configure SAP authentication for BusinessObjects

[Former Member]

Hi,

I am configuring SAP authentication for BusinessObjects. I created a user account for BusinessObjects Enterprise on SAP with Authorization object, field, Value as "BusinessObjects XI Integration for SAP Solution Installation Guide". After add an SAP entitlement system to BusinessObjects Enterprise, I checked that an entitlement system. It show "User CRYSTAL has no RFC authorization for function group SYST." with CRYSTAL is user of SAP.

Please, help me!!!

Thanks

Duypm

[Former Member · Accepted solution]

Hi,

I finished installation of BusinessObjects XI integration for SAP Solutions components.

I need to configure integration of SAP and BOE.

I am using an application server.

I am still getting the "OWN_LOGICAL_SYSTEM_NOT_DEFINED" error message with role import tab on BOE

I assigned the authorizations to a user. I created CRYSTAL_ENTITLEMENT Role and assigned it to Crystal user.

What would you do with issue like this?

Thanks & Regards

Duypm

[former_member142702 · Accepted solution]

Hi Duypm,

can you please ask your SAP administrator if she/he assigned a logical system to the client number (100) you are using?

Regards,

Stratos

[Former Member]

Hi all,

The issue have solved.

Thanks for your help!!

Duypm

[IngoH]

so what was the resolution ?

Ingo

[former_member189462]

Hi Duypm and Ingo,

I now this is a very old post, but I experiencing the same issue and I not able to solve it. The message OWN_LOGICAL_SYSTEM_NOT_DEFINED appears when trying to import roles from back end system in CMC:

Could you please let me know how did you get this problem solved?

Regards

[Former Member]

Hi,

I imported role successfully. Now, I need to change the content folder root in tab Option. In BusinessObjects XI Integration for SAP Solution Installation Guide, Step 5 of "to change the content folder root" is "In the BWContent AdministrationWorkbench, expand Enterprise system." How to perform it??

Thanks

Duypm

[Former Member]

Hi,

So I configured right. Why do this error appear?? Can you hepl me???

Please, help me!!!

Thanks

Duypm

[IngoH]

ok. lets clarify some basics here:

- is this the only system you have configured in the SAP Authentication ? If not - do the others work ?

- are you using an application server or a message server with logon group ?

- is the user you are using and entering a dialog user ?

- Are you still getting the error message with the authorization ?

- did you assign the authorizations to a user or to a role ?

ingo

[Former Member]

Hi,

What are "Application Server" and "System Number" in SAP entitlement system to BOE. Could you define it for help me???

I think, it is source of OWN_LOGICAL_SYSTEM_NOT_DEFINED error.!! Do you think so??

Thanks

Duypm

[former_member142702]

Hi Duypm,

the application server should be the hostname of the machine, where your SAP BW server is installed on, not the BOBJ server. The system number should be the number assigned to your SAP BW installation. Please check with your SAP Basis administrators about this. You can also extract this information if your SAPLogon.ini containts an entry for the host you want to connect to.

Please also check the installation guide for the BOBJ integration Kit for SAP Solutions XI 3.1 at page 78. Can you confirm that you have assigned all authorizations as listed in this table?

Regards,

Stratos

[Former Member]

Hi,

I checked the authorizations documented for the user to be used in CMC in the Installation Guide for the SAP Integration Kit and performing to step by step.Can you give me a clear solution?

Please, help me!!!

Thanks

Duypm

[Former Member]

Hi,

My CRYSTAL_ENTITLEMENT Role as below:

CRYSTAL_ENTITLEMENT

|

|--Manually Cross-application Authorization Objects

| |_Manually Authoriaztion Check for RFC Access

| |_ Manually Authorization Check for RFC Access

| |______Activity All activities

| |______Name of RFC to be protected *

| |______Type of RFC objects to protected All value

|

__Manually Basic: Administration

__Manually Authorization for file acccess

___Manually Authorization for file access

__Activity Read, Write

__Physical file name *

__Program Name with Search Help *

__Manually User Master Maintenace: User Groups

__manually User Master Maintenance: User Groups

|___Activity Change, Display

|___User group in user master main *

I login CRYSTAL user directly on your SAP BW server using SAPGUI. It is ok.I don't get any error messages there.

My SAP entitlement system to BOE as below:

System is: PTS

Client: 100

Application

Application server: sap-vpmn (with sap-vpmn is hostname BO server)

System number : 00 (this is value of central instance number)

Username: crystal

Password : pythis

Thanks & Regards

Duypm

[IngoH]

Hi,

did you check the assign authorizations against the authorizations documented for the user to be used in CMC in the Installation Guide for the SAP Integration Kit ?

regards

Ingo

[Former Member]

Hi,

I changed value of "Name of RFC to be protected" to (*). After that I check again on the BOBJ side., it show "OWN_LOGICAL_SYSTEM_NOT_DEFINED"

Thanks

Duypm

[former_member142702]

Hi Duypm,

can you please post here a list of the authorizations (1st and 2nd level will do) contained in the role (CRYSTAL_ENTITLEMENT?) that you created for the technical BOBJ user (CRYSTAL) in SAP?

Can you try to logon using the credentials of the CRYSTAL user directly on your SAP BW server using SAPGUI? Do you get any error messages there?

Can you post the settings you have done in the BOBJ CMC under the SAP authentication panel (all 4 subpanels please) here? No need to post the real hostnames here though.

Regards,

Stratos

[Former Member]

Hi,

I performed your instruction. But the issue is still.

Please, help me!!!

thanks

Duypm

[former_member142702]

Hi Duypm,

can you please do the following. Log on your SAP BW server, start the transaction PFCG and open the role your created for your CRYSTAL user for editing ( The guide suggests to name the role CRYSTAL_ENTITLEMENT but this is not a must do. I just assume that you used this name). Please check in the tab Users if the CRYSTAL user is visible there. If not, add it in the list, save your changes and press the User comparison button. Try again to see if your get the error on BOBJ.

On the other hand if user CRYSTAL is aready visible in the user list then please do the following:

Switch to the Authorizations tab and press the button Change Authorization Data . Do you see in the next screen an entry called Cross-application Authorization Objects ? If yes is a green trafic light on beside (left side) this entry? If the entry is not present, please press on the Manually button ( + Change Role+ toolbar) and type in S_RFC as authorization object. Then expand the newly added objects until you see the text Authorization Check for RFC Access. Expand also the object at this level and click on the enpty cell beside the Activity entry. Select Execute and proceed to the Entry Name of RFC to be protected. Enter * (Star) here. In the last entry Type of RFC object to be protected select FUGR. Save your changes and generate the profile again. Try now to see if you still get the error on the BOBJ side.

Regards,

Stratos

[former_member142702]

Hi,

I assume you created an SAP role with the required authorization and then assigned your user (CRYSTAL) the created role. Can you please check the following on your SAP system:

Start the transaction PFCG and open the role you created for the BOBJ authentication. Check the User tab. If it has a yellow rectangle or a red circle beside the title then switch to this tab and press the User comparison button. In the new window please select Complete Comparison and wait till the process is completed. You can try then again to see if the roles in your SAP BW system are visible in the SAP authentication panel in the CMC.

Regards,

Stratos