Assign transaction to a user

Hi,
I am not much experienced authorizations. I am trying to give authorization to a user for a particular transaction. I guess I have to do that in some PFCG....I am sure this is a simple thing...but can some body refer me to any documentation or just list out the steps?
Thanks.

Here are some excellent resources on how to use transaction PFCG and assign authorizations to users.
Always remember, assign the USER to the ROLE. This is a good habit, rather than assigning ROLES to USERS.
Hope this helps!
http://sap.mis.cmich.edu/46c-help/helpdata/EN/23/07d128f31011d296330000e82de14a/content.htm
http://help.sap.com/saphelp_nw70/helpdata/en/52/6714a9439b11d1896f0000e8322d00/content.htm
http://help.sap.com/saphelp_sm40/helpdata/EN/57/3fc0413f1b6524e10000000a1550b0/content.htm
http://searchsap.techtarget.com/tip/0,289483,sid21_gci912389,00.html

Similar Messages

Assigning transactions to a user

Hi All,
I want to assign 5 transactions to a user where, for 2 transactions the user should have a display option only and for the rest of the transaction he should have the full authorization.
I know the basics of creating user (su01) and roles (pfcg ), which contain auth. objects followed by profile generation. But in this scenario how can I proceed. Need your help.
Regards
Rajesh

Of course it does depend on which transactions these 5 transactions are.
Some tcodes are display only regardless of the access for a specific object checked by the 5 transactions.
However I agree with the others: the transaction code is not that important (other than it's context for pulling in the authorizations required to actually use the 1 of 5 transactions into the role via SU24 or "case sensitive" for a program based on the transaction context (system field sy-tcode)). Many usefull transactions in SAP care about the authorization object' activity type field values and other application object fields, and most will let you switch to change mode from the display transaction if you have change access - regardless of the transaction (S_TCODE) but sometimes checking other TCD related field ID's.
Reporting tcodes are often different though: these have the same core checks but other options and objects.
Both transaction and reporting tcodes often have customizing dependencies as well, so you do not gave to use authorization objects always.
Rather complicated actually... as are the menus of the transactions from a security perspective....
Which 5 transaction codes were you specifically asking about?
Cheers,
Julius

Assigning transactions to user

Hi,
I am new to authorizations. I need to assign a user authorization for transaction Sm37 and RSMO.
I think I just have to add the transaction code somewhere... I don't want to change any roles though. Instead of totally assigning a role, can I just assign the two transactions?
can somebody refer me to documentation or just outline the steps?
Thanks.

The intended way of doing this is to create a role in transaction PFCG, add the transactions to the menu of the role, and then maintain the authorization data brought in by those transactions in the authorizations tab of the role.... and then assign the desired / authorized users to the role.
Whether that involved changing an existing role or adding a new one is debatable.
As you might be able to imagine, this has been asked before here ... best practice, in some of our opinions, is to do it like this => How to get hit by the ABAP authorizations bus, and survive to tell the tale - Part 1
Cheers,
Julius

How to take a report for the assigned transaction and activity in a role

Hi Colleagues,
I want to take a report for the assigned transaction with activity for all roles, which are assigned to the users,
Transaction list for a role i can able to take it from SUIM but not able to take the ACTVT for the role.
Please suggest how to take this information.
BR,
Jai

Hi Jaikumar from the post :
I think you have reached the state of finding the USER to ROLE relationship
Take the output to an excel,
COPY just the roles column exactly in order do not rearrange , use AGR_1251 like other experts have mentioned
insert the roles copied from you buffer and execute, the output will have multiple entries for each role take the output to an EXCEL again , make it unique and match the outputs between both the EXCELS.
It will be a little tricky to do this, but I think you are proficient in MS EXCEL.
This is one of the ways to do , there are many other ways to do it.

Table to find the assigned Roles with my User ID

Hello Experts,
1.Is there any specific table to find out the assigned roles to my User ID?
If there is no table, let me know is there any transaction to find out the assigned roles to my User ID?
2. When I assigned Marketing Pro role to my user id in Organization Unit, I am not able to see in webui screen.
when I click on webui transaction, it is displaying some selection screen, there it is not displaying the role I have assigned?
Could you help me to sort out these two queries?
Thanks and Regards
Madhu

Hi Madhu,
1.Is there any specific table to find out the assigned roles to my User ID?
If there is no table, let me know is there any transaction to find out the assigned roles to my User ID?
Sol'n : You have so many Class Methods for finding your requirement else FM aslo.
Go to SE84 there u will find search ClassMethods. There u type getuserRole or userRole* and press F8. Pick the one which you feel it may give you the result
ie you have to execute the class...if it showing instance on the tool bar click on that then press execute the method which you feel relevant to you, and give input parameters.
Sol'n for 1 point is: CL_CRM_UI_ROLE_ASSIGN->GET_BUSINESSROLES_FOR_USER.
2. When I assigned Marketing Pro role to my user id in Organization Unit, I am not able to see in webui screen.
Sol'n: Go and check in T-code : BP. Dispay Ur BP and check for Employee Meantaied -- Identification Tab..Did u maintained ur Userid over there or not
when I click on webui transaction, it is displaying some selection screen, there it is not displaying the role I have assigned?
Sol'n: Need clarification on this point.
Regards,
Lokesh
Edited by: Lokesh on Mar 8, 2010 7:37 AM

BPM 11.1.1.5 Dynamic assignment of task to user

Hi,
I'm working with BPM 11.1.1.5 (without feature pack). I have a requirement to assign a task to a user dynamically, based on data that I pull from a DB query. If the task expires, I will assign it to another user once again based on a DB query.
I have not been able to find a way to do this. I have tried creating the Participant List "By Expression", where the expression is: /task:task/task:systemAttributes/task:assignees/task:id, where I have previously assigned a LDAP user id to a TaskExecutionData input variable. This does not work!
I've read a number of forum posts where people are trying to do this, but they are either not answered or answered inadequately.
I've read a number of posts where people talk about doing this using bpws:getVariableData() where the dynamic user list is stored in a variable. This would be great, if it worked for BPM as this is exactly what I'd like to do. However, this is a BPEL solution as far as I can see! I haven't been able to find a way to access a declared variable from the Expression Builder form in BPM.
Does anyone have a solution for this, please?
Any help would be greatly appreciated. Is this something that is easier to do in PS5?
Many thanks,
Brian.

Hi Brian,
Not sure if this is what you need, but to assign the BPM work item instance to a participant based on information read from a database table, one approach is to:
1. Read the table and return the userId to a process data object variable upstream of the Interactive activity.
2. Pass the variable with the user id into the Interactive activity's human task.
3. Open the human task, click the Assignment tab -> double click the performer icon in the center -> change the "Build a list of participants using" dropdown to "Names and Expressions" -> click the plus icon -> click "Add a User" -> under "Data Type" change the dropdown selection to "By Expression" -> click the "..." button under "Value" -> expand "task" -> expand "task:payload" -> select the variable that you set the user id to.
I think there is probably more to your question than this, but hopefully it's a start.
Dan

Creation of auto approval process for assigning role for a user in oim11g

currently i'm doing a scenario like a user must be automatically assigned to a role by using approval policy where the user is already there in oim and then we use csv file in that we take 2 columns like userlogin and role name so by running this scheduled task user must be automatically approved to that role.But i have to use the default auto approve policy in oim without creating any bpel process for that so can any one suggest me how to proceed with this scenario.
Thanks in Advance for quick response.

If I understand correctly, You have users and their respective roles in csv file. Users are present in OIM. You want to assign those roles in csv file to respective users?
If this is the scenario, you need to write a custom code for schedule task which will read data from your csv file, create roles and assign them to respective users.
to create custom schedule task in OIM 11g, you may refer to:
http://docs.oracle.com/cd/E21764_01/doc.1111/e14308/scheduler.htm
regards,
GP

Transaction code for user menu, sap easy access

Hi system experts!
Does anybody know which transaction causes the user-specific menu within "SAP easy access" (the welcome screen after login, like /n does) ?
I need it to be called from a portal iView, so that the usual sapgui-like screen with the user's menu appears in a portal screen, both for SAPGUI for windows and http.
Trx. S000 or SESSION_MANAGER does not cause the user-specific menu when called from the portal. These work least of all for call via ITS.
thanks
Andreas

hi ,
The transaction code is SE41.. This is for creating Menus and tool bars.
you can also try SMEN it will call the user menu as you described in your post.
Regards,
Krishna
Message was edited by: Krishnakumar

Coming back to the Transaction from a User Exit

Hi,
I perform some checks in a User-Exit before saving a transaction & throw an error message if something is not proper. But, the transaction terminates after that. I need to give the user an option to make changes in the transaction. eg, if user exit checks if a certain field should not be empty, the user should have an option to enter the field after the user exit throws the message. How can i go back to the same screen from the exit to achieve the same.
Thanks in advance.
Bikash
This was for a general scenario wherein after an error message triggered by an Exit is displayed, the transaction just terminates.
Message was edited by: Bikash Agarwal

Hi,
If you give error message, it will leave the current transaction.
Instead try using some POPUP function module, which will have options 'OK' and 'CANCEL'.
If user presses 'OK', then allow user to do modifications and if he presses 'CANCEL', then write LEAVE PROGRAM to come out of transaction.
Hope it helps.
Regards,
Shashank

Where do I get all SAP WM transaction codes for user acceptance test ?

Hello experts,
Where do I get all SAP WM transaction codes for user acceptance test during cutover activities?
I need the list of transactions.
Thanks in advance

Hi,
You can download through Solution Manager also. If ASAP is installed in your computer, you can download all the standard transactions, otherwise let me know your id, i will send it to you.
Aktar

How to Disply the List of Roles assigned to a selected user ?

Hi all,
I have a specific requirement to develope using Webdynpro. I want to programically display the list of roles assigned to a selected user. Could some one help me . I promise to award points for the solution.
Thank you in advance
Regards
Maruti

Hi Maruti,
Iterator rit = null;
try
IWDClientUser clientUser = WDClientUser.getCurrentUser();
IUser user = clientUser.getSAPUser();
rit = user.getRoles(true);
IRoleFactory rfact = UMFactory.getRoleFactory();
while (rit.hasNext()) {
String roleName = (String) rit.next();
IRole role = rfact.getRole(roleName);
}catch(Exception e)
e.getLocalizedMessage();
check this thread too
/message/1565111#1565111 [original link is broken]
Regards, Suresh KB

Changing Assignment Details for multiple user

Hi everyone,
In the RelationShips tab of a bundle, how can we change the "Assignment Details" for multiple user at once? Per exemple, I have a bundle that have about 100 user assignments. The bundle show on Start Menu but no on the Nal. If we want all of our users to have this bundle on the Nal Windows, how can we instruct that easily and quickly, instead of selecting each user and changing the Assignment Details ?
thank you for your help !
DM

I am also trying to update the shortcut locations on many apps for a mass amount of users. Mr. Pond, or dominicm, can you explain or give a example ZMAN command that would be able to do this? From the documentation I can find it only seems to affect the distribution and scheduling but not the shortcut location.

Need to add Standard transaction code to User Menu.

Hi All,
I need to add Standard transaction code to User Menu. How this can be accomplished?
Thanks

Your Security and/or Basis team probably have control of the user menu settings. On the other hand, if this is for YOUR user menu, you could choose to simply adjust your favorites.

How to assigne transaction Variant to Report

Dear Hcm Gurus:
i have to develop a report by using infoset query and also assigned transaction via se93
Report is alv-based.
so when i access report through t-code "ZHR_STAFF" and save variant /default then this variant not
outcome with desired result when i again access said mentioned t-code so kindly guide me when i access
t-code then default variant is automatically displayed.
barket

Hi:
Please, go to tcode SE93 and modify your transaction code adding your variant name in the field Start with variant (RSSTCD-REPO_VARI).
This way while calling tcode ZHR_STAFF the program will be automatically initialized with the specific recorded value for the specified variant.
Hope it helps,
Regards.

Assign SQ03 Abap Query User Group to role

Please advise how to assign SQ03 Abap Query User Group to a role. Thanks.
Moderator message: please do more research before asking.
[Rules of engagement|http://wiki.sdn.sap.com/wiki/display/HOME/RulesofEngagement]
[Asking Good Questions in the Forums to get Good Answers|/people/rob.burbank/blog/2010/05/12/asking-good-questions-in-the-forums-to-get-good-answers]
Edited by: Thomas Zloch on May 12, 2011 5:40 PM

Hello Sunil,
The problem is that I have hundreds of users to maintain user groups.
found out that it is possible to assign user group to role and role to user groups. implementing hr authorization with in-direct assignment of auth. So if I could use sq10, user groups could also be link to position in the org chart.
sq10 does allow you to assign a user group to a role but when you assign the role to a user and the user runs a query, it reports that no user group has been assigned.
Suspect that there must be a parameter or switch that is not turned on
Regards

Assign transaction to a user

Similar Messages

Maybe you are looking for