SSO & BEx Authorizations in Explorer

Hi All,
We are trying to bring below two things into SAP BO Explorer,
1. SSO
2. BEx Analysis Authorizations
We are able to do both into SAP BO Explorer, but here issue was about Indexing
Eg :
If I do indexing from ID - User 2, I am getting only 1000 Plant data, this view will be correct for User 2, if I open same Explorer View from User 1, he supposed to see all data, but he is getting only 1000 Plant data ( same as user 2).
What I suspect was, there should be User Specific indexing needs to done in SAP BO Explorer?
Kindly correct me if my assumption was wrong, or please provide me is there any alternative solution.
Thanks & Regards,
Anil Akkala

If your source is a Universe unfortunately you will not be able to leverage the Analysis Authorizations dynamically during exploration. The reason is that for Universe source all the data is read during indexing time and an index created on the Explorer host. Exploration then is against the index independent of the source (BW). You can set-up personalization on the Explorer side to filter data for different users.
G.

Similar Messages

Webi Bypassing BEx Authorization Variable with SAP Exit

BEx query has Hierarchy Node Variable with Authorization as processing type. Its set as User Input ready
When the Webi report is refreshed, the LoVs appear as per the Authorization. However, if user doesn't select any value (pushes from right to left in variable screen) he gets NOT_AUTHORIZED error. Which is not intended, it should check the authorization in the background via SAP exit and populate the result. This is how it runs inBEx query.
However, in Webi it's giving NOT_AUTHORIZED error? This is how the product is designed to work or is it a bug.
I see several forum threads and SAP KBAs/notes but they are not answering my question. Could anyone please help.
I am ready to provide more details on this error.
Thanks,
Tilak

Hi,
this is how authorization variable would work in any of the clients and not just Web Intelligence.
You created an authorization variable which is configured as "read for input", so the user is getting prompted.
So In Web Intelligence the LoV shows up.
if the user does not select a value, then you are not sending a value, so you basically asking for all data and you are not allowed to see all data and therefore you are getting the message "no authorization".
if you are making authorization variables as ready for input then the user needs to select the proper values - regardless of the BI tool.
if you want the authorization to be check in the background then the authorization variable should be configured to not have ready for input.
regards
Ingo Hilgefort

OBIEE SSO with authorization

Hi Gurus,
1)I have instance configured the SSO with windows Active Directory and OBIEE.
2)I also have another instance ( without SSO configured) with external table authentication( user name and password verification) and authorization( groups , which populate the session variables for data filtering) .
Now my question is , i want a combination of Scenario 1 and Scenario 2. I want to have OBIEE SSO with Active directory
and external table groups.
The reason being , my groups are custom groups in external table, i do not want to maintain users in repository.
can you please give me pointers if the scenario is possible . Thanks in Advance
Thanks and Regards
Satya

Now my question is , i want a combination of Scenario 1 and Scenario 2. I want to have OBIEE SSO with Active directory and external table groups.I don't what your issue is? Just do SSO with AD and then load the groups in the GROUP init block via SQL. What is your actual issue?
In order to filter the data in reports you need to have the same group structure in Web Cat i guess ( correct me if i am wrong).Yes, although you don't need to use the same group names. Inm fact I prefer to have completely separate groups names, some for RPD security some for Web Catalog security. As long as the the groups exist in the proper location (RPD or Web Catalog) and they get assigned in the GROUP init block then OBIEE will be happy, they don't need to exist in both places.
2) Will not SSO populate the Remote_User variable rather than the USER variable by default.No, you have to tell OBIEE where to put the REMOTE_USER value. You can simply do SELECT ':USER' FROM DUAL or if you have your users defined in a table you can also authenticate that the user exists in this table SELECT ':USER' FROM USER_TABLE WHERE USER_ID = ':USER' which adds another layer of authentication to your SSO solution.

SSO - Spool Authorizations

Hello Experts,
We have an issue, we are going live with SSO, before SSO for Spool authorizations we gave some user id and for all contractors we gave VNDO* (as all contractor id's will start with VNDO) now with SSO all the id's will be changed to Numeric id, we cannot generalize contractor id's, is there any way in SAP to group the id's and assign that group in the S_SPO_ACT?
Thanks for your contribution.

It sounds as if your developers used the first characters of the user ID to populate the spool authorization field using a truncation of the user ID name.
This seems to have been done to EXCLUDE a set of users.
As users can use their own discretion and preference to set the Spool ID's authorization ID, you can consider keeping the authorizations as they are. Instead... change the programs to use a parameter ID which you set by default for employee type users --> change the code to use GET PARAMETER to set that fields instead of the truncation of sy-uname.
You should therefore also set the parameter ID for batch users (as those are likely to be creating the spools as well.
Depending on how granular you want to go, you could even hardcode the spool authorization field and authorize users for '__USER__' as well as their spools. For externaly give them SP02 tcode and no access to S_SPO_ACT (they can still see their own spools only).
If my guess at your design is correct, that should work and you do not need to redesign your roles. Spool authorizations in large organizations is a difficult thing to manage... The above approach has a reasonable chance of surviving if you only want to split a few groups of spools which none-the-less need to be shared by more than just the creator of the spool request.
Otherwise avoid spool. It is a pest.. :-)
Cheers,
Julius

BEx authorization issue with colon value

Hi All,
I have created few reports in 3.5 version on a cube. Two reports are having authorization object company and remaining don't have authorization object. If i do not give value colon( for company, authorization is failing for those reports do not have company. If i give colon value for company in authorization object, both reports with company and without company are working fine. If i do not specify any input value for the reports which are having company are giving all company values( but it should give no authorization message instead of displaying all companies). I'm using characteristic variable of type authorization and Ready for input. Can you please advise me how to fix this issue.
Cheers,
MKR

Hi MKR,
If you have custom authorization object and you have ticked it against a cube, then every query/report on that cube should have that authorization object.
Please chage the queries accordingly and check
hope this helps

BEX Error, Explorer.exe has caused a problem and needs to close

Whenever, i click on My Computer on my laptop it opens up fine , but after closing My Computer, i get the message "Windows Explorer has stopped working" and it asks me to try to fix the issue by searching online.
When i click on the details i get the below message :
Problem Event Name: BEX
Application Name: Explorer.EXE
Application Version: 6.1.7601.17567
Application Timestamp: 4d6727a7
Fault Module Name: bho.dll_unloaded
I am using Windows 7 Pro, SP1. I have scanned my computer using latest McAfee and it couldn't find any virus. Also, i tried booting from Win 7 DVD and tried doing a repair, but still the same issue.
This started 2 days back suddenly . I am able to browse and do other things, this issue occurs only when i click on My Computer from my Desktop or go to Start-->Computer, either of the two. Can anyone tell me how to fix this issue?
Pallab Chakraborty

From the link below:
http://answers.microsoft.com/en-us/windows/forum/windows_other-windows_programs/problem-event-name-bex-error-message/cf5baf73-0877-4070-abfb-a2c3a17a9e10
right click on my computer
go to properties
click on advanced system settings
under performance, click settings
click the Data Execution Prevention tab, and then click Turn on DEP for all programs and services except those I select.
click Add, browse to the executable file for the program and add it.
In your case you would add explorer.exe.
Steve W. MCSA,CCNA,MCP,A+,SEC+,CIW

Using Explorer with Calculated Key Figures from BEx (BW 7.31 / BI 4.1)

I'm looking for suggestions on how to leverage data from calculated and restricted key figures in BEx (from a BW 7.31 system) with Business Objects Explorer (from a BI 4.1 system). Our current process involves some complicated workarounds and with the implementation of BI 4.1 and I'm hoping to streamline things a bit.
Here is what I had in mind...
An information space (indexed daily) sitting on a universe (hopefully UNX) that referred to a BEx query on a multiprovider in BW. My understanding was that universes would be able to consume BEx queries (including their restricted and calculated key figures) in 4.1. Based on a recent post (http://scn.sap.com/thread/3417905), it appears that the feature that I was hoping for may have not made it into the GA release. Obviously, I could move the calculations and restrictions into BW ETL or maybe into the universe, but since that work has already been done and lives in the queries, I'm hoping to use them! Also, we could use a different tool such as WebI, but at this point the user base is comfortable with Explorer and we would like to continue to use it.
Suggestions?
Thanks!
-S

Hi McDowell,
Regarding to the BEx connection in Explorer, SAP provide two solution
1. BWA connection
2. Unv on top of connection
For the UNV situation, you could use the calculated / restricted key figure in the system but please assgin the aggregation level for them (Database delegate is not supported if I am not wrong)
Also plese consider two points
1. Data size (UNV cannot support large data size)
2. Scheduling (Explorer does not support event trigger? correct me if I am wrong)
Best regards
Alex yang

Warning message in my bex query designer

Hi all,
I am getting warning message while generate a query in bex analyzer. Can anyone let me know the procedure how to suppress those messages while running the query.
thanxs
haritha

Haritha,
In Bex select Business Explorer on the File Menu, select Settings and then select Suppress Warnings from Server. It will need to be done on each PC to remove the warning messages.
Regards
Gill

Users Authorization- Restrict value of one variable corresponding to other.

Dear Experts,
I have query regarding BEx Authorization for the given selection screen of any variable for any report :
I have two parameters/variables( Category and Sub Category) which needs to be passed from User. I want to restrict the value of second variable corresponding to the values passed in first variable. For e.g. : if i passed Category value -Engineering ,Sub Category variable should only show the value related to engineering only other than all the values in sub category field in the selection screen for the user.
Please suggest.

Hi Shikhar,
E.g. Category: Engineering , Arts , Commerce
Sub Categories for Engg. ECE, IT , CSE.
                               Arts : sociology philosophy etc
                               Commerce: economics, accountancy etc
Now Maintain authorization for Char. related to Engineering and create Auth. variable, follow this steps:
Transaction Code- RSECADMIN
Steps to create Authorization based on Division e.g. InfoObject    is 0DIVISION.
Check for 0DIVISION, it must be Authorization relevant checked, if not then maintain 0DIVISION and check Authorization relevant box.
Step 1: Create Analysis Authorization Maintenance using RSECADMIN T-Code, in that add 3 special characteristics i.e. 0TCAACTVT , 0TCAIPROV and 0TCAVALID, these are the mandatory Char. along with that add 0DIVISION for which you want to create Authorization, 0DIVISION details restrict value as 01 (EQ 01).
Step 2: Again goto RSECADMIN -> User tab-> Assignment, enter username (e.g. User1) which you want to restrict. insert Auth. obj. from step1.
Step 3: Now in Query designer, create Authorization variable for 0DIVISION, i.e. process type Authorization.
Execute That query with restricted user (e.g. User1) it will only show the data for Division = 01.
For reference: [http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/c0b7acf2-6121-2e10-5591-eaec182d9315]
Hope this will meet your requirement, let me know if further explanation required.
Regards:
Avinash

Crystal report for authorization

Hi Experts,
I have BW query which belongs to authorization relevant it is working fine so if i execute this query in crystal it is showing all the data and authorization variable is not working so if any worked on this issue and please pass your inputs on this issue.
Regards
RK

Hi RK,
Helpful Links: Handling Hierarchy Authorizations in SAP BEx BO Integration
Authorization variable set to "Ready for input" does not create a parameter
BEx Authorization Variable behavior in Webi & Crystal Reports
I am not working on authorization variable but myself i searched and provide some useful links.
Thanks,
DJ

SDK development for SAP BusinessObjects Explorer Accelerated version

Hi all,
in one of our project we need to use the engine of Explorer Accelerated an SDK application.
Is it possible or does exists sdk libraries for using only the search component of Explorer?
What we need is something that give to Explorer box our search request and give back to us a result that could be a table/webi report/xml file without using the webinterface itself of Explorer.
Thanks!
Andrea

From the header of this forum suspect you posted to an incorrect place:
Forum: Other SAP BusinessObjects Development
This forum is dedicated to all other development-related questions which
are not directly addressed by other forums. This includes Business Objects SDKs,
products, or technologies which do not fall under BusinessObjects Enterprise,
BusinessObjects Edge, Crystal Reports Server, or Crystal Reports (for example
Desktop Intelligence SDK, Universe Designer SDK, Portal Integration Kits, Java User
Function Libraries, and other third party technologies or development languages).
I believe the forum upi want is [Business Explorer (BEx)|SAP Business Explorer (SAP BEx);.
Please do not forget to close this thread.
- Ludek

Error application path: C: \ Windows \ explorer.exe

Signature problem
Problem Event Name: BEX
Application Name: Explorer.EXE
Application Version: 6.1.7601.17567
Application Timestamp: 4d6727a7
Name faulty module: StackHash_0a9e
Fault module version: 0.0.0.0
Faulty module timestamp: 00000000
Away exception 02ce0fef
Exception code: C0000005
Exception data: 00000008
OS Version: 6.1.7601.2.1.0.256.1
Locale ID: 1048
Additional Information 1: 0a9e
Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
Additional Information 3: 0a9e
Additional Information 4: 0a9e372d3b4ad19135b953a78882e789
What can I do in this case?

I reinstalled windows
7 ultimate 64 bit and I'll
see if I do so, for it gives me
this error!
I'll check
now before which applications create
conflicts!
Thank you for support!

PIE CHART IN BEx ANALYSER

Hello Guys,
Could you please tell me how to display the BEx Analyser graph in Pie.
I have created a query and when run it....its displaying data.
then when i select display as option to graph....its displaying the bar format.
I can find any option to change the format of the graph to pie chart.
please help.
thanks,
pratap

hi..
create a query in Bex. And then publish the query from Bex-Analyzser (Business Explorer -> Tools -> Launch in WebBrowser).
you will get the report in Web . Then go to "Graphical display" and select the 'pie chart' .
hope this helps...

Business Explorer code

Hi Guys,
Is there any way that we can control BEx (SAP Business Explorer) VBA Code... ? I am able to login to business Explorer with BWLogon() code and i am able to refresh query using "Run "SAPBEX.XLA!SAPBEXrefresh", False, myRange". but as soon as this code executed i am getting a form where i need to give some input like Period number, Fisical Year number or Employee number like that and then i have to click on Execute (Manually). what i am looking is , is there any VBA code through which i can do click on Execute button in the form or entering values in to required fields of the form ... ?
please do let me know ... as soon as possible.
thanks in advance,
sukumarchalla

Hi Shakaran,
What version of GUI r u using?
use GUI 710 - it will solve your problem.
ask your basis guy to install the patch or reinstall the GUI 710 on your system so that you will get the BEX options.
Regards
KP

Bpf with report bex with variable BPC Embedded 10.1

Hi BPC Friends
I am creating a BPF with BPC 10.1 Unified.
I have attached at this BPF a BPC report based on a Bex Query with a variable for the company code.
The driving dimension of the BPF is the company code so I have selected some company codes.
I have created the BPF Istance and I have assigned at the different company codes the proper users as performers.
The problem is this:
The user run the bpf istance for its company but the report having the variable for the company code allow to the user to select also a different company code.
I was expecting that the variable for the company code was locked for the company code assigned to the user
Thanks
Michele

Hi Michele
In the above scenario, from what I was able to understand, you have defined a BPF, the activity within the BPF opens a workbook, the workbook is using a BEx query that has already been defined. The BEx query has a variable which prompts the user for values for company code.
The authorization variable will populate the BEx company code variable with the values that the user has been allowed to see.
For example: If the user has a BW analysis authorization that only allows them to see company code 1000, 1003. When the user executes the report in Analysis For Office, the prompt in the workbook should only display the values 1000 and 1003. (Meaning that the user only has access to 1000,1003 to choose from)
I don't understand where the performer is a prompt?.
The data access profile is typically used to restrict access to the data (restrict what you can see in your report). The BEx authorization variable will not be driven by the Data Access Profile, this will be driven by the BW Analysis Authorization. (I say this under possible correction)
Do you want the prompt in the workbook to display the performer of the BPF activity ? If so, I don't understand the requirement or why you would want to achieve this.
Please could you provide more context,
Hope this helps,
Kind Regards
Daniel

SSO & BEx Authorizations in Explorer

Similar Messages

Maybe you are looking for