02-03-2010 4:16 AM
Hi Gurus,
This is a BW issue which is related with SAP Security too.So I am posting this.
Its a astonishing incident to me.User reported that he is not able to see his roles.He is not able to save a workbook in his roles.Roles are "vanished".Even I tried with his credentials.But same issue.When we checked with Basis, he has got authorisations.
Any idea why is it happening? Any one have this kinda experience??
I thought to know if there is a table which has all user roles so that we can do the investigation in this view.
Thanks
James
02-03-2010 4:44 AM
Hi,
it's not that hard to find a table with roles definition. For example if you go to PFCG and hit F1 for the role input field and then technical info, you will get table AGR_DEFINE.
Cheers
02-03-2010 4:44 AM
Hi,
it's not that hard to find a table with roles definition. For example if you go to PFCG and hit F1 for the role input field and then technical info, you will get table AGR_DEFINE.
Cheers
02-03-2010 4:55 AM
Hi James,
You can also search for all the Roles(AGR) and user related tables in SE16. Try with USR* and then F4 or AGR* and then F4.
USR02
UST10S
AGR_DEFINE
AGR_USERS
etc..
Also check at the user master buffer what access he is having (Su56) etc..
02-03-2010 4:56 AM
Hi James,
I guess you want to mean that in Bex Analyzer the 'Role' folder is missing for a perticular user. Is it so? I mean what did you mean by 'Role is missing'?
Arpan
02-03-2010 6:26 AM
In BW its a little bit differen then in R/3. I guess you've created an authorisation-role with some workbooks in it?
In that case check the following :
- if you've created an authorisation role to save workbooks in it, maybe you've created that role with nothing in it (no transactions, queries, workbooks). When a role contains nothing the user is not able to see that role, so just put something in it as a start e.g. transaction RRMX
- if previous is fine, check if the user has object S_USER_AGR. There you can specify what a user can do (activity) and for which roles he's authorised to do it (here the roles must be specified).
I think with correction of 1 of the above you're problem will be solved.
02-04-2010 12:35 PM
Hi james,
Check SAP Note 316470 - No authorization to change roles. This is similar to your case of proble in saving workbook in Bex analyzer folder role in BW.
Check this hope this solve your case.
Cheers
02-04-2010 2:51 PM
Hello,
Please also check note Note 373979 - Authorization for saving roles
Regards,
Gowrinadh