Check status for Derived role generation
Hello,
We are trying to place a check to validate and ensure that the child roles are generated using "generate derived role" (CtrlShiftF4) from the parent role. However, i'm not able to find an appropriate function module or table field via which this can be checked.
Are there any options to check this?
Thanks in advance
Vijaya
Hi,
You can find the status of the roles whether the profile is generated or not .. with PFCG only.
PFCG
-> Utilities (M)
-> Overview Status (CtrlShiftF11)
Give the role names (for which you need to know whether they are generated or not)
Tick/select - Only Display Roles with Errors and Warnings
-> Execute
It will display all the role names and profile name and their status green generated, yellow not generated. If you copy all data and paste it in the excel it would be like below...
ZS_ECC_NPR_AFM_TESTING_GL @IC\QSingle Role@ 11/20/2011 12:47:32 VKUMAR @5C\QNo menu exists@ @5D\QCurrent version not generated@ ZNPRAFMTES @5D\QUser master record not completely updated@
ZS_ECC_NPR_DATABASE_ADMIN_GL @IC\QSingle Role@ 08/02/11 18:02:26 MMAKUCH @5C\QNo menu exists@ @5B\QAuthorization profile is generated@ ZNPRDTBADM @5C\QNo users are assigned@
Hope this helps you.
Thanks,
Vinod
Similar Messages
-
Check status for Shopping Cart to include F-53 postings
Dear SRM GURUS
we are following a classic scenarios and SRM version 4.0 where in we create a shopping cart in SRM and a purchase Req is created in backend and based on that we create a Purchase Order and do a Goods receipts and Invoice Booking in MIRO in R3.
When we check the status of shopping cart we are able to view all in SRM check status for shopping cart.
Now my requiremnt is that when after MIRO in R/3 we run F-53 for payement to vendor.
Whether this can be displayed in the shopping cart check status that as to when actual payement was made to the vendor through F-53.
regards,
Nimish ShethF-53 transaction(R/3) status in SRM
-
DB table for Derived Roles and Parent Roles
Hi Expart,
In which DB table the Derived Roles and Parent Roles are store .that is i need to find out the derived role and parent Role .i have completed the Complex and single role by table AGR_AGRS
But i have to find out the table for Derived Role
Plz help me to get those table
Thanks in advance
TarakIt's the same table as for the master role: AGR_DEFINE (field PARENT_AGR is filled for derived roles).
~As from Forum -
Derived Role generation in BRM
Hi,
In BRM while creating a parent role, corresponding derived roles are created and sent for approval.
Post approval, the roles are generated, in the foreground confirmation message states that Parent + derived roles all are successfully generated.
In the backend system the derived role's "Authorization" tab is with a status yellow and profile is not generated. However, the derived role has all the relevant values in it and the last changed by / date is appropriate to reflect the changes done.
Can some one please point to a solution to this? We have raised an OSS for this about a month back and applied suggestions from SAP without any result.
Version - GRC 10.0 SP10
Thanks,
SammukhHello Andrzej
Yes, the derived roles are in status complete. After generation of all the roles (parent+derived) the derived roles move to the maintain test cases phase. Here we maintain the test cases and close the methodology. Post this the derived roles' status become complete.
Yes, we did try re-generating them manually from mass generation from GRC. The result is same. In fact the surprising thing is following:
1. Derived role is complete and in not generated state.
2. Mass generated from GRC - still not generated.
3. Manually generated in backend system - roles are now generated.
4. Mass generated from GRC again - status that was generated from point 3 before changed to not generated again.
Looks like the generation from GRC itself is the problem, but we are unable to pin-point the issue.
Thanks
Sammukh -
Changing Organization level for derived roles
Dear All,
Below is my query:
When there is any requirement to change the organization level of a derived role, we go to the role and change the organization level manually.
We have derived our roles, based on the units(company codes).
Now we have a scenario, where we need to add one unit in a particular derivation of all roles.
Please suggest if there is any way of updating the organization level in mass for a specific derivation.
Regards,
Reshma Vijayan.Colleen Lee wrote:
At least with this option you are using the PFCG functionality and not hitting the tables directly
Hi Reshma, Colleen,
Some additional warnings about manipulating the downloads:
The downloadfile is a fixed record length text file, do not mess up the data positions.
Be aware of case (upper/lower) when manipulating the file.
Make sure you do a unicode download to preserve special characters in the menu texts.
There are very, very few checks done on the file contents when uploading again. It will allow you to pollute your AGR* tables in such a way you'll need an ABAP-er or SQL-savvy colleague to clean up the mess. It is very close to manipulating the tables directly.
I once managed to get entries into AGR_1251 which didn't show up in PFCG and wouldn't even disappear from the tables after I had deleted the roles in question.
And yes, I still use this method, but I won't advise it to anyone I cannot personally train to be aware of the pitfalls ;-)
Jurjen -
RFC FUNCTION/BAPI for derived Roles (PFCG)
Hi all,
I have found many RFC functions for Users and Roles management but nothing for create derived roles.
Any idea for creating derived roles from external applications ?
Thanks
AndreaHi Andrea,
check the link below.
automate update profiles by abap (without PFCG)
Re: automate update profiles by abap (without PFCG) ?
Also check if this is helpful
BAPI_JOBROLE_CLONE
Regards,
SuryaD. -
Multiple Domain Controllers, different sites, checking status for replication
Good day,
How can you see what DC has the current "master" or most up to date version? If I have 3 DCs and 3 different sites, and I add a new user at one of the sites, then that site has the newest master. How can I check what version of the Global Catalog / ADUC version / revision they each have?
Is there a CMD / Powershell script to do so?
This topic first appeared in the Spiceworks CommunityNew Delhi: When you fall ill or want to seek medical advice, who do you turn to? Your family doctor or the neighbourhood medico, of course. But, experts say, you may now have another option: social media.
WhatsApp, Twitter and Facebook, among others, are helping doctors to reach out to patients, guide them for treatments, provide counselling post-surgery and create close-knit support communities, as more Indians join social media platforms.
"We are frequently using WhatsApp, Skype and Viber to reach out to patients. Currently, we have over 180 patients connected via WhatsApp and over 30 through Skype who are receiving online rehabilitation training," says Dr H.S. Chhabra, medical director and chief of spine service at the Indian Spinal Injuries Centre in New Delhi...Read More
Read More -
Checking Status for Weblogic 10.3
Can anyone suggest me how to check the status of wls 10.3 without using ps-ef or WLST or weblogic.Admin, do we have any other flags or methods were the status could be returned as RUNNING or ADMIN
Hi Eden,
If you dont want to use WLST, weblogic.Admin or "ps -ef" tools to get the Server State then you can try using MBeans (JMX coding) to get the Server State..like: http://weblogic-wonders.com/weblogic/2010/06/22/getting-all-server-state-info-in-9-x-jmx-style/
Thanks
Jay SenSharma -
SRM 7.0 Modify POWL for shopping cart check status screen
HI Experts,
The standard settings in check status for SC in SRM 7.0 is to display the sc with item level. This causes the SC number to be repeated (for no. of items in SC) and all links open the same SC in a new window.
We want to display only the header of SC and no item data should be displayed in check status.
I tried
SRM Server->Cross-Application Basic Settings->POWL and Advance Search->Adjust POWL Layout,search criteria and push buttons----choose feeder type SAPSRM_FEEDER_SC -double click field catalog-choose ITEM_DESCR, ITEM_NO, ITEM_STATUS---CHOOSE display and select HIDDEN COLUMN radio button.
This hides the corresponding columns but duplicate records are still showing.
Can some one please help?
Thanks,
AnubhavHi NM,
After performing the steps in first post for hiding item relevant fields you can filter the data displayed in the result by using the BADI /SAPSRM/BD_POWL_CHNG_SEL_RSLT .
In the BADI Delete the records from result internal table where SC num is repeated so that thers only one entry for each SC.
Let me know if it works for you or not.
BR,
Anubhav -
'Protecting' your derived roles from being maintained on object level
I'm redesigning an authorization concept that has been polluted in the past by maintaining object level values in the derived roles instead of the master roles.
Now I would like to build in a kind of warning or authorization so that future role administrators can adjust master roles on object level, and derive the roles from the master, but are not allowed (or get a warning) to change object level values in the derived roles themselves.
I'm looking for a warning similar to the warning you get when you are trying to change an organizational level value within the object rather than change the orglevel table.
I have looked for entries in table PRGN_CUST, but found none.
Also, the authorization checks for deriving roles [seem to be similar|http://help.sap.com/saphelp_nw04/helpdata/en/2b/84653f1b76b11ae10000000a114084/frameset.htm] to actually maintaining a role, so no distinction can be made here.
Knowing al this, II think the answer is: 'no, this is not possible' but if you have dealt with the same problem successfully, please let me know.
Kind regards,
Lodewijk BorsboomHi Lodewijk,
There are exit paths in SU01 and PFCG which might (have) help(ed) but SAP removed the documentation on them because as (to my knowledge) as the code was integrated into BAPIs and org. management these exits (like many which have gone before them) caused no end to confusion over time.
I heard that they would at some ponit be replaced by BADI's but I guess the same problem exists there and I have to date not seem any of them released.
I have the documentation if you are interested but which release are you on? I suspect that SAP might even remove the exit coding anyway.
As the other's have stated, I would also go for a detective control. You can always wipe the mistake out again from the master and this will let you know that someone is not sticking to the rules or doesn't understand the concept.
This is also an advantage when compared to an error message or warning which only they see...
Cheers,
Julius -
SC should disappear from check status transaction
Hello Colleagues,
Can you please answer me the below query.
ISSUE:
Employee creates SC.
SC goen into sourcing cockpit.
Purchaser completes sourcing and creates a contract.
SO I feel for the employee his job is complete.But still i can see the SC in the check status for the employee.
This does not make any sence and is very confusing for the employee.
It makes sence for the purchaser to see the SC in check staus but not employee.
How can i restrict the display of SC'c with the contract created out of it..not visible in the check status for the employee.
Looking forward for your valuable inputs.
Thanks & Regards,
Kavitha.Hi
Hi
My question what the end user can do with the contract number information. please expain the customer what ae the functionalit he may miss if check status hidden.
There are so many functionality of Check status you may miss if you hide.
If it is very critical business requirement from customer you can think of to hide only follow on document folder rather than whole cart.
In the Check Status application, you can check the status of your shopping cart and check the status of the individual items in your shopping cart.
You can search for your shopping cart using various criteria, such as shopping cart name, creation timeframe, or status. You can search using the following extended statuses.
You can not print a cart.
See check status functionalities of shopping cart
http://help.sap.com/saphelp_srm30/helpdata/en/8b/4fa9495db211d2b404006094b92d37/content.htm
so if your shopping created a follow on document
BUS2000113 - business object - Contract
then you are trying to protect acesss for this transaction
bbpsc04
or
try to hide a follow on document instead hiding whole cart.
but try to convince the user the important functionality of the Check status.
br
Muthu -
ERM 5.3 (SP12) Derived Role Update Problem
Hello Experts,
I have a question.
We have a master role/derived role set up in the back-end system. We are trying to update a master role and its derive roles in ERM via PFGC sync.
Our problem:
We can add a transaction to a master role no problem in ERM via PFCG sync (adding a transaction code in the back-end and sync to ERM) However, we are unable to update the transaction for derived roles (nothing happens for derived roles in ERM).
If I am correct, we don't have to add a transaction to each derived role manually, and we should be able to update derived roles automatically once we update a transaction in a master role.
Please just note that we successfully imported all the master/derived roles from our back-end system, and we are not try to create a derived role in ERM at this time. All we want right now is to update a master role and its derived roles in ERM via PFCG sync.
If you can, please advice.
HMGo to the TXT file , cut the last line from the AGR_1252 (rtable and insert it to the top of the lines ( AGR_1252) , and reimport it will work I had the same problem in my previous implementation.
try for one parent & child role
This is a known problem with SAP they will rectify it in SP12/SP13 or so -
Hi All,
Can any one please tell me which table store the information about derive role.
Thanks in advance
~JohnHello John
It's the same table as for the master role: AGR_DEFINE (field PARENT_AGR is filled for derived roles).
Regards
Uwe -
Generation of derived roles when transported
Hello Everyone,
We are on ECC6.0 and I've come across a scenario where I've created certain number of derived roles from a parent role and generated the parent and derived one's from the parent role in PFCG and created a transport request. But,
When I got them imported (SCC1) to a different client on the same box I can see that the authorization tab is still in yellow in all these derived roles,they do contain the same profile name in the authorization tab in PFCG as from the original client they were created in and I would like to know the reason why these roles under the auth.tab are in YELLOW and need a regeneration of profile? I remember doing it previously where I did not regenerate the profiles for the roles when they are imported/transported to a different client.
And the status text in SUPC says " no current profile".
Any ideas/inputs are much appreciated.
Regards,
RajHi,
There may be more that one cases.
What are the roles you included into the Transport request? You should include all the Derive roles along with the parent roles ideally. Also, I hope you have checked the authorization data for the derived roles in the development before transport.
Other option could be the system change options for appending data in the target system.
Please provide more information and also try to search for SAP Notes if there any with this kind of issues.
Regards,
Dipanjan -
Changing the dropdown values for one of the fields in CHECK STATUS query
Hi,
We are on SRM 7.1.
In the CHECK STATUS transaction,in the selection screen(QUERY),there is a field called "ROLE" which has teh dropdown values of "APPROVE BY ME","REJECTED BY ME" and "GOODS/SERVICES DELIVERED TO ME".Is there any way some of these drowpdown values can be removed?
Please advise.hi nmsrm1234
i have a document for this issue.
but i don´t find this document in internet. it is called : CUSTOMER-SPECIFIC UI ADJUSTMENTS IN SRM 7.0 WEBDYNRPO ENVIROMENT / META DATA HANDLING CONCEPT.
if you can find it, you will get an idea to resolve this issue, if you will no have luck, please get me your mail, and i will send you the document.
regards.
Maybe you are looking for
-
How can you tell if a template is locked?
Hello, how do you know if a template is locked? Can the whole template be unlocked if so, and if so, how or where do you normally do this in the template? What do you look for? Thanks
-
Windows Vista Oracle 10g Express Edition ODBC problem
Hi, I am running my Oracle 10g Xpress Edition locally on Windows Vista Enterprise Edition. I am trying to create an ODBC connetion to the local XE using Window ODBC utility. I selected the Oracle in XE driver to create the connection, when I test it
-
Generating Excell Sheet using Reports 9i
Hello, I wanna know how can I do to generate one excell sheet using reports, without use the option that4s generate text file using tab. I wanna know if someone have example codes, or library4s. Thanks, Paulo Sergio
-
Hello All, I have custom ribbon button on editform/dispform in my list. I want to display current list name on button click of this custom ribbon button. How to achieve it?? Thanks in advance..!!
-
How to run a servlet in eclipse using "SAP Portal Plugin" ( not tomcat)
Hi All I'm just trying to create a simple servlet in Eclipse using SAP Portal Plugin but I couldn't find any document. I have an eclipse 2.1 EP6 SP2 patch 5 SAP Portal Plugin I created a Portal Application Project. I created a simple servlet and save