TCT* Info objects and Authorization objects

When defining an authorisation object do I need to include TCT* info objects as fields in the authorisation object and if so why and which ones are required - if this is different for different scenario could someone elaborate? Thanks

Hi,
yes... you need to include the TCT fields as you would like to restrict the users based on the infoproviders and the time duration.
Since in any organozation you have many type of users like the super users who can access anything...end users who have access to areas related to them only and may be some other kind as well.
Suppose if a user is beloging to FICO department and he is only suppose to use the reports based on GL cubes then you will create an authorization object where you will give the values for authorization relavent objects like company codes,sales org and additionally you will maintain the value for the cube in 0TCAIPROV field.
when you assign the user to this object he will only see the data in the queries based on the FICO cube and that too for the company codes specified in the authorization object.
Now if there is another user who can see the data for all the company codes and all the areas but only for certain duration then you will create a new authorization object where you will not give any values for any object but will keep it as * but will maintain 0TCAVALID objects and give the validity period here.
Thanks
Ajeet

Similar Messages

Restricting Authorization for a specific Info-object

Dear All,
I have a scenario where I have to restrict the account managers by specific channels.
I have 2 info-objects, Sold-to party and Sales Channel. Sales Channel is defined as attribute of the the Sold-To Part info-object.
I was exploring the BI authorizations concept in SCM 2007.
I created a authorization called "Test" and assigned the info-object Sales Channel in the authorization and restricted it for one value. This authorization along with 0BI_ALL I have added to the role under BI authorizations.
However in interactive demand planning, I cannot restrict by the sales channel. It allows me to load data for all the channels.
If I remove 0BI_ALL object, then I cannot load anything in interactive planning.
Does anyone have a step by step proceedure for using the BI authorization concept?
Regards,
Kedar

Yes, 0TCAACTVT (activity), 0TCAIPROV (InfoProvider) and 0TCAVALID (validity) have to be made authorization relevant. For the info objects you want to use to control security, also make them authorization relevant in RSD1, imagine the object you want relevant is ZZ_VKORG (sales organization).
Then use RSCEADMIN transcation and 0BI_ALL will include the objects from above, copy 0BI_ALL into a object such as Z_1000 and then change the value for the specific info object that you want to control, imagine that you want sales org 1000 only to be allowed within Z_1000.
Now, you have 2 choices: You can use the normal security maintenance (SU01, PFCG) and you can asssign RSRS_AUTHBIAUTH and set BIAUTH requal to Z_1000 or you can use user maintenance directly within RSCEDAMIN and assign Z_1000 to the user. Either way, it becomes part of the authorization of the user.
You may find that you need to introduce colon authorization concept ( for mixed levels of data and that is just a matter of adding a second line to the allowable values and setting it like "EQ :".
Things to consider:
1. This authorization concept is water tight and will do everything you need, but will do at the expense that if you don't model it first, you will kill yourself trying to make it right. This becomes evident when you trace a security issue (via RSCEADMIN) because the way BI7.0 works is that it will build a minimized superset of authorizations, so it is best to know where you want to get to, rather than starting off by where you know you need to go.
2. To control change or display mode, you will need to influence 0TCAACTVT, even though you might think to use C_APO_SEL3 for ACTVT, the BI7.0 concept works within the BI space and 0TCAACTVT doesn't impact it.
3. If you activate more info objects, 0BI_ALL will get updated automatically but your custom authorization objecst will not. So, it is best to activate them all at the same time so that you don't have to manually change them.
4. Do the work in development and transport it to the TEST/QA/PROD environments, there are transprt tools within the RSCEADMIN.
This is probably enough to get you going, reply back if you have specific questions or issues.
I've been thru this in a painful way, sometimes the best things learned are learned the hard way

Authorization with standard info objects

Hi Guys,
I want a small clarification.
Is it true that Authorization cannot be done for the Standard Infobject, we need to create reference objecs to the standard objects, and the master data of the standard object would be passed to the reference object
When i went to the standard object, this option is actually available for them too.
Thanks..
Regards,
Charu

Making Authorization relevant to the Standard Info-objects are not recommendable.
Make these standard info-objects as references and create info-objects with Z or Y.
you could see the bussiness explorer tab in the info object properties. There is one option called Authorization relevant.
you should enable the authorization relevant tab. Once it done then it will reflect while creating authorization object.
Hope this would help you in understanding.

Loss Authorization after changing info object

Hi
tHIS is authorization issue
I have DP Planning book and in this planning book I have used Zinfoobject .
This is working fine since go live . Recently I have added new atribute in this zinfoobject .
After that user is not accessible to DP pLANNING Area.
SAYS THAT 'NO Authorization.
Can anybody suggest me

Hi,
Is this Info Object is Std. one?
I assume this info object is created by manually.If you want to change the data type of info object then you need to delete master data of this info object.After that you can change the data type of info object.
But this is the vrey risky steps,so i would suggest try it ones in dev. or sand box server,then go further.
Regards
Sujay

Authorization for info object

hi friends,
i have doubt in authorization. i created authorization object in rrsm, i created roles in pfcg and i need to enter my info object for this authorization, but i am unable to fing my info object in pfcg . how can i get this one. and when i want save my report in roles, can i create roles first and save that report in that role. ple give me clarification
Thanking u
suneel.

so,
i went pfcg , i created some role, some name like zrole, but i didnt find that role name when i was saving my querry in rrmx screen.
in pfcg i need create just role name or can i do any other thing.
today i was trying to create authorization for my one info object, i am not getting my output.
su ppose i have on einfo object M1_ODS , how can i give authorizations.
first businees explorer give authorization relevent
next RRSM create object and can i select radio button for object or cube. and move ur info object
in PFCG create rols and go to authorizations and give manually ur authorization object in (chnage authorization data) and i need create user and assign this user to my role. when i have seen with new use i am getting all bw liek normal when i open bw screen, i didnt find my only object in the new user.
in PFCG menu tab is red that is no problem .
Thanking u
suneel.

Ask fo support Authorization Compounding Info Object BW 3.5

Hi to everyone, I hope somebody can support me >;-)
I got a question concerning an authorization on a compounding Info Object within BW 3.5
I would like to give authorization on the compounding Info Object 0COSTCENTER. The Info Object 0COSTCENTER is compounded, as usual, to Info Objekt 0CO_AREA.
I already created the necessary authorization objects for 0COSTCENTER and for 0CO_AREA I even tried to create an authorization object which contains both info objects for testing and tried every possible combination.
In RSA1 both Info Objects are marked as authorization relevant and within the RSSM both authorization objects are marked relevant for the particualr Info Provider. In the pfcg I restrict corresponding role to particular Cost Center and generate the profile.
But executing the query I always got the authorization problem that the query do not have the authorization to read the authorization object for 0COSTCENTER.
Please be aware of the fact that the problem is within BW 3.5
Thank you very much for your support in advance
Best regards
Michael Wecker
Edited by: Michael Wecker on Jul 8, 2010 6:09 PM

Reddy,
Please refer to the following notes. Hope it helps.
1125108 You are using the obsolete 3.x authorizations in BI
1081453 Error in old RSSM log in BI 7.0
1079186 Error when you filter by characteristic values
1064273 Problems when you process the variable screen again
957219 Refresh query with hierarchy and variable date
953402 Variables are displayed when you refresh all querie
899572 Trace tool: Analyzing BEx, OLAP and planning proces
790323 The log for reporting authorizations in BW
177875 Authorizations for analyzing OLAP problems
/thread/196115 [original link is broken]
BW Explorer: BRAIN 632 error message when calling a query

Goods receipt number and purchase invoice nubember info objects

hi experts
i have the requirement to build the report with the info objects of goods receipt number(document) , purchase invoice numbers and purchase document numbers from standard cubes or ods.i have checked in inventory management and purchasing cubes&ods i am not success got the purchase document number it is from ods (0PUR_O02) the InfoObject is 0OI_EBELN(purchasing document number),like this i want InfoObject for Goods receipt number and purchase invoices from where can i get these fields.
if u need any more information i will provide.
thanks and regards
Sreenivas.

Hi Ahamed,
thanks for your reply,do u have any information about purchase invoice number.
i need one more help from you, how to find out Debtors turnover ratio from Acceount Receivables(AR) (or)G/L (General ledger account).is there any standard queries from Business content,i was checked and i was failed,if you have any solution for this please let me know.
thanks and regards
Sreenivas.

How to know corresponding info object for R/3 field and viceversa

Hi....
How to know corresponding object for a filed in r/3 data source and viceversa..While defining transformations.
We can't do mapping of all objects to fields with the definition......!!!
In 'rsosfieldmap'' what information we should give to know the proper tranformation...?
thank u.....

Hi,
There are two ways to know the corresponding info objects in R/3 fields:
1) goto se11 t-code, enter RSOSFIELDMAP and enter display button. in the next screen click contents and give the field name or info object name as per your requirement, and excute.
2) first go through the field description in r/3 and identify the similar description in BI. For your easy understanding use excel sheet , in that you can copy the data source fields and target info objects ( master data or transaction data ). then it will be easy to identify the similar description.
Thank you.

Logical and physical info objects

hi,
whats mean by logical info objects and physical info objects?
whats their difference?
in what way they r helping SAP HR?
regards,
vijay

Hi Vijay,
The logical info object (LOIO) represents all info objects that have the same topic. However, it does not have any attributes such as language, format, file size, etc.
The physical info objects (PHIO) belonging to a logical info object are the info objects that represent the contents, language and format versions of the topic.
Check out this link for more help:
http://help.sap.com/saphelp_sm32/helpdata/en/14/0ea434e63611d19a590000e8a4b41d/content.htm
Hope this helps,
Reward points appreciated,
Thank You,

Infocubes and info objects

Hi guys,
i'm new to BI. can any one differentiate between Infocubes and info objects..
please be a bit specific.....

Hi,
An InfoCube describes (from an analysis point of view) a self-contained dataset, for example, for a business-orientated area. You analyze this dataset in a BEx query.
An InfoCube is a set of relational tables arranged according to the star schema: A large fact table in the middle surrounded by several dimension tables.
Use
InfoCubes are filled with data from one or more InfoSources or other InfoProviders. They are available as InfoProviders for analysis and reporting purposes.
Structure
The data is stored physically in an InfoCube. It consists of a number of InfoObjects that are filled with data from staging. It has the structure of a star schema.
The real-time characteristic can be assigned to an InfoCube. Real-time InfoCubes are used differently to standard InfoCubes.
ODS versus Info-cubes in a typical project scenario
ODS
why we use ods?
why is psa & ods nessasary
InfoObject: Basic building block of BW.. ( Its like a field )
Definition
Business evaluation objects are known in BI as InfoObjects. They are divide into characteristics (for example, customers), key figures (for example, revenue), units (for example, currency, amount unit), time characteristics (for example, fiscal year) and technical characteristics (for example, request number).
Use
InfoObjects are the smallest units of BI. Using InfoObjects, information is mapped in a structured form. This is required for constructing InfoProviders.
InfoObjects with attributes or texts can themselves also be InfoProviders (if in a query).
Regards,
Ram.

Accomodating date and time in a single Info object

Hi Gurus,
We are getting an R/3 field(2 fields) as "YYYY.MM.DD HH:MM:SS". And we have mapped that fields to a Two IO (CHAR).Data is getting loaded fine,but not getting it in the same format (with required DOTS and COLONS).Is there any routine that I can write for this IO.If any one have it ,please pass it on.
The two info objects are : ZCREATE & CHANGEDAT are mapped to "created_at" & "changed_at".
Please tell me step by step code.
Points wil be assured.
No idea on how to write a routine .
Urs,
Rakesh.

Hi
i am getting an error after doing that.
E:Field "COMM_STRUCTURE-/BIC/ZCREATE" is unknown. It is neither in one of the specified tables nor defined by a "DATA" statement.
Below is my Code.
$$ begin of global - insert your declaration only below this line -
TABLES: ...
DATA: ...
data l_ZCREATE LIKE COMM_STRUCTURE-/BIC/ZCREATE.
data l_ZCREATE1 LIKE COMM_STRUCTURE-/BIC/ZCREATE.
data : l_year(4) type c,
l_mon(2) type c,
l_day(2) type c,
l_hh(2) type c,
l_mm(2) type c,
l_ss(2) type c.
$$ end of global - insert your declaration only before this line
$$ begin of routine - insert your code only below this line -
IF NOT COMM_STRUCTURE-/BIC/ZCREATE IS INITIAL.
l_/bic/ZCREATE = COMM_STRUCTURE-/BIC/ZCREATE.
l_year = l_ZCREATE+0(4).
l_mon = l_ZCREATE+4(2).
l_day = l_ZCREATE+6(2).
l_hh = l_ZCREATE+8(2).
l_mm = l_ZCREATE+10(2).
l_ss = l_ZCREATE+12(2).
concatenate l_year '.' l_mon '.' l_day ' ' l_hh ':' l_mm ':' l_ss
into l_ZCREATE1.
RESULT = l_ZCREATE1.
ELSE.
RESULT = COMM_STRUCTURE-/BIC/ZCREATE.
ENDIF.
RETURNCODE = 0.
Please Correct me where its wrong.
Urs,
Rakesh.
null

Can we add an info object and its nav. attr in an aggregate together?

Hello
I am getting an error when I try to add 0MATERIAL and 0MATERIAL_OPROD_HIER in an aggregate at the same time. In the cube, both 0MATERIAL and its attr 0MATERIAL_0PROD_HIER sit in the same dimension. Therefore, when I try to create an aggregate and drag these chars in, they try to come into the same dimension here also.
1st scenario:
1. I add 0MATERIAL in the aggregate.
2. I try to add 0MATERIAL_0PROD_HIER in the aggreate, I get an error message ' Aggregation levels cannot be defined for 0MATERIAL_0PROD_HIER.
3. And it does not let me add this nav attr at all.
2nd scenario:
1. I first add 0MATERIAL_0PROD_HIER in the aggregate.
2. I try to add 0MATERIAL now.. I get the same error as above for 0MATERIAL this time.
3. But it lets me add 0MATERIAL inside.
4. Now, when I go its context menu (right click) and select aggregation as 'All Char Values' for 0MATERIAL, then the error goes away.
5. But after I activate and fill the aggregate, I have a look it again.. and now I only see 0MATERIAL and its nav attr which I added first has disappeared.
Why do the above 2 happen? And if I have an info object and its nav attr in ROWS in a query, and if I am not able to add both of them to the aggregate.. how can I improve the performance of the query?
Please advise.

Hi Srinivas
In your scenario, it is sufficient if you just add 0Material when you are creating the aggregate. Need not add the nvaigational attribute in the aggregate definition. The procedure you followed the first time is right i.e. Drag and drop 0material first.
The system does not allow you to add the nav attribute because it is not required. I say this because a navigational attribute added to your infoprovider is like (in terms of SQL) joining your infoprovider with your material master table. Navigational attribute's value is not physically stored in your cube. It is brought in during execution time in both list cube as well as in your query output.
Similarly when you execute your query with 0material as your aggregate, even if you add a filter or variable restriction on 0Material_prodHier your query WILL use the aggregate since 0material is referenced.
You can even check this in RSRT. Give your query name, and generate report first. Then click on Execute + Debug, Choose Display SQL/BIA Query and enter your selection and choose enter. You will see the SQL of your query and in the SQL select statement you will see that your aggregate table is chosen instead of your infocube. This aggregate table only will be read during your query execution in Bex as well.
I hope this helps.
Thanks.

Text data source and Info object?

Hi I have created Texts data source in R/3 and our onsite folks have asked me to create relavant info objects in BW as well.I need to validate against the data source created in R/ 3for use short med or long text all should support mulilang.Can any body please explain how can I proceed with this ?
Points will be definitley assigned.
Thanks,
Hari.

It is the other way. Once u tick in the master data tab -what kind of text u want-short,long,medium-then that will appear in your transformation.And u can map any char field from ur data source for these based on the length.
So u can check the datasource definition in rsa2 and determine the length of text field in which ur text data will data.
Based on that select in teh info object, then u will get that to map in transformation.
Hope it helps
Regards,
Rathy

ADDING TWO FIELDS TO MASTERDATA 0MAT_PLANT AND MAKE THEM AS INFO-OBJECTS.

Hi Bw Experts,
I have a Problem , I.e. How to add Two filelds i.e. reorderpoint and maximum stock level in Standard data source 0MAT_PLANT_ATTR for Master data 0MAT_PLANT.
If Extract structure doesnt contain these fields then I Can go for Data source enchancement. Its ok.
But this Extract structure(BIW_MARC_S) is having these fields reorderpoint and Maximumstock level and not showing me in Data source 0MAT_PLANT_ATTR and also not showing me in Hide and selcetions, if it shows me in Hide (selected ) then I can able to change it. (By unselcet check box from Hide).
These fields reorder point and maximum stock level should be maintianed as attributes of 0MAT_PLANT. (IN BW SIDE)
Friends another Problem is in Bw side my client want it should display as info-objects. Is it possible ?
Because these attributes are key-figure attributes and K.F. attributes cant be maintain as navigantional attributes.
Any help would be really appreciated.
Thanks in advance for your support.

Hi vinod,
My doubt is these fields already available in Extact structure biw_marc_s but not available in data source 0mat_plant_attr.
I can go for data source enhancement when there is no fields availble in Extract structe right.
but fieds reorder point (mabst) & maximum stock level (minbe) are available in Extract Structure.
2) IN bw side i can create these two infoobjects (reorder point and maximum stock level) as key figure infoobjects but they can't be maintained as navigatinal attributes to act as info object individually right.
Please help me out or Please pass through this message to your freinds .
It's urgent Please.
Thanks in advance,
Kumar.

Problem while loading texts and authorization objects file in RAR

Hi all,
i am getting internet explorer error while loading the texts and authorization objects text files in RAR .actually we uploaded rule file before this,does this step causes any error ?if so how to resolve this error.do i need to remove all rules/risks and then load text and authorization files? is there any shortcut to renove all risks generated in one shot? please reply me soon to resolve this.
Thanks,
Joseph.

Hi Joseph,
Please make sure to convert both the files in UTF-8 encoding format and then try to upload the files again. This should resolve the issue and if not then please paste the logs here.
Regards
Harleen

TCT* Info objects and Authorization objects

Similar Messages

Maybe you are looking for