BI, RSECADMIN, New Authorization Concept

[Former Member]

I am trying to implement the auth concept using tcode RSECADMIN. We are not using RSSM nor did we need to migrate from the old concept to the new. We did not have BI prior to RSECADMIN so that is not an issue.

I have both the webcast documentation and watched the webcast by Marc Bernard and have the documentation from Amelia Lo. I also have the training manual for the old auth concept way under RSSM. There are definite holes and I have not been able to get it to work. I need help or better documentation. Have searched SDN and read help files and still do not understand and much of the documentation is still working in the old RSSM world.

In RSECADMIN I have set up authorizations to restrict 0BUS_AREA and 0COMP_CODE based on hierarchies set up in RSH1. These also have been marked auth relevant in RSD1.

Part of my problem I believe is in each authorization I have not added atleast one of the following: 0TCAACTVT, 0TCAIPROV, 0TCAVALID or 0TCTAUTHH. When I try to add one in one of the authorizations I have created in RSECADMIN I get the following message: There are empty or incorrect characteristic auth. Please correct. The details of this message are below:

There are empty or incorrect characteristic auth. Please correct

Message no. RSEC303

Diagnosis

You still have empty or incorrect entries in the authorization definition.

It is not possible to save empty characteristic dimensions, that is, characteristics without interval authorizations and without hierarchy authorizations. In this case, either enter interval authorizations or hierarchy authorizations into the empty characteristics or delete the affected characteristic from the authorization completely.

Then you will be able to save the authorization

So I then go to RSH1 to try to create hierarchy for 0TCAIPROV and get the message Hierarchies can only be determined for a basic characteristic and the help on this message is below which makes no sense at at all

Hierarchies can only be determined for a basic characteristic

Message no. RH031

Diagnosis

Characteristic 0TCAIPROV, for which you want to create a hierarchy, is a reference to basic characteristic 0TCAIPROV.

No hierarchies may be created for referencing InfoObjects.

System Response

The hierarchy is not created.

Procedure

Create the hierarchy for basic characteristic 0TCAIPROV. Using the referencing characteristic 0TCAIPROV you can then access the hierarchy in the query.

In Marc Bernard’s presentation it mentions to add 0TCAIFAREA as an external hierarchy characteristic to 0INFOPROV but when I go to RSD1 under hierarchy tab for 0INFOPROV I am only given the choice to create a hierarchy named INFOAREAHIER but when I try to move forward it says hierarchy is already available.

Please has anyone created the auth concept form the bottom up using RSECADMIN not doing the migration from RSSM and have good documentation they can share. I know there are wholes in what I have. My email is mesims@solutia.com. I could definitely use the help or tips.

Thanks,

[Former Member]

Hi,

Check the following:

1. In your AO: 0TCAKYFNM (insert in your AO as 0TCAACTVT, 0TCAIPROV, 0TCAVALID)

2 check the table RSDCHA & RSDATRNAV to see the IO autho relevant ( and the ATTR NAV) and create AO to give access for all the IO used in the query

3. You don't have to create a hierarchy for 0TCAIFAREA (the prg dump but it was corrected with SP10...)

hope it help's

[Former Member]

Hi,

you can check this:

https://www.sdn.sap.com/irj/sdn/wiki?path=/display/bi/authorizationinSAPNWBI&

hope it helps