SAP BI 4.0 CMC rights required to access Information Designer

[kalyanswarna]

Hi, IN SAP BI 4.0 only administrators are able to access the Information Designer tools no one else can access it.

We have given fiull control on Applications, Universe and Connections but not able to login.

i have verified the User Gude and they mentioned the follwing info but i couldn't able to figure out how to give these rights to login into IDT.

To open a session on the repository system and do all secured tasks in the information design tool:

u2022 You must have a username and password configured by the system administrator in the CMC for

the CMS where the repository is stored.

183 2011-05-25

Managing security

u2022 You must have the right "Connect the CMS with Information design tool and view this object in the

CMC" granted in the CMC.

Any help Pelase?

Thanks.

[former_member184468]

There is a built in user group called "universe designer users" that can act as a shortcut to get you the rights you need as well for this purpose if you make your users members of this group.

[Former Member]

Hi Kalyan,

We are also facing the same issue, unable to publish universe,data foundation etc using the window AD authentication user, but possible by using enterprise user.

Please provide the solution if your problem was solved.

Thanks a lot for the help.

Regards

Krishna

[Former Member]

Hello,

I got the same issue:

I was able to connect with sommeone that belong to Administrators group but with another user having sufficient rights on InforMationDesign Tool, Universes folders and connections as listed above, the session is automtically closed in the 5 seconds.

I activated the traces and the error was due to the fact that the user is not able to see its own Inbox. I put Everyone group to View on the root folder of Inboxes and now all is OK.

It seems to be a regression as I was able to connect with older versions of BI 4 Tools (4.0 SP02 without Patches)

Hope this helps

Regards,

Jérôme

[kalyanswarna]

Thanks for your info.

We have Verified the Inbox rights for the Everyone Grop and they have FullControl( owner )rights on Inbox.

If possible can you please let me know how you find that Inbox root access is casuing fopr your issue then i will follow the same steps to see in my case.

Thanks,

Kalyan

[kalyanswarna]

Hi experts, any one has solution for this issue.

we are still strugling.

Thanks

[Former Member]

Thanks Jerome, enabling full control on Inbox for IDT user helped retain the session to CMS.

Without enough permissions on Inbox, the CMS session from IDT closes within 5 seconds after successful authentication. Could not find any documentation on why it does so, we are on 4.0 SP02. The report developers are happy now!

Would you please elaborate, what traces did you have to enable and how to read the trace?

Regards,

Pawan.

[kevin_joyner]

This resolved the issue we were having as well.   Thanks for taking time to post this.

[Former Member]

Jerome,

thanks, it works for me.

Your answer was very helpul. It was working before the Inbox and Personal folders migration from one environment to another and maybe the security for the top level for Inboxes were modified.

This is the SAP Note that has all the information you provided us. (Note: 1916649)

https://websmp230.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/sno/ui_entry/entry.htm?param=69765F6D6F6465...

Thank you!

Nancy

[Former Member]

I am thinking and thinking, and I can't find any logic in this. The solution is working yes, but why would giving access to Inbox in view would allow user to connect in IDT?????

[Former Member]

If we use Windows AD then we had to tweak the IDT setup.

1) Copy the bcsLogin.conf & krb5.ini from the server to the PC's C:\Windows folder

2) Add to the bottom of the InformationDesginTool.ini

-Djava.security.auth.login.config=c:\windows\bscLogin.conf

-Djava.security.krb5.conf=c:\windows\krb5.ini

[former_member93238]

Hi,

Sorry,I wasn't sure about your initial question i had to guess.

on login rights required please try the following (tested and it woks):

On Information Design Tool grant the following rights:

Collection Type Right name

General General Log on to the Designer and view this object in the CMC

Application InformationDesigner Publish universes

Application InformationDesigner Retrieve universes

Application InformationDesigner Create,Modify, or delete connections

Application InformationDesigner share projects

Application InformationDesigner save for all users

Application InformationDesigner compute statistics

hope this time it helps.

Moussa

[former_member93238]

Hi Kalyan,

If your question is how to get to this property,

1) login to CMC

2) go to applications/InformationDesigner

3) Right click to get user security

4) click on the user (principal) you wish to grant access from IDT

5)click assign Security then advanced tab

6) click add/remove Rights

7) grant Log on to the Designer and view this object in the CMC

Hope this helps.

Moussa Ould Beziou

[kalyanswarna]

Thanks for the response.

I did this already but users couldn't able to login into IDT.

it seems the user must be an Administrator to access this tool.

If anyone had experienced please confirm?

Thanks.