SAP Roles and Access for SAP Implementation team members
Hi,
Is it correct practice to give SAP_ALL role access for all SAP Implementation team members in Dev and QA?
If not, what is the correct practice?
Kindly let me know
Madhu,
It is NOT correct practice to give anyone SAP_ALL in any of the systems; not DEV, not QAS, and certainly not PRD. However, many implementation teams (and particularly consultants from SIs) insist that they cannot possibly do their jobs without it. This is completely incorrect as there are specific roles for them to use for that purpose. The only circumstance where it could be justified is if you require a special "firefighter" role - and even then, I would still be a bit doubtful.
You should also consider that once you have given someone SAP_ALL, they will fight tooth and nail to keep it. It also means that they probably are not testing the user roles correctly. Most of those that insist they need it simply do not understand the security issues and probably don't care.
Just think; if they have access to do soemthing that they shouldn't and then cause a big problem, are they the ones that will have to fix it or are they going to expect you to do it? If they expect you to clear up after them, then you have the right to insist on restricting their access to cause issues in the first place.
But I know just how demanding they can be....
Best of luck
Tony
Similar Messages
-
Defining roles and access for OWB Designer
Hi,
Can i Define roles and access rights to different on 1 OWB Designer repository?
I want to send my mappings for code review but i dont want them to log into the OWB designer with write access.
How can i achieve this in the same OWB designer repository as the one i am using?
I am using OWB 10.1.
I found some table - WMP_USER_ROLES,WMP_GROUP_ROLES,WMP_GROUP_REPOSITORIES
when i logged into the designer schema through sqlplus
Thanks
SagarHi Sagar,
Yes you can do that. Basically you can create a db user, and then register the user with a repository. By default that user has all privileges, however it now is audited per user as to what he/she did. How to do this look at the doc (find SecurityHelper)
To enable you to protect metadata there are a couple of strategies (implemented via a simple PL/SQL API). For an example (this one works with policies on the module level) take a look here (http://www.oracle.com/technology/sample_code/products/warehouse/files/Dev_Status_Policy.SQL)
This would work as follows:
- Create user REVIEW
- Register user REVIEW to repos QA
- For a module you want review for, set the status to QA
Now the REVIEW user logs in and he can look at QA but cannot touch.
Hope this helps,
Jean-Pierre
In your situation -
Roles and responsebilities of sap sd implementation consultant?
what are the roles and responsebilities of sap sd implementation consultant?
Hi,
Refer to this website for roles and responsebilities of sap sd implementation consultant.
http://www.sap-img.com/general/role-of-a-sap-functional-consultant.htm
Simple - he is responsbile for implementation of SAP SD Module.
Regarding Implemenation
http://en.wikipedia.org/wiki/SAP_Implementation
Please let me know if you need more information.
Assign points if useful.
Regards
Sridhar M -
SAP Security handover from the Onshore Implementation team Documents
Dear All,
We are an Implementation & Support Team and we are getting SAP Security handover from the Onshore Implementation team where in future we ought to continue the Implementation.
Please could you let me know what others documents which we require for handling the complete security landscape for our Scenario!
CRM, BI, BS, SOLMAN, EP and PI
Please suggest any other documents besides the below or any other specific details with respect to each Module,
u2022 Enterprise-Wide Role Matrix
u2022 Role Implementation Framework Prototype
u2022 User Authorization and Strategy Management Procedures
u2022 User Role and Authorization Concept Technical Design
u2022 SAP Security Organization Hierarchy Requirements
u2022 Transaction to Role Mapping
u2022 Role to Position Mapping
u2022 Available authorization policy documents
u2022 Role matrix with segregation of Duties
Many ThanksWhat do you have defined for your support?
Presumably you have quoted a price per call but what do you cover and how do you calculate the charge to your client?
Please let me know so that I can undercut your quote.
Damn - forgot to ask who your client was and the contact name.
Cheers
David
Edited by: David Berry on Feb 11, 2011 12:29 AM
Edited by: David Berry on Feb 11, 2011 12:30 AM -
what is role and profile in SAP?
how we can diffferentiate both?Hi Swati,
Role refers to the collection of associated activities (privilages) such as transactions, reports and so on. There are 2 types of Roles, Standard Role and Derived Role. While profile is a set of authorizations that are valid for the transactions defined in that role. Roles contain no actual access. They contain a role menu composed of transaction codes. These transaction codes are then mapped into the profile automatically by profile generator. When a role is generated (once created) the profiles are created automatically by profile generator. Every transaction code is different and may require different numbers of accompanying authorization objects to execute. A single profile can only contain 150 authorizations. Once that number is exceeded the profile generator will automatically create a second profile, sorted alphabetically by object name.
Please refer the below links:
The specified item was not found.
Re: difference between profile and role
Difference between Role & Profile
Regards,
Sreedhar -
Role and responsibilities of SAP BW support consultant
Hi Guru's,
What is the Role and responsibilities of SAP BW support consultant?
Regards,
Sabari kannan.SXI Architect:
He plays the role in the analyzing the landscape for which XI will be used...will take the special not on the number for legacy systems involved...type of system...how much amount of data will flow what has to be taken care for better performance etc........
1. Design the XI for the currentl lanscape for high performance...
2. Idebtiy the bottle necks which can appear.
3. understanding the busnies requirement withrespective to XI
4. Configure the XI according to the standrds
5. Lays ground rules on the developemtnenv till golive.
6. what's the good appproach of design when systems like CRM,BW etc are invloved.
7 tranports methods till production and so on -
What are the Roles and Responsibilities of SAP Testing Consultant?
Hello,
i want to know about The Roles and Responsibility of SAP Testing Consultant,,pls anybody guide me Real time scenarios.
regards,
BalaramUnderstanding the business scenarios
Organization Structure to incorporate the tune of the script.
Preparation of test scripts
Execute and record results to see if it is fine before going to approval.
Make changes to your test script if required.
What is Test Script (Scenario Testing)
Header Data
Step in Process
Transaction Code / Program (FB60)
Menu Path
Description
Field Data and actions to complete
Expected Results
Actual Results
TPR
Closing Period
F.19 Clearing GR/IR Account
F.13 Adjustments GR/IR Account
Using of these above two accounts will help us in clearing the balances and adjustments to those respective clearing accounts so that the GR/IR account will be zero balance and the balances will appear in respective reconciliation accounts accordingly the balances will be carried forwarded to next fiscal year.
GR/IR Clears the following Documents
GL Document
Customer Documents
Vendor Documents
Assignment Field is important in any document (ZUONR), Amount (DMBTR)
Foreign Currency Valuation
Lowest Value Method, If we are in loss then only we will account for it.
GL Accounts which are important in Testing
Enjoy Transaction - FB50
Normal Transaction - FB01
Document Parking - FV50
Post with Clearing - F-04
Incoming Payment - F-06
Outgoing Payment - F-07
Document Related
Reset Cleared Items - FBRA
Parking Document Posting - FBVO
Reversal Documents - F-14
Company Code Clearing A/C
(Trial Balance purposes) reversal - (FBUB)
Clearing Account
Partial clearing Invoice - 100 - Open Item
Paid - 70 - Open Item
Balance - 30
In Partial Clearing you can see 100 and 70 are cleared line items and 30 as balance and if it is in Residual you can only 30 as balance as it creates new line item and you canu2019t see the other cleared line items.
As no company will use residual clearing as it affects on ageing reports.
Open Items in Foreign Currency in all Modules GL/AP/AR - F.05
Master Data
Company Code
Currency
Only Balances in local currencies
Reconciliation Account Type
Year End Scripts
Re Grouping Receivables / Payables - (F101)
Bad Debts Provisions u2013 Scripts
We assume that the customer has not paid at the end of the year you doubt whether this receivable will ever be paid. So you make a transfer posting for the receivables to an account for individual value adjustments using special GL Indicator E and Transaction Code F-21
Carry forward Balances
Sub Ledgers and General Ledger balances to be forwarded to next Fiscal Year
Accounts Payables
Vendor Down Payments
Invoice
Parking
Reversal
Outgoing Payments
Automatic Clearing
Manual Clearing
Advance (Down Payment)
Post with Clearing
Post without Clearing
Reset Clearing
Carry forward
Regrouping
Foreign Currency Valuations
Accounts Receivables
Customer Down Payments
Invoice
Parking
Reversal
Incoming Payments
Manual Clearing
Advance (Down Payment)
Post with Clearing
Post without Clearing
Reset Clearing
Carry forward
Regrouping
Foreign Currency Valuations
Other than that, it is important to know the following:
Unit Testing
When you test every single document is called unit testing.
String Testing
One transaction full activity is called string testing . For example Vendor invoice, goods received and vendor payment.
Integration Testing
It is purely with other modules and we have to check whether the FI testing is working with other related modules or not.
Regression Testing
Testing for whole database. Bring all the data into another server and do the testing is called regression.
UAT
When we test any particular document with the user and if it is ok immediately we have to take the signature on the document, which is signed off and can be forwarded to the immediate boss. There are some steps to be followed when we go for user acceptance testing.
Transaction u2013 Script Writing u2013 Expected Results u2013 Compare with Actual Results
TPR (Transaction Problem Reporting)
While doing the user acceptance testing if we get any problems then there are some methodologies to be followed according to the companyu2019s policy and normally as a tester we always need to write on Test Script itself.
Hope this helps you.
Regards,
Rakesh -
I am new to SAP and BW. A goal of mine, straight from my GEM form, is to "Increase my knowledge of the security in the SAP application by understanding SAP roles and how they apply to Business Warehousing". Please point me to websites, books, white papers, etc.
[email protected]Zip
Please check these links and hope it helps
http://help.sap.com/bp_biv235/BI_EN/documentation/Authorization_BW_Proj.pdf
http://help.sap.com/saphelp_nw04/helpdata/en/52/671595439b11d1896f0000e8322d00/frameset.htm
Thnaks
Sat -
Hi All, can i have some production support issues with rootcasue and resolution for SAP TM?
Thanks,
SreenivasHi Sreenivas,
I would recommend that you read the Rules of Engagement and other documents in the Getting Started link (top right) before posting anymore. Your Discussion will most likely get reported as non-specific and get removed. If you have a specific problem with TM, please post it in a new thread with error messages, version and SPs installed, and how the error occurs and what you are trying to get TM to do.
There are a lot of resources available in the TM Overview page which can help, so start there and maybe also look at some of the MKS (Monday Knowledge Session) recordings which should also be listed. There are also a lot of experienced people who can help resolve issues your TM installation, but you need to provide enough information on the problems you are having. If you are just looking for information on past problems, do a Search or simply browse through past Discussions which are marked with a green Check (Correct Answer).
Regards, Mike
SAP Customer Experience Group - CEG (and a Moderator) -
Roles and authorisations in SAP BI...
CAN ANY ONE EXPLAIN ME THE ROLES AND AUTHORISATIONS IN SAP BI /BW...???
THANKS IN ADVANCE...Hi Anand,
Refer these links from help.sap.
BI Authorisations
http://help.sap.com/saphelp_nw2004s/helpdata/en/be/076f3b6c980c3be10000000a11402f/frameset.htm
BI Analysis Authorisation
http://help.sap.com/saphelp_nw2004s/helpdata/en/66/019441b8972e7be10000000a1550b0/frameset.htm
Regards,
Hari -
IBM Lotus Notes access for SAP solutions
Hi SDN friends,
Can somebody through some light on IBM Lotus Notes access for SAP solutions.
How this works technically?Hi vinay
u cn refer to these links.u cn get some idea abt IBM Lotus Notes
IBM Lotus Notes integration with SAP CRM
Integrating lotus notes with R\3
ESS to IBM Lotus Notes...
Regards
Bhargava
sorry for replying late,i havent seen this question.......
pls assign points if the links are useful by clicking on the radio buttons to the left of my post -
SAP JAM work pattern for SAP C4C Service ticket
Can anybody familiar with the SAP JAM Work pattern for SAP Cloud for Customer Service tickets answer these questions?
My client would like to use SAP JAM groups in Service tickets in the following way:
C4C service agents raise service tickets which are then worked on by back-office departments (who don't have access to C4C but will collaborate on ticket resolution via SAP JAM)
Back-office departments work on a high volume of tickets so having one JAM group per ticket is not practical. Instead we would like to have one JAM group per department
Departmental JAM groups should be created in JAM independently from C4C
Upon ticket creation in C4C, the service agent should be able to select the relevant departmental JAM group to collaborate and start a discussion topic
The agent should be able to easily pick up any update/reply from the back office team on the topic he created
Is the scenario above supported? In particular, how can one predefine/auto-select which JAM group is assigned to a service ticket?Can anybody familiar with the SAP JAM Work pattern for SAP Cloud for Customer Service tickets answer these questions?
My client would like to use SAP JAM groups in Service tickets in the following way:
C4C service agents raise service tickets which are then worked on by back-office departments (who don't have access to C4C but will collaborate on ticket resolution via SAP JAM)
Back-office departments work on a high volume of tickets so having one JAM group per ticket is not practical. Instead we would like to have one JAM group per department
Departmental JAM groups should be created in JAM independently from C4C
Upon ticket creation in C4C, the service agent should be able to select the relevant departmental JAM group to collaborate and start a discussion topic
The agent should be able to easily pick up any update/reply from the back office team on the topic he created
Is the scenario above supported? In particular, how can one predefine/auto-select which JAM group is assigned to a service ticket? -
Roles and Rules for workflow.
Hi,
I have some basic conpectual problem about roles and rules.
What is the diffrenece between roles and rules in sap business workflow ? What is the Tcode for Role creation/Change/Display and Rule creation/Change/Display ?
I am using a standard workflow for PR Release "WS20000077".
I have done all the setting except this agent assignment using roles or rules. The default rules used in the task "TS20000159" is "20000026". The Binding from workflow to rules container is also defined by the workflow itself.
This rules is defined using a function module.When I am putting a breakpoint in this function module and tring to execute my workflow it is not going to the given breakpoint but the workflow is running successfully as shown in the event trace "SWE2".
What could be the problem..Pls suggest?Hi Tanuja,
Go through this link for [Rule Documentation|http://help.sap.com/saphelp_nw04/helpdata/en/bb/bdc296575911d189240000e8323d3a/frameset.htm]
And
http://help.sap.com/saphelp_nw2004s/helpdata/en/95/ed94ee764c11d3b535006094b9c9b4/frameset.htm
Go through this link for [Roles in Workflow|http://help.sap.com/saphelp_nw04/helpdata/en/f4/4a5536ad3d2a17e10000009b38f839/frameset.htm]
Hope this would help you.
Good luck
Narin -
Convert SQL server database into SAP readable (encrypted) XML for SAP tool?
Could anyone kindly let me know what is the procedure to convert SQL server database into SAP readable (encrypted) XML for SAP Authoring tool???
So If I understood it correctly there an existing propriertory question bank with SQL server. You are looking at an option to migrate all the tests and questions from the existing system to the LSO system. Right ?
I am still not clear on the xml conversion. Have you guys found a solution which could be achieved through a xml file ?
am not aware of a way through which you could import only a xml file and create tests/questions. If you have a sample xml file then forward me so that I could do some testing on my end.As per my knowledge you could do one of the following. I
1. Create the tests and questions manually in Authoring Environment. It will be a time consuming task. Based on the number of questions you have you might have to assemble a team of content developers to acheive this.
2. Alternatively, you could create a Adobe Flash based assessment. The Flash component would be the front-end and will read from a xml file to display the questions and to drive the funcationality. This would be a easier and less time consuming than creating the assessments manually in authoring environment. However, you might miss out some of the functionality available in the Test Author of Authoring Environment unless you have all the functionality replicated inside Flash. This would require one time effort in creating the Flash template and the xml file structure. Once that is created you could create multiple assessments by just replacing the xml file. If you select this approach then you would have to ensure the data from SQL is converted in the desired xml format required by your Flash component.
Please let me know if you require any further guidance or clarification regarding this.
Regards,
Ravi Sekhar -
Error while installing the SAP J2EE add-on for SAP NW XI installation
Error while installing the SAP J2EE add-on for SAP NW XI installation
Posted: Jan 24, 2007 5:23 PM Reply E-mail this post
Hello,
When I am installing the SAP SAP J2EE add-on for SAP NW XI installation I am getting the follwing error:
CJS-00084 SQL statement or script failed. DIAGNOSIS: Error message: Executable /oracle/XID/920_64/bin/sqlplus returns 127.. SOLUTION: See ora_sql_results.log and the Oracle documentation for details
Could some one help me to resolve this error and install the SAP J2EE add-on?
Thanks,
GeorgeHi George,
Kindly use the latest installation Masted in Service market place. That will possibly solve your problem.
Regards
Vivek
Maybe you are looking for
-
PL/SQL w/ Java to run OS batch file crashes Oracle
I followed instructions from "Ask Tom" on using PL/SQL with Java to execute an OS batch file. For testing purposes, my batch file does nothing more than display the date and time from the OS. However, when I run the PL/SQL that executes this simple b
-
i have reset my macbook pro to factory reset the screen is now asking me to put in my details, do i have too as if i am showing it to someone they need to be able to see it working but does that not mean that my name will be on it. please help
-
Wifi connection to iphone fails after replacing sim card
the sim card on my iphone failed and had to be replaced. the phone works fine now EXCEPT cannot get wifi from verizon Actiontec router: says Incorrect Password. other devices (iPad, Kindle) still connect OK. please help. Lou
-
My Premiere Pro CC Won't Launch
Ever time I open it, it opens and then it says that my resolution is too low which it isn't I checked and then it gives me an error message saying that there was a problem with the program and that they would try to send me a solution for the problem
-
Equipment Serialno data segment inconsistency
We have build a custom application where we tried to automate the Equipment sales process. Scenario : Trying to sell Equipment materials in sales order with multiple line items using a custom development. Each line item in Sales order is associated w