Standard Display Roles For Queries in BW

Dear All,
Could you Please share the Standard Display Roles For Queries in BW.
Thanks
Regards,
Sai

Hi Sai,
You can find query specific roles in metadata repository.
Also try this table in
SE16. AGR_OBJ
Other useful tables might be:
AGR_DEFINE -      Role definition
AGR_USERS -      Assignment of roles to users
AGR_HIERT           Role menu texts
AGR_AGRS           Roles in Composite Roles
If you need to find user specific roles, check Tcode SUIM.
Hope this helps.
Thanks

Similar Messages

"standard" SAP roles for Sales and Operations Planning (SAP SOP)

Hallo,
I´d like to ask SOP specialists, if there are any "standard" SAP roles, which could be created when SOP is implemented into the SAP system.
If not, could you please send me advice, what is (are) the general role(s) for SOP (which SOP transactions and roles)?
Thank you for your effort,
Martin

-->
If you dont have the role --> open OSS
if you dont find it because there are so many:
Good luck :-)

Display role for all transactions

Hi,
We want to create a role with all transactions, but display only. (Same as SAP_ALL with display access only)
I have read previously posted messages in this forum, but didn't find the solution.
The SAP_ALL_DISPLAY role was available prior to 4.7. But we want to create role on WAS 6.4 onwards.
Does anyone has solution for this?
Regards,
Prasad
Message was edited by:
Prasad Musale

> Hi Alex,
>
> >>I fail to see a valid situation where users that
> need to process transactions in production >>should
> have access to execute every transaction, even if in
> display mode.
>
> We have the development system. We are separating the
> responsibility based on business functions such as
> FI, MM etc. it may possible that FI consultant may
> require a display access to transaction from MM. In
> this case MM consultant will have MM roles only, but
> will have the display all role. So that he can
> perform his functions smoothly.
>
>
> The solution you gave is working, but it does not
> serve the purpose.
> Any other solution?
>
>
> Thanks,
> Prasad
Hi Prasad,
My response was to Rajeswari's question rather than your situation which I appreciate is different to the one he was talking about.
Creating a display role based on SAP_ALL with all activities set to display mode takes around 2 hours, it sounds like it would be worth your while creating it from scratch, though I appreciate that it is a tedious task!
By using a display role in this manner you will still have the potential for access to functions that are controlled by shared objects, however the risk is reduced unless you give them access to debug & replace.

Standard authorization role for CRM implementation team member

Hello,
We are starting SAP CRM implementation project (7.0) and I would like to avoid giving sap_all authorizations to functional consultants in development environment. Unfortunetly I can't find standard customizer profiles like the ones in ERP system exists.
So the objective is to have quite broad role or profile with no restrictions in customization and functional area. However it's important not to have Basis authorizations in this role/profile. Hope that someone can give me a hint in this direction.
Thnak you,
Jahoo

Hi,
as soon as the implementation team member should also do developments my experience is that without SAP_ALL you will have much trouble. Therefore in our dev-system each consultant will have SAP_ALL authorization. Of course only in the DEV-System.
Kind regards
Manfred

Roles for Contact Person in MM-SUS Scenario

Hi !
When we create a contact person using the Create user option in SUS, we assign the roles to the contact person. These roles are basically the standard SAP roles for SUS. We have created Z-roles ( a copy of the standard roles) to restrict cetain txns for users and would like to assign these Z-roles to the contact person . How can we ensure that the Z-roles are displayed instead of the standard roles ?
Regards

Hi
Please go through these complete SUS-MM Configuartion detail links, which will definitely help ->
Roles:
SAP deliver standard roles with authorisations, if You want to maintain your own go to transaction PFCG.
There are two type of role:
- single role
- composite role - (one or more single roles)
To roles You can assign transaction codes, reports, URL links, etc. SAP System automatically creates the authorisations that you can set on Authorisations tab page.
Authorisation:
Authorization profiles must be generated before you can assign them to users. An authorization is generated for each authorization level in the browser view, and an authorization profile for the whole role as represented in the browser view.
Re: Clarifications on EBP-SUS and MM-SUS Scenario
Re: Cancellation from SUS hangs in XI interface
Re: Vendor Replication in SUS scenario
Re: SUS-MM for service items
Re: Central Person already exists
SUS and Central User Admin
Re: User roles.
Please look at following links for Roles and Authorizations 
Links for user roles:
http://help.sap.com/saphelp_nw2004s/helpdata/en/52/6714b6439b11d1896f0000e8322d00/content.htm
http://help.sap.com/saphelp_nw2004s/helpdata/en/42/271d24d86211d2961a0000e82de14a/content.htm
http://help.sap.com/saphelp_nw2004s/helpdata/en/e4/15e48efd6c11d296430000e82de14a/frameset.htm
http://help.sap.com/saphelp_erp2005vp/helpdata/en/d3/559a4271c80a31e10000000a1550b0/frameset.htm
http://help.sap.com/saphelp_erp2005vp/helpdata/en/4e/52b74065448431e10000000a1550b0/frameset.htm
For profiles and authorisations:
http://help.sap.com/saphelp_nw2004s/helpdata/en/52/67151e439b11d1896f0000e8322d00/frameset.htm
http://help.sap.com/saphelp_erp2005vp/helpdata/en/20/efcbfed8a511d397110000e82de14a/frameset.htm
Regards
- Atul

Roles for MSS Reports

We are having some authorization issues with MSS reports. When we try to display the report from MSS , It says no authorization for transaction (name). When we give SAP_ALL to the manager at the backend, it works fine from MSS side. Please suggest if we are missing some thing. What are the standard MSS roles for the reports.
Thanks

Hi,
The MSS reports must have some Program name, say REPORTX or it may be called by some transaction.
Add the report name to the auth object P_ABAP for the MSS role or add the transaction name to the authorisation object S_TCODE and P_TCODE.
Either way, the problem will be resolved.
Or you can remove the SAP_ALL from the manager profile; Login with the userid of the manager. Try to run anyone of the reports and then after it throws the missing authorisation error, type in /nsu53 in the transaction bar and trace the missing authorisation. Accordingly add the same to the managers role.
Thanks and Regards,
Pinki

Standard AC Roles in SAP GRC AC 5.3

Hello,
Can anyone list the STANDARD AC ROLES in SAP GRC AC 5.3 Suite for
1- RAR,
2- SPM,
3- CUP,
4- RT,
5- ERM,
6- GRC PC 2.5
7- GTS,
8- GRC Repository.
I know that the Standard AC Roles that are delivered for CUP are
1- AEADMIN,
2- AESecurity &
3-AEApprover.
Each role comes with different actions in them.
I need similar type of standard AC roles for the above listed modules.
Thanks!!!

Hello Varun,
Below are answers to your statements.
1- There are no portal roles for AC5.3 as such. There is portal role for RM which you have already found.
**ANSWER 1: *There are portal roles for AC 5.3. Kindly see the link http://help.sap.com/saphelp_grcpc30/helpdata/en/27/c67fe32e684e4c85125645dc5918ee/frameset.htm.***
*The role I found in from the above link.*
2- To access AC5.3 applications from portal you would have to create IViews etc.
ANSWER 2 Since SAP provides the predelivered roles, as seen in HELP.SAP.COM in above link, we need not create iViews. The custom IViews are required for custom roles, not the standard roles**
Thanks!!!
Edited by: abdul haleem on Jul 21, 2009 9:44 AM

SAP role for view only

Hi,
I have a request to create a View only role for a person to access ECC6 system.
Can anyone advise how this can be done?
Thanks all.

Hi,
Try to put together "display" roles for the different applications you are using. I think that is part of the problem - since everyone uses different apps there is no one "display all" role.
You could copy SAP_ALL & SAP_NEW and go through the ACTVT fields, but it's a long-winded process.
Regards,
Vinod.

How to create authorization role for just displaying query prefix Q and X.

Hi Expert,
I hope someone can help me on how to create authorization role for just displaying and executing BEX Queries prefix Q and X. I'm currently using SAP BI 7.1.
Actually, I already created one role called : Z_FORINDO_ONLYDISPLAY_QX
where I only put in the Authorization Component (in the Role Maintenance - Tcode 'pfcg'):
-->Manually Business Information Warehouse
--> Manually Business Explorer - Components
Activity : Display, Execute, Enter, Include, Assign
InfoArea : *
InfoCube : *
Name(ID) of a reporting component : *
Type of a reporting component : Calculated key figure, Restricted key figure, Template structure
--> Manually Business Explorer - Components
Activity : Display, Execute
InfoArea : *
InfoCube : *
Name(ID) of a reporting component : Q* , X*
Type of a reporting component : Query
But, the problem is I still can make changes on that queries (Q* and X*). Even, I still can run query with prefix Z. I use S_RS_RREPU Tamplete for Query Display and execution.
Please assist. Very much appreciate your help. Thanks.
Edited by: nadiyah salleh on Mar 18, 2008 11:22 AM

Question close. This issue has been resolved.

Role for display Authorizations

Hi All,
We need to know if thre are any standard Roles available by which i can have all Display authorizations in Production system.
Currently we have many Custom roles and this thisng is really messed up in our organization. So i have suggested to Standardized the role related issues and starting with MM, i would like to know if in production we can have access with all Disply rights for all relevant authorizations along with SPRO display. Can anyone suggest something on this?
Also if we need to create some "Z" or "Y" role; please suggest how we can achieve it.
thanks a lot in advance!
Prashant

Hi Prashanth,
First identify all the transactions which you want to have to give display authorization.
Go to PFCG--> Enter All transactions which everyou want to give authorization for display.
Save.
Go to Authorization tab check for objects vreated for relevant transactions and provide display as activity in those objects.
With Regards,
Vijaykumar P

List of all objects authorized for standard abap role

Hi all,
Can any body help me to get " List of all objects authorized for standard abap role "
And List of all objects authorized for "admin role".
Thanks
Basu

See the database security guide http://docs.oracle.com/cd/B28359_01/network.111/b28531/authorization.htm#BABFHBFH
Finding Information About User Privileges and Roles
This section discusses the system views that have the grant information.
The tricky part of this is that because roles can be granted to other roles the data is hierarchical.
So start with the grants made to the FDIREADR role. So referring to the doc above;
select * from role_role_privs where role = 'FDIREADR'will list the roles granted to your role.
You will want to look at ROLE_ROLE_PRIVS, ROLE_TAB_PRIVS and ROLE_SYS_PRIVS.
I suggest you walk thru the views manually to see how the information is related. Then write a test script that queries the views for you.

Roles for only display authorizations

Hi Experts,
Can any one suggest me how to creat the role only for display authorizations for basis.
Is any standard role like this? if it is please let me know.
Thanks & Regards.
Reddy V

n k wrote:>
> Hi,
>
> just give the tcodes required with the display activity, that is 03.
I consider that to be dangerous advice because it assumes that activities are checked in all transactions.

Need procedure for creation of BW Roles, Assigning Queries,Publishing Roles

Hi Experts,
Could you please let me know the procedure for creation of BW Roles, Assigning Queries,Publishing Roles in Business Explorer (BEx - BW 3.5)
Thanks in advance,
Andy

Hi,
Creating BW Roles
http://help.sap.com/saphelp_nw04/helpdata/en/52/6714b6439b11d1896f0000e8322d00/frameset.htm
Assigning Queries
After creating the query, save the query to a role from the query designer.
Publishing Roles in Business Explorer
https://websmp101.sap-ag.de/~sapdownload/011000358700002894802003E/HowToBIPortal1.pdf
Hope this helps you..!
-Pradnya

Best practice for standard security role

Hi, I'd like to know which is the best practice for standard role use, some people tell me that a standard role should never be used, that a copy must be made and assign the users to the copy, but then, why should SAP bother creating the standard role?

They are provided as a template for you, and you can copy them into a different namespace and make changes there before generating the profiles and authorizations.
Why you should use a copy of them is because SAP will also update them sometimes. If transactions change in the standard menues with SP's and upgrades, then you will find them in transaction SU25.
If you do a search on "standard AND roles" in the SDN then you will also find more detailed infos and opinions on the use of them.
Cheers,
Julius

Standard roles for entering master data in SAP system

Hi Experts!
We are deploying an SAP solution based on PS module, but supported by other modules like FI-CO-MM. We need some help on finding which standard SAP roles/profiles will allow us to create the following entities in the system:
- Controlling Area
- Company Code
- Business Area
- Plant
- Location
- Profit Center
- Controlling order
- Cost Element
- G/L Account
- Currency
- Materials
- Purchasing Organization
- Material Group
- Vendor
- Purchasing Group
- Outline agreement / position
- Storage Location
- Creating new characteristics in the clasification system (Tx CT04)
- Work Center
- Responsible names (for PS responsibles)
Thank you in advance.
Best regards,
Neil

Please go though this link. Which provides role for all PS txn . click on left side and choose roles based on your requirement.
http://help.sap.com/erp2005_ehp_04/helpdata/EN/90/7c8838ba4bed0fe10000009b38f8cf/frameset.htm
Regards
Nitin

Standard Display Roles For Queries in BW

Similar Messages

Maybe you are looking for