Basic Information about Organizational Level & Org. level value.

Hello Experts,
  I am new to the field of SAP and security. I have the following questions:
1. What is an organizational level & org. level value? What do they represent? How do they matter in PFCG?
2. What is a derived role and what is its usage?
I appreciate your help regarding this. If you could point me to some documentation regarding this that will be very helpful.
Regards, Ben

Ben,
I am new to the field of SAP and security. I have the following questions:
1. What is an organizational level & org. level value? What do they represent? How do they matter in PFCG?
if you want to restrict on region vice (best use org level & values (plant,company code, sales org)
In role u will notice them in red color
2. What is a derived role and what is its usage?
Derived role inherits menu struture and the function from the parent role. Derived role do not differ in their functionalities(identical menu & trans) but have different characterticts with regard to Org levels.
Eg1; Master role
PFCG -> role name -> create->menu->enter tcodes-.Auth tab->export mode->read old status and merge with new data->Pop for org levels (give a full access)->see to that everything is green->generate it.
http://e-mory.blogspot.com/2007/12/sap-pfcg-create-role.html
Eg2: Derived role
pfcg->role name->create->in describtion  tab towards right  enter the master role name->Auth tab->export mode->read old status and merge with new data->you will get a pop for org levels (here you can restrict on plant lvel,purchasing group,company code....)
->let say for plant : 1000 ->generated / user comparssion
Once the role is added to the user. User will be albe to see only those plant related details (1000) (i.e he will have access to only plant 1000)
suppose if the user enters 2000,he will get a error message saying no access to 2000
NOTE: Any changes to the role should be done in master role (like adding tcodes)
.http://www.rssfeeddirectory.org/directory/items/346239.aspx
https://cw.sdn.sap.com/cw/docs/DOC-12021
http://help.sap.com/saphelp_wp/helpdata/en/1c/c38028816c11d396bc0000e82de14a/content.htm
Re: Authorization error after transport
Thanks,
Sri

Similar Messages

  • Basic information about RED EPIC importer software

    See this page for basic information about RED EPIC importer software:
    http://labs.adobe.com/technologies/redepic_importer/

    Guess you better change your website then    oops guess that's 5.0--my mistake
    http://help.adobe.com/en_US/premierepro/cs/using/WSd79b3ca3b623cac96dad58361274a3aab8f-800 0.html

  • Script to collect basic information about a database

    Hi,
    I recently started working at a new place, with lots of Oracle Databases.
    I have need for a nice script for collecting basic information about this databases. A few years ago I found some scripts at Metalink for this, but now I can´t find any....
    Anyone who could point out where to find this?
    Best Regards //Björn

    You can use Statspack. You have the most important information and you have an overview of how the database performes.
    Bye, Aron

  • The last Apple I used was a IIe. Where can I find basic information about what an Ipad will do and how it differs from an Android tablet?

    The last Apple I used was a IIe. Where can I find basic information about what an Ipad will do and how it differs from an Android tablet?
    I am considering purchasing this for my wife who has only had experience with Windows machines.

    Here are a number of possibilities:
    http://ipad.about.com/od/iPad_Guide/a/How-To-Use-The-iPad-Best-Uses.htm
    http://www.macobserver.com/tmo/article/8-important-things-you-can-do-with-an-ipa d
    http://iconlibrary.iconshock.com/tutorials/50-things-you-can-and-cant-do-with-yo ur-new-ipad/
    iPad vs Android:
    http://ipad.about.com/od/ipad_competition/tp/iPad-vs-Android-Which-Tablet-Should -You-Buy.htm
    http://www.cnet.com/topics/tablets/best-tablets/

  • Some basic information about EBP/SRM

    Hi All,
    I am new to SDN as well as to EBP/SRM.
    While going through the forum, I got to know that there are terms like classic scenario, extended classic etc.
    Can anyone pls tell me what do you mena by this? How do you determine what is your scenario?
    Can someone share some impotant basic things about EBP/SRM that one needs to know before starting any work on the same.
    Will reward full points if I get a good material.
    Thanks in advance & expecting replies form your end.
    Regards,
    Sanaa

    Hi Sanaa,
    Please, follow this thread: Need to know basic things about EBP/SRM
    Regards,
    Marcin Gajewski

  • Need basic information about XI

    Hello XI gurus,
    I try to learn basic about XI. Where can I find documents, articles, real time examples about XI.
    I have few beginner level questions. Please answer..
    1. What is XI? Is it a server?
    2. What is the use of XI?
    3. What is the real time business process example using XI?
    4. What are the basic knowledges required to start learning XI?
    5. Does Learning XI include configuration and coding/development?
    Thanks in advance
    Bala

    Hi,
    1. What is XI? Is it a server?
    XI is a EAI tool. It is basically a middleware to connect disparate systems
    2. What is the use of XI?
    3. What is the real time business process example using XI?
    Real time business process example would be sedning credit card data to the Bank for Authorization. This is a synchronous call.
    4. What are the basic knowledges required to start learning XI?
    Knowledge in SAP would be helpful.
    5. Does Learning XI include configuration and coding/development?
    If you are a developer then you would need to do only the configuration in Integration Directory and Integration Repository. some amount of coding if you are doing complex mapping
    All your questions are answered here:
    http://help.sap.com/saphelp_nw04/helpdata/en/0f/80243b4a66ae0ce10000000a11402f/content.htm
    Regards
    vijaya

  • Basic information about software update

    Sometimes when the Software Update has run and tells me I need to reboot, I put it off and finish what I am doing on my other programs, then later quit everything and restart. My brother tells me I should not do this since it has optimized the space on my computer and by doing other things I change that. Is this true?
    He now tells me that I should not be doing anything else while downloading with software update, but I figure that if that was true, they'd warn you about it. I would be incredibly greatful if someone could clear this up!

    I agree with everything written so far, but will also add my own take on this subject!
    There are no guarantees, but following this procedure when installing updates and upgrades on your Mac, or even re-installing them, will go a long way towards avoiding unpleasant after effects and ‘post-update stress disorder’.
    It is also worth noting that it is an extreme rarity for updates to cause upsets to your system, as they have all been extensively beta-tested, but they may well reveal pre-existing ones, particularly those of which you may have been unaware. If you are actually aware of any glitches, make sure they are fixed before proceeding further.
    So before you do anything else:
    If you can, make a full backup first.
    Turn off sleep mode for both screen and hard disk.
    Disconnect all peripherals except your keyboard and mouse.
    1. Repair Permissions (in Disk Utility)
    2. Verify the state of your hard disk using Disk Utility. If any faults are reported, restart from your install disk (holding down the C key), go to Disk Utility, and repair your startup disk. Restart again to get back to your startup disk.
    At least you can now be reasonably certain that your system does not contain any obvious faults that might cause an update/upgrade to fail.
    3. Download the correct version of the COMBO update from the Apple download site. If your car runs on gasoline you would not want to fill the tank with diesel, so don’t try to install the PPC updater on an Intel Mac!
    The 10.4.11 Combo Updater for PPC Macs is here: http://www.apple.com/downloads/macosx/apple/macosx_updates/macosx10411comboupdat eppc.html
    And for Intel Macs: http://www.apple.com/downloads/macosx/apple/macosx_updates/macosx10411comboupdat eintel.html
    If you prefer to download updates via Software Update in the Apple menu (which would ensure that the correct version for your Mac was being downloaded), it is not recommended to allow SU to install major (or even minor) updates automatically. Set Software Update to just download the updater without immediately installing it. There is always the possibility that the combined download and install (which can be a lengthy process) might be interrupted by a power outage or your cat walking across the keyboard, and an interrupted install will almost certainly cause havoc. Once it is downloaded, you can install at a time that suits you. You should make a backup copy of the updater on a CD in case you ever need a reinstall.
    More information on using Software Updater here:
    http://support.apple.com/kb/HT1338?viewlocale=en_US
    Using the Combo updater ensures that all system files changed since the original 10.4.0 are included, and any that may have been missed out or subsequently damaged will be repaired. The Delta updater, although a temptingly smaller download, only takes you from the previous version to the new one, i.e. for example from 10.4.10 to 10.4.11. Software Update will generally download the Delta updater only. The preferable Combo updater needs to be downloaded from Apple's download site.
    Now proceed as follows:
    4. Close all applications.
    5. Unplug all peripherals except your keyboard and mouse.
    6. Install the update/upgrade. Do not under any circumstances interrupt this procedure. Do not do anything else on your computer while it is installing. Be patient.
    7. When it ask for a restart to complete the installation, click restart. This can take longer than normal, there are probably thousands of files to overwrite and place in the correct location. Do nothing while this is going on.
    8. Once your Mac is awake, repair permissions again, and you should be good to go!
    If your Mac seems slightly sluggish or ‘different’, perform a second restart. It can’t hurt and is sometimes efficacious!
    9. Open a few of your most used applications and check that all is OK. In this connection please remember that not all manufacturers of third party applications and plug-ins, add-ons, haxies etc, will have had time to do any necessary rewrites to their software to make them compliant with the latest version of your operating system. Give them a weeks or two while you regularly check their websites for updates. This applies particularly to plug-ins for Safari 3.
    N.B. Do not attempt to install two different updates at the same time as each may have different routines and requirements. Follow the above recommendations for each update in turn.
    Lastly, Apple's own article on the subject of Software Update may also be useful reading:
    http://docs.info.apple.com/article.html?artnum=106695
    If you are updating Safari (or just have):
    Input Managers from third parties can do as much harm as good. They use a security loophole to reach right into your applications' code and change that code as the application starts up. If you have installed an OS update and Safari is crashing, the very first thing to do is clear out your InputManagers folders (both in your own Library and in the top-level /Library), log out and log back in, and try again.
    So, disable all third party add-ons before updating Safari, as they may not have been updated yet for the new version. Add them back one by one. If something goes awry, remove it again and check on the software manufacturer's website for news of an update to match your version of Safari. Remember: Tiger up to 10.4.10 used Safari 2.0.4 or, if you downloaded it, Safari 3.0.3 beta. Safari 10.4.11 used Safari 3.0.4 which was not a beta. If Safari 3.1.2 on 10.4.11 is not the fastest browser you have ever used, then something is wrong!
    Moreover, trying to revert to Safari 3.0.4 (or worse still, version 2) when running 10.4.11 or 10.5 can have repercussions, as Safari 3.1.1 uses a completely different webkit on which other applications like iChat, Mail and Dashboard Widgets etc also rely, and may entail you having to reinstall an earlier operating system.
    Most errors reported here after an update are due to an unrepaired or undetected inherent fault in the system, and/or a third party ad-on. Two such add-on that have been frequently mentioned here for causing such problems are Piclens and Pithhelmet. If you have them, trash them.
    Additional tips on software installation here:
    http://docs.info.apple.com/article.html?artnum=106692
    To reiterate, Input Managers reach right into an application and alter its code. This puts the behavior of the affected application outside the control and responsibility of its developers: a recipe for problems. That's not to say that issues absolutely will ensue as a result of Input Managers, but you, as a user, must decide. If the functionality of a specific Input Manager or set thereof is really important to you, you may well choose to assume the associated risk.
    Again, the advice is to remove all Input Managers from the following directories:
    • /Library/InputManagers
    • ~/Library/InputManagers
    especially prior to system updates (they can always be added back one-by-one later).

  • Need Basic Information About Importing Word Documents

    I just purchased a 24" iMac, after years of using a G4 running OS 9.1. I still need (primarily) a word processing progam and am considering either Word in Microsoft Office or Pages within iWork. I have used Office on both the Mac and PC platforms for years. However, I don't use the other applications within Office that often anymore. And with a new version on the horizon, I'm not sure if I want to buy Office 2004.
    My questions focus on Word documents. I have many Word documents on my G4 that I still need to use. My belief is that if I buy Office, I should have no problem. I need to know whether I can I import these Word documents into Pages? If so, will they look the same (formatting) and can I work with (edit) them? What can I expect?
    Also, when friends and colleagues send me Word files as attachments, will I be able to open them in Pages?
    I appreciate your replies and any recommendations you can offer. Thanks in advance for the feedback. I appreciate it.
    iMac   Mac OS X (10.4.7)  

    Stephen,
    Welcome to Apple discussions.
    In general, you should have absolutely no problem opening and editing Word documents. Keep in mind that some of Word's more esoteric features don't exist in Pages, so it may be possible that more complicated documents won't look exactly the same in Pages as they do in Word. But I exchange docs with Word users all the time and have no problems.
    -Dennis

  • How to distribute new object from org level

    Hi Expert,
    I'm trying to create a new object: MATKL to org level through program: PFCG_ORGFIELD_CREATE. But I find there are only distribute to all roles. Could you advice if it can be distribute by selected role instead of all roles? Any advice on hierarchy problem?
    Rdgs,
    Emily

    Hi Colleen,
    Actually I want to grant authorization on MM section by separate material group. It's to fulfil some special users are able to access particular material group. So I'm thinking to create new material group org value and distribute from the top level (org level). Could you advice if there is any method can achieve my purpose more safety or easily?
    If I want to control some users access some particular material number which limited by control different material group. Can I just assign object: M_MATE_WGR and control the value for access? If yes, where to assign?
    Rdgs,
    Emily

  • Playing video in labview with some basic information output for my program.

    I'm trying to program something similar to NI's product DIAdem CLIP in LabVIEW.  A program that synchronizes test data with video.  I'm trying to find a decent video component that gives me basic information about what is being played.
    My first thought is to use Windows Media Player 10 w/ LabVIEW ActiveX container.  I'm a little confussed as to what I'm doing with it, however.  I can't find any information about Windows Media Player 10 in the Class Browser.
    All I really need is:
    Input:
    1. The file for the embedded media player to play.
    Output:
    1. The framerate of the file being played.
    2. The current frame.
    I think with that I should be able to put a marker in my data graphs that indicates where that data correlates with the playing video.
    Thank you for your input!
    -Nic

    Your best source of information regarding the Windows Media Player object model is MSDN. I've only done a little bit of playing with Windows Media embedded in LabVIEW, but enough to know it was a pain and not worth the effort. NI has a KnowledgeBase article that indicates you will probably need LV8. In terms of your specific query regarding position, you should take a look at the "Controls" object in the object model, as that has properties I think you're going to need.

  • Basic information - How retrieve it ?

    Hello,
    I need some basic information about SAP Enhancement Packages . What is ? Why is useful ?
    and some technical details....
    How is possible retrive informations ?
    Tks,

    It is
    http://service.sap.com/ehp-inst
    There's a "Must know" guide and a "SAP enhancement package technology facts" file.
    Markus

  • Basic information in forums

    Hi Experts,
    As I was going through different threads in the coffee corner, I realized that it is tough job for the moderators to keep an eye on all the threads and at times lock those threads which violates the rules of the forum.
    Most of the threads which got locked are because of the newbies asking basic questions which can easily be searched. Moreover people provide answers to those threads with some copy pasted material sometimes without even giving credit to the authors. Such type of threads really spoils the forums. And also for the newbies it becomes a point of concern as they may fear that their thread might get locked or their question might be too easy to answer.
    What I feel is we can put some effort together and along with u2018rules of engagement in a forumu2019 we can put in another thread having the basic information about the topic of the forum which can include the links to Library or Blogs explaining the basics.
    This would be able to help the new joinees of the forum to understand the topic better.
    Please suggest if this could be feasible to do.
    Regards,
    Alpa.

    >
    Graham Robinson wrote:
    > Hi,
    >
    > what about picking up from the OSS model?
    >
    > In OSS you have to pass through the search page BEFORE you can post a new message.
    >
    > The process of posting a new thread might look like this...
    > 1. Enter subject
    > 2. Subject rejected if not specific enough
    > 3. Perform automatic search using subject line
    > 4. Present search results to user for consideration
    > 5. If no suitable answer found let user post new thread.
    > 6. Allocate thread to forum(s) automatically based upon subject
    >
    > Cheers
    > Graham Robbo
    Soo far, I like the above suggestion the most.
    This will actually ensure that the OP searches the forum before he posts a question...whether he likes it or not.
    Moreover making post a new thread a tedious task, it would discourage at least half of the members to blindly open a thread. They would be convinced that searching is a better/faster option. Common... I mean its human mentality
    Im really skeptic abt Mark's suggestion. Because no matter what, you cannot throw Moderation out of the window. For that matter, when members know theres a Beginner's forum then SCN will be flooded with "how to implement Workflow in my organisation" type of question.
    Its like giving a free passes to Disneyland. And the way I see it, the Moderators are going to be overburdened with more work.
    Personally, my suggestion is to delete the ids of those who answer very basic questions. Yeah I know Im those war-mongers, always in a billigerent mood
    But can prove very effective. Why? Because most regular members know every other member by name or personally. And im sure theres always a competition among members to go one-up over the other. And to achieve this they try to make every post/point count. And one fine morning when they see their closest competitor guestified, he would actually stop and think as to why that happened. And that should motivate him to tone down IMO.
    You know it makes sense.
    pk

  • Question on org level values in derived roles

    I have a set of derived roles for a retail org.
    They have set the org level for the WERKS object to the store number i.e. 0012. in the  M_MSEG_LGO, M_MSEG_WMB,   and M_MSEG_WWE but set it to "" in the  M_MRES_WWA and M_MSEG_WWA. Needless to stay the "" is overiding the site restriction.
    My question is, how can they allow store to store transfers and goods issues for other sites but only do POs and goods receipts for their default store?
    If the transactions in the role are using the same object, it doesn't seem like it can be done but I am told it can! I can't figure it out. Can anyone assist?
    Thanks

    If you are talking about  straight authorization object ( then your design cannot go with derived role concept )
    If your controls are only through the organizational object  only then derived role design will help
    If its a mix of both standard object + organizational level object derived role will not help you.
    Please note
    the WERKS is the organization level  in your case the plan value is 0012
    do not set the values in parent role and also do not populate this value were its "$werks"
    what is TCODE you are using ?
    Edited by: Franklin Jayasim on Jul 21, 2010 11:45 PM

  • HOW TO GET INFORMATION ABOUT THE CLIENT MACHINE AT DATABASE LEVEL

    HOW TO GET INFORMATION ABOUT THE CLIENT MACHINE AT DATABASE LEVEL USING 10g Database and 10g Application Server
    we have developed an application using oracle forms 10g with
    oracle database 10g and Application server 10g
    Application uses a single Oracle User name to connect to database
    where as at Application level there are different users (these are not database users)
    Now how can we get the information about the user/his machine etc. at database level. earlier in 6i/8i we use to get by using
    USERENV('TERMINAL')
    we had written a triggers on tables on Insert/Update where we used to update a database field Last user terminal with USERENV('TERMINAL')
    but not this information is comming to be the machine name of application server where as we wish this to be the machine name of Client. Any Way outs
    thanks
    Chaand Kackria

    hi, you can use the sys_context function, like this:
    select sys_context('userenv','current_user'),
         sys_context('userenv','os_user'),
         sys_context('userenv','host'),
         sys_context('userenv','ip_address'),
         sys_context('userenv','instance'),
         sys_context('userenv','sessionid'),
         sys_context('userenv','terminal')
    from dual;
    Is this what you 're looking for?

  • Viewing in Answers descriptive information about a level

    Hi, I have a Customer dimension level in BI Admin with its logical level key CUST_NAME.
    I also have some further information about each customer, like address and phone number (stored in CUSTOMER Logical Table), how could I link them to the Customer and view these data in Answers?
    It's like a kind of descriptive level attribute I'd want to view in Answers associated to the level logical key...
    any suggestion would be appreciated very much!

    As in the 1st post, I'd want to associate address and phone number to my CUSTOMER level, in which I drill down using CUST_NAME as a logical level key.
    The only way to view these information is include their columns in my Answers query, I ask the forum if is there another way to, for example, click on the customer column just drilled-down and view customer address...
    In another way: which is the utility of having a level key if it isn't logical level key?
    for example in my CUSTOMER level now I have 2 level key: CUST_NAME, which is logical level key and drill-down enabled, and CUST_ADDRESS which is not logical level key (it has the blue icon). Which is the utility (if is there) of having in my level CUST_ADDRESS that is not a logical key?
    Edited by: battle84 on 1-dic-2009 9.29

Maybe you are looking for

  • In Mountain Lion, Mail why no "view as icon" option

    I used to be able to compose a message, attach a PDF and right click to "view as icon." Now when I attach, I see a preview of the doc. When I save as a draft, the PDFs appear as icons. When a PC user receives them, will they arrive as PDF attachments

  • My Apple TV IS NOT RESPONDING

    My Apple TV was working as of two days ago, last night I tried to watch a movie thru Apple TV, not responding, this morning I tried again, same result, so what I did I was watching a movie on my IPad and then I airplay to the TV, and I was getting au

  • HowTo? learn about converting from Audition 1.0 scripts to "Effects Rack" + Batch?

    Rusty with CoolEdit / Audtion 1.0. Newbie with CS6 trial. I've got a lot of human speech tracks to clean up. Previously, I used the scripting capability of Audition 1.0 with the following "chain of effects": Convert to mono + 22050 hz Normalize to 90

  • QUERY FIND WINDOW

    Hi Experts, I am working on forms 6i. I have datablock on 'EMP' table. I have query window with 'EMPNO' to query. It's working fine. Requirement: When I click FIND button, i need get the data from other table of same EMP table structure and populate

  • How to prompt for user input in Forms

    How do I prompt for user input in Forms? I am writing a piece of code where the user may choose, by clicking either of three buttons on an alert, to have the system assign a value to a variable, to input a value or to do neither? If the user chooses