Program for PFCG Role Creation

Hi Guys,
I have a requirement for creating a program that will automate the Role Creation (Transaction PFCG)
I have the following Questions.
Is it Really possible via Program.
The expectation is in selection screen user will give the Standard and Derived Role after execution he expect the role to be created.
If anybody have experience in the same scenario kindly share me.
Regards,
Vijay.

Try with PFCG_START_PFCG
G. Lakshmipathi

Similar Messages

  • Need to create a mass upload program for appraisal document creation for multiple employee

    Hi Expertise,
    I need to create a mass upload program for appraisal document creation for manager and his multiple employee
    at a time using tcode appcreate.
    Please help me out.
    Best regards,
    Priyaranjan

    Hi Priyaranjan,
    I think you can take the abap'ers help in creating the program. But u need to provide them the exact functionality and the required specifications in creating the appraisal document.
    Even tcode also u can get it prepared by Abap'ers.
    Thanks and Regards
    Balaji

  • Need to create a mass upload program for appraisal document creation for multiple employee in abap hr

    Hi Expertise,
    I need to create a mass upload program for appraisal document creation for manager and his multiple employee
    at a time using tcode appcreate.
    Please help me out.
    Best regards,
    Priyaranjan

    Hi,
    I have done appraisal document creation for bulk using txt file.
    this fm used for single for creation in standard tcode (phap_prepare):  'WZ_HRHAP_0DOC_WZ01_START'.
    So create ztcode  usinh this fm for single form then record BDC for this tcode and called this tcode in that bdc for bulk creation .
    While recording for single I have used manual option instead of automatic .

  • Standard Batch Input Programs for Profit Center Creation

    Dear all;
    I am in 4.0B version that doesnt have BAPI_PROFITCENTER_CREATE. Writing a BDC for this would be complicated as my data is compiled in a different way.
    Are there any Standard Batch Input Programs for Profit Center Creation ?

    Hi Srivathsan,
    You can make use of  Standard BAPI by LSMW.
    Business Object   BUS1116      Profit Center Group
    Method                CREATE                      Create
    Message Type      PROFITCENTERGROUP_CREATE   
    Basic Type           PROFITCENTERGROUP_CREATE
    Regards,
    Sivaram.

  • BAPI or FM or Standard BDC program for Production version creation (C223)

    Hi All,
    Is there BAPI or FM or Standard BDC program for Production version creation?  Please help me.
    Thanks & Regards
    Santhosh

    Hi,
    Try this FM "CO_OCM_CREATE_PROD_VERSION"
    Regards,
    Smart

  • PFCG role creation

    Security Guys,
            My requirement is creation of role for an ABAPER who should run all the Z reports but not exactly the report RSDU_EXEC_SQL_PROGRAM ( meaning no SAP Standadrd reports ). Is there a way to achieve this ?
    Thanks / Arunkumar P

    Hi,
    that role should be for production only environment or development as well? If it's for development then I assume that ABAPER can write a custom programs so there is no chance to prevent this user from running RSDU_EXEC_SQL_PROGRAM. If it's for production environment then all those custom reports should have transaction codes assigned to them. In that case you can create a role for all of them plus some read only debugging authorization.
    Cheers

  • Script or Program for massive role changes

    Hi,
    does anybody know some script to execute massive changes in SAP ROLE??
    Ciao

    You can try a bash script. Example:  This one converts wav to mp3:
    #!/bin/bash
    for i in "$@" ; do
    lame --r3mix "$i" "`basename "$i" .wav `.mp3"
    done
    ./wav2mp3.sh *.wav
    will convert all wav in the current directory to mp3.  You can change the lame line if you have other formats.

  • PFCG role creation and input from users

    I know that when you create a new role and add transactions to the menu you will get some default authorization objects in the role.
    After that you will need to fill out activities for transactions;
    For ex: display, create, change
    I also know that during testing when you run /nsu53 you will need to add some additional objects in the role.
    If the user does not know which activites he/she need or even for example for order types
    OR, ZNON, KE
    How can i help if the user does not know what he/she needs.
    The way I'm doing this currently is by giving the user the transactions he/she needs and then have them run /nsu53 and I fix the problem.
    Thanks
    jo

    Jo,
    As I have worked in situtations similar to the one you describe where the user performing the testing doesnt know which activites/values they need access to contribute to productive role build/testing sessions. Some of the things I have done to help them are:
    1) Educate the user on the Authorization Object and Fields. You can typucally hit (F1) for more information related to the object/field.
    2) Tie the object values back to actual SAP Tables with data to show user configuration of the system and values that are options.
    3) Find someone from the process/business side who understands the requirments or has done the configuration to support the process and have an educational/testing session together.
    Thanks.
    Matt

  • Disable the buttons for creation using PFCG roles

    Hi SAP Experts,
       How to disable the buttons for creation using PFCG roles?
    Regards,
    Jaya

    Hi,
    u have to write the code in <b>at selection-screen output</b> event
    AT SELECTION-SCREEN OUTPUT.
      LOOP AT SCREEN.
        IF  <b>P_PRINT</b> = 'X'.  " this is radiobutton
          IF screen-name = 'P_RANGE'.
            SCREEN-INPUT = 0.
          ENDIF.
          modify screen.
        ELSE.
          IF screen-name = 'S_LFDAT-LOW'.
            SCREEN-INPUT = 0.
          ENDIF.
          IF screen-name = 'S_LFDAT-HIGH'.
            SCREEN-INPUT = 0.
          ENDIF.
          IF screen-name = 'S_WERKS-LOW'.
            SCREEN-INPUT = 0.
          ENDIF.
          IF screen-name = 'S_WERKS-HIGH'.
            SCREEN-INPUT = 0.
          ENDIF.
          IF screen-name = 'P_LIFNR'.
            SCREEN-INPUT = 0.
          ENDIF.
          IF screen-name = 'S_BUKRS'.
            SCREEN-INPUT = 0.
          ENDIF.
          modify screen.
        ENDIF.
      ENDLOOP.
    Hope it helps.
    Regards,
    Sonika

  • Background job fails for BDC profile creation and role assignment

    Hi Experts,
    I have created a BDC Function module for Tcode 'PFCG' for profile creation and role assignment, and called this FM in my zprogram. the problem is that when i run this program in foreground it executes succesfully, but if i schedule it in background it fails throwing error in job log 'Role 'Z...' does not contain any active authorizations'. But i have created one more program to create authorization objects which runs before this zprogram.I have also checked the authorization object in 'RSECADMIN', it reflects active. I dont understand whats happening exactly when it runs background.
    Below is the process of job
       1. ZMIS_AUTH_OBJECT_CREATE
           Variant : auth-create
       2. ZMIS_AUTH_ASSIGN_TO_ROLE
           Variant : auth-assign
    The problem is in second program, runs in foreground but fails in background.
    Code which i have written in my second program
    ***BDC for Profile creation and assignment to Roles
        CALL FUNCTION 'ZROLE'
          EXPORTING
           ctu                     = 'X'
           mode                    = p_mode
           UPDATE                  = 'L'
    *   GROUP                   =
    *   USER                    =
    *   KEEP                    =
    *   HOLDDATE                =
           nodata                  = '/'
            agr_name_neu_001        = wa_role-role_name
            text_002                = wa_role-desc
            text_003                = wa_role-desc
            text_004                = wa_role-desc
           value_01_005            = 'T-ML330881'
            h_fval_low_01_006       = wa_role-auth
            profn_007               = lv_profile
            ptext_008               = lv_text1
    * IMPORTING
    *   SUBRC                   =
         TABLES
           messtab                 = temp_message.
    ***Generation of Profile created
    CALL FUNCTION 'PRGN_AUTO_GENERATE_PROFILE_NEW'
         EXPORTING
           activity_group                      = wa_role-role_name
    *     PROFILE_NAME                        =
    *     PROFILE_TEXT                        =
          no_dialog                           = ' '
          rebuild_auth_data                   = ''
          org_levels_with_star                = ' '
          fill_empty_fields_with_star         = 'X'
          template                            = ' '
          check_profgen_tables                = 'X'
          generate_profile                    = 'X'
          authority_check_pfcg                = 'X'
       EXCEPTIONS
         activity_group_does_not_exist       = 1
         activity_group_enqueued             = 2
         profile_name_exists                 = 3
         profile_not_in_namespace            = 4
         no_auth_for_prof_creation           = 5
         no_auth_for_role_change             = 6
         no_auth_for_auth_maint              = 7
         no_auth_for_gen                     = 8
         no_auths                            = 9
         open_auths                          = 10
         too_many_auths                      = 11
         profgen_tables_not_updated          = 12
         error_when_generating_profile       = 13
         OTHERS                              = 14  .
    Experts please help me out its very urgent. your help is appreciated and rewarded. Thanking you in advance.
    Regards,
    Chetan

    Hi Praveen,
    Yeah definately, my requirement is that I have to access of some BI reports to certain users, so contract data will be downlaoded from ECC on application server, need to read that file from application server and for the each contract i ahould create a authorization object, role creation and assigning of role to the user and profile generation and activation.
    To achieve this i have written two programs
    1) ZMIS_AUTH_OBJECT_CREATE- This program will create the Authorization Object using BDC and Role creation Using the BAPI
    "" Creation of Authorization Object
    CALL FUNCTION 'ZAUTHOBJ'
            EXPORTING
             ctu                    = 'X'
             mode                   = p_mode
             UPDATE                 = 'L'
    *   GROUP                  =
    *   USER                   =
    *   KEEP                   =
    *   HOLDDATE               =
             nodata                 = '/'
             g_authname_001         = 'ZDUMMY_MIS'
              g_targetauth_002       = wa_tab-auth
              g_authtxt_003          = wa_tab-short_desc
              g_authtxtmd_004        = wa_tab-med_desc
             marked_04_005          = 'X'
              g_authtxt_006          = wa_tab-short_desc
              g_authtxtmd_007        = wa_tab-med_desc
             tctiobjnm_04_008       = 'ZBUS_UNIT'
              g_authtxt_009          = wa_tab-short_desc
              g_authtxtmd_010        = wa_tab-med_desc
             marked_05_011          = ''
             opt_01_012             = 'EQ'
              low_01_013             = wa_tab-bu
              g_authtxt_014          = wa_tab-short_desc
              g_authtxtmd_015        = wa_tab-med_desc
             marked_04_016          = 'X'
              g_authtxt_017          = wa_tab-short_desc
              g_authtxtmd_018        = wa_tab-med_desc
             tctiobjnm_04_019       = 'ZCONTRCT'
              g_authtxt_020          = wa_tab-short_desc
              g_authtxtmd_021        = wa_tab-med_desc
             marked_05_022          = ''
             opt_01_023             = 'EQ'
              low_01_024             = lv_contract
              g_authtxt_025          = wa_tab-short_desc
              g_authtxtmd_026        = wa_tab-med_desc
              g_authtxt_027          = wa_tab-short_desc
              g_authtxtmd_028        = wa_tab-med_desc
              g_authname_029         = wa_tab-auth
    * IMPORTING
    *   SUBRC                  =
           TABLES
             messtab                = temp_message.
    "" Creation of role
    LOOP AT it_role INTO wa_role.
          CLEAR wa_text.
          wa_text-text = wa_role-desc.
          wa_text-langu = 'E'.
          APPEND wa_text TO it_text.
          wa_jobrole-agr_name = wa_role-role_name.
          wa_parentrole-agr_name = 'ZM_CT_DUMMY_MIS'.
          wa_method-usmethod = 'CHANGE'.
          CALL FUNCTION 'ZBAPI_JOBROLE_CLONE'
            EXPORTING
              jobrole          = wa_jobrole
             parent           = wa_parentrole
             method           = wa_method
           TABLES
    *   RETURN           =
             shorttext     = it_text
    *   LONGTEXT         =
    *   MENU_NODES       =
    *   MENU_TEXTS       =.
        ENDLOOP.
    2) ZMIS_AUTH_ASSIGN_TO_ROLE - This program will generate the profile created assign it to the role.
      ""*BDC for Profile creation and assignment to Roles
        CALL FUNCTION 'ZROLE'
          EXPORTING
           ctu                     = 'X'
           mode                    = p_mode
           UPDATE                  = 'L'
    *   GROUP                   =
    *   USER                    =
    *   KEEP                    =
    *   HOLDDATE                =
           nodata                  = '/'
            agr_name_neu_001        = wa_role-role_name
            text_002                = wa_role-desc
            text_003                = wa_role-desc
            text_004                = wa_role-desc
           value_01_005            = 'T-ML330881'
            h_fval_low_01_006       = wa_role-auth
            profn_007               = lv_profile
            ptext_008               = lv_text1
    * IMPORTING
    *   SUBRC                   =
         TABLES
           messtab                 = temp_message .
       COMMIT WORK AND WAIT.
    ""*Generation of Profile created
      LOOP AT it_role INTO wa_role.
        CALL FUNCTION 'PRGN_AUTO_GENERATE_PROFILE_NEW'
         EXPORTING
           activity_group                      = wa_role-role_name
    *     PROFILE_NAME                        =
    *     PROFILE_TEXT                        =
          no_dialog                           = ' '
          rebuild_auth_data                   = ''
          org_levels_with_star                = ' '
          fill_empty_fields_with_star         = 'X'
          template                            = ' '
          check_profgen_tables                = 'X'
          generate_profile                    = 'X'
          authority_check_pfcg                = 'X'
       EXCEPTIONS
         activity_group_does_not_exist       = 1
         activity_group_enqueued             = 2
         profile_name_exists                 = 3
         profile_not_in_namespace            = 4
         no_auth_for_prof_creation           = 5
         no_auth_for_role_change             = 6
         no_auth_for_auth_maint              = 7
         no_auth_for_gen                     = 8
         no_auths                            = 9
         open_auths                          = 10
         too_many_auths                      = 11
         profgen_tables_not_updated          = 12
         error_when_generating_profile       = 13
         OTHERS                              = 14
        IF sy-subrc <> 0.
          MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
                  WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
        ENDIF.
      ENDLOOP.
    For creating authorization objects, role & profile i have created one dummy auth, dummy role & dummy profile respectively.
    i have created dummy objects to copy the roles from dummy object and assign the same to new Auth obj, role & profile.
    Let me know what needs to be done. because these both the programs run perfectly in foreground, but fails in background.
    Regards,
    Chetan

  • BDC for PFCG for deletion of user roles

    I need to create a BDC for deleting users from roles in PFCG transaction and after deletion you have to click on User comparison in User tab.
    Any idea how to compare and delete theusers from role.
    It comes in Table control.
    1)delete from table control .
    I have not been able to see delete from Table programs.
    George

    Hi
    U should consider PFCG trx is enjoy trx so it's not suitable for BDC, what doesn't mean you can't do a BDC program for that trx but it won't be easy.
    Anyway you can know the users assigned to certain profile reading table AGR_USERS. I believe PFCG shows them sorted alphabetical, so you can know the position where an user should be, after u should use PAGE UP and PAGE DOWN command to scroll the table control.
    Max

  • Issue in Program for mass creation of customer plans.

    Hello all,
    I am working on a program which helps mass creation of customer plans. My code works well, when no planning account is assigned,  but when I pass the planning account value into the Function module, it gives me an error saying ' Account cannot be displayed, please check your authorizations'. I donot have this problem, when I manually createthe customer plan in the CRM_UI.
    Please let me know the possible cause for this kind of message.
    Thanks,
    Disha.

    Hi Dishaa,
    I'm afraid that I don't have any other clues. Most often it is a difference in user. If you are absolutely sure that you are using the same user at the exact moment the authorization is checked it cannot be that.
    Kinda curious now what the solution to your problem is....
    Best regards,
    Guus
    Edited by: Guus Jansen on Feb 14, 2011 1:32 PM

  • Request Number is not generated for BRM "new" role creation

    Hello Gurus,
    I have configured BRM in SAP GRC AC 10, along with the workflow .
    I have selected the following methodology
    Define Role --> Maintain Auth >Analyze & Access Risk>Request Approval>Generate Roles>Maintain Test Cases
    Role name : Y_TEST_BRM_FUNCTIONALITY
    So i do the following steps and assign
    1) Role approver as Mr. ABC & Alternate approver as Mr. QRS
    2) Assign the Required transactions and do the RAR i.e i am done till step 3 of methodology
    When i click "Initiate Approval request"
    The approval triggers , and goes to the 1st stage as configured in MSMP
    1) Power User Approval .
    Here the Power User : EFG , open his workflow and see the request as
    Role approval required for role Y_TEST_BRM_FUNCTIONALITY
    The approver approves the request and then the request all together vanishes.
    Unfortunately i am not able to search the request for that role from NWBC -->Search request by
    Process Id : Role Approver Workflow
    It gives blank !!
    Hence neither i am able to find the request no able to do any debugging of it using
    GRFNMW_DBGMONITOR_WD
    Please note that the Request Id is created for any request in CUP.
    Is it that i have to create a number range for BRM request ??
    If so will you please let me know the object

    Hello All,
    I was wrong in posting the cause of problem.
    Please note no "Request number" is generated for Role creation Request.
    The problem was i was unable to search the Role Request approval status from "Search Request" via  Process Id
    It got resolved via SAP note 1643539 : UAM: Search Request not returning result for some Process Id.
    My Issues is Resolved.
    Thank You.
    Regards,
    Victor

  • What is an easy web-page creation program for use with MacBook Pro?

    Can anyone suggest an easy web-page creation program for use with MacBook Pro?  I have used FrontPage with my PC, but am changing to a MacBook Pro.

    It largely depends on your skill level. Do you want to write web page code, or do you want to just design something and have it turn into a web page automatically?
    If you are more of a designer, try these:
    RapidWeaver
    Freeway Pro
    Muse
    If you want to write web page code, try these:
    Coda
    BBEdit
    Dreamweaver
    If you really don't want to write the code and want the best experience for your viewers, and you want to spend the least amount of time on it, my recommendation is:
    No program at all.
    Instead, sign up with a web site company like:
    WordPress.com (hosted by them) or WordPress.org (hosted on your server)
    Squarespace
    Wix
    The reason is that these companies have fully operational, nicely designed web site templates that you just fill in with your words and pictures, and they are ready to go. They also give you these benefits:
    Already designed to the latest web standards
    Already designed to resist hackers
    Already designed to work on all browsers
    Already designed to automatically adjust the page for readability on desktop, laptop, tablet, and smartphone screen sizes
    Already designed for accessibility
    Already designed for Search Engine Optimization so that your page will be found on Google
    Already designed with social media links built in if you want
    It is not like the old days where you build a site in Front Page and you assume it will only be seen on a desktop computer. If you build it yourself with a web page program, do you have the knowledge to make a site that works on all of the different web browsers and mobile devices, and is friendly to search engines and social media? If you don't have those skills, working with a website company can be a lot better, faster, and more reliable than trying to hammer all of that out yourself using code in some app.

  • PFCG, derived roles, create inheritance relation for existing roles

    Dear reader,
    We have many roles that differ only in the organisational levels, but were not created using the Transaction Inheritance functionality.
    Because of the sheer number of these similar roles, making a change in a non-organisational field in these roles is quite laborious.
    Such a change is much easier when there is an inheritance relation between a template and all dependent roles.
    Is there a way to set up the inheritance relation between a template and it's dependent roles after their creation ?
    Kind Regards,
    John Hermans

    My own thinking what will happen if we combine so and so roles....
    I have a other basic question regarding the field values of a A.object.As we know the one particular A.object is related to so many T.codes.Eg:assigning just 1 tcode to a role which contains 5 A.objects(those 5.A.objects are related to so many different T.codes).If we generate the profile for the role it will bring up all the mandatory field values for that specific T.code which is added.Suppose if we assign some values in the fields which are blank(maintain) or even changing the standard values(01,02 standard but deleting those values and assigning 03,04).Will the user gets accesss for the maintained/changed field values ? The reason for asking is ,as we are deleting the mandatory field values of the tcode and assigning some other values which are standard values for some other Tcodes (which are not added in the menu)
    Pls excuse me if it confuses ....

Maybe you are looking for

  • I have the canon MX880 series. Why do it stop printing when not in use for about 30 days?

    Hello, As stated in the subject line, my printer seems to stop printing after sitting for a few weeks.  I don't know how I end up getting it to print again, I just keep trying different things and  with luck some how it starts to print again, SOMETIM

  • WDTV Live connection help needed

    Hi, I just changed ISPs yesterday to BT Total Broadband, i've managed to get everything to connect ok, but I can't stream content over to my WDTV Live, it finds it on the  Home Network > Devices ok but when I go to find files over on my WDTV Live und

  • Is there a Flash Player 10 Debugger version for PowerPC Macs?

    At http://www.adobe.com/support/flashplayer/downloads.html  in the debugger version section, I see only content debugger for Intel-based Macs.  My main development system is a PowerPC Mac. I see a link below that titled "Flash Player 10 Projector con

  • Design application

    Hello , i would like to start some renovation to my house. First i would like to make a plan of my house and all the room of it. Then take some room and make my changes. Any suggestion for a software Thanks

  • Missing workout data from new iPod

    I used the nike+ website with my 1st gen iPod and everything worked great, but then I got a new ipod a few months ago and forgot to send my data to the nike website. When I sync my new ipod it only sends my most recent run but not all the runs that I