authorization for 2004s

[Former Member]

Hi, SDNs

As in BW3.X the Minimum Authorization Requirements for a reporting user:

S_RS_COMP(Activities 03,06)

S_RS_COMP1(Query owner)

Authorization object representing the InfoProvider of the query(S_RS_ICUBE,S_RS_MPRO,etc.)

S_RFC(Bex Analyzer or Bex Browser only)

S_TCODE(RRMX for Bex Analyzer)

What's the mini authorization requirement for 2004s authorization?

[Former Member · Accepted solution]

You still need the objects you mentioned in order to work with queries;however for

for NW2004s you need S_RSEC object and activation of all 0TCT* infoobjects in order to get you authorizations working with RSECADMIN.

<b>Pre-requisites -</b>

1)Activate all business content related to authorizations before

you get started

InfoObjects: 0TCA* (and 0TCT* if not done already)

InfoCubes: 0TCA*

2. Set the following InfoObjects as "authorization relevant"

0TCAACTVT

0TCAIPROV

0TCAVALID

0TCAKYFNM (optional, if key figure restriction needed)

3. Add 0TCAIFAREA as an external hierarchy characteristic

to 0INFOPROV (optional)

Hope it Helps

Chetan

@CP..

[Former Member · Accepted solution]

Hi,Patel

I created a authorization object A in RSECADMIN &#65292; then when i want to assign in FPCG change authorization data-> Edit->Insert Authorization data->Manual input

It is said the authorization object A does not exist

And i in R_RS_COMP when also can select the InfoCube limit

Which will effect ? the InfoCube limit in R_RS_COMP or the limit 0TCAIPROV in A??

[former_member192700 · Accepted solution]

Hi Terry,

if you want to include an authorisation in an existing profile / role, you can use the authorisation object S_RS_AUTH to include the authorisations as values for this object in a profile.

Please check also the online help and multiple entries in this forum regarding the 'Authorisation' topic (search term 'Authorisation', 'RSECADMIN', 'Security', etc.)

Cheers

SAP NetWeaver BI Organisation

[Former Member · Accepted solution]

Hi, Keppler

Yes, i have search the thread but still wonder of the useage of RSECADMIN

As my requirement is only limit one user to see the certen query , not relateded to any value of charactistic or key figure, so is that mean i just to use R_RS_COMP to limit the authorization ??

And it display you are not authorization in EP page but the query i can open in query design

[Former Member · Accepted solution]

If you need to set authorizations based on query level for certain USERS only, then yes you gotta use

S_RS_COMP / S_RS_COMP1 objects.

for using RSECADMIN you need 0TCT* objects which has VALUE based authorizations.

<b>

The analysis authorizations can be (but do not have to be) assigned by roles.</b> To assign an authorization to a user, it is sufficient to proceed as described below.

http://help.sap.com/saphelp_nw2004s/helpdata/en/e3/fc8b41b5b3b45fe10000000a1550b0/content.htm

<b>As an alternative, authorizations can also be assigned using profiles for the authorization object S_RS_AUTH, the entries of which are analysis authorization names</b>. In this way, you can assign authorizations to a user using roles as well using the general role maintenance and the general user maintenance for SAP NetWeaver.

The input help in the role maintenance for this authorization object provides all existing, defined BI analysis authorizations.

Mixed scenarios, which mean assignments from roles in addition to the directly assigned authorizations, are also possible

Hope it Helps

Chetan

@CP..