Critical combinations in 6.0

Hi,
I have been recently trying to set up critical combinations variants for the critical combinations report(SUIM/Users w/ critical authorizations), it allows me to create the variant, but there is no data associated with it. Does anyone have any tips for how to set this feature up?

Hi,
did you follow the steps for setting up the report? Unfortunately it is not selfexplanatory, but the help gives a good step-by-step description....
b.rgds, bernhard

Similar Messages

Authorization to maintain critical combinations / authorizations

It seems like there should be an easy answer to this, so pardon me if I've missed the obvious.
I've been looking into transaction RSUSR008_009_NEW (List of users with critical combinations), but when I click either the "Critical Combinations" or "Critical Authorizations" buttons at the top, I get a "No Authorization" error. What authorization do I need to maintain the critical combinations?
Thanks in advance,
Dan

Thanks.. that was the first thing I did when I got the error, but the result was meaningless. Having just tried it again though, the results were more useful. Can't imagine what I did wrong last time.
Anyway, the SU53 indicates I need t-code VCUSRVARCOM_DISP.. but I imagine there's more to it than that. I found a few possibilities:
SU_VCUSRVARCOM_CHAN - Maintain View Cluster VCUSRVARCOM
SU_VCUSRVARCOM_DISP - Display View Cluster VCUSRVARCOM
SU_VCUSRVAR_CHANGE - Maintain View Cluster VCUSRVAR
SU_VCUSRVAR_DISP - Display View Cluster VCUSRVAR
Bonus points to anyone who can produce a URL to some official information about this.
-Dan

Critical combination of tcodes in FI

Hi all,
is there any combination of tcodes in FI, for which the user should not have authorisation?
for Ex... in MM : the person who creates a PO, he cannot create a GRN due to security purposes
please give some valuable suggestions regarding this ASAP
Points will be awarded
SUNIL

RAJ
our client implemented FI, MM modules only
from MM side the MMguy knows that single user should not have authorisation for PO and GRN
But from my side(FICO) is there combination of Tcodes like i said above for MM?
MM----PO and GRN and others
*FICO----
i dont want to check from user authorisation profile side
i want only enduser tcodes to restrict them for security purposes
dont worry man--i have already assigned points to you
if you gives very helpful answer again --i will assign you most points again
SUNIL

Maintain Critical TCode

Dear Expert,
Could you please help me? Due to system Audit I have maintain(register) in SAP the critical T-code through S_BCE_68001401 --> View critical combination --> Change critical combinations.
Transaction Combinations Critical for Security
Transactio Transactio Transactio Transactio   TransactioText                          DeleteFlag
FB01        FB02          PFCG        SE38         SU01                                    Customer's own ent
MMPV      XK01          XK02         XD01          XD02                                    Customer's own ent
SU02        SU03          SE01                                                                     Customer's own ent
This the example T-code that I declare as a critical T-code
But when I execute by choose --> view by users
I get a list from SAP like this
AMALIA
              SU02                 Maintain Authorization Profiles
              SU03                 Maintain Authorizations
              SE01                 Transport Organizer (Extended)
FB01                 Post Document
              FB02                 Change Document
              PFCG                 Role Maintenance
              SE38                 ABAP Editor
              SU01                 User Maintenance
But actually amalia have MMPV authorization
My question is: is what T-code can be used to define the critical T-code and how to create a report
beside using SUIM.
Thank you in advanced
Best regrads,
Maya

Dear Chinmaya,
Your suggestion is actually the same that what I did, due to the restriction I define the critical T-code in SAP testing and transport to SAP Production. But the report result is not correct, because I have assign one critical T-code for specific user and the user is not appear in the report.
My question is why? Thank you
Best regrads,
Maya

How to audit my newly created Roles (FINANCE MODULE)

Hi,
My client send me an e-mail and asked the following:
Can you assign a user the following roles that are standard in SAP - SAP_AUDITOR_SA & SAP_AUDITOR_SA_BC (I think from memory)?
Change them to ZSAP_AUDITOR_SA & ZSAP_AUDITOR_SA_BC.
Can you test our finance roles with the audit user ID? Documenting the conflicts/SOD in our roles u2013 I would suggest documents it onto a spreadsheet like the unit testing one.*
How will i test the roles that i created with the auditor user ?
Any ideas
Regards,
HIral

Just to add few points: Also try with Transaction SU98 to check the SAP Proposed Critical combination of FI Transactions. This can be checked in the table SUKRI also.
FYI: To run a SOD analysis for a specific combination of Authorizations, you can try with SU97. The authorization IDs you see their can be created as per your (customers choice) by report RSUSR008_009_NEW.
Regards,
Dipanjan

Is there a way to know who are accessing our SAP instances.

Hello Friends,
We have 2 servers (one for ERP and another for XI). Is there a way to know who are all accessing our servers from outside ?
Also, which are user IDs other than SAP* and j2ee_admin that has admin rights for which we have to change the password once a consultant leaves the company.
Your suggestions and recommendations will be highly appreciated.
Thanks
Ram

Hi Ram,
We have 2 servers (one for ERP and another for XI). Is there a way to know who are all accessing our servers from outside ?
SMGW --> Goto --> Logged on Clients
Also, which are user IDs other than SAP* and j2ee_admin that has admin rights for which we have to change the password once a consultant leaves the company.
SUIM --> User --> By Critical Combinations of Authorizations at Transaction Start
Hope this will help.
-Pinkle

Security reports

Hi folks
I dont know but could you please let me know the security reports and tables.
Ill appreciate your help
Cheers
Usman

Usman ,
You can see the reports Under t-code SUIM
RSUSR000 Currently Active Users
RSUSR002 Users by Complex Selection Criteria
RSUSR002_ADDRESS Users by address data
RSUSR003 Check the Passwords of Users SAP* and DDIC in All Clients
RSUSR004 Restrict User Values to the Following Simple Profiles and Auth. Ob
RSUSR005 List of Users With Critical Authorizations
RSUSR006 Locked Users and Users with Incorrect Logons
RSUSR007 Display Users with Incomplete Address Data
RSUSR008 Critical Combinations of Authorizations at Transaction Start
RSUSR008_009_NEW List of Users With Critical Authorizations
RSUSR009 List of Users With Critical Authorizations
RSUSR010 Transactions for User, with Profile or Authorization
RSUSR011 Lists of transactions after selection by user, profile or obj.
RSUSR012 Search authorizations, profiles and users with specified object va
RSUSR020 Profiles by Complex Selection Criteria
RSUSR030 Authorizations by Complex Selection Criteria
RSUSR040 Authorization Objects by Complex Selection Criteria
RSUSR050 Comparisons
RSUSR060 Where-used lists
RSUSR060OBJ Where-Used List for Authorization Object in Programs and Transacti
RSUSR061 Enter Authorization Fields
RSUSR070 Roles by Complex Selection Criteria
RSUSR080 Users by License Data
RSUSR100 Change Documents for Users
RSUSR101 Change Documents for Profiles
RSUSR102 Change Documents for Authorizations
RSUSR200 List of Users According to Logon Date and Password Change
RSUSR300 Set External Security Name for All Users
RSUSR301 Fill non-checking transactions with auth.object S TCODE
RSUSR302 Delete authorization check on object S TCODE from table TSTCA
RSUSR304 Reload Table TSTCA From Table TSTCA_C
RSUSR400 Test Environment Authorization Checks (SAP Systems Only)
RSUSR401 Report to give all SAPCPIC users profile S_A.CPIC
RSUSR402 Download user data for CA manager from Secude
RSUSR403 Assign Profile S_A.CPIC to User SAPCPIC in Current Client
RSUSR404 Conversion Program for Authorizations of Basis Development Environ
RSUSR405 Reset all user buffers in all clients (uncritical)
RSUSR406 Automatically Generate Profile SAP_ALL
RSUSR406_OLD Automatically Generate Profile SAP_ALL
RSUSR408 XPRA: Conversion of USOBX-OKFLAG, USOBX-MODIFIED for upgrade tool
RSUSR409 Transfer all translated titles to generated transaction codes
RSUSR421 Clean-up report: TSTC-CINFO if no check in TSTCA
RSUSR500 User Administration: Compare Users in Central System
RSUSR500D Report RSUSR500D
RSUSR998 Call Reporting Tree Info System
RSUSREXT Enter Correct SNC Names in Table View VUSREXTID (from SAP R/3 4.5)
RSUSREXTID Enter Correct SNC Names in Table View VUSREXTID (from SAP R/3 4.5)
RSUSRLOG Log Display for Central User Administration
RSUSRSCUC CUA: Synchronization of the Company Addresses
RSUSRSUIM User Information System
RSUSR_S_USER_SAS Activate Authorization Object S_USER_SAS
RSUSR_S_USER_SAS_01 Complete Authorization Data for S_USER_SAS in Roles
RSUSR_S_USER_SAS_02 Convert Authorization Defaults
RSUSR_SYSINFO_PROFILE Report cross-system information/profile
RSUSR_SYSINFO_ROLE Report cross-system information/role
RSUSR_SYSINFO_ZBV Report cross-system information/***
Here`re the tables :
User/Security tables
DEVACCESS Table of development users including dev access key
USR02 Logon data
USR04 User master authorization (one row per user)
UST04 User profiles (multiple rows per user)
USR10 Authorisation profiles (i.e. &_SAP_ALL)
UST10C Composit profiles (i.e. profile has sub profile)
USR11 Text for authorisation profiles
USR12 Authorisation values
USR13 Short text for authorisation
USR40 Tabl for illegal passwords
OBJT Authorisation objetc table
Hope thisll give you some idea . I deserve 10 points now :)
Thanks
Saquib Khan

What is Variant?

Hi,
I have one problem to understand that what is variant? I used T-Code suim. in that T-Code we see all the information about Users,Roles,Profiles and so on. Here in User, there is one option 'With Critical Authorization'. I can't understand this topic. Please help me.
I am waiting for replies

Variants allow you to save sets of input values for programs that you often start with the same selections. You can use them for any programs
Whenever you start a program in which selection screens are defined, the system displays a set of input fields for database-specific and program-specific selections. To select a certain set of data, you enter an appropriate range of values.
http://help.sap.com/saphelp_nw04/helpdata/en/c0/98037ae58611d194cc00a0c94260a5/content.htm
Critical Authaurizations (SUIM)
using this you can find out the users and profiles which have critical combinations like FICO guys should not have authrisations of MM , PP so you can define the set of critical combination and if someone have given autharization to both person . then you can find that here .... this information can be used for Audit purpose as welll ,,,
for more info
http://help.sap.com/saphelp_nw04/Helpdata/EN/7a/ad9040bca2ef4ae10000000a1550b0/content.htm
http://help.sap.com/saphelp_erp2005/helpdata/en/f9/558f40f3b19920e10000000a1550b0/content.htm
hope this will help you
cheers
dEE

Combining CPU(Critical patch Updates) with Year-End patches, good/bad idea?

Hello all,
I hoping to get some expert opinion on some upcoming patches to our environment. We are 3 releases being on applying CPU's to our environment and it is that time of year where testing is needed for Year-end patches. Does anyone see any issues with combining the year-end and CPU's? Would it be recommended that we hold off on the applying CPU's because of not experiencing any major problems in our environement, then schedule to gradually get up to date once the year-end patches are in place?
The desire to install CPU's is to not fall too far being on the CPU's.
Thanks in advance for any recommendations.

My recommendation is to combine the CPUs with the rest of your patches. CPUs do not affect functionality - they patch security holes/issues in software. Since you will be testing for yearend patches, you can take advantage of this opportunity to also include CPU patches, else separate testing and downtime will be required for the CPU patches. This is the approach we have in our organization. We have yet to encounter an issue with this approach.
HTH
Srini

What are the critical points to validate whether the client uses PP or not?

Hi,
We are woking for a project which involves more than 80 SAP instances (80 clients), and with in the same instance we have more than one country (e.g: client 100 may have 5 countries india, srilanka, bangaladesh, china and singapore). Now our challenge is to validate which are the countries using SAP PP Shop floor control activities (Creation of Production orders, settlement etc...). Please list the critical points against which we can validate. Hope my question is clear. Any clarification required please reply to this thread. Expecting quick response from the experts. Thank you.
Note: I have tried using "workscheduling view" of material master, COOIS report etc.., still i did not get clear validation. I would appreciate if experts provide technical validation points.
BR
Raam

Dear Krishnan,
First thing is you have to know whether client is using
Discrete , REM or PP-PI
From Discrete point of View ( Configurations )
Check in
OPJH, OPL8, OPKJ, OPK4, OPKP ( whether for plant & order type combination parameters are maintained are not )
Coming to REM
check in OSP2, whether REM profile settings are maintained for the plants
Coming to Master data
just refer the below link & check give the plant as input
[Tables;
Regards
kumar

A single report can't combine portrait and landscape oriented pages

Post Author: joelo2
CA Forum: Crystal Reports
Hi,
Can a single report in Crystal report XI (version 11.5.8.826) combine portriat and landscape oriented pages like Crystal report 2008? For example, I have one main report with several subreports in the main report. I want one subreport be in portrait page orientation and the other subreports in landscape. Can I do something like that in Crystal report XI version? I even tried writing a small .net program to do this, but it doesn't seem to allow me to do that programmatically either. Please help

Post Author: ngra
CA Forum: Crystal Reports
I'd like to elevate this issue with Crystal Reports XI. There is a critical application which we developed in-house which needs both portrait and landscape orientation in each of the 30,000 plus documents we are sending out every month.If developers in Business Objects are picking this thread up - we need a patch for this limitation - quick. Right now, we are toying with the possibility of exporting the documents into a text format with markers indicating if a page is portrait or landscape. This is to be loaded into a Xerox machine (which costs hundreds of thousands of dollars), where it is mapped automatically to portrait or landscape. Note to Business Objects: This will provide us and countless others with much value. Think 80/20 rule - most bang for your development bucks and value for your customers!

How can I combine originals, modified, and data files?

I just ran into a huge problem.
I have about 33,500 pictures, and my startup disk is beyond full.
I all of a sudden realized that I have three copies of every single picture I have. One in the modified folder, one in the originals folder, and another in the data folder.
I need to clear out space, but I don't want to go through and delete/save each and every single picture. I want to save one copy of each picture. I'd like the modified pictures to combine with the originals into the file group they were originally in.
I hope this makes sense, and I need help.
I need to delete some of these pictures but I don't want to have to do it one by one, and I don't want to delete entire folders. (e.g. I don't want to have to delete all my originals, modified, etc. etc.)
For future reference:
Is there anyway I can import pictures, edit them, and only have one copy of the edited picture? Do I have to then go in and delete the original every single time I do that?
S.O.S!
Please help!
thank you,
-A lost girl named Jenn from Michigan.

Jenn:
Welcome to the Apple Discussions and Go Blue! First, let me discuss free space on the boot drive. It's strongly recommended to have a minimum of 10 GB free space on your boot drive. This is important if you want optimal performance. One way to regain free space is to run Monolingual to remove the unneeded language modules. Just don't remove the English module (I also kept the American english module). I saved 2 GB the first time I ran it on my MacBook Pro (intel). Do not run any of the other options, particularly if you have an intel model.
Now, back to the library. Just getting of some photos may not be enough to give you sufficient free space but you can do some. Except for portrait photos that came from a camera with the auto-rotate option, you can get rid of all your modified files by doing a library wide Photos->Revert to Original. Those auto-rotated files will be recreated again.
If the budget permits, as external FW HD is a very cost effective insurance against losing those irreplaceable photos and other critical files. With an external HD you can create a second library on it and copy those photos you want to save but remove from your original library with iPhoto Library Manager like this.
Or, put those photos you want to remove from the library but not get rid of entirely in an album and burn them via the Share->Burn menu option. That will create a disk, CD or DVD, that can be mounted in iPHoto to view and/or copy back those that you might need at a later date.
Note: the demo video are for iPhoto 7 but is the same for iPhoto 6.
Do you Twango?
TIP: For insurance against the iPhoto database corruption that many users have experienced I recommend making a backup copy of the Library6.iPhoto database file and keep it current. If problems crop up where iPhoto suddenly can't see any photos or thinks there are no photos in the library, replacing the working Library6.iPhoto file with the backup will often get the library back. By keeping it current I mean backup after each import and/or any serious editing or work on books, slideshows, calendars, cards, etc. That insures that if a problem pops up and you do need to replace the database file, you'll retain all those efforts. It doesn't take long to make the backup and it's good insurance.
I've written an Automator workflow application (requires Tiger), iPhoto dB File Backup, that will copy the selected Library6.iPhoto file from your iPhoto Library folder to the Pictures folder, replacing any previous version of it. It's compatible with iPhoto 08 libraries. iPhoto does not have to be closed to run the application, just idle. You can download it at Toad's Cellar. Be sure to read the Read Me pdf file.

Critical Issue: Availabilty check & alternative BOM selction issue

During the upgradation project I'm working facing the following critical issues:
1)While creating the sales order, system carries out the availability check in APO.In material master checking group Z5 is defined.
 Actually I want to know hw the system carries out the search in APO & what are the settings in R/3 or APO we have to make?
2)Suppose there are 3 alternative BOM's of a finished product.A requirement is while creating the sales order availabilty check should be carried out & system should check the availability of components on the required date.If the component is not avalable system should go & check the second alternative...third alternative until it gets the confirmation of component availability.
 How we can set this functionality & what are the prerequisites or customisation settings we needs to make?
 Would appreciate providing your inputs on this critical issue.
Thanks,
Nilesh

Before you understand how the APO Availability Checking concept works, I would suggest you understand about the regular R3 availability checking. As this is the core for the SD and APO GATP. Refer help.sap.com
Question 1:
Settings in R3: You have the ATP integration model in CFM1 transaction. You need to activate this just one time and never again. what this does is basically transfer all your availability checking customizing to APO.
All the settings for the Availability Checking group ( Z5, etc) are already maintained in R3 and they get transferred to APO by the integration model. You donot need to anything else.
Settings in APO:
If you are using Product Allocation Concept, You have to maintain the Check Instructions.... Otherwise there are no other settings in APO
Availability Check in APO :
( see the following blog for the requirements class( Name in R3) or check mode( Name in APO) determination http://solution-timezone-issue.blogspot.com/ )
The check mode and the business event( These are hardcode internally in R3 - For SD- A) are determined from the order and based on this in APO it follows the following order
(1) Reads the check instructions settings in APO
For example say the following have been determined from the SD Order : Check Mode 041 and Business Event A
Say we have maintained in APO that the first step is Availability Check and all the other two steps we havent maintained or left blank ( Product Allocation and Forecast)
Look for the customizing in APO
SPRO>APO>GATP>General Settings>Maintain Check Instructions ****
(2) Carries out availability Checking same as in R3 and no different
From the masterial master considers the availability checking group ( Ex: Z1) and the business event( SD transactions- A)
Very Important and the core of availability checking which is similar in R3 and APO***
Against these 2 combinations, the settings are checked which define what stock and in/outward movements are to be considered during the availability check
For customzing settings in APO
SPRO>APO>GATP>Maintain Check Control>
 For Customizing in R3
SPRO>Sales and Distribution>Basic Functions>Availability Check and transfer of requirements>Availability check with ATP logic or planning>Carry out control for availability check
This is the answer to your first question.
Your second question would need some time and I will try to answer it as well.
Hope this helps you..

Combine supported files context menu missing

After upgrading a Citrix server environment from 32 to 64 bit users have noticed that the "combine supported files" option is missing from the context menu. Both servers use the same version of Acrobat
I tried this command from an administrator login at the console.
regsvr32 "C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat Elements\ContextMenu64.dll"
Still no luck. Anyone have any suggestions?

Good day,
Take a look at the solution below:
Add the following key to the Windows registry that Citrix is running on top of:
Disclaimer: The Windows registry contains critical information about your system and applications. Before modifying the registry, always make a backup copy of it. Adobe doesn't provide support for problems that arise from improperly modifying the registry. For information about the Windows registry, see the documentation in Windows or contact Microsoft Technical Support or your computer's manufacturer.
[HKEY_CLASSES_ROOT\CLSID\{D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802}\InprocServer32]@="C:\\Program Files (x86)\\Adobe\\Acrobat 8.0\\Acrobat\\..\\Acrobat Elements\\ContextMenu64.dll""ThreadingModel"="Apartment"
Please understand, this solution is NOT supported by Adobe, but may work for you.
Regards,
David
Acrobat Community Manager
Adobe Systems

How to combine two reports in obiee 10g(not union)

Hi Everyone
I have got a requirement where client is asking to combine two report to one
Report A has columns
"Region", "category" ,"in house " ,"sales" which can be shown by applying filters for current running year
Report B
Region,Category, Week5,week6, week7,week8 in this showing sales in individual week by using pivot view and limiting to four weeks
with a week filter
Now client req is to combine both reports into single one
region, category,inhouse,sales,week5,week6,week7,week8 here the issue is inhouse and sales data has show yearly data and week 5,week6,week7,week8 has to show weekly data .And weeks columns has to get updated automatically .
I am having a confusion in this will it possible to combine both reports, if possible pls help out how to do it
Regards
Sandeep
Edited by: Sandeep on Jul 31, 2011 9:20 AM
Edited by: Sandeep on Aug 1, 2011 1:43 AM

First of all, proof read your post. Generally, grammatical and punctuation errors can be deciphered, but where words are critical to presenting your issue clearly, you must type those sentences correctly. Otherwise, it can be confusing and turn off someone who may want to help.
"...which can be shown without and filters and want data for current year." What does this mean?
"...And weeks columns have to update its week no based on that week." What does this mean?
In an attempt to answer you question, do this:
1) Base your query filters on the "current running year." This will satisfy the requirements for displaying data from the first report.
2) Now add 4 "sales" columns (i.e., same column, but 4 instances of it). In each of these columns, click on the fx button, click on Filters, go to your Time dimension and select the appropriate week, and then click "OK." Now, each of these columns will hold the measure value for the particular week while the "sales" column will have the "running total" for the whole time period.
Once you get the above to work, you can work on automating this by substituting a function in place of the hard-coded week number values.

Critical combinations in 6.0

Similar Messages

Maybe you are looking for