Use of Tokens in Authorization Management Tool

Hello,
In Mobile Sales (5.0), I'm trying to restrict users from changing data of BP's with an specific Account Group. This means, the sales rep should have only read-access to BP's with Account Group = "001", but read, write and modify access to BP's with the rest of values of Account Group.
For this, I have protected object BOKNA1, defined rule for field KTOKD, created a token with this rule and variable rule. Then, I have created a new role and assigned the token to this role, with value for the variable="001".
My question is: do I have to give UI Rights to this role,  or do I have to create another Role with rights to the MSA, and then assign both roles to the user?
Thanks!!!!
Judit.

Thank you Wolfhard,
I have tried two solutions:
First solution:
- Create a single role
- Give UIRights to this role, to read-modify- create (at tile level)
- For the same role, assign two tokens (with read only for one case, and read and modify for the other case).
When I do this, I can read, modify and create for all BP.
Second solution:
- Create a single role
- Give UIRights to this role, to read (at tile level)
- For the same role, assign two tokens (with read only for one case, and read and modify for the other case).
When I do this, I can only read, for all the BP's
Thus, it seems that tokens are not being taken into account, but only the UI Rights-
Any ideas would be welcomed!
Thanks again
Judit.

Similar Messages

  • Authorization Management Tool

    HI,
    I am planning to give access rights for the mobile client users using Authorization Management Tool.
    I have a site id assinged and i am working in that site id.
    I have defined a role gave the access permissions to the role.
    Now i want to assign the role to the users .
    But i could not see other users except my user id and so i cant assign the role to the users.
    Is there any way that we can see al the other users in my site or is there any other way to define roles to the mobile client users.

    Hi Andrew,
    You are right .
    I assigned the Users (by Employee) subscriptions to my site.
    Even then I am not able to see other users.
    I am only seeing my user id.
    Do i need to download any customizing objects after i assigned the subscriptions or DO i need to do anything else.
    I ran the ConnTrans after assigning the subscriptions.
    Message was edited by: zack taylor

  • Authorization Management Tool (AMT) - SAP Library

    To add a comment, please log in or register on the top of this page and choose Reply. Please write your comment in English.
    You can also go back to the SAP help page.

    For more info on this tool you can refer to SAP SCN Wiki at link....
    Authorization Management Tool - CRM - SCN Wiki

  • I can no longer use all of the "Computer Management" tools against a remote computer. "Local Users and Groups", "Event Viewer", "Performance Logs and Alerts" and "Device Manager"

    Hello All,
    I can no longer use all of the "Computer Management" tools against a remote
    computer. "Local Users and Groups", "Event Viewer", "Performance Logs and
    Alerts" and "Device Manager"
    kindly see the below snapshot for assistance
    REGARDS DANISH DANIE

    This link may help....
    http://windowsxp.mvps.org/admintools.htm
    Freeman

  • CRM - Authorization Management Tool

    Hi All,
    I am new to CRM-MS-AMT can someone tell, if  Protected Business Objects area is the only place business object should be available on the Authorization Management Tool?  Because right now I only have 80 protected business objects should their be more available?  Any information you provide pertaining to AMT- Business Objects would be greatly appreciated.
    Jeanell

    Hi Jeanell,
    About 80 should be correct.
    You should refer to the following link form the SAP Online help. For this tool it is quite good.
    http://help.sap.com/saphelp_crm40sr1/helpdata/en/93/96033c1c902c05e10000000a114084/frameset.htm
    Regards,
    Gervase

  • I am interested in using Bridge as an asset management tool over a intranet network, is this possible?

    I'm working with a client that has an intranet and CS6 and would like to use Bridge to manage our digital assets. Can multiple computers use bridge effectively over a network?

    Bridge is not designed for use over a network nor is it official supported by Adobe for that matter.
    The application itself uses its data written to the user library for one computer. Some people have managed with great care and knowledge to let it function over a network but I think as soon as you let people write data them selfs from different workstations things pretty soon get bad due to not having this data available to other users.
    The Image archivist is one that has succeeded to use Bridge over a network, google this name and you will find his blog

  • Predefined Roles Missing in Authorization Management Tool

    Hi Guys,
    The Predefined roles
    SAP_AMT_AUTHORIZATION_ADMINISTRATOR
    SAP_AMT_USER_ADMINISTRATOR
    SAP_AMT_ROLE_ADMINISTRATOR
    are missing when I logged in to AMT.
    I checked the SAP notes and found the note 657434.
    It asked me to run the report INSERT_ADDITIONAL_AMT_ROLES_40.
    I ran the report in the CRM system using transaction se38.
    and ran the ConnTrans
    But even then the roles are not visible in the AMT.
    Did I miss any other Steps.

    Hello Zack,
    Did you make a manual extract of the subscriptions for the site?
    Are some messages coming to the mobile?
    If not, try to regenerate the replication object/publication with transaction SMOGGEN and make an extract again.
    Regards,
    Frédéric

  • CRM - MSA - Authorization Management Tool

    Hi All,
    I have an issue with the AMT, I did the following steps.
    1. Protected the Business Object
    1. Created a token for BOOPPORTUNITY.
    2. Assigned the token to a role.
    3. Assigned myself to the role.
    4. The BOOPPORTUNITY still did not work for me.
    5. Ran ConnTrans.
    6. I removed myself from the role.
    7. Deleted token assign to role.
    8. Deleted role.
    9.When I check to verify the token/role were removed. The token was still in the     assigned field. But the role is gone.
    10. Now it say, Can not delete token after it was assigned to a role.
    11. These changes have went to the CRM Server.
    Any ideas on how I can removed that token, from the role that does not exist?
    Any feedback will be greatly appreciated, I need a response asap.
    Jeanell

    Hi,
    I know there's been a while since you post your issue, but, do you find any solution to your problem? I'm having the same.
    Thanks in advance!
    Enric

  • SAP BO Translation Management Tool

    Hi,
    I am using the SAP BO Translation Management Tool to translate our WEBI reports into French language. Most of the queries are getting translated properly and after the export to the server they are available in French language.
    But I am having issues with two of those reports in which even on successfully translating the variables and exporting the same to the server the translation is not available. On opening the WEBI report again in TMT it shows that none of the variables were translated and this problem is only with the variables not with query names or prompts.
    Any kind of help would be great.
    Regards,
    Arminder Singh

    Hi,
    Follow this
    1888952 - Translations not retained for user variables when translating to multiple languages in Translation Management Tool.

  • Can JWS be used as a multiple Java version management tool?

    WinNT4 WKS with JRE 1.3.1 - 1.4.2 loaded on it using IExplorer or Netscape.
    We don't have a need for the JWS download features because our clients (and their applications) remain static for the most part. However, we do require multiple JRE version support because our customers have written class/objet "fixes" (mostly for text rendering) and these fixes break if you try and run the application on a different version of Java from which it was written. Basically, we can't have a default JRE on each machine and hope that it will work with all customer applications. So we will load all necessary Java components on our workstations (in this case JRE versions 1.3.1 - 1.4.2). I know that browsers can be forced to load with a specific Plug-in version (providing it exists on the machine) through Object & Embed tags in the HTML and that standalone apps can be directed to the correct Java directory path. My question is, can JWS automatically identify the Java requirements of our customers applications and act simply as a multi-version management tool to provide the right JRE/Plug-In for either standalone or browser applications? Keeping in mind that all the JREs will be loaded on the workstions and it won't need to download any components from some site.
    I've noticed that JWS identifies all JREs loaded on a machine in the Java tab so I'm wondering if it can "switch" the environment as needed for each application.
    Does anyone know if I can use JWS in the scenario I described above? Thanks!

    JWS can manage the multiple JREs installed if you run the application through a .jnlp. This can not "switch" the default JRE. It runs the application specified in the .jnlp using the requested version specified in the .jnlp.
    JWS does not apply to applets. You should use the object tags as you mentioned below.
    ...can JWS automatically identify the Java requirements of our customers applications
    No. You must determine this and setup the .jnlp appropriately.

  • Where I can find and use "Java Desktop System Management Tools "

    With Solaris 10, you not only get the Java Desktop System desktop environment, but also the Java Desktop System Management Tools and a selection of free and trial Development Tools, which are available for download only.
    I found only an information about JDS release 2
    but today it's release 3 already and it's said it already integrated in JDS
    and above sentence it state that it already come with solaris 10?
    where i can find that , where i can use it
    http://docs.sun.com/app/docs/doc/817-7575/6mmsrpduj?a=view
    this page said how to install but ...where I can find CD/
    regards please help

    Good question. It appears to have been installed with Solaris 11/06, as I have all of the packages listed here:
    http://docs.sun.com/app/docs/doc/817-7575/6mmsrpdus?a=view
    However, it does not appear in the Java Web Console. I tried adding it using the wcadmin command, but haven't managed to get it to run as per the docs. The documentation assumes that it is already installed and visible in the Java Web Console...
    According to this documentation:
    http://docs.sun.com/app/docs/doc/817-1985/6mhm8o5l6?a=view#gdjpi
    An application for the Java Web Console should have a WEB-INF directory and an app.xml file. The apoc packages come with neither, so something is missing.

  • I need to inventory software on my corporate Macs.  What software can I use?  If it includes Antivirus, and other corporate resource management tools, that woudl be a plus.

    I need to inventory software on my corporate Macs.  What software can I use?  If it includes Antivirus, and other corporate resource management tools, that woudl be a plus.
    I have 50-60 Mac OSX devices on my corporate network.  I woudl like to install an "agent" on them that would allow me to report on how many have X copies of this or that software.
    I also need a corporate Antivirus solution.
    For PC, we have used things like MAAS360, Kaseya, Dell eSmart, etc....
    What is a comparable Apple product for small business?

    Scott if you are trying to install the Adobe Creative applications included with your Creative Cloud Membership then please see Install and update apps - https://helpx.adobe.com/creative-cloud/help/install-apps.html.

  • Powershell script for Use this termset for site navigation in tem store management tool in central admin

    can anyone pls point out whats the power shell script for "use this  termset for site navigation" in the termstore management tool in my central  admin';s manage serv appln-->managed metadata serv appln ->term styore mgmnt tool
    i would like to check this "checked" through powershell script
    help is appreciated!

    Hi,
    To check if the term set has been set to be used for site navigation, we need to check the
    NavigationTermSet.IsNavigationTermSet property for the term set.
    Here is the code example for using PowerShell to get the setting:
    $site=Get-SPSite "your site collection URL";
    $session = Get-SPTaxonomySession -Site "your site collection URL ";
    $termStore = $session.TermStores["Managed Metadata Service"];
    $Group = $termStore.Groups[“Group Name”];
    $TermSet = $Group.TermSets[“Term Set Name”];
    $navTermSet = [Microsoft.SharePoint.Publishing.Navigation.NavigationTermSet]::GetAsResolvedByWeb($termset, $site.RootWeb, "GlobalNavigationTaxonomyProvider");
    write-host $navTermSet.IsNavigationTermSet
    Best regards.
    Thanks
    Victoria Xia
    TechNet Community Support

  • Hello all...is there a way to activate(on startup) /deactivate(on logoff) CS6 Suite using a script, Active Directory Login Script or central Management Tool?

    hello all...is there a way to activate(on startup) /deactivate(on logoff) CS6 Suite using a script, Active Directory Login Script or central Management Tool?

    The long answer is: No. this is Adobe's secret sauce and you cannot manage it using other tools.
    Mylenium

  • Is it possible to use Apple Configurator to do a remote wipe of an iPad? Or must I use the profile manager tool within OS X Server?

    Is it possible to use Apple Configurator to do a remote wipe of an iPad? Or must I use the profile manager tool within OS X Server?

    no apple configurator connects via usb
    you'll need a MDM solution such as OSX server profile manager for remote wipe
    OTA pushing profies remote wipe etc
    you could use icloud for remote wipe

Maybe you are looking for