BAPI to create,get Profiles and roles
Hi,
I am using the SAP RFC SDK to do the provisioning of entities in the SAP environment.
My SAP system is 6.20 .
I wanted to know if there are BAPI's which exist for the following
a)Profile creation
b)Profile Fetching
c)Role creation
d)Role Fetching
I could not find the same in the SAP IDM document provided for IAM vendors
Best Regards
Manoj
Hi Manoj,
Everything you need to know about this, and more, can be found in the following PDF from SAP: <a href="https://www.sdn.sap.comhttp://www.sdn.sap.comhttp://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/668e6629-0701-0010-7ca0-994cb7dec5a3">SAP Identity Management APIs</a>.
In summary:
To find a user's roles and profiles, use <b>BAPI_USER_GET_DETAIL</b>.
To assign & delete a user's roles, use <b>BAPI_USER_ACTGROUPS_ASSIGN</b> and <b>BAPI_USER_ACTGROUPS_DELETE</b>.
To assign and delete a user's profiles, use <b>BAPI_USER_PROFILES_ASSIGN</b> and <b>BAPI_USER_PROFILES_DELETE</b>.
Hope this helps,
Darren
<a href="http://www.fortybeans.com/">My blog</a>
Similar Messages
-
Oracle Profile and Role scripts
RDBMS :Oracle 10.2
Hi,
I have several Profile and Roles on my server.
Can I extract sql to create those Profile and Roles ?
e.g. I have role datareader, I want to extract its creation script and it include all the privileges assigned to that role
thankstry
SELECT dbms_metadata.get_ddl('ROLE', 'datareader') FROM dba_roles;
SELECT dbms_metadata.get_granted_ddl('ROLE_GRANT', 'datareader) FROM dual;
SELECT dbms_metadata.get_granted_ddl('SYSTEM_GRANT','datareader') FROM dual;
SELECT dbms_metadata.get_granted_ddl('OBJECT_GRANT','datareader') FROM dual;
datareader should be in CAPS -
Creatkion of customized profiles and roles
Dear Experts,
Im new to SAP and SDN.
My requirement is that i need to create a new profile for technical people
as z_tech_role giving access to transactions as SE38,S71,smartforms etc.
Similarly a functional one needs to be developed as z_func_role access to Se16,
solar01,solar02 ,va01,ad other VA transactions.
The same for a workflow profile.
Can you please provide me with steps how i need to create this profile and how to attach roles in it to the profile.
Thanks in advanceHi,
There is one forum for SAP Security, you've to post this message in that forum to get quick and exact reply..
Anyways, please follow the help.sap link above povided already.
Somebasic concepts:
1. Tcodes are assigned to Roles.
2. When Roles are generated, they create profiles.
3. Roles are assigned to Users. (profiles are not directly assigned, except few like sap_all, sap_new etc)
So what you can do, create a role z_tech_role in PFCG and add transaction SE38,S71.. etc.then maintain authorizations, generate the role. and then go to user tab, add the users whom you want to be assigned with the new role z_tech_role. (role assignement can also be done in SU01, roles tab)
Thanks,
Debasis. -
Difference between profile and role
Can any explain me the difference between profile and role.
I was given a user Id on ABAP stack of XI.
My profile: SAP_ALL
I was not assigned any roles.
I am not sure if I need different roles or this profile
would serve the purpose.
-Naveen.Hi Naveen,
Adding to Gus points a few more inputs.
Profiles were the menas of assiging authorizations to users until 4.0 Versions.
Later to the same it was upgraded to the concept of Roles. The crux always remains the same.
Be it a profile or a role, it contains the Auth Object and the respective values.
But in present scenario, you can get confused by the profiles that are assignable to Users.
IN short the following points can be helpful.
1. The profiles like SAP_ALL;SAP_NEW,S_SPO_ALL etc are standard Profiles delivered by SAP which when assigned to a user in his profile in SU01 would get all the related authorizations.
( You must be lucky to have SAP_ALL assigned to ur ID by ur basis guy)
2. A role is created by assigning a few transactions to this role and when this role is generated, it generates a PROFILE. But this profile is a system generated one and cannot be ever assigned to any user. These profiles can be sorted out as they have the standard naming like T-XXXXXXXX where they are the numbers and it can never be assigned to any user.
3. Note prior to 4.0 its all Profiles that are assigned to users and later to the same came the concept of Roles and hence this change.
Hope the answer is helpful in making u undersand a few inputs form my side.
FYI:
Method to create a role can be checked out from the link below.
http://help.sap.com/saphelp_bw21c/helpdata/en/52/6714b6439b11d1896f0000e8322d00/frameset.htm
Br,
Sri
Award points if answer is helpful. -
Which BAPI is creating BP in consumer role, reference to customer, su01 us
Hello,
which BAPI is creating
BP in consumer role,
reference to customer,
su01 user.
please tell me
regards
ramHi Jacob,
When i am going to save the BP the details i filled in like name of the BP and all information goes blank. Asd i have mentioned.
So in error it is saying "An exception has occured during progranm processing, Make an entry in the name field".
In error dignosis i got below information:-
Exception Details--> CX_SY_REF_IS_INITIAL - Derefrencing of the Null reference.
Method: ZL_BP_HEAD_BPHEADOVERVIEW_IMPL=>EH_ONSAVE
Source Text Row: 38.
It is all because the information is getting removed which we enter for our BP. And i am not getting why it is not getting saved in the system. I have debugged the code for the event handler jsut after which all the valeus are getting removed but dint get anything.
Regards. -
Hi,
I created a few profiles with special roles and metadata fields in my ucm.
I did all the work in my computer and now i want to change the machine(computer) and i don't want to loose all my work.
Are there any ideas how to duplicate all my profiles and roles(my configuration) to another computer??
NOTE: I just want to duplicate my custom environment of the ucm.
Eran zFor this purpose you have Administration -> Comfig Migration Admin (Configuration Migration Utility).
http://download.oracle.com/docs/cd/E17904_01/doc.1111/e10792/c06_migration.htm#CHDBIJAJ
Regards,
Boris -
How do i get Firefox to open? i created a profile and now when i open any kind of firefox it shows a message saying: "A copy of Firefox is already open. Only one copy of Firefox can be open at a time." how can i fix this?!
Make sure you kill any firefox process that is still running. You probably have an error in the path location that the sartup link is pointing to. If you are trying to open two instances at once (I often do that) then you need to use the switch ''''-no-remote''''
See
* http://kb.mozillazine.org/index.php?title=Opening_a_new_instance_of_your_Mozilla_application_with_another_profile
* [[firefox is already running but is not responding]] -
Profile and roles internet sales
Hi.
I need profiles and roles that are use in internet sales.
ThanksThere are basic three type of user in ISA.
1) B2B_FULL
2) B2B_ORDER
3) B2B_VIEW
<b>For B2B Full below is the Roles</b>
SAP_ISA_B2B_FULL
SAP_ISA_SUB_BILLING_VIEW
SAP_ISA_SUB_CATDISPLAY
SAP_ISA_SUB_CATPRICE
SAP_ISA_SUB_CONTRACT_UI
SAP_ISA_SUB_CUSTOMER_READ
SAP_ISA_SUB_ORDER_MAINTAIN
SAP_ISA_SUB_QUOT_DISPLAY_UI
SAP_ISA_SUB_QUOTATION_UI
SAP_ISA_SUB_RFC
SAP_ISA_SUB_TEMPLATE_MAINTAIN
<b>For B2B_ORDER</b>
SAP_ISA_B2B_ORDER
SAP_ISA_SUB_CATDISPLAY
SAP_ISA_SUB_CATPRICE
SAP_ISA_SUB_CONTRACT_UI
SAP_ISA_SUB_CUSTOMER_READ
SAP_ISA_SUB_ORDER_MAINTAIN
SAP_ISA_SUB_QUOT_DISPLAY_UI
SAP_ISA_SUB_RFC
SAP_ISA_SUB_TEMPLATE_MAINTAIN
<b>For B2B_VIEW</b>
SAP_ISA_B2B_VIEW
SAP_ISA_SUB_CATDISPLAY
SAP_ISA_SUB_CATPRICE
SAP_ISA_SUB_CUSTOMER_READ
SAP_ISA_SUB_RFC
SAP_ISA_SUB_TEMPLATE_MAINTAIN
pl. reward a point if it helps you.
Thanks and Regards.
Ashish Patel. -
Getting domain and role profiles
i have access to the user profile and the application profile via the public API but i also need to have access to the domain profile ( i need to get some attributes at the domain level ) and found no way of doing that in the public API?
is there a way to do that via the API or do i need to create my own methods to access the ldap directory and retrieve the information?Sreekanth, step 2 of the role has priority over the access profile.
-
BAPI to create Excise Invoice and Commercial Invoice
Hi All,
Can u tell me the BAPI for creating Excise and Commercial Invoice.
Moderator message: please do some research before asking.
[Rules of engagement|http://wiki.sdn.sap.com/wiki/display/HOME/RulesofEngagement]
[Asking Good Questions in the Forums to get Good Answers|/people/rob.burbank/blog/2010/05/12/asking-good-questions-in-the-forums-to-get-good-answers]
Edited by: Thomas Zloch on Mar 2, 2011 5:56 PMHi,
You can make the appropriate setting in Customizing for Excise Duty, by choosing Basic Settings -> Maintain Excise Groups, and selecting Create EI (Create Excise Invoice Automatically)
Also maintain the default excise and series group in the configuration.
Logistics general>Tax on Goods Movement>India>Basic Settings>Maintain Excise groups. For your Excise group maintain the check Excise invoice during Billing.
After maintaining the same also maintain the default values in Logistics general>Tax on Goods Movement>India>Business transactions>Outgoing Excise invoices-->Maintain Default Excise groups and Series groups.
Regards, -
Beta 4 hangs from the start, created new profile and it also just hangs
Since installing beta 4 have not been able to open gmail, tonight installed new update to beta 4 and now firefox hangs and wont even open. Created new profile first time for access to gmail which worked, tried this time but cannot even get firefox to open.
Start Firefox in [[Safe Mode]] to check if one of the add-ons is causing the problem (switch to the DEFAULT theme: Tools > Add-ons > Themes).
* Don't make any changes on the Safe mode start window.
In Firefox 4 [http://kb.mozillazine.org/Safe_mode Safe mode] disables extensions and disables hardware acceleration.
* Tools > Options > Advanced > General > Browsing: "Use hardware acceleration when available" -
Created a profile and lost my homepage
I already had FF homepage, Bookmarks, Passwords etc impoted/saved. I created a profile following the online instructions. I checked open FF and when I did my homepage, bookmarks, etc was all gone. There were 2 tabs: Lets get started and the Google search. What happened to all my stuff? I have windows 7.
If you open Firefox with another profile then you do not have access to personal data stored in another profile.
See:
*https://support.mozilla.com/kb/Recovering+important+data+from+an+old+profile
*http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox -
Firefox worked earlier today (August 19, 2013 about 6:30 pm EDT). When I opened Firefix after 9pm EDT, Firefox attempted to perform an update. No error was given, but now Firefox will not start. Running a Windows 8 machine with all updates and current security software with no known malware on my system.
When I try to start Firefox, the system shows the "working" circle, but then nothing. I created a new profile, and got Firefox to start, but whenever I try to go to any website, Firefox crashes.
Last 2 crash reports from today:
InstallTime20130814063812 (contents: 1376962029)
LastCrash (contents: 1376969373)If you have submitted crash reports then please post the IDs of one or more recent crash reports that have a "bp-" prefix:
*bp-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
You can find the IDs of the submitted crash reports on the <i>about:crashes</i> page.
*You can open the <b>about:crashes</b> page via the location bar, like you open a website, or open the crash reports page via "Help > Troubleshooting Information".
See:
*http://kb.mozillazine.org/Mozilla_Crash_Reporter
*https://support.mozilla.org/kb/Mozilla+Crash+Reporter
Try to start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions (Firefox/Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Firefox/Tools > Add-ons > Appearance).
*Do NOT click the Reset button on the Safe Mode start window.
You can use one of these to start Firefox in <u>Safe Mode</u>:
*On Windows, hold down the Shift key while starting Firefox with a double-click on the Firefox desktop shortcut
*On Mac, hold down the Options key while starting Firefox
*Help > Restart with Add-ons Disabled
*https://support.mozilla.org/kb/Safe+Mode
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes -
Two user with same profile and role having different authorization
Dear All,
I have very strange case of authorization . We have a new abap developer in our company . Her profile as copied from an exiting abap developer's profile in Development system. But she don't have authorization for lot of transaction that the existing user have. I checked the profile tabs , role tabs . then done the user compare for all the roles , but of no use.
I did a compare of the two uses using S_BCE_68001430 and could see is that the existing abap user is having authorization starting with T_PXXXXXXXX that is giving him extra rights. These authorization is not present in any of the existing role he is assigned to (checked using S_BCE_68001396). The authirsaction in the roles start with T-DXXXXXXXX
Will appreciate if any one can give any input . The problem is i need to assign each authorisation the existing user having manually to the new user.
regards
TonyThanks for the mail.
I check the "Reference User for Additional Rights" -- there is no refernce user assgined.
I checked the table USR04 the no. of Profle for the two users are diffrent and in the table UST04 also the the existing uer is having addtional profiles.
I like to add one more point Some of the roles of the two users are composite roles and both the composite and its orignial roles are included the profile of both users.
Does any one have idea of the authorisations starting with T_PXXXXXXXX
regards
tony
MANDT BNAME PROFILE
100 CHARLHO B_LSMW_ALL
100 CHARLHO T-D1780054
100 CHARLHO T-D1780057
100 CHARLHO T-D1780058
100 CHARLHO T-D17800581
100 CHARLHO T-D1780075
100 CHARLHO T-D17800751
100 CHARLHO T-D1780086
100 CHARLHO T-D17800861
100 CHARLHO T-D17800862
100 CHARLHO T-D17800863
100 CHARLHO T-D17800864
100 CHARLHO T-D1780087
100 CHARLHO T-D1780088
100 CHARLHO T-D1780247
100 CHARLHO T-D1780304
100 CHARLHO T-D1781182
100 CHARLHO T_P0920411
100 CHARLHO T_P09204111
100 CHARLHO T_P092041110
100 CHARLHO T_P09204112
100 CHARLHO T_P09204113
100 CHARLHO T_P09204114
100 CHARLHO T_P09204115
100 CHARLHO T_P09204116
100 CHARLHO T_P09204117
100 CHARLHO T_P09204118
100 CHARLHO T_P09204119
100 TESTUSER2 B_LSMW_ALL
100 TESTUSER2 T-D1780054
100 TESTUSER2 T-D1780057
100 TESTUSER2 T-D1780058
100 TESTUSER2 T-D17800581
100 TESTUSER2 T-D1780075
100 TESTUSER2 T-D17800751
100 TESTUSER2 T-D1780086
100 TESTUSER2 T-D17800861
100 TESTUSER2 T-D17800862
100 TESTUSER2 T-D17800863
100 TESTUSER2 T-D17800864
100 TESTUSER2 T-D1780087
100 TESTUSER2 T-D1780088
100 TESTUSER2 T-D1780247
100 TESTUSER2 T-D1780304
100 TESTUSER2 T-D1781182 -
when i go to use my game center app i login and it tells me i have to creat a profile so i hit yes and then i bownce inbetween selecting country and selecting birth date what am i doing wrong???????????????
-Acedogwhat am i doing wrong???????????????
You were perhaps born in the wrong place on the wrong day!
Maybe you are looking for
-
Is it possible to convert a NTFS external drive to HFS extended?
My daughter saw the light and changed from a Sony laptop to an Intel iMac. The problem is that she has 2 USB2 external drives that were formatted as NTFS. I spent some frustrating time today with the one of the drives and Disk Utility. Disk Utility k
-
Just installed the latest update, now iTunes won't launch
Hi, iTunes was running perfectly fine, but wouldn't let me access the iTunes store until I installed the latest software update (9.0.2 or something like that). The software installed successfully, but now iTunes won't open. When I click on the icon i
-
i am not able to transfer application from mackbook to my iPhone 5 and when i click to install it comes will install
-
Hi Guys, I want to know , when v r running the interface suddenly SLD fails ,what will happen. 1) It starts from first again after connection is established or it starts were it has failed.
-
Hello, I don't use iPhoto daily and so just realized I have lost my many smart albums. Not sure if it happened during an operating system upgrade, a migration (got a new computer) or a iphoto upgrade. Must needed, each album is actually a patient (me