Save BI Workbook in a Role as a end user

Hi guys,
I have issue with quries in Bex analyzer I have created a role with S_USER_AGR = 2 but as a test user using this role I can't save the query to the workbook role, it gives me this error " RSOBJS 160 No authorization to create role entry". I ran the st01 and I don't find any RC =4 or 12 so I don't know what is the problem. Also my analysis authorzation works perfactelly fine I restricted company code and it gives me correct data.
Please advise
Thanks
Faisal

Saving workbooks require authorizations to modify role.
Most likely
S_USER_AGR
ACT_GROUP=ZROLENAME
ACTVT=02;
I recommend a standalone role with a special name for workbooks to be saved in, not use the same name prefix as the "normal" roles. This in order to restrict possibilities for the workbook designer to modify "normal" roles.
/fredrik
Edited by: freppe on Sep 29, 2009 10:51 AM

Similar Messages

How do you hide Excluded Roles from the End User (8.1) ?

We have 2 Buisness Roles: Employee and Contractor. They are excluded from each other, meaning if you have one of the roles, you cannot be assigned the other role.
When a user logs into 8.1 to the OOTB "Update My Roles" WF, they see their Available Roles for selection.
These available roles listing includes the excluded roles.
So when a user with the Contractor role logs in, they see the Employee role as an available role.
If the Contractor user tries to add the Employee role, they will get an error due to the role exclusion.
I know it is possible to hide the excluded roles from the end user, but don't know how.
Does anyone know how to hide the excluded roles from users?
Thanks.

Hi
I may have misread your first comment but I totally agree with your response.
If the user has capabilities over multiple organizations it will show all roles, whether exclusion or not. (Been confirmed that this is how it is designed to work)
What could be done is when selecting a user is a specific organization, you could have a rule that only shows up the Business roles that are associated with that organization. So although you have the capabilities over all organizations you only see the roles that are available to the organization where the user is your are updating.
An idea anyway
Ian

Save new workbook in menue role with VBA / ABAP

Hello,
does anybody know of a way to save a workbook which is not stored in SAP BW by then in a menue role folder through VBA or ABAP automatically?
I know that there is the SAPBEXsaveWorkbook function in VBA but that only works if the workbook already has an ID in BW. Maybe there is some workaround to assign name and ID beforehand? Where does the BEx get the ID if the workbook already has one? Is it stored in a temporary mapping table or something? I found that there are NO very hidden sheets as long as there are no queries embedded in the workbook, and I want to save a workbook WITHOUT queries.
Also, I know that there is the saveDialogWorkbook function, but as stated above the saving process should be automatically, i.e. a function like SAPBEXsaveWorkbook(name As String, role As String, node-id As String). By the way, where would I get the node-id for the nodes in the menue role?
Thank you for ANY hints!

Hi Peter,
thanks for your update! Saving in the "root folder" of a role might already be sufficient if we don't figure out how to save in folders.
I've done some research, too, and the strange thing is that the number at the end is obviously not the folder ID. When you choose "Open -> Workbooks", then copy a workbook entry using Ctrl+C and paste it in an editor, you get more information than what is displayed in the dialog even with technical names turned on. The pasted entry includes the role name and the number you referred to. And the thing is that even two workbooks in the same folder have different numbers! When you save a workbook using 0000000000 and then look at the number assigned in the way described above, it also has an ID different from 0000000000. It seems that every workbook has its own number. So to me it's still a mistery where the folder is specified.
Regards,
Jörg

When trying to save a workbook to a role, no role available

Hello. We have followed the directions of creating a role for saving workbooks from help.sap.com. When going into save the new workbook via Bex Analyzer the role that we created is not available to save a workbook. In fact, no roles show up.
We are using BW 3.1 with 3.3 content.
Any help will be appreciated.
Thanks,
Pete

Hi,
As I understand, the user saving the query will need to have the role assigned to his id. He/she can save the query in any of the roles in which his id is assigned.
It is likely that userid you are using doesn't have this role assigned (you can assign it in PFCG).
cheers,
Ajay

Role of an end user

hai
everyone
can any body tell me wht is the roll of the end user and what he will do as an enduser wht r the authorisations given to the end user
as i was told to train end user
thanks
theja

Hi Theja,
The other end user role could be of a payroll manager who would be responsible for the payroll process. For this, you will need to give them authorizations to PA03, PC00_MXX_CALC, Posting to Finance program, Drill Down reporting, Wage type reporter for reconciliation, Pre-DME and DME program etc.
You will need to provide them with manuals for releasing the payroll, running the payroll, releasing the payroll for correction, Posting process, Exiting Payroll, Creating DME file etc.
You may also include a spreadsheet with the commom errors during a payroll run like employee being locked, no bank details, no work schedule rule so that they can correct the error immediately.
Hope this helps.
-Akshay

Roles for Power & End User

Hi Guys,
I have two roles like Power User & End User, i would like to know what i need
to add in the "Menu" tab of the PFCG for each user.
Thanks a lot.

Karunakar -
Few things you have to keep in mind when you are giving access to the reports and queries.
S_RS_COMP only will not do.
have you assigned S_RS_COMP1 and S_RS_MPRO for info areas and multi/info providers.
and one more auth object S_RS_ICUBE for info cubes. you have to assign what ever the info cubes that you need to give access to the users.
Then only user will get full access.
precisely in order you can say,
S_RS_COMP
S_RS_COMP1
S_RS_ICUBE
and S_RS_MPRO.
These are main auth objects which are related to info cube, info area access and BEx access.
Hope this would give you clear pic.

How can I stop a user from saving over "standard" workbooks in a role?

Hello -
We are using BEx Analyzer 7.0.
I need help restricting our regular users so they can only save workbooks to their favorites and cannot override workbooks published to roles by our super users / authors.
My understanding is the regular users need the following in order to save workbooks to favorites.
S_GUI Activity = 60
S_BDS_DS Activities = 03 and 30 Class Type = OT
These users are able to save to their favorites.
However, if they open a workbook from a role and then just choose Save -> Workbook, it allows them to save their changed version of the workbook over the "standard" workbook that was published to the role for all users.
What can I do to only allow them to save to their favorites and not be able to override the standard workbooks in regular roles?
Our super user / authors have the following security to allow them to publish to roles.
S_USER_AGR with Activities = 01, 02 and 06 (Create, Change and Delete)
Our regular users have
S_USER_AGR but only with activities 03 and 08 (Display and Display Changes)
Any help that can be provided would be greatly appeciated. This is very frustrating.
Thank you -
Ann

Hello Anne,
Inspite of restricting the authorisation object S_BDS_DS you are not able to restrict the users in overwriting the workbooks, please implement the note 1167094 in your system.
Implementing this note with the help of yout BASIS team would surely fix your issue.
Let me know if this helps. Thanks.
Best Regds,
Suyog Chakot...

Workbook in role but not on user menu

Hi All
I have a workbook saved under a certain role menu. The workbook apeears fine under the role when using BEx.
However, the workbook has disappeared from the User-Menu in SAP-GUI.
I have tried to refresh the user menu, change and re-save the workbook in the role (via BEx and via PFCG), I checked report: RSWB_ROLES_REORG but nothing helped.
I searched for notes but nothing seemed relevant.
Any help?
Thanks,
Yaniv

Hi,
The issue because of MS 2007. it would not be compatible sometimes.
for that you have install the latest patch for the BEx and dotnet framework on your desktop.
it would be available in the service market place.
or
We have had several issues similar running SAP BW 7.0 with BEx 3.5 workbooks after upgrading to Excel 2007. There are several SAP Notes concerning various Excel 2007 related errors. Most of these seem to be bundled in the just-released SAP BEx 3.5 Add-On Patch 7 for SAPGUI 710, so my advice would be to download this patch if you have not done so already.
Regards,
Marasa.

Export / save many workbooks at once on local disk

Hello Experts,
we are working with BI 3.5 . My client wishes to save many workbooks of one role at once on his local disk.
He doesn't want to open every single workbook in the BExAnalyzer and save it on the local disk.
Is there a report or a transaction or something else to save many workbooks at once?
Thanks for your help.
Regards
Frederike

Hi,
There is no other way, you have to save it one by one manually.
Regards,
Kams

How to remove save, cancel option when end user runs the workbook in Portal

Hi,
how to remove save, cancel option when end user runs the workbook and make some small changes like using page items or increasing rows and columns
I already made 2 changes
1) I removed the option in Oracle Enterprise Manager under discoverer viewer of saving
2) I also removed the option of Allow saving changes made in Viewer when adding workbook to portal
But still the end user gets options of saving when made small changes to workbook like increasing rows and columns
Is their any place, I need to make changes?
Thanks in Advance
Rowdheer

Don't use JSP to serve a binary file. It almost implies the use of awful scriptlets and the invocation of both the response writer and the response outputstream which would only lead to IllegalStateException headaches in the server logs.
Use a Servlet instead. Specify the file name as request parameter and let the servlet read the file and write it to the outputstream of the response.

Show Roles to end user

Hi,
My mission is to show roles to the end user and to give him possibility to make a request for one of the roles.
However I want to show different roles for different users based on their organizational place.
And my problem is that I can not find the way to do this.
For example if I use getObjectNames from com.waveset.ui.FormUtil I get nothing for end-user and I get all of the roles for configurator.
Does anybody tried to implement this?
Thank You!

why not show the exact items allowed for the login user's role? then you don't have to display the role to a specific item.

Assign Access Manager roles to end users?

Hello,
I am looking for information on how to assign an AM role to an end-user that is provisioned from IDM 7 to AM 7.1 using the AM resource adapter.
We are modeling our IDM to AM provisioning based on this BigAdmin guide:
http://www.sun.com/bigadmin/features/articles/id_access_integration.pdf
However, in that document, it appears that the end user role is manually assigned to the user after provisioning to AM. We wish to do this role assignment in IDM, and have IDM push the assignment to AM (and by extension, the LDAP directory).
Is this possible when using the AM resource adapter?
Regards,
Dillon

Certainly.
My role definitions look like this in the RoleAttributes section (you can configure this through the GUI in Roles > [rolename] > Set Attribute Values)
<RoleAttribute name='RoleName:#ID#SunAccessManagerResource:roleMemberships'>
<AttributeName>roleMemberships</AttributeName>
<AttributeValueString>
<List>
<String>AMRoleName</String>
</List>
</AttributeValueString>
<Requirement>Authoritative merge with value, clear existing</Requirement>
<ResourceRef>
<ObjectRef type='Resource' id='#ID#SunAccessManagerResource' name='SunAccessManagerRealm'/>
</ResourceRef>
</RoleAttribute>
What this will do is set the nsRoleDN attribute (renamed as 'roleMemberships' by the adapter) in the assigned resource account for the user; the requirement field I've set to auth-merge-with-value, but you may want to play about with other settings.

Save Workbook in a role in SAP BI

Hi All,
I'm facing an issue in SAP BI 7.0 Security . I have created a Workbook role for a user which she is not able to view when she goes to RRMX>Save Workbook> . The user has all the required authorizations and she can see all the other workbook roles but there is just one role which she can't get in the list when she tries to save workbooks in it.
She can see the role otheriwse in the tab roles.
Any help is much appreciated.
Thanks and Regards
Manisha Nadir

Hi,
If you have no authorizations for update a role, you will not see it when trying to save a workbook(s_user_agr with activity 01,02,06 and the name of the role or * is needed). I made a special role for saving workbooks and also had the name of it in s_user_agr, you will find this when save the workbook in save workbook as and if there is already an other workbook in the role you will also see this in the option add a workbook to a role.
It is also possible that the workbook is called from history or favorites and if you then will save it you need a role as described before.
It is advisable to try this out with the trace on in st01. I noticed that depending of queries and workbooks saving, it uses s_rfc, s_cts_admi(tabl), s_rs_tools (themes for workbooks and webpublish is also an option) and the object in previous answers from this thread.
I noticed that if you start a query from roles, that only the roles with queries are shown, the same for workbooks.
Have fun
Bye
Jan van Roest

Impossible to "save as" a workbook in a role

Hello All,
I would like to know which authorization object allow an end user to save as a workbook into a role.
So far, our user only allowed to "save as" a workbook within their favourites folders, role folder is not display for them. I cannot find which authorization object is linked to this fonctionnality.
Thanks &
Regards
Catherine

Hi
Assigne these..
Saving workbooks in Roles:
S_USER_AGR= authorization for role check
S_USER_TCD=transaction in roles
Praveen.

Save workbook in a role

I have created a role "A" that permite save workbook. I have included the authorization objects:
S_BDS_DS
Activity *
Rolename *
Class type OT
S_USR_TCS
Transaction code: RRMX
S_GUI
Activity 60
S_USER_AGR
Activity *
Name of function *
But when I try save new workbook only role "A" appears. I´d like save workbook in another role... for example "B". It´s possible?
Regards
Daniel

Hi,
The roles are avialable to assign the workbooks or queries to it if and only if it has atleast a worrkbook/Query has been assigned to it already. So I hope, you role B does not has any workbook or query assigned to it. So by PFCG assign a junk workbook to it. And once you complete this assignment in PFCG then you can see Role B in the SAVE option.Once you comlete the saving required work book to it remove the junk workbook by PFCG.
With rgds,
Anil Kumar Sharma .P

Save BI Workbook in a Role as a end user

Similar Messages

Maybe you are looking for