Assign Authorization in User Groups

Dear All
Please help me , assign authorization User Groups . I go Tcode : SUGR and Tcode : SU 10 but i can't assign authorization in User Group , please help me step by step
Regard , Thanks
Lannguyen

I think only way to do it through SU10.
-Pinkle

Similar Messages

Assign Filters to User/ Group In System 9

Hi,Does anyone know how to assign filters to user/ group in System9. I know that you have to create filters at the database level andassign security filter security from shared Services. The step I ammissing is where do you assign filter (i.e. ReadAcctFilter<<filtername>> to Accounting <<User/groupname>> thanks, 

assign filters in the shared services, under the analytic server to the user... procedure would be look for the user in the particular domain, and assign the user provisioning and the filter also.. I hope you got it.

Assigned Role in user Group

Dear All
Please help me assigned Role in user Group . I create user Group ( SURG ) . But i can't assigned Role ?
Regards , Thanks
Lannguyen

Hello,
You cannot assign user groups directly to Roles, however you can do the following.
Use PFCG transaction
1. Select the role and switch to change mode.
2. Switch to user tab.
3. Put the cursor in the blank line and hit F4
4. You should get a popup window which asks you to provide search criteria for the user.
5. Switch to 2nd tab Users by Logon criteria, here you should be able to find the selection field User group.
6. Select the group you created and hit the green tick.
7. All the users in that group will be listed in the User list tab on the main screen.
8. Now to complete the user assignment hit the User comparisor button ( it should turn green once done).
Regards,
Siddhesh

How many ways we can create authorization for user groups in sap query reports

Hi Gurus, I am getting a problem when I am assigning users to user group in sap query report .The users other than created in user groups are also able to add &change the users .So please suggest me how to restrict users outside of the user group.
Please send me if u have any suggestions and useful threads.
Thank You,
Suneel Kumar.

I don't think it can be done. According to the link below 'Users who have authorization for the authorization object S_QUERY with both the values Change and Maintain, can access all queries of all user groups without being explicitly entered in each user group.'
http://help.sap.com/saphelp_46c/helpdata/en/d2/cb3f89455611d189710000e8322d00/content.htm
Although I think you can add code to your infoset and maybe restrict according to authority group, i.e.:
Use AUTHORITY-CHECK to restrict access to the database based on user.
Press F1 on AUTHORITY-CHECK to find out how to use it in the code

Authorization Schemes, User Groups

Hi Folks,
I wish to create an authorization scheme and to do so with one of the user groups I defined in
Home>Administration>Manage Application Express Users
How can I set the authorization scheme to achieve this?
Thanks for any and all help

Are you looking for apex_util.current_user_in_group
Create a new authorization scheme... PL/SQL function reuturning boolean
begin
if apex_util.current_user_in_group('MyGroup')
then
return TRUE;
else
return FALSE;
end if;
end;Reference:http://apex.oracle.com/i/doc/AEAPI/apex_util014.htm
Regards,
Shijesh

Assigning Authorization to Material Group

Hi.. Experts... I have a query
In materials master i want filter material groups based on the user. that is if there is an user YYYY he will be able to see only the material groups Y1,Y2,Y3.... and if the user is ZZZZ then he ll be able to see the material groups Z1,Z2,Z3... ,when he/she selects the material group field while creating material in material master (MM01).
how can I do this ..Please help me

Hello,
You can use the object M_MATE_MAT to restrict MM01 based on material group.
The below thread might be useful:
Authorization Group Material Master
Regards,
Jazz

ABAP Query : user is not assigned to user group

Hello All,
i have created user group using sq03 and assigned user name for change authorization in 'assign users and infosets'.
But when user tries to run query using sq01 system is giving message 'User XXX is not assigned to any user group'.
I tried every thing but facing same problem.
Could anyone please help me out .
Thanks

I actually assigned the user group to a role in SQ10. The user is assigned to the role. I also created a new post under Security which has more detail:
http://scn.sap.com/thread/3198604

New user creation in AE- user group not getting assigned

Hi All,
Here is a typical case, wherein when we create a new user with AE for the production system, the user gets created and the roles are also assigned but the user group is not getting assigned. The user group is being fetched from a table from the backend and all that is working fine. Infact in order to test the configurations we even created a new user in the production instance of AE giving the development system as the target system for user creation and in this case the user was successfully created and the user group is also assigned. The problem is arising only when the target system is production system.
Connectors are all working fine, but we are unable to think of a reason. Can somebody help us on this?

Hi Vani,
If you are provisioning the user group using user defaults, check that production system is selected in the user defaults configured. Configuration -> user defaults. You can define any user default system, but for perticuticular user defaults that is applicable define all the systems, in which you want user defaults to be provisioned.
Kind Regards,
Srinivasan

Create User Groups and assign Access privileges in Reports

Hi All,
Could you share the document or explain which explains about the Standard method to create User Groups in CMC for BOBJ XI 3.1 architecture.
And how to assign privileges to user groups like view reports, folders, privileges to create/edit reports etc.
Environment:
- Backend - BW
- and BO XI 3.1 sp3
Thanks,
AK

BO XI 3.1 Administration guide
http://help.sap.com/businessobject/product_guides/boexir31SP3/en/xi31_sp3_bip_admin_en.pdf

What is the Advantage of creation of user group through SUGR?

Hello Masters,
As per audit requirement I have maintained user groups for different sets of users through SUGR, but I am not getting except differenciating users (based on group), is there any other advantage? Can we assign role to a user group instead of assigning to list of users or can we do any mass changes to an user group by giving only user group name.
Regards,
Nilutpal.

Dear Neels,
Apart from maintaining user group for Differnciation purpose you can also take the advantage on the following sectors:
1. Follow the http://help.sap.com/saphelp_nw04/helpdata/en/ce/17533e5ff4d064e10000000a114084/content.htm link . From this you will come to know the use of user group in the authorisation area.
2. User Groups also allow segregation of user maintenance, this is especially useful in a large organisation as you can control who your user admin team can maintain - an example would be giving a team leader the authority to change passwords for users in their team.
3. The authorization user group is used in conjunction with S_USER_GROUP authorization object. It allows to create security management authorization by user group. e.g. you can have a local security administrator only able to manage users in his groups, Help-Desk to reset password for all users except users in group SUPER, etc...
In case any issue, please feel free to reply.
Regards,
Nilutpal.

Move a query to from one user group to another user group

Hi,
it's possible to move a query (SQ01) from one user group to another user group ??
Thank you.

Hi,
You can copy queries only if you have the authorization to make changes. Within your current user group, you can copy all queries. However, queries of other user groups can only be copied if the InfoSet used to define the query is assigned to both user groups.
To copy a query, proceed as follows:
1. Choose the name of the query you want to copy on the initial screen.
If you do not know the name, use the directory functions to display the query directories and then choose a query to copy from there.
2. Choose Copy.
3. Enter the name and the user group of the query that you want to copy in the dialog box. Furthermore, you must enter a name for the copied query. The system proposes values for this.
4. Choose Continue.
This takes you to the initial screen. The query is added and appears in the query directory. You can now continue.
Regards,
Amit

Restricting Queries in HR: Compensation Management User Group

I am trying to restrict the Infoset /SAPQUERY/HR_XX_CM_03, which contains salary/compensation queries, assigned to User Group /SAPQUERY/H0, from being accessed by anyone. In SQ03, user group /SAPQUERY/H0, there are no users assigned but users with access to SQ01 can select the user group /SAPQUERY/H0 and access the queries tied to infoset /SAPQUERY/HR_XX_CM_03. Why are users able to access the infosets of the user group when no users are assigned to the user group?

Turns out that security authorization for access to SQ01 had an S_QUERY value of 02 which allows for full change. With this value the user group/user assignments done via sq03 did not work. Setting S_QUERY to 23 allows for user group assignment to restrict access in sq01

List of users with user group

Hi,
I wonder why in all existing users lists I know I don't see the user group they are assigned to.
I have no problem to get the users by user group (su10) but what I need is a list of all users (name,adress,...) + user group they are created in.
I have tried RSUSR002 without success.
By the way, what's the difference between "Group for Authorization" and "User Group (General)". My user groups appear in both.
Thanks in advance to help a security officer rookie.
Regards,
Julien

Hi julien,
Please have a look at BAPI_USER_GET_DETAIL. Its a function module so execute it using se37.
i.e., SE37->BAPI_USER_GET_DETAIL->EXECUTE.
Type the userId in the Username field (In Import Parameters), than execute. Expand LogonData (In export parameters), this would display the usergroup as well.
Please award points if it is useful.
Thanks & Regards,
Santosh

OIM 9.1.0.2 - User group permission conflict issue

Hi Gurus,
IHAC who have faced a strange behavior about permission conflict.
User has been assigned to a user group (ANALISTA DRSI) who have permission to disable resource of the users he administrates. The user group has been assigned to resource's administrator.
The same use has been assigned to other user group (ANALISTA ADM DRSI) who have other permission. The user group has been not assigned to resource's administrator.
If the user has been only assigned to ANALISTA DRSI user group the user is able to see records on Rogue Account report. If the customer has been assigned to both ANALISTA DRSI and ANALISTA ADM the user is not able to see the record on Rogue Account report. He got a display error message (You do not have permission). Both user groups have the Report menu item assigned.
My question: if the customer is assigned to a user group who have permission to see the reports, should not the user is able to see the report even though he is also into the other group who do not have permission?
Is there conflit in the OIM???
Any tip will be very appreciated.

Orgnaization > Manage > Select Org in which users are getting created > Administrative Group (Drop Down) > Select Group for which users are not coming.

User Groups for Queries

All,
I have a user that gets a message stating that they are not assigned to any user group when using t-code SQ00.
I have checked and the profile they are assigned to has rights to run SQ00 and I have also checked SQ03 and I do have her assigned to query groups.
Am I missing something? I've been administering users for years and have never had one with a problem like this. All the usual areas are fine.
Thanks for you help!

i have to apologize - i didn't read your post carefully - my mistake.
does this also happen when parameter AQB in SU3 is set to a default user-group?
have you checked whether infosets are assigned to that particular user-group?
Edited by: Mylene Euridice Dorias on Feb 13, 2008 5:18 PM
i'm editing this: i have just been testing. is the infoset assigned to that usergroup properly generated?

Assign Authorization in User Groups

Similar Messages

Maybe you are looking for