Business Role change made password deactivated or reset in ABAP systems.

Hi,
We recently made changes Business role by adding technical role but this changes has deactivated or reset password for assigned users who had Productive password in connected ABAP system.
We have two type of users, one who access SAP Portal and ABAP with Single Sign on and second who login into Portal and ABAP with password.
This BR change has impacted second type of users who had Productive password.
Regards,
Manish

Hello Manish,
you have marked the thread as "Assumed answered". Could you please share with the community the outcome of your OSS ticket with SAP, so that others can benefit, too? Then you can mark the post as answered. Right now the thread isn't really helpful to anyone (neither you nor the community).
Also, if you answer Jai's questions, maybe we can help in solving your problem?
Having several irons in the fire can't be bad, right?
Regards,
Steffi.

Similar Messages

Business Role changes not being provisioned

Guys (and girls),
We're having the issue that whenever we change something to a business role in IdM 7.1 SP5, like adding or removing a technical role (SAP role) the change isn't provisioned to the system authomatically resulting in users not being updated.
The workarround now is to change a business role and then remove it from a user and add it to that user again. Works ok when you're dealing with only a few users but I'm not looking forward to the day our basic role needs updating.
Same thing goes for changing users telephone number or SNC name or the likes.
I'm not sure if the two issues are related but am I missing an assignment of a task somewhere?
Cheers,
Jonathan

Jonathan,
I think so, but a pretty simple one to fix.
I would do one of two things:
1. Put a MODIFY task on MXREF_MX_ROLE or whatever attribute you're holding roles in. Have this task do a role reconcilation.
2. As a part of the workflow, have a role reconciliation execute.
On the whole, I prefer the second option. Don't like adding baggage onto the MXREF attributes. Just keeps things running more efficiently.
By role reconciliation, I mean executing the functions/tasks needed to reassert the roles on the user. I think there's a built in scripting function to do this or you can automate the add/remove functionality you described in your message, holding the role MSKEYs in a temporary attribute.
Matt

I am having terrible problems with Game Center when playing my games. It kicks me off and then I have to sign in again each time. Been happening for last week. So bad I can't play any more. I've soft reset repeatedly changed my password and then reset.

I Am having terribly time with Game Center. Crashes constantly so I can't play my games. Tried soft reset on ipad repeatedly also changed password and reset. That seemed to work for a while but now it's messed up again. When I try to contact support they say I don't have a server that they support and tell me to use: Safari , Firefox both of which I have...HELP!!! I'm a chancelor in one of my world!

I Am having terribly time with Game Center. Crashes constantly so I can't play my games. Tried soft reset on ipad repeatedly also changed password and reset. That seemed to work for a while but now it's messed up again. When I try to contact support they say I don't have a server that they support and tell me to use: Safari , Firefox both of which I have...HELP!!! I'm a chancelor in one of my world!

Resetting of my password - constantly being reset by your system!

Why am I getting a notification via my email address, telling me I have successfully reset my password when I have not done this. This happens on average every two to three weeks. It is majorly annoying. Are my settings telling it to do so automatically. It's driving me crazy.

AdventureBear wrote:
Hi,
This may have been the way it has been on iOS since 2008 (not sure about that though), however I know (based on working in the IT industry for 20 years) that nobody on this planet can successfully argue that it would be 'acceptable security practice', for me to display 'every last letter' as I type of a secure 'root' password on my screen every day when you log in... Nobody would think it acceptable to display even their LAN/Domain password on the screen in this same manner. So why is iOS different?!
iOS on a phone (it used to be argued) doesn't need to be very secure as it is almost entirely phone numbers and email addresses that are being stored. However in recent years when the applications got better, and tablets came out, security became a much bigger issue as more and more people started using the functions of 'smart' phones to store more 'sensitive' data.
Kind regards,
Andy
Are you suggesting that someone looking over your shoulder can't see the keys that you're tapping with your fingers? In the interest of security, i would never, under any circumstances, enter a password when others are around.

Z Creation of Business Role

Hi,
I am new in CRM and i want to create a business role for a one is for custmoer and one for Call center Agent.
i know some tcode like CRM_UI_Profile and PFCG but dont know how to create it.
Can you explain me in Step by step manner or any privious Forums or link.
I have searched privious forums but i did'nt get expected.
jim

Hi Jim,
Yes you can create a Z Buisness Role in the crmc_ui_profile (img activity>>CRM>>Business Roles>>Define Business Role).
A business Role is made up of several things namely -
1.Role Config Key : You can create a new or use existing ones.
2.Navigation Br Profile
3. Layout Profile
4.Technical Profile
5.PFCG Role ID
Navigation Bar profile is specific to different business roles. It defines what all links you see on the left hand navigation pane on Web UI. E.g. a marketing professional would see different links than a sales pro or a call center agent.
Similarly you can define other profiles or the use the default profile.You can create a pfcg role id in t-code pfcg and assign it your business role.
Jim, what would be best is to copy a standard role, e.g IC_AGENT and then customize it according to your needs and change the config key, nav bar, layout, and technical profile as per your requirements.
Thanks and Regards
Varun Taneja

Refreshing business role assignment to org. structure

Hi Experts,
I am trying to change the assignment of business role in org. structure but the changes are not coming into effect.
i.e. initially i have assigned servicepro to my org. strcuture & i am getting the relevant screen on login into WEB UI.
Now i have changed it to marketingpro still i am getting the same screen.
Can any one of you suggest that how i can refresh such changes.
& can anyone also suggest how i can assign business role directly to users.
Thanks & regards
Nanda Kumar

Hi Nanda,
I assume the reason for Business Role change not refelecting can be
1. A Profile assigned in SU3 or
2. You are trying to open the Web UI from same browser session using a new tab in IE7 (internet explorer), you need to create a new browser session.IE7 tabbed browser does not recognize the changes in SAP GUI, you need to open in a new browser.
Regards,
Masood Imrani S.

CRM business role

Hi all,
how to create business role and how to assign 5 business roles to an organizational unit.

Hi pramela
Follow the below SPRO path in CRM system
Customer Relationship Management->UI Framework->Business Roles.
Take any standard business role (say for example SALESPRO) and copy the business role change accordingly as per your requirement.
once this is changed go to transaction PPOMA_CRM (Organization unit maintainance) from here search for relevant organizationunit under the organization unit you will found the positions under the positions you will see the Assignment of either users or Business partners as Central persons.
Here you have to remember two points either you can assign ROLE to Organization unit or Position. If you assign it at organization unit level the sub organization units and positons will get that assigned role.
if you assign at position level , the users only assigned to that position will get that rolee.
How to assign the role. Doube click on any organization unit or position that you want to assign the role, From the menu path
GOTO->DETAILOBJECT->ENHANCEDOBJECTDESCRIPTION after going here you will see Maintain object screen under ACTIVE TAB search(scroll) for the infotype with name BUSINESS ROLE , select the business role and click on create button (on top you will see the create button) in the create screen specify your role.
if you assign five users to the same position then you have to carry this only once, if they are assigned to several positions under differnt organization units you have to assign those many times.
Thanks & Regards
raj

HT1199 Why is mail stuck in a do-loop of "There is a problem" with the mail account after changing iCloud password? How can it be fixed?

After changing passwords for iCloud, Mail is stuck in a do-loop "There is a [problem..." The error appears in less than one second after responding "Later"

Nope. Turns out that even though I have two Macs running 10.9.4, the one in question doesn't get the SMTP settings changed by iCloud settings when the password is changed, so I had to "Edit" the account in Mail, plow down to the password settings for the Apple SMTP server, and change the password myself. Nothing in the System Preferences iCloud setting tab lets you change any settings on the local machine. Apple is sure they are controlling everything when you make changes in iCloud, but they are wrong. Identical versions of 10.9.4 are configured differently on two different Macs.

Pages - Eliminate save prompt when closing file with no changes made

Hey everyone -
This isn't really a question thread, but rather a solution I built to eliminate one of Page's annoyances.
This problem has been encountered before, but the question isn't truly ever answered. I would reply to those (they're the top results in Google), but because they are archived I can't change them at all.
The Problem:
Even after disabling the .pages prompt, it still prompts to save files just before I close them. The exact message is: Do you want to save the changes made to the document "some_document"?
Details:
System Version: OS X 10.9.1 (13B42)
Kernel Version: Darwin 13.0.0
Pages Version: 5.0.1
The Solution:
Create a workflow.
Open Automator, select New Document.
Select Service, then click Choose.
Set Service Receives to "no input" and change the "in" drop down list to "Pages.app".
Next, search for Quit Application, put it in there.
Set this to Pages.app, and ensure the box "Ask to save changes" is unchecked.
Save it. I believe there is a default location, so don't specify a path. Give it a name. Quit Automator.
Assign a keyboard shortcut to the workflow.
Open System Preferences > Keyboard > Shortcuts.
Go to Services on the left hand panel.
Scroll to the bottom.
Under General, you should see the workflow you created. Mine was called "Quit Pages".
Click it, then select the Add Shortcut button.
Give it a rarely used shortcut. I chose ⌘⇧X, but you're welcome to do whatever you like.
Quit System Preferences.
At this point, it should work. Open up Pages, open a new document, then do the shortcut. It should exit without any issue. However, I did not like having to learn a new shortcut just to pull this off. So I did this:
Use BetterTouchTool to configure it properly.
Download BetterTouchTool and install it.
Open it up.
Go to the Basic Settings tab, and ensure the "Launch BetterTouchTool on startup" is checked.
Click the Gestures tab.
Select Keyboard in the horizontal bar.
On the left hand panel, near the words "App Specific", click the plus symbol. This should allow you to add an application.
Select Pages.
Click the Pages application in the left hand panel (if it is not already).
At the bottom of the main panel, click "Add new shortcut".
Keyboard shortcut: ⌘Q
Trigger other keyboard shortcut: ⌘⇧X (or whatever you used in System Preferences).
Quit the application.
Open it back up. It should now be running in your Menubar.
Now, if you open a .docx document with Pages, then hit ⌘Q, it should exit without any fuss. HOORAH!
Granted, this does have a few tradeoffs. If you go to Pages > Quit, it will still prompt you. Also if you want to close the current window (⌘W), it will still prompt you.

You get this behavior if the file which you opened is not a Pages '09 one.
If it is a Pages '08 one, it must be entirely transcoded so it's a modified document and given that, the program must ask you to save it.
If you save it as a Pages '09 document, you will no longer be asked to save (in these conditions).
Yvan KOENIG (from FRANCE mercredi 11 février 2009 23:16:00)

Multiple PFCG Roles to a user and one business role

Hello SAP CRM Experts,
we are facing a problem then I need your help.
The external user can access the CRM through three distinct business roles.
However, for each of these business roles, there are specific access
rules configured in three different PFCG profiles.
In the registration of the user (SU01), are assigned the three profiles
PFCG because the user must have access to three different business roles.
However, for one of the profiles the ability to modify the document
service order is blocked and for the other is allowed to modify this
document.
Is there a customizing where I can associate the PFCG role to the
business role, and then, when the user logs into the system, it
identified the business role that he accessed the PFCG profile associated.
However, this configuration is not working, and did not solve the problem.
It seems to me that there is a merge of all the permissions that the user
has, and is not being considered the PFCG role associated with the
specific business role.
This is really correct? The merge permissions occurs?
Best regards,
Diogo Lupinari

Yes, thatu2019s correct. When user is assigned multiple PFCG roles, all authorizations are in play.

IDM GRC Business Role managment

Hi experts,
We integrated SAP IDM with GRC,
Now our requirement is creating a business in IDM/GRC, request for business role is raised for IDM and approved by role owner in GRC after risk analysis.
But SAP said business roles and portal groups are not supported between the systems.
Kindly suggest how to accomplish this.
Regards,
Jaya

Hi Jaya,
Yes I remember this is possible. You can setup a customize attribute in GRC privileges. And put the business role name into this attribute.
Try this URL, but perhaps your GRC consultant should read it instead of you.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d0e2c628-2690-2e10-0d82-dbf1931db2cd?QuickLink=index&overridelayout=true&51565377381172
After creating the attribute, you need to revise the GRC framework to include this attribute (business role name) in your request.
I don't have a working IDM system (with GRC integration) with me. I could not provide you more details.
Cheers,
Chenyang Xiong

Problems with my Apple id since 2 weeks: i received for 3 times a mail from Apple who said: you're password was reseted but i didn't asked for reset. So i have to re-change my password again. How can i be sure my account is not hackd

hi everyone,
since 2 weeks: i received for 3 times a mail from Apple who said: "you're password was reseted..." but i didn't asked for reset. So i have to re-change my password again. How can i be sure my account is not hacked ?
Best regards.

I'll add my problem to this list as it sounds similar. First a little background. This is a problem I think we will see from a lot of long term users, so here is my story. When .Mac was first made available I signed up and was given a new apple ID [email protected] At this point I already had an Apple ID that I was using for just music purposes (apps didnt't exist yet) but was told by apple I would have to give it up. They could not merge IDs and would not change them. The end result was getting a new Apple ID and having to redownload all my purchased music over P2P or burn it and re-rip to remove the DRM. Fast forward a bit to a time when Gmail is getting bigger. I'm invited to try it out and I decide that I'm going to stop paying $100 for email, as I never really used he other features iDisk, photo sharing etc, and syncing contacts, calendars and mail was just as easy through gmail. Now years later we have iCloud. I have to sign in with my outdated .mac ID, at this point I have for too many apps/music/shows to drop that ID. When I sign in with that .mac Apple ID I get the automated iCloud message telling me my new email address is [email protected] However when I go to send email from my iCloud account it is using .mac as the sending address and the mail will not go through. I can't change it in the mail app or in settings. I'm kind of at a loss as to where to go next. I'm stuck with a defunct email address as a username that is more or less a key to thousands of dollars worth of content, and a new email address that won't function and nobody at Apple can press the right buttons to help clean it up. Some kind of system should be in place to change a user ID. Maybe once a year or once every other year. **** at this point I would even pay a one time fee just for my user name to be rid of that old .mac extension.

Ok on my iPad 3 I pad to change my password everyday, so I reset it now it's fine but bigger problem I can't connect to wifi at home with out it asking for proxy ip server and a bunch of things . Very frustrating can't connect to any other than my tmobli

OK people who is able to help me fall back in love with my ipad3? Here go, I was in love then I lost it when I had to change my password every time I got back on. So it told me to reset it . I did. It worked yay.!!
so now I was trying to get online sitting outside my house an I was asked to put in password and ip address along with other weird things I had never had to do befor. So even inside it tells me to do this , so someone please help me please thank you.
Want A Personal Answer?
1,199,824 people are answering.

Does the iPod connect to other networks?
Did the iPod connect before?
Try:
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Power off and then back on the router
- Reset network settings: Settings>General>Reset>Reset Network Settings
- iOS: Troubleshooting Wi-Fi networks and connections
- iOS: Recommended settings for Wi-Fi routers and access points
- Restore from backup. See:
iOS: How to back up
- Restore to factory settings/new iOS device.
- Make an appointment at the Genius Bar of an Apple store.
Apple Retail Store - Genius Bar

ATTENTION!! RECEIVED FRAUDULENT EMAIL PRETENDING TO BE APPLE!! I received an email informing of a purchase made on my account and telling me to change my password if did not purchase the item, which I had not. I have received valid emails from Apple

ATTENTION!! RECEIVED FRAUDULENT EMAIL PRETENDING TO BE APPLE!! I received an email informing of a purchase made on my account and telling me to change my password if did not purchase the item, which I had not. I have received valid emails from Apple in the past asking letting me know a purchase had been made and asking if I had made the purchase, but the item listed has alway been a purchase that I had made. Since I had received similar emails in the past, I didn't think anything of it. Because I had not purchased the item listed, I immediately clicked on the link in order to change my password, which has been suggested in authentic emails i had received from Apple in the past. The site I was redirected to was exactly the same as the Apple site where you go to change your password. I entered my userID and password and it stated a verification email would be sent, if it was not sent click "resend email." When I did not receive an email, after about 10 seconds I went to the Apple site and followed the SAME EXACT step on pages that were IDENTICAL to the FRAUDULENT website I apparently had just been at. When I clicked "Send verification email," I DID receive an email within seconds, which had a special link that brought me to a page where I could change my password, which I did. I later compared a legitimate email to the FRAUDULENT email and I DID FIND A DIFFERENCE, BUT IT WAS ALMOST UNNOTICEABLE unless you were really, really looking. I doubt it would be noticed by anyone if not comparing it closely to a real email. THE DIFFERENCE WAS AT THE BOTTOM OF THE AUTHENTIC EMAIL, THERE WERE THREE LINKS THAT COULD BE SELECTED - My Apple ID/Support/Privacy Policy. ON THE FRAUDULENT EMAIL THESE LINKS WERE NOT PRESENT!!! Just today I received an email from Apple stating my password had been changed today. I did not change my password today. When I changed after getting the fake email, I did not think about my SECURITY QUESTIONS!!! If you forget your Apple password, you are able to answer the security questions in place of your ID and you get a confirmation email. Even though I changed my password within a one minute when I did not get a confirmation email with a link to change my password right away and I went dierctly to Apple's site, apparently it was enough time to take all the information on my account - INCLUDING MY DEBIT CARD NUMBER, WHICH HAD BEEN REQUIRED WHEN I INITIALLY SET UP THE ACCOUNT!!! Today I received a call from VISA FRAUD PROTECTION asking about strange activity on my account and stating they were concerned and wanted to ensure I had used the account. I HAD NOT, AND ALL THE MONEY IN MY BANK ACCOUNT HAD BEEN STOLEN!!!!! I am writing this in hopes that many people will see it and NOT FALL VICTIM TO THIS SCAM. Please pay close attention to any emails you supposedly receive from Apple - If the links "MY APPLE ID/SUPPORT/PRIVACY POLICY," PLEASE DO NOT ASSUME IT IS AN AUTHENTIC EMAIL FROM APPLE. I suggest you immediately forward the email to apple, which I didn't do because this happened days ago. Nothing was taken from my money that was already on the Apple account, and nothing had been taken from my checking account. I guess I assumed there had been something wrong with the link in the email directing me to where I could change my password, plus I had gone to the valid Apple website and changed my password for real, and I guess I was thinking that changing my password would prevent someone from being able to acces my account info. PLEASE DO NOT FALL VICTIM TO THIS SCAM AS I DID!!!!

No need for alarm. There are several folks a day posting like threads. Most folks know these phishing attempts for what they are and merely delete with prejudice.
To the bottom line... if you wish - and I am sure Apple will take notice - you should FORWARD the email to [email protected] and delete.
CCC

Someone made a purchase from my Apple ID to a device that was not mine – I received an email stating that this happened, yet the only solution that Apple gave me was to change my password. I can see the $20.00 purchase that was not uploaded to any of my d

Someone made a purchase from my Apple ID to a device that was not mine – I received an email stating that this occurred, yet the only solution that Apple gave me was to change my password. When I look at my account, I can see the $20.00 purchase of music volumes that I did not purchase myself and was not uploaded to any of my devices; however, I cannot find a solution to getting my money back or to file a complaint against the unknown person that did this. Additionally, how do we prevent something like this from happening again, especially when I have an iPhone? What can I do in this situation?

Thank you for the suggestion. I did change the password; however, I generally will purchase gift cards to link to the account so that if something like this ever happened it would not be taken out of a credit card or bank account.

Business Role change made password deactivated or reset in ABAP systems.

Similar Messages

Maybe you are looking for