on 10-09-2013 10:26 AM
Hi Folks,
we have installed HANA Live for ERP - loaded/replicated necessary tables. Can view database table contents in HANA studio.
However, when making data previews for the calculation views no data is retrieved.
When we run query views with reporting tools like Analysis we get strange error messages
"Characteristic SAP Client has no master data for "010" or you do not have authorization"
and do not get pass the initial prompt.
Anyone an idea what's wrong? Is this an authorization issue?
If yes, what kind of authorization need to be granted some generic approach to get the POC going (no detail production authorization concept).
Thanks for all replies in advance,
Axel
Hi Axel,
Do you have authorization for these Views?
Do you have SELECT privilege for _SYS_BIC schema?
Check if the client is correct
Make sure that _SYS_REPO has SELECT privilege WITH GRANT option on the base objects of the calculation view when the calculation view was activated.
If there are any Analytic Privileges in the model,assign them
Most probably looks like you don't have Analytic Privileges for this model
Regards,
Vivek
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Vivek,
thank you very much for your reply.
When I assign to the reporting user the SELECT privilege for _SYS_BIC it says "_SYS_BIC" has no privilege objects assigned -> hence cannot mark select etc.
_SYS_REPO has SELECT with grant for the data base schema.
I checked a bit on analytic privileges (and sorry for asking or acting dump here but I am a HANA security newbee)....
When I try to assign analytical privileges to the reporting user I do not find any.
But when I create a new one on the package sap.hba.ecc -> SAPCLIENT it complains that one already exist for this package.
Any idea why I not see it then to assign it?
Can you also tell me what permission is needed to assign a analytical privilege. Because I went ahead and created a new analytical privilege -> TESTCLIENT for the sap.hba.ecc and tried to assign it but got Could not modify user 'xy'. Could not grant privilege 'sap.hba.ecc/TESTCLIENT'. You are not authorized to perform the required actions
Thanks so much for your help here.
Hi Axel,
As you are working with HANA Live and it is pre delivered content, so I don't know what all changes we can make with these views.
I would advise you to try creating as Test user and assign it roles and privileges so that it is able to do data preview with views and keep in mind the security of views and not to give any privileges to user so that he is able to access other data too.
Check this thread, regarding Securing Views in HANA and to know which minimum permissions should be given to the user:
http://scn.sap.com/message/14413938
Check this thread regarding finding analytic privileges:
http://scn.sap.com/thread/3353420
You should go through HANA Security Guide:
http://help.sap.com/hana/SAP_HANA_Security_Guide_en.pdf
You can also check Videos regarding HANA Live:
http://www.saphana.com/community/hana-academy#analytics-foundation
You can also check this document regarding working with HANA Live Content:
http://www.saphana.com/docs/DOC-3884
http://www.saphana.com/docs/DOC-2923
Regards,
Vivek
Hi Axel,
HANA LIve uses its own Authorization Assistant.
Please check SAP Note 1778607 - SAP HANA Live for SAP Business Suite
At the end of this note, it is written:
SAP HANA Live authorization assistant:
1. After generating authorizations if the user selects a query view in the _SYS_BIC schema in HANA Studio and tries to check Data Preview column store error is displayed.
So for HANA Live authorization assistant, check SAP Note 1796718 - Analytics Authorization Assistant
Also check the below links regarding HANA Live Authorization Asistant:
http://www.saphana.com/docs/DOC-2922
SAP HANA Live Authorization Assistant:
https://help.sap.com/saphelp_hba/helpdata/en/da/28a39e975f4e85a5eb69d20b5668de/frameset.htm
Generating Analytic Privileges:
Maintaining Metadata to Generate Analytic Privileges:
Regards,
Vivek
Just for test purpose,
You can also try by giving Analytic Privilege "_SYS_BI_CP_ALL" to the user - this privilege has access to all views and shouldn't be given to anyone.
To see if data can be previewed after this
But first try reading documents regarding HANA Live Authorization Assistant
Reagrds,
Vivek
Hi Vivek,
thanks a million for all the information you provided.
I meanwhile figured out what the problem is/was. We deployed the package when the SAP_ECC schema was pointing to ERP1. Later we changed the schema mapping for SAP_ECC to ERP2.
My user had all the permissions for ERP2 hence I really struggled. But I found out that I lacked the authorizations for ERP1.
As soon as I had the SELECT authorization for ERP1 all worked. This is due to the fact that if you change the schema mapping for the content you would need to re-deploy to get it pointing to the real tables .,,,
In short problem is solved now.
User | Count |
---|---|
84 | |
25 | |
12 | |
9 | |
7 | |
6 | |
5 | |
5 | |
4 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.