Changed roles for given timestemp

HI All,
I need to find a way to find if some of the user roles are changed i.e. deleted or add for time
range ,there is FM CHANGEDOCUMENT_READ  but how i can use it for roles ?
for example i want to know which roles are changed for the last 2 days .
Regards
Chris

Try to use fm
  call function 'CHANGEDOCUMENT_READ_RANGES'
    exporting
      objectclass_tab            = i_objectclass_i
      date_until                 = p_datum "<<<
      time_until                 = p_time "<<<
    tables
      editpos                    = i_cdpos
    exceptions
      no_position_found          = 1
      wrong_access_to_archive    = 2
      time_zone_conversion_error = 3
      others                     = 4.

Similar Messages

  • Changing role for users

    Hi,
    in forms 10g , it's possible to change the role for user
    REVOKE role_name FROM :USERNAME;

    This should work, but the user revoking a role from a different user needs to have the admin option of this role.
    When creating a role, by default the "Admin option" for that role should be enabled for the user creating the role.
    Normally, this would be the schema-owner of the application objects ...
    A user holding the "admin option" may grant a role to a different user and grant the other user "admin option" on this role...

  • Fetching PO changes relevant for given version

    Hi Gurus,
    We activated Version management for Purchase orders & all relevant settings are done to capture the changes & display them on PO print.
    But the problem is, when we print the PO, changes done with all versions are being displayed every time.i.e.
    lets say there is PO no: XXXX. & initial version no:0
    then we did some changes to PO & now version no:1
    then further modified the PO & now version no:2.
    When we print the PO displaying changes, system is showing all changes done from version no:0 to 2. Actually system should show only changes between version no 1 & 2.
    we are using SAP FM:ME_READ_CHANGES_EINKBELEG
    please suggest a logic to fetch changes between latest version to last version.
    Thanks in advance

    Raghava,
      Yes Its Possible to print last version 2 in PO .
      you can use the table EREV In this Table You Can Find The Both Field EDOKN PO No. & REVNO       Version.
      Use on this you can wright the query and sure got the last version only in PO Printing.
      You Can take help of Your ABAPER They can help you
                                                                                                                                                                                                                                                                                                             SELECT * FROM EREV INTO TABLE IT_VERSION WHERE EDOKN EQ PONO.
    SORT IT_VERSION BY REVNO DESCENDING.
    DELETE ADJACENT DUPLICATES FROM IT_VERSION COMPARING EDOKN.
    Hope Its help full for you

  • I have 2 point security for AppleID. My iPhone 4S is listed as my trusted phone to text. No tel. no. is given. I am updating to iPhone 6Plus with same tel. no. Do I need to change anything for the sign in verification?

    I have 2 point security for AppleID. My iPhone 4S is listed as my trusted phone to text. No tel. no. is given. I am updating to iPhone 6Plus with same tel. no. Do I need to change anything for the sign in verification?

    Of course You can also add your iPhone telephone # as a trusted device.
    This way when you insert your SIM card into any phone, Apple will automatically recognize your cell phone # as a
    trusted device (may be handy if iphone breaks but you insert SIM card into another phone).
    HOWEVER:
    Having also your iPhone as a trusted device, is convenient if you travel and use a different SIM card
    at destination. This way you can still use the iphone for verification, even though you are using a different
    phone #.
    Regards

  • Buyer roles for monitoring SUS vendor changes

    Hi,
    We are looking for EP and SUS roles for below scenario
    When supplier admin logs in to SUS via EP portal, he can modify his /
    her company (as part of supplier self service) data such as name,
    contact info etc. Then, buyer can monitor changes done by supplier,
    then he can transfer the changes to ECC. We were looking for roles in
    EP and SUS that will allow buyer to monitor the changes, we tried SRM
    admin role, but it was not pulling vendors modified in SUS. I can
    monitor changes done for Vendor by buyers in SRM via application
    monitor. But, we are having difficulty in identifying a role to monitor
    changes done by supplier in SUS.
    Will you please suggest which EP (front end) and SUS (Backend) roles
    need to be used? Appreciate your help!
    Thanks,
    Chandra

    Barbara,
      You can achieve this by building a custom program to add additional entries in VENMAP table for the same partner_GUID for the new backend system data.
    SG

  • Price change report for  a given date range in inforecords

    hi,
    Can any body suggest how we can get price changes in inforecords for given date range. is there any standard sap tcode or  fuction module.

    Hi,
    If you are referring to the changes in the condition record (for eg. for PR00), then you may go through the foll path:
    Execute VK13 for any condition type - once inside the detail screen, from the menu path, choose Environment -> Changes -> change report. This will take you to a new selection screen where you can define the period you want to see the change record as well as the condition type for which you want to track the changes. Beware, this is a complex report for SAP and it will take definitely longer time to complete. So, it is better to specify short time periods and specific condition types and execute this in background.
    Hope, this helps!
    S. Siva

  • Changes like password and removal of roles for all users

    Hi
    i want to change password for all users and remove single roles from all users.When i am doing this in SU10 changes are not reflecting for users.Please help reg this
    Vinod

    Me too...I have never been able to remove roles from multiple users with SU10.  I don't know if it's a bug or (more likely) just a confusing screen, but in 4.7 it never worked for me.

  • Lock Role for Changes till the transport is released

    Issue : since roles are managed by multiple security administrators, changes are moving against the sequence.
    We have multiple security administrators, is there a way to lock a role for changes until the task/ req is released.
    Example Scenario :
    Security admin 1 : if there is a change request to add SU01 to the role: Z_TESTROLE, Security admin adds it and creates a Change request but does not release it.
    Security Admin 2 : the security admin 2 will get a Change req for the same role Z_TESTROLE to add a tcode PFCG to it. Security admin 2 does his job and moves his transport now even though the first transport does not move the change made by the first security admin moves with the transport for the second admin.
    We have multiple security administrators, is there a way to lock a role for changes until the task/ req is released.

    Hi all,
    Thanks for your responses.we follow a change procedure but I guess its just needs to be refined. Everybody figured out that this is a coordination issue but I was asked to research on any technical ability to handle this.
    Here is a brief overview of our process :
    1) BPO approves the change
    2) Role owner support manager approves the change
    then the Change request comes to 3)Security Manager for her approval.
    I feel from Sox prespective the 3rd approval in not manadatory.
    I'm I correct ??? where can I find Sox guide for SAP ?
    Recap of the incident:
    1)A change ticket is created for the t-code creation and a task is created for the role in which this report is to be added.
    State I role Z_TESTROLE  is with ZMMR0025
    After adding the new report ZMMR0055 the old report ZMMR0025 is removed.
    State II
    The role Z_TESTROLE has tcode ZMMR0055
    now this is tested in development system by the requestor.
    Before this goes into PRD via QA a newsflash is sent to all the endusers (so that they know which t-code to use)
    Meanwhile if another security administrator works (suppose adds a new tcode or changes an authorization)  on this while the role is in state II changes made by Admin 1 are transported along with the second change.
    State II + new changes = State III
    When the role reaches PRD in state III result is the end user losses access to the required functionality ZMMR0025 before ZMMR0055 is made available.
    I hope I’m clear , please let me know if I need to be more specific on any part.
    I appreciate your help.
    regards,
    Salman.

  • BAPI for changing roles

    Hi guyz,
    I want to deactivate few roles for some time & for that I want to set the "Valid To" date as 'sy-datum - 1' for few roles through SU01.
    One option to do this is through BDC & other is using BAPI.
    Can somebody please tell me if there is any BAPI to do task.
    Thanks
    Ankit

    > Check this function module.
    > SUSR_USER_SURFACE_MAINT_ATTRIB & check the table agr.
    Hi Bipin,
    Is there any BAPI to Display roles for a given tcode?please reply fast.

  • Partner Roles for Ship-To/Bill-To in BAPI SalesOrder

    Hi,
    I am currently developing a .NET web application that is using BO SalesOrder (e.g. BAPI Bapi_Salesorder_Simulate).
    My problem is that I need to list all defined partner roles of a customer (debitor) to give an appropriate selection for the BAPIPARTNR as a SalesOrder parameter
    e.g. (specify a Ship-To Address)
    [BAPIPARTNR].Partn_Role = "WE"
    [BAPIPARTNR].Partn_Numb = "<SAPCustomerNr>"
    In the web application I want to list all pre-definied partner roles for "WE" of the given customer to be able to set it as "<SAPCustomerNr>" in the BAPI parameter.
    This seemed like a standard requirement to me, but I could not find any BAPIs/RFCs to realize this. Does anybody have a suggestion ?
    Thanks for a short reply,
    Andreas Koschinsky

    Hi again Andreas,
    I get the hint, I have included the source together with the corrections you would need to make to get it working in your system (no warranty calls please!).
    FUNCTION CUSTOMER_PARTNERFS_GET.
    *"*"Local interface:
    *"       IMPORTING
    *"             VALUE(IV_KUNNR) LIKE  KNA1-KUNNR
    *"             VALUE(IV_VKORG) LIKE  E1KNVVM-VKORG
    *"             VALUE(IV_VTWEG) LIKE  E1KNVVM-VTWEG
    *"             VALUE(IV_SPART) LIKE  E1KNVVM-SPART
    *"       TABLES
    *"              ET_E1KNVPM STRUCTURE  E1KNVPM
      DATA  LV_ACCOUNT_GROUP               LIKE KNA1-KTOKD.
      DATA  LS_E1KNVPM                     LIKE E1KNVPM.
      DATA  LT_E1KNVPM                     LIKE E1KNVPM OCCURS 0.
      DATA  LT_KNVP                        LIKE KNVP OCCURS 0.
      DATA  LS_KNVP                        LIKE KNVP.
    >>> BW Omit this section <<<
    *     Get account group of the current customer
      SELECT SINGLE KTOKD FROM KNA1 INTO LV_ACCOUNT_GROUP
                          WHERE KUNNR = IV_KUNNR.
      IF SY-SUBRC NE 0.
    *     The customer is new so prepare to create roles.
        PERFORM CUSTOMER_CREATE_R3FUNCTIONS TABLES LT_E1KNVPM
                                            USING  IV_KUNNR
                                                   LV_ACCOUNT_GROUP.
      ELSE.
    >>> Up to here <<<
    *     The customer exists and has an account group.
    *     so read the knvp to get all available functions.
        SELECT * FROM KNVP INTO TABLE LT_KNVP
                           WHERE KUNNR = IV_KUNNR
                             AND VKORG = IV_VKORG
                             AND VTWEG = IV_VTWEG
                             AND SPART = IV_SPART.
        IF SY-SUBRC = 0.
    *     data available so read them
          LOOP AT LT_KNVP INTO LS_KNVP.
            MOVE-CORRESPONDING LS_KNVP TO LS_E1KNVPM.
            PERFORM PARTNER_NUMBER_EXTRACT(SAPLVV01) USING LS_KNVP
            CHANGING LS_E1KNVPM-KUNN2 .
            APPEND LS_E1KNVPM TO LT_E1KNVPM.
            CLEAR LS_KNVP.
          ENDLOOP.
    >>> BW Omit this section <<<
        ELSE.
    *      create new roles according to the delivered salesarea
          PERFORM CUSTOMER_CREATE_R3FUNCTIONS TABLES LT_E1KNVPM
                                              USING  IV_KUNNR
                                                     LV_ACCOUNT_GROUP.
        ENDIF.
    >>> Up to here <<<   <<< - moved this line in change
      ENDIF.
      ET_E1KNVPM[] = LT_E1KNVPM[].
    ENDFUNCTION.
    That should get you going.
    Cheers,
    Brad
    Oops! Just made a small change to ensure that the if statement was correctly closed.
    Message was edited by: Brad Williams

  • Error during create CR for MDGC "Enter a relevant role for creation of customer master data"

    Hello Experts,
    I am unable to create a Customer CR in 'MDG 6.1 Customer UI' , the UI throws an error saying "Enter a relevant role for creation of customer master data".It looks like it is expecting me to mention the BP role ( like FLCU01 Customer or FLCU00 FI Customer ) , but I don't see that BP role section in the Customer UI to mention .
    While creating the vendor CR  , I am able to enter the BP role ( like FLVN01 vendor or FLVN00 FI Vendor ) in the UI BP Role section.
    Following are the UI's for Customer and Vendor
    Customers BS_OVP_BP: BS_OVP_CU > OVP: BS_CU_OVP - I do not see BP role section here.
    Vendors BS_OVP_BP: BS_OVP_SP > OVP: BS_SP_OVP - This is working fine  , I see BP role section here.
    Please advice what I am missing here , what should I do for the successful CR creation . Should I change the UI for Customers or do I need to do anything in CVI configuration.
    Thanks,

    Hi Abdullah,
    You were right in the first place the UIBB is missing  , the UIBB 'Role' was present in the 'Search Customer' page but not available in the 'Create Customer CR' page , so I created the 'Role' UIBB again and was able to create the CR now . Not sure how it got deleted in the first place , is there any options where we reset the UI screen to the default initial configuration
    But after approving the CR , only the Business Partner BP is getting created and the Customer is not getting created . Not sure what might be the issue now. Is there any config that tells to automatically create customer when BP is created. I was able to create Vendor using the create Vendor CR before.
    Thanks

  • Usage of Company code field in the Change Request for Company

    Hi,
    Would like to know the usage of - Company code field in the UI for Change request for Company.
    1. If a new Company is created, can i assign the company code directly in the UI, will the assignment also replicated to backend in this case?
    2. In case of new Company creation, is it possible for multiple company code assignments?
    3. Is it possible to to pick the existing Company from the F4 list in the CR and assign the company code in the CR? How about the replication work in this case?
    Please share your comments, Thank you.

    Thanks Sanjay.
    Just to summarize and a bit more specific, here is my understanding:
    1. (a). You have mentioned that we can assign new company code also - does this mean i can select            a company code which is not in the F4 list? In such case, how will be the assignment                   replicated? It should ideally create a company code in the backend before the assignment is           processed.
        (b). Usually, if a new company code is created in backend, i need to load that in to MDG tables                 such that it will be active in MDG F4 list, for Company assignments in the Change request.
    2.      Understood
    3.      In the Change request, if i pick existing company from F4 values and edit company related data,          it will be replicated accordingly.
             In the same CR, if i give some value in the company code data, the replication will result in one          more assignment added to the company, so as on date, SAP has given the option of only                    additional assignments to the existing assignments.

  • Change logs for EP7.0

    Hello Gurus,
    How do we find change logs for user creation, role assignements etc in EP 7.0? Thanks in advance.

    Hai,
    Please check the below links, will help...
    http://help.sap.com/saphelp_nw04/helpdata/EN/52/671285439b11d1896f0000e8322d00/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/EN/51/f6f9e4d3a30b46966d3b7e650cb2dd/content.htm
    Regards,
    Yoganand.V

  • IDOC trigger using Z change pointers for standard SAP table

    For IDOC trigger, is using custom change pointers on standard SAP master data tables, a good idea? A seasoned abaper told me "it will mess with the standard" and further told to go with scheduled job.
    So, for example, say that my data for table T001K is updated via transports in PRD and I need to transfer this updated data via IDOC to an external system. Since there is no standard message type for this data, I will create a new one. Further, I will create a new change pointer for table T001K (it already has six fields with their data elements activated for Change Documents). Then I link the message type and the new change pointer. And so on an so forth. I have followed the procedure given here:SAP Tips: A to Z of Custom Change Pointer
    Now, the question is, will this be a good idea to capture data and trigger IDOC? Or a batch program with calls to standard FM to read CDHRD/CDPOS be a more suitable option.
    I need to know if a near instantaneous data transfer (and an effecient one as far as the system performance and reliability is concerned) can be acheived. If there is any other way of doing this, I am not aware of it!
    Any one has any input/experience on this?

    Hi Viktor,
    I think the batch program approach would be a good solution as the by this way you are taking matter into your own hands rather giving control to the SAP framework because you may have to test out the other approach as to how the standard SAP framework is behaving for custom change pointers.
    Thanks,
    Ravi

  • Is it possible to change role's sort priority dynamically?

    Dear repliers,
    I want to implement menu personalization.
    I mean i want user to change their menu structure dynamically in webdynpro java.
    Is there any way or code to do this?
    If it isn't, is there any way to change role's sort priority dynamically in webdynpro java?
    Please let me know if u have any information about it..
    Yours Regards,
    JS Park

    we can change pages/workset/roles sort priority dynamically. But it will affect all users. There only one copy of pages/workset/roles exists.
    The work around could be... You can develop a custom application in which you have predefine set of possible values.
    example :
    role (sort Priority)
    1) employee (100)
    2) Manager (200)
    3) Sales Manager (300)
    Create copy of Each role with different sort priority for all roles
    for eg.
    1) Employee (200)
    2) Employee (300).
    And in your web dynpro application assign roles according to users choice.
    But It would be difficult to maintain roles. Because if you need to perform one change you need to apply them to their copies as well.

Maybe you are looking for