Authoriation RSSM and role maintance PFCG

[Former Member]

Hi Experts,

Can any one of u give the step by step procedure to

make an authorization object as reporting authorization object in RSSM and also alloting role for the obect in PFCG.

Plz this is very urget.

[Former Member · Accepted solution]

Pradeep, the procedure is simple.

1. go to PFCG and before that create user.

2. create a authorization using pfcg

3. assign user to authorization

4. add rrmx tcode and generate the authorization

5. add bw and basis components from menu...here take help from basis people.

6. restict for particular objects like infocube reports ods infopackage.

7...save and generate

8. open an window with the user and test the reports...etc

hope it helps. if it helps reward some points...:)

bye

mahantesh

[Former Member]

Hi Siddhu,

Thax for the info.

but can u give still more details regarding that

like screen shot explnatioons with notes.

plz

[Former Member]

Hi,

Go through this

Setting Up Reporting Authorizations :

http://help.sap.com/saphelp_nw04/helpdata/en/a0/48f438f3422f2ce10000000a114084/content.htm

Generating Reporting Authorizations :

http://help.sap.com/saphelp_nw04/helpdata/en/56/25dc886b0611d5b2f50050da4c74dc/content.htm

Regards-

Siddhu

[Former Member]

Hi Siddhu,

Thanx for gving good link.

I did all exercise creating authorization object,roles and profiles inspite of that in query it is giving all the company codes for a particualr user id.Actually it should not be the case.

can u help in this regards,

[Former Member]

Hi Pradeep,

I understood that you want to restrict users by company code.

Have you made this IO relevant for authorization?

Have you created a custom authorization object with this IO?

Have you inserted this auth object into profile?

Have you restricted company code in the query by a variable?

Best regards,

Eugene

[Former Member]

Hi Eugene,

Thanx for quick response.

Actually I did all the step what u have mentioned but I missed only step of creation of an variable in the query, now that also I did .Inspire of that also there is no change in the query behaviour.

Can u help in this regard.

[Former Member]

Have you assigned a particular company code for IO in authorization profile?

Best regards,

Eugene

[Former Member]

Hi,

did you activate the custom authorisation object for the specific cube where your query is running?

Transaction RSSM -> Check authorisation object for Infoprovder

Regards

Adios

[Former Member]

Hi Adios,

In the activation box there is check mark.

It is absulately activated.

[Former Member]

Yes Eugene I have assigned.

I feel I have not missed any step.

but still query is behaving normally.

[Former Member]

Try to trace a query execution: ST01 and RSSM.

Best regards,

Eugene

[Former Member]

Hi Eugene,

As I Mentioned Earlier ,I created a New user and assigned Profile for that user.In Profile

Authorization object S_RS_COMP

Activity All activities

InfoArea *

InfoCube ZZIC_CL-ZZIC_CL

Name (ID) of a reporting compo *

Type of a reporting component All values

Activity All activities

Name (ID) of a reporting compo *

Type of a reporting component All values

Owner (Person Responsible) for NDR-NDR

After doing all these when go to RRMX with User name NDR

and when I open the query there none of the queries are available.The user NDR is Authorised to use only RRMX T-code.

Can u plz look into it.

Thanx in advance.

Cheers,

Pradeep

[Former Member]

Hi Pradeep,

Add an auth component S_RS_ICUBE.

Authorization object S_RS_ICUBE also protects the InfoArea and the InfoCube. The difference between objects S_RS_ICUBE and S_RS_COMP is that authorization object S_RS_ICUBE is more focused on the data in the InfoCube, while S_RS_COMP is more focused on query execution.

Authorization object S_RS_ICUBE is required for reporting even if you have implemented object S_RS_COMP, because it grants access to actually display the data held in the InfoCube.

The properties set as follows.

Activity - as you wish

Infocube subobject - DATA

Infoarea - as you wish

Infocube - particular cube or *.

Best regards,

Eugene

[Former Member]

Hi Eugene

Initially It was like this for T-code RRMX with only Display Icon,and again I have given S-TCODE

and There I have Given * ,and then next part is as shown below.

Activity All activities

InfoArea *

InfoCube *

Name (ID) of a reporting compo *

Type of a reporting component All values

Activity All activities

InfoCube Subobject All values

InfoArea *

InfoCube *

After all this Exercise I am Getting Only few Infoareas in RRMX with the User ID NDR.

Can you Suggest where I have done mistake.

Thanx in advance.

Best regards,

Pradeep.

Message was edited by: PRADEEP NAGARAHALLI

[Former Member]

Hi Pradeep,

S_TCODE matters little.

In my previous message I recommended to add auth object S_RS_ICUBE. Have you done this?

And from you messages it is not clear what are settings for

S_RS_COMP

S_RS_COMP1

S_RS_ICUBE.

COuld you provide them?

Best regards,

Eugene