User authorization query/report

Has anyone determined a method of printing a query or report of all authorizations for a user? From reading SOX requirements, this appears to be standard in almost every company yet there does not appear to be a way to do it in Business One.

Hi,
if you want to print all authorization for all users so I think that the only way is do it through tables and sql query. The base table is HEM5.
hope it helps
Petr

Similar Messages

Report Not apperaing in User's Query Report Viewer Menu

Hello There!
Continuing with below thread
Report Category not Appearing in Report Definition
When i search for a report i created, i'm(as a normal user) not able to find any report after searching.(assigned to me or to my role.)
The view PSXPRPTSRCH_VW has two tables PSXPRPTDEFN and PSXPDATASRC .Both have oprid column which is blank and the above view's first where clause is asking for oprid.
I don't understand how then all the doc./papers on internet i read, to create Report using XML Publisher says/shows the report appears in user menu(query report viewer). May be they still using PS login to show the output?
Anybody have any idea where am going wrong?
The category,datasource,Definition,query tree all set properly. Do user need any special role/permission assigned?
BTW user can see the query report viewer menu.
Regards!
Edited by: user10569054 on Sep 27, 2012 2:32 PM
Peoplesoft Version 9.00
Database Oracle 10.2

Thanks for the Reply.
from the doc. you gave, this is what i found.
Home > PeopleBooks > PeopleTools 8.52: BI Publisher for PeopleSoft > Running, Locating, and Viewing BI Publisher Reports
The Query Report Viewer allows selection and online viewing of those reports that have a data source type of PeopleSoft Query. Existing Query security applies so that each user has access to run only the reports to which he or she has qualified Query access to the data source.
The PS query and the data source is created by user PS then how can a normal user will have access to that?
I'm bit confused here.
Regards!

How many ways we can create authorization for user groups in sap query reports

Hi Gurus, I am getting a problem when I am assigning users to user group in sap query report .The users other than created in user groups are also able to add &change the users .So please suggest me how to restrict users outside of the user group.
Please send me if u have any suggestions and useful threads.
Thank You,
Suneel Kumar.

I don't think it can be done. According to the link below 'Users who have authorization for the authorization object S_QUERY with both the values Change and Maintain, can access all queries of all user groups without being explicitly entered in each user group.'
http://help.sap.com/saphelp_46c/helpdata/en/d2/cb3f89455611d189710000e8322d00/content.htm
Although I think you can add code to your infoset and maybe restrict according to authority group, i.e.:
Use AUTHORITY-CHECK to restrict access to the database based on user.
Press F1 on AUTHORITY-CHECK to find out how to use it in the code

Need a Query/User Authorization Report

Hello All,
I am looking for tables, function modules, programs etc that will aid in building a report that will show every query and which users have access to them.
This program I am wanting to build will serve as a periodic "reality check" on our authorizations.
I am not sure about the tables/programs etc involved in interpreting the user's roles/profiles.
My current thinking is that there may be a function module or program that is being by the BEx tools that comes up with the list of queries that the user has access to when they first select the query they want to run. Getting a hold of that would be very beneficial.
Any ideas?

Hi,
Refer the below links
www.das.state.ne.us/nis/security/docs/authorized_agent_manual.pdf
script.wareseeker.com/PHP/uas-user-authorization-system.zip/18033
eda.ogden.disa.mil/users_guide/trainMaterial/GeneralAdminMaint.ppt
www.umaryland.edu/eumb/Documents/user_aff.pdf
www.mariewagener.de/node/98
https://wiki.sdn.sap.com/wiki/display/BI/AuthorizationinSAPNWBI?focusedCommentId=78053701
www.bi-expertonline.com/downloads/Smith.doc
https://aisweb.wustl.edu/hr/benefits.nsf/pages/files/$file/hrmssecurityauth07.pdf
www.sapdev.co.uk/sap-bw/queryexit.htm
naresh

User Authorization for a Query

Hi,
I have assigned a single role to a user, in which I have authorization for all the Infoproviders, including authorization for reporting. The user is able to access most of the queries, except one query. If there is a problem, he should not have accessed all the queries.
What problem could have prevented the user from accessing on particular query???
Any Ideas will be highly appreciated,
Thanks and Regards,
Ravi Sankar

Some possibilities:
The one query which the user is not able to run , who is the author of this query?
You need to give authirozation for the object S_RS_COMP1.
If the user has authorization for this object, then the next possibility is:
The query may have a filter or a characteristic value for which the value is not set for the user.
Ravi Thothadri

All the users authorization report

Dear Experts,
I want run the all the users authorization in SAP. I want prepare authorization matrix from all the users.
Please help me on this. Thanks for advance.
Regards
S.Prasad

Hi,
post your query in abap forum.
the following tables are useful to create such report
ROLES BY TCODE ASSIGNMENT
TSTCT
AGR_1251
ROLES BY USERS ASSIGNMENT
AGR_USERS
USER_ADDR
ROLES BY ORGANIZATIONAL LEVEL ELEMENT ASSIGNMENT
AGR_1252
USVART
regards,
kaushal

PLD report from user defined query

Hello experts,
Is possible to create a new PLD report from a user defined query ?
Thanks in advance.
Best regards
Andrea

Hi,
It is possible on Query Print Layout Design(QPLD) so Try to create QPLD.
Check this link u can get presentation slide form SAP.
[Query Pld from SAP site]
First you can try to create the Query report with UDF filed.
for example,
SELECT T0.DocNum, T0.DocDate, T0.CardName, T0.CheckSum, T0.U_UDF1, T0.U_UDF2, T0.U_UDF3
FROM OVPM T0 WHERE T0.DocNum>='%0' and T0.DocNum<='%1' ORDER BY T0.DocNum
Steps to Develop a User Report in QPLD:-
If you save your Query in Query Manager. Next you can do this,
->> Choose the Query Manager on Top Menu.
->> Open the Qeury Manager Window.
->> Select the specific Query report. and
->> Click the Create Report button in Bottom on Qeury Manager Window.
->> then, Open the Create User Report Window and Select the User Report(System) in Base Template.
If you Change the QPLD name.
->> Click OK.
->> (or) If your Query Report have parameter. Click OK.
Now your Query report was Created QPLD.
Note: All SELECT statement fields will be Stored and Display in Repetetive Area1. and
Parameter Fields are in Repetetive Area0 so you can Try to Copy & Paste the Field_ID's to Repetetive Area Header (or) Repetetive Area Footer.
Example:
->> Open the QPLD and Goto Field index Window, then
->> Select the Repetetive Area Header & Repetetive Area Footer ncrease the Height on Properties Window.
->> Create the Formula fields in Repetetive Area Header & Repetetive Area Footer.
->> Which Field you want to print in header or footer. Drag the Field ID(in Repetetive Area) Copy & Paste to Formula Field.
Can you see to your Query PLD? do this,
->> Choose the Tools on Top Menu.
->> Click the Queries. -> Query Print Layout...
->> Open the Query Print Layout Window.
->> Click Reports Tab and Double the Template (Requrie QPLD) on QPLD Window.
->> Customize and Save the QPLD.
Can you see your Query PLD Preveiw and Print? do this,
->> Choose the Tools on Top Menu.
->> Click the Queries. -> Query Print Layout...
->> Open the Query Print Layout Window.
->> Select Template in Report Tab on QPLD Window.
->> Click Print Preview on Top menu.
Close this thread if issue solved
Regards,
Madhan.

How to create Infoset&user group query--(query report)

Hi Guys,
how to create Infoset&user group query--(query report),
Pls send me the exact procedure with Example....
Regards:
Kumar .G

goto SQ03 and create an User Group If U want to create Ur Own.
Goto SQ02 to create Ur Infoset by Giving Logical database name or Simple Database table
Then Choose What ever data U need to be included in The Qurey in field Groups.
Then Generate the Infoset
Now Assign the infoset to user group
Now goto SQ01 and Click on Other user group Button and choose Ur user Group.
Then in the USer group select Ur Infoset and then create Ur own Query and save this.
Now select the infoset query and goto More functions under Query menu and Generate report name.
Now Create a transaction code for the report name generated.
Now use the Tcode.
Hope U have got the basic idea of creating Queries.
~BiSu

User authorization check in report

Hi All,
I want check user name in report while event (at user-command) trigger.
Have 2 buttons in report A.Process B. Display.
any user can press display button. but some of the user only can press Process button.
how can I do this using authorization objetcs.
I donot want to check by sy-uname, because I donot want to hardcode user names.
Thanks & Regards
Gupta......

Hi,
You need to ask to BASIS guy to create the authorization object.
Whenever user clicks the button PROCESS in PAI of that screen you need to write the authority check statement.
For example if i need to validate the country for the particular user :
MODULE user_command_9000 INPUT.
*Authority Check for Country*
AUTHORITY-CHECK OBJECT 'ZO9_CNTRY'
    ID 'COUNTRY' FIELD g_soldto_country.
if sy-subrc ne 0.
     clear g_ok_code.
     message E001(ZMESSAGE_AS) with g_soldto_country.
endif.
I hope this will be useful to you.
Plz reward if useful.
Thanks,
Dhanashri

When using BW Bex query analyzer users cannot change reporting queries ....

Issue: When using BW Bex query analyzer users cannot change reporting queries. Any attempt to change queries results in errors.
Error: BEx Query Designer: Run-time error '-2147221499 (80040005) Fatal Error - Terminating
Impact: Business reporting is currently being negatively impacted because users cannot modify queries, cannot change filters for fiscal period and fiscal year.
OS / MS Office Suite being used: Vista & Office 2007
Backend System: BW 2.0B
Frontend System: Being a large organization, we have a controlled environment wherein all users will have the following applications installed by default:
1. SAP Client Base 7.10
2. SAP BW 3.5 Patch 4
3. SAP BI 7.10 Patch 900
4. SAP GUI 7.10 Patch 12
Does anyone has any idea as to why we are getting this error? Is it a Vista issue? Is it a front-end issue?

Just a thought - did you guys apply any Microsoft security patches before this started happening - we had a similar issue in other SAP application due to MS security update. Raise an OSS with SAP

The problem about integrate Portal and R/3 : vendor query report problem

Hi everyone :
   We want to achieve that our vendor can query R/3 report via our Portal. I had done SSO configuration.
   But we had about 500 vendors, it is impossible that we create 500 R/3 users for our vendors, because the cost is too much .
   And there is another problem, vendor who had the authorization to query report can query the other vendor's data at same time. But we expect that certain vendor can query his data only.
   I think this is a general problem when integrate Portal and R/3, BW .
   Is there somebody had solved this problem or give any advice?
   Any discuss is welcome.
Best Regards,
Jianguo Chen

Hi,
I would say: get in contact with your SAP account manager anc check which options SAP can offer you...
Normally every user using a R/3 system has to have a valid user license in that system. Expecially when you want to access control to data on user (vendor) level you nedd to identifiy the user clearly and uniquely which by standard means you need a user for every vendor.
Hth,
Michael

Variable value to be populated based on user authorization

Hi all,
I want to have a variable with single value on plant.
when the user executes the report, value of the variable has to be populated automatically based on the authorization of the login user and it has to show the output without displaying the selection screen.
Kindly guide me of, what type of variable to create and to proceed.
Thanks.
I

Hi
Restriction Plant from user authorization can be achieved by the following steps
1. Plant infoobject should be authorization relevant.
2. make authorization object including plant and restrict to the plant u needed and assign the profile to the user
3. in BEX create variable of authorization type on plant. this variable will get the default values for the plant from the user authorization on the selection screen of the query.
4. if you dont want to display the variable on the selection screen then remove the chek box in variable that " variable is not ready for input"
thanks
radhika

Adhoc Query Report

Hi SAPients..
I have a n issue in Adhoc Query
In Adhoc query report ( PQAH ), X person having authorization to see the folder Additional Personal Data (IT0077), but Y person can access the Adoc but could not see the folder (IT0077). Please guide what should I do to make the Y person can view the (IT0077) folder??
Appreciate your support on this, Please guide me.
Shan

Hi Shan,
What I undertand is as follows:
Person is having access to view IT77 and Y person is having access to t code - PQAH (Ad Hoc Reprot). you want to give Y person access of IT77.
In this case you would need to add the concerned role to y person's SAP user id by which he ll get acces to maintain IT77 ands also can download the report. The role name you can get from your security team or GRC team.
Hope this solves your query.
Sarang Kulkarni

Hide our user defined query

Dear All Master Brains,
It is possible to hide our user defined query in Query Manager, apart from our user authorization.
I am waiting for your ..
Regards,
Team work never fails.

Hi,
Only by authorizations you can hide the user queries.
Alternate way, If you have created those query for report purpose then you convert that query into QPLD, So that users cannot view the query you developed instead they can view the report alone.
I hope this could help you.
Regards
Raja.S

CRM Analytics - User Authorization Not Suficient

Hi Guys,
We have implemented the CRM analytics report, however when I access the menu Sales Pro in CRM and try to open the report Closed Opportunities, I get the error : User Authorization not sufficient.
If I open the error I get the message :
Diagnosis
The user doesnot exist in the BI client or has insufficient authorizations
Procedure
Contact system administrator to verify the user is setup properly in both CRM and BI client
Procedure for System Administration
Verify that the user exist in BI client with the same user id, if not create it and assign proper authorizations as per the configuration guide.
When I run the query or the webtemplate in BW I don't have authorization problems, but I can't run from CRM.
Any suggestion about how to fix it?
Thanks in advance,
Fernando

Hi Fernando,
The report which you have implemented is doing a RFC call to BI system where some other system program is getting called which have authorization logic check for the RFC user ( or the person who is running the report). here report is terminating with error. I have face the similar issue.
generally such reports we use to schedule as a background job with batch user which have SAP ALL access but I feel in your case user who runs the report have not sufficent authorization in BI system and also you are not running report as an background job.
There aretwo tricks to findout the missing authorization which I also have used.
First option : close all the session except one in CRM and than run the report as soon as the error comes open transaction code SU53 to know the missing authorization - may be you can fail here as the authorization check fail in BI.
Second option definitely will work. Whenerror is coming double click on the mmessage to know the message detail(class and number) than again run the report in debugging mode (/H- type in address bar to activate debugging) than set breakpoint in the message and press f8( may be system will not set the break point immediately than you need to debug till the RFC calls BI system) . system will take you to the exact authorization code check where the error is coming. there you can find out the missing authorization object which is not included in the user assigned role. than can ask access team to add in the user role.
I hope this will solve your issue. Please revert with your finding.
Thanks,
Prem

User authorization query/report

Similar Messages

Maybe you are looking for