Check status for Derived role generation

Hello,
We are trying to place a check to validate and ensure that the child roles are generated using "generate derived role" (CtrlShiftF4) from the parent role. However, i'm not able to find an appropriate function module or table field via which this can be checked.
Are there any options to check this?
Thanks in advance
Vijaya

Hi,
You can find the status of the roles whether the profile is generated or not .. with PFCG only.
PFCG
-> Utilities (M)
-> Overview Status (CtrlShiftF11)
Give the role names (for which you need to know whether they are generated or not)
Tick/select - Only Display Roles with Errors and Warnings
-> Execute
It will display all the role names and profile name and their status green generated, yellow not generated. If you copy all data and paste it in the excel it would be like below...
ZS_ECC_NPR_AFM_TESTING_GL     @IC\QSingle Role@     11/20/2011     12:47:32     VKUMAR     @5C\QNo menu exists@          @5D\QCurrent version not generated@     ZNPRAFMTES     @5D\QUser master record not completely updated@
ZS_ECC_NPR_DATABASE_ADMIN_GL     @IC\QSingle Role@     08/02/11     18:02:26     MMAKUCH     @5C\QNo menu exists@          @5B\QAuthorization profile is generated@     ZNPRDTBADM     @5C\QNo users are assigned@
Hope this helps you.
Thanks,
Vinod

Similar Messages

  • Check status for Shopping Cart to include F-53 postings

    Dear SRM GURUS
    we are following a classic scenarios and SRM version 4.0 where in we create a shopping cart in SRM and a  purchase Req is created in backend and based on that we create a Purchase Order and do a Goods receipts and Invoice Booking in MIRO in R3.
    When we check the status of shopping cart we are able to view all in SRM check status for shopping cart.
    Now my requiremnt is that when after MIRO in R/3 we run F-53  for payement to vendor.
    Whether this can be displayed in the shopping cart check status that as to when actual payement was made to the vendor through F-53.
    regards,
    Nimish Sheth

    F-53  transaction(R/3) status in SRM

  • DB table for Derived Roles and Parent Roles

    Hi Expart,
    In which DB table the Derived Roles and Parent Roles are store .that is i need to find out the derived role and parent Role .i have completed the Complex and single role by table AGR_AGRS
    But i have to find out the table for Derived Role
    Plz help me to get those table
    Thanks in advance
    Tarak

    It's the same table as for the master role: AGR_DEFINE (field PARENT_AGR is filled for derived roles).
    ~As from Forum

  • Derived Role generation in BRM

    Hi,
    In BRM while creating a parent role, corresponding derived roles are created and sent for approval.
    Post approval, the roles are generated, in the foreground confirmation message states that Parent + derived roles all are successfully generated.
    In the backend system the derived role's "Authorization" tab is with a status yellow and profile is not generated. However, the derived role has all the relevant values in it and the last changed by / date is appropriate to reflect the changes done.
    Can some one please point to a solution to this? We have raised an OSS for this about a month back and applied suggestions from SAP without any result.
    Version - GRC 10.0 SP10
    Thanks,
    Sammukh

    Hello Andrzej
    Yes, the derived roles are in status complete. After generation of all the roles (parent+derived) the derived roles move to the maintain test cases phase. Here we maintain the test cases and close the methodology. Post this the derived roles' status become complete.
    Yes, we did try re-generating them manually from mass generation from GRC. The result is same. In fact the surprising thing is following:
    1. Derived role is complete and in not generated state.
    2. Mass generated from GRC - still not generated.
    3. Manually generated in backend system - roles are now generated.
    4. Mass generated from GRC again - status that was generated from point 3 before changed to not generated again.
    Looks like the generation from GRC itself is the problem, but we are unable to pin-point the issue.
    Thanks
    Sammukh

  • Changing Organization level for derived roles

    Dear All,
    Below is my query:
    When there is any requirement to change the organization level of a derived role, we go to the role and change the organization level manually.
    We have derived our roles, based on the units(company codes).
    Now we have a scenario, where we need to add one unit in a particular derivation of all roles.
    Please suggest if there is any way of updating the organization level in mass for a specific derivation.
    Regards,
    Reshma Vijayan.

    Colleen Lee wrote:
    At least with this option you are using the PFCG functionality and not hitting the tables directly
    Hi Reshma, Colleen,
    Some additional warnings about manipulating the downloads:
    The downloadfile is a fixed record length text file, do not mess up the data positions.
    Be aware of case (upper/lower) when manipulating the file.
    Make sure you do a unicode download to preserve special characters in the menu texts.
    There are very, very few checks done on the file contents when uploading again. It will allow you to pollute your AGR* tables in such a way you'll need an ABAP-er or SQL-savvy colleague to clean up the mess. It is very close to manipulating the tables directly.
    I once managed to get entries into AGR_1251 which didn't show up in PFCG and wouldn't even disappear from the tables after I had deleted the roles in question.
    And yes, I still use this method, but I won't advise it to anyone I cannot personally train to be aware of the pitfalls ;-)
    Jurjen

  • RFC FUNCTION/BAPI for derived Roles (PFCG)

    Hi all,
    I have found many RFC functions for Users and Roles management but nothing for create derived roles.
    Any idea for creating derived roles from external applications ?
    Thanks
    Andrea

    Hi Andrea,
    check the link below.
    automate update profiles by abap (without PFCG)
    Re: automate update profiles by abap (without PFCG)  ?
    Also check if this is helpful
    BAPI_JOBROLE_CLONE 
    Regards,
    SuryaD.

  • Multiple Domain Controllers, different sites, checking status for replication

    Good day,
    How can you see what DC has the current "master" or most up to date version? If I have 3 DCs and 3 different sites, and I add a new user at one of the sites, then that site has the newest master.  How can I check what version of the Global Catalog / ADUC version / revision they each have?
    Is there a CMD / Powershell script to do so?
    This topic first appeared in the Spiceworks Community

    New Delhi: When you fall ill or want to seek medical advice, who do you turn to? Your family doctor or the neighbourhood medico, of course. But, experts say, you may now have another option: social media.
    WhatsApp, Twitter and Facebook, among others, are helping doctors to reach out to patients, guide them for treatments, provide counselling post-surgery and create close-knit support communities, as more Indians join social media platforms.
    "We are frequently using WhatsApp, Skype and Viber to reach out to patients. Currently, we have over 180 patients connected via WhatsApp and over 30 through Skype who are receiving online rehabilitation training," says Dr H.S. Chhabra, medical director and chief of spine service at the Indian Spinal Injuries Centre in New Delhi...Read More
    Read More

  • Checking Status for Weblogic 10.3

    Can anyone suggest me how to check the status of wls 10.3 without using ps-ef or WLST or weblogic.Admin, do we have any other flags or methods were the status could be returned as RUNNING or ADMIN

    Hi Eden,
    If you dont want to use WLST, weblogic.Admin or "ps -ef" tools to get the Server State then you can try using MBeans (JMX coding) to get the Server State..like: http://weblogic-wonders.com/weblogic/2010/06/22/getting-all-server-state-info-in-9-x-jmx-style/
    Thanks
    Jay SenSharma

  • SRM 7.0 Modify POWL for shopping cart check status screen

    HI Experts,
    The standard settings in check status for SC in SRM 7.0 is to display the sc with item level. This causes the SC number to be repeated (for no. of items in SC) and all links open the same SC in a new window.
    We want to display only the header of SC and no item data should be displayed in check status.
    I tried
    SRM Server->Cross-Application Basic Settings->POWL and Advance Search->Adjust POWL Layout,search criteria and push buttons----choose feeder type SAPSRM_FEEDER_SC -double click field catalog-choose ITEM_DESCR, ITEM_NO, ITEM_STATUS---CHOOSE display and select HIDDEN COLUMN radio button.
    This hides the corresponding columns but duplicate records are still showing.
    Can some one please help?
    Thanks,
    Anubhav

    Hi NM,
    After performing the steps in first post for hiding item relevant fields you can filter the data displayed in the result by using the BADI  /SAPSRM/BD_POWL_CHNG_SEL_RSLT .
    In the BADI Delete the records from result internal table where SC num is repeated so that thers only one entry for each SC.
    Let me know if it works for you or not.
    BR,
    Anubhav

  • 'Protecting' your derived roles from being maintained on object level

    I'm redesigning an authorization concept that has been polluted in the past by maintaining object level values in the derived roles instead of the master roles.
    Now I would like to build in a kind of warning or authorization so that future role administrators can adjust master roles on object level, and derive the roles from the master, but are not allowed (or get a warning) to change object level values in the derived roles themselves.
    I'm looking for a warning similar to the warning you get when you are trying to change an organizational level value within the object rather than change the orglevel table.
    I have looked for entries in table PRGN_CUST, but found none.
    Also, the authorization checks for deriving roles [seem to be similar|http://help.sap.com/saphelp_nw04/helpdata/en/2b/84653f1b76b11ae10000000a114084/frameset.htm] to actually maintaining a role, so no distinction can be made here.
    Knowing al this, II think the answer is: 'no, this is not possible' but if you have dealt with the same problem successfully, please let me know.
    Kind regards,
    Lodewijk Borsboom

    Hi Lodewijk,
    There are exit paths in SU01 and PFCG which might (have) help(ed) but SAP removed the documentation on them because as (to my knowledge) as the code was integrated into BAPIs and org. management these exits (like many which have gone before them) caused no end to confusion over time.
    I heard that they would at some ponit be replaced by BADI's but I guess the same problem exists there and I have to date not seem any of them released.
    I have the documentation if you are interested but which release are you on? I suspect that SAP might even remove the exit coding anyway.
    As the other's have stated, I would also go for a detective control. You can always wipe the mistake out again from the master and this will let you know that someone is not sticking to the rules or doesn't understand the concept.
    This is also an advantage when compared to an error message or warning which only they see...
    Cheers,
    Julius

  • SC should disappear from check status transaction

    Hello Colleagues,
    Can you please answer me the below query.
    ISSUE:
    Employee  creates SC.
    SC goen into sourcing cockpit.
    Purchaser completes sourcing and creates a contract.
    SO I feel for the employee his job is complete.But still i can see the SC in the check status for the employee.
    This does not make any sence and is very confusing for the employee.
    It makes sence for the purchaser to see the SC in check staus but not employee.
    How can i restrict the display of SC'c with the contract created out of it..not visible in the check status for the employee.
    Looking forward for your valuable inputs.
    Thanks & Regards,
    Kavitha.

    Hi
    Hi
    My question what the end user can do with the contract number information. please expain the customer what ae the functionalit he may miss if check status hidden.
    There are so many functionality of Check status you may miss if you hide.
    If it is very critical business requirement from customer you can think of to hide only follow on document folder rather than whole cart.
    In the Check Status application, you can check the status of your shopping cart and check the status of the individual items in your shopping cart.
    You can search for your shopping cart using various criteria, such as shopping cart name, creation timeframe, or status. You can search using the following extended statuses.
    You can not print a cart.
    See check status  functionalities of shopping cart
    http://help.sap.com/saphelp_srm30/helpdata/en/8b/4fa9495db211d2b404006094b92d37/content.htm
    so if your shopping created a follow on document
    BUS2000113 - business object - Contract
    then you are trying to protect acesss for this transaction
    bbpsc04
    or
    try to hide a follow on document instead hiding whole cart.
    but try to convince the user the important functionality of the Check status.
    br
    Muthu

  • ERM 5.3 (SP12) Derived Role Update Problem

    Hello Experts,
    I have a question.
    We have a master role/derived role set up in the back-end system. We are trying to update a master role and its derive roles in ERM via PFGC sync.
    Our problem:
    We can add a transaction to a master role no problem in ERM via PFCG sync (adding a transaction code in the back-end and sync to ERM) However, we are unable to update the transaction for derived roles (nothing happens for derived roles in ERM).
    If I am correct, we don't have to add a transaction to each derived role manually, and we should be able to update derived roles automatically once we update a transaction in a master role.
    Please just note that we successfully imported all the master/derived roles from our back-end system, and we are not try to create a derived role in ERM at this time. All we want right now is to update a master role and its derived roles in ERM via PFCG sync.
    If you can, please advice.
    HM

    Go to the TXT file , cut the last line from the AGR_1252 (rtable and insert it to the top of the lines ( AGR_1252) , and reimport it will work I had the same problem in my previous implementation.
    try for one parent & child role
    This is a known problem with SAP they will rectify it in SP12/SP13 or so

  • Derive role table

    Hi All,
    Can any one please tell me which table store the information about derive role.
    Thanks in advance
    ~John

    Hello John
    It's the same table as for the master role: AGR_DEFINE (field PARENT_AGR is filled for derived roles).
    Regards
      Uwe

  • Generation of derived roles when transported

    Hello Everyone,
    We are on ECC6.0 and I've come across a scenario where I've created certain number of derived roles from a parent role and generated the parent and derived one's from the parent role in PFCG and created a transport request. But,
    When I got them imported (SCC1) to a different client on the same box I can see that the authorization tab is still in yellow in all these derived roles,they do contain the same profile name in the authorization tab in PFCG as from the original client they were created in and I would like to know the reason why these roles under the auth.tab are in YELLOW and need a regeneration of profile? I remember doing it previously where I did not regenerate the profiles for the roles when they are imported/transported to a different client.
    And the status text in SUPC says " no current profile".
    Any ideas/inputs are much appreciated.
    Regards,
    Raj

    Hi,
    There may be more that one cases.
    What are the roles you included into the Transport request? You should include all the Derive roles along with the parent roles ideally. Also, I hope you have checked the authorization data for the derived roles in the development before transport.
    Other option could be the system change options for appending data in the target system.
    Please provide more information and also try to search for SAP Notes if there any with this kind of issues.
    Regards,
    Dipanjan

  • Changing the dropdown values for one of the fields in CHECK STATUS query

    Hi,
    We are on SRM 7.1.
    In the CHECK STATUS transaction,in the selection screen(QUERY),there is a field called "ROLE" which has teh dropdown values of "APPROVE BY ME","REJECTED BY ME" and "GOODS/SERVICES DELIVERED TO ME".Is there any way some of these drowpdown values can be removed?
    Please advise.

    hi nmsrm1234
    i have a document for this issue.
    but i don´t find this document in internet. it is called : CUSTOMER-SPECIFIC UI ADJUSTMENTS IN SRM 7.0 WEBDYNRPO ENVIROMENT / META DATA HANDLING CONCEPT.
    if you can find it, you will get an idea to resolve this issue, if you will no have luck, please get me your mail, and i will send you the document.
    regards.

Maybe you are looking for