Assign SQ03 Abap Query User Group to role

Please advise how to assign SQ03 Abap Query User Group to a role. Thanks.
Moderator message: please do more research before asking.
[Rules of engagement|http://wiki.sdn.sap.com/wiki/display/HOME/RulesofEngagement]
[Asking Good Questions in the Forums to get Good Answers|/people/rob.burbank/blog/2010/05/12/asking-good-questions-in-the-forums-to-get-good-answers]
Edited by: Thomas Zloch on May 12, 2011 5:40 PM

Hello Sunil,
The problem is that I have hundreds of users to maintain user groups.
found out that it is possible to assign user group to role and role to user groups. implementing hr authorization with in-direct assignment of auth. So if I could use sq10, user groups could also be link to position in the org chart.
sq10 does allow you to assign a user group to a role but when you assign the role to a user and the user runs a query, it reports that no user group has been assigned.
Suspect that there must be a parameter or switch that is not turned on
Regards

Similar Messages

User= Group= SubGroup= Role: Now working when this link is used

Hai,
We are using EP 5.0 with LDAP 7.6 When a user id created it is attached to a group and the group is attached to a role. I introduced a nested group in this link as userid is attached to group, group is attached to sub group and subgroup is attached to role. When i did like this and login to the portal system the roles are not seen in the portal.
Below are the things which i did,
When a user id(Ex : MYTEST1) is created it is attached to a group(Ex : ESS_GE) by the below code.
       String group = "ESS_GE";
       String groupdn = "cn=" + group.toUpperCase() + "," + groupsRoot;
       String userdn = "cn=" + userid.toUpperCase() + "," + peopleRoot;
      // modifications for group and user
      LDAPModification[] modGroup = new LDAPModification[2];
      LDAPModification[] modUser = new LDAPModification[2];
   // Add modifications to modUser
   LDAPAttribute membership = new LDAPAttribute("groupMembership", groupdn);
   modUser[0] = new LDAPModification( LDAPModification.ADD, membership);
   LDAPAttribute security = new LDAPAttribute("securityEquals", groupdn);
   modUser[1] = new LDAPModification( LDAPModification.ADD, security);
    // Add modifications to modGroup
    LDAPAttribute member = new LDAPAttribute("uniqueMember", userdn);
    modGroup[0] = new LDAPModification( LDAPModification.ADD, member);
    LDAPAttribute equivalent = new LDAPAttribute("equivalentToMe", userdn);
    modGroup[1] = new LDAPModification( LDAPModification.ADD, equivalent);
   // Modify the user's attributes
   lc.modify( userdn, modUser);
   // Modify the user's group attributes
    lc.modify( groupdn, modGroup);
Group is attached to a role(EP_GE_USER_ROLE). So the link is User =>Group=>Role which is MYTEST1=>ESS_GE=>EP_GE_USER_ROLE. This linke is working perfectly
I introduced a nested group and changed the link as User=>Group=>Sub_Group=>Role which is MYTEST1=>ESS_GE=>ESS_GE_ONLINE=>EP_GE_USER_ROLE.
After this when I login with the user id MYTEST1 the Roles which are attached to ESS_GE_ONLINE is not shown. Any idea why the roles which are attached to group ESS_GE_ONLINE is not transferred to ESS_GE group. Should I have to add any other LDAP attributes apart from the one which are coded below.
String group1 = "ESS_GE";
String group2 = "ESS_GE_ONLINE";
String groupdn1 = "cn=" + group1.toUpperCase() + "," + groupsRoot;
String groupdn2 = "cn=" + group2.toUpperCase() + "," + groupsRoot;
//Add ESS_GE_ONLINE group to ESS_GE group
LDAPAttribute membership1 = new LDAPAttribute("uniqueMember", groupdn2);
modGroup1[0] = new LDAPModification( LDAPModification.ADD, membership1);
LDAPAttribute security1 = new LDAPAttribute("equivalentToMe", groupdn2);
modGroup1[1] = new LDAPModification( LDAPModification.ADD, security1);
//Add ESS_GE group to ESS_GE_ONLINE group
LDAPAttribute membership2 = new LDAPAttribute("uniqueMember", groupdn1);
modGroup2[0] = new LDAPModification( LDAPModification.ADD, membership2);
LDAPAttribute security2 = new LDAPAttribute("equivalentToMe", groupdn1);
modGroup2[1] = new LDAPModification( LDAPModification.ADD, security2);
lc.modify( groupdn1, modGroup1);
lc.modify( groupdn2, modGroup2);
Thanks & Regards,
H.K.Hayath Basha.

change that to the following and retest:
Joshua Fowler wrote:
I think you're correct. Under the Publish settings of the document, that's what "Class" points to.
Here's the first main section of the code:
package com.anselmbradford
import flash.display.MovieClip;
import flash.events.TimerEvent;
import flash.utils.Timer;
public class Main extends MovieClip
* Create a new CountDown object, listen for updates and pass it the date to countdown to.
public function Main()
var cd:CountDown = new CountDown();
cd.addEventListener( CountDownEvent.UPDATE , _updateDisplay );
cd.init( new Date(2015,3,9,20,00) );
* Update the display.
private function _updateDisplay( evt:CountDownEvent ) : void
Does this look correct?
Thanks again!

Querying user groups while using @RunAs on a bean

Hi,
I am trying to implement a scenario in which I have three entities:
- bean A - datastore for all users
- bean B - implementing logic, filtering results from datastore for specific user based on groups he is in
- User - calling bean B
Calling chaing is User -> bean B -> bean A.
bean B has to query user groups and filter data based on that. I've implemented that using:
Subject subject = Security.getCurrentSubject();
for (Principal principal : subject.getPrincipals()) {
if (principal instanceof WLSGroup) {
Without any security specified (like @RolesAllowed) it works like charm.
But I want to add security constraints to the beans:
@RolesAllowed("admin")
class A {}
@RolesAllowed("user")
class B {}
The problem is that B cannot acces A methods because it is calling A using 'user' security context.
I've thought I change it to:
@RunAs("application")
@RolesAllowed("user")
class B {}
"Application" is an account in group admin.
Now B can call A. The problem is that security context is switched to "application" on entering B's methods. Inside them I cannot query user groups using method presented above, because I get "application" groups.
Is there a way to change security context on calling other bean methods? Like using Security.runAs( somehowGetApplicationSubject(), runnable) ??
Other method I've thought of, but I have no idea how to implement that, is somehow querying weblogic to get groups of SessionContext.getCallerPrincipal(), which returns user account regardless of using RunAs.
Hope someone made through this problem before,
Krzysiek

getBounds() will only generally make sense while the component itself is being rendered. I wouldn't be completely surprised if the framework which gets that component also resets its size once it's done painting the thing.
If you're calling it from outside the rendering loop, perhaps you could try calling validate() on the component, which should force it to determine its size.
Failing that, you could possible use getPreferredSize() instead, which will likely obtain a similar result in most cases.

ABAP Query : user is not assigned to user group

Hello All,
i have created user group using sq03 and assigned user name for change authorization in 'assign users and infosets'.
But when user tries to run query using sq01 system is giving message 'User XXX is not assigned to any user group'.
I tried every thing but facing same problem.
Could anyone please help me out .
Thanks

I actually assigned the user group to a role in SQ10. The user is assigned to the role. I also created a new post under Security which has more detail:
http://scn.sap.com/thread/3198604

Regarding ABAP Query authorization group

Hi Team,
This is regarding ABAP Query!
I have created one authorization group, for testing i have assigned my id in authorization group.
After creation of ABAP query,standard program got generated. Now i have created one transaction code at the last for the ABAP Query.
Now the isse is even though i have deleted my id from the authorization group. I am able to execute the query from SQ01 and with the Transaction code .
It should not happen...i want who soever id is mapped to the transaction code ...that member should only be able to run that query, otherwise there is no use of authorization group.
Please help me out in this case.
Thanks & Regards,
Anil Kumar Sahni

Are you sure that you don't have access to that authorisation group? Execute report RSUSR002. In the 'Authorization Object 1' block inform S_TABU_DIS in 'Auth.Object' and accept. Then inform Activity=03 and Auth.Gruop= your group.
You will get a list of all the users which, theoretically, will be able to execute the query. If you press 'Roles' or 'Profiles' in the toolbar of the listing you will get to know why you have authorisation. May be you have the SAP_ALL profile.
Also, one more thing to take into account: how have you created your transaction? Is it referring directly to the generated report? Then it is an error, you should execute program SAP_QUERY_CALL. Read this post: [Relate transaction to query;

SAP Query, user groups, revoking 'change' rights

Hi,
I have a problem regarding SAP Queries and revoking the change rights. This is what I have done:
1. Created the new user group in SQ03
2. Created the new InfoSet (SQ02), assigned it to the above UG (SQ03)
3. Created the new user, assigned it to the UG in SQ03 and removed the Change checkbox (revoke change rights)
4. Logged on as the new user
5. Started SQ01, switched user group to the new one
6. Created the new SAP query based on the new InfoSet, run the query
As I understand the principles of user groups and queries, I wasn't supposed to be allowed to do the step 6 as the new user, as it was revoked the change rights. Why wasn't I stopped?
I searched for reply in previous posts - everybody agrees on principles, but I didn't find explanation on why it doesn't work.
Thanks in advance!
KR,
Igor

The table AQGDBBN seems to display a mapping of User Group with use rindeed but the results are less than the actual assignment. And the mapping does not have the Z query usergroups that have users assigned in SQ03.
Anything that I may be missing?
Thanks,
Kashif

Is there User Group and Role Reporting in SAP Enterprise Portal?

I want to know if there is a way to pull users statistics our of SAP Enterprise Portal like you can out of the R3 backend systems.
I would like functionality similar to the SUIM transaction. I know through user administration you can access any user, even a list of all users, and you can do similar lists with roles and groups. You can then access any of these things individually and look at their assignments. However, I want to do this on a large scale. I want to know for example every group that has a user assigned to it. Evergroup that has roles assigned to it. Or groups that have no user or role assignments. We have approximately 1904 groups in our Production Portal system and I am trying to clean up the groups that have no user assignment, but I don't want to look through them one by one.

Hi Chris,
There is no standard report available for this purpose. However all this information is stored in table UME_STRINGS.
You can write your own SQL queries to generate such reports. However please note that this table is not normalized, and it's a master UME table. You should use it strictly for READ ONLY purpose.
For a sample code you which i wrote some time back, you might refer:
http://forums.sdn.sap.com/thread.jspa?threadID=2088099&messageID=10859334#10859334
Thanks
Prashant

How to find T-Code assigned to ABAP Query...

Hi All,
I have ABAP query, Infoset and user grp with me.
Can anybody let me know, how to find the T-code assigned to this ABAp Query.
Regards,
Sanjay

Hi.
In SQ01 tcode .. Check the Program attached to the SAP Query .
Then Goto Tcode SE93 and Open this Program.
There you can find the (Transactions)Tcodes created for this program.
Note: You can also check in TSTC table using the Program name. It a Tcode is already created for ur Query then it will be in TSTC.
REWARD IF HELPFUL,

Assigning Search Queries to User Groups

IN CRM PCUI, the user has the option to save any search query as his private query. Through Trans. CRMC_BL_COPY_QUERIES, this query can be made public (available to all users).
Our requirement is to be able to make the private search query of the user available to only a set of users and not to all users. Can the user groups created through Trans SQ03 be used in some way to meet this requirement?
Is there any relation/ linking between the queries created in PCUI and those in GUI (thru Trans SQ01)? Can the queries created through PCUI be modified thru SQ01? Or alternatively, can the queries created thru SQ01 be seen and used in PCUI?
Any help on this would be greatly appreciated.
Thanks in advance,
Vishal

Hi Vishal,
As far as i know there is no such functionality available so far.
A possible workaround may be to copy these queries to the relevant users , but then it is as good as the users creating and saving these queries for themselves.
Regards,
abhishek.

SQ03 Standard Area user group

Hi All,
How to get all standard area user group from sap tables or RFC?
( For getting global area user group table AQGDBBG is wrking fine).
Regards,
Anuj Jain

solved.

ABAP Query - Dump

I have a transport that contains the ABAP Query, user group, query variant and the tcode to run this abap query. The transport has moved to Prod but gives a dump when the tcode is run
Program "AQZZZMM_DATA====QRY_XXX_YYY== " not found.
The infoset query generates a report "AQZZZMM_DATA====QRY_XXX_YYY== ".
What do I need to get this working ?

Hi,
The above solution will work if you assign the transaction in one server, If you want this will not work in quality/production boxes when transported the query..the program name will not be the same in all the servers...
For this. Do the below:
In SE93, Create a Paramter Transaction
-> Transaction = Start_report
-> In default values, give the below details:
     D_SREPOVARI-REPORTTYPE = AQ
     D_SREPOVARI-EXTDREPORT = Name of the Query
     D_SREPOVARI-REPORT = User Group
Save the transaction..Now if the program is generated with different names in the quality/proudction, this will still work..
Regards
Vijay Hebbal

How to create Infoset&user group query--(query report)

Hi Guys,
how to create Infoset&user group query--(query report),
Pls send me the exact procedure with Example....
Regards:
Kumar .G

goto SQ03 and create an User Group If U want to create Ur Own.
Goto SQ02 to create Ur Infoset by Giving Logical database name or Simple Database table
Then Choose What ever data U need to be included in The Qurey in field Groups.
Then Generate the Infoset
Now Assign the infoset to user group
Now goto SQ01 and Click on Other user group Button and choose Ur user Group.
Then in the USer group select Ur Infoset and then create Ur own Query and save this.
Now select the infoset query and goto More functions under Query menu and Generate report name.
Now Create a transaction code for the report name generated.
Now use the Tcode.
Hope U have got the basic idea of creating Queries.
~BiSu

Error : Query does not exist in user group

Hello,
I copied the one existing transaction i.e. Z10SD25 and made the new transaction.
Also i created the new Infoset and Query in an existing User group.
I also assigned the Infoset to user group and query to Infoset.
But while running the new transaction it is giving me error that 'Query does not exist in user group'.
Kindly help me with this.
Thanks in advanced.
Regards,
Darshana

Hi,
After assigning the Infoset to user group and query to Infoset, click on 'Generate' button.
Note: The query can only be generated when the InfoSet is assigned to a user group.
Also check whether the usergroup is given or not for queries.
SQ01 - Select Environment u2013 Select Standard Area - Enter -- If new user group is to be created, enter name of the user group, click on create and enter necessary information and exit after saving

Assign user grop to Role

Hi all,
How can i assign the user group to Role.
Regards
ganesh

Hello Ganesh,
User groups cannot be directly assigned to a role. Only users can be asigned. If I understand correctly then you want to assign a role to a user belonging to a particular group. For this goto SU10 then to Authorization DATA. Give the user group in the filed Group for Authorization ane execute it. You wil get a list of all the users. Select all of them using SELECT ALL option and press the transfer pushbutton. Now you have the list of all users. Press the change button go to roles tab and add the role you want and then save the changes. I hope it solves the issue for you.
Please award points if the answer was useful.
Regards.
Ruchit.

SQ03 - User Groups missing after Upgrade

Hi,
Recently we have upgraded to ECC 6. We have noticed that our SAP Query user groups are missing. We have some reports which we need to access. Any clue?
Thanks in advance
Regards
GB

http://help.sap.com/saphelp_me52/helpdata/EN/47/1e533e5ff4d064e10000000a114084/frameset.htm

Assign SQ03 Abap Query User Group to role

Similar Messages

Maybe you are looking for