Auth objects required for creating super,power,end user roles

Hi ,
I need to create 3 roles according to the below requirement. can you tell me what auth objects req inorder to fulfill customer requirement.
1.     Super User:
     Have the access to Create/Modify/Delete own queries
     Can create Variables, CKF, Structures, Formulas & RKF at the cube level (global)
2.     Power User :
     Have the access to Create/Modify/Delete own queries
     Can create Structures, Formulas at the query level
3.     End User
     Have the access to run and navigate reports at the local level
Hope I will get reply soon
Thanks

Karunakar -
Few things you have to keep in mind when you are giving access to the reports and queries.
S_RS_COMP only will not do.
have you assigned S_RS_COMP1 and S_RS_MPRO for info areas and multi/info providers.
and one more auth object S_RS_ICUBE for info cubes. you have to assign what ever the info cubes that you need to give access to the users.
Then only user will get full access.
precisely in order you can say,
S_RS_COMP
S_RS_COMP1
S_RS_ICUBE
and S_RS_MPRO.
These are main auth objects which are related to info cube, info area access and BEx access.
Hope this would give you clear pic.

Similar Messages

Roles for Power & End User

Hi Guys,
I have two roles like Power User & End User, i would like to know what i need
to add in the "Menu" tab of the PFCG for each user.
Thanks a lot.

Karunakar -
Few things you have to keep in mind when you are giving access to the reports and queries.
S_RS_COMP only will not do.
have you assigned S_RS_COMP1 and S_RS_MPRO for info areas and multi/info providers.
and one more auth object S_RS_ICUBE for info cubes. you have to assign what ever the info cubes that you need to give access to the users.
Then only user will get full access.
precisely in order you can say,
S_RS_COMP
S_RS_COMP1
S_RS_ICUBE
and S_RS_MPRO.
These are main auth objects which are related to info cube, info area access and BEx access.
Hope this would give you clear pic.

Objects required for transport operations

Hello,
I am preparing to upgrade and migrate databases from 10g on AIX to 12c on OEL6. I found a great doc that details the use of Transportable Tablespaces for metadata movement and RMAN for the migration of the datafiles from big endian to little endian. The doc is 371556.1. The only thing that is unclear to me in that doc is bullet 2 in the Goal section. It states:
2.- Import objects required for transport operations from the source database into the destination database.
I'm not quite sure to which objects this is referring. It sounds like there are objects that are dependencies for transport operations, but again, not sure what those objects might be or what the operations are (e.g. using exp or data pump in tablespace mode?)
Or perhaps it's referring to objects that aren't typically transportable/exported in tablespace mode, such as synonyms?
With the exception of that one bullet point, the doc makes perfect sense. If anyone has any clarification on this, it would be greatly appreciated.
Thanks!
Jon

It looks like the link in my original post isn't working. The document is on MOS and is titled "How to Migrate to different Endian Platform Using Transportable Tablespaces With RMAN (Doc ID 371556.1)"

Authorization required for creating new Organizational units

Hi all,
How can we give authorization required for creating new Organizational units (IMG CRM Master Data Organizational Management Organizational Model Create Organizational Model) to a particular user?
Thanks and Regards,
Archana

the basis guy should be able to help.
at a higher level: you need to set authorizations to the roles assigned, the transaction code is pfcg.
you may create a new role with the required authorization and assign to the relevant users.
hope it helps..
regards
RH

Authorization required for creating new Organizational units in CRM

Hi all,
How can we give authorization required for creating new Organizational units (IMG CRM Master Data Organizational Management Organizational Model Create Organizational Model) to a particular user?
Thanks and Regards,
Archana

Hi archana,
U can Create a role through Transaction PFCG.
Just create a role and assign the tcode PPOCA_CRM if u want to give the user just only this authorization otherwise u can select the menu list from sap menu and assign this role to that user.
Another way is if that user already exist in that system then just assign that particular transaction codr with that user.
Hope it will help u
Regards
Subhash

Tables for maintenance of end users in end user roles

hi all
i have a requirement to find out the tables involved in end user role maintenance based on the business process and step for the transaction solar02.
thanks & regards
srinivasulu.j

Hi,
As i already told you all the user names are coming from user master record which are stored in table
USR01.
Go to se11 enter table name USR01,and view its contents.
Here you can get the list of all the user's present in solman server.
normally basis team create users using pfcg or su01.
Please reward points.

Using SPML to create a custom end user interface?

We are trying to create a custom end user interface which uses SPML to communicate with our IDM server. The issue we have is whether there is a way to login to IDM from this end user interface as the end user, or at least run the end user functionality such as password changes and authentication question setup as the end user without giving all end users SPML capabilities. Right now we have created a special SPML user account and we have given that user broad capabilities. We are able to change passwords and set questions but the auditing just shows the SPML user as the subject for all these actions.
Thanks,

It looks like you are absolutely right.
I also cannot find that zlman option.
So it looks like you are the first that needs it.
We use zlman to create bundles and add packages when we build them in our rpm build environment, but at that time that are always new packages that need top be uploaded. So the bundle-add-package is what we use, but that doesn't help with packages in the repository.
So I would write a enhancement request for it ...
http://www.novell.com/rms
As a workaround, not a nice one of course, you can search for the package in the repository and upload it once again. It should recognize that and create just the package links to the bundle. Not nice, but it seems to be the only option for now.
Rainer

Assigning the End User Role for E learning management in Solution Manager

Hello Team,
In the E Learning Management in Solution Manager, I have to a assign the End User Role for each Bussiness Process. While assigning the role, I couldn't able to assign the role of type " JOB ". What have I do to get the type as JOB instead of "Organizational Unit" and "User"?
Regards,
Shyjith.K

Hi,
Have you maintained your Organizational data? Did you assign any job to any user in the organizational hierarchy. You need to maintain you PPOMA_CRM first in order to assign any roles there.
Hope this helps
Rajeev

MM End user roles Segregating - Suggestions

Dear SAP Experts,
In our company, Purchase Dept 10 persons are using SAP MM Screen. We would like to minimize the work as well as for logging in SAP Screen usage.
Kindly tell your all suggest that, Work profile allocating on daily basis, so that we can control manpower, work allocating and SAP Screen logging.
Kindly send your all suggestion for end user roles - How to do and Who should do and When can do.
Awaiting your valuable suggestions.
Thanks & regards,
Ramana

Vendor Master - Display
Material Master - Display
Condition Master - Display
Inforecord - Display
Maintain Source List
Display Source List
Purchase Req - Create
Purchase Req - Change
Purchase Req - Display
Purchase Req - Release
Purchase Order - Create
Purchase Order - Change
Purchase Order - Display
Purchase Order - Release
Stores Dept Transactions
Goods Receipt for PO/Return Delivery to Vendor
Transfer Posting
Goods Issue
Inventory Stock Reports
Display material document
Capture of Excise Invoice
Create/Change/Display Depot Excise Invoice
Create Sub-contracting challan
Change Sub-contracting challan
Display Sub-contracting challan
Reconcile Sub-Conrating challan
Complete/Reversals/Recredit of S/C Challan
Depot Stock With Balances
Annexure IV Report
Excise Dept Transactions
Excise Master Maintainance
Update RG1 Register
Extract & Print Excise Registers
Create Tax Code
Sales Tax register
Reversal of Excise duty for rejected items
Change/Posting of Excise Invoice
Monthly Utilization
Excise JV'S
List of Excise Invoices
Invoice Verificaiton
Enter Invoice
Park Invoice
Invoice Verification in Back Ground
Display invoice Document
Cancel Invoice Document
Release Block invoices
Display list of invoices
Invoice Overview
Output Messages
Evaluated Receipt Settlement
Automatic Delivery cost settlement
Invoicing plan Settlement
GR/IR account Maintaince
Display/Cancel Account Maintaince Transaction
Change Material document
Enter Goods Issue
Enter Transfer posting
Enter other goods receipt
Create Reservation
Change Reservation
Display Reservation
List Display Reservations
Reservation list inventory management
Goods receipt for order
Plant Stock Availability
Stock on posting date
Shelf life list
Output from goods movement
Stocks at sub contractor
Enter return delivery
Cancel material document
Material analysis-stock selection
Material analysis-receipts/issues-selection
key figure:Slow moving terms
Key figure:stock value
Key figure-Dead stock
Stock requirements list
Changes to source list
Reorganize source list
Source list for material
Changes to purchasing info record
Quotation price history
Info records per vendor
Info records per material
Purchase order price history
Release(Approve) purchasing documents
Purchasing documents for material group
Purchasing documents per project
Purchasing documents per account assignment
Purchasing documents per vendor
Purchasing documents for material
Purchasing documents per document no.
SC stock monitoring for vendor
Purchasing documents per supplying plant
Create Contract
Change Contract
Display Contract
Purchasing documents for material group
Purchasing documents per vendor
Purchasing documents for material
Create RFQ
Change RFQ
Display RFQ
Maintain Quotation
Display Quotation
Price comparison list
Purchasing documents per requirement tracking no.
Purchasing documents for material group
Purchasing documents per vendor
Purchasing documents for material
Purchasing documents per document no.
RFQs per collective no.
Release:Purchase requisition
Collective release of purchase requisitions
Assign source of supply to requisitions
Assign and process purchase requisitions
Ordering:Assigned purchase requisitions
Automatic creation of purchase orders from requisitions
List display of purchase requisitions
List display of purchase requisitions
Maintain vendor evaluation
Calculate scores for semi automatic & automatic sub criteria
Evaluation Comparison
Ranking list of vendors
General evaluations
Analysis of purchase order values
Message output
Message output
Create physical inventory document
Change physical inventory document
Display physical inventory document
Enter inventory count
Change inventory count
Display inventory count
Post inventory difference
Post count and difference
Enter recount
List of inventory differences
Print physical inventory document
Physical inventory list
Selected data for physical inventory documents w/o special stock
Display vendor
Service entry sheet
Display changes
Extend material view(s)
Materials list
Close period for material master records
Price change
Debit/credit material
Revaluation with logistics invoice verification
Display inspection lot
Display usage decision
Inspection lot selection
Create quality cert receipt
Change quality certificate
Display quality certificate
Record results
Change results
Display results
Result printout
Display QM Info Record
QM Info Record Collective Processing
Create notification
Change notification
Display notification
Display inspection plan
Task list changes
Display master inspection characteristic version
Display material specification
Maintain Service Master
Display Line Items (Vendor)
Display Balances (Vendor)
Due Date Analysis for Open Items
List of Vendor Line Items
Print Subcontracting Challan
Country India Localization Menu
Down Payment Request - Header Data.
List of Vendors Purchasing.
Information System
Create Vendor (Centrally)
Change Vendor (Centrally).
Display Vendor (Centrally)
Vendor Account Changes.
Block / Unblock Vendor.
Flag for Deletion Vendor.
Change Account Group.
Create Vendor.
Change Vendor
Vendor Account Changes.
Block / Unblock Vendor.
Flag for Deletion Vendor.
Planned Vendor.
Planned Vendor A/C. Changes.
Display in future Vendor.
Create Info Record
Change Info Record.
Changes to Purchasing Info Record.
Flag Info Record for Deletion.
Change Document.
Invco. Stck/reqt. Analysis - Selection.
Purchase Register.
Converting SAP Script (OTF) or ABAP List Spool job to PDF.
Display Document.
Pick list
Message Output.
Release Purchase Requisition
Stck/Reqt Analysis Selection
Release Purchase Order
Release purchase order

End User Roles Tab: Link to security roles on ECC?

Hi-
There is a configurable value in the End User Roles tab where you can populate Roles. However when you select the values they only pull in roles loaded on the SolMan system. How can I access roles in target systems, so they can be mapped to my process hierarchy?

Hi
what do u mean by target systems... satellites systems.......i think you are confused somehow
this tab is used for learning map user roles
check this out and read it completely
http://help.sap.com/saphelp_sm32/helpdata/en/ee/4344ed87a24d8da937c565bf572408/frameset.htm
Learning map use
You want to send the learning map to a group of users with the same business role, e.g. to all accountants in your company, or to the purchasing department. You copy existing business roles in the Solution Manager, or create new ones.
Hpoe it clarifies ur doubt
regards
prakhar

End user roles

Hello!
Has anyone configured the e-learning functionlity in SM40. How do we configure the end user role type ? or how to distribute from a central HR system as mentioned in help.sap? Appreciate any input.
Thanks.

Hello Mike,
To create and assign roles, please refer to the following documentation
http://help.sap.
com/saphelp_sm40/helpdata/en/9f/7898408f3db753e10000000a114b1d/frameset.
htm
Just to answer your question, after you have assigned the End User Roles
to the user, the learning map is sent to the E-Mail address in the
address data (txn SU3).
FYI, e-Learning Management with the SAP Solution Manager
https://websmp103.sap-ag.de/~sapidb/011000358700000325712005E.sim
Hope the above information helps.
Dolores

End User Roles Tab

Hi all-
I am beginning to implement the functionality behind the End User Roles Tab in SOLAR02 (i.e. creating training materials and learning maps). Does anyone have any good documentation on this functionality?
Thanks

Hi,
you can find usefull information in the link
http://help.sap.com/saphelp_nw04/helpdata/en/ae/64c33af662c514e10000000a114084/frameset.htm
please check the path:
SAP Solution Manager -> Projects -> Creating Training Material and Learning Maps -> Create/Copy End User Roles,
Best regards,
Abdelhak

Regarding end user role

Hi all:
Is there a standard role called end user role which can not be found in our system ? if yes, can you please tell me what actions should be assigned to the role?
thank you very much
Edited by: jingying Sony on May 11, 2010 4:01 AM

Hi,
You can assign Standard User (eu_role) or Every User Core (eu_core_role).
Check the documentation here.
http://help.sap.com/saphelp_nw70/helpdata/EN/47/f0f7415e639c39e10000000a155106/content.htm
Regards,
Sandeep Tudumu

BPEM End User role does not appear

Hi masters
What should I do to make the BPEM End User role appears on the portal Identity Management ?

Hi Ganga,
Firstly, check the BPM usage type is loaded in your SAP NetWeaver 7.3 system at http://<host>:<port>/utl/UsageTypesInfo
If the BPM usage type is loaded, check the BPM configuration wizards have been run in the SAP NetWeaver Administrator - http://<host>:<port>/nwa > Configuration > Scenarios > Configuration Wizard
Finally check the role exists via the SAP NetWeaver Administrator - http://<host>:<port>/nwa > Configuration > Security > Identity Management
If you aren't seeing all the options in SAP NetWeaver Administrator then you need to find someone with more authority and get them to grant you the SAP_BPM_SuperAdmin or SAP_BPM_SuperDisplay role.
If that's all ok you can then go back and check the role is visible in the Portal.
Regards,
Jocelyn

DPM 2012 still requires put end users into local admin groups for the purpose of end user data recovery?

On client computers that are protected by DPM 2010 and prior versions, you had to put the end users account in the local administrators group. If you did not add the end user account to the local administrators group you would get this error after opening
the recovery tab in the DPM client: “DPM found no recovery points which you are authorized to restore on the specified DPM server. You can restore only those recovery points for which you were an administrator at the time the
backup was taken. To restore other recovery points, contact your DPM administrator, or attempt to restore from another DPM.” This is not ideal on many networks because the end users are not allowed to have local administrator access.
Ths fix to this was included in hotfix 2465832 found here: http://support.microsoft.com/kb/2465832.
This hotfix (a hotfix rollup package for DPM 2010) resolves other issues with DPM 2010 as well. You can find the full list of what this hotfix corrects on that link.
One would think this issue should have been resolved in DPM 2012, however I am encountering the same exact issue, had to include end-users into the workstation local admin group before they can search for recovery points on the DPM server. This is not acceptable
practice.
Is there a new hotfix for the same issue on DPM 2012? I am hesitated to apply KB2465832 since it also includes many other fixes for DPM 2010, which may not appicable for version 2012.
Please help.
Thanks,

This is a hands off solution to allow all users that use a machine to be able to restore their own files.
1) Make these two cmd files and save them in c:\temp
2) Using windows scheduler – schedule addperms.cmd to run daily – any new users that log onto the machine will automatically be able to restore their own files.
<addperms.cmd>
Cmd.exe /v /c c:\temp\addreg.cmd
<addreg.cmd>
set users=
echo Windows Registry Editor Version 5.00>c:\temp\perms.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Data Protection Manager\Agent\ClientProtection]>>c:\temp\perms.reg
FOR /F "Tokens=*" %%n IN ('dir c:\users\*. /b') do set users=!users!%Userdomain%\\%%n,
echo "ClientOwners"=^"%users%%Userdomain%\\bogususer^">>c:\temp\perms.reg
REG IMPORT c:\temp\perms.reg
Del c:\temp\perms.reg
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT] This
posting is provided "AS IS" with no warranties, and confers no rights.
That's a good one! Thanks for that.
I've been scripting on KIX for some time, so here is mine, hope it helps to someone... (it's probably not the best, but it works)
========================================================================
$RC=setoption("WOW64AlternateRegView","on")
$DPMkey = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Data Protection Manager\Agent\ClientProtection"
$uservariable = "%userdomain%\%username%"
If KeyExist ($DPMkey)
$Userstring=ReadValue($DPMkey, "ClientOwners")
If $Userstring == ""
WriteValue($DPMkey,"ClientOwners", $uservariable, "REG_MULTI_SZ")
? "Key created"
else
If not instr($Userstring,$uservariable)
$Userstring = "$Userstring,$uservariable"
WriteValue($DPMkey,"ClientOwners", $Userstring, "REG_MULTI_SZ")
EndIf
Endif
EndIf
==========================================================================
The problem actually is that you still need to use an admin account to write on the registry, so ensure you configure it properly on the schedule task.
In case you use a service account on the schedule task... the "$uservariable" will get populated with that account. As a work around to this... I changed it for the following line:
=========================================================
$uservariable = ReadValue("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI", "LastLoggedOnSAMUser")
=========================================================
The only problem with that, is that key gets created/updated only if user gets logged phisically on that PC, but will not work for anyone connecting through RDP.

Auth objects required for creating super,power,end user roles

Similar Messages

Maybe you are looking for