Create single-roles in satellite-system

Hello everybody,
I want to create Single-role´s in a satellite-system over RFC but the Fm´s in the Functiongroup PRGN are not remotable. Is there an alternative way to create these single-roles in a satellite-system? Up-/download and transport function isn't a alternative because my requirement is to create the single-roles an from excel-import. I considered that one way could be to copy the roles in the satellite.
Regards,
Christian

You can create an RFC-able FM that is a wrapper for that FM.
Neal

Similar Messages

Roles required to create support message from satellite system

Hi Team,
I am trying to create support message from satellite system. i have assigned S_RFC and S_RFCACL to the Zrole. Apart from that, is there any other roles to be assined in satelite system to create support message?
Regards
Kumar

I think that's it.
Of course they roles in the central system too: SAP_SV_FDB_NOTIF_BC_ADMIN and SAP_SUPPDESK_CREATE (or copies thereof).
Regards,
Sean

SOLMAN EHP1 - anyone can create support message in Satellite System's Help?

Hi,
I just curios that why everyone can create support message in satellite system-> help -> create support message?
I tested with restricted profile user and without role SAP_SUPPDESK_CREATE, NO BP created but he still manage to create support message???? Any idea??
Also, same goes to any user can process ticket in SOLMAN with no BP-Employee role and SAP_SUPPDESK_* roles assigned.
Your kind input is very much appreciated.
Thanks,
Nicholas Chang

Hi Nicholas
If you are using a "Named" user instead of the Trusted Relationship in the RFC maintained in BCOS_CUST for entry OSS_MSG then this is quite possible. In this case the "Named" user will be used to call the interface to create message and the calling user ie the end user creating the ticket will only be used as "Reporter" of the message.
The user entered in the RFC details probably has the authorization to create Support desk messages.
Regards
Amit

Create support message in satellite system

Hi,
What are the pre-requisites to configure creating support message in satellite system.
Thanks
Rajesh

Hi,
Follow this blog u can set up ur service desk
mainly it comprises of roles table entry and rfc destination in satellite systems
/people/bruyneel.guillaume/blog/2008/05/02/service-desk-implementation-guide-part-i
/people/bruyneel.guillaume/blog/2008/06/13/service-desk-implementation-guide-part-ii
hope it solves ur problem
Regards
Prakhar

Creating Support Messages from Satellite System without SolMan user account

Hi
We are having some problems with users "creating support message" from our ECC system to SolMan, if the user does not have a user account in Solution Manager.
It is not correct, that users from Satellite systems can create support messages from these systems, without the user having an account in Solution Manager? And that the user is identified by the business partner for the user, that must exist in the Solution Manager system ?
We have set up the RFC for the supportmessages between SolMan and the ECC system as trusted RFC, with the "Current user" as the user, but how should this be set up, if the user does not have an account in the Solution Manager system. If we enter a user with the right authorizations in the RFC, will the messages that come through not just appear as created by that user, instead of the ECC user and corresponding business partner ?
Regards
Lars

Hi,
you can use the use the user for the RFC-Connection in that case. I have customizied a similar scenario. In my scenario the System from which the message was created, is the business partner (SOLD-TO-PARTY). For that you have to create a communication user (i.e SOLMAN<SYSID>). In TA SM59 in the satellite-system you assign this user for the connection. (Don't forget to assign the user to the role "SAP_SV_FDB_NOTIF_BC_ADMIN"). Now, it schould be possible to create messages from the satellite system to the solution manager. Additionally you should create business-partner for each user of the satellite system, by using TA DSWP>EDIT>CREATE BUSINESS PARTNER.
With this TA, it is easy to create BP for each satellite system.
Best regards
Marc

Document on How to Create Single Roles in ecatt

I have created a document displaying how to create single roles using ecatt.
I hope this helps.
How do I add the file to this thread?
Message was edited by:
Mohammed Junaid Khan

hi Junaid,
I don't think u can save files here. U can give links here.
If possible, can you please send that file to me through mail to [email protected]
I am getting error while creating a ecatt script in BI 7.0 system for creating roles.
Hopes yours may help.
thanks,
venkat

Not able to create a message from satellite system

Hello Everyone.
We have been working on Solution Manager .We have managed with successfull installation,Uploaded required support packages,configured the system according to SAP Solution Manager Guide.
Faced with some problem regarding support desk,we are not able to create a message from satellite system to Solution Manager.
Note : Error Message related to this problem is ....
<b>"Error in Local Message System : External number assignment, Enter notification num message was not Created."</b>
Thanks in advance.
Regards,
Nimesh V . Master

Hi, you need to check the number ranges for the notifications and make sure they are correct. Look in the IMG of the SAP Solution Manager system for the instructions. You also need to make sure that the Service Desk BC Sets are activated if you are NOT on 4.0 and SP Stack 09+. In the later SPs much of this configuration from the IMG is automated in the wizard.

I have created a role in child system .

i have created a role in child system and i want to create a composite role in cua with this role in child system but
when i am entering its name in pfcg it saying the role not present please help.

Hi Suvodeep,
Please do not confuse this with CUA.
If you have created a new role in the child system, and want to see it in the CUA, goto PFCG-> Environment -> "text compare for CUA system"
You can try the other option too to see what it does
Hope this helps
Abhishek

Roles in satellite system for message creator

while creating support message in satellite syatem, i am getting the following error.
Error in Local Message System: No authorization to logon as trusted system (Trust Message was Not Created
Message no. BCOS088
what role i have to give it to the message creator @ satellite system

Hi.
Looks like you are using a trusted connection (maintained in table BCOS_CUST) to connect your satellite system to the Solution Manager.
If you keep this configuration every user who tries to create a support message in your satellite system also needs a real user in the Solution Manager (including authorization objects S_RFC and S_RFC_ACL).
Instead you should use the SM_<your sol man>_BACK destination and set NO_USER_CHECK=X in Tx: DNO_CUST04 (SolMan).
Also you should create a Business Partner in SolMan (for each user who should be able to create a support message in satellite system) with external ID referring to the satellite system user.
You do not need a user in SolMan for everyone who should be able to create a support message from satellite system.
Hope this helps.
/cheers

Create Support Message from satellite system

Hi, when I create a ticket using "Help - Create support Message" the parameter SY-UNAME is not passed to Service Desk
in other word, the message is created but the field "Reported by" is not filled.
if I want to display the entire message in the form, before saving, I can see that this value is correct...
SY-SYSID             DE1
SY-MANDT             300
SY-UNAME             SOLMAN
SY-DATUM             20080410
etc.
Any suggestion ?
Regards,
Nacho.

Hi,
1) Under identification tab in external BP no. put details as
<Server short name>space<client>space<search term
(which you have maintained in address tab or employee no.
of that user in satellite system)>
2) In ID type put CRM001
3) Under identification put details as <Server short
name>space<installation no.>space<client>space<search
term (which you have maintained in address tab or
employee no. of that user in satellite system)>
4)Go to trns. BP>select BP role as "Employee"> Indentification tab--> Maintain user name same as user id of employee in satellite system or serch term you maintained while creating BP.
Try this. Reward the points for useful answer.
Regards,
Niks

With SP16-17 we can't create support message from satellite system anymore

hello,
We have implemented the support package 16 and 17 SAPKITL427 in solution manager last week-end and since then all satellite systems can not create support message anymore.
The process is perfectly working in solman itself and we don't think we have thus a process customizing issue here but who knows...
The key user creates the message with the help -> create support message
and when he saves it (clicking the mailbox button) he gets the following error
Error in Local Message System: Function not available Message was Not
Created
In fact the error Message is BCOS088
We debugged the function BCOS_CREATE_MSG and we found out that the function
DNO_OW_CREATE_NOTIFICATION is returning error code 1.
We checked out RFC connection and it looks ok
There is no dumps in ST22, no error in SLG1 in both system...a nightmare
The notification SLF1 is created in solman but the status field of the notification is empty and it looks that the record is somehow corrupted because you can't modify it with dnotifwl.
Due to the fact that the notification is not correctly created the support message is also not created.
SAP and our solman consultant are working on it since 2 days but don't have a clue. Maybe some program where no regenerated correctly ?
If you would have any idea in which direction to look, i would greatly appreciate
thanks a lot
best regards Xavier

hi Rohit,
on the satellit I have the following versions
SAP_BASIS     700     0012     SAPKB70012     SAP Basis Component
SAP_ABA     700     0012     SAPKA70012     Cross-Application Component
PI_BASIS     2005_1_700     0012     SAPKIPYJ7C     PI_BASIS 2005_1_700
ST-PI     2005_1_700     0006     SAPKITLQI6     SAP Solution Tools Plug-In
SAP_BW     700     0013     SAPKW70013     SAP NetWeaver BI 7.0
SAP_AP     700     0009     SAPKNA7009     SAP Application Platform
SAP_HR     600     0018     SAPKE60018     Human Resources
SAP_APPL     600     0010     SAPKH60010     Logistics and Accounting
EA-IPPE     400     0010     SAPKGPID10     SAP iPPE
EA-APPL     600     0010     SAPKGPAD10     SAP Enterprise Extension PLM, SCM, Financials
EA-DFPS     600     0010     SAPKGPDD10     SAP Enterprise Extension Defense Forces & Public Security
EA-HR     600     0018     SAPKGPHD18     SAP Enterprise Extension HR
EA-FINSERV     600     0010     SAPKGPFD10     SAP Enterprise Extension Financial Services
FINBASIS     600     0010     SAPK-60010INFINBASIS     Fin. Basis
EA-PS     600     0010     SAPKGPPD10     SAP Enterprise Extension Public Services
EA-RETAIL     600     0010     SAPKGPRD10     SAP Enterprise Extension Retail
EA-GLTRADE     600     0010     SAPKGPGD10     SAP Enterprise Extension Global Trade
IS-PS-CA     600     0010     SAPK-60010INISPSCA     IS-PUBLIC SECTOR CONTRACT ACCOUNTING
IS-OIL     600     0010     SAPK-60010INISOIL     IS-OIL
IS-M     600     0010     SAPK-60010INISM     SAP MEDIA
IS-H     600     0010     SAPK-60010INISH     SAP Healthcare
IS-CWM     600     0010     SAPK-60010INISCWM     Industry Solution Catch Weight Management
INSURANCE     600     0010     SAPK-60010ININSURANC     SAP Insurance
FI-CAX     600     0010     SAPK-60010INFICAX     FI-CA Extended
FI-CA     600     0010     SAPK-60010INFICA     FI-CA
ERECRUIT     600     0010     SAPK-60010INERECRUIT     E-Recruiting
ECC-DIMP     600     0010     SAPK-60010INECCDIMP     DIMP
IS-UT     600     0010     SAPK-60010INISUT     SAP Utilities/Telecommunication
SEM-BW     600     0010     SAPKGS6010     SEM-BW: Strategic Enterprise Management
LSOFE     600     0010     SAPK-60010INLSOFE     SAP Learning Solution Front-End
ST-A/PI     01K_ECC600     0000          -     Application Servicetools for ECC 600
APICON     1470000000     0000          -     APICON GmbH, Interface Add ON
thank you Xavier

Early watch alert task not created in SDCCN in satellite system

Hello Everyone,
I am trying to configure EWA in solution manger 7.0 ehp1. I have added the system in SMSY, created RFC SM_SIDCLNTXXX_READ and SM_SIDCLNTXXX_TRUSTED in solution manger and also created RFC SM_SIDCLNTXXX_TRUSTED and SM_SIDCLNTXXX_BACK in satellite system sucessfully.
The Early watch Alert in TA DSWP is showing me a red flag. The job /BDL/TASK_PROCESSOR in satellite system is being sucessfully finished.
The problem I am facing is I cannot find task Early watch Alert in SDCCN in my satellite system and can not create other RFC such as SAPOSS and SDCC_OSS
Could anyone please suggest how should i go about it?
Component version of my satellite system is
ST-A/PI - 01M_SCM570
ST-PI - 2005_1_700 00003

Hello Sohrab
1) The SDCCN task logs will be on the Done tab - You can also check the logs in SLG1 at the time, there could be more information there.
Typically the refresh definitions will have nothing, except when there are updates, so it is not unusual to see no updates here each time the task runs. If there are service sessions the maintains package should pick them up with refresh service task.
Is the SM_<SID>CLNT<nnn>_BACK RFC set as the master in SDCCN?
One test you can make is create a Refresh session task on the satellite. This is the task that the Maint. Package should run.
It will just be easier for testing. If the refresh session task does not create any EWA tasks for the service sessions outstanding, then there is a configuration issue.
If it works, then the Maintenance task is failing before it can shcedule the refresh session task.
I realize I haven't offered a solution, but a way of finding out where it is failing. Once we isolate where it is failing, we reduce the possibilities of what it could be, and we should be left with the solution.
So forget the Maintenace Package for Now. Lets see if you can pull the service sessions with a Refresh Session Task.
You know in the SDCCN task logs errors in the logs are prefaced by what looks like a yellow lightening bolt.
So if you see these in any of the logs, you are encountering an error, and you should copy it here.
Hope this helps to move you forward.
Regards,
Paul

CHARM Roles in Satellite System

Hi,
Can anybody tell me exactly on CHARM roles in Solman 7.0 EHP1.
I am totally confused which roles i have to assign to Change Manager, IT operator, Tester, Developer & Requester.
In Solman which roles I have to assign & in Satellite system R/3 which roles to assign.
Currently I have assigned following Roles in Solman.
Change Manager
ZO_BC_SOCM_CHANGE_MANAGER
ZO_BC_CHANGEMAN_ADMIN
ZO_BC_CHANGEMAN_OPERATOR
ZO_BC_SOCM_CREATE
ZO_BC_SOCM_DISPLAY
ZO_BC_SOCM_PRODUCTION_MANAGER
ZO_BC_TRUSTED-RFC
IT Operator /Basis
ZO_BC_SOCM_IT_OPERATOR
ZO_BC_TRANSPORT
ZO_BC_SOCM_ADMIN
ZO_BC_CM_SMAN_ADMINISTRATOR
ZO_BC_TRUSTED-RFC
Developer
ZO_BC_SOCM_DEVELOPER
ZO_BC_CM_SMAN_DEVELOPER
ZO_BC_TRUSTED-RFC
Tester
ZO_BC_SOCM_TESTER
ZO_BC_TRUSTED-RFC
Can anybody tell whether above assignment is correct.
In Satellite system which roles I need to assign.
Regards
PK
Edited by: PK on Jun 1, 2010 9:58 AM
Edited by: PK on Jun 1, 2010 9:59 AM

Roles required for developer, tester and chagne manager in Solution manager in solution manager are as follow.
Developer
SAP_CM_DEVELOPER_COMP(composite role)
     SAP_CM_SMAN_DEVELOPER
     SAP_SOCM_DEVELOPER
SAP_SOCM_REQUESTER
tester
SAP_S_RFCACL (for RFC)
SAP_CM_TESTER_COMP(composite role)
     SAP_CM_SMAN_TESTER
     SAP_SOCM_TESTER
change manager
SAP_CM_ADMINISTRATOR_COMP (composite role)
     SAP_CM_SMAN_ADMINISTRATOR
     SAP_CPR_PROJECT_ADMINISTRATOR
     SAP_CPR_USER
     SAP_SOCM_ADMIN
SAP_CM_CHANGE_MANAGER_COMP (composite role)
     SAP_CM_SMAN_CHANGE_MANAGER
     SAP_SOCM_CHANGE_MANAGER
But you have to assign some object authorization to these standard roles.
mainly you have to provide authorization for these objects S_TCODE, B_USERSTAT, S_OC_ROLE, CRM_ORD_OP etc.
You can assign sap_all, sap_new to your user(developer, tester, change manager etc) and can set a trace from st01 on that perticaular user and then try to execute anything which you want. Then you can check for the objects in the trace and can authorize user for those object.
Regards,

Creating single role by copying profiles from other roles

HI ,
I am creating a single role from 4 roles. Ihave copied the authorizations of 4 roles and added into the new role. This is done by copying the profiles.
Problems Faced :-->
1. )In table AGR_TCODES i am not able to see the Tcodes for this new single role present in the new role, whereas if i goto object S_TCODE i am able to see tcodes and have that access.
2.) Some of the objects are not copied into this new role. Even from the roles whose all other objects are copied into this role.
Can anybody help me on this and also if someone knows what other problems can be faced by doing this.
<removed_by_moderator>
Thanks,
Rajesh
Edited by: Julius Bussche on Oct 15, 2008 3:55 PM

Hi Rajesh,
If you have created a role by copying authorizations, then it is possible to get the t-codes provided your role contains the auth.obj S_TCODE which you might have copied manually from one or two among the 4 roles.
If S_TCODE exists in your role then you can find out the t-codes belonging to this role through SUIM->Transactions->Executable for Roles-> Insert your role name
or
Go to SE16-> Table AGR_1251->
In the field AGR_NAME, give the role name
In the field OBJECT, enter S_TCODE and then
Execute.
Q.My second question THere is one role created by some user I am checking it in AGR_Tcodes and SUIM ....I am finding that the no. of Tcodes in both cases donot match....Can anybody tell where i can look for this and what is the possible reason.
Possible reasons for this could be that some of the t-codes have been entered into the role manually and not through the menu in PFCG and as mentioned earlie that AGR_TCODES only shows the transactions that exists in the menu of the role.
It could also be that the manually entered t-codes contains wildcards specifying a range of values.
The best option would be to find it out from the AGR_1251 table.
Hope this helps !
Thanks,
Saby..

Creating Single Role from Many Roles

Hi,
Can we created a single role(not composite) from many roles?? i.e. all the authorisations of n roles being copied into a single new role??

You can create a composite role in PFCG and just include the other roles within it. But there is no functionality to merge roles into one another.
If you need more detail, the I suggest you ask your question in the Security Forum.
Hope that helps.
J. Haynes
Denver CO US

Create single-roles in satellite-system

Similar Messages

Maybe you are looking for