The only way to manage these in an automated way would be to write a program that uses the Java or ABAP APIs. Both APIs expose functionality to create, update and delete roles and users.
Hope this helps,
Richard

Allowing Airwatch MDM access to the Captive-Portal guest users in pre-auth role for android and BB?

Requirement:
How to allow Airwatch MDM access to the Captive-Portal guest users in pre-authentication role for Android and Blackberry devices?
What is Airwatch MDM?
Airwatch MDM is Mobile Device Management. The Airwatch is an enterprise which helps to manage and secure data traveling through the mobile devices like Laptops, Tablets, Android, iPhones, iPads etc.
Solution:
Why we need to allow access to Airwatch MDM?
The network administrator can force the guest users to register to Airwatch MDM before they get authenticated and access the internet. So that the network administrator could manage the guest devices through Airwatch Management tool. This can be achieved by CPPM server. To download the Airwatch MDM app and register with the Airwatch MDM server certain domains should be permitted in the captive portal pre-authentication role. This KB provides the configuration steps to allow the guest users to download the Airwatch MDM app and register with the Airwatch MDM server.
Configuration:
Below is the configuration
Configuration steps:
1. Create the following netdestinations
netdestination Airwatch
name *.awagent.com
name *.awmdm.com
name air-watch.com
netdestination Google-Play
name android.clients.google.com
name .ggpht.com
name gstatic.com
name accounts.google.com
name clients1.google.com
name clients2.google.com
name clients3.google.com
name clients4.google.com
name i.ytimg.com
name google-analytics.com
name .1e100.net
name android.l.google.com
name mtalk.google.com
name clients.l.google.com
name googleapis.com
name gvt1.com
netdestination BlackBerry
name *.blackberry.com
2. Now define the rules in the session acl and map it to the pre-authentication Role of the captive portal.
ip access-list session Airwatch_Access
any   alias Airwatch svc-http permit
any   alias Airwatch svc-https permit
ip access-list session Google-Play-Store
               any   alias Google-Play any permit
ip access-list session BlackBerry-Access
               any   alias BlackBerry any permit
3. Now map the session ACLs to captive-portal pre-authentication Role as follows
user-role Guest-Pre-Auth-Role
access-list session Airwatch_Access
access-list session Google-Play-Store
access-list session BlackBerry-Access
access-list session logon-control
access-list session captiveportal
4. Now whitelist the list of domain names in the Captive Portal profle
aaa authentication captive-portal Airwatch-Captive-Portal-Profile
white-list Airwatch
white-list Google-Play                                                                                ------------>Netdestinations where you defined the Domains.
white-list BlackBerry
Verification
Now the user will be placed under the "Guest-Pre-Auth-Role" before the authentication. The user can now go the Google Play-Store or BlackBerry Appworld to download the Airwatch MDM and register to Airwatch Management Server.

Thanks so much getting these names listed out. I have been working on this very issue for a few weeks and was basing my firewall rules on IP's. It was not going well. Now access is working and testing can commence!  Thanks,Chris

How to create automatically users&roles in CUA and in chlid systems?

Hi,
i have a CUA on a 2 chlid R/3 systems (test and training) and 2 portal systems (test and training).
i need to create a web application to create automatically users test and users training in CUA and see them in the R/3 chlid systems and at the same time to create autmatically a roles in CUA and R/3 chlid systems for those users (we sppose that the role is already stored in a table).
are there any standard BAPI or Funcion modules that can do this job?
is the role created automatically in CUA can be seen automaticall in the portal child system?
any help?
Thanks&Best regards

You can use one of the various ways Java EE provides you, e.g. container managed authentication.
It's also all in the Java EE tutorial: [http://java.sun.com/javaee/5/docs/tutorial/doc/bncas.html].
You can configure it in the application server as well: [http://tomcat.apache.org/tomcat-6.0-doc/realm-howto.html].
Here is an example how to use it in JSF: [http://ocpsoft.com/java/acegi-spring-security-jsf-login-page/].

How to create automatically users&roles in CUA and child systems

Hi,
i have a CUA on a 2 chlid R/3 systems (test and training) and 2 portal systems (test and training).
i need to create a web application to create automatically users test and users training in CUA and see them in the R/3 chlid systems and at the same time to create autmatically a roles in CUA and R/3 chlid systems for those users (we sppose that the role is already stored in a table).
are there any standard BAPI or Funcion modules that can do this job?
is the role created automatically in CUA can be seen automaticall in the portal child system?
any help?
Thanks&Best regards

Thank you all. I got the solution.
Regards
Rajesh

Table that stores the business role and user id mapping

Hi,
i want to know the table that stores the Business role and the business role and user id mapping in CRM system.
Thanks in Advance.
Regards,
Pricy

Hi Mary,
There is no direct table but there is a way to find it.
HRP1263 is the table where business roles are stored when maintained at org level. These are stored against the Position.
For getting user ID and position linkage refer table HRP1001.
In HRP1001 table use below criteria to get the User and Position.
OTYPE = CP
SCLAS = US
SOBID = User ID
ENDDA = 31.12.9999
Get the OBJID
Query the HRP1001 table again with following
OTYPE = CP
OBJID = OBJID from above Query
ENDDA = 31.12.9999
SCLAS = S
SOBID = Thats Position.
Pass the position to HRP1263 as below.
OTYPE = S
OBJID = POSITION
PROFILE - Thats business role assigned for the given position and user.
Hope this is helpful.
Regards,
Naresh

Link to Business Role and User Account

How to link an user account with a business role so that the user account can work with the new UI?

Hi,
Go to transaction PPOMA_CRM. Search for your business role say SALESPRO in the Position Search.Double click on the role so that its details are visible on the right hand side.Then search for your user from the user search.When it comes in the left side bottom, drag and drop it to the position on the right side.
Regards,
Rohit

Roles, queries,workbooks and users

Similar Messages

Maybe you are looking for