Program for PFCG Role Creation
Hi Guys,
I have a requirement for creating a program that will automate the Role Creation (Transaction PFCG)
I have the following Questions.
Is it Really possible via Program.
The expectation is in selection screen user will give the Standard and Derived Role after execution he expect the role to be created.
If anybody have experience in the same scenario kindly share me.
Regards,
Vijay.
Try with PFCG_START_PFCG
G. Lakshmipathi
Similar Messages
-
Need to create a mass upload program for appraisal document creation for multiple employee
Hi Expertise,
I need to create a mass upload program for appraisal document creation for manager and his multiple employee
at a time using tcode appcreate.
Please help me out.
Best regards,
PriyaranjanHi Priyaranjan,
I think you can take the abap'ers help in creating the program. But u need to provide them the exact functionality and the required specifications in creating the appraisal document.
Even tcode also u can get it prepared by Abap'ers.
Thanks and Regards
Balaji -
Hi Expertise,
I need to create a mass upload program for appraisal document creation for manager and his multiple employee
at a time using tcode appcreate.
Please help me out.
Best regards,
PriyaranjanHi,
I have done appraisal document creation for bulk using txt file.
this fm used for single for creation in standard tcode (phap_prepare): 'WZ_HRHAP_0DOC_WZ01_START'.
So create ztcode usinh this fm for single form then record BDC for this tcode and called this tcode in that bdc for bulk creation .
While recording for single I have used manual option instead of automatic . -
Standard Batch Input Programs for Profit Center Creation
Dear all;
I am in 4.0B version that doesnt have BAPI_PROFITCENTER_CREATE. Writing a BDC for this would be complicated as my data is compiled in a different way.
Are there any Standard Batch Input Programs for Profit Center Creation ?Hi Srivathsan,
You can make use of Standard BAPI by LSMW.
Business Object BUS1116 Profit Center Group
Method CREATE Create
Message Type PROFITCENTERGROUP_CREATE
Basic Type PROFITCENTERGROUP_CREATE
Regards,
Sivaram. -
BAPI or FM or Standard BDC program for Production version creation (C223)
Hi All,
Is there BAPI or FM or Standard BDC program for Production version creation? Please help me.
Thanks & Regards
SanthoshHi,
Try this FM "CO_OCM_CREATE_PROD_VERSION"
Regards,
Smart -
Security Guys,
My requirement is creation of role for an ABAPER who should run all the Z reports but not exactly the report RSDU_EXEC_SQL_PROGRAM ( meaning no SAP Standadrd reports ). Is there a way to achieve this ?
Thanks / Arunkumar PHi,
that role should be for production only environment or development as well? If it's for development then I assume that ABAPER can write a custom programs so there is no chance to prevent this user from running RSDU_EXEC_SQL_PROGRAM. If it's for production environment then all those custom reports should have transaction codes assigned to them. In that case you can create a role for all of them plus some read only debugging authorization.
Cheers -
Script or Program for massive role changes
Hi,
does anybody know some script to execute massive changes in SAP ROLE??
CiaoYou can try a bash script. Example: This one converts wav to mp3:
#!/bin/bash
for i in "$@" ; do
lame --r3mix "$i" "`basename "$i" .wav `.mp3"
done
./wav2mp3.sh *.wav
will convert all wav in the current directory to mp3. You can change the lame line if you have other formats. -
PFCG role creation and input from users
I know that when you create a new role and add transactions to the menu you will get some default authorization objects in the role.
After that you will need to fill out activities for transactions;
For ex: display, create, change
I also know that during testing when you run /nsu53 you will need to add some additional objects in the role.
If the user does not know which activites he/she need or even for example for order types
OR, ZNON, KE
How can i help if the user does not know what he/she needs.
The way I'm doing this currently is by giving the user the transactions he/she needs and then have them run /nsu53 and I fix the problem.
Thanks
joJo,
As I have worked in situtations similar to the one you describe where the user performing the testing doesnt know which activites/values they need access to contribute to productive role build/testing sessions. Some of the things I have done to help them are:
1) Educate the user on the Authorization Object and Fields. You can typucally hit (F1) for more information related to the object/field.
2) Tie the object values back to actual SAP Tables with data to show user configuration of the system and values that are options.
3) Find someone from the process/business side who understands the requirments or has done the configuration to support the process and have an educational/testing session together.
Thanks.
Matt -
Disable the buttons for creation using PFCG roles
Hi SAP Experts,
How to disable the buttons for creation using PFCG roles?
Regards,
JayaHi,
u have to write the code in <b>at selection-screen output</b> event
AT SELECTION-SCREEN OUTPUT.
LOOP AT SCREEN.
IF <b>P_PRINT</b> = 'X'. " this is radiobutton
IF screen-name = 'P_RANGE'.
SCREEN-INPUT = 0.
ENDIF.
modify screen.
ELSE.
IF screen-name = 'S_LFDAT-LOW'.
SCREEN-INPUT = 0.
ENDIF.
IF screen-name = 'S_LFDAT-HIGH'.
SCREEN-INPUT = 0.
ENDIF.
IF screen-name = 'S_WERKS-LOW'.
SCREEN-INPUT = 0.
ENDIF.
IF screen-name = 'S_WERKS-HIGH'.
SCREEN-INPUT = 0.
ENDIF.
IF screen-name = 'P_LIFNR'.
SCREEN-INPUT = 0.
ENDIF.
IF screen-name = 'S_BUKRS'.
SCREEN-INPUT = 0.
ENDIF.
modify screen.
ENDIF.
ENDLOOP.
Hope it helps.
Regards,
Sonika -
Background job fails for BDC profile creation and role assignment
Hi Experts,
I have created a BDC Function module for Tcode 'PFCG' for profile creation and role assignment, and called this FM in my zprogram. the problem is that when i run this program in foreground it executes succesfully, but if i schedule it in background it fails throwing error in job log 'Role 'Z...' does not contain any active authorizations'. But i have created one more program to create authorization objects which runs before this zprogram.I have also checked the authorization object in 'RSECADMIN', it reflects active. I dont understand whats happening exactly when it runs background.
Below is the process of job
1. ZMIS_AUTH_OBJECT_CREATE
Variant : auth-create
2. ZMIS_AUTH_ASSIGN_TO_ROLE
Variant : auth-assign
The problem is in second program, runs in foreground but fails in background.
Code which i have written in my second program
***BDC for Profile creation and assignment to Roles
CALL FUNCTION 'ZROLE'
EXPORTING
ctu = 'X'
mode = p_mode
UPDATE = 'L'
* GROUP =
* USER =
* KEEP =
* HOLDDATE =
nodata = '/'
agr_name_neu_001 = wa_role-role_name
text_002 = wa_role-desc
text_003 = wa_role-desc
text_004 = wa_role-desc
value_01_005 = 'T-ML330881'
h_fval_low_01_006 = wa_role-auth
profn_007 = lv_profile
ptext_008 = lv_text1
* IMPORTING
* SUBRC =
TABLES
messtab = temp_message.
***Generation of Profile created
CALL FUNCTION 'PRGN_AUTO_GENERATE_PROFILE_NEW'
EXPORTING
activity_group = wa_role-role_name
* PROFILE_NAME =
* PROFILE_TEXT =
no_dialog = ' '
rebuild_auth_data = ''
org_levels_with_star = ' '
fill_empty_fields_with_star = 'X'
template = ' '
check_profgen_tables = 'X'
generate_profile = 'X'
authority_check_pfcg = 'X'
EXCEPTIONS
activity_group_does_not_exist = 1
activity_group_enqueued = 2
profile_name_exists = 3
profile_not_in_namespace = 4
no_auth_for_prof_creation = 5
no_auth_for_role_change = 6
no_auth_for_auth_maint = 7
no_auth_for_gen = 8
no_auths = 9
open_auths = 10
too_many_auths = 11
profgen_tables_not_updated = 12
error_when_generating_profile = 13
OTHERS = 14 .
Experts please help me out its very urgent. your help is appreciated and rewarded. Thanking you in advance.
Regards,
ChetanHi Praveen,
Yeah definately, my requirement is that I have to access of some BI reports to certain users, so contract data will be downlaoded from ECC on application server, need to read that file from application server and for the each contract i ahould create a authorization object, role creation and assigning of role to the user and profile generation and activation.
To achieve this i have written two programs
1) ZMIS_AUTH_OBJECT_CREATE- This program will create the Authorization Object using BDC and Role creation Using the BAPI
"" Creation of Authorization Object
CALL FUNCTION 'ZAUTHOBJ'
EXPORTING
ctu = 'X'
mode = p_mode
UPDATE = 'L'
* GROUP =
* USER =
* KEEP =
* HOLDDATE =
nodata = '/'
g_authname_001 = 'ZDUMMY_MIS'
g_targetauth_002 = wa_tab-auth
g_authtxt_003 = wa_tab-short_desc
g_authtxtmd_004 = wa_tab-med_desc
marked_04_005 = 'X'
g_authtxt_006 = wa_tab-short_desc
g_authtxtmd_007 = wa_tab-med_desc
tctiobjnm_04_008 = 'ZBUS_UNIT'
g_authtxt_009 = wa_tab-short_desc
g_authtxtmd_010 = wa_tab-med_desc
marked_05_011 = ''
opt_01_012 = 'EQ'
low_01_013 = wa_tab-bu
g_authtxt_014 = wa_tab-short_desc
g_authtxtmd_015 = wa_tab-med_desc
marked_04_016 = 'X'
g_authtxt_017 = wa_tab-short_desc
g_authtxtmd_018 = wa_tab-med_desc
tctiobjnm_04_019 = 'ZCONTRCT'
g_authtxt_020 = wa_tab-short_desc
g_authtxtmd_021 = wa_tab-med_desc
marked_05_022 = ''
opt_01_023 = 'EQ'
low_01_024 = lv_contract
g_authtxt_025 = wa_tab-short_desc
g_authtxtmd_026 = wa_tab-med_desc
g_authtxt_027 = wa_tab-short_desc
g_authtxtmd_028 = wa_tab-med_desc
g_authname_029 = wa_tab-auth
* IMPORTING
* SUBRC =
TABLES
messtab = temp_message.
"" Creation of role
LOOP AT it_role INTO wa_role.
CLEAR wa_text.
wa_text-text = wa_role-desc.
wa_text-langu = 'E'.
APPEND wa_text TO it_text.
wa_jobrole-agr_name = wa_role-role_name.
wa_parentrole-agr_name = 'ZM_CT_DUMMY_MIS'.
wa_method-usmethod = 'CHANGE'.
CALL FUNCTION 'ZBAPI_JOBROLE_CLONE'
EXPORTING
jobrole = wa_jobrole
parent = wa_parentrole
method = wa_method
TABLES
* RETURN =
shorttext = it_text
* LONGTEXT =
* MENU_NODES =
* MENU_TEXTS =.
ENDLOOP.
2) ZMIS_AUTH_ASSIGN_TO_ROLE - This program will generate the profile created assign it to the role.
""*BDC for Profile creation and assignment to Roles
CALL FUNCTION 'ZROLE'
EXPORTING
ctu = 'X'
mode = p_mode
UPDATE = 'L'
* GROUP =
* USER =
* KEEP =
* HOLDDATE =
nodata = '/'
agr_name_neu_001 = wa_role-role_name
text_002 = wa_role-desc
text_003 = wa_role-desc
text_004 = wa_role-desc
value_01_005 = 'T-ML330881'
h_fval_low_01_006 = wa_role-auth
profn_007 = lv_profile
ptext_008 = lv_text1
* IMPORTING
* SUBRC =
TABLES
messtab = temp_message .
COMMIT WORK AND WAIT.
""*Generation of Profile created
LOOP AT it_role INTO wa_role.
CALL FUNCTION 'PRGN_AUTO_GENERATE_PROFILE_NEW'
EXPORTING
activity_group = wa_role-role_name
* PROFILE_NAME =
* PROFILE_TEXT =
no_dialog = ' '
rebuild_auth_data = ''
org_levels_with_star = ' '
fill_empty_fields_with_star = 'X'
template = ' '
check_profgen_tables = 'X'
generate_profile = 'X'
authority_check_pfcg = 'X'
EXCEPTIONS
activity_group_does_not_exist = 1
activity_group_enqueued = 2
profile_name_exists = 3
profile_not_in_namespace = 4
no_auth_for_prof_creation = 5
no_auth_for_role_change = 6
no_auth_for_auth_maint = 7
no_auth_for_gen = 8
no_auths = 9
open_auths = 10
too_many_auths = 11
profgen_tables_not_updated = 12
error_when_generating_profile = 13
OTHERS = 14
IF sy-subrc <> 0.
MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
ENDIF.
ENDLOOP.
For creating authorization objects, role & profile i have created one dummy auth, dummy role & dummy profile respectively.
i have created dummy objects to copy the roles from dummy object and assign the same to new Auth obj, role & profile.
Let me know what needs to be done. because these both the programs run perfectly in foreground, but fails in background.
Regards,
Chetan -
BDC for PFCG for deletion of user roles
I need to create a BDC for deleting users from roles in PFCG transaction and after deletion you have to click on User comparison in User tab.
Any idea how to compare and delete theusers from role.
It comes in Table control.
1)delete from table control .
I have not been able to see delete from Table programs.
GeorgeHi
U should consider PFCG trx is enjoy trx so it's not suitable for BDC, what doesn't mean you can't do a BDC program for that trx but it won't be easy.
Anyway you can know the users assigned to certain profile reading table AGR_USERS. I believe PFCG shows them sorted alphabetical, so you can know the position where an user should be, after u should use PAGE UP and PAGE DOWN command to scroll the table control.
Max -
Issue in Program for mass creation of customer plans.
Hello all,
I am working on a program which helps mass creation of customer plans. My code works well, when no planning account is assigned, but when I pass the planning account value into the Function module, it gives me an error saying ' Account cannot be displayed, please check your authorizations'. I donot have this problem, when I manually createthe customer plan in the CRM_UI.
Please let me know the possible cause for this kind of message.
Thanks,
Disha.Hi Dishaa,
I'm afraid that I don't have any other clues. Most often it is a difference in user. If you are absolutely sure that you are using the same user at the exact moment the authorization is checked it cannot be that.
Kinda curious now what the solution to your problem is....
Best regards,
Guus
Edited by: Guus Jansen on Feb 14, 2011 1:32 PM -
Request Number is not generated for BRM "new" role creation
Hello Gurus,
I have configured BRM in SAP GRC AC 10, along with the workflow .
I have selected the following methodology
Define Role --> Maintain Auth >Analyze & Access Risk>Request Approval>Generate Roles>Maintain Test Cases
Role name : Y_TEST_BRM_FUNCTIONALITY
So i do the following steps and assign
1) Role approver as Mr. ABC & Alternate approver as Mr. QRS
2) Assign the Required transactions and do the RAR i.e i am done till step 3 of methodology
When i click "Initiate Approval request"
The approval triggers , and goes to the 1st stage as configured in MSMP
1) Power User Approval .
Here the Power User : EFG , open his workflow and see the request as
Role approval required for role Y_TEST_BRM_FUNCTIONALITY
The approver approves the request and then the request all together vanishes.
Unfortunately i am not able to search the request for that role from NWBC -->Search request by
Process Id : Role Approver Workflow
It gives blank !!
Hence neither i am able to find the request no able to do any debugging of it using
GRFNMW_DBGMONITOR_WD
Please note that the Request Id is created for any request in CUP.
Is it that i have to create a number range for BRM request ??
If so will you please let me know the objectHello All,
I was wrong in posting the cause of problem.
Please note no "Request number" is generated for Role creation Request.
The problem was i was unable to search the Role Request approval status from "Search Request" via Process Id
It got resolved via SAP note 1643539 : UAM: Search Request not returning result for some Process Id.
My Issues is Resolved.
Thank You.
Regards,
Victor -
What is an easy web-page creation program for use with MacBook Pro?
Can anyone suggest an easy web-page creation program for use with MacBook Pro? I have used FrontPage with my PC, but am changing to a MacBook Pro.
It largely depends on your skill level. Do you want to write web page code, or do you want to just design something and have it turn into a web page automatically?
If you are more of a designer, try these:
RapidWeaver
Freeway Pro
Muse
If you want to write web page code, try these:
Coda
BBEdit
Dreamweaver
If you really don't want to write the code and want the best experience for your viewers, and you want to spend the least amount of time on it, my recommendation is:
No program at all.
Instead, sign up with a web site company like:
WordPress.com (hosted by them) or WordPress.org (hosted on your server)
Squarespace
Wix
The reason is that these companies have fully operational, nicely designed web site templates that you just fill in with your words and pictures, and they are ready to go. They also give you these benefits:
Already designed to the latest web standards
Already designed to resist hackers
Already designed to work on all browsers
Already designed to automatically adjust the page for readability on desktop, laptop, tablet, and smartphone screen sizes
Already designed for accessibility
Already designed for Search Engine Optimization so that your page will be found on Google
Already designed with social media links built in if you want
It is not like the old days where you build a site in Front Page and you assume it will only be seen on a desktop computer. If you build it yourself with a web page program, do you have the knowledge to make a site that works on all of the different web browsers and mobile devices, and is friendly to search engines and social media? If you don't have those skills, working with a website company can be a lot better, faster, and more reliable than trying to hammer all of that out yourself using code in some app. -
PFCG, derived roles, create inheritance relation for existing roles
Dear reader,
We have many roles that differ only in the organisational levels, but were not created using the Transaction Inheritance functionality.
Because of the sheer number of these similar roles, making a change in a non-organisational field in these roles is quite laborious.
Such a change is much easier when there is an inheritance relation between a template and all dependent roles.
Is there a way to set up the inheritance relation between a template and it's dependent roles after their creation ?
Kind Regards,
John HermansMy own thinking what will happen if we combine so and so roles....
I have a other basic question regarding the field values of a A.object.As we know the one particular A.object is related to so many T.codes.Eg:assigning just 1 tcode to a role which contains 5 A.objects(those 5.A.objects are related to so many different T.codes).If we generate the profile for the role it will bring up all the mandatory field values for that specific T.code which is added.Suppose if we assign some values in the fields which are blank(maintain) or even changing the standard values(01,02 standard but deleting those values and assigning 03,04).Will the user gets accesss for the maintained/changed field values ? The reason for asking is ,as we are deleting the mandatory field values of the tcode and assigning some other values which are standard values for some other Tcodes (which are not added in the menu)
Pls excuse me if it confuses ....
Maybe you are looking for
-
Hello, As stated in the subject line, my printer seems to stop printing after sitting for a few weeks. I don't know how I end up getting it to print again, I just keep trying different things and with luck some how it starts to print again, SOMETIM
-
WDTV Live connection help needed
Hi, I just changed ISPs yesterday to BT Total Broadband, i've managed to get everything to connect ok, but I can't stream content over to my WDTV Live, it finds it on the Home Network > Devices ok but when I go to find files over on my WDTV Live und
-
Is there a Flash Player 10 Debugger version for PowerPC Macs?
At http://www.adobe.com/support/flashplayer/downloads.html in the debugger version section, I see only content debugger for Intel-based Macs. My main development system is a PowerPC Mac. I see a link below that titled "Flash Player 10 Projector con
-
Hello , i would like to start some renovation to my house. First i would like to make a plan of my house and all the room of it. Then take some room and make my changes. Any suggestion for a software Thanks
-
Missing workout data from new iPod
I used the nike+ website with my 1st gen iPod and everything worked great, but then I got a new ipod a few months ago and forgot to send my data to the nike website. When I sync my new ipod it only sends my most recent run but not all the runs that I