How To Fix RSEC659 - Authorization 0BI_ALL cannot be in the repository

SAP Error Message - Details

• Message type: E = Error

• Message class: RSEC -

• Message number: 659

• Message text: Authorization 0BI_ALL cannot be in the repository

What causes this issue?

You cannot switch to change mode, as the repository still contains
authorization 0BI_ALL, which cannot be changed.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Remove authorization 0BI_ALL from the repository.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message RSEC659 - Authorization 0BI_ALL cannot be in the repository ?

  The SAP error message RSEC659 indicates that the authorization object 0BI_ALL cannot be found in the repository. This typically occurs in the context of SAP Business Warehouse (BW) or SAP BusinessObjects when there are issues related to authorizations and access rights.
  Cause:
  
  Missing Authorization Object: The authorization object 0BI_ALL is not defined in the system or is not properly configured in the authorization repository.
  Incorrect Role Assignment: The user may not have the necessary roles assigned that include the 0BI_ALL authorization.
  Repository Issues: There may be inconsistencies or issues in the authorization repository that prevent the system from recognizing the 0BI_ALL authorization.
  Transport Issues: If the authorization object was recently transported from another system, it may not have been transported correctly.
  
  Solution:
  
  
  Check Authorization Object:
  
  Go to transaction SU21 to check if the authorization object 0BI_ALL exists in the system.
  If it does not exist, you may need to create it or transport it from another system where it is defined.
  
  
  
  Role Assignment:
  
  Use transaction PFCG to check the roles assigned to the user experiencing the error.
  Ensure that the roles include the necessary authorizations for 0BI_ALL. If not, you may need to add the authorization to the role.
  
  
  
  Rebuild Authorization:
  
  If the authorization object exists but is not functioning correctly, you may need to rebuild the authorization by using transaction RSAU_AUTH to regenerate the authorization data.
  
  
  
  Check Transport Logs:
  
  If the issue arose after a transport, check the transport logs to ensure that the authorization object was transported correctly.
  
  
  
  Consistency Check:
  
  Run the consistency check for authorizations using transaction RSUSR003 to identify any inconsistencies in user authorizations.
  
  
  
  Consult Documentation:
  
  Refer to SAP documentation or support notes related to authorization issues in BW or BusinessObjects for additional troubleshooting steps.
  
  
  
  Related Information:
  
  Authorization Objects: In SAP, authorization objects are used to control access to various functionalities. 0BI_ALL is a common authorization object used in BW for broad access.
  User Roles: User roles in SAP define what transactions and data a user can access. Proper role management is crucial for maintaining security and access control.
  SAP Notes: Check SAP Notes for any known issues or patches related to the RSEC659 error message.
  
  If the problem persists after following these steps, it may be beneficial to consult with your SAP Basis or Security team for further investigation.