User/System Access Reports

Hello
We have been running SAP Business One (2005A build 680.320) for about two months. As the administrator, I will need to run access reports for our compliance requirements. Can someone tell me where within the system I can utilize the necessary tools to 1) run a user access report (including failed logins) 2) create a report on user authorizations and if possible audit system-level changes to the database?
Thank you for your advice.
Tracy Strub

Tracy Strub,
1) run a user access report (including failed logins)
<li> There is not really a report for this.
2) create a report on user authorizations
<li> If you go to Administration > System Initialization > Authorization > General Authorization ......Click Expand.... and Export this to Excel
There are no specific reports providing Authorization information by User
and if possible audit system-level changes to the database?
<li> SAP maintains a Change Log for most documents and you are view the changes when you are on any particular document by going to Tools > Change Log.
Suda

Similar Messages

Restrict user to access report of a specific layout

Hello experts,
We have a std. CJI3 report. In this report I have created a layout (see screen shot) and I want a user to access only that data of the report which comes with this layout.
Kindly suggest if there is a way to control the access in this way.
I though of creating z-report using call transaction function (to call cji3) and use screen variant for it.. but I dont want to go this way..
Kindly suggest.
Thank You.
Regards
Saurabh

That would work nicely, if you also implemented note http://service.sap.com/sap/support/notes/1113939.
However, I doubt this will be enough for CJI3, which has "Free Selections" as well as "Extended Selections" AND DB-Profiles.

SSRS user created on Report manager is different from ReportServer database userName

Hi All,
It will be quite helpful if someone can advice:
I created reporting services user on SSRS report manager as MeahK1 which is network username he was given. He is created succesfully but when he tries to access live reports, he is not able to see them because he does not have any access. When checked in
ReportServer db, this user is created as MeahK instead of MeahK1.
I am trying to see user details from the below query:
select *
FROM ReportServer.dbo.Catalog
INNER JOIN
ReportServer.dbo.Policies
ON Catalog.PolicyID
= Policies.PolicyID
INNER JOIN
ReportServer.dbo.PolicyUserRole
ON Policies.PolicyID
= PolicyUserRole.PolicyID
INNER JOIN
ReportServer.dbo.Users
ON PolicyUserRole.UserID = Users.UserID
where username like 'Meah%'
Do any one know what could be the problem as all other users apart from him are working fine and let's say if a user ID is Kh3R, then he also is user with same name in ReportServer db.
Can this problem be fixed?
Adnan

Hi Adnan,
According to your description, you want to grant a user to access report manager, right?
In Reporting Service, after installing a new report server, only users who are members of the Local Administrators group have permissions to access report manager. If we want to grant permissions for other users to access report manager, we should add users
to an item-level role and system-level role. Once the user account is added to an item-level role or system-level role, it will be added on the dbo.Users table within the ReportServer database. In your scenario, please check if "MeahK1" has been
added to an item-level role and system-level role. For more information, please refer to this article:
Grant User Access to a Report Server (Report Manager) .
If you have any question, please feel free to ask.
Best regards,
Qiuyun Yu

How do I get a list of the reports that a user has access to?

I need to be able to determine which reports a specified user has access to. This is for an application where users will be able to search and view reports that have been archived through a separate process. I've searched through the developer library, but I can't find this specific information. Can I use the ObjectPrinicpals class to get this info?Thanks!-Dell 

Hi Robert!
Yes, the presentation went well.Â It was a lot of fun to do and I had a great time at the conference.
Your suggestion works great if I'm walking down through the reports looking to see who has access to them.Â
However, I need to do this starting from the User object.Â When I use the ObjectPrincipals of the User, I get a list of the users who have the rights to modify the user.Â I did a lot of work on this last week andÂ it boils down toÂ I'm going to have to actually log in as the user (I can use trusted authentication to do this without having the user's password) and then run a query to select all of the reports in the system - this should give me just the reports that the user has access to.Â Not the most efficient way to get the data from my perspective, but it should work.
This would be a great feature to have added to future versions of the SDK.Â I need it for a couple of purposes:
1.Â To gather information to set up the security in my archive viewer application.
2.Â For auditing purposes - we currently have only Professional licenses so I don't have access to the internal auditing functionality.Â Plus, I'm not sure that that includes the kind of info I'm looking for so I'm building an app that extracts information to XML which is then used by a couple of reports so that I can provide the audit info as needed.
-Dell
Â - A computer only does what you told it to, not what you thought you told it to!

SSRS 2005 why some users can't access report server.

There is one user who can't access report server by clicking a link to a report. A window will pop up asking for login. Even he enters login, the window will keep coming back. I have set the user for that report and assigned the 'Browser' role to the user.
Other users don't have this problem. E.g. for another user I also set him up for the report and assigned 'Browser' role but he can access the same report no problem.

Hi thotwielder,
As per my understanding, I think this issue can be caused by the following two reasons:
The report server can be blocked by Firewall. If Windows Firewall is turned on, the port that the report server is configured to use is most likely closed. Indications that a port might be closed are the appearance of a blank Web page after requesting a
report, or a blank page when you attempt to open Report Manager from a remote client computer. In this scenario, we can try to open port 80 in Windows Firewall on both report server and client computers.
The report server can be blocked by browser. We should ass the report server URL to trusted site in the browser.
We can also grant the user access to site-wide operations with system-level row in report manager to check the issue again.
Please double-check we have been grand the user the browser role on the report. We can navigate to Security property of the report to check the issue.
Reference:
Configure a Firewall for Report Server Access
Configure a Native Mode Report Server for Local Administration (SSRS)
Grant User Access to a Report Server (Report Manager)
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

Getting list of reports a user has access to

Hi,
I'm new to BO and have been trying to figure out a way to get a list of reports a specific user has access to. In reading the documentation in the SDK it appears the only way to do this is to get a list of all reports, loop through them, getting the ObjectPrincipals, looping through that then checking if the objectPrincipal.Name == user.Title.
            foreach (InfoObject report in infoObjects)
                SecurityInfo securityInfo = report.SecurityInfo;
                ObjectPrincipals objectPrincipals = securityInfo.ObjectPrincipals;
                foreach (ObjectPrincipal objectPrincipal in objectPrincipals)
                    if (objectPrincipal.Name != user.Title) continue;
                    if (!sortedList.Contains(report.ID))
                        sortedList.Add(report.ID, report.Title);
This works, but takes over 90 seconds to generate the list of reports I want, as it is looping through all reports in the CMS (120). My logic is telling me there must be a better way to do this, I just haven't found the answer. It appears that calling securityInfo.ObjectPrincipals is what is taking the most time.
Advice, thoughts, suggestions are all appreciated.
Thanks
James

Ok, logging in as a user and getting a list of reports is working well and fast. But how would you recommend getting a list of all users and the reports they are assigned to. Is there a query for that using the relationship functions of Query Builder?
Thanks
James

How to find which user has access to Discoverer Reports?

I need to find users having access to Discovered reports using a script. How can I do that?

Hi,
You need to give more details...
Are you using oracle applications? are the users database users?
If you use oracle application you can use the following:
SELECT DISTINCT Disco_Docs.Doc_Name "Discoverer Workbook"
,Trunc(Disco_Docs.Doc_Created_Date) "Workbook Create Date"
,CASE
WHEN Instr(Disco_Docs.Doc_Created_By
,'#') = 0 THEN
Disco_Docs.Doc_Created_By
WHEN Instr(Disco_Docs.Doc_Created_By
,'#') > 0
AND Instr(Disco_Docs.Doc_Created_By
,2) = 0 THEN
(SELECT Fu.User_Name
FROM Fnd_User Fu
WHERE Fu.User_Id = Substr(Disco_Docs.Doc_Created_By
,2
,5))
ELSE
NULL
END "Workbook Owner/Creator"
,Disco_Users.Eu_Username
,CASE
WHEN Instr(Disco_Users.Eu_Username
,'#') = 0 THEN
Disco_Users.Eu_Username
WHEN Instr(Disco_Users.Eu_Username
,'#') > 0
AND Instr(Disco_Users.Eu_Username
,2) = 0 THEN
(SELECT Fu.User_Name
FROM Fnd_User Fu
WHERE Fu.User_Id = Substr(Disco_Users.Eu_Username
,2
,5))
ELSE
(SELECT Resp.Responsibility_Name
FROM Fnd_Responsibility_Tl Resp
WHERE Resp.Responsibility_Id =
Substr(Disco_Users.Eu_Username
,2
,5))
END AS "Shared Name / Responsibility"
FROM Eul_Us.Eul5_Documents Disco_Docs
,Eul_Us.Eul5_Access_Privs Disco_Shares
,Eul_Us.Eul5_Eul_Users Disco_Users
WHERE Disco_Docs.Doc_Id = Disco_Shares.Gd_Doc_Id(+) AND
Disco_Users.Eu_Username(+) NOT IN ('EUL5', 'PUBLIC') AND
Disco_Users.Eu_Id(+) = Disco_Shares.Ap_Eu_Id
Tamir

User Access Report

Hi,
I'm looking for an "User Access Report" but other the one in the Vibe Administration Console only with rights, that are dedicated granted to the user account, not the access rights a user get due to group memberships or inheritance.
If there is no possibility using the Administration Console does someone know a SQL-Query to query the database?
Thanks
Martin

mschuhmann,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/

Log to check as to which user has accessed which report?

Hi,
I am using BOBJ for report creation and SAP BI for datawarehousing.
The user can access these reports using the iviews created in the portal. Due to some performance testing requirements we need to check which user accessed which report and if he has drilled down to a particular level in a report, then there should be a means to know that as well.
BO offers a few standard activity reports to check which user has done which activity. However the details of drill down etc. cannot be checked using that. Please help as to how can we check that too.
Best Regards,
Neha

Hi,
See [Business Objects|/community [original link is broken]; and [Crystal Reports|/community [original link is broken]; forums for this topic.
-Paul

OIM Custom reports - User Resource Access History

HI,
I am working on OIM custom reports . I was trying to get custom user resource access history( i.e., need to include information like field changed, its old value , its new value etc are the extra info I need in the report ). To achieve this I had used UPA_UD_FORMS and UPA_UD_FORMFIELDS. I have few questions in this process..
1. The audit result does not include the about the initial access info of the user which he obtained during usr creation, the table are containing only the changes occured after the user creation. Am I missing something please suggest.
2. And update_date and Effective_from date are not in sync .. any omments
Thanks,
Anumolu.

I have been told that this historic data is stored in upa_ud_forms and upa_ud_formfields table.
However, these tables are empty in my OIM environment. Is there a necessity to enable that audit data is written?

User cannot access Crystal reports after user was deleted and recreated

We are using Crystal Enterprise XIr2. We are using Windows AD authentication. We had an issue with a user where they were deleted in Active Directory. Now they can no longer run Crystal reports. When I go into the CMC and open users I see this user. When I try to open this user I get the following error
There was an error while retrieving data from the server: Active Directory Authentication failed to get the Active Directory groups for the account with ID "8B003DF11D45B244AC3B61AB36B6C445:ALLENDG". Please make sure this account is valid and belongs to an accessible domain.
I think Crystal is still trying to access the user's old Active Directory account.
I cannot delete the user either in CMC.
Is there someway I can correct this user.
Thanks
Adam

Arjun - Thank you for your help. I looked in Central Management Console but I could not find what you indicated.
CMC--> Public Folder --> Administration Tools
In administration tool, there are two objects
1) Update Windows AD Group Graph
2) Update Windows AD Group Graph and Aliases --> Right click on this Report and click on RUN Now.
I ended up deleting the records for this user in these SQL tables and then user could access InfoView
CMS_Aliases5 (2 records for this user)
CMS_InfoObjects5 (1 record with both aliases)

How to access report designer in customer system

How to access report designer in customer system as we dont have direct acces to Customer BI System. Is there sny transaction code for report designer/web application designer or we can go through RRMX.
Thanks in Advance.

Hi
If I got your question properly, You need authorization for the accessing Client System. You can see the Reports at RSRT , RRMX may also lead to Query Analyser.
Hope it helps

Restricting users in accessing project/project reports

Hi,
We are having various Projects created thru PS Module, which can be categorized thru Project Types "Large", "Medium", "Small", "Utility" etc.
We need to block users from accessing certain projects (by Project Type or individual project itself) which they are not attached. Access should not be available for create,change,display of master data and viewing all reports to these projects. Whether it is possible within PS Module or is it possible by authorization restriction thru basis.
Please provide your valuable update.
Regards,
Vinod

Ketul,
You are right. SAP gives hierarchical reports in controlling area currency.
All hierarchical reports are report painter reports. You need to copy the report going into CJE0 and in form change the currency to company code currency for all key figures.
Later you can assign an transaction code to access these reports in company code currency.
Hope it helps.

Guest user cann't access report when using xdo_user_name

when i added xdo_user_name into the sql, the report could no be accessed by Guest user via URL.
Firstly, create a very simple report.
i have set Guest user could access Guest folder and create a report under this folder.
1.data model:
select 'a' XDO_USER_NAME,
'b' XDO_USER_ROLES
FROM DUAL
2.generate a RTF template.
3.view this report
4.get link of this report
5.log out and access this report via URL by Guest
6. access this report successfully.
Secondly, update the data model:
select :xdo_user_name XDO_USER_NAME,
:xdo_user_roles XDO_USER_ROLES
FROM DUAL
access this report via URL by Guest user again, get error message:
The report cannot be rendered because of an error, please contact the administrator.

These bind variables are bounded to the user logged in, and these are not available for guest, thats why you get these errors.
log an support ticket for this, Oracle support/team will help you on this, if they think its nice functionality.

HTML links from Full Check Accessibility report do not open the corresponding PDF links

I regularly generate full Check accessibility reports for the PDF user guides I create in MSWord. However, when I click the links in the HTML file/report generated, they are supposed to link/highlight the corresponding errors in the PDf file. Instead, I get an error message that "There was an error opening this document. Bad parameters."
How can I get the links to work so I know which section in my PDF has the error (inaccessible items).
Thanks

I understand you are creating HTML reports and then using them to find errors/view the PDFs.
Is this a new problem or have you always had problems with the links? If it's a new problem, what has changed on your system?
Can you view other PDFs in your browser?
Have you moved any of the files since you created the report -- as you may know the HTML report references a specific lcoation on your hard drive and if you moved the PDF after creating the report, it may not be able to find the file.

User/System Access Reports

Similar Messages

Maybe you are looking for