APO Security to control the users access

Hi,
Is there any possibility to control the users access by controlling through selection ID's or does it possible through any of the product lines (Characteristics)?
My requirement is I have to control all the APO DP users in various levels of Product lines and the access has to be granted at specific product level. Right now I am trying do through selection ids, but I am looking for more effective way.
Please help me with your views.
Thank you in advance!
Jegan

Hi Jegan,
There are so many security objects in DP that you can try out and see if they meet your requirement.
The way I understand your issue is to restrict user by certain products or BW characteristics.
To control by Products, try the object C_APO_PROD with activity APO_PROD (Product Identifier). You can select specific products here for each role and restrict by either display, change, execute, delete etc.
If you want to restrict by BI characteristics, try object S_RS_AUTH.
Be careful with this as you are selecting BI objects, the system restricts them even if they are remote part of your work.
If you have to restrict by specific product levels like all product lines, I am not sure how to do it but you can certainly try searching based on keyword "PROD".
Please let us know if you discover something useful.

Similar Messages

Way to allow the user access to the saved lists of this Z report

We have a Z report that we want to run at midnight each Sunday and then view the output/layout first thing Monday morning. We can schedule the report to run but it appears that the only way we can save the output as a 'file' for later viewing is by using the "Save with ID" option, which puts the output into a SAP 'saved list'.
The problem with this is that it doesn't appear to be possible to access that list from the Z-report - it would appear that you have to go into SQ01 and use the 'saved list' button. This means giving the Z- report user access to SQ01 as well as Z-report, which, for security (SOD) reasons we don't want to do.
We can run the report in foreground with the output option "File store" and save the output as a file to a specified location,. But this option doesn't appear to be available when the report is scheduled as a background job. If this is done, the background job runs but there's no output anywhere, as far as we can tell.
So what want is to run the report in background but with the output option 'File store' or equivalent (i.e. an output stored somewhere that the report user can view). Is this not possible, or have we missed something in setting up the report run?
Or is there a way to allow the user access to the saved lists of this Z report without giving them T-code SQ01?
Thanks

Hi !
I just wonder if the answer from Varishtb below did solve your propblem.
I have exactly the same problem as you. I also want to be able to look at the saved list without using the sq01.
If you solved it I will be grateful to get the solution.
regards Lars
answer:
You can call the infoset query directly from a transaction code. There's
no need to copy it as a 'Z-report' (or as a custom report). In fact,
everytime you're copying an infoset query to a report, you're calling
for problems the next time you face an upgrade. (That is because SAP
changes the internal logic used to handle the infosets queries from
version to version)
We're using some infoset queries and they work fine this way.

After recording text using the dragon dictation app, it is converted, it can be copied to the iOS system clipboard for use in any app, how does the user access the clipboard to retrive this information if it is no longer on the screen?

after recording text using the Dragon dictation app, it can be copied to the iOS systme clipboard for use in any app, how does the user access the clipboard to retrive this information if it is no longer on the screen?

You need to do a long-press in any data entry field, then select Paste.

Receiving an error when trying to remove P00 Security role from the user

Hi All,
I am receiving an error when trying to remove P00 Security role from the user.
After logging on to GRC CUP, clicking on u201CCreate requestu201D, and filling out required information,
I click on Select Roles/Groups
On the next screen,
I click on Existing Roles/Groups
ERROR MESSAGE appears X Action failed and no roles appear in the box to select for removal.
Regards,
Vineet

Hi Vineet,
My be your selection is incorrect
Try this
in Applicaiton Area -- Select ALL
Functional Area -
Select ALL
Company -
Select ALL
Role/Profile/Group Names --- Give p00* and execute the report
if you give only p00 it wont give any result
Hope this helps
Thank you,
Kishore

Audit log of the User access and permissions

Hi All,
We need to have the Audit trail of the user access and permission. Meaning Changes to user access rights will be logged.
This should include:
Current Access Rights (including Date the access was given),
Group membership (including Date the access was given),
Previous Access Rights (including Date the access was given and revoked).
Can we reuse any out of the box functionality of CQ. Does anybody having any pointer to this?
Thanks,
Debasis

Hi PChamoun,
At the outset thanks a lot for the clue. I am very new to CQ. Could you please guide me like, what are the API required to track the rep:policy node changes. Even if workflow will be started after any change to rep:policy but how I will be able to get the information of what change happened.
Thanks,
Debasis

'Business Partner Assigned to the User' Access Sequence don't work

Hello.
I use access sequence 0008 (Business Partner Assigned to the User) in my Partner determination procedure. But it doesn't work. Corresponding Partner field in service document is empty. But I need that BP linked with logon user filled it.
I've made the same settings on another incstanse of SM and it's work. And what the difference between I don't understand.
Edited by: Dmitry Udot on Feb 13, 2011 2:31 AM

Sorry, but I don't quite get it. My purpose is to have 9 policies all working all the time (they did at in one version of firmware). I don't care about time entries for these. All 9 policies are full of keywords and websites to block webpages related to porn to one degree or another. The 10th policy is time-based to prevent internet access altogether for one or two computers through the wee hours of the morning. This, all in leu of having no parental controls.
Again, it would help if there was more detailed documentation on how this all works. This is the first I am aware that time settings in one policy could affect or impede the operation of other policies. How am I supposed to know this?
In any case, I appreciate your assistance and looking into this for me. But can you now tell me how to make it work so the policies will work as I want - the first 9 around the clock all the time, and the 10th one only from 1:30 am to 8:00 am (every day). Please instruct me on how I am supposed to configure this to work, and what specific settings I am supposed to enter... if it is even possible. Or is there another way of accomplishing this on my WRT54G (Rev. 2) product? Thanks.
Perry

Controlling the concurrent access to documents

I want a possibility in the administration to control the access to documents (quotation, orders,...). If a user open a document and no other user has access to the same document (with equal docentry) there's no difference to the current version. But if another user has opened the same document the user should be informed about this or the document should be be in read only mode. The behaviour should be adjusted in the administration.
Best wishes
Johann Wahler

hi johann,
You can give read only authorisation
to sales quotation for other users.
Develop a small add on to
capture dynamically event of sales quotation
when other users open sales quotation/else
You can raise a ticket to SAP for
a new development request for this requirement.
Jeyakanthan

How to control the users' authorization?

Hi All,
Please help me for the below scenario in system.
A & B users have access to same business role (Ex: SERVICEPRO) in Web UI. However, user A should be able to create and edit anything, but user B should have only display authorization (User B should not be able to create and edit anything in application).
Could you please suggest me how/where to control the authorization for these users?
Regards,
Maddy

Hello Maddy,
Hello Maddy there is no specific authorization object for user. That can be done with PFCG menu. You need to play around with the PFCG Role “Menu”. The solution for your scenario is as below:
When I say changes in the menu, I mean changes in the menu tab of the PFCG role assigned to the user. You have to delete the UIU component from the respective folder. In the present case I have taken Sales folder - transaction Opportunity. This holds good for any transaction (eg activities, lead, etc). The moment you delete the link (UIU_COMP link) and save the PFCG Role the authorization tab will become red. Reason being that specific authorization of create/display is deleted. You need to go to authorizations make all green and generate the profile.
You can also refer to the link below, which will be of help to you for better understanding.
Some facts about UIU_COMP authorization object in SAP CRM.
Hope this answer was helpful
Thanks!
Neha

Control/restrict user access

Hi,
we are currently on EP7.0,would like to find out if we are able
to control/restrict number of users from accessing an ESS transactional
page. Thanks.

Hi Eric,
access to portal content is managed with help of portal roles. Basically, you assign portal content (worksets, portal pages, iViews) to a portal role (see SAP Library <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/4f/bceaffeb8c114ebef8255b63079c7c/frameset.htm">Roles and Worksets</a>). To make the content available to a certain set of users you have to assign the portal role to the users (see SAP Library <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/ed/845890b89711d5993900508b6b8b11/frameset.htm">Assigning Roles to Users and Groups.</a>).
If you would like to restrict access to a certain ESS portal page remove this page from the standard ESS role and create a new role. Assign the ESS portal page to this new role and assign the role to all users you would like to give access to the page.
Make sure you set the right Merge-Ids and Sort-Ids in order to display the ESS portal page at the right point in your portal navigation structure (see SAP Library <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/53/89503ede925441e10000000a114084/frameset.htm">Merging Navigation Nodes and Defining the Sequence</a>)
Best regards,
Martin
Please reward points for helpful answers

Log the user Access to a Channel

It's possible to log the access to a channel with the system log facility or a simple file when an user click in the desktop link... the link can be an external URL.
The log must have the user id and the name of the URL for tracking user action in the desktop.
It's possible using the Rewriter Rules and Rulesets to perfome this?
If it's impossible we're the better solution?
Obsiously it's possible to redirect all the channel link of the desktop in a new servelets o jsp page that provides this functionality and log the access but I think there is not the better solution...
Thank for the help
Best Regards
Fausto

Hi Fausto,
Of course there are several cool tricks ;-)
- Your "JS trick with post " will refresh the page - no good...
(Also what if you log several channels etc.... )
- For reporting I actually used "JS hidden image" trick.
Note: You will loose the browser handle from logging jsp
- "One Pixel Frame" is good only if you need to have a browser handle.
For example on click e.g. TabSwitch you can show immediate statistics
(e.g. how many time user spend with this channel and how much he has to pay!)
PS: I am actually done with the reporting tool.
Send me a mail if you wanna see it.
Cheers,
Alex :-)

A way to know who long the user access the application

Hi
<%session.getLastAccessedTime();
out.println(new java.util.Date(session.getLastAccessedTime()));%>
can catch the user login time, how can I catch the user logout time and How long they access?
thank you

What does this have to do with JDBC?
But to help you, I would say to calculate the stuff yourself in whatever page lies behind the link when the user presses the logout button and/or link.
Or, to use a SessionListener and calculate as above to catch timed-out sessions. If you do this, then do not do the above, or it will get calculated twice.
If you have further questions then please post to the correct forum.
http://forum.java.sun.com/forum.jspa?forumID=331

Cancelling the privaleges of the user accessing the schema objects ???

Hi,
I have given privilages to the user to access my schema objects(tables). Can i cancell the privilages of the user of accessing my schema objects(table) which i granted them ???
Thank you !!!

Hi,
If you gave a privilege or role to a user using GRANT, you can take it away using REVOKE.
For example:
REVOKE SELECT ON my_table FROM user_name;un-does the privilege given by
GRANT SELECT ON my_table TO user_name;

My security software controls the license verifications, firefox refuses to acknowledge this.

I am running BitDefender Total Security 2012, it manages all the licensing and verification for websites. BitDefender has a root kit that it keeps trying to give to firefox to show that the site has already been verified by BitDefender, but firefox will not accept it. Any website that requires a user name and password, including gmail, facebook, and websites for my school (I am an IT student at the local community college) firefox refuses to load it saying that it can't verify the site when BitDefender already verified it. Instead of loading the page it just shows the box with the yellow man holding a flag. How do I make FireFox comply?

'''AVG Free''' 
*Firefox does not disable your security software, just the toolbar that it installs. Your security software is still working in the background to protect you.
*Keep up to date with what is happening with AVG by visiting their forums: http://forums.avg.com/us-en/avg-forums
*Have you updated to AVG 2012 Free Edition?
*Read the 2nd item on the following page first, then read the first item:
**http://forums.avg.com/ww-en/avg-forums?sec=thread&act=show&id=171860
'''Posting a question of the Firefox Support forum''' 
Some tips on post forum questions. Look at the 2 images below and the explanations of the fields in the Firefox Support forum "Ask a question" form. Click on the images, or right-click on them to open in a new tab, then click the image in the new tab to enlarge it for easier reading.
'''If this reply solves your problem, please click "Solved It" next to this reply when signed-in to the forum.'''
Not related to your question, but...
You need to update some plug-ins:
*Plug-in check: https://www-trunk.stage.mozilla.com/en-US/plugincheck/
*Adobe Shockwave for Director Netscape plug-in: [https://support.mozilla.com/en-US/kb/Using%20the%20Shockwave%20plugin%20with%20Firefox#w_installing-shockwave Installing ('''''or Updating''''') the Shockwave plugin with Firefox]
*Adobe PDF Plug-In For Firefox and Netscape: [https://support.mozilla.com/en-US/kb/Using%20the%20Adobe%20Reader%20plugin%20with%20Firefox#w_installing-and-updating-adobe-reader Installing/Updating Adobe Reader in Firefox]
*Next Generation Java Plug-in for Mozilla browsers: [https://support.mozilla.com/en-US/kb/Using%20the%20Java%20plugin%20with%20Firefox#w_installing-or-updating-java Installing or Updating Java in Firefox]

Trigger Audit report whenever the user access the report.

Hi BOBJ Experts,
I have a requirement to Email a report whenever a particular user access the BOBJ report. I checked the event based scheduling but no luck. Can anyone help me in this regards.
Thank You,
Srinadha Reddy Y.

Hi PChamoun,
At the outset thanks a lot for the clue. I am very new to CQ. Could you please guide me like, what are the API required to track the rep:policy node changes. Even if workflow will be started after any change to rep:policy but how I will be able to get the information of what change happened.
Thanks,
Debasis

Windows 7 Desktop goes Black after a period of inactivity and the user accesses their machine again

Hi There,
Wonder if someone can offer some help to an unusual problem?
Users have Windows 7 machines which all have a desktop background theme...Blue with a company Logo.
User will go for lunch and leave their position, after a period of time screen saver and/or powersaver kicks in...all normal at this point.
After an hour they come back to their machine and they move the mouse/tap a key and bring the machine back to life (excuse my terminology :) ) and the desktop has gone from the default theme to a black desktop...Icons/Applications will behave fine.
The temporary workaround is:
1. Log off and on windows to restore the desktop back to normal.
or...
2. I do a restart of the service "Desktop window Manager Session Manager" which puts the desktop back to normal as well.
Has anyone seen this and worked a way how to do a permanent fix....have struggled on Google as all answers i find are around screen savers which IS NOT the problem.
Cheers,
Steve

Hi Brenton,
First of all thanks for your quick response.
I forgot to mention these are machines we maintain on a customer site and I am planning a visit there soon so will be looking at some of the options you mention and then post a fuller report back for you.
In the meantime...
Re 1 we may actually be able to consider not going to "sleep" as this is a 24/7 operation environment so would not be a big deal to do that so may try that on my site visit.
Re 2 we do have a master build IF we need to re-build/re-image...its a fairly locked down completed environment so new machines/rebuilds wont happen often. Just for info we re-did our build from scratch very carefully.
On site going to check the Firmware updates as you quite rightfully mention could be out-of-date and benefit from an update. We last updated them about October/November last Lear.
I have just remembered that sometimes the users resolve the issue by using the mouse and dragging an empty box around the screen and this restores the desktop colour etc...very strange one!!
Cheers,
Steve

APO Security to control the users access

Similar Messages

Maybe you are looking for