SAP template authorization

Hi,
  Does anybody know where I can go to check what all the auth objects exists in SAP delivered templates like
S_RS_RREPU BW role: Reporting user
S_RS_RREDE BW role: Reporting developer
S_RS_ROPAD BW role: BW Administrator
etc.....
I want to base my roles on some of the objects but I dont know what all field values a specific type of user may need.
I am specifically looking for auth object S_RFC.  Does anybody know what typical function groups to assign for this object for bex analyzer/ RRMX/ web report execution.
Thanks

Hi,
   SUIM is transaction where you can look for all roles and authorization objects are in SAP BW system. Under Authorization node you can find all the Authorization objects .
hope this will help.
Cheers,
Balaji

Similar Messages

  • Learning SAP BW authorizations structure and hierarchy  -  concepts

    Hello Experts,
    I need a good document for learning Authorizations structuring and hierarchy in SAP BIW 3.5 . I am giving authorizations in BIW but do not hv conceptual nd fundamentalistic knowledge of SAP BW authorizations and its structure . Plz send a good document for learning BW authorizations .............................it may be an excerpt frm FU&FU guide. My Email Id is [email protected]
    A short but complete SAP BW fundamentalistic , concepts and structure & hierarchy covering document is appreciated.
    Requested to revert at earliest as this is very urgent.
    Points guaranteed.
    Regards,
    Somya

    Hi maheshwari ,
    Use these steps for authorizations,
    1.before going to authorizations u have to decide on which Infoobject u have to apply authorizations.
    EX: SD--- Sales Org, MM -> palnt ,purorg,FI> companycode.
    first u ahve to decide which area & on which Infoobject.
    2.goto that Infoobject --> change there check the checkbox Authorization relavent object cahechbox
    2.after that U Have to goto RSSM there u have to create authorization object
    Ex: Zxxx ( XXX is Infoobject Name ).
    3. In the same transaction Screen u have Infocube selection radio Button check that then select on which cube(cube means under that cube all Quaries) u have to make authorization for that perticuler Infoobject.
    4.next goto PFCG create role & save it
    5.goto Authorization tab in that selct edit authorization it will give automatiaclly authorization Templates in that u have to select only S_RS_RREPU & press Enter.
    6. Select manual pushbutton it will ask authorisation object enter ur authorization object what u have created ( zxxx) .
    7.click generate +enter
    8. goto user tab Enter userId+enter + click on usercomparision+ enter
    9.save the role.
    FOR HIRARCHIES:
    1. goto RSSM There u have one rediobutton called authorization hierarchy ( this radio button is very below the RSSM screen)
    2. there u have to select Hierachy on which u have to apply authorization.
    Thanks,
    kiran

  • Rloe Creation in the SAP template process

    Hello,
    Our Company is a subsidiary co. of a German based MNC Co. who have a global presence in Europe, America & Asia.
    Our compnay is the first subsidiary Co. for roll out of SAP templet process and later on the same templet process has been rolled out in America & Asia. Our MNC co. has trageted to rolled out the same templet process for all the subsidiary Co. globally.
    Under the global template process, presently, we are using the SAP standard roles and user specific roles for the transactions authorisation.
    We being a subsidiary co., developing the Role based transaction authorisation matrix and would like to define the same in Global SAP Template.
    Questions:
    1. Being a SAP global templet process, whether this new role based trasaction authorisation roles can be define for our subsidiary Company in the templet?
    2. If , the answer is no what is the alternative remedy.
    We would be glade to know the answer.
    Thanx & Regards

    Hi Prasad,
    Yes it is possible. You will have to use handling units only as shipping units in the outbound delivery packing function. The handling unit can be defined during the transfer order confirmation (you have this in LT12 as packing) or in the delivery after the TO confirmation. You can only perform packing before goods issue.
    I hope i'll helps you lot
    Regards
    Madhu

  • SAP Template for Documentation

    Hello
    We are going ahead for <b>EP Portal Content Certfication</b> for some of our development. One of the requirement of this certification is that the related documents should conform to the <b>SAP Templates</b>.
    Now does anyone know that from where can I get these SAP templates to create my documents ??
    Thanks in advance.

    Hi Vishal
    try out this link.Probably u will get the documents from here.
    https://media.sdn.sap.com/html/submitted_docs/Implementation_Roadmap_EP/Enterprise%20Portal/index.htm
    Regards
    Rajeev.
    Do award points for helpful answers in SDn.

  • Report data restriction based on SAP ID - Authorization in BI 7.0

    Hi Friends,
    In our project the requirement of restriction of report is as follows.
    There are two reports
    1. Carrier View Report
    2. Carrier Drilldown Report
    Carrier View which is on Multiprovider is main report and Carrier Drilldown report, which is on DSO (ODS) is RRI report.
    Carrier Vendors (these are vendors taking care of transporting the goods to customer locations from plant) will be viewing these reports. We have a master data maintained for Carriers as Carrier ID. The report has this Carrier ID in rows. Each carrier vendor would be given a SAP ID for logging into BW WEB reports.
    Security Requirement: When a carrier execute report, the data in the report should be restricted to Carrier ID associated with the SAP ID which he is using.
    Kindly suggest us the steps to do it, I am not basis person, but I need to help him.
    Thanks and regards,
    Balaraj

    Hi Balaraj,
    You can use <a href="http://help.sap.com/saphelp_nw70/helpdata/en/66/019441b8972e7be10000000a1550b0/frameset.htm">Analysis Authorizations</a> in BI.  Use transaction RSECADMIN to create authorizations and user assignments.
    You need to declare Carrier ID Infoobject as Authorization relevant. Analysis authorizations are not based on authorization objects. Instead, you create authorization for each carrier that include Carrier ID characteristic and some restricted value(s) for the characteristic. You can then assign this authorization to one or more users(SAP IDs). When ever a query with Carried ID is executed, It checks for the analysis authorizations and hence he can acess only those values that are assigned in his own authorization.
    Instead of assigning the corresponding Carrier IDs values for each authorization manually, you can create a single authorization for Carrier ID and fill in the values of the authorization using <a href="http://help.sap.com/saphelp_nw70/helpdata/en/91/a62c42fb6fdd2ce10000000a1550b0/frameset.htm">Authorization  variables</a>. In this case in the customer exit you need to use the master data maintenance of SAP ID and CARRIER ID and fill in the values of E_T_RANGE depending on the user name SY_UNAME.
    Assign points if you find it helpful.
    Regards, Uday

  • SAP templates use BAPIs not available in 4.7

    We are trying to use the SAP module library templates for PP - We are running 4.7 and do not have access to BAPIs BAPI_PRODORD_GET_LIST or BAPI_PRODORD_GET_DETAIL, two of the BAPIs used in that template.
    Any suggestions or help would be appreciated.
    Thanks

    If these BAPIs were not available in 4.7, then you would probably have to create them.  But I was pretty sure the Production Order BAPIs were in existence then.  You may want to post on a different board when some more savvy ECC folks would chime in.  Are you sure you don't need the Process Order BAPIs?   For BAPI_PROCORD_GET_LIST and its fellows were not released until ECC 5.5 (I think).
    Regards  and Good luck!
    Mike

  • SAP BW Authorizations

    Hi All,
    I am BW Consultant, till now I didn't get a chance to work on BW Authorizations.
    Could please suggest how authorization concept will work in our BW system and could please give good documentation for the same. I need to work on BW 7.0 system.
    Thanks in advance...
    Prasanna
    Moderator Message: Please search for relevant documentation.
    Edited by: kishan P on Mar 2, 2012 3:41 PM

    Hi,
    Please check the below link:
    http://help.sap.com/saphelp_nw04s/helpdata/en/80/d71042f664e22ce10000000a1550b0/frameset.htm
    Please refer notes
    820183 New authorization concept in BI
    727354 Colon authorization during query execution
    1122407 dealing with prerequisits for message processing in OLAP!!
    Thanks,
    Venkat

  • SAP Report Authorization

    Hello,
    I have developed some reports for HR using InfoCubes 0PAPA_C02 and 0PA_C01. My reports are based on Company Code, Personnel Area, Country Code.
    The Problem that I am facing is how to restrict employees related data based on company Code, Countries, Personnel Area.
    I have tried to create Roles in RSECADMIN but some how values in the queries are not getting restricted.
    Please Help.
    Anil Kachru

    Hi Balaraj,
    You can use <a href="http://help.sap.com/saphelp_nw70/helpdata/en/66/019441b8972e7be10000000a1550b0/frameset.htm">Analysis Authorizations</a> in BI.  Use transaction RSECADMIN to create authorizations and user assignments.
    You need to declare Carrier ID Infoobject as Authorization relevant. Analysis authorizations are not based on authorization objects. Instead, you create authorization for each carrier that include Carrier ID characteristic and some restricted value(s) for the characteristic. You can then assign this authorization to one or more users(SAP IDs). When ever a query with Carried ID is executed, It checks for the analysis authorizations and hence he can acess only those values that are assigned in his own authorization.
    Instead of assigning the corresponding Carrier IDs values for each authorization manually, you can create a single authorization for Carrier ID and fill in the values of the authorization using <a href="http://help.sap.com/saphelp_nw70/helpdata/en/91/a62c42fb6fdd2ce10000000a1550b0/frameset.htm">Authorization  variables</a>. In this case in the customer exit you need to use the master data maintenance of SAP ID and CARRIER ID and fill in the values of E_T_RANGE depending on the user name SY_UNAME.
    Assign points if you find it helpful.
    Regards, Uday

  • How to create PDF type of ivews in portal using the standard SAP template

    Hi,
    I have to create PDF type of ivew in the portal, I am trying with URL type of ivew but it is not taking " %" in URL type of ivew.
    Is there any other template availabe to create pdf type of ivews or how to create these pdf type of ivews in portal.
    Please help me out .
    Thanks,
    Manasa.

    Hi Manasa,
    You can do that by simply removing the special character "%" (in ur case) and providing " "(blank space) in its place.
    Please refer to this link: [http://help.sap.com/saphelp_nw70/helpdata/en/2f/84e378f6244113b0816b5d00cd3747/frameset.htm]
    Hope this helps !
    Regards,
    Nishant Singh

  • Checking Query and Web Template Authorizations

    Hi,  I have some code that does an authority-check to determine if a user has access to a specific query. 
      AUTHORITY-CHECK OBJECT 'S_RS_COMP'
               ID 'RSZCOMPID' FIELD '__________'.
    I need to be able to test to see if a user has access to a specific Web Template.
    Any ideas how to do this?
    Thanks!

    Kenneth,
    1. Find the roles a template is assigned to : Yes, use AGR_1251 table.
    2. Find the roles a user is assigned to : Yes, use AGR_USERS.
    3. check if the user has the role the template is assigned to? by joining both the tables.
    By using these tables, programatically you can check it.
    You cannot check this using C-Command AUTHORITY-CHECK OBJECT. As this checks only the authorizations for the user who is executing it. This command is more useful in the following scenario.
    Eg.In BW if you have written a program for some reasons to read the values of an ODS active table. On this ODS you have authorization relevant infoobject. Lets say profit center. In order to check the profit center that the user is assigned to and populate the data for only profit centers for which he is eligible to view the data.
    Hope this helps,
    GSM.

  • SAP Templates

    HI,
    What is the meaning/definition of the word Template in SAP terminology? What are the Pros and Cons of using a Template?

    HI,
    The methodology that companies use in order to accelerate their SAP implementation, are called SAP Road Maps, and are made of a sequence of modules/actions that a single company should follow to assure the best outcome. Road maps are specific for each industry section, and can be retrieved by the SAP web site. The logic behind this, is that for example you cannot implement module B of SAP ERP, unless you have implemented module A first, which is a prerequisted for module B. The aim is to shield companies again some consultants that propose whatever as a solution, without taking anything under control.
    The Template, on the other hand, is something different. It is used mainly on the Controlling area, and it is a dynamic allocation tool that uses functions and formulas to calculate numerical values or true or false values. This tool is used for various purposes such as sender-receiver allocations and as an aid for formula planning. Instead of preassigned allocation data, the Template uses a generic description for any data (such as the sender object, quantities, and costs). Since this data is not known at the time the template allocation is performed, it is determined dynamically when the values are calculated.
    Reward Points if found helpfull..
    Cheers,
    Chandra Sekhar.

  • SAP BO authorizations

    Hi,
    which authorizations / roles are necessary for the different BO elements (Xelcisu, Explorer etc.) By which way the authorizations / roles were desinged and assigned to users?
    Thanks!
    Best regards
    SwS

    Hi
      I guess Admin guide will clarify you : http://help.sap.com/businessobject/product_guides/boexir31/en/xi3-1_bip_admin_en.pdf
       See "Setting rights section" / "Working with access levels"  in page number 705.
    Regards
    Ashwini

  • SAP SCM Authorizations

    Hi,
    I am looking SAP SCM Security tcodes and tables that are used on daily basis like in R/3 ECC SU01,SU10,SE10,SU01,PFCG,SU24,SE16,SE11,SE38,su21,su20 etc.
    thanks

    Hi Jain,
    I highly recommend you to read this nice guide if you haven't read yet:
    http://www.sdn.sap.com/irj/bpx/go/portal/prtroot/docs/library/uuid/80c094de-90aa-2910-02b8-e31a6f5ff0c2
    In this guide you'll be able to find definition of roles and responsibilities when implementing GRC.  You'll understand that Auditors should take a GRC course also; GRC it's a tool that involves a lot of areas. If you've been working with SAP authorizations so far, you won't have problems understanding GRC, you should read the corresponding guides and you'll be able to "map" your company requirements via system configuration.
    Cheers,
    Diego.

  • SAP Portal : authorizations acceptance form

    Hi All,
    We are thinking of automating our approval process for user authorizations.
    What we need is that any user should able to login to SAP through the internet and should be able to submit an accepted digital document of his authorizations to the approver for approval.
    Can  this can be done with SAP EP only or any other interfaces are needed?.  Please share the documents if any.
    Best Regards,
    DVRK

    Hi,
    unfortunately, I am not aware of any simple way how to do this. In more complex landscapes as it's your case you would have a dedicated system that is responsible for provisioning users in all systems. So this system would assign all required roles in ABAP AS as well as in portal. I am talking about something like SAP Identity Management.
    You could try to build some duct tape solution but in the end this does not usually pays off.
    Cheers

  • SAP Upgrade - Authorizations

    Hi Everyone!
    I'm about to get an project that is an Upgrade from 4.7 Enterprise to ECC 6.0 and got some doubts about how SAP Authorizations will behave in this situation.
    Does anybody passed through it?
    Anybody knows if there a standard application or something like this to "adjust" the 4.7 roles to work properly at new environment running ECC 6.0? Or they just work the way it is?
    Perhaps the major issues that upgrade can bring...
    I'm wondering that some auth objects and t_codes has changed even in the way they works and the way it interact with tables and others.
    Can anybody help me? or perhaps a guide about this upgrade?
    Best regards.

    Have a look at transaction SU25 and it's documentation.

Maybe you are looking for