XCelsius authorizations

Dear experts,
Can you explain to me how do authorizations work in xcelsius?
Is it possible to customize authorizations on object level, for instance:
- user A may see gauge A but user B cannot see it
- user A may see canvas container A (and all its objects) but user B cannot see it
- user A and user B can see chart X, but user A can only see data from company A and user B can only see data from company B.
Are these customizations possible in Xcelsius?
Thank you!
Inê

Yes Possible, create a formula  
=IF(E11="","",IF(E11="xxxx","","Incorrect password.  Please try again."))
Take Text ,Label
Hope it helps

Similar Messages

  • BW Authorization and setting issue to set up a BICS connection for Xcelsius

    We are trying to create a BICS connection with Xcelsius on our BW production system and would like to know what the minimal settings should be to be able to publish and run an Xcelsius dashboard. We have been able to make a BICS connection with Xcelsius and publish and run/launch the dashboard on BW development. BW Development is completely open; there are no restrictions on the settings. But of course we cannot open our production like this. We have tried to open our BW test according to the SAP NetWeaver How to Guide: How to... Create Authorization Objects Required to Work with Xcelsius Dashboards in SAP BW. We have done the following:
    First of all we get the following message when saving a Xcelsius file to BW, when all the settings are equal to the production settings (not modifiable):
    ! The specified technical name is not valid for the permitted namespace
    !     R7     063     Namespace u2018/BICS/u2019 must be set to u2018changeableu2019 (transaction SE06)
    After that we changed the settings on our BW test environment to modifiable by doing the following steps:
    1.     SCC4 (System temporarely open; after changing the system change options by SE06; the system will be closed again)
    2.     SE06 (Namespace /BIC/ to modifiable)
    After that when trying to do the same thing as before, saving the Xcelsius file to BW, we get the following error message:
    ! The specified technical name is not valid for the permitted namespace
    !     R7     017     Namespace u2018u2019 is not a valid BI namespace
    And also this message:
    Diagnosis
    Namespace u2018u2019 must be entered in both the BI table RSNSPACE and the basis table TRSNSPACE or the view V_TRNSPACE. You also have to enter the relevant generation namespace u2018&V2u2019 in table TRNSPACE. This value is taken from RSNSPACE.
    Both namespaces must be set to u2018Changeableu2019 u2013 providing they are not empty.
    System Response
    You cannot edit or create an object in this namespace.
    Procedure
    Use a different name.
    Or contact your system administrator. He/she can switch the namespace to u2018Changeableu2019  using transaction SE06, or -  if they do not already exist - enter them in the table named above using transaction SM30.
    If the namespace u2018&V1u2019 is empty, then the problem is with the generation namespace u2018/BIC/u2019.
    Procedure for the System Administrator
    Following this error message:
    X    System is not set to changeable u2013 objects are not changeable
    When everything is set to modifiable and the BW test environment is fully open, we are able to publish the Xcelsius file to BW and the dashboard can be run on the BW data.
    What we would like to know what the minimal settings should be to be able to publish and run/launch the Xcelsius dashboard without completely setting the production setting open. And what are the other consequences of adjusting the BW production settings; any drawbacks?

    Hello,
    goto transaction RSA1 – transport Connection – button « Object Changeability » - in the list please switch ligne XCLS as « Changeable ».
    Hope that works
    Best regards
    Arno

  • #2170 error calling a webservice from Xcelsius having crossdomain.xml

    Hello together,
    we are facing a #2170 error indicating we don't have a proper policy file in place when executing a published Xcelsius flash in SAP BI application portal.
    We created a WebService that is running an SAP BI System 7.01. The WebService is function module based and was generated following the wizzard. Afterwards we created a Xcelsius app that consumes data from this WebService (via data connection). The resulting flash from Xcelsius was pulished to SAP BI System (portal).
    Since there are many entries in the SDN and the internet in general we finally also created an crossdomain.xml file on the BI system which can be accessed and is visible by using "https://<server>/crossdomain.xml".
    Now the confusion begins: We exported the flash from Xcelsius to local desktop and executed the corresponding HTML-file. It's working and I can receive/see WebService data (after adjusting flash-security-settings). If we upload both exported files (html and swf) to the BI system (as MIME objects) and execute the html again we are also receiving WebServervice data. So far so good. But if we execute the link from the SAP BI Portal (Xcelsius menu > SAP > Start) we still get the error #2170 indicating we don't have a proper domain policy file in place. But for my understanding we do have. So currently I would assume the error message is somehow misleading.
    During all the activities I found out that this error is also raised if the user has insufficient authorization. My user has SAP_ALL authorization for testing purpose.
    In general I would say we are not that wrong with our Xcelsius/WebService if we are not coming from BI portal. So my questions are:
    1.) Are there any authorization on portal side that might not fit and lead to this error? If insufficient authorizations produces such an error ...
    2.) Did we miss any other stuff during our try/fail-operations?
    Many thanks in advance for your hints.
    Steffen

    Hi Rajat,
    This is how the default trace looks
    FATAL: Application Servlet failed to notify devices.
    Caught java.rmi.RemoteException: Service call exception; nested exception is:
         com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (503) Service Unavailable. The requested URL was:"http://<<server>>:50000/ManagementService/ManagementService?style=document"
         at com.om.mws.standaloneproxy.ManagementServiceBindingStub.notifyDevice(ManagementServiceBindingStub.java:1289)
         at com.om.mws.standaloneproxy.ManagementServiceBindingStub.notifyDevice(ManagementServiceBindingStub.java:1298)
         at com.om.ApplicationServlet$NotifyDevices.run(ApplicationServlet.java:86)
    Caused by: com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (503) Service Unavailable. The requested URL was:"http://<<server>>:50000/ManagementService/ManagementService?style=document"
         at com.sap.engine.services.webservices.jaxrpc.wsdl2java.soapbinding.MimeHttpBinding.handleResponseMessage(MimeHttpBinding.java:980)
         at com.sap.engine.services.webservices.jaxrpc.wsdl2java.soapbinding.MimeHttpBinding.call(MimeHttpBinding.java:1430)
         at com.om.mws.standaloneproxy.ManagementServiceBindingStub.notifyDevice(ManagementServiceBindingStub.java:1282)
         ... 2 more
    java.lang.NoSuchMethodError
    at java.lang.Thread.destroy(Thread.java:779)
         at com.omApplicationServlet$NotifyDevices.run(ApplicationServlet.java:92)
    Rgds
    Shashank

  • XCelsius 2008 connectivity to SAP Netweaver BW

    Hi All
    I have installed xcelsius 2008 SP2(trial version) and trying to connect it to our BI (Netweaver 7.02) system through SAP NETWEAVER BW connectivity provided in xcelsius.
    While connecting it gives an "error : 2032" . I have some questions regarding it :
    1.  Does licensed version is necessary for making a connection ?
    2.  Do we need to install some Webserver like Apache TOMCAT to run it successfully ?
    3.  If answer to  point 2 is yes , then how can i move forward to config the TOMCAT and establish the connection ?
    4.  The prerequisite , NW 7.0 EhP1 SP5 with ABAP and Java stacks , on server side , means Portal(Java) + BI(ABAP) system or something else ? 
    As per note 1408384 , i have checked wsnavigator for bicsremote connectivity , that is working fine.
    Thanks in advance.

    Hi Karan,
    we are also facing this issue which is getting on our nerves.
    Our BI Backend has EHP2.
    We have also tried different versions of Xcelsius 2008 (3.2, 3.4, 4).
    No chance. After the password entry to our BI backend the system is working. And it ends without getting the query (meta) data  inside. We only see the query names. But after choosing they are not opening.
    Authorizations in Backend and Portal should be fine.
    The web services seem to run.
    So we absolutely have no idea.
    The evaluation version I also dont have. Because I could connet to another BI an could read the query.
    We are wordless. Stay tuned..
    Best regards Harry

  • Row level security in Xcelsius through scheduled reports?

    Hi Experts,
    Our requirement is to implement row level security in Xcelsius dashboards from SAP BW source through Bex queries which would have authorization variables. We have seen that these Bex authorization variables work in Webi reports and security is applied appropriately. But do they work in upto Xcelsius as well, if we use Live Office Parameter binding option? If it does, then do we need to create prompts agian in Webi?
    We have also seen that security is applied if we use the BICS (SAP Netweaver native connectivity) option. However our objective is to schedule as many reports as possible in the dashboard to save on report refresh time at run-time, which is not possible is BICS or QAAWS. Therefore the best option for us would have been if we could apply row level security on scheduled reports.
    Can you please advise on the best approach? Your help is greatly appreciated.
    Thanks,
    Sougata

    Since you are using BEx queries as data sources authorization variables is the only way to apply row level security. This will work fine also for XCelsius dashboards that run in the InfoView (in an SAP logon context eg. when the user uses it's SAP credentials to login into the InfoView) and fetch data on-demand over LO from your WebI reports. Just make sure that the underlying webi reports are set to use SSO.
    If you are using scheduled report instances no row level security is applied depending on the context of the user that started the dashboard. XCelsius will get the data that have been saved in the instances. In this case the row level security has been already applied at the moment the report instance was created BUT for the user who scheduled the reports to run.
    Regards,
    Stratos

  • COM exception in Xcelsius

    Hi Experts,
    I'm gettng a strange error.When i'm trying to connect to bex queries(BICS connectivity in Xcelsius) of my Development system outside my company network , i'm getting an error called "COM exception".Can anyone tell me about this?
    Is this error related to xcelsius or is it some firewall issue?
    My version of Xcelsius :2008,SP4
    OS: Windows 7
    Thanks and regards,
    Abhishek

    Hi,
    Check if your BW id has necessary authorization to access functional modules required for xcelsius connection. Refer below thread also.
    [http://www.forumtopics.com/busobj/viewtopic.php?p=734002]
    Hope it helps you.
    Regards,
    Nikhil Joy

  • Xcelsius with XMLA or XML Query Result Set

    Hi Experts,
    I want a direct connection from Xcelsius to my BW-Data. Because the new connection, coming with Fix Pack 2.1 is only avaiable for EHP 1 for NW 7.0 I tried to configure with XMLA and XML Query Result Set.
    This Document tells the necessary steps: How to integrate Xcelsius 2008 with SAP NetWeaver BI without Integration Kit.pdf.
    When I test my XML connection over http://<host>:<port>/TXmla/srvlet/TestXmla my Cubes will display.
    So I do a Webservice-Connection with WSDL-URL. At Input-Values there are some entries like CUBE_NAME, CATALOG_NAME...
    Output values arent avalible. How do I use these elements to show my Data in Xcelsius?
    My Problem with the XML Query Result Set Connection is, that when I Log On to VC the following error appears:
    You are not authorized to view the requested resource.
    So I get the authorisationobjects: S_DEVELOP and S_RS_COMP as describe in 'How To... Resolve Visual Composer Issues'.
    What values have I to enter by S_RS_COMP? And how can I enter my External Service in S_SERVICE. At the type WS the service isnt't avaiable.
    Regards,
    Jan

    To use XMLA web service you need a wrapper function build to convert the XMLA output to the Xcelsius format. There are some documents available in SDN on how to do this.
    You can use Live Office or Query as a Web service option to connect from Xcelsius to BW.
    S_RS_COMP is the query ID which you are trying to access, S_SERVICE you can either give * or try to set up authorization log and see the expected value.

  • Different authorizations for a Dashboard in a SAP NW BW Portal

    Hi everybody,
    we would like to use BO Dashboards / Xcelsius in our company. Everything is fine and the dashboards are looking fantastic. Since we would like to publish them on our SAP BW portal I have a question. Given a dashboard with a SAP NW BW connection that is published as an iView in the portal. And we have users with different authorizations. For example there is user A with the authorization to see data from a BW query for departments ABC and there is a second user X with the permission for dept. XYZ.
    Is it possible to configure the connection / dashboard in a way that only the data is used for the dashboard in dependence of the authorization at the SAP portal?
    Thanks for your help!

    Hi,
    The person who creates the dashboard should have a BW ID which should have access to all the data required for the dashboard and as well access to EP portal. Else he wont be able to test and validate the dashboard once the development is done. 
    The BW ID's belonging to the users with which they will access the dashboard, if already created or need to be created , then you can ask the authorization team to extend these ID's to EP System as well as provide the necessary BW Roles, ie access to the related queries and info providers. Once this is done they will have access to EP portal as well as the dashboard and the data displayed will be based on the roles provided to the ID.
    For ex User A will only see departments A-D and the User X will see Departments X-Z. You need not write logic for Dynamic Visibility as such for this. Once the roles are assigned to the users they wont be able to see any other data apart from the ones assigned to their ID's.
    Thanks & Regards,
    Arjun.C.T

  • Xcelsius Enterprise 2008 Installation need in BO server?

    Hi All,
    We have got Xcelsius Enterprise 2008 license. Our goal is to create dashboard by Xcelsius Enterprise 2008 and view through BO Infoview.
    Do we need to install Xcelsius Enterprise 2008 in Business Objects Server? I think Xcelsius Enterprise 2008 is a client tool, so we don't need to install in Business Objects Server. Please correct me if I am wrong.
    Thanks
    Jai

    Thanks Andy. Yes we have already installed Xcelsius Enterprise 2008 in client machine and published some dashboards in Infoview. I just want to make sure whether my approach is right (not installing Xcelsius in Server).
    Becasue I have a concern how the data level securtity (authorization) in Xcelsius Dashboard for different users will take care if we don't install Xcelsius in Server.
    Thanks
    Jai

  • BO Edge Series, CR2008, Xcelsius Enterprise 2008 installation question

    Hi,
    I have referred "BO and SAP - Installation and Configuration Part 1 of 4" and all other parts of Blogs by Ingo Hilgefort. I have downloaded the software required for installation and followed the steps to install all of the software. However, I had some issues after the installation.
    First - I am installing the Edge series on Windows Vista Enterprise, service pack 1; 32bit OS. While reading the minimum requirements I had assumed that we can install the Edge series on the Vista laptop. I have not installed any database server before Edge series installation -
    So, do I need to install any Database like MS SQL server/ database before the edge series installation?
    I have no problem in following the steps in the blog series by Ingo until part 4:
    SAP Java Connector: 
    The SAP Java Connector is being leveraged from BusinessObjects Edge and the SAP Integration Kit as part of the SAP Authentication plug-in in the Central Management Console.+
    You can download the SAP Java Connector from the service marketplace (http://service.sap.com/connectors).
    I am downloading the version 2.1.8
    After unzipping the Java Connector download, I copy the file sapjco.jar to the shared library folder of the application server (in my example : \Program Files\Business Objects\Tomcat55\shared\lib)
    +and the file sapjcorfc.dll to %windir%\system32.
    I could not find the path "\Program Files\Business Objects\Tomcat55\shared\lib" and "%windir%\system32" to add the files specified above.
    Do I need to install the Tomcat first before the Edge series installation or it comes with the installation of the Edge series?
    Please note that after completing all the installation except the above Java files - I could see:
    1. BW Publisher Service 12 (Manages a pool of Crystal Report publishers) - which I have trouble starting this server
    2. Server Intelligence Agent (Manages BO Enterprise Servers) - No problem starting this server
    3. WinHTTP Web Proxy Auto-Discovery Service (WinHTTP implements the client HTTP stack and provides developers with a Win 32 API and COM Automation component for sending HTTP requests and receiving responses. In addition, WinHTTP provides support for auto-discovering a proxy configuration via its implem....) - I could start the server but stops automatically
    I could not open the "Central Management console" and other tools under Programs->BO Edge series
    Appreciate any suggestions on this. I am even ready to give a second try starting from begining if one could point me to the right direction.
    Thanks in advance.
    Regards,
    Sudha

    Thanks Andy. Yes we have already installed Xcelsius Enterprise 2008 in client machine and published some dashboards in Infoview. I just want to make sure whether my approach is right (not installing Xcelsius in Server).
    Becasue I have a concern how the data level securtity (authorization) in Xcelsius Dashboard for different users will take care if we don't install Xcelsius in Server.
    Thanks
    Jai

  • Authorization for dashboard publishing

    Hi,
    I'm using the Netweaver BI connection on Xcelsius. When I try to publish my dashboard, I recieve the error "You don't have the necessary authorization to perform this action".
    I've already got some portal roles like "Super Administration", "System Admin", "Content Admin" etc.
    Does anyone knows the role names that are needed to publish the dashboard?
    Thanks,
    Erdem

    Hi Victor,
    Thanks for the information. As I also ran into the same problem.
    If any body faces the same problem and unaware of security activity like role creation then here is a link. Go to 4 th Option. The document has the step by step guide for it.
    http://wiki.scn.sap.com/wiki/display/BOBJ/Xcelsius+2008+and+SAP+NetWeaver+BW+Connection?original_fqdn=wiki.sdn.sap.com
    Thanks and Regards
    Dibyajoti

  • Refresh of Data in Xcelsius from Web Intelligence Results

    Hello,
    I am new to the forum but not to Business Objects/Xcelsius.  I attended the SAP Sapphire Event last May and spent time in the Business Objects lab.  Two Product Managers demonstrated how I would be able to refresh the data in an Xcelsius dashboard using Live Office by retreiving results from a Webi document without refreshing the Webi query. 
    For example, my Webi document contains 100,000 result rows.  I want to be able to select a dropdown in my dashboard and have Live Office retreive only a subset of the 100,000 rows.  This being done without having the Webi query being refreshed from the database.  The Webi query would be refreshed nightly.
    The Product Managers advised that this functionality would be available in Service Pack 3 or before.  As of now I cannot find out how to make this work.  Any help or information would be appreciated.  Thanks.

    Hello Charles,
    WebIntelligence Input Controls are a way to enhance and customize user experience with report filters, they are therefore based on report filters and the feature is more focused on user interface & experience rather than exposition outside web intelligence.
    Anyway, AFAIK, report filters are not available from Live Office report parts, you can only filter content with prompts, which requires the document to be refresh from the database, which has a direct impact on performance and scalability for consumers.
    However, if you are with WebIntelligence XI 3.1 SP2 you have the alternative to publish from WebI Rich Client, report elements (any table or chart) as web services (called BI Services).
    This tool is based on Qaaws technology, and share some of its features (main being that is uses the same Xcelsius Data Manager connection), it exposes a large part of WebI interactions to external consumers (esp. Xcelsius) : report filters, drill, prompts.
    Besides this tool provides a set of call input parameters to tune web service consumption for best performance and scalability, enabling to leverage WebI document management features like scehduling, publishing and refresh, so consumers can balance performance with real-time data.
    More information is available from WebIntelligence Rich Client user documentation from section sharing webi content with other web applications.
    I recommend you install the latest fix pack (SP2.5 and above), as some initial fixes were required to ensure full compatibility with Xcelsius.
    Hope that helps,
    David.

  • Open and close posting period authorization control TCODE: S_ALR_87003642

    HI All,
    Is there any chance to control the user to open and close another company code posting period variant in TCODE: S_ALR_87003642.
    In our system we are using the same client for different countries. So user can able to change the other country company code posting periods.
    We would like to control either on the country (or) organizational unit(company code) (or) posting period variant so that user can only open/close  their country / company code posting periods.
    Our present authorization role for open and close posting period contain the auth.Obj. : S_TABU_DIS.
    Please share your knowledge if you come across this problem..
    Thanks in advance..

    Hey Sandhya,
    Congratz, this can be done using linbe item authorization with the object S_TABU_LIN.
    Field ORG_CRIT - Value 02
    Field ORG_FIeld1 - Value ZT001B
    We have successfully done it in our client.
    You need to contact your BASIS consultant for this.
    Thanks,
    Nitish

  • Analysis Authorization in BO 4.0 Webi report

    Hi All,
    I am using BO 4.0 and creating connection from Information Design tool to a BW query using BICS client. This connection is then published to CMC.
    We are using SAP authentication and importing the roles from BW system. We have added profiles to this role and these profiles have Analysis Authorization set on Company Code. So one user can access data to one company code and vice versa. Now this works well in Bex Analyzer, but if I try to create a report in Webi, the analysis authorization fails. I went through the forum before posting this question and I found that is in 3.1 version and in most cases using SSO in universe connection solved the problem.
    However in 4.0 I am using BICS client and followed the same processes to create a connection but for some reason it doesn't work ? Is this suppose to work differently in 4.0 ?
    I have tried:
    1. To create connection in Information Design tool using SSO, selecting user ID and password. It doesn't work.
    2. Checked the Bex query and it already has Company code as a Characteristic restrictions (I have made it a mandatory variable).
    3. Publish the connection to CMC with my Enterprise and SAP ID and in both cases it doesn't work.
    Please let me know if anyone encountered a similar issue and what is the best method to resolve this.
    (BO 4.0 no service pack or fix pack installed on the system yet)
    Thanks - Appreciate your help !
    Prasad Rasam

    Ingo,
    1. To create connection in Information Design tool using SSO, selecting user ID and password. It doesn't work.
    >> Correct you need to setup you OLAP Connection with SSO.
    >>> What I meant was I created the connections using both the methods, Using SSO it allows me to create a connection. The ID which I am using to create a connection has Admin access to BOBJ system. When I login as a regular user to create a Webi report and select this new connection, it throws an error message 'The DSL Service returned an error: com.businessobjects.dsl.services.workspace.impl.QueryViewAnalyzer$CannotGetCubeFromConnectionException: Cannot get the cube from the connection'
    Using the other method to create a connection with User ID and password, I can create a connection and with the normal user login I can connect to the BW query but Analysis Authorization doesn't work.
    Ingo : Could you be more specific what you mean here with the different users ? When you say "regular" user are you referring to an SAP credentials or SAP BusinessObjects Enteprrise credentials ?
    2. Checked the Bex query and it already has Company code as a Characteristic restrictions (I have made it a mandatory variable).
    >> The variable in the BEx query needs to be an authorization variable.
    >>> This has already been set as Authorization variable. There is still a question here. If I select the variable as Authorization variable, I cannot set the other parameters in the query properties such as Mandatory variable (as this is greyed out).
    Ingo : What other parameters would you like to configure ? Could you perhaps describe the scenario with more details ?
    regards
    Ingo Hilgefort

  • Analysis Authorization Issue 7.3

    Hello Friends,
    System BW 7.3, Currently there are 80 odd analysis authorization objects
    We want to introduce a new info object (GL Account) to be authorization relevant, ( there are few objects in the system which are already authorization relevant in the system with proper analysis authorization objects and they are working fine)
    Things done, made the GL Account object authorization relevant in RSA1, Created 2 analysis authorization objects with GL Account and TCT objects and one with hierarchy restrictions and one open access.
    Added this object to the user in addition to its already existing authorization objects. Created authorization variable in BEx.
    Some how the authorization is not picked up and it gives us all the values in the report. But if I add the GL Account info object to the existing analysis authorization objects then it works fine.
    I do not want to change all the existing analysis authorization objects to add GL Account.
    Your inputs are most welcome.
    Thanks
    Ed.

    Gajesh- I have added the new analysis authorization object to the user in RSECadmin.
    Subhendu- Problem statement: What are the steps involved in making a new info object(GL Account) authorization relevant. Authorizations are given at hierarchy level. Can we create a new analysis authorization with  GL Account only or do we have to add it to every existing analysis authorization
    I have done the following steps
    1. Made the GL Account object authorization relevant in RSA1,
    2. Created 2 new analysis authorization objects with GL Account ( with hierarchy restrictions) and TCT objects and one with GL Account open access.
    3. Added this object ( which has restrictions) to the user in RSECADMIN, in addition to its already existing authorization objects.
    4. Created authorization variable in BEx.
    5. No existing analysis authorization objects have been changed.
    When I test the report, It does not restrict based on the hierarchy that I have given, it gives open access.
    But If I add GL Account with restrictions to the existing analysis authorization object, it works good.
    Guess I am missing some thing here.
    Do you need any other screen shots.
    Thanks
    Ed.

Maybe you are looking for