What object is required to give Admin's access to all Queries/Roles?

Hello,
We are creating many roles now in BW.  Our Admin needs access to each of these roles to put in queries/reports.
I need access to these roles to run the Analysis tool and test.
Right now I am giving every role/container created.  There must be an easier way.
Is there an object that I can give to the Admin role and Security role so that I do NOT have to assign each role individually??
Thanks, in advance, for your help.
Penny

Hi there,
In rsecadmin you could assign to the user the manual authorization object named "0BI_ALL", this would bypass the authorization objects of the query for that user, i.e., he/she could execute every query and would have authorizations to execute any query, but this wouldn't assign none of the roles to the user.
So if you want a user to have the roles, so that this user can insert queries in those roles, you'll have to assign the roles to him/her. And either you assign those roles one by one, or you could do with the program.
Maybe there is another way, but I'm not aware of.
Regards,
Diogo.

Similar Messages

  • User in hr can able to create records in PA30.But will give read only access for all infotypes

    Hi Team,
    I have created one test role in HR. It will give Read access to all info types.
    But user can able to create Info type records in PA30. Please find the P_ORGIN values below.
    Authorization level            R
    Infotype                       *
    Personnel Area                 US
    Employee Group                 1
    Employee Subgroup              U*
    Subtype                        *
    Organizational Key             *
    OOAC values.
    AUTSW ADAYS       15
    AUTSW APPRO 0
    AUTSW DFCON 4
    AUTSW INCON 0
    AUTSW NNCON 0
    AUTSW NNNNN 0
    AUTSW ORGIN 1
    AUTSW ORGPD 4
    AUTSW ORGXX 0
    AUTSW PERNR 1
    AUTSW XXCON 0
    Note : user does not have access to any structural profile.
    I suspect is this bcz, if any user has proper 0105 and 0001 in HR master data can able to create records.Bcz user will be assigned to default sap structural profile "ALL"  in OOSB ?
    I can see user was not assigned to "ALL" profile in OOSB or in T77UA. and user cant able to write or change infotype data in pa30.
    Please suggest how the user can able to create  inftotype records in PA30.(Info :0002 for example)
    Appreciate Quick response.
    Regards,
    Venu.

    Sorry did not get the below comment.
    "The maintain flag in the structural profile does not relate to any maintenance authorization in PA.  It only affects the OM objects authorized by the structural profile.  For example the user may be able to delimit a position.  It will never grant any write authorization for any PA infotype "
    Do you mean , suppose if we give Org unit and evaluation path like attached screen ,user will get access to only the ORG UNIT  as its object type (can able to perform activities as mentioned in the role PLOG ) but cant perform any activity like address infotype change on the person (P) (as mentioned in P_ORGIN) who comes under the org unit mentioned in Structural profile ?
    My understanding is that i believe user total auth is an intersection of general +structural authorization.lets take HR admin wanted to change 0002 data   for some imps in org.We need to give access to that particular org to which the emps belongs to (through structural auth) and SHOULD CHECK the maintenance box in strucural auth and will access change access via role.
    And user cant able to edit his own data.
    Please find the Screens as requested. Please let me know if my understanding is correct or not ?
    Regards,
    venu.

  • What authorization object is required for MIME repository objects?

    Hello
    Can someone tell me what authorization object is required for displaying MIME repository objects?
    Thanks,
    József.

    Hi,
    This thread may help you.
    Re: Authorizations for stylesheets/MIME?
    Thanks,
    JituK

  • Generally what objects we have to place in query designer ?

    Hi all,
    Iam new to sap bi reporting.
    We have free characteristics pane,colums and rows pane.
    Generally what objects we declare as free characteristics ,rows and columns pane.
    Please give me some example for this concept .
    Regards,
    Swami.

    Hi
    I explain you one scnerio here which i have done in one of my implementation project
    there is one MM report for material consumption in this user want data in two diffrent way at bex level
    Fields which i used for his report is : Material number, plant , storage location,mrp(Key fig),quantity(Key fig ), date field, movement type.
    1 Requirement from user : They want data st BEx level on date wise and material wise so i put date material number storagelocation and plant in to row and put quantity and its related price value in column so out put of the report shows consumption each material in seprate seprate line
    date -
    material-number--movement type--
    qty
    1 -
    1234--101--
    12
    1--12102--
    12
    1 -
    134--101--
    12
    1 -
    123--104--
    12
    result----
    48
    2 Requirement from user : They want summarize data so i put   material number ,movement type into free charactics and out put of this report is
    Material number
    Movement type
    date----
    qty       
    1 -
    48
    and if user wants that result on material wise then he just double click on material number and report is drill down as per material number and quantity comes with material number
    So we use free char... if we want data in sumarize format and drill down format
    hope its useful to u
    points !!!!!
    Ankit

  • What are the required settings for Quality Certificate

    Hi Team
    What are the required settings for Quality Certificate for Raw material from vendor. This is my RR - Result Recording  for inspection lot.
    Please sugget me T-Code to view this.
    Can I see say for 6-9 months RR done insp. lot.
    Thanks

    Settings for Quality Certificate for Raw material from vendor,
    Activate QM Procurement key, enter qm control key with certificate and Enter certificate type in certificate field.
    There are 2 cases,
    u want details of certificate send by vendor
    u want to record results and see inspection lot wise results.
    case1
    depending upon the certificate selected by u, system will give u warning or error msg for certificate confirmation at the time of gr. for confirmation QC51 t_code is used. here status has to be changed to 'filed and inspected' then gr will be allowed.
    all these certificates can be dispalyed in QC55 T_CODE.
    CASE2
    U can record results and see in inspection report tab in QA33
    Edited by: YOGINI B THORAT on Aug 4, 2009

  • What settings are required for DP_PROC_TY,CT_PROC_TY,TEND_TYPE

    hai friends
    what settings are required for DP_PROC_TY,CT_PROC_TY,TEND_TYPE
    Thanks a lot
    Regards
    VinayKrishna

    Hi Vinay,
    1. For DP_PROC_TY  you need to give the transaction type or R/3 document type you want to use for creating direct material POs. Could be ECDP given in the standard or copy of which you might  have created.
    2. For CT_PROC_TY it is either PCTR or GCTR depending what you want to create local contract or GOA.
    3. TEND_TYPE can have BID, RFCR etc depending on what type of bid invitaion you want to create form sourcing cockpit or as follow on bid invitaion.
    Ragards,
    RRK.
    Do reward points for useful answers
    Edited by: Ramakrishna Rallapalli on Jun 16, 2008 9:06 AM
    Edited by: Ramakrishna Rallapalli on Jun 16, 2008 9:06 AM

  • What cast is required to run this code ?

    public class tempClass {
    public static void main(String[] args) {
    Object object = new Object();
    double goodBoy[] = new double[10];
    double badBoy[][] = new double[1][10];
    goodBoy[0] = 1.0;
    goodBoy[1] = 2.0;
    goodBoy[2] = 3.0;
    goodBoy[3] = 4.0;
    goodBoy[4] = 5.0;
    goodBoy[5] = 6.0;
    goodBoy[6] = 7.0;
    goodBoy[7] = 8.0;
    goodBoy[8] = 9.0;
    goodBoy[9] = 10.0;
    object = goodBoy;
    badBoy = object; //what cast is required here ?
    System.out.println(badBoy[0][1]);
    }

    you also might consider this, which seems like it might meet the original intent better:
      public static void main(String[] args) {
        double goodBoy[] = new double[10];
        double badBoy[][] = new double[1][10];
        goodBoy[0] = 1.0;
        goodBoy[1] = 2.0;
        goodBoy[2] = 3.0;
        goodBoy[3] = 4.0;
        goodBoy[4] = 5.0;
        goodBoy[5] = 6.0;
        goodBoy[6] = 7.0;
        goodBoy[7] = 8.0;
        goodBoy[8] = 9.0;
        goodBoy[9] = 10.0;
        badBoy[0] = goodBoy;
        System.out.println(badBoy[0][1]);
      }

  • What is Material Requirement Planning

    what is Material Requirement Planning since i am a beginner in Supply chain management

    Material Requiremnts plan and master schedule (MRP) answers two quisitions:
    1. How mauch you need to supply (Make/Buy).
    2. How much resource Hours needed to produce.
    MRP is an unconstrained, and infinite planning engine. this means, if you have a demand (Sales order/Forecast), the planning engine recommend actions to be done based on demand due date only regardless of capacity or material availability, and it gives you exception messages to take action; as a planner; regarding anything that may violate satisfying the demand in that due dates.
    Best regards,
    Mostafa

  • Should the admin/user folder and all of its sub folders be moved to the hdd or just parts of it? (eg. picture, movies, documents)  What is the best way to go about doing this.  Also should a 2t hdd be partitioned.

    iMac with 256ssd and 2t hdd. Should the admin/user folder and all of its sub folders be moved to the hdd or just parts of it? (eg. picture, movies, documents)  What is the best way to go about doing this.  Also should a 2t hdd be partitioned.

    Yes, you can move your user directories to the HD and keep your OSX and Applications on the SSD drive.
    Whether you partition your HD or not depends on how much data you have and how you propose to use your HD.
    Are you planning to use your iMac as a Time Machine backup volume? If so, partition it off.
    Do you have huge data files, eg video, music, photos?
    How much of your 2tb drive will be "free" once it is loaded with all your data?
    A little more information is required before the optimal configuration can be recommended for your use.

  • What changes are required for OSS note 456507

    Hi All,
    PLease advise me what changes are required for OSS note 456507 (Assign the function groups QOWK or ORFC in the authorization object S_RFC to tRFC/qRFC users).
    I’m thinking of just going with the following additions to Role
    AAAB – Cross Application Auth Objects
    S_RFC
    Activity – 16
    Name of RFC - *
    Type of RFC - *
    But wanted to check what the implications of doing such a thing were, are there any negative points that you can think of opening up the access as above, as opposed to what was suggested in the OSS note?
    Your advice would be greatly appreciated.
    Thanks in Advance.
    Regards,
    Sandhya.

    Hello Sandhya,
    S_RFC is needed in case of making any RFC calls.
    Normally it is needed  for users that are mentioned in RFC destinations.
    As such mostly these users are system/communication users or super users.
    Without giving access to function groups through S_RFC successful RFC call can´not be done.
    Now the value of field name of RFC can be * but only for those users which are really global super users. In case you need this authorization for any selective functionality as in you case only for function groups QOWK or ORFC then you should try to  restrict the access. Negatiity is only that in case of * the authorization access increases but for system or super users you dont need to worry too much really because with system/communication users no one can login and the super users will have sap_all generally. Also their passwords will be a well kept secret so that a miususe can not be made.
    By global super users I mean users which are used for various types of activites.
    Please award points accordingly.
    Regards.
    Ruchit.

  • What provision should i give to user accessing applications via Smartview?

    What provision should i give to user accessing applications via Smartview in Shared Services.?
    Would Server access do? Or i need to give something else?
    Requirement is tht the user should be able to retrive and submit data via Smartview.

    You need to provision the user with server access - this will give the user the ability to connect to the Essbase server in Smart View only. The user will not see any applications listed.
    Then provision the user as write on each application you want them to see and submit data.
    Regards,
    Robb Salzmann

  • Change Individual Material - What are the required parameters?

    All,
    I've just started using ES Workplace to test out some of the packaged SAP services.  I've been able to successfully use the "Find Material Basic Data by Elements" service to search for materials.  But now I'm having trouble with the "Change Individual Material" service and getting it to do anything.  Specifically, I can invoke the service from WS Navigator and it says that it executed successfully but the fields that I was attempting to chagne are not changed on the material. 
    So, I have two questions:
    1.) Where is the documentation for each service which defines which fields are reqruied for the service method to execute successfully?  I don't see it anywhere.
    2.) For this service in particular, what fields are required for the service to execute?  Say, for example, that I want to change the volume of a material.  Which fields need to be populated?

    I can see some sample test data is also given there, please see link posted in previous post (but for ERP).
    Regarding your question about so many fields required to update certain data then please remember these services are created to be very generic so you pass lot of data which you may not want to update but only change field which you want to update and it should work.
    Same service you can use to update different attributes of Individual Material.
    One more thing, you are reading data using material service and trying to update individual material, is it correct? i thought they are two different thing.
    Regards,
    Gourav

  • I want to start a new iTunes U course for catolog and I don't know what can I do please give me description about this title.

    I want to start a new iTunes U course for catolog and I don't know what can I do please give me description about this title.

    If you haven't already done so then you can contact iTunes support via this page and ask them why the message is appearing (these are user-to-user forums, we won't know why) : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page

  • Is there a way for end users to give their manager access to change their Out of Office, without an admin involved?

    Our end users need to be able to give their managers access to enable their out of office. 
    question 1.  Can this be done without giving them full access?
    question 2.  If they need full access, can the end user themselves give this access? (I've tried giving another user "owner" rights, but the user still can't seem to open my calendar from OWA to adjust my out of office)
    question 3.  Can this be done without an Sys Admin being involved?

    You can create a RBAC role for each manager scoped to each of their employees that lets them run the Set-MailboxAutoReplyConfiguration cmdlet on the exchange server. Otherwise they will need full access to the users mailbox which an admin would have
    to grant, the end user can not grant this permission. Then they can open the other users mailbox in OWA and set the OOF
    DJ Grijalva | MCITP: EMA 2007/2010 SPA 2010 | www.persistentcerebro.com

  • How do I find out what object is "instance 0xfc78f70"

    At the point of, or after an exception, the debugger tells me there is a problem, such as:
    -[__NSCFArray length]: unrecognized selector sent to instance 0xfc78f70
    *** Terminating app due to uncaught exception 'NSInvalidArgumentException', reason: '-[__NSCFArray length]: unrecognized selector sent to instance 0xfc78f70'
    Given that this might be an NSArray, I've put code *Everywhere* all around my NSArray items such as....
                element = [m_UserDetail objectForKey:@"education"];
                if ( [element isKindOfClass:[NSString class]] ) {
                    if ( [element length] || [element1 length] )
                        return 20.0f;
                    else
                        return 0.0f;
                else if ( [element isKindOfClass:[NSArray class]] ) {
                    if ( [element count] )
                        return 20.0f;
                    else
                        return 0.0f;
    And I still get the error.
    Analyse tells me there are no memory leaks, so I am expecting that no objects are going out of scope, as fixing things for Analyse has usually resolved problems like that in the past.
    How do I determine what object, or what module this is in.  BT tells me nothing useful:
    *** First throw call stack:
    (0x32a818bf 0x368eb1e5 0x32a84acb 0x32a83945 0x329de680 0x3148cadd 0x42309 0x5686b 0x37c0c50f 0x32a4d577 0x329d90cf 0x37b803fb 0x16ebb 0x3ad79 0x37c43c39 0x37b9b6e9 0x37b9b6b3 0x37b9b5d5 0x33ab6901 0x33aab5a1 0x33aab695 0x33aab29f 0x33aab1d5 0x32a55b03 0x32a552cf 0x32a54075 0x329d74dd 0x329d73a5 0x38118fed 0x31322743 0x13055 0x13014)
    terminate called throwing an exception(lldb) bt
    * thread #1: tid = 0x1c03, 0x32c7e32c libsystem_kernel.dylib`__pthread_kill + 8, stop reason = signal SIGABRT
        frame #0: 0x32c7e32c libsystem_kernel.dylib`__pthread_kill + 8
        frame #1: 0x36feaf5a libsystem_c.dylib`pthread_kill + 54
        frame #2: 0x36fe3fea libsystem_c.dylib`abort + 94
        frame #3: 0x37f47f6a libc++abi.dylib`abort_message + 46
        frame #4: 0x37f4534c libc++abi.dylib`_ZL17default_terminatev + 24
        frame #5: 0x368eb2e2 libobjc.A.dylib`_objc_terminate + 146
        frame #6: 0x37f453c4 libc++abi.dylib`_ZL19safe_handler_callerPFvvE + 76
        frame #7: 0x37f45450 libc++abi.dylib`std::terminate() + 20
        frame #8: 0x37f46824 libc++abi.dylib`__cxa_rethrow + 88
        frame #9: 0x368eb234 libobjc.A.dylib`objc_exception_rethrow + 12
        frame #10: 0x329d7544 CoreFoundation`CFRunLoopRunSpecific + 404
        frame #11: 0x329d73a4 CoreFoundation`CFRunLoopRunInMode + 104
        frame #12: 0x38118fec GraphicsServices`GSEventRunModal + 156
        frame #13: 0x31322742 UIKit`UIApplicationMain + 1090
        frame #14: 0x00013054 Iris3D`main + 60 at main.m:13
    (lldb)
    This reason, "'-[__NSCFArray length]: unrecognized selector sent to instance " in other web postings at stack-overflow suggest checking NSLog statements, and I've also done that as well.
    I've checked every "length" statement in my program (126) occurrances, and every NSLog statement (110) occurrances, making sure they all begin with a string format, @" .." and everything looks good.
    ====
    Background
    =========
    I'm merging information from 3 individual tab-bar tableViewControllers into a single tab-bar item with a single TVC using 3 sections, and everything LOOKS clean, but when I introduce the module with the merged tab, to the tab-bar, I get this error, even when I select a tab that was previously working and then select a table element in the WORKING module, I get the crash.
    It is a fairly complicated app, and I go through the same routines multiple times where everything works, and then "Nth" time through the same code, it crashes. If I can identify what object is getting the erroneous message, I can probably figure out where to add additional checks to the data to make sure I really have an adday, dictionary or string element.
    Thanks!

    Use the '+' at the bottom left of the Breakpoint Navigator to add an Exception breakpoint.  This should stop your program in the debugger when the error happens.

Maybe you are looking for