SU24 - Search by Auth object returns "Authorization object not available"

If I try to select by Authorization Object :
F_CLOS_BKA
or
M_MATE_DG
I got "Authorization object not available" error
I can't find F_CLOS_BKA and M_MATE_DG in the TOBJ table as well.
But if I select by Transaction :
F975
or
DGR3
It display
F_CLOS_BKA CHECK YS
M_MATE_DG CHECK YS
Question : Is this Normal?

Hi Dominick,
I recommend to open a ticket at SAP to clarify that....
The correct components should be:
F975-->IS-B-BCA-PT-GLP
DGR3-->EHS-DGP
I suggest to ask them (as they are responsible for delivering the values for SU22) why the deliver proposals for
objects, which do not exist (I have found note #1170774 for F_CLOS_BKA (but this note is 'brand new'), M_MATE_DG seems not to be delivered at all).
It would be nice, if you would post the result of your queries...
thx,
B.rgds,
Bernhard

Similar Messages

Urgent: Linked object not available

We imported one role from one EP7 (DEV) into another EP7 (QAS).
At target QAS PCD, we see the role has a path:
pcd:portal_content/com.sap.portal.migrated/SAPComponentSystems/roles/DEVCLIENT10/ROLE1.
1) We changed above path to:
pcd:portal_content/com.sap.portal.migrated/SAPComponentSystems/roles/QASCLIENT10/ROLE1;
2) We made sure EP7 QASCLIENT10 is connected to the backend well;
3) the backend QAS/10 indeed has the role called ROLE1.
But we still see on PCD, this imported role (ROLE1) has no any transaction. It shows a lot of "linked object not available".
I remember a place to activate it but anyway cannot figure out.
Please advise. Points guaranteed. Regards.

Greg,
I am quoting from SAP Help regarding the folder where the role uploaded objects should be stored.
<i>The folder in which the objects are stored after the upload is defined in service com.sap.portal.pcd.rolemigration. The path portal_content/com.sap.portal.migrated/SAPComponentSystems/ is entered as default value. You can also define a different path in the service.
The default folder can be found in the Portal Catalog under Portal Content -> Migrated Content -> SAPComponentSystems. You find further sub-folders that are created automatically with the upload below folder SAPComponentSystems. The objects uploaded from the backend systems are automatically sorted according to the following criteria in this folder: by the portal object type to which they are converted and by the logical system from which they are uploaded.</i>
You can check what path you have in your portal under the service com.sap.portal.pcd.rolemigration from System Admin -> System Config -> Service Config -> Applications. There you should find the location where your objects should be stored.
get the complete documentation <a href="http://help.sap.com/saphelp_nw04/helpdata/en/d1/95584035a0987ee10000000a1550b0/content.htm">Here</a>
Regards,
Shubhadip

SU24 on M_EINK_FRG auth object

Hello Gurs,
Requirement
To make the release code/group to Org filed . Currently is not a Org filed.
What I have done:
The auth object is M_EINK_FRG.
Before I make it org field, I was cleaning up some tcodes for eg : Me35 ,ME35K and ME28 to deactivate the object in SU24 ( meaning NO in the proposal u201Ctabu201D as no users are assigned to this tcode in production.
Question:
After capturing in transport I am getting pop up with " Data automatically corrected " message and changes are getting reflected in SU24 once I click on this pop green check mark button. no sure why
I have problem with this object only not which other auth object
Please suggestion or did you experience any of this sort
Damodar

I think he only wants the proposal flag as 'No', but then SU24 automatically corrects the value based on TSTCA.
See How to handle unwanted SU24 proposals which are automatically "corrected"? and the post by Keerti Vemulapali, which points to SAP note 1404093.
PS: What would be very usefull for an "automatic correction" would be in the case of report type transactions to check whether the submitted report has been assigned to an S_PROGRAM group, and fill that with p_action SUBMIT. Any chances..?
Cheers,
Julius

Package Linked Smart Objects not available

Hello,
I have Photoshop CC on my pc and Windows 8.
File > Package is not available...
Can anybody help me!

It is missing from the menu. I tried to save the file as tiff or psd, but no Package...
I've attached a printscreen from the menu, the language is Dutch, I put an elipse on the smart object options.

Create Object - Mappin Object not available in ESB

Hi,
strange behavior:
One of our users can´t create new mapping objects.
While clicking the Create Objects button in ESB the pop-up is openening, but without the Mapping Objects entry.
The user has sufficient authorizations:
All "XI" roles are assigned.
Any ideas?
Thanks in advance,
André

While clicking the Create Objects button in ESB the pop-up is openening, but without the Mapping Objects entry.
can be because of the Application Profile selected for this user....check with Unrestricted view.....if a custom profile was build for this user then contact the system admin for the same.

Multiprovider: Info object not available

Hello Experts,
When iam creating a MP, unable to find Info Object in the selection screen.
IO is activated and also done "Generate Export Data Source"
plz help.
KV

Hi KV,
Just a thought, if you are refering to navigational InfoObjects and you do not see it available in the Multiprovider/Infocubes it is most likey maked as an 'attribute only' infoobject.
to make availble in Infoprovider uncheck this on the InfoObject.
regards,
CH

Authorize option not available

I recently had to restore my ipod and I tried to re-install all my apps and i kept getting an error message saying that my computer isnt authorized. i researched the problem and i have no purchaced songs to use the method of playing the song to authorize my computer and I went into my Itunes store>account and the option to authorize my computer isnt available at all. It just says "2 computers are authorized with this account" and beside it is nothing. I really need help I had some important apps that I need.

There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
Then you'll find the control in the Store menu:
Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them:

ARQ: Does LDAP User Search action require any special authorization for requester???

Hi All,
I was wondering if requester need to be given any special authorization to search users in LDAP?
Because, I have noticed that a requester can not search users from LDAP. However, another user who is a super user in GRC system and has SAP_ALL profile assigned, can search users from LDAP easily!
I have noticed only this change between these two users and not sure what authorizations should be granted to requester to search users from LDAP. I have tried to search relevant auth. object in his role "SAP_GRAC_ACCESS_REQUESTER" but could not find. I also check security guide for this but did not get any details.
Can anyone advise?
Regards,
Faisal

Alessandro,
I switched on trace using ST01 for one of the requesters and viewed its details later. I found RC=4 or 12 for some of the auth. objects.
For example:
I opened of of the records and could see above details. I am unable to interpret it further. Can you please assist in this?
Regards,
Faisal

Objects not in BI-CONTENT

Hello Experts, when i replicate a COPA DS to BI7.0 i got the message that some objects r not in active version.But when i tried to search them in BI-CONTENT for activation ....i couldn't find them......r all objects not available in BI-CONTENT ....if so do need to customize a relevant object eg: ZCURTYPE....what is the best solution

Check the Object status M or A..and simply activate the IO and collect in a transport and then replicate the data sourceu2026

Linked object not avilable

Hi,
I am facing strange issue. we have one iview and it assigned to one. this link(role-->i view) is working fine from longtime.
but last week onwards for some users(they have access) this iview disappearing some time and appearing some time.
when i verify in the content admin i was able to see the link ,(in the role also). then i cleared cache ,and then when i verify in the content admin i was not able to see the link . and in the role i am seeing as ' linked object not available" .
please let me know why this happend is there any note available to resolve this.
Thanks
Surya

Hi,
I assume you have enabled the Connector for Caching Roles.
Please Check the Property of the iView under the Property Category : Navigation >> "Metadata for the Navigation Hierarchy".
Ensure that the Property is set to "Cacheable".
Also Synchronize Cache for the Connector under System Administration >> Navigation >> Navigation Cache.
Kind Regards,
Mrityunjay.

Not available to search message in QBE

Hi gang,
I'm seeing:
Column Type Column Condition Comments
1. IMAGE_RECNBR None
2. ADDR_WHO no image not available to search None
3. ADDRTYPE_WHO no image not available to search None
4. ADDRESS1 no image not available to search None
5. ADDRESS2 no image not available to search None
6. CITY no image not available to search None
on the QBE page for most tables. I'm not able to find any reference to the "no image"-"not available to search" messages. The columns involved are simple CHAR data types. Anyone have any idea why HTMLDB wouldn't recognize that data type?

Hello, Vishwanatha.
You're actually expanding message area (do you see the blue line on your screenshot?)
But it's overlapped by other views. You can drag the message icon a little bit and you'll see this:
I had the same issue in IDES system.
What can be done:
1. Switch to Default skin from current one (I can guess it's a Signature Design right now).
2. Or use old-style message area. For this set MESSAGE_AREA_TYPE parameter as INPLACEWINDOW in the parameter profile of your business role.
Hope this will help you.

Xcode update prompted but message returned says not available

Checking for updates, response recommends update Xcode, clicking on update button, returns the message 'not available'. Using Yosemite on iMac, 2009, Intel Icore5. This has happened 3-4 times over the past week at various times during the day.

Just in case anyone arrives here with a similar issue, I wanted to post that the problem has fixed itself. When I relaunched the App Store one day after encountering the issue, the Updates had reappeared.
I was able to successfully download and install them.
Clearly there is a time lag before the Updates reset after a failed download or install. I am sure there is a file that can be deleted or edited to accelerate this, but I have not yet found it...

Same Auth Objects CM in su24

Hi All
In SU24 for a Tcode SU01 in S_TCODE the following auth objects are CM.
S_USER_AGR
S_USER_AUT
S_USER_GRP
S_USER_PRO
S_USER_SAS
& for Tcode PFCG
S_USER_AGR
S_USER_AUT
S_USER_GRP
S_USER_PRO
S_USER_SAS
I am developing a role initially with SU01 Tcode. For the auth object S_USER_AGR, I am giving 01,02,03,06 field values.
Later I add PFCG Tcode for same role P_TCODE. For the auth object S_USER_AGR , I am giving 22,21 field values.
My question is if the role is assigned to a user
1.     will he be able to create, change, display, & delete roles using PFCG ????
2.     What is the best way to restrict the users in create, change, display, & delete???
3.     For PFCG Tcode none of the Auth. Objs (the objects that are added by adding SU01 or PFCG Tcode VIA MENU)are maintained in the role what would be the implication??
Thanks,
VJ

Hi,
1.What is the purpose behind the calling of multiple Tcodes thru a single T.code .I mean to say, suppose, i require a C.Code object to be associated with a T.code for doing that, why i am connecting it to C.Code object of some other T.codes.
Many tcodes are customized to limit the access / risk. The best example is with SM30. If an user want to maintain a table, you can create a custom transaction which skips the intial screen (user don't need to enter the table name) and allows the user to edit the right or only one table rather than many.
You can connect your custom authorization object to F-67, it will not affect FBV1. the settings from FBV1 can be overwritten with the entries in F-67. use transaction SE93 to see more details and customization in transaction F-67.
2.If i assign a C.Code (let say 1000)thru object F_BKPF_BUKRS to a user,does it mean that,i don't need to assign that C.code to user again for access related to C.code 1000 in the accounting document area.Or is there anything like that, the C.Code access will be coded globally for that user for all C.code related access for FI, MM and SD.
Once you assign the authorization to a company code 1000 it means user has access to this company code across modules. This is subject to the transactions and thier authorization objects attached to them in other modules. Note that all the transactions doesn't perform authorization check for Company code.
3.Is there any T.code,from where i can associate a authorization object with a T.code.
You can use SU24 itself.
Hope it clarifies your queries.
Regards,
Gowrinadh

BW Authorizations/Report. Auth Object/KF's vs. Calc. KF's

We implemented a custom/reporting auth. object to protect key figures (1KYFNM) and it works well. The issue is that our user community never ceases to come up with new and even more creative requirements.
Let me illustrate the latest requirement:
I have locked-down access to certain key figures (let's call them 'KF A' and 'KF B') and therefore subsequently secure all combinations involving either one of the two meaning calc. KF D (KF A plus KF C) is locked down as well. I also need to mention that users are supposed to be able to create their own ad-hoc queries, which eliminates the option of limiting them to a query or set of queries that accomplish the following requirement.
There are certain totals, which are calc. KF's that the users are allowed/required to see even though they are not supposed to see what makes up these numbers (they should see calc. KF K which is made up of KF A, KF B, and KF H, etc. but not KF A and KF B).
Without the option of providing the users with rather static queries, I see another option as calculating 'KF K' (from the previous example) at the time of the load and just making it another key figure in the cube which then can be excluded from the auth. check previously mentioned based on the naming convention. The problem with that is that this will make reporting rather inflexible, increase load times as this calculation is rather complicated, and it will also create redundant information in an environment that is already experiencing substantial growth and volume.
Does anyone see any other solution?
Thanks,
Joerg

Jeorg,
I'm afraid that there's no special authorization handling for calculated key figures. To my best knowledge, the approach to create another key figure at data load time via transfer rules or update rules would be the only one can work. While this approach may not be flexible, but the load time should not increase significantly if you just add two key figure values into a new one.
If you find this is approach is unacceptable or it is a common requirement among BW community, you might consider submit such requirement through ASUG BI Group or via OSS development request.
Thank you for your question and patience.
Regards,
Amelia Lo
SAP NetWeaver RIG, US
SAP Labs, LLC

How can I limit/control the addition of auth. objects to security roles?

Checking the authorization object S_USER_VAL it seemed that it grants the ability to limit the addition of authorization objects, but I tried using a test ID in sandbox along with a test role, removing the object, creating ranges in order to limit to a certaing type of auth. objects and didn't work. S_USER_AGR will give me access to limit which type of roles I can modify, but I'm looking to restrict the addition of specific security objects to security roles. If anyone knows the answer to this please share! Thanks in advance for your help!!!!
Edited by: Armando Salas on Nov 29, 2011 7:41 PM

Hi Armando,
Try with auth.obj. S_USER_AUT. A suggestion. Search this objects with tcode SU24, for instance, for tcode PFCG and it gives a list with objects.
I hope this helps you
Regards
Eduardo

SU24 - Search by Auth object returns "Authorization object not available"

Similar Messages

Maybe you are looking for