Use of S_RS_AUTH

I am a sap basis admin.
I want to know the use or S_RS_AUTH authorisation
Please help me

Hi Emerald,
please search the forums first before posting questions. This avoids redundant effort and saves time and resources of your peers.
Please use the search term "S_RS_AUTH" or refer to the online help
<a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/55/46eb411a7f6324e10000000a1550b0/content.htm">http://help.sap.com/saphelp_nw2004s/helpdata/en/55/46eb411a7f6324e10000000a1550b0/content.htm</a>
  Cheers
    SAP NetWeaver BI Organisation

Similar Messages

  • BI analysis authorisations direct assign to user in RSECADMIN

    Hello,
    In RSECADMIN it is possible to directly assign the 'analysis authorisations' to user-id's
    It is also possible to assign the 'analysis authorisations'  to a role via the authorisation object S_RS_AUTH
    Can somebody tell me
    -    what are the pros and cons of directly assigning the analysis autorisations to the users in the RSECADMIN ?
    -    In which situation is direct assigning in RSECADMIN used ?
    -     IS dirtectly assigning to users in RSECADMIN in a production environment critical?
    -     what does SAP propose: directly assigning in analysis authorisations our via a role
    In our case we have the situation of
           BI system with a large number of analysis authorisations. The values of the analysis authorisations should be  
           maintainable in production environment.
           We have also to take in mind:
                              -  Roles are added to users via CUA ( RSECADMIN is not maintainable via CUA)
                              -  Business Objects is coming. So set up the authorisations that they can be used for Business Objects
                              -  Flexible ( new autorisation relevant info Objects)  should be easy adeptable.
           What we want to use is
                                     - assigning analysis authorisations via a single role ( in a composite ) to the user
                                     -  a variable in the analysis authorisations as field value  of a characteristic. In that case the values can be  
                                        assigned dynamically in production.
                                       the data access role has the link to the analysis autorisations in the RSECADMIN.
                                      this analysis authorisation contains variables instead of a fixed field value.
                                      The values of the variables are maintained in a table in a production environment
             Is using directly assigning analysis authorisations to users in the RSECADMIN in  the production environment an  alternative  ? 
        Thanks for your answers
        With Kind Regards,
        Vincent
    Edited by: Vincent Willems on Apr 7, 2011 10:37 AM

    Hello Vincent,
    My way of working is to follow the structure you have in the providing systems. If you have created a role for a production employee then try to translate the roles for the production analysis the same way in BI. You can use the s_rs_auth object. In HR you can use structural authorizations, you can use some programs to set the structural authorizations in BI and that will be done by creating an analysis object and add this to the user involved. Also updates from structural authorizations will be done automatically by these programs. I should not add your own objects to single users, that is a lot of maintenance you do not want. Use in BI the same concept as in the providing systems, it is more clear for anyone who has to work with it.
    Have fun
    Bye
    Jan van Roest
    PS. Did you solve your problem? If so please close your question
    Edited by: J. van Roest on Jul 7, 2011 12:51 PM

  • NW2004s Authorizations concept

    Gurus,
    Can the old and new authorizations work together in same roles.
    lets say i add new auth object S_RS_AUTH to the existing roles can both work together or just one .please explain in brief
    thanks

    Firstly I would say..SAP is always correct..I don't stand a chance against the creator..but I think..
    SAP says
    "You can have both in one role; and only one set will be relevant depending on the chosen concept."
    I think you have misinterpreted the word coexistence....why is migration needed when ....when you can still use 3.x....??
    But pleases read second paragraph of my answer..there I have written about use of S_RS_AUTH for adding new authorization object..that's probably..you are referring.to ....way of adding new authorization object..to old role....
    I think ...if you are using bi 7 then you should go for the new way of authorization which is far simpler..and easy to use and you can have more flexiblility..and complexity will also be reduced..and again...
    I reiterate..SAP is always correct..

  • Restrict access in RSA1 to exclude infoarea beginning with 0 / wildcards

    Hi experts,
    Is it possible to exclude access to a specific infoarea in RSA1, in my case it would be the HR related infoarea: 0HCM
    I require an 'administrator' role which does not allow access to this infoarea, all other access should be possible
    I was trying to restrict the access for the authorization object S_RS_ICUBE filling in these restrictions for infoarea:
    0A-0HB, 0HD-0Z
    This to exclude the infoarea for HR (0HCM), but it doesn't seem to work. Is it possible to use wildcards for infoarea starting with zero?

    Hi,
      If you are using BI 7.0 system, you can use Analysis Authorizations to exclude few infoareas for a particular role.
    After creating your analysis authorization, you should include in your required role using the 'S_RS_AUTH' object.
    Refer to the following link for more details on analysis authorizations,
    http://www.bwarea.com/2009/01/sap-bi-70-authorization-part-1.html
    http://www.bwarea.com/2009/01/sap-bi-70-authorization-part-2-creating_18.html
    http://wiki.sdn.sap.com/wiki/display/BI/AnalysisAuthorizationsinBI7.0
    Regards,
    Balajee

  • Using S_RS_AUTH in Visual Composer ?

    Hi, thanks for your time.
    I have problems with the use of the subject to S_RS_AUTH in BI 7.
    For example, my object is ZCOUNTRY_CL and used 0COUNTRY with the "CL".
    In the "Value Help" from Visual Composer displays all countries, while in BI7 shows only those countries that are within the authority.
    The idea that I can think of is to create a ZBAPI to call a Query that I return the country of approval, Using for this RSCRM_BAPI or something similar in BI 7.
    I would appreciate if you could indicate some other option to upload in the "Value Help" values of authority, or give me any suggestions to improve my idea.
    greetings

    Any idea, we have SP15 in JAVA for VC 7.0 ?

  • Using S_RS_AUTH in VALUE HELP ?

    Hi, thanks for your time.
    I have problems with the use of the subject to S_RS_AUTH in BI 7.
    For example, my object is ZCOUNTRY_CL and used 0COUNTRY with the "CL".
    In the "Value Help" from Visual Composer displays all countries, while in BI7 shows only those countries that are within the authority.
    The idea that I can think of is to create a ZBAPI to call a Query that I return the country of approval, Using for this RSCRM_BAPI or something similar in BI 7.
    I would appreciate if you could indicate some other option to upload in the "Value Help" values of authority, or give me any suggestions to improve my idea.
    greetings

    You can look solution in post to blog the Judy until we make owner Blog.
    /people/judy.kestecher/blog/2008/08/26/whats-new-in-visual-composer--enhancement-package-1-for-sap-netweaver-70

  • Problems using S_RS_AUTH in Visual Composer ?

    Hi, when we set S_RS_AUTH = 0BI_ALL models working good in Visual Composer.
    But when change value to ZOBJECT multiple errors in Backend system in Visual Composer and not can look the data, in Query web working good.
    Any idea ?

    Hi,
    Are you accessing the data via a query with an authorization variable?
    Tomer.

  • Error while calling RFC when using BSP Web Interface

    Hi,
    we have a problem with the Authorization when we use an Web Interface for BSP. We have assigned all roles to the user which were mentioned in the SAP standard documentation:
    R_AREA   
    R_METHOD 
    R_PACKAGE
    R_PARAM  
    R_PLEVEL 
    R_PM_NAME
    R_PROFILE
    R_STS_PT 
    R_STS_SUP
    R_WEBITF 
    S_RS_ADMWB
    S_RS_AUTH
    S_RS_COMP
    S_RS_COMP1
    S_RS_DAS 
    S_RS_ICUBE
    but we still get the error message: "Error while calling RFC".
    When using a user with SAP_ALL, it works.
    What can we do?
    Thx for your time.
    Joerg

    Actually that's surprising - because BSP (Business Server Pages) and RFC (Remote Function Call) are not related; they use totally different transport protocols (http vs. RFC). Even if an BSP application is calling a function module remotely (acting as RFC client) no authorizations for S_RFC are required - in the calling system (but in the called system, i.e. the RFC server).
    Since assigning SAP_ALL seems to "cure" the problem, it seems to be an authorization issue, indeed. In that case it makes sense to use the authorization trace (ST01 - notice: that's specific to one single ABAP application server; you might have to activate the trace on multiple instances) to find out which authorizations are checked / demanded.

  • KF level Authorization using 0TCAKYFNM not working

    Hi,
    I need to restrict users from seeing a particular KF say cost in 0sd_c03 cube. I have done the following:
    1. In RSECADMIN I created authorization ZCOST
    2. I added 0TCAACTVT
    0TCAIPROV
    0TCAKYFNM
    0TCAVALID
    3. For 0TCAIPROV I gave value as 'Include' 'EQ' 0SD_C03
    4. For 0TCAKYFNM I gave value as'Include' 'EQ' 0COST_VAL_S
    5.Then I went to a ZROLE and included the ZCOST created in step 1 above to S_RS_AUTH and assigned a few users with this ZROLE.
    6. I created a query using 0COST_VAL_S in the 0SD_C03 cube
    7. When I run the test in RSECADMIN for users with ZROLE and without ZROLE I get the cost showing up in the query. My expectation is users with ZROLE shouldnt have access to cost.
    Are these steps the right ones to follow and what am I missing for the authorization to work. Pls help ASAP.
    Thanks
    Suja

    Hi,
    I was able to use a copy of 0BI_ALL and provide authorization only to those KF's that users can see in that cube. Whatever was not in the list of restrictions of the 0TCAKYFNM the user didnt have access. Thanks a lot for all your help and suggestion.
    If I create a new Z object, the report didnt show anything - just gave the message ' no authorization'. If I run SU53 it said 0BI_ALL was missing. So I followed the steps mentioned above.
    Thanks
    Suja

  • NW2004s Sneak Preview - Unable to logon using BEx Analyzer or WAD

    We have installed SAPNW2004s Sneak Preview Full ABAP Edition (with Web Dynpro for ABAP!) with the GUI recommneded on SDN download page.
    SAP Frontend Package 6.40 Final Compilation 3
    =============================================
    SAP Frontend Package 6.40 Final Compilation 3 for Win32
    Product  Version   Release State    Patchlevel
    GUI      6.40      Final           8
    SCM      4.0        Final           1
    BW       3.5       Final           3
    KW       7.0       Final              0
    I can log on to Client 001 and access BI, but on trying to access using the BEx Analyzer and Web Application Designer, I get a error message saying the "User or password is not correct (Repeat Logon).
    I have already provided all relevant authorization to the user I am using to logon to BEx. My Opersting system is Windows XP Professional SP1
    However, if I use the RRMX transaction (using the old GUI)
    SAP Frontend Package 6.20 Final Compilation 4
    =============================================
    SAP Frontend Package 6.20 Final Compilation 4 for Win32
    Product  Version   Release State    Patchlevel
    GUI      6.20      Final          32               
    APO      3.0A      Final          19
    BW       3.0B      Final           7
    KW       5.2       Final              4
    SEM      3.5       Final              0
    I can log onto BEx anlyzer. Your help in resolving the problem would be highly appreciated.

    Roger,
    When installating the Comp 4 GUI make sure you have selected the BI 7.00 Add-on. There you will also find BW 3.5. For the time being just select BI 7.00 Add-on. The Patch will only update the files if they are already exisiting (installed).
    Only ensure that the user has following roles assigned:
    SAP_BW_ALL
    SAP_BW_ANZEIGER
    SAP_BW_AWTEST
    SAP_BW_DEVELOPER
    SAP_BW_SEM_BPS_APPLICATIONS
    SAP_BW_SEM_LP
    and Profiles:
    SAP_ALL
    SAP_NEW
    S_A.SYSTEM
    S_RS_ALL
    RS_RS_EXPL_A
    Plus a Z_BI_ROLE (having ALL authroization for below objects)
    Z_BI_ALL                            All BI Authorizations                                                                               
    5       Manually   Cross-application Authorization Objects                      AAAB              
            4          Manually   Authorization Check for RFC Access                           S_RFC      
                                                                  5       Manually   Basis - Development Environment                              BC_C                                                                               
    4          Manually   ABAP Workbench                                               S_DEVELOP  
                                                                  5       Manually   Business Information Warehouse                               RS                
            4          Manually   Infrastructure of the Analysis Authorizations                S_RSEC     
            4          Manually   Data Warehousing Workbench - Objects                         S_RS_ADMWB 
            4          Manually   BI Analysis Authorizations in Role                           S_RS_AUTH  
            4          Manually   Business Explorer - BEx Web Templates (NW 7.0+)              S_RS_BTMP  
            4          Manually   Data Warehousing Workbench - InfoSource (Flexible Update)    S_RS_ISOUR 
            4          Manually   Data Warehousing Workbench - Open Hub Destination            S_RS_OHDST 
            4          Manually   Data Warehousing Workbench - Process Chains                  S_RS_PC    
            4          Manually   Business Explorer - Individual Tools                         S_RS_TOOLS

  • Mass Add authorizations using RSECADMIN for user tab

    Hi All,
    I sent the following to ask SAP if there is a way to do this and they told me they could not help unless I wanted to pay the consulting fees so I am now curious if they have a way to do this.  I have reviewed the help documents and OSS notes and could not find anything .  They pro-offered adding the authorization S_RS_AUTH to the role but I do not want to do that.  I want to do it by user instead of creating many multiple roles.  Below is the question.  Does anyone know how to do a mass add to authorizations to users using RSECADMIN.
    We want to be able to add multiple users to an authorization created
    through RSECADMIN rather than add them one by one to each user. Is
    there a mass user add with RSECADMIN. I looked and cannot find this
    feature. Thanks, Mary

    Hi,
    There are two different methods of assigning authorisations.
    Direct
    1. From the RSECADMIN transaction select 'Users', enter the name and select 'Change'. Use the value help to selct the authorisation in question and for a single value select 'Insert'. If you select the 'Nodes' option it is possible to select nodes of hierarchies on characteristic 0TCATUTH (a single ‘H’; not to be confused with 0TCAUTHH!). This char offers automatically all BI authorizations as virtual master data. These master data can be organized in hierarchies, a property that offers the possibility to group authorizations by meaning or application field. Press "Save" to save the assignment to database.
    Assignment via Roles and Profiles
    2. It is also possible to assign using roles or more specifically, profiles of roles. Use PFCG and instead of entering manually created object use S_RS_AUTH which gives you the BI Auth field to enter the appropriate authorisations.
    Hope this helps

  • How do I use Edge Web Fonts with Muse?

    How do I use Edge Web Fonts with Muse - is it an update to load, a stand alone, how does it interface with Muse? I've updated to CC but have no info on this.

    Hello,
    Is there a reason why you want to use Edge Web Fonts with Adobe Muse?
    Assuming you wish to improve typography of your web pages, you should know that Muse is fully integrated with Typekit. This allows you to access and apply over 500 web fonts from within Muse. Here's how you do it:
    Select a text component within Muse, and click the Text drop-down.
    Select Add Web Fonts option, to pop-open the Add Web Fonts dialog.
    Browse and apply fonts per your design needs.
    Muse also allows you to create paragraph styles that you can save and apply to chunks of text, a la InDesign. Watch this video for more information: http://tv.adobe.com/watch/muse-feature-tour/using-typekit-with-adobe-muse/
    Also take a look at these help files to see if they help you:
    http://helpx.adobe.com/muse/tutorials/typography-muse-part-1.html
    http://helpx.adobe.com/muse/tutorials/typography-muse-part-2.html
    http://helpx.adobe.com/muse/tutorials/typography-muse-part-3.html
    Hope this helps!
    Regards,
    Suhas Yogin

  • How can multiple family members use one account?

    My children have iphones, ipads, ipods and mac books, my problem is how do you use home sharing with the devices and not get each others data.  My Husband just added his iphone to the account and got all of my daughters contacts.  I understand they could have there own accounts but if i buy music on itunes and both children want the same song, I don't feel i should have to pay for it twice.  Is there away we can have home sharing on the devices and they can pick and choose what they want? and is this icloud going to make it harder to keep their devices seperate?

    My children have iphones, ipads, ipods and mac books, my problem is how do you use home sharing with the devices and not get each others data.  My Husband just added his iphone to the account and got all of my daughters contacts.  I understand they could have there own accounts but if i buy music on itunes and both children want the same song, I don't feel i should have to pay for it twice.  Is there away we can have home sharing on the devices and they can pick and choose what they want? and is this icloud going to make it harder to keep their devices seperate?

  • Iphoto crashing after using mini-dvi to video adapter

    Hi, IPhoto on my Macbook is crashing. I can open it, then as soon as I scroll down it locks up and I have to force quit.
    This started happening right after I used a Mini-DVI to Video Adapter cable to hook my macbook up to my TV. The adapter/s-video connection worked and I was able to see the video on the tv. But iphoto immediately locked up the computer when I went to slide show and now it locks every time I open it.
    Any ideas?
    Thank you:)
    Dorothy

    It means that the issue resides in your existing Library.
    Option 1
    Back Up and try rebuild the library: hold down the command and option (or alt) keys while launching iPhoto. Use the resulting dialogue to rebuild. Choose to Rebuild iPhoto Library Database from automatic backup.
    If that fails:
    Option 2
    Download iPhoto Library Manager and use its rebuild function. This will create a new library based on data in the albumdata.xml file. Not everything will be brought over - no slideshows, books or calendars, for instance - but it should get all your albums and keywords, faces and places back.
    Because this process creates an entirely new library and leaves your old one untouched, it is non-destructive, and if you're not happy with the results you can simply return to your old one.
    Regards
    TD

  • How do multiple family members use iTunes.? One account or multiple?

    How do multiple family members use iTunes. One account right now but apps gets added to all devices and iTunes messages go to all devices.  Can multiple accounts be setup and still have ability to share purchased items?

    Hey Ajtt!
    I have an article for you that can help inform you about using Apple IDs in a variety of ways:
    Using your Apple ID for Apple services
    http://support.apple.com/kb/ht4895
    Using one Apple ID for iCloud and a different Apple ID for Store Purchases
    You can use different Apple IDs for iCloud and Store purchases and still get all of the benefits of iCloud. Just follow these steps:
    iPhone, iPad, or iPod touch:
    When you first set up your device with iOS 5 or later, enter the Apple ID you want to use with iCloud. If you skipped the setup assistant, sign in to Settings > iCloud and enter the Apple ID you’d like to use with iCloud.
    In Settings > iTunes and App Stores, sign in with the Apple ID you want to use for Store purchases (including iTunes in the Cloud and iTunes Match). You may need to sign out first to change the Apple ID.
    Mac:
    Enter the Apple ID you want to use for iCloud in Apple () menu > System Preferences > iCloud.
    Enter the Apple ID you want to use for Store purchases (including iTunes in the Cloud and iTunes Match) in Store > Sign In. In iTunes 11, you can also click iTunes Store > Quick Links: Account.
    PC (Windows 8):
    Enter the Apple ID you want to use for iCloud in the Control Panel. To access the iCloud Control Panel, move the pointer to the upper-right corner of the screen to show the Charms bar, click the Search charm, and then click the iCloud Control Panel on the left.
    Enter the Apple ID you want to use for Store purchases (including iTunes in the Cloud and iTunes Match) in iTunes. In iTunes 10, select Store > Sign In. In iTunes 11, click iTunes Store > Quick Links: Account.
    PC (Windows 7 and Vista):
    Enter the Apple ID you want to use for iCloud in Control Panel > Network and Internet > iCloud.
    Enter the Apple ID you want to use for Store purchases (including iTunes in the Cloud and iTunes Match) in iTunes 10 in Store > Sign In. In iTunes 11, click iTunes Store > Quick Links: Account.
    Note: Once a device or computer is associated with your Apple ID for your iTunes Store account, you cannot associate that device or computer with another Apple ID for 90 days. Learn more about associating a device or computer to your Apple ID.
    Thanks for using the Apple Support Communities!
    Cheers,
    Braden

Maybe you are looking for