BAPI (FM) to maintain User Roles

Hello ABAP Experts,
I´m looking for a BAPI or FM which could create/change the Users Roles, like in TX PFCG.
Backround: We like to change the area menus in users roles in a nightly batch job.
Has anybody an idea? Thank you very much in advance.
Kind regards
Axel

Hi Micky,
thank you for reply.
the function group and function module your mentioned is just to change/create a role assignment in user masterdata (TX SU01) but not to change/create the role (TX PFCG) itself.
Any other ideas?
Best regards
Axel

Similar Messages

Problem assigning internet user Role through portal

Hi All,
Please could someone help me with the following:
I am creating a registration process that creates a new CRM Business partner with contact person and internet user roles. When i run the Bapi from with in CRM everything works fine however when i run my jsp dynpage application and call the same bapi, the internet user that i create does not have any of the logon details or roles. Does anyone know why this is? i am using the same user when running in crm and the portal.
Many thanks in advance
Calvin

Hi Sunil,
Thanks for your reply. answers to your questions:
1. Yes, all portal users are maintained and have the same roles as CUA users. Portal authenticates against CUA.
2. Yes the user is created correctly on the backend. i have created a BAPI that creates users, BP's and assigns roles. This Bapi works perfectly when run in CRM but as soon as it is accessed via the portal the internet user role does not have all the required information.
Many thanks
Calvin

VL10 batch doesn't allow user role maintenance

A batch job to create deliveries is desired.
A user role was created using VL10CUA (copied from 5001).
Access VL10G to create a variant, but the User Role tab is completely display only.
According to OSS note 310022, step 2 indicates that user role can be maintained for background processing.
Currently using ECC 5.0. Why is the user role tab display only? What changes are necessary to create a variant using the new user role?
I also looked at the screen painter and the fields were "Possible" so that doesn't answer why they are display only when using VL10G.
Regards,
Bela

In VL10CUA, create a new user role from 5001 and click on Chg. Attributes and change F code to 5001.
Then assign the user role in VL10CUV to VL10 Scenario.
This will default the user role in VL10. Save the variant and then run VL10BATCH for the variant.

BAPI to get all user lists for input object,authorizations, and profiles

Hi Experts,
BAPI to get all user lists for input specific object, authorizations, profiles and values?
Any useful answer will be rewarded with suitable points.
Thanks,
Rohan

Hi
use the fun module/Bapi's
BAPI_USER_GET_DETAIL
BAPI_USER_LOCPROFILES_ASSIGN
BAPI_USER_LOCPROFILES_DELETE
BAPI_USER_LOCPROFILES_READ
BAPI_USER_PROFILES_ASSIGN
BAPI_USER_PROFILES_DELETE
SUSR_BAPI_USER_PROFILES_ASSIGN
SUSR_BAPI_USER_PROFILES_DELETE
also you can use the tables UST12 for user based authorizations
AGR_USERS -roles assignment for users
AGR_PROF - Profile data for roles
AGR_DEFINE - Auth Profiles for users
See the AGR_* and US* tables further
Reward points if useful
Regards
Anji
Message was edited by:
Anji Reddy Vangala

User Specific catalog UI configuration - Custom catalog user role

Hi all,
We need different user specific layout settings for each user. i have duplicated catalog user role for each user and maintained specific named search for that particular user in constraint. but when we want to configure specific layout for individual user. its not showing that catalog user in the catalog config UI for the layout configuration. please advice. if it shows that specific user then we would configure each specific user layout with individual look and feel ( like shopping lists, search fields, images, etc., ). thanks for your inputs.
Your help would be highly appreciated!!!!!!!!!!!!!

Hi Smartsoft General user,
I guess you are on SRM-MDM Catalog 3.0
We have the same business scenario as yours. Its working perfectly for us.
1. Donot copy Catalog User role. SRM-MDM UI Config only accepts users assigned under std Catalog User role. You dont need mutiple copies of Catalog user role, anyways it wont work.
2. Create multiple webservices for each Named search. Provide one User (like User1, User2...or your own created ones) and one Named Search as following parameters in each webservice.
          http://<your server:port>/SRM-MDM/SRM_MDM
username     User<n>
password     <password>
server     <your server>
repositoryType     M ( for Master ) S (for Slave) - Make sure you are pointing to right repo if you have master/slave
catalog     <provide Repository name- make sure you are giving right repository name, I provided it wrong first time>
port     <your port>
uilanguage     SY-LANGU
datalanguage     SY-LANGU
mask     < keep blank if you want dynamic search>
namedsearch     <Provide exact Named search name as you provided in Data Manager>
HOOK_URL
returntarget     _parent
If you are creating 5 different Named searches, create 5 different webservice definitions as above.
3. Now for each Catalog user, you can perform separate search UI layout as you wish.
Let me know if this helps or have any questions. If this worked for me, we will make it work for you.
~Pravin

Problem in maintain attributes for position in maintain user attributes

Hi All ,
I am facing a problem in Maintain User Attributes
I should get only 5 values for any user in attributes dropdown of attributes for position
But for some users I am getting as 10 values
and for some users I am getting it as 20 values ..
What my doubt is
will it be based on role dependency or anyother one ..
Pls let me know if u have any idea ..
Thanks
Kumar

Hello,
The ability of changing attributes via User settings depends on the role
assigned to the user and whether this role has the appropriate rights to
change the attributes.
In this regard, check the customizing below:
SRM -> SRM Server -> Cross Application Basic Settings -> Roles ->
Maintain Attribute Access Rights by Role.
Here you define which parameter can be changed depending on the role
assigned to user in question.
Regards,
Ricardo

Assigning the End User Role for E learning management in Solution Manager

Hello Team,
In the E Learning Management in Solution Manager, I have to a assign the End User Role for each Bussiness Process. While assigning the role, I couldn't able to assign the role of type " JOB ". What have I do to get the type as JOB instead of "Organizational Unit" and "User"?
Regards,
Shyjith.K

Hi,
Have you maintained your Organizational data? Did you assign any job to any user in the organizational hierarchy. You need to maintain you PPOMA_CRM first in order to assign any roles there.
Hope this helps
Rajeev

No violations at user/role level

Hi All,
We are using GRC 10.1 SP04
While running the risk analysis reports on user/role level, I don't see any violations. Post running the reports, I can only see that "No rules were selected" under Action field.
Recently we added a few more systems/landscapes so created a few more connector groups and added the corresponding connectors. Strage part is that, for a few D-systems I can see the violations as expected but for the respectice Q-clients I don't see any eventhough there are violations.
Please refer to the attached screen shots for clarity.
Kindly help me with the solutions.
Thanks,
Ameet
P.S: Rule-set is successfully generated and MIME repository is maintained with the appropriate extensions.

Hi Ameet,
How were you able to resolve the issue?
Even I am now stuck with similar issue after I replaced the connector because of change of SRM sys IDs. I followed all the necessary steps after setting up the new connector. Steps like rescheduling all of the background jobs for these new connector. I also regenerated Rules and ran SOD analysis program. But still the nos of Risks differs between past and current report.
Thanks,
Kishore

Content delivery in portal based on user roles ?

Portal Server new bee...
Please can anyone point me to guides/url where i can look to enable content delivery in a portal based on user roles and how to establish SSO.
I have installed Portal Server6.0 and iplanet Directory Server Management Edition installed.
I did go through PS Development guide and got some sample containers up and running in the portal.
Thanks.

For the role-based delivery, Comment 1 sends you in the right direction. Here are a couple things to keep in mind as you read through the customization guide.
The basic gist of what you need is to define your organization profiles with all the services defined at the org level. Then you can define simple profiles at the role level. These will probably focus around the selected and available attributes on the table containers.
Then you might want to pay particular attention to the merge, lock, and propogate attributes. These will allow you to define how the role affects the availability of channels (does the role add, remove, or force the channel?). The easiest thing to do is probably to start with a core group of channels, and then have each role define additional channels that are of interest and should be added to the selected/available lists.
Having roles remove channels will make matters a little more confusing and harder to maintain.

Remove a particular User Role (SU01) using an FM

Hi Gurus,
I would like to know if it is possible to remove a user role (SU01) using a function module/BAPI and how? I need to create a program that will remove all expired roles from all users. I've already researched about it and I can't seem to find an FM that will delete particular roles.
Thanks in advance.
Regards,
Dexter

Hello
What about ISAI_USER_ROLES_MAINTAIN ?

Security Issues with the BP Internet user role creation--SU01

Hi All,
We are implementing the B2B Internet sales scenario using CRM 4.0. we
have contact persons who logs in and chose the distributor and then
start placing orders or look at product catalog .... Now contact person
is created as a BP in CRM and relation ship is maintained to sold to
(bp). During this process the contact person should be created under
the Internet user role which uses the SU01. so we will be able to
change password or change the roles of the users while creating BP
under the internet user role -- same as what we do in SU01.
This is now a security Issue because who ever can access the BP
(create/change) will be able to do the things we can do under
transaction SU01. But we still need to access the Internet user role in-order to assign the user id to the contact person . Is there any other
way of doing this.
Please advice ASAP.
Thanks
Vasu

Hi Ashwini,
you need to modify the logon routine and then in the user management (isauseradmin application) to do this. Then there are likely changes to the catalog identification, and very likely to most processes in the shop. I really wouldn't advise doing so. As accounts usually have contact persons: Why does your client insist in providing a login for the organization and not for a person?
To achieve something that looks almost like the desired solution you, e.g., could model a dummy contact person for each account that shall get a logon, that then does the job. The contact person could be named like the company and then you are back to plain standard.
Rgds
Thomas

MM End user roles Segregating - Suggestions

Dear SAP Experts,
In our company, Purchase Dept 10 persons are using SAP MM Screen. We would like to minimize the work as well as for logging in SAP Screen usage.
Kindly tell your all suggest that, Work profile allocating on daily basis, so that we can control manpower, work allocating and SAP Screen logging.
Kindly send your all suggestion for end user roles - How to do and Who should do and When can do.
Awaiting your valuable suggestions.
Thanks & regards,
Ramana

Vendor Master - Display
Material Master - Display
Condition Master - Display
Inforecord - Display
Maintain Source List
Display Source List
Purchase Req - Create
Purchase Req - Change
Purchase Req - Display
Purchase Req - Release
Purchase Order - Create
Purchase Order - Change
Purchase Order - Display
Purchase Order - Release
Stores Dept Transactions
Goods Receipt for PO/Return Delivery to Vendor
Transfer Posting
Goods Issue
Inventory Stock Reports
Display material document
Capture of Excise Invoice
Create/Change/Display Depot Excise Invoice
Create Sub-contracting challan
Change Sub-contracting challan
Display Sub-contracting challan
Reconcile Sub-Conrating challan
Complete/Reversals/Recredit of S/C Challan
Depot Stock With Balances
Annexure IV Report
Excise Dept Transactions
Excise Master Maintainance
Update RG1 Register
Extract & Print Excise Registers
Create Tax Code
Sales Tax register
Reversal of Excise duty for rejected items
Change/Posting of Excise Invoice
Monthly Utilization
Excise JV'S
List of Excise Invoices
Invoice Verificaiton
Enter Invoice
Park Invoice
Invoice Verification in Back Ground
Display invoice Document
Cancel Invoice Document
Release Block invoices
Display list of invoices
Invoice Overview
Output Messages
Evaluated Receipt Settlement
Automatic Delivery cost settlement
Invoicing plan Settlement
GR/IR account Maintaince
Display/Cancel Account Maintaince Transaction
Change Material document
Enter Goods Issue
Enter Transfer posting
Enter other goods receipt
Create Reservation
Change Reservation
Display Reservation
List Display Reservations
Reservation list inventory management
Goods receipt for order
Plant Stock Availability
Stock on posting date
Shelf life list
Output from goods movement
Stocks at sub contractor
Enter return delivery
Cancel material document
Material analysis-stock selection
Material analysis-receipts/issues-selection
key figure:Slow moving terms
Key figure:stock value
Key figure-Dead stock
Stock requirements list
Changes to source list
Reorganize source list
Source list for material
Changes to purchasing info record
Quotation price history
Info records per vendor
Info records per material
Purchase order price history
Release(Approve) purchasing documents
Purchasing documents for material group
Purchasing documents per project
Purchasing documents per account assignment
Purchasing documents per vendor
Purchasing documents for material
Purchasing documents per document no.
SC stock monitoring for vendor
Purchasing documents per supplying plant
Create Contract
Change Contract
Display Contract
Purchasing documents for material group
Purchasing documents per vendor
Purchasing documents for material
Create RFQ
Change RFQ
Display RFQ
Maintain Quotation
Display Quotation
Price comparison list
Purchasing documents per requirement tracking no.
Purchasing documents for material group
Purchasing documents per vendor
Purchasing documents for material
Purchasing documents per document no.
RFQs per collective no.
Release:Purchase requisition
Collective release of purchase requisitions
Assign source of supply to requisitions
Assign and process purchase requisitions
Ordering:Assigned purchase requisitions
Automatic creation of purchase orders from requisitions
List display of purchase requisitions
List display of purchase requisitions
Maintain vendor evaluation
Calculate scores for semi automatic & automatic sub criteria
Evaluation Comparison
Ranking list of vendors
General evaluations
Analysis of purchase order values
Message output
Message output
Create physical inventory document
Change physical inventory document
Display physical inventory document
Enter inventory count
Change inventory count
Display inventory count
Post inventory difference
Post count and difference
Enter recount
List of inventory differences
Print physical inventory document
Physical inventory list
Selected data for physical inventory documents w/o special stock
Display vendor
Service entry sheet
Display changes
Extend material view(s)
Materials list
Close period for material master records
Price change
Debit/credit material
Revaluation with logistics invoice verification
Display inspection lot
Display usage decision
Inspection lot selection
Create quality cert receipt
Change quality certificate
Display quality certificate
Record results
Change results
Display results
Result printout
Display QM Info Record
QM Info Record Collective Processing
Create notification
Change notification
Display notification
Display inspection plan
Task list changes
Display master inspection characteristic version
Display material specification
Maintain Service Master
Display Line Items (Vendor)
Display Balances (Vendor)
Due Date Analysis for Open Items
List of Vendor Line Items
Print Subcontracting Challan
Country India Localization Menu
Down Payment Request - Header Data.
List of Vendors Purchasing.
Information System
Create Vendor (Centrally)
Change Vendor (Centrally).
Display Vendor (Centrally)
Vendor Account Changes.
Block / Unblock Vendor.
Flag for Deletion Vendor.
Change Account Group.
Create Vendor.
Change Vendor
Vendor Account Changes.
Block / Unblock Vendor.
Flag for Deletion Vendor.
Planned Vendor.
Planned Vendor A/C. Changes.
Display in future Vendor.
Create Info Record
Change Info Record.
Changes to Purchasing Info Record.
Flag Info Record for Deletion.
Change Document.
Invco. Stck/reqt. Analysis - Selection.
Purchase Register.
Converting SAP Script (OTF) or ABAP List Spool job to PDF.
Display Document.
Pick list
Message Output.
Release Purchase Requisition
Stck/Reqt Analysis Selection
Release Purchase Order
Release purchase order

VL10D - Data selection User Role

Hi,
i've used the Tcode VL10D and the "User role" tab is greyed.
How can i select the Data selection (ex. flag "with delivery")?
How can i mantain VL10CUA and VL10CUV?
Thank you.
Antonio

Hello Antonio,
Can you check in transaction VL10CU, on the second record "Purchase Orders", the field "Allow Assignment" must be checked in order to have the Role and Scenario editable.
Regarding the Scenario field, please see below which you may find useful:
    You can edit a user-specific delivery scenario with a user-specific
    list profile by choosing Outbound Delivery -> Create -> Collective
    Processing of Documents due for Delivery -> User-Specific Delivery
    Scenario. You can define user-specific values in user parameters
    LE_VL10_SZENARIO and LE_VL10_LISTPROFIL. If no default scenario has
    been specified, the sales order scenario appears. If a default
    scenario has been specified, but no default list profile was
    specified, the system uses the list profile that is assigned to the
    default scenario. If there is no such assignment, the system uses
    the "Deliver Sales Orders" (0001) list profile.
    Transactions VL10A, VL10B, VL10C, VL10D, VL10E, VL10F, VL10G,
    VL10H and VL10I refer directly to the delivery scenarios that are
    predefined by the system. You can also access these transactions via
    the shipping menu. Assignment of a list profile for these scenarios
    is identical for all users and can be set in Customizing. The list
    profile contains detailed information about processing the delivery
    list.
Maintain the user parameters LE_VL10_UPG_NOMSG, LE_VL10_SZENARIO and
LE_VL10_LISTPROFIL with the options described above (System -> User
profile -> Own data; Parameters).
Kind regards
Martin

How to find T.Code in user Role

Dear Experts,
How to check transaction code maintained for user Role.
For Example I have one User X who have Authorization of T. Code J1ID
is it possible to find out T. Code J1ID is maintained in which role, User have No of Roles in his ID I dont want to search it by open each and every Role. is there any short way to search T. Code.
Thanks,
JA

Hi Javeed,
There are many ways to do it.
Go to SUIM>> Roles> Complex Selection Criteria>
Enter the User ID: USERX
In the Objects enter: S_TCODE (Press Enter)
Enter the Tcode as the field value of this object.
Then click on execute, you will get the list of roles assigned to this userX having above mentioned Tcode. Let me know if you need any more information on this.

How to hide custom fields in Shopping cart depening on user role

Hi,
We have some custom fields in shopping cart for basic view. Every thing works fine. Now client is asking to hide all the custom fields based on user role.
I found some function module to fund roles. now my main problem is unable to find the cusotm filed screen field name.
When I tryed to find the screen field name using BBPSC02/03, its giving 'GT_DISPLAY_100-FIELD'. If I try to use this field, its not working.
Could you pls tell me how to find custom screen filed name to hide in shopping cart.
Thanks,
Ram

Hi Ram,
As Laurent suggested,to hide the custom fields based on the user role,you need to implement the logic in BADi "BBP_CUF_BADI_2".
You have the importing parameter IV_USER in this BADI.
Pass this parameter to tables AGR_USERS and AGR_USERT to get the user role
OR
Use FM: BAPI_USER_GET_DETAIL
with USERNAME= user id and can retrieve Table: ACTIVITYGROUPS Field:AGR_NAME
if you want the otherway around
you can also use FM: RSRA_USERS_OF_AGR_GET
with I_AGR_NAME= role and you can retieve Table: ACTIVITY_GROUPS_USERS Field: UNAME(usr Id)
Then check the value for the User role as obtained using the above steps and accordingly set the property for the custom fields to hide them.
BR,
Deepti.

BAPI (FM) to maintain User Roles

Similar Messages

Maybe you are looking for