Use of Tokens in Authorization Management Tool
Hello,
In Mobile Sales (5.0), I'm trying to restrict users from changing data of BP's with an specific Account Group. This means, the sales rep should have only read-access to BP's with Account Group = "001", but read, write and modify access to BP's with the rest of values of Account Group.
For this, I have protected object BOKNA1, defined rule for field KTOKD, created a token with this rule and variable rule. Then, I have created a new role and assigned the token to this role, with value for the variable="001".
My question is: do I have to give UI Rights to this role, or do I have to create another Role with rights to the MSA, and then assign both roles to the user?
Thanks!!!!
Judit.
Thank you Wolfhard,
I have tried two solutions:
First solution:
- Create a single role
- Give UIRights to this role, to read-modify- create (at tile level)
- For the same role, assign two tokens (with read only for one case, and read and modify for the other case).
When I do this, I can read, modify and create for all BP.
Second solution:
- Create a single role
- Give UIRights to this role, to read (at tile level)
- For the same role, assign two tokens (with read only for one case, and read and modify for the other case).
When I do this, I can only read, for all the BP's
Thus, it seems that tokens are not being taken into account, but only the UI Rights-
Any ideas would be welcomed!
Thanks again
Judit.
Similar Messages
-
HI,
I am planning to give access rights for the mobile client users using Authorization Management Tool.
I have a site id assinged and i am working in that site id.
I have defined a role gave the access permissions to the role.
Now i want to assign the role to the users .
But i could not see other users except my user id and so i cant assign the role to the users.
Is there any way that we can see al the other users in my site or is there any other way to define roles to the mobile client users.Hi Andrew,
You are right .
I assigned the Users (by Employee) subscriptions to my site.
Even then I am not able to see other users.
I am only seeing my user id.
Do i need to download any customizing objects after i assigned the subscriptions or DO i need to do anything else.
I ran the ConnTrans after assigning the subscriptions.
Message was edited by: zack taylor -
Authorization Management Tool (AMT) - SAP Library
To add a comment, please log in or register on the top of this page and choose Reply. Please write your comment in English.
You can also go back to the SAP help page.For more info on this tool you can refer to SAP SCN Wiki at link....
Authorization Management Tool - CRM - SCN Wiki -
Hello All,
I can no longer use all of the "Computer Management" tools against a remote
computer. "Local Users and Groups", "Event Viewer", "Performance Logs and
Alerts" and "Device Manager"
kindly see the below snapshot for assistance
REGARDS DANISH DANIEThis link may help....
http://windowsxp.mvps.org/admintools.htm
Freeman -
CRM - Authorization Management Tool
Hi All,
I am new to CRM-MS-AMT can someone tell, if Protected Business Objects area is the only place business object should be available on the Authorization Management Tool? Because right now I only have 80 protected business objects should their be more available? Any information you provide pertaining to AMT- Business Objects would be greatly appreciated.
JeanellHi Jeanell,
About 80 should be correct.
You should refer to the following link form the SAP Online help. For this tool it is quite good.
http://help.sap.com/saphelp_crm40sr1/helpdata/en/93/96033c1c902c05e10000000a114084/frameset.htm
Regards,
Gervase -
I'm working with a client that has an intranet and CS6 and would like to use Bridge to manage our digital assets. Can multiple computers use bridge effectively over a network?
Bridge is not designed for use over a network nor is it official supported by Adobe for that matter.
The application itself uses its data written to the user library for one computer. Some people have managed with great care and knowledge to let it function over a network but I think as soon as you let people write data them selfs from different workstations things pretty soon get bad due to not having this data available to other users.
The Image archivist is one that has succeeded to use Bridge over a network, google this name and you will find his blog -
Predefined Roles Missing in Authorization Management Tool
Hi Guys,
The Predefined roles
SAP_AMT_AUTHORIZATION_ADMINISTRATOR
SAP_AMT_USER_ADMINISTRATOR
SAP_AMT_ROLE_ADMINISTRATOR
are missing when I logged in to AMT.
I checked the SAP notes and found the note 657434.
It asked me to run the report INSERT_ADDITIONAL_AMT_ROLES_40.
I ran the report in the CRM system using transaction se38.
and ran the ConnTrans
But even then the roles are not visible in the AMT.
Did I miss any other Steps.Hello Zack,
Did you make a manual extract of the subscriptions for the site?
Are some messages coming to the mobile?
If not, try to regenerate the replication object/publication with transaction SMOGGEN and make an extract again.
Regards,
Frédéric -
CRM - MSA - Authorization Management Tool
Hi All,
I have an issue with the AMT, I did the following steps.
1. Protected the Business Object
1. Created a token for BOOPPORTUNITY.
2. Assigned the token to a role.
3. Assigned myself to the role.
4. The BOOPPORTUNITY still did not work for me.
5. Ran ConnTrans.
6. I removed myself from the role.
7. Deleted token assign to role.
8. Deleted role.
9.When I check to verify the token/role were removed. The token was still in the assigned field. But the role is gone.
10. Now it say, Can not delete token after it was assigned to a role.
11. These changes have went to the CRM Server.
Any ideas on how I can removed that token, from the role that does not exist?
Any feedback will be greatly appreciated, I need a response asap.
JeanellHi,
I know there's been a while since you post your issue, but, do you find any solution to your problem? I'm having the same.
Thanks in advance!
Enric -
SAP BO Translation Management Tool
Hi,
I am using the SAP BO Translation Management Tool to translate our WEBI reports into French language. Most of the queries are getting translated properly and after the export to the server they are available in French language.
But I am having issues with two of those reports in which even on successfully translating the variables and exporting the same to the server the translation is not available. On opening the WEBI report again in TMT it shows that none of the variables were translated and this problem is only with the variables not with query names or prompts.
Any kind of help would be great.
Regards,
Arminder SinghHi,
Follow this
1888952 - Translations not retained for user variables when translating to multiple languages in Translation Management Tool. -
Can JWS be used as a multiple Java version management tool?
WinNT4 WKS with JRE 1.3.1 - 1.4.2 loaded on it using IExplorer or Netscape.
We don't have a need for the JWS download features because our clients (and their applications) remain static for the most part. However, we do require multiple JRE version support because our customers have written class/objet "fixes" (mostly for text rendering) and these fixes break if you try and run the application on a different version of Java from which it was written. Basically, we can't have a default JRE on each machine and hope that it will work with all customer applications. So we will load all necessary Java components on our workstations (in this case JRE versions 1.3.1 - 1.4.2). I know that browsers can be forced to load with a specific Plug-in version (providing it exists on the machine) through Object & Embed tags in the HTML and that standalone apps can be directed to the correct Java directory path. My question is, can JWS automatically identify the Java requirements of our customers applications and act simply as a multi-version management tool to provide the right JRE/Plug-In for either standalone or browser applications? Keeping in mind that all the JREs will be loaded on the workstions and it won't need to download any components from some site.
I've noticed that JWS identifies all JREs loaded on a machine in the Java tab so I'm wondering if it can "switch" the environment as needed for each application.
Does anyone know if I can use JWS in the scenario I described above? Thanks!JWS can manage the multiple JREs installed if you run the application through a .jnlp. This can not "switch" the default JRE. It runs the application specified in the .jnlp using the requested version specified in the .jnlp.
JWS does not apply to applets. You should use the object tags as you mentioned below.
...can JWS automatically identify the Java requirements of our customers applications
No. You must determine this and setup the .jnlp appropriately. -
Where I can find and use "Java Desktop System Management Tools "
With Solaris 10, you not only get the Java Desktop System desktop environment, but also the Java Desktop System Management Tools and a selection of free and trial Development Tools, which are available for download only.
I found only an information about JDS release 2
but today it's release 3 already and it's said it already integrated in JDS
and above sentence it state that it already come with solaris 10?
where i can find that , where i can use it
http://docs.sun.com/app/docs/doc/817-7575/6mmsrpduj?a=view
this page said how to install but ...where I can find CD/
regards please helpGood question. It appears to have been installed with Solaris 11/06, as I have all of the packages listed here:
http://docs.sun.com/app/docs/doc/817-7575/6mmsrpdus?a=view
However, it does not appear in the Java Web Console. I tried adding it using the wcadmin command, but haven't managed to get it to run as per the docs. The documentation assumes that it is already installed and visible in the Java Web Console...
According to this documentation:
http://docs.sun.com/app/docs/doc/817-1985/6mhm8o5l6?a=view#gdjpi
An application for the Java Web Console should have a WEB-INF directory and an app.xml file. The apoc packages come with neither, so something is missing. -
I need to inventory software on my corporate Macs. What software can I use? If it includes Antivirus, and other corporate resource management tools, that woudl be a plus.
I have 50-60 Mac OSX devices on my corporate network. I woudl like to install an "agent" on them that would allow me to report on how many have X copies of this or that software.
I also need a corporate Antivirus solution.
For PC, we have used things like MAAS360, Kaseya, Dell eSmart, etc....
What is a comparable Apple product for small business?Scott if you are trying to install the Adobe Creative applications included with your Creative Cloud Membership then please see Install and update apps - https://helpx.adobe.com/creative-cloud/help/install-apps.html.
-
can anyone pls point out whats the power shell script for "use this termset for site navigation" in the termstore management tool in my central admin';s manage serv appln-->managed metadata serv appln ->term styore mgmnt tool
i would like to check this "checked" through powershell script
help is appreciated!Hi,
To check if the term set has been set to be used for site navigation, we need to check the
NavigationTermSet.IsNavigationTermSet property for the term set.
Here is the code example for using PowerShell to get the setting:
$site=Get-SPSite "your site collection URL";
$session = Get-SPTaxonomySession -Site "your site collection URL ";
$termStore = $session.TermStores["Managed Metadata Service"];
$Group = $termStore.Groups[“Group Name”];
$TermSet = $Group.TermSets[“Term Set Name”];
$navTermSet = [Microsoft.SharePoint.Publishing.Navigation.NavigationTermSet]::GetAsResolvedByWeb($termset, $site.RootWeb, "GlobalNavigationTaxonomyProvider");
write-host $navTermSet.IsNavigationTermSet
Best regards.
Thanks
Victoria Xia
TechNet Community Support -
hello all...is there a way to activate(on startup) /deactivate(on logoff) CS6 Suite using a script, Active Directory Login Script or central Management Tool?
The long answer is: No. this is Adobe's secret sauce and you cannot manage it using other tools.
Mylenium -
Is it possible to use Apple Configurator to do a remote wipe of an iPad? Or must I use the profile manager tool within OS X Server?
no apple configurator connects via usb
you'll need a MDM solution such as OSX server profile manager for remote wipe
OTA pushing profies remote wipe etc
you could use icloud for remote wipe
Maybe you are looking for
-
Error when logging into the UME
I am having problems logging into my UME. This is an ABAP + JAVA install on the IBM iSeries. I've got a total of 4 SAP instances with the J2EE Engines installed. This works on all excpet one. When I enter my userid J2ee_admin, it throws an 'unknown e
-
My wife's iTunes used ID will not work. Tried resetting the password, but email was not received. Tried using personal questions method, but would not accept the correct date of birth, so could not go any further. Has her iTunes ID been hacked? H
-
How can i download microsoft office to my macbook pro 15inch retina display?
i have a macbook pro 15 inch retina display and i dont have the cd converter, so i dont know how to buy online the microsoft office and i really need it to do my homework. where do i buy it ?
-
After System Restore windows programs not loading, and other issues!
To preface this I have no interest in keeping vista on here I have a CD with windows7 setup on it that I would like to install either on a new partition or over the exsisting one but no clue how to do this right, and when I tried booting up from the
-
How do I build a complex print condition?
I am in the process of building templates to replace the layouts from reports 6i and I have hit one on the AR invoice which I an struggling with. How do i replace this format trigger in XML?: FUNCTION R_LINES1FormatTrigger RETURN BOOLEAN is BEGIN if