Transport roles and analysis authorization with user assigned

Hi expert,
I face with this problem transport roles and analysis authorization with user assigned. When I have created a transport request to move the roles and analysis authorization from development system to test system. I couldnu2019t maintain the user assigned, after transport I have to assigned manually all of user or create a program to fill AGR_USER table or there are other way.
Thanks for your time,
Luis

Hi,
In role administration, you have the following options for transporting roles:
You can download the roles from one system and upload them into another  
You can import the role from a remote system using RFC  
You can transport the roles with the transport function.
Role upload loads all role data, including authorization data from a file into the SAP system. The user assignments for the role and the generated profiles for the role are exceptions in this case.
Transporting Roles with the Role Transport Function
       1.      Start the role administration function by choosing Tools ® Administration ® User Maintenance ® Role Administration ® Roles (transaction PFCG).
       2.      Enter the role to be transported and choose Transport Role.
The Mass Transport of Roles screen appears. You can control the default settings for the options Also transport single roles for composite roles and Also transport generated profiles for roles using Customizing switches (see Role Administration Functions in the section Functions of the Utilities Menu).
You should not change the authorizations profiles of the role after you have included the role in a transport request. If you need to change the profiles or generate them for the first time, transport the entire role again afterwards.
For more information go thrpugh the below link
http://help.sap.com/saphelp_nw70/helpdata/EN/6d/7c8cfd410ea040aadf92e1f78107a4/content.htm
Regards,
Marasa.

Similar Messages

  • Role and Analysis Authorization Transport

    Dear Experts,
    I'm working with migration authorization project from 3.5 to 7.0. My doubt is when migrate in development enviroment enhancement each whith join S_RS_AUTH with Analysis Authorization which the role doesn't have any users assigning and transport to test enviroment where have a same role with user assigning. Do lose the user assign?
    Thank for all,
    Luis

    Hi,
    I think it will orverwrite the Role. If you want to lock the target system against import of user assignments, you can goto sm30 (Table - PRGN_CUST). Make an entry - USER_REL_IMPORT (value - NO).
    Thanks

  • Role and Analysis Authorizations in BI

    Hello allo,
    Since analysis authorizations contains carateritics like infocube, queries, activities., is using role and the PFCG transaction (authorizations object)in BI obsolete ? i.e is Analysis authorizations completely replacing Authorization objects (and PFCG) in BI ?
    thanks !!

    Hatem,
    You have an option to use the old method however it's recommend to use analysis authorizations going forward.
    Take a look at the sap wiki for analysis auth for more info or search the site for other good info.
    https://www.sdn.sap.com/irj/sdn/wiki?path=/display/bi/authorizationinSAPNWBI&
    Cheers,
    Ben

  • Restrict Moving roles with user assignment

    Hi There,
    Need your help...
    How to restrict to move roles from dev->QA with user assignment. (want to disable the user assignment restirction)
    Thanks and Regards,
    Gnanaprakasam

    Unfortunately this is not the default installation setting, so you need to go into the security settings customizing and change the USER_REL_IMPORT switch to 'NO'.
    This does however NOT make the checkbox disappear in the transport source system. It prevents the import in the target... so you must set it and transport it there first, then it works.
    Cheers,
    Julius

  • Roles and their authorization profiles time period

    Can roles and their authorization profiles be assigned to a user for a limited time period?
    please reply
    Thanks
    Edited by: tracey_hrecc6.0 on Nov 1, 2010 5:24 PM

    Hi,
    It is possible.
    Read below links for more details
    http://help.sap.com/saphelp_mic10/helpdata/en/69/1810a4c51144dc833353183155ec88/content.htm
    http://www.sap-img.com/basis/frequently-asked-questions-on-authorization.htm
    http://help.sap.com/saphelp_wp/helpdata/en/cd/cc5664d22a11d296110000e82de14a/content.htm
    Regards
    S.Ravi
    Edited by: S.Ravi-at-SAP on Nov 25, 2010 5:36 AM

  • Moving roles with user assignment

    Hi There,
    Need your help...
    We have roles and users created in QA for training, now we want to move roles from QA to Production with user assignment.
    Users that are created in QA for training have also been created in Production, is it possible to move the roles from QA to Production with the user assignment.
    Thanks and Regards,
    Azher.

    Table PRGN_CUST does'nt contain any entries, its an empy table in QA.
    USER_REL_TRANSPORT entry with value NO locks system from TR imports with User assignment. So you have to ensure your target system-Production does not has that entry in PRGN_CUST.
    TR is geting created in Local change request which cannot be moved to Production.
    This TR request are created in Local Change request only when you do not specify a target system/group . All you need to do is specify the "Target" while creating the TR in PFCG (subsequent screen after you hit Create request) and release your TR via SE10. Once released, the TR would be added to the import queue of Production. You/your Basis team can import it manually via STMS_IMPORT (Extras>Other requests>Add TR and CTRL+F11 to import). If there are any errors please have Basis team to review the transport logs.
    P.S:  You can only transport direct user assignments of roles via PFCG transport option described in my post. In case of indirect user assignments that were created using Organizational Management (HR-Org), you will have to use transport functionality in Organizational management.
    Thanks
    Sandipan

  • BW BEX Queries and Analysis Authorizations

    Hello....
    Have an opportunity with BW BEX queries and Analysis Authorization...would like to see if anyone has had the same experience and if so is there a answer....
    1) given a query....
    2) given a analysis authorization with a info-object that has intervals defined to be both single values and ranged values
    the following happens...
    after the query is fired the starter screen appears...the info-object in question appears with the defined single values only....if....the window is opened....again only the single values appear...the range values do not appear...once the query is executed the only results given are those for the single values...
    also if you re-fire the query and manually enter a valid value for the info-object that falls with-in any of the range values no result is given...even if there is data for it....the reponse given is no data found....
    NOW...if the single values, for the given info-object, are removed from the Analysis Authoriization then the range values appear and work....
    Is this a problem within in the query...or...is this a "feature" of the query...and thus must be "lived" with...
    Terry
    PS...this problem currently only happens if the window for the info-object allows for multi-selection....this problem does not occurr when the window only allows for one selection...

    Hi,
    This is a known problem with analysis authorization and multi selection IO selection criteria.
    When you define the analysis authorization with ranges and when you try to enter single values on the selection critera of the query, then the system shows zero data.
    You can run the query without entering any selection values for the IO in question only.
    I have tried several combinations and still encountering the same issue.
    Ravi

  • Problem with User Assigned Bundles on Win7 x64, ZCM 10.3.4

    Greetings,
    We are experiencing an issue with user assigned bundles in our environment. Specifically we are seeing the following problem on some, but not all, workstations running Windows 7 Pro x64 with ZCM 10.3.4. Some users do not get new, user assigned bundles until they log out of ZENworks Adaptive Agent, via the system tray "Z" icon, and then log back in to the agent. A simple refresh does not grab the new user assigned bundles. One has to perform this logout/login routine to get all user assigned bundles. The problem seems to be machine specific. The server shows that the missing bundles are, in fact, properly associated with the user. If the affected user logs onto a different machine, their user assigned bundles populate as expected. Any ideas?
    In addition to rebooting our ZCM servers, we performed the following on the affected workstations:
    zac unr
    zac unr -f
    zac cc
    zac reg -g
    Uninstalled/reinstalled ZENworks Adaptive Agent 10.3.4
    Deleted affected user's local machine profile
    Repaired CASA installation

    Originally Posted by spond
    Sirhw1,
    what do you see in the zmd-messages.log (set to debug level) when you
    do that initial refresh?
    Shaun Pond
    Shaun,
    The following is an excerpt from our zmd-messages.log after doing a refresh-only on an affected machine. This data was generated approximately 2 minutes after performing the refresh. Thanks for your assistance.
    [DEBUG] [04/04/2012 11:29:58.579] [3428] [ZenLinuxDaemon] [4523] [] [Sqlite] [] [objInfo.db SqliteCommand.ExecuteReader.prepare returned error: ERROR] [] []
    [DEBUG] [04/04/2012 11:29:58.579] [3428] [ZenLinuxDaemon] [4523] [] [Sqlite] [] [(objInfo.db) Throwing sqlite exception from ExecuteReader(sql, want_results, err, errMsg): (select e.id as entryId, e.localPath, d.id as descriptorId, d.name, d.value, d.owner from Entry e, EntryDescriptor d where e.id = d.entryId and e.key='registration:primaryUserInfo' and e.owner='0d6a500efee6a219c74358cb244dc2f1', True, ERROR, )] [] []
    [DEBUG] [04/04/2012 11:29:58.580] [3428] [ZenLinuxDaemon] [4523] [] [ZenCache] [] [Sqlite Exception getting object record for key registration:primaryUserInfo on attempt 1
    Type: Novell.Zenworks.Cache.Sqlite.SqliteException
    Message: Sqlite Error: 1
    Stack Trace:
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.Execute Reader (CommandBehavior behavior, Boolean want_results, System.Int32& rows_affected) (0x00000)
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.Execute Reader (CommandBehavior behavior) (0x00000)
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.Execute Reader () (0x00000)
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.System. Data.IDbCommand.ExecuteReader () (0x00000)
    at Novell.Zenworks.Cache.SqliteEntryInfoProvider.GetC acheEntry (IDbConnection dbConn, System.String key, Novell.Zenworks.Cache.UserContext owner, System.Type type) (0x00000)
    at Novell.Zenworks.Cache.SqliteEntryInfoProvider.GetO bjectEntry (System.String key, Novell.Zenworks.Cache.UserContext owner) (0x00000)
    [DEBUG] [04/04/2012 11:29:58.580] [3428] [ZenLinuxDaemon] [4523] [] [ZenCache] [] [Validating dbSchema...] [] []
    [DEBUG] [04/04/2012 11:29:58.582] [3428] [ZenLinuxDaemon] [4523] [] [Sqlite] [] [objInfo.db SqliteCommand.ExecuteReader.prepare::ExecuteNonQue ry returned error: ERROR] [] []
    [DEBUG] [04/04/2012 11:29:58.582] [3428] [ZenLinuxDaemon] [4523] [] [Sqlite] [] [(objInfo.db) SqliteCommand.ExecuteReader.sqlite3_exec(no_want_r esults) returned error: ERROR] [] []
    [DEBUG] [04/04/2012 11:29:58.582] [3428] [ZenLinuxDaemon] [4523] [] [Sqlite] [] [(objInfo.db) Throwing sqlite exception from ExecuteReader(sql, want_results, err, errMsg): (create table Entry (
    id integer primary key autoincrement,
    key text not null collate nocase,
    owner text not null collate nocase,
    localPath text not null collate nocase,
    unique (key, owner));
    create table EntryDescriptor (
    id integer primary key autoincrement,
    entryId integer not null references FileEntry,
    name text not null collate nocase,
    value text not null collate nocase,
    owner text not null collate nocase,
    unique (entryId, name, owner));
    , False, ERROR, )] [] []
    [DEBUG] [04/04/2012 11:29:58.583] [3428] [ZenLinuxDaemon] [4523] [] [ZenCache] [] [Failed to create cache database file /var/opt/novell/zenworks/zmd/cache/ZenCache/metaData/objInfo.db
    Type: Novell.Zenworks.Cache.Sqlite.SqliteException
    Message: Sqlite Error: 1
    Stack Trace:
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.Execute Reader (CommandBehavior behavior, Boolean want_results, System.Int32& rows_affected) (0x00000)
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.Execute NonQuery () (0x00000)
    at Novell.Zenworks.Cache.SqliteEntryInfoProvider.Crea teDatabaseSchema (System.String dbPath, System.String schema) (0x00000)
    [DEBUG] [04/04/2012 11:29:58.585] [3428] [ZenLinuxDaemon] [4523] [] [ZenCache] [] [ValidateSchema() returned: True] [] []
    [DEBUG] [04/04/2012 11:29:58.585] [3428] [ZenLinuxDaemon] [4523] [] [Sqlite] [] [objInfo.db SqliteCommand.ExecuteReader.prepare returned error: ERROR] [] []
    [DEBUG] [04/04/2012 11:29:58.585] [3428] [ZenLinuxDaemon] [4523] [] [Sqlite] [] [(objInfo.db) Throwing sqlite exception from ExecuteReader(sql, want_results, err, errMsg): (select e.id as entryId, e.localPath, d.id as descriptorId, d.name, d.value, d.owner from Entry e, EntryDescriptor d where e.id = d.entryId and e.key='registration:primaryUserInfo' and e.owner='0d6a500efee6a219c74358cb244dc2f1', True, ERROR, )] [] []
    [DEBUG] [04/04/2012 11:29:58.586] [3428] [ZenLinuxDaemon] [4523] [] [ZenCache] [] [Sqlite Exception getting object record for key registration:primaryUserInfo on attempt 2
    Type: Novell.Zenworks.Cache.Sqlite.SqliteException
    Message: Sqlite Error: 1
    Stack Trace:
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.Execute Reader (CommandBehavior behavior, Boolean want_results, System.Int32& rows_affected) (0x00000)
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.Execute Reader (CommandBehavior behavior) (0x00000)
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.Execute Reader () (0x00000)
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.System. Data.IDbCommand.ExecuteReader () (0x00000)
    at Novell.Zenworks.Cache.SqliteEntryInfoProvider.GetC acheEntry (IDbConnection dbConn, System.String key, Novell.Zenworks.Cache.UserContext owner, System.Type type) (0x00000)
    at Novell.Zenworks.Cache.SqliteEntryInfoProvider.GetO bjectEntry (System.String key, Novell.Zenworks.Cache.UserContext owner) (0x00000)
    [DEBUG] [04/04/2012 11:29:58.587] [3428] [ZenLinuxDaemon] [4523] [] [Sqlite] [] [objInfo.db SqliteCommand.ExecuteReader.prepare returned error: ERROR] [] []
    [DEBUG] [04/04/2012 11:29:58.587] [3428] [ZenLinuxDaemon] [4523] [] [Sqlite] [] [(objInfo.db) Throwing sqlite exception from ExecuteReader(sql, want_results, err, errMsg): (select id from Entry where key='registration:primaryUserInfo' and owner='0d6a500efee6a219c74358cb244dc2f1', True, ERROR, )] [] []
    [DEBUG] [04/04/2012 11:29:58.587] [3428] [ZenLinuxDaemon] [4523] [] [ZenCache] [] [Exception getting sqlite entry id for registration:primaryUserInfo
    Type: Novell.Zenworks.Cache.Sqlite.SqliteException
    Message: Sqlite Error: 1
    Stack Trace:
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.Execute Reader (CommandBehavior behavior, Boolean want_results, System.Int32& rows_affected) (0x00000)
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.Execute Reader (CommandBehavior behavior) (0x00000)
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.Execute Reader () (0x00000)
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.Execute Scalar () (0x00000)
    at Novell.Zenworks.Cache.SqliteEntryInfoProvider.Look upEntryId (IDbConnection dbConn, System.String key, Novell.Zenworks.Cache.UserContext owner) (0x00000)
    [DEBUG] [04/04/2012 11:29:58.588] [3428] [ZenLinuxDaemon] [4523] [] [Sqlite] [] [objInfo.db SqliteCommand.ExecuteReader.prepare::ExecuteNonQue ry returned error: ERROR] [] []
    [DEBUG] [04/04/2012 11:29:58.588] [3428] [ZenLinuxDaemon] [4523] [] [Sqlite] [] [(objInfo.db) SqliteCommand.ExecuteReader.sqlite3_exec(no_want_r esults) returned error: ERROR] [] []
    [DEBUG] [04/04/2012 11:29:58.588] [3428] [ZenLinuxDaemon] [4523] [] [Sqlite] [] [(objInfo.db) Throwing sqlite exception from ExecuteReader(sql, want_results, err, errMsg): (insert into Entry (key, owner, localPath) values ('registration:primaryUserInfo', '0d6a500efee6a219c74358cb244dc2f1', '/var/opt/novell/zenworks/zmd/cache/ZenCache/11796bbf-b14c-4f6d-9c39-a2f5a487e4b9'), False, ERROR, )] [] []
    [DEBUG] [04/04/2012 11:29:58.588] [3428] [ZenLinuxDaemon] [4523] [] [ZenCache] [] [Sqlite Exception putting file record for key registration:primaryUserInfo on attempt 1
    Type: Novell.Zenworks.Cache.Sqlite.SqliteException
    Message: Sqlite Error: 1
    Stack Trace:
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.Execute Reader (CommandBehavior behavior, Boolean want_results, System.Int32& rows_affected) (0x00000)
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.Execute NonQuery () (0x00000)
    at Novell.Zenworks.Cache.SqliteEntryInfoProvider.PutC acheEntry (IDbConnection dbConn, IDbTransaction dbTransaction, Novell.Zenworks.Cache.CacheEntry entry) (0x00000)
    at Novell.Zenworks.Cache.SqliteEntryInfoProvider.PutO bjectEntry (Novell.Zenworks.Cache.ObjectCacheEntry& objectEntry) (0x00000)
    [DEBUG] [04/04/2012 11:29:58.589] [3428] [ZenLinuxDaemon] [4523] [] [ZenCache] [] [Validating dbSchema...] [] []
    [DEBUG] [04/04/2012 11:29:58.590] [3428] [ZenLinuxDaemon] [4523] [] [Sqlite] [] [objInfo.db SqliteCommand.ExecuteReader.prepare::ExecuteNonQue ry returned error: ERROR] [] []
    [DEBUG] [04/04/2012 11:29:58.590] [3428] [ZenLinuxDaemon] [4523] [] [Sqlite] [] [(objInfo.db) SqliteCommand.ExecuteReader.sqlite3_exec(no_want_r esults) returned error: ERROR] [] []
    [DEBUG] [04/04/2012 11:29:58.590] [3428] [ZenLinuxDaemon] [4523] [] [Sqlite] [] [(objInfo.db) Throwing sqlite exception from ExecuteReader(sql, want_results, err, errMsg): (create table Entry (
    id integer primary key autoincrement,
    key text not null collate nocase,
    owner text not null collate nocase,
    localPath text not null collate nocase,
    unique (key, owner));
    create table EntryDescriptor (
    id integer primary key autoincrement,
    entryId integer not null references FileEntry,
    name text not null collate nocase,
    value text not null collate nocase,
    owner text not null collate nocase,
    unique (entryId, name, owner));
    , False, ERROR, )] [] []
    [DEBUG] [04/04/2012 11:29:58.591] [3428] [ZenLinuxDaemon] [4523] [] [ZenCache] [] [Failed to create cache database file /var/opt/novell/zenworks/zmd/cache/ZenCache/metaData/objInfo.db
    Type: Novell.Zenworks.Cache.Sqlite.SqliteException
    Message: Sqlite Error: 1
    Stack Trace:
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.Execute Reader (CommandBehavior behavior, Boolean want_results, System.Int32& rows_affected) (0x00000)
    at Novell.Zenworks.Cache.Sqlite.SqliteCommand.Execute NonQuery () (0x00000)
    at Novell.Zenworks.Cache.SqliteEntryInfoProvider.Crea teDatabaseSchema (System.String dbPath, System.String schema) (0x00000)
    [DEBUG] [04/04/2012 11:29:58.593] [3428] [ZenLinuxDaemon] [4523] [] [ZenCache] [] [ValidateSchema() returned: True] [] []

  • Transported Roles not Visible for the User Log-in

    I have three roles in the development system.  These roles show up in the top level navigation for the users in the dev system.  All these roles and the underlying BSPs are transported to QA successfully.  I could assign them to users without any problems, but when the users log-in they can not see any of these roles at the top level navigation (In fact, they just get a blank screen).  "Entry Point" setting and "Sort Priority" is maintained for all the three roles.
    As a test, I created a new role with the same BSP links in QA itself and assigned it to the users.  This shows up in the top level navigation for the users.  I am wondering what's wrong with the transported roles!  If someone could help me here that would be great and I will assign points to helpful replies.  I have a very basic knowledge in portal.

    After applying SP12 in the portal landscape (EP 6.0), the role transports only work in our test environment, but not in production.  Even the manual corrections suggested in OSS note 1002832 didn't help.  I can preview all the iviews in the roles with my user id (admin id), but as soon as I log-in with the end user id nothing shows up [Not even the top level navigation tabs show up].  The following is the portal authorization methodology I chose.
    1. I assign users to the user groups
    2. I assign user groups to the roles
    I want to emphasize that all is well in our test environment, it is the production environment that shows inconsistency.  Let me know if anyone has any pointers.

  • Impact of Analysis Authorization on Users using old Authorization

    Hi All,
    I have question regarding Analysis Authorization. Our system has old authorization concept and as part of our project we decided to go for Analysis authorization for Cost Center object. We activated analysis authorization for cost center, assigned it to test user id and found that its working fine in Dev. But it has impacted other users in the system. They are not able to access any other reports and data providers which were not even referring cost center. What is the proper way to activate analysis authorization without impacting access to existing users.
    - Som

    Hello Andreas,
    Sorry to ask you directly here, I didn't get answer from this forum. We will migrate to the new analysis authorization from old reporting concept. I have read the book "An Expert guide to new SAP BI security features" by SAP Lavs, but still confused with some parts. My questions is:
    Are there two ways to create authorizations as follows?
    1. we can type tcode rsecadmin>Maintence button>create a new authorization.
    2. the following part taken from the book:
    Steps for Generating Authorizations
    1. Activate Business content
    2. Load Datastore objects
    3. Generate Authorizations
    4. View Generation Log.
    In the first step, OTCA_DS01 to OTCA_DS05 and OCCA_O01 to OCCA_O03 are Datastore objects required to be activated.
    In the second step, tcode rsecadmin-->generation button --> type OTCA_SDS01 to OTCA_DS05 into respective filed. Should we always type these 5 objects everytime when we create authorization?
    When we should use the second way to create authorizations? and what is the diffrence between them?
    Any answers will be appreciated. Thank you very much in advance!
    Haifeng

  • BI7 : Transport deletion of analysis authorizations

    Hi,
    I was just wondering if it is possible to transport the deletion of analysis authorizations exactly as we do for roles.
    Do we have to first create a transport request with the analysis authorization before deleting them and then transport the request or do we have to delete them manually on each system?
    I checked in the documentation but I didn't find anything similar.
    Thank you in advance for your help.
    Regards,
    Vince

    Hi Gowrinadh,
    Thank you for your answer. I already worked on the analysis authorization concept and I have seen this blog while I was searching for an answer regarding deletion but unfortunately there is no explanation about it.
    I was just wondering if it is exactly like in PFCG because there is no pop-up message in RSECADMIN explaining that it must be added first to a transport request.
    According to Zaheer it works exactly the same so I will test.
    Thx for your help .
    Edited by: Vince Bl. on Mar 18, 2009 6:04 PM

  • Analysis Authorization with SEM-BPS

    Hi,
    We have performed technical upgrade from BW 3.5 to BI 7.0. We want to migrate to BI 7.0 functionality phase wise.
    We have SEM-BPS and now we want to migrate to Analysis Authorization of BI 7.0.
    Once we have igrated to Analysis Authorization, will there be any impact on SEM-BPS? Can we still use SEM-BPS with New Analysis Authorizations? We do not want to move to BI-IP in near future?.
    Please advise.
    Best Regards,
    UR

    Dear UR,
    Iu2019m going to try helping you,
    In difference of reporting functionality, in planning, the data of an InfoCube is not just read; it is also changed or created.
    There are two planning tools in BI: BW-BPS (Business Planning and Simulation), and BI Integrated Planning.
    There are two main tcode: BPS0 and RSPLAN
    There are three authorization objects to manage Integrated Planning:
    S_RS_PL_ADMIN - Planning Administrator
    S_RS_PL_PLANNER u2013 Planner
    S_RS_PL_PLANMOD_D u2013 Planning Modeler (Development System)
    The main object in the planning scenario is InfoCube real-time, where can available writing in small package that arrive in parallel. In some cases the security requirements for reporting and planning can be merging. In this case you need authorization object for checking planning, as authorization object above, and you need authorization object for using a query for planning requires as S_RS_COMP.
    In addition to authorization for displaying data, the authorizations for changing data you need analysis authorization (the analysis authorization focus in the InfoProvider, no in Aggregation Level).
    In your analysis authorization design for reporting stuff, you should use in 0TCAACTVT characteristic 03 value. In the planning stuff, you should use in 0TCAACTVT characteristic 03 and 02 values. As explain following:
    Using the characteristics 0TCAACTVT (activity), you can restrict the authorization to different activities. Read (03) is set as the default activity; you must also assign the activity Change (02) for integrated planning.
    http://help.sap.com/saphelp_nw70ehp1/helpdata/en/b1/0c9441b8972e7be10000000a1550b0/frameset.htm
    I hope this suggestion can help you answer question,
    Luis

  • Roles included in Roles and how it effects User Content

    I want to have one role which generates a tab called "Budget Development" under this tab depending on the users other assigned roles I want from 1 to 3 addition tabs or selections to appear. Based opn user assigned Roles
    When I create 3 additional roles, and assign them to the Parent Role (Budget  Development) all 3 tabs appear evenif the addional roles are not assigned to the user.
    Role 1 "Budget Development"
                Role 1.1 "Budget Add"
                Role 1.2  "Budget Change"
                Role 1.3  " Budget Delete"
    I have access to all 3 tabs/selection and the functionality when I am assigned the 1 role of "Budget Development"
    How do I selectivly Display Sub-Roles based on Portal Roles and permissions etc.
    Thanks for any help.
    Sarah

    Hi Sarah,
                 You can achieve this by the 'Merged Role Concept'.
    1)Create 3 roles with the same name say "Budget Development" which will have different ID's though.
    -Under the role properties set the "Merge ID" for each role. The mergeID has to be the same for all the 3 roles.
    2) Now create 3 worksets say "Budget Add", "Budget Change" and " Budget Delete".
    - and assign each of these worksets to 3 different roles that we have first defined.
    Now depending upon which user needs what access you can assign the roles. The user will see one role but different worksets underneath based upon what he has been assigned.
    -Let me know if you have any further issues with this.

  • Transport Request for Analysis Authorization

    Hello Everyone,
    When a trasport request is created for any BI analysis authorization ( including the Z*), the type of trasport request created
    is workbench request. What is the reason behind this because when any Customised Role / Profile is included in transport request this will be customised request unlike analysis authorization.
    Thanks in advance.....

    Hi Rashmi,
    The difference is In BI, the AA authorizations are independent. Any objects that are independent of the client will be captured in the workbench type of transport request, when they are required in the other client. Hence you can see the Workbech type request for  transporting changed Repository objects and changed system settings from cross-client tables. However, customizing requests involve changes recorded to client-specific Customizing objects .
    The Analysis authorizations are always captured in a Workbench type of transport request by default due to the above design.
    You can still transport both the PFCG role, and AA in a single transport request, you can do the same by following the steps mentioned in the below Wiki:
    https://wiki.sdn.sap.com/wiki/display/BI/HowtotranportroleandAAtogetherinBI
    Regards,
    Raghu

  • Double Role for Analysis Authorization using Variable via Customer Exit

    Hi Guys I have been implementing AA using variable via customer exit and I have run into this problem, I wonder anyone have encountered this.
    Example I have a User having 2 sets of authorization Roles
    Role 1
    Personnel Area = A, B
    Personnel Sub Area = 1,
    Role 2
    Personnel Area = A
    Personnel Sub Area = 1, 2
    And what we can derive this that is the user is able to see A-1 B-1 and A-2 BUT NOT B-2 when we run all.
    But instate when we run the report it is drawing B-2 as well as because we are entering
    Personnel Area = A,B
    Personnel Sub area = 1,2
    Any idea how to solve this?
    <removed by moderator>
    Edited by: Siegfried Szameitat on Dec 3, 2008 2:41 PM

    Hello Chee Jason,
    Are you working with version 3.5 or 7.0
    How do you specify Hierarchy variable?
    Any advise you can share is very much appreciated.
    Thanks,
    Patrick

Maybe you are looking for

  • ITunes asking for reinstall and still won't work with win 7?

    Just installed Windows 7 Ultimate on new unwritten hard drive, when I try and open iTunes I get the message that some registry files are not available, the ones that itunes uses for CD burning/playing, please reinstall iTunes. I have done this over a

  • How can I view my backed up files in my iCloud?

    I deleted some of my photos and videos on my iPhone and would like to recover them. My iPhone backed up on March 10th. How can I see the files that were backed up there?

  • How do I save attachments out of Mail in Lion?

    I'm set to classic mode and have disabled discussions, but the one bit of old functionality from 10.6 Mail that eludes me is the twirl down arrow (next to the paperclip and under the recipients) that allows me to see all the attachments I've recieved

  • My iPod Touch has forgotten it has speakers.

    Basically my problem is that suddenly my iPod only plays sound through its headphones, and won't play any though the speakers. Anyone know what the problem is and how to solve it? It isn't the settings as the sound is on full.

  • Show names acting up on xygraph

    I have a tab control layout in which an xy graph is on one tab and the inputs for it are on the other. Ive set up the cursors on the xy graph to show names, although when i add a cursor, then look at it on the other tab, i see the name twice, once ab