Adding Tcodes in Role

How to add multiple Tcodes while creating a role using PFCG.
I can only add 17 Tcodes each time, I have 250 T codes in a Role which I am going to create , just wanted to know if there is any way to do this at a time, apart from using the scripts. is there any icon in pfcg-menu-tcodes section to upload or paste all at a time ? please suggest.
Thanks
SR

Hello Raj,
Basically it is not possible...!!
But try like this...copy and paste at a time in that transactional folder..!!
Note: Points always encourage me to reply !!

Similar Messages

Adding tcode to role in display access.

Hello,
Please can someone suggest how we can add transaction codes to a SAP role with only display access.
That means users should have only display access when they execute that transaction. Please suggest.
Thanks.

>
adnan shahid wrote:
> I would like to add the following tcodes in display access. In all the tcodes only auth object present is S_TCODE.
>
> OKY9
> OKYA
> OKY0
> OKKM
> OKK6
> OKK5
> OKG6
>
> Please suggest.
I suggest that your run an authorisation trace to see what objects those transactions reference.
Create a role with those transactions and objects in display only mode. Then get a functional consultant to negative test those roles.
Don't assign with other roles which give change access to the auth objects you have restricted.

GRC BRM TCodes of Role cannot be updated

Hi Expert,
I am facing problem in creating role from BRM, while trying to Genearte the role from Generate Stage of Role Methodology. I am getting the error when I click on Generate button under Generate Roles tab.
When I click on Generate button it opens a new screen with stages, 1 Select system and roles 2 Schedule 3 Analysze Risk 4 Confirmation.
In the Analyze Risk stage when I click on Submit button post risk analysis, i get the error "TCodes of Role Z:ECC_Test cannot be updated (System).
Please let me know if anybody is facing issue and have reached to some solution.
Thanking you in advance.
Thanks & Regards,
Jatin.

Hi, Jatin.
I am in SP6 and facing the same issue. SAP tell you something?
In my case the transactions added in pfcg are maintained in SU24.
Also, I am facing an issue when copy authorization from a function in RAR: "Authorization data cannot be updated".
Please, tell me if you have news.
Regads,

Can PID (Parameter ID) be set as a default by TCODE or Role Level

Hi, Any one has any idea if PID (Parameter ID) and its value can be set as a default at TCODE or at Role Level?
Thanks in advance.
Syd.
Addendum:
Re: Can PID (Parameter ID) be set as a default by TCODE or Role Level
Posted: Oct 17, 2006 9:38 AM Reply E-mail this post
Thanks for the reply, you have mentioned try creating a Transaction variant or a Transaction parameter.
Here is my question?
1. Can we set a default Parameter ID at TCODE level so, if any user execute a transaction who has access to execute it, he will have Parameter id and its value as a default?
2. Can PID be set as a default for SAP TCODE or Custom TCODE, or can be done for both, if it can be done then, How?
3. Can PID be set as a default for a particular Role or profile?
Message was edited by: Syed Alam
Message was edited by: Syed Alam

Hi JC,
Yes, I agree.
A small disclaimer however is that we dont know which transaction is being refered to.
Creating a transaction variant with the parameter set for it could enable the use to navigate further and back again and in doing so "shed" the screen which the transaction (initially with variant parameter and skip screen) originally gave them.
Using a user-exit to set the parameter can in some cases be closer to the functionality (irrespective of how the user gets there) and be more reliable. But in this case an adventurous user will be likely to trick it anyway if they want to.
If the decision is made to use PIDs in the coding, then it is a decision that the user can influence the value (in my view). If coding makes insecure use of PIDs, then it is a design error in the coding.
Cheers,
Julius

How to remove transaction that was added under Menu - Role Menu

We have roles that we need to remove some transactions.
These transactions were added under Menu - Role Menu and expanded for ex: Logistics and Picked Miro transaction.
When I go to PFCD and check under s_tcode I cannot remove Miro transactions since it's grayed out.
The only way to remove this is to go back to the Menu and do a find on miro and work through the menu until I get to Miro transaction and then delete it.
Is there another way to accomplish this.
Thanks
Joe

This is the intended way a role built from a menu works. What might be the use of an authorization without any corresponding transaction to start it? It is only a risk...
Unless of course you know better or design differently and don't make the effort to adjust SU24, then you can insert manually or cause "changed" authorizations, but PFCG will not look at it from a "your own fault" view and not adjust it or protect it against illogical changes.
To use the discipline of the one approach but keep the flexibility of manual authorizations is not possible for S_TCODE, S_RFC and S_SERVICE objects (the entry points).
Cheers,
Julius
PS:
> Total Questions: 42 (36 unresolved)
Please follow-up on your unresolved questions. There is a limit now of 10 open questions asked since July 2008.

Removal of tcode from role

Hi Experts,
I need to remove tcode from role menu, my requirement is as below
I need to go in a role, search tcode in role menu and if tcode is present in role n times then remove that tcode.
For example tcode SU01 is present in role menu 5 times then I need to remove all these 5 occurenses.
As of now I have developed script using SECATT to remove tcode from role but it is static one, means I already know that tcode is present 3 times then script will search tcode three times and delete and generate profile and come out.
I want this functionality to be dynamic, i.e. I need to enter tcode only once in data input and then script should remove all occurence of that tcode from role.
Looking forward for expert advice and comments, please let me know if my requirement is not clear.
Thanks,
Ashish Mistry

Hello,
1. Check the data base by writing ABAP Query.
2. Get the length of the received data eg. number of record is present in the data base for your Query.
3. Now you know exact number of T-Code so you can delete them.
Regards,
Bhavesh

Mass role creation and addition of tcodes to role menu

Hi Folks,
We've a requirement of building 1000's of single roles for an implementation. Our security matrix is ready with the role names and the list of tcodes to be embedded in each of these roles. What I would like to know is if we can automate a part of the process of role building i.e the following 3 steps only.
1. Creation of the Role
2. Addition of the tcodes in the role menu
3. Save
I'm aware of Ecatt/LSMW through which we can create the roles but i'm not sure if we can add the tcodes to the menu of the roles since the number of tcodes to be populated in each role will vary.
Could anyone of you shed some light if it is possible to automate the addition of tcodes to the role menu taking into consideration that each role will have different number of tcodes to be added to the menu and what's the best possible way to achieve this if there exists one.
Thanks in advance for your time and suggestions!
Guest...

Whilst I agree that there are probably too many roles being built here, which is more of an issue with the role design / strategy, the issue of how to easily create a role for a given list of transactions is something that SAP supports via the import menu from text file option in PFCG.
Yes you may need to write a script to cycle through all the possible role names, but we have recently had to build some roles based on actual usage, so exported transaction usage history to excel and then formatted the transactions into text files that could be imported to build the role menu.
You will still then need to ensure any object authorisation object have the correct values set - i.e. not just starred in - but as one of the pains in build a role is getting the menu to look reasonable, I'd suggest having a look at this approach.
Copy Menus -> Import from File is the function in PFCG in the menu tab for the role you are building
OSS note 389675 has details of what the text file of transactions for the menu should look like.
That should answer the question posed, rather than criticising the role design being followed.

How to add tcode to role

I have the following rqrmnt,i have no idea how to do it as i have no knowledge of HR.
Customer would like the new t-code added to the following role:
Profile for role ZS:H_HR_PA_M_ADHOC_REPORTS and
ZC:H_BC_AS_M_PRODSUPPORT
Can someone please tell me what needs to be done.
High points can be expected.

Hello there.
Check tcode PFCG and the following link:
http://help.sap.com/saphelp_nw70/helpdata/EN/44/d9acfe7a012754e10000000a1553f6/frameset.htm.
Regards.
Valter Oliveira.

Restricting Tcode using Roles

Dear BW Experts,
I want to create a role to restrict of accessing TCODE : STMS_IMPORT and STMS in Production system. I can able to create a role by adding S_TCODE. While creating the role, inclusion is available but exclution is not available. I want to create a role by restricting tcode STMS and STMS_import. How to achieve this. Please help.
Thanks.

Hi Jalina
but exclution is not available
SAP Security role authorisation concept does not cater for exclusion values or ranges
If you are not a security person, I recommend you look at the ADM940 or help.sap.com for Authorisations Concept or discuss your requirements with your Security contact.
Regards
Colleen

How to handle Custom field added in BP : Role Bill Account

Hi Friends,
I am working on an interface which creates Bill Account role for a BP but the problem is there are about 15 Custom fields added to standard BP transaction in BA role.
As I am using BAPI_BUPA_FS_CREATE_FROM_DATA2 for creating the BP and
BAPI_BUPA_CENTRAL_CHANGE for changing the BP role Bill Account?
Can anyone tell me how to handle those custom fields in the existing BAPIs or there is some other way of doing it?
Thanks in advance,
Pradeep
Note : Helpful answers will be rewarded.

Hi,
I have seen these BAPIs but are they used with normal BAPIs for BP creation and change.
For example : I create the BP using BAPI_BUPA_FS_CREATE_FROM_DATA2 and for the Custom fields I should use these BAPIs as suggested by you alongwith the create BAPI.
And will it work for Changing the BP also.
Kindly clarify.
Regards,
Pradeep

Adding Internet-Printing role ends with error 0x800f0922

I spend the last two days googling and troubleshooting the issue but no luck.
Tried so far:
“sfc /scannow”
fsutil resource setautoreset true C:\
DISM /online /Cleanup-Image /restorehealth
Still ending up with error 0x800f0922.
The machine is a desktop Fujitsu server with 2012r2 essentials.
Here's the critical part of my CBS log:
2014-07-30 14:48:07, Info CBS Exec: Installing Package: Microsoft-Windows-Printing-Server-Role-Package~31bf3856ad364e35~amd64~en-US~6.3.9600.16384, Update: Printing-InternetPrinting-Server,
InstallDeployment: amd64_microsoft-windows-p..oyment-languagepack_31bf3856ad364e35_6.3.9600.16384_en-us_8a769e02c4b8e0a2
2014-07-30 14:48:07, Info CSI 00000011 Performing 1 operations; 1 are not lock/unlock and follow:
(0) AddCat (14): flags: 1 catfile: @0xd1da02e418
2014-07-30 14:48:07, Info CBS Exec: Package: Microsoft-Windows-Printing-Server-Subsystem-Package~31bf3856ad364e35~amd64~en-US~6.3.9600.16384 is already in the correct state, current:
Installed, targeted: Installed
2014-07-30 14:48:07, Info CBS Exec: Skipping Package: Microsoft-Windows-Printing-Server-Subsystem-Package~31bf3856ad364e35~amd64~en-US~6.3.9600.16384, Update: Microsoft-Windows-Printing-Server-Subsystem-Package
because it is already in the correct state.
2014-07-30 14:48:07, Info CBS Exec: Package: Microsoft-Windows-Printing-ServerCore-Package-base~31bf3856ad364e35~amd64~en-US~6.3.9600.16384 is already in the correct state, current:
Installed, targeted: Installed
2014-07-30 14:48:07, Info CBS Exec: Skipping Package: Microsoft-Windows-Printing-ServerCore-Package-base~31bf3856ad364e35~amd64~en-US~6.3.9600.16384, Update: Microsoft-Windows-Printing-ServerCore-Package-base
because it is already in the correct state.
2014-07-30 14:48:07, Info CBS Exec: Package: Microsoft-Windows-Printing-Server-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-US~6.3.9600.16384 is already in the correct state, current:
Installed, targeted: Installed
2014-07-30 14:48:07, Info CBS Exec: Skipping Package: Microsoft-Windows-Printing-Server-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-US~6.3.9600.16384, Update: Microsoft-Windows-Printing-Server-Subsystem-WOW64-Package
because it is already in the correct state.
2014-07-30 14:48:07, Info CBS Exec: Package: Microsoft-Windows-Printing-ServerCore-WOW64-Package-base~31bf3856ad364e35~amd64~en-US~6.3.9600.16384 is already in the correct state, current:
Installed, targeted: Installed
2014-07-30 14:48:07, Info CBS Exec: Skipping Package: Microsoft-Windows-Printing-ServerCore-WOW64-Package-base~31bf3856ad364e35~amd64~en-US~6.3.9600.16384, Update: microsoft-windows-printing-servercore-deployment-base
because it is already in the correct state.
2014-07-30 14:48:07, Info CBS Exec: Package: Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~en-US~6.3.9600.16384 is already in the correct state, current: Installed,
targeted: Installed
2014-07-30 14:48:07, Info CBS Exec: Skipping Package: Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~en-US~6.3.9600.16384, Update: Printing-PremiumTools-Collection
because it is already in the correct state.
2014-07-30 14:48:07, Info CBS Exec: Package: Microsoft-Windows-BusinessScanning-ScanRepository-Package-base~31bf3856ad364e35~amd64~en-US~6.3.9600.16384 is already in the correct state,
current: Staged, targeted: Staged
2014-07-30 14:48:07, Info CBS Exec: Skipping Package: Microsoft-Windows-BusinessScanning-ScanRepository-Package-base~31bf3856ad364e35~amd64~en-US~6.3.9600.16384, Update: Microsoft-Windows-BusinessScanning-ScanRepository-Package-base
because it is already in the correct state.
2014-07-30 14:48:07, Info CBS Plan: Start to process component watchlist
2014-07-30 14:48:07, Info CBS Setting ExecuteState key to: CbsExecuteStateFailed
2014-07-30 14:48:09, Info CSI 00000012 Performing 2 operations; 2 are not lock/unlock and follow:
(0) Install (5): flags: 0 tlc: [Microsoft-Windows-Printing-InternetPrinting-Server-Deployment, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35},
Type neutral, TypeName neutral, PublicKey neutral]) ref: ( flgs: 00000000 guid: {d16d444c-56d8-11d5-882d-0080c847b195} name: [l:236{118}]"Microsoft-Windows-Printing-Server-Role-Package~31bf3856ad364e35~amd64~~6.3.9600.16384.Printing-InternetPrinting-Server"
ncdata: [l:0]"") thumbprint: [l:128{64}]"d7513bfc8a363b8edae8ade455f235c149d150f5127e890defbb58b9b03714c2"
(1) Install (5): flags: 0 tlc: [Microsoft-Windows-Printing-InternetPrinting-Server-Deployment-LanguagePack, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken
= {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral]) ref: ( flgs: 00000000 guid: {d16d444c-56d8-11d5-882d-0080c847b195} name: [l:246{123}]"Microsoft-Windows-Printing-Server-Role-Package~31bf3856ad364e35~amd64~en-US~6.3.9600.16384.Printing-InternetPrinting-Server"
ncdata: [l:0]"") thumbprint: [l:128{64}]"85c91492174c8712693e53f922ee8a0bd04ad1d51198ffd88ea8d07e2ecc784d"
2014-07-30 14:48:09, Info CSI 00000013 Component change list: { (null) -> 6.3.9600.16384 Microsoft-Windows-Printing-InternetPrinting-Server, pA = PROCESSOR_ARCHITECTURE_AMD64
(9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral }
{ (null) -> 6.3.9600.16384 Microsoft-Windows-Printing-InternetPrinting-Server-MSW3PRTDLL, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey
neutral }
{ (null) -> 6.3.9600.16384 Microsoft-Windows-Printing-InternetPrinting-Server.Resources, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral,
TypeName neutral, PublicKey neutral }
{ (null) -> 6.3.9600.16384 Microsoft-Windows-Printing-InternetPrinting-Server-Content, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey
neutral }
{ (null) -> 6.3.9600.16384 Microsoft-Windows-Printing-InternetPrinting-Server-Deployment-LanguagePack, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35},
Type neutral, TypeName neutral, PublicKey neutral }
{ (null) -> 6.3.9600.16384 Microsoft-Windows-Printing-InternetPrinting-Server-MSW3PRTDLL.Resources, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral }
{ (null) -> 6.3.9600.16384 Microsoft-Windows-Printing-InternetPrinting-Server-Deployment, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey
neutral }
2014-07-30 14:48:10, Info CSI 00000014 [DIRSD OWNER WARNING] Directory [ml:520{260},l:70{35}]"\??\C:\Windows\Web\Printers\PrtCabs" is not owned but specifies SDDL in component
Microsoft-Windows-Printing-InternetPrinting-Server, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral
2014-07-30 14:48:11, Info CSI 00000015 Performing 1 operations; 1 are not lock/unlock and follow:
(0) LockComponentPath (10): flags: 0 comp: {l:16 b:a9675ce7fcabcf011600000038355812} pathid: {l:16 b:a9675ce7fcabcf011700000038355812} path: [l:222{111}]"\SystemRoot\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17200_none_fa7026dd9b04586e"
pid: 3538 starttime: 130512016808194168 (0x01cfabfce0c5b078)
2014-07-30 14:48:12, Info CSI 00000016 ICSITransaction::Commit calling IStorePendingTransaction::Apply - coldpatching=FALSE applyflags=15 (0x0000000f)
2014-07-30 14:48:12, Info CSI 00000017@2014/7/30:13:48:12.349 Begin executing midground installer for 2 components
Installer ID: {c4ecd77a-8511-4b18-89bf-c6ebecad4e01}
Installer name: [26]"Resource Cache (servicing)"
2014-07-30 14:48:12, Info CSI 00000018@2014/7/30:13:48:12.349 Done executing midground installer
2014-07-30 14:48:12, Info CSI 00000019 Creating NT transaction (seq 2), objectname [6]"(null)"
2014-07-30 14:48:12, Info CSI 0000001a Created NT transaction (seq 2) result 0x00000000, handle @0x58c
2014-07-30 14:48:13, Info CSI 0000001b@2014/7/30:13:48:13.039 Beginning NT transaction commit...
2014-07-30 14:48:14, Info CSI 0000001c@2014/7/30:13:48:14.201 CSI perf trace:
CSIPERF:TXCOMMIT;1170903
2014-07-30 14:50:36, Info CSI 0000001d Begin executing advanced installer phase 38 (0x00000026) index 2 (sequence 38)
Old component: [l:0]""
New component: [ml:350{175},l:348{174}]"Microsoft-Windows-Printing-InternetPrinting-Server, Culture=neutral, Version=6.3.9600.16384, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS"
Install mode: install
Installer ID: {7da6c3f0-56cd-4deb-a6e9-528e22244058}
Installer name: [52]"CSI Setup Internet Print Provider Advanced Installer"
2014-07-30 14:50:36, Info CSI 0000001e Performing 1 operations; 1 are not lock/unlock and follow:
(0) LockComponentPath (10): flags: 0 comp: {l:16 b:f97a5f3dfdabcf011d00000038355812} pathid: {l:16 b:f97a5f3dfdabcf011e00000038355812} path: [l:238{119}]"\SystemRoot\WinSxS\amd64_microsoft-windows-s..ingstack-base-extra_31bf3856ad364e35_6.3.9600.17200_none_1015b0b2970d7067"
pid: 3538 starttime: 130512016808194168 (0x01cfabfce0c5b078)
2014-07-30 14:50:36, Info CSI 0000001f Performing 1 operations; 1 are not lock/unlock and follow:
(0) LockComponentPath (10): flags: 0 comp: {l:16 b:3bf6663dfdabcf011f00000038355812} pathid: {l:16 b:3bf6663dfdabcf012000000038355812} path: [l:238{119}]"\SystemRoot\WinSxS\amd64_microsoft-windows-p..rnetprinting-server_31bf3856ad364e35_6.3.9600.16384_none_6ba89226f657293c"
pid: 3538 starttime: 130512016808194168 (0x01cfabfce0c5b078)
2014-07-30 14:50:36, Error CSI 00000020@2014/7/30:13:50:36.761 (F) base\wcp\plugins\printadvancedinstaller\dll\setupippai.cpp(518): Error HRESULT_FROM_WIN32(ERROR_ALREADY_EXISTS) originated
in function Windows::WCP::SetupIppAI::BasicInstaller::AddWebExtension expression: pCgiRestrictionCollection->AddElement(pNewCgiRestrictionElement)
[gle=0x80004005]
2014-07-30 14:50:37, Info CBS Added C:\Windows\Logs\CBS\CBS.log to WER report.
2014-07-30 14:50:37, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140730010013.log to WER report.
2014-07-30 14:50:37, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729175814.log to WER report.
2014-07-30 14:50:38, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729165314.log to WER report.
2014-07-30 14:50:38, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729161022.log to WER report.
2014-07-30 14:50:38, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729155800.log to WER report.
2014-07-30 14:50:38, Info CBS Not able to add pending.xml.bad to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2014-07-30 14:53:13, Error CSI 00000021@2014/7/30:13:53:13.332 (F) base\wcp\plugins\printadvancedinstaller\dll\setupippai.cpp(265): Error HRESULT_FROM_WIN32(ERROR_ALREADY_EXISTS) originated
in function Windows::WCP::SetupIppAI::BasicInstaller::InstallWebPrinting expression: AddWebExtension()
[gle=0x80004005]
2014-07-30 14:53:13, Info CBS Added C:\Windows\Logs\CBS\CBS.log to WER report.
2014-07-30 14:53:13, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140730010013.log to WER report.
2014-07-30 14:53:13, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729175814.log to WER report.
2014-07-30 14:53:13, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729165314.log to WER report.
2014-07-30 14:53:13, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729161022.log to WER report.
2014-07-30 14:53:13, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729155800.log to WER report.
2014-07-30 14:53:13, Info CBS Not able to add pending.xml.bad to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2014-07-30 14:53:20, Error CSI 00000022@2014/7/30:13:53:20.806 (F) base\wcp\plugins\printadvancedinstaller\dll\setupippai.cpp(118): Error HRESULT_FROM_WIN32(ERROR_ALREADY_EXISTS) originated
in function Windows::WCP::SetupIppAI::BasicInstaller::Install expression: InstallWebPrinting()
[gle=0x80004005]
2014-07-30 14:53:20, Info CBS Added C:\Windows\Logs\CBS\CBS.log to WER report.
2014-07-30 14:53:20, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140730010013.log to WER report.
2014-07-30 14:53:20, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729175814.log to WER report.
2014-07-30 14:53:20, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729165314.log to WER report.
2014-07-30 14:53:20, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729161022.log to WER report.
2014-07-30 14:53:20, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729155800.log to WER report.
2014-07-30 14:53:20, Info CBS Not able to add pending.xml.bad to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2014-07-30 14:53:39, Info CSI 00000023 Performing 1 operations; 1 are not lock/unlock and follow:
(0) LockComponentPath (10): flags: 0 comp: {l:16 b:5fb25daafdabcf012100000038355812} pathid: {l:16 b:5fb25daafdabcf012200000038355812} path: [l:234{117}]"\SystemRoot\WinSxS\x86_microsoft.windows.s..ation.badcomponents_31bf3856ad364e35_6.3.9600.16384_none_cd3183f2deb856d2"
pid: 3538 starttime: 130512016808194168 (0x01cfabfce0c5b078)
2014-07-30 14:53:39, Error [0x018042] CSI 00000024 (F) Failed execution of queue item Installer: CSI Setup Internet Print Provider Advanced Installer ({7da6c3f0-56cd-4deb-a6e9-528e22244058}) with HRESULT HRESULT_FROM_WIN32(ERROR_ALREADY_EXISTS).
Failure will not be ignored: A rollback will be initiated after all the operations in the installer queue are completed; installer is reliable (2)[gle=0x80004005]
2014-07-30 14:53:39, Info CBS Added C:\Windows\Logs\CBS\CBS.log to WER report.
2014-07-30 14:53:39, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140730010013.log to WER report.
2014-07-30 14:53:39, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729175814.log to WER report.
2014-07-30 14:53:39, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729165314.log to WER report.
2014-07-30 14:53:39, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729161022.log to WER report.
2014-07-30 14:53:39, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729155800.log to WER report.
2014-07-30 14:53:39, Info CBS Not able to add pending.xml.bad to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2014-07-30 14:54:48, Info CSI 00000025 Creating NT transaction (seq 3), objectname [6]"(null)"
2014-07-30 14:54:48, Info CSI 00000026 Created NT transaction (seq 3) result 0x00000000, handle @0x200
2014-07-30 14:54:48, Info CSI 00000027@2014/7/30:13:54:48.314 Beginning NT transaction commit...
2014-07-30 14:54:48, Info CSI 00000028@2014/7/30:13:54:48.322 CSI perf trace:
CSIPERF:TXCOMMIT;7638
2014-07-30 14:54:48, Info CSI 00000029@2014/7/30:13:54:48.322 CSI Advanced installer perf trace:
CSIPERF:AIDONE;{7da6c3f0-56cd-4deb-a6e9-528e22244058};Microsoft-Windows-Printing-InternetPrinting-Server, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral;253883515us
2014-07-30 14:54:48, Info CSI 0000002a End executing advanced installer (sequence 38)
Completion status: HRESULT_FROM_WIN32(ERROR_ADVANCED_INSTALLER_FAILED)
2014-07-30 14:54:48, Info CSI 0000002b Rolling back transactions...
2014-07-30 14:54:48, Info CSI 0000002c Creating NT transaction (seq 4), objectname [6]"(null)"
2014-07-30 14:54:48, Info CSI 0000002d Created NT transaction (seq 4) result 0x00000000, handle @0x55c
2014-07-30 14:54:48, Info CSI 0000002e Poqexec successfully registered in [ml:26{13},l:24{12}]"SetupExecute"
2014-07-30 14:54:48, Info CSI 0000002f Performing 2 operations; 2 are not lock/unlock and follow:
(0) Uninstall (6): flags: 1 tlc: [Microsoft-Windows-Printing-InternetPrinting-Server-Deployment-LanguagePack, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken
= {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral]) ref: ( flgs: 00000000 guid: {d16d444c-56d8-11d5-882d-0080c847b195} name: [l:246{123}]"Microsoft-Windows-Printing-Server-Role-Package~31bf3856ad364e35~amd64~en-US~6.3.9600.16384.Printing-InternetPrinting-Server"
ncdata: [l:0]"")
(1) Uninstall (6): flags: 1 tlc: [Microsoft-Windows-Printing-InternetPrinting-Server-Deployment, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35},
Type neutral, TypeName neutral, PublicKey neutral]) ref: ( flgs: 00000000 guid: {d16d444c-56d8-11d5-882d-0080c847b195} name: [l:236{118}]"Microsoft-Windows-Printing-Server-Role-Package~31bf3856ad364e35~amd64~~6.3.9600.16384.Printing-InternetPrinting-Server"
ncdata: [l:0]"")
2014-07-30 14:54:48, Info CSI 00000030 Component change list: { 6.3.9600.16384 -> (null) Microsoft-Windows-Printing-InternetPrinting-Server, pA = PROCESSOR_ARCHITECTURE_AMD64
(9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral }
{ 6.3.9600.16384 -> (null) Microsoft-Windows-Printing-InternetPrinting-Server-MSW3PRTDLL, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey
neutral }
{ 6.3.9600.16384 -> (null) Microsoft-Windows-Printing-InternetPrinting-Server.Resources, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral,
TypeName neutral, PublicKey neutral }
{ 6.3.9600.16384 -> (null) Microsoft-Windows-Printing-InternetPrinting-Server-Deployment-LanguagePack, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35},
Type neutral, TypeName neutral, PublicKey neutral }
{ 6.3.9600.16384 -> (null) Microsoft-Windows-Printing-InternetPrinting-Server-Content, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey
neutral }
{ 6.3.9600.16384 -> (null) Microsoft-Windows-Printing-InternetPrinting-Server-MSW3PRTDLL.Resources, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral }
{ 6.3.9600.16384 -> (null) Microsoft-Windows-Printing-InternetPrinting-Server-Deployment, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey
neutral }
2014-07-30 14:54:48, Info CSI 00000031 Performing 1 operations; 1 are not lock/unlock and follow:
(0) LockComponentPath (10): flags: 0 comp: {l:16 b:4c80d8d3fdabcf012e00000038355812} pathid: {l:16 b:4c80d8d3fdabcf012f00000038355812} path: [l:222{111}]"\SystemRoot\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17200_none_fa7026dd9b04586e"
pid: 3538 starttime: 130512016808194168 (0x01cfabfce0c5b078)
2014-07-30 14:54:48, Info CSI 00000032@2014/7/30:13:54:48.991 Begin executing midground installer for 2 components
Installer ID: {c4ecd77a-8511-4b18-89bf-c6ebecad4e01}
Installer name: [26]"Resource Cache (servicing)"
2014-07-30 14:54:48, Info CSI 00000033@2014/7/30:13:54:48.991 Done executing midground installer
2014-07-30 14:54:49, Info CSI 00000034 Poqexec successfully registered in [ml:26{13},l:24{12}]"SetupExecute"
2014-07-30 14:54:49, Info CSI 00000035@2014/7/30:13:54:49.019 Beginning NT transaction commit...
2014-07-30 14:54:49, Info CSI 00000036@2014/7/30:13:54:49.049 CSI perf trace:
CSIPERF:TXCOMMIT;29608
2014-07-30 14:54:49, Info CSI 00000037@2014/7/30:13:54:49.062 Begin executing midground installer for 2 components
Installer ID: {c4ecd77a-8511-4b18-89bf-c6ebecad4e01}
Installer name: [26]"Resource Cache (servicing)"
2014-07-30 14:54:49, Info CSI 00000038@2014/7/30:13:54:49.063 Done executing midground installer
2014-07-30 14:54:49, Info CSI 00000039 Creating NT transaction (seq 5), objectname [6]"(null)"
2014-07-30 14:54:49, Info CSI 0000003a Created NT transaction (seq 5) result 0x00000000, handle @0x4e4
2014-07-30 14:54:49, Info CSI 0000003b@2014/7/30:13:54:49.200 Beginning NT transaction commit...
2014-07-30 14:54:49, Info CSI 0000003c@2014/7/30:13:54:49.314 CSI perf trace:
CSIPERF:TXCOMMIT;115505
2014-07-30 14:54:49, Info CSI 0000003d Begin executing advanced installer phase 24 (0x00000018) index 2 (sequence 62)
Old component: [ml:350{175},l:348{174}]"Microsoft-Windows-Printing-InternetPrinting-Server, Culture=neutral, Version=6.3.9600.16384, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS"
New component: [l:0]""
Install mode: uninstall
Installer ID: {7da6c3f0-56cd-4deb-a6e9-528e22244058}
Installer name: [52]"CSI Setup Internet Print Provider Advanced Installer"
2014-07-30 14:54:49, Info CSI 0000003e Performing 1 operations; 1 are not lock/unlock and follow:
(0) LockComponentPath (10): flags: 0 comp: {l:16 b:153f41d4fdabcf013600000038355812} pathid: {l:16 b:153f41d4fdabcf013700000038355812} path: [l:238{119}]"\SystemRoot\WinSxS\amd64_microsoft-windows-s..ingstack-base-extra_31bf3856ad364e35_6.3.9600.17200_none_1015b0b2970d7067"
pid: 3538 starttime: 130512016808194168 (0x01cfabfce0c5b078)
2014-07-30 14:54:49, Info CSI 0000003f Performing 1 operations; 1 are not lock/unlock and follow:
(0) LockComponentPath (10): flags: 0 comp: {l:16 b:5bb441d4fdabcf013800000038355812} pathid: {l:16 b:5bb441d4fdabcf013900000038355812} path: [l:238{119}]"\SystemRoot\WinSxS\amd64_microsoft-windows-p..rnetprinting-server_31bf3856ad364e35_6.3.9600.16384_none_6ba89226f657293c"
pid: 3538 starttime: 130512016808194168 (0x01cfabfce0c5b078)
2014-07-30 14:54:49, Error CSI 00000040@2014/7/30:13:54:49.391 (F) base\wcp\plugins\printadvancedinstaller\dll\setupippai.cpp(1498): Error 8002802b [Error,Facility=(0002),Code=32811 (0x802b)]
originated in function Windows::WCP::SetupIppAI::BasicInstaller::FindElementInCollection expression: ((HRESULT)0x8002802BL)
[gle=0x80004005]
2014-07-30 14:54:49, Info CBS Added C:\Windows\Logs\CBS\CBS.log to WER report.
2014-07-30 14:54:49, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140730010013.log to WER report.
2014-07-30 14:54:49, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729175814.log to WER report.
2014-07-30 14:54:49, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729165314.log to WER report.
2014-07-30 14:54:49, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729161022.log to WER report.
2014-07-30 14:54:49, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729155800.log to WER report.
2014-07-30 14:54:49, Info CBS Not able to add pending.xml.bad to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2014-07-30 14:54:50, Error CSI 00000041@2014/7/30:13:54:50.092 (F) base\wcp\plugins\printadvancedinstaller\dll\setupippai.cpp(1498): Error 8002802b [Error,Facility=(0002),Code=32811 (0x802b)]
originated in function Windows::WCP::SetupIppAI::BasicInstaller::FindElementInCollection expression: ((HRESULT)0x8002802BL)
[gle=0x80004005]
2014-07-30 14:54:50, Info CBS Added C:\Windows\Logs\CBS\CBS.log to WER report.
2014-07-30 14:54:50, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140730010013.log to WER report.
2014-07-30 14:54:50, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729175814.log to WER report.
2014-07-30 14:54:50, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729165314.log to WER report.
2014-07-30 14:54:50, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729161022.log to WER report.
2014-07-30 14:54:50, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729155800.log to WER report.
2014-07-30 14:54:50, Info CBS Not able to add pending.xml.bad to Windows Error Report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2014-07-30 14:54:50, Info CSI 00000042@2014/7/30:13:54:50.636 CSI Advanced installer perf trace:
CSIPERF:AIDONE;{7da6c3f0-56cd-4deb-a6e9-528e22244058};(null);1330111us
2014-07-30 14:54:50, Info CSI 00000043 End executing advanced installer (sequence 62)
Completion status: S_OK
2014-07-30 14:54:50, Info CSI 00000044 Creating NT transaction (seq 6), objectname [6]"(null)"
2014-07-30 14:54:50, Info CSI 00000045 Created NT transaction (seq 6) result 0x00000000, handle @0x55c
2014-07-30 14:54:50, Info CSI 00000046 Poqexec successfully registered in [ml:26{13},l:24{12}]"SetupExecute"
2014-07-30 14:54:50, Info CSI 00000047@2014/7/30:13:54:50.638 Beginning NT transaction commit...
2014-07-30 14:54:50, Info CSI 00000048@2014/7/30:13:54:50.661 CSI perf trace:
CSIPERF:TXCOMMIT;24077
2014-07-30 14:54:50, Info CBS Setting ExecuteState key to: ExecuteStateNone
2014-07-30 14:54:50, Info CBS Setting RollbackFailed flag to 0
2014-07-30 14:54:50, Info CBS Clearing HangDetect value
2014-07-30 14:54:50, Info CBS Saved last global progress. Current: 0, Limit: 1, ExecuteState: ExecuteStateNone
2014-07-30 14:54:50, Info CBS Cancelling: no transactions
2014-07-30 14:54:50, Info CBS Exec: Cancelled pending transactions after rollback. [HRESULT = 0x00000000 - S_OK]
2014-07-30 14:54:50, Error CBS Exec: An error occurred while committing the transaction, the transaction has been rolled back. [HRESULT = 0x800f0922 - CBS_E_INSTALLERS_FAILED]
2014-07-30 14:54:50, Info CBS Perf: InstallUninstallChain complete.
2014-07-30 14:54:50, Info CSI 00000049@2014/7/30:13:54:50.690 CSI Transaction @0xd1d8fd01b0 destroyed
2014-07-30 14:54:50, Info CBS Failed to execute execution chain. [HRESULT = 0x800f0922 - CBS_E_INSTALLERS_FAILED]
2014-07-30 14:54:50, Error CBS Failed to process single phase execution. [HRESULT = 0x800f0922 - CBS_E_INSTALLERS_FAILED]
2014-07-30 14:54:50, Info CBS WER: Generating failure report for package: Microsoft-Windows-ServerCore-Package~31bf3856ad364e35~amd64~~6.3.9600.16384, status: 0x800f0922, failure source:
Execute, start state: Installed, target state: Installed, client id: DISM Package Manager Provider
2014-07-30 14:54:50, Info CBS Not able to query DisableWerReporting flag. Assuming not set... [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2014-07-30 14:54:50, Info CBS Added C:\Windows\Logs\CBS\CBS.log to WER report.
2014-07-30 14:54:50, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140730010013.log to WER report.
2014-07-30 14:54:50, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729175814.log to WER report.
2014-07-30 14:54:50, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729165314.log to WER report.
2014-07-30 14:54:50, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729161022.log to WER report.
2014-07-30 14:54:50, Info CBS Added C:\Windows\Logs\CBS\CbsPersist_20140729155800.log to WER report.
2014-07-30 14:54:50, Info CBS Not able to add %windir%\winsxs\pending.xml to WER report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2014-07-30 14:54:50, Info CBS Not able to add %windir%\winsxs\pending.xml.bad to WER report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2014-07-30 14:54:52, Info CBS Reboot mark cleared
2014-07-30 14:54:52, Info CBS Winlogon: Deregistering for CreateSession notifications
2014-07-30 14:54:52, Info CBS Winlogon: Stopping notify server
2014-07-30 14:54:52, Info CBS Winlogon: Unloading SysNotify DLL
2014-07-30 14:54:52, Info CBS FinalCommitPackagesState: Started persisting state of packages
2014-07-30 14:54:52, Info CBS TI: CBS has queried the current reboot required state: 0
2014-07-30 14:54:52, Info CBS SQM: Reporting selectable update change for package: Microsoft-Windows-Printing-Server-Role-Package~31bf3856ad364e35~amd64~~6.3.9600.16384, update: Printing-InternetPrinting-Server,
start: Staged, applicable: Installed, target: Installed, client id: DISM Package Manager Provider, initiated offline: False, execution sequence: 352, first merged sequence: 352, download source: 0, download time (secs): 4294967295, download status: 0x0 (S_OK),reboot
required: False, overall result:0x800f0922 (CBS_E_INSTALLERS_FAILED)

Hi,
Before going further, would you please let me confirm whether had encountered similar issue when install other
roles?
Would you please let me know whether install any third-party application on the server? Please
perform a clean boot and check if this issue still exists.
By the way, did network connection ran as normal when install the role?
If any update, please feel free to let me know.
Hope this helps.
Best regards,
Justin Gu

Mass deletion of TCode from roles

Hi
I would like to remove a certain Tcode from a list of roles. I would not like to do this manually (PFCG'ing every role). Is there another way by which this requirement can be taken care of?
Can a ABAP program be created for this (thru table AGR_TCODES)
best regards
Ravi

Hi
From what I understand Tcode removal is a manual process (at the most what one can do is to search through the binoculars in the Menu tab to see if the Tcode is present and then manually scroll down to identify the Tcode and then delete the same)
How can a CATT script search for a Tcode to be removed?
best regards
Ravi

IRM Web Services Adding a New Role to a Context

We are in the process of using the IRM web services to create a system that will automatically create users/contexts and seal documents over the web.
So far I can successfully create users and groups and assign permissions properly as well as create context.
I am having trouble adding roles to the context.
The error I'm getting is "The attribute 'Features' is mandatory".
The problem is that there is no function to add features to the ContextRole object.
How do I set up the features so that I can save then new ContextRole?
Tom

Hi Tom
Response from engineering on your latest questions:
Depending on which web service code generator is used, collection typed properties may or may not be provided with set operation. If the code generator does provide a set method for collections, then you can just specify the set of features you require as so:
// Java
Collection<Feature> features = new ArrayList<Feature>();
features.add(feature);
ContextRole role = new ContextRole();
role.setFeatures(features);
However if the set method is NOT provided, then you need to manipulate the collection directly, by using the get method and then using the standard collection methods to alter the contents.
// Java
ContextRole role = new ContextRole();
role.getFeatures().add(feature);
These two examples are functionally the same, they both create a context role object with one feature.
Kind regards
Andrew

Transaction Code authorization related query --- Not maintain tcode in Role

Dear All,
First of all, I have not found any specific area where I can post my problem.Then I found that the OS level expert should also have expertise in SAP basis administration.My query is as follow;
I have found a scenario where i have seen that a tcode for ex. VA03 is present in an user from SUIM. But when I tried to find out in which Role and profile it is maintained not found.
I have checked each and every Role & Profile but no where it is maintained although the user can run this tcode.
Please note that the tcode VA01 is given as example I actually found this thing for a customized tcode called ZCOA,ZINTROT,ZPROINV etc.
Please help me by giving some idea that how can they maintain this kind of authorization.
Please note that this is a USA company running SAP from 2001 & current SAP version is 4.7.
Thanks,
Suman

Hi,
Please note that the tcode VA01 is given as example I actually found this thing for a customized tcode called ZCOA,ZINTROT,ZPROINV etc.
Firstly what have you created roles or profiles to accomodate Z-tcodes. If its profile or if its roles select relevant option in tcode SUIM. Viz List transactions in roles / profiles.
Hope this helps.
Regards,
Deepak Kori

Adding Tcode to Favorites

Hi,
Is there any way I can add a Tcode to particular user's Favorites from my system?
Thanks,
Veni

Hi,
If you are a system administrator looking to assign TCODES which are easily accessible to end users (something like favourites) then you can go to transaction PFCG (maintain roles).
Create a simple Role there and in the Menu Tab, add the required transaction codes.
Then in User tab assign all the end user IDs.
When the user logs in, ask them to switch to the User Specific Menu (by clicking first button on application toolbar on SAP easy access screen).
They shall see all the TCodes assigned to the respective menus.
Cheers,
Aditya

Adding Tcodes in Role

Similar Messages

Maybe you are looking for