SAP template authorization
Hi,
Does anybody know where I can go to check what all the auth objects exists in SAP delivered templates like
S_RS_RREPU BW role: Reporting user
S_RS_RREDE BW role: Reporting developer
S_RS_ROPAD BW role: BW Administrator
etc.....
I want to base my roles on some of the objects but I dont know what all field values a specific type of user may need.
I am specifically looking for auth object S_RFC. Does anybody know what typical function groups to assign for this object for bex analyzer/ RRMX/ web report execution.
Thanks
Hi,
SUIM is transaction where you can look for all roles and authorization objects are in SAP BW system. Under Authorization node you can find all the Authorization objects .
hope this will help.
Cheers,
Balaji
Similar Messages
-
Learning SAP BW authorizations structure and hierarchy - concepts
Hello Experts,
I need a good document for learning Authorizations structuring and hierarchy in SAP BIW 3.5 . I am giving authorizations in BIW but do not hv conceptual nd fundamentalistic knowledge of SAP BW authorizations and its structure . Plz send a good document for learning BW authorizations .............................it may be an excerpt frm FU&FU guide. My Email Id is [email protected]
A short but complete SAP BW fundamentalistic , concepts and structure & hierarchy covering document is appreciated.
Requested to revert at earliest as this is very urgent.
Points guaranteed.
Regards,
SomyaHi maheshwari ,
Use these steps for authorizations,
1.before going to authorizations u have to decide on which Infoobject u have to apply authorizations.
EX: SD--- Sales Org, MM -> palnt ,purorg,FI> companycode.
first u ahve to decide which area & on which Infoobject.
2.goto that Infoobject --> change there check the checkbox Authorization relavent object cahechbox
2.after that U Have to goto RSSM there u have to create authorization object
Ex: Zxxx ( XXX is Infoobject Name ).
3. In the same transaction Screen u have Infocube selection radio Button check that then select on which cube(cube means under that cube all Quaries) u have to make authorization for that perticuler Infoobject.
4.next goto PFCG create role & save it
5.goto Authorization tab in that selct edit authorization it will give automatiaclly authorization Templates in that u have to select only S_RS_RREPU & press Enter.
6. Select manual pushbutton it will ask authorisation object enter ur authorization object what u have created ( zxxx) .
7.click generate +enter
8. goto user tab Enter userId+enter + click on usercomparision+ enter
9.save the role.
FOR HIRARCHIES:
1. goto RSSM There u have one rediobutton called authorization hierarchy ( this radio button is very below the RSSM screen)
2. there u have to select Hierachy on which u have to apply authorization.
Thanks,
kiran -
Rloe Creation in the SAP template process
Hello,
Our Company is a subsidiary co. of a German based MNC Co. who have a global presence in Europe, America & Asia.
Our compnay is the first subsidiary Co. for roll out of SAP templet process and later on the same templet process has been rolled out in America & Asia. Our MNC co. has trageted to rolled out the same templet process for all the subsidiary Co. globally.
Under the global template process, presently, we are using the SAP standard roles and user specific roles for the transactions authorisation.
We being a subsidiary co., developing the Role based transaction authorisation matrix and would like to define the same in Global SAP Template.
Questions:
1. Being a SAP global templet process, whether this new role based trasaction authorisation roles can be define for our subsidiary Company in the templet?
2. If , the answer is no what is the alternative remedy.
We would be glade to know the answer.
Thanx & RegardsHi Prasad,
Yes it is possible. You will have to use handling units only as shipping units in the outbound delivery packing function. The handling unit can be defined during the transfer order confirmation (you have this in LT12 as packing) or in the delivery after the TO confirmation. You can only perform packing before goods issue.
I hope i'll helps you lot
Regards
Madhu -
SAP Template for Documentation
Hello
We are going ahead for <b>EP Portal Content Certfication</b> for some of our development. One of the requirement of this certification is that the related documents should conform to the <b>SAP Templates</b>.
Now does anyone know that from where can I get these SAP templates to create my documents ??
Thanks in advance.Hi Vishal
try out this link.Probably u will get the documents from here.
https://media.sdn.sap.com/html/submitted_docs/Implementation_Roadmap_EP/Enterprise%20Portal/index.htm
Regards
Rajeev.
Do award points for helpful answers in SDn. -
Report data restriction based on SAP ID - Authorization in BI 7.0
Hi Friends,
In our project the requirement of restriction of report is as follows.
There are two reports
1. Carrier View Report
2. Carrier Drilldown Report
Carrier View which is on Multiprovider is main report and Carrier Drilldown report, which is on DSO (ODS) is RRI report.
Carrier Vendors (these are vendors taking care of transporting the goods to customer locations from plant) will be viewing these reports. We have a master data maintained for Carriers as Carrier ID. The report has this Carrier ID in rows. Each carrier vendor would be given a SAP ID for logging into BW WEB reports.
Security Requirement: When a carrier execute report, the data in the report should be restricted to Carrier ID associated with the SAP ID which he is using.
Kindly suggest us the steps to do it, I am not basis person, but I need to help him.
Thanks and regards,
BalarajHi Balaraj,
You can use <a href="http://help.sap.com/saphelp_nw70/helpdata/en/66/019441b8972e7be10000000a1550b0/frameset.htm">Analysis Authorizations</a> in BI. Use transaction RSECADMIN to create authorizations and user assignments.
You need to declare Carrier ID Infoobject as Authorization relevant. Analysis authorizations are not based on authorization objects. Instead, you create authorization for each carrier that include Carrier ID characteristic and some restricted value(s) for the characteristic. You can then assign this authorization to one or more users(SAP IDs). When ever a query with Carried ID is executed, It checks for the analysis authorizations and hence he can acess only those values that are assigned in his own authorization.
Instead of assigning the corresponding Carrier IDs values for each authorization manually, you can create a single authorization for Carrier ID and fill in the values of the authorization using <a href="http://help.sap.com/saphelp_nw70/helpdata/en/91/a62c42fb6fdd2ce10000000a1550b0/frameset.htm">Authorization variables</a>. In this case in the customer exit you need to use the master data maintenance of SAP ID and CARRIER ID and fill in the values of E_T_RANGE depending on the user name SY_UNAME.
Assign points if you find it helpful.
Regards, Uday -
SAP templates use BAPIs not available in 4.7
We are trying to use the SAP module library templates for PP - We are running 4.7 and do not have access to BAPIs BAPI_PRODORD_GET_LIST or BAPI_PRODORD_GET_DETAIL, two of the BAPIs used in that template.
Any suggestions or help would be appreciated.
ThanksIf these BAPIs were not available in 4.7, then you would probably have to create them. But I was pretty sure the Production Order BAPIs were in existence then. You may want to post on a different board when some more savvy ECC folks would chime in. Are you sure you don't need the Process Order BAPIs? For BAPI_PROCORD_GET_LIST and its fellows were not released until ECC 5.5 (I think).
Regards and Good luck!
Mike -
Hi All,
I am BW Consultant, till now I didn't get a chance to work on BW Authorizations.
Could please suggest how authorization concept will work in our BW system and could please give good documentation for the same. I need to work on BW 7.0 system.
Thanks in advance...
Prasanna
Moderator Message: Please search for relevant documentation.
Edited by: kishan P on Mar 2, 2012 3:41 PMHi,
Please check the below link:
http://help.sap.com/saphelp_nw04s/helpdata/en/80/d71042f664e22ce10000000a1550b0/frameset.htm
Please refer notes
820183 New authorization concept in BI
727354 Colon authorization during query execution
1122407 dealing with prerequisits for message processing in OLAP!!
Thanks,
Venkat -
Hello,
I have developed some reports for HR using InfoCubes 0PAPA_C02 and 0PA_C01. My reports are based on Company Code, Personnel Area, Country Code.
The Problem that I am facing is how to restrict employees related data based on company Code, Countries, Personnel Area.
I have tried to create Roles in RSECADMIN but some how values in the queries are not getting restricted.
Please Help.
Anil KachruHi Balaraj,
You can use <a href="http://help.sap.com/saphelp_nw70/helpdata/en/66/019441b8972e7be10000000a1550b0/frameset.htm">Analysis Authorizations</a> in BI. Use transaction RSECADMIN to create authorizations and user assignments.
You need to declare Carrier ID Infoobject as Authorization relevant. Analysis authorizations are not based on authorization objects. Instead, you create authorization for each carrier that include Carrier ID characteristic and some restricted value(s) for the characteristic. You can then assign this authorization to one or more users(SAP IDs). When ever a query with Carried ID is executed, It checks for the analysis authorizations and hence he can acess only those values that are assigned in his own authorization.
Instead of assigning the corresponding Carrier IDs values for each authorization manually, you can create a single authorization for Carrier ID and fill in the values of the authorization using <a href="http://help.sap.com/saphelp_nw70/helpdata/en/91/a62c42fb6fdd2ce10000000a1550b0/frameset.htm">Authorization variables</a>. In this case in the customer exit you need to use the master data maintenance of SAP ID and CARRIER ID and fill in the values of E_T_RANGE depending on the user name SY_UNAME.
Assign points if you find it helpful.
Regards, Uday -
How to create PDF type of ivews in portal using the standard SAP template
Hi,
I have to create PDF type of ivew in the portal, I am trying with URL type of ivew but it is not taking " %" in URL type of ivew.
Is there any other template availabe to create pdf type of ivews or how to create these pdf type of ivews in portal.
Please help me out .
Thanks,
Manasa.Hi Manasa,
You can do that by simply removing the special character "%" (in ur case) and providing " "(blank space) in its place.
Please refer to this link: [http://help.sap.com/saphelp_nw70/helpdata/en/2f/84e378f6244113b0816b5d00cd3747/frameset.htm]
Hope this helps !
Regards,
Nishant Singh -
Checking Query and Web Template Authorizations
Hi, I have some code that does an authority-check to determine if a user has access to a specific query.
AUTHORITY-CHECK OBJECT 'S_RS_COMP'
ID 'RSZCOMPID' FIELD '__________'.
I need to be able to test to see if a user has access to a specific Web Template.
Any ideas how to do this?
Thanks!Kenneth,
1. Find the roles a template is assigned to : Yes, use AGR_1251 table.
2. Find the roles a user is assigned to : Yes, use AGR_USERS.
3. check if the user has the role the template is assigned to? by joining both the tables.
By using these tables, programatically you can check it.
You cannot check this using C-Command AUTHORITY-CHECK OBJECT. As this checks only the authorizations for the user who is executing it. This command is more useful in the following scenario.
Eg.In BW if you have written a program for some reasons to read the values of an ODS active table. On this ODS you have authorization relevant infoobject. Lets say profit center. In order to check the profit center that the user is assigned to and populate the data for only profit centers for which he is eligible to view the data.
Hope this helps,
GSM. -
HI,
What is the meaning/definition of the word Template in SAP terminology? What are the Pros and Cons of using a Template?HI,
The methodology that companies use in order to accelerate their SAP implementation, are called SAP Road Maps, and are made of a sequence of modules/actions that a single company should follow to assure the best outcome. Road maps are specific for each industry section, and can be retrieved by the SAP web site. The logic behind this, is that for example you cannot implement module B of SAP ERP, unless you have implemented module A first, which is a prerequisted for module B. The aim is to shield companies again some consultants that propose whatever as a solution, without taking anything under control.
The Template, on the other hand, is something different. It is used mainly on the Controlling area, and it is a dynamic allocation tool that uses functions and formulas to calculate numerical values or true or false values. This tool is used for various purposes such as sender-receiver allocations and as an aid for formula planning. Instead of preassigned allocation data, the Template uses a generic description for any data (such as the sender object, quantities, and costs). Since this data is not known at the time the template allocation is performed, it is determined dynamically when the values are calculated.
Reward Points if found helpfull..
Cheers,
Chandra Sekhar. -
Hi,
which authorizations / roles are necessary for the different BO elements (Xelcisu, Explorer etc.) By which way the authorizations / roles were desinged and assigned to users?
Thanks!
Best regards
SwSHi
I guess Admin guide will clarify you : http://help.sap.com/businessobject/product_guides/boexir31/en/xi3-1_bip_admin_en.pdf
See "Setting rights section" / "Working with access levels" in page number 705.
Regards
Ashwini -
Hi,
I am looking SAP SCM Security tcodes and tables that are used on daily basis like in R/3 ECC SU01,SU10,SE10,SU01,PFCG,SU24,SE16,SE11,SE38,su21,su20 etc.
thanksHi Jain,
I highly recommend you to read this nice guide if you haven't read yet:
http://www.sdn.sap.com/irj/bpx/go/portal/prtroot/docs/library/uuid/80c094de-90aa-2910-02b8-e31a6f5ff0c2
In this guide you'll be able to find definition of roles and responsibilities when implementing GRC. You'll understand that Auditors should take a GRC course also; GRC it's a tool that involves a lot of areas. If you've been working with SAP authorizations so far, you won't have problems understanding GRC, you should read the corresponding guides and you'll be able to "map" your company requirements via system configuration.
Cheers,
Diego. -
SAP Portal : authorizations acceptance form
Hi All,
We are thinking of automating our approval process for user authorizations.
What we need is that any user should able to login to SAP through the internet and should be able to submit an accepted digital document of his authorizations to the approver for approval.
Can this can be done with SAP EP only or any other interfaces are needed?. Please share the documents if any.
Best Regards,
DVRKHi,
unfortunately, I am not aware of any simple way how to do this. In more complex landscapes as it's your case you would have a dedicated system that is responsible for provisioning users in all systems. So this system would assign all required roles in ABAP AS as well as in portal. I am talking about something like SAP Identity Management.
You could try to build some duct tape solution but in the end this does not usually pays off.
Cheers -
Hi Everyone!
I'm about to get an project that is an Upgrade from 4.7 Enterprise to ECC 6.0 and got some doubts about how SAP Authorizations will behave in this situation.
Does anybody passed through it?
Anybody knows if there a standard application or something like this to "adjust" the 4.7 roles to work properly at new environment running ECC 6.0? Or they just work the way it is?
Perhaps the major issues that upgrade can bring...
I'm wondering that some auth objects and t_codes has changed even in the way they works and the way it interact with tables and others.
Can anybody help me? or perhaps a guide about this upgrade?
Best regards.Have a look at transaction SU25 and it's documentation.
Maybe you are looking for
-
I don't have an older version of Ibooks on my computer, can I use my friends, to restore the old book shelf version on my iPad? Will that work?
-
Interactive Form (Adobe)
Hi, In my WD component I have two views. In view1 I have an ADOBE form (Offline scenario) and a button to Navigate to View 2. In the ADOBE form everything is displaying properly, however the problem is when I click the button to navigate, the next vi
-
How can I send a PDF file to my iBooks?
I want to send or copy a PDF file from my acrobat.com cloud to my iBooks account so I can view it from my iPad. Thanks for anyone's help!
-
Package from AUR failed to install after doing many steps, how to rm?
How can I see what files have been left on my hard drive after a package failed to install. I can't pacman -Rsu the package because it didnt install, but now i got some other packages that i don't need then. and probably some other stuff while the pa
-
Premiere pro 2014 freezes when I try to "insert" clip into timeline
I just upgraded to 2014, 1 out of 4 times, when I try to insert a clip onto the timeline the program freezes and I have to force quit. I thought it might be some sort of conflict with the previous version premiere, so I uninstalled. Still happens. Ma