topic Re: BI Folder Roles in Application Development and Automation Discussions

BI Folder Roles

Former Member — Fri, 21 May 2010 19:30:18 GMT

hi to all,

I would require some input from the BI security experts the issue i am facing with the BI. I have created the few folder roles and assigned necessary authorization like s_user_agr and provided the folder in role check field. Now the issue is the BI team is not able to view the folder role. they have to save some workbooks in the folder role.

I am able to create the folder role and i can view them through Bex Analyzer one at a time. i am not able view all the folders through the Bex Analyzer even though they have been assigned. i have tried different means to solve this issue.

Can anyone please advice where i am missing in analyzing the defect.

your inputs are highly appreciated

Re: BI Folder Roles

Former Member — Sat, 22 May 2010 20:07:40 GMT

Hi,

In BI Security, you need to have an empty role ( menu role ) with no TCODES or no authorizations in it . It will just have queries or workbooks assigned to it. This role name needs to be provided in another role through authorization object S_USER_AGR .

Both these roles have to be assigned to the user to make him view the folder in BeX and assign queries to it.

You can also assign queries to the menu role using " Add Report " button in the Menu . Select BW report and give the UID of the workbook/query that needs to be assigned. You can see the queries assigned in the menu then.

Regards,

Manisha

Re: BI Folder Roles

arpan_paik — Sun, 23 May 2010 13:14:03 GMT

Hi Madhu,

In addition to above I would like to add that you also need to provide access to S_RS_FOLD object. This will will enble Role folder in Bex Analyzer

Cheers,

Arpan

Re: BI Folder Roles

Former Member — Mon, 24 May 2010 09:59:49 GMT

Hi Madhu,

If the roles do not have any Queries or Web Reports saved in them, they will not be visible.

First the Developers need to save/assign/publish Queries into the folder roles & then they appear in the Roles button

Re: BI Folder Roles

Former Member — Mon, 24 May 2010 10:04:16 GMT

Hi Siddharth,

You can't publesh queries to the roles through RRMX unless and untill they are visible there. So the roles visibility has nothing to do with publishing queries to them as roles will appear just like empty folders when they dont have any queries assigned to them in RRMX.

Regards,

Manisha

Re: BI Folder Roles

Former Member — Mon, 24 May 2010 10:27:17 GMT

Hi Manisha,

You can publish queries to the Roles through Query Designer. When the Developers try to publish them into the Role, they will see various roles assigned to them. However, they can save them only to the Role that they have been authorized to save in (I mean the Folder role)

Re: BI Folder Roles

Former Member — Mon, 24 May 2010 11:08:02 GMT

Hi Siddharth,

Queries can be published to any role , its just that the role should be assigned to the user. In RRMX, all roles assigned to the user are visible be it empty role or roles with queries assigned to them.

Regards,

Manisha

Edited by: Manisha Nadir on May 24, 2010 5:05 PM

Re: BI Folder Roles

Former Member — Mon, 24 May 2010 14:03:27 GMT

Hey Sid,

You are absolutely right, and my issue is resolved.

Re: BI Folder Roles

Former Member — Tue, 25 May 2010 12:36:27 GMT

I am still not able to view all the folder roles, eventhough the queries are published

Re: BI Folder Roles

Former Member — Tue, 25 May 2010 13:25:40 GMT

Hi ,

Are all the corresponding roles with S_USER_AGR authorizations for the folder roles assigned?

Regards,

Manisha

Re: BI Folder Roles

Former Member — Tue, 25 May 2010 13:35:55 GMT

Yes all the roles have S_USR_AGR object with necessary authorization and assigned to users. Queries/workbooks are saved in the folders, but when we try to open these, we are not able to view the folders. We are able to view any one folder at a time.

Re: BI Folder Roles

Former Member — Tue, 25 May 2010 13:46:12 GMT

Hi,

Kindly clarify. This time you don't want to publish any queries to the roles through RRMX but if tryng to "Open Query" in RRMX, you are not able to see the folder roles in the " Roles " Section. Is this right?

Regards,

Manisha

Edited by: Manisha Nadir on May 25, 2010 7:16 PM

Re: BI Folder Roles

Former Member — Tue, 25 May 2010 13:50:42 GMT

Yes

Re: BI Folder Roles

Former Member — Tue, 25 May 2010 14:58:46 GMT

Hi,

Have you done UserMaster Comparison ? Secondly , what do you mean by one folder at a time?

Regards,

Manisha

Re: BI Folder Roles

Former Member — Tue, 25 May 2010 16:23:47 GMT

let me explain in detail. i have created 10 roles. each role has s_user_agr. i have provided the role name itself in the AGR object.

for example in " ROLE1" -

S_USER_AGR----role name ("ROLE1") and RRMX in S_TCODE.

like this i have created 10 roles, done comparison. the BW consultants are able to save their queries/workbooks in these 10 roles by publishing. Now the issue is when they are trying to open the queries/workbooks throught Bex Analyzer these 10 roles are not visible under "Roles" button.

Re: BI Folder Roles

Former Member — Wed, 26 May 2010 06:21:13 GMT

Hi,

Please check the actvities you have provided in S_USER_AGR Auth Object and also check if queries are correctly published by seeing if the menu buttone is " green" in pfcg for all these roles.

Regards,

Manisha

Re: BI Folder Roles

Former Member — Wed, 26 May 2010 10:47:32 GMT

Hi Madhu

Seems all authorizations are perfectly in place. Can you request your users to click on "Open workbooks" in place of "Open Queriy..." in BEX and advise if the users can view the folders in the roles tab and corresponding workbooks published in the role.

Thanks.

Anjan

Re: BI Folder Roles

Former Member — Thu, 27 May 2010 07:48:46 GMT

Hi Anjan,

I am able to view the workbooks under the role tab, whereas BI consultants are not able to view them. I have assigned the role, done user comparison also, still they are not able to view them. can you please let me know what could be the reason.

Thanks

JMadhu

Re: BI Folder Roles

Former Member — Thu, 27 May 2010 08:40:07 GMT

> I am able to view the workbooks under the role tab, whereas BI consultants are not able to view them. I have assigned the role, done user comparison also, still they are not able to view them. can you please let me know what could be the reason.

Hi Madhu

Please check whether the users have access to following basic authrization objects or not.

S_TCODE

TCD RRMX

S_USER_AGR

ACTVT 03

ACT_GROUP Name of the role containing the workbooks

S_USER_TCD

TCD RRMX

S_RS_AUTH(For analysis authrizations), S_RS_COMP, S_RS_COMP1.

If everything is fine, please do a net meeting with the users to check what users are doing at their end. Probabely they are missing at some point. A minor miss could be the cause of the issue.

Thanks.

Anjan

Re: BI Folder Roles

Former Member — Thu, 27 May 2010 10:49:27 GMT

Thanks Anjan & Manish,

All the objects are in place. i have cross checked with the team, they are not properly publishing to the role.

Now they are able to view them.

Thanks

JMadhu