Change documents for reference user (de-)assignment

Morning all,
At my present customers' site they have been giving authorizations by assiging a reference user to several users for some time. Is there a quick way to see which reference user was assigned to which user and for which period? Table logging on USREFUS isn't active on the system.
Thanks!
Jurjen

Hi Jurjen,
Do you have report RSUSR100N in your release / SP?
Via report RSUSR100 (the old one) you can also find this, but only if the user type was reference (L). You then need to work out which authorizations the reference user had at that ponit in time.
Cheers,
Julius

Similar Messages

Change documents for the user in Ep7.0

Hi,
Is there a way can we track change documents for a user in user admin in AS java stack.We have LDAP sun 5.2 version as the datasource.in ABAP stack we have some thing like in suim the change docs.Thanks.

Hi Ambarish,
Please check the Security Logging (.../usr/sap/<SID>/j2ee/cluster/serverX/log/security.log) might helps.
Security audit log - 1278155
Refer to http://help.sap.com/saphelp_nw70/helpdata/EN/03/37dc4c25e4344db2935f0d502af295/frameset.htm
Regards
Arun Jaiswal

Shortcut to generate change documents for multiple user id access in ecc 6

hi.
i need to generate a report with changes to user ids within the last month. i dont have access to sap notes. thanks

apart from SUIM, you can also refer to below reports
RSUSR100                                   Change Documents for Users
RSUSR100N                                  Change Documents for Users
RSUSR101                                   Change Documents for Profiles
RSUSR102                                   Change Documents for Authorizations
regards,
Surpreet

SUIM doubt - change documents for deleted users

Hi,
Hey ,My manager is asking me the list of user created only last week, say 250 user created.How can get this report using SUIM(User Information System).
Regards,
Naveen
Edited by: Julius Bussche on Mar 6, 2009 8:42 PM
More meaningfull subject title added, which is also a usefull search term...

>
Trond Stroemme wrote:
> Well, anyway he said the list was only for his manager... ))
Maybe, just maybe, there is an auditor who already has the 251 created users (either from RSUSR100 or from the security audit log, or a specific period of something else) requesting a list of created users from the manager, to be able to take a sample of the approved user access request forms.
If the auditor does not want to go through all 250, then he /she might only need a sample size of 1 to reach a 100% level of inconfidence with 0% deviation for the sample size... ))
I know that some auditors go around sampling Z* programs from package $temp asking for the test documentation and QA approvals, and those which start with '!'....
Cheers,
Julius

Table to look for change documents for users

Hi friends,
Is there any standard table to look for change documents for a user?change document through SUIM does not give the correct log.
Thanks for you support.

Julius
Looking at another of Tracy's other post (http://scn.sap.com/thread/3598947) she's trying to use ACL. Hence needing to know the tables to write joins/queries to hit tables within ACL
I've seen ACL used and have had the fun experience of Auditors using Google to find tables to perform checks on without context of what has actually been implemented in their particular system.
Regards
Colleen

Change documents for Status

I know crm_jsto ,crm_jcdo,crm_jest, are table u used to document status changes in crm.Yet the quotation i create its guid is present in all the above tables except crm_jcdo.I need the old and new value of status on that particular day.I dont know y the inner join on crmd_orderadm_h and crm_jcdo returns no common guid.Kindly help.

Hi There,
Please take a look at the following table:
CRM_JCDS - Change Documents for System/User Statuses (Table JEST)
I hope it helps!
Kind Regards,
Gabriel Santana

Creating a custom change document for a standard table field

Hi
Is it possible to create a change document for a field in a standard table?
I have searched the forum and only found threads about creating change document to a custom table.
Will the creation of change documents to a standard SAP table be a modification?
Thanks.
Regards
Sowbhagya.L

Yes it will be a modification on standard table, but you can always create change document for any field by assigning it to custom change object.
Regards,
Krishna.

Export and import change document for user master data

Dear Gurus,
I have two queries on change document for user master data:
1. Are there any approaches to export and import change document for user master data?
We often do system copy from PRD to QAS for UAT and troubleshooting. Before system copy we export the user master data from QAS and then import after the copy process. We would like to keep the change document for user master data on QAS from being refreshed from PRD for security reason.
2. Change document for Role change in QAS
When the role is created or modified in DEV and then transported to QAS, the role change document doen't include this change log. The role change document in QAS only records those role changes directly made in QAS.
Could you advise this is by SAP design or are there any approaches to record this transported role change in the role change document in QAS?
Thanks
YBY

1. Perhaps you want to consider a system copy to a "virtual system" for UAT?
2. Changes in QAS (as with PROD as well) will give you the delta. They should ideally be clean... You need to check the source system.
Another option is to generate the profiles in the target system. But for that your config has to be sqeaky clean and in sync, including very well maintained and sync'ed Su24 data.
Cheers,
Julius

FM for Change Documents For User

Hi all,
We need a Function Module for tracking the changes of a user account. Is there any function encapsulating the functionality supplied by SU01 -> Information -> Change Documents for User?
thanks,
- ferudun

Hi
Try this BAPIs
BAPI_USER_LOCPROFILES_READ
BAPI_USER_GET_DETAIL
Regards
Bala Krishna

Change Documents for RAR

We use RAR 5.3 SP 14 and were wondering if there were any tables or reports that can show the change history upon mitigation added to a user. We can see the date that the mitigation was assigned to a user, but we can't seem to find the date when a mitigation was removed from a user.
For those that are questioning, we do use CUP for mitigations too, but we are mainly trying to find the change documents for RAR.
Thank you in advance.

SAP Answered
"In 5.3, there is no change log for mitigation control assignment. The only option in 5.3 is if you configure the Workflow option for Mitigation, then a request would have been routed through CUP for
this change and then you could search in CUP for the history of the change. Specifically, under RAR in Configuration - Workflow - Mitigation, if this parameter is set to YES, anytime you would
add, remove or change a mitigation for a user, a workflow item would be sent through to CUP for approval before the change is actually posted.
However, if you don't have this configured, there is no change log of mitigation changes.
There is no change log table in RAR to track mitigation changes, sorry. The change log information is not retained in RAR for changes to mitigations. The only "change log" information in RAR is for
Configuration and rules. This data is stored in table VIRSA_CC_CDHDR and VIRSA_CC_CDPOS. Again, this is only for changes to configuration and changes to rules. This is the only data that RAR tracks
changes for.
Changes to mitigations are NOT stored anywhere in RAR. Please let me know if there is any concern."

Displaying change documents for custom fields in FPP2

I have added a new subscreen to the Business partner via BUPT. The new fields are on a custom table. I have created change documents for the new fields and all that is working fine - details are being written to CDHDR/CDPOS as expected. In the standard FPP2 transaction the user can select Extras / Partner changes which will display a list of the change documents. This does not include my custom fields.
Does anyone know if it is possible to include my custom field changes in this list? I have searched several forums but cannot find any reference to this.

Hi,
Fix a break-point in the following function modules and check whether you are passing custom fields
CHANGEDOCUMENT_SINGLE_CASE
or
CHANGEDOCUMENT_MULTIPLE_CASE
SAP uses the above said function modules to update change documents. Its have two import paratmeters
WORKAREA_OLD
WORKAREA_NEW
or
TABLE_OLD
TABLE_NEW
a®

How to change password for a user in WLS 7.0 embedded ldap in code?

I asked the similar question before but don't have an answer yet.
I need to change password for a user in my Java code. Any help will be
appreciated.
Here is my stack trace:
c:\Test>java -classpath . testEmbeddedLdap
attribute: uid
attribute: description
attribute: objectclass
attribute: wlsMemberOf
attribute: sn
attribute: cn
javax.naming.NoPermissionException: [LDAP: error code 50 - Insufficient
Access Rights]; remaining name
'uid=myRegularUser,ou=people,ou=myrealm,dc=mydomain'
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:2872)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2810)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2616)
at com.sun.jndi.ldap.LdapCtx.c_modifyAttributes(LdapCtx.java:1374)
at
com.sun.jndi.toolkit.ctx.ComponentDirContext.p_modifyAttributes(ComponentDir
Context.java:255)
at
com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.modifyAttributes(Partial
CompositeDirContext.java:172)
at
com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.modifyAttributes(Partial
CompositeDirContext.java:161)
at
javax.naming.directory.InitialDirContext.modifyAttributes(InitialDirContext.
java:146)
at testEmbeddedLdap.main(testEmbeddedLdap.java:30)
Here is my testing code:
<PRE>
import java.util.*;
import javax.naming.*;
import javax.naming.directory.*;
public class testEmbeddedLdap {
public static void main(String[] argv) {
Hashtable env = new Hashtable(11);
env.put(Context.INITIAL_CONTEXT_FACTORY,
"com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, "ldap://localhost:7001");
env.put(Context.SECURITY_AUTHENTICATION, "simple");
env.put(Context.SECURITY_PRINCIPAL, "uid=myAdministrator, ou=people,
ou=myrealm, dc=mydomain");
env.put(Context.SECURITY_CREDENTIALS, "myAdministrator");
try {
DirContext ctx = new InitialDirContext(env);
String
sUser="uid=myRegularUser,ou=people,ou=myrealm,dc=mydomain";
String sOldPassword="myRegularUser";
String sNewPassword="newpassword";
for (NamingEnumeration ae = ctx.getAttributes(sUser).getAll();
ae.hasMore(); ) {
Attribute attr = (Attribute)ae.next();
System.out.println("attribute: " + attr.getID());
ModificationItem[] mods = new ModificationItem[2];
Attribute mod0 = new BasicAttribute("userpassword",
sOldPassword);
mods[0] = new ModificationItem(DirContext.REMOVE_ATTRIBUTE,
mod0);
Attribute mod1 = new BasicAttribute("userpassword",
sNewPassword);
mods[1] = new ModificationItem(DirContext.ADD_ATTRIBUTE, mod1);
ctx.modifyAttributes(sUser, mods);
ctx.close();
} catch (NamingException e) {
e.printStackTrace();
</PRE>
"Neil Smithline" <[email protected]> wrote in message
news:[email protected]...
Two things. First, I'm not exactly sure what password you are trying to
change. The LDAP server's password or a user's password in the LDAP
server. Second, could you please post a stack trace.
Thanks - Neil
K Wong wrote:
I am using (javax.naming.directory.DirContext.modifyAttributes) to
change
password to our development Weblogic 7.0 embedded LDAP.
I login as the system administrator (a user in the administratorsgroup),
but always gets the javax.naming.NoPermissionException - InsufficientAccess
Rights.
What user should I use? Any help will be appreciated.

Hai,
This condition based execution requires - javascript coding.
In miscelleaneous tools bar, you have an option of SCRIPT_ITEM writer tool, drag the tool into your WAD layout, and select the properties , choose the editor option and paste your coding. that's it.
Alternate option :
in your web application design layout , you will fine XHTML coding editor , there you need to write coding and execute the same.
Hope this will help to you.
Assign Points if its really useful.
Cheers !!!
Bye
Regards,
Giri

Creation of Change document for HR Assignemnt Infotype in Transaction- CR02

Hi,
I have to create change document for HR Assignment in Transaction CR02.
I have gone thru the documentation available in SAP help.
Please help me if anybody has worked on it.
Thanks & Regards,
Alok.

Hi Raja,
I didn't quite understand what you mean by creating/changing data using transaction codes, because within SAP MDM 3.0 you are in a portal environnment and don't work with transaction codes.
General remark: Information on the up-to-date MDM 5.5 is provided in the Service Marketplace. For an overview of MDM 5.5, see also http://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/mdm/capabilities provided with sap mdm 5.5.pdf.
Kind regards, Markus

Change Documents for Reservation

Hi Masters
How to find the change documents for the reservation?.I have Checked it in MB22 and tables CDHDR and CDPOS.I found nothing.Is there any other T code for finding this?
Regards
Mohan

Hi
Thank you for your reply
I checked with the Tcode TLR5.I have given user name only and i am not getting the change documents.Could you please tell me what i am missing?
Regards
Mohan

Change documents for DEFAULTS tab in su01

Hi all!!
Somehow SPOOL CONTROL option-> output device for a user changed(under SU01--> DEFAULTS tab) in my Production system.
Question> can i find out change documents for DEFAULTs TAB in SU01 for a user ID?

In fact I was believing the same.
I was wondering if we could add one new column to sap standard tables which will store any change documents specific to defaults tab for users. But no idea how lengthy this could be!!
Any suggestions???
Please do reply if there is any other option to find.

Change documents for reference user (de-)assignment

Similar Messages

Maybe you are looking for