Customer role from sap standard role SAP_SM_SCHEDULER_DIS or SAP_SM_SCHEDUL

HIi,
according SAP Note Note 1054005 - FAQ: Job Scheduling Management with SAP Solution Manager we want to design a customer role with this roles as templates.
But:
There are a lot of open authorization objects.
We need proposal how to fill this role with adequate values.
Does anybody has designed customer roles from that standard roles ?
What values are advisable ?
Regards,
Roland Fischl

Dear Aviya Paul,
1. Who will responsible for Authorization Matrix?
Authorization Matrix that define "what position may have access to which authorization/ role" shall be developed by User (Management), with support from BASIS. User is the one who have the authority to decide, while BASIS should help User in understanding the technical knowledge of access authorization.
2 to 5. BASIS.

Similar Messages

SAP Standard Roles

Hello everyone.
What is SAP's best practice for using (customizing) the SAP standard roles? I have always used the standard roles as templates to customize for my customers. Is there a stated SAP best practice for this?
If I use a standard role, customize it and copy it to the company namespace and the standard role it is customized off of changes, does my customized role change?
How do release upgrades affect the standard SAP roles?
Thanks!
Todd

Hi Todd,
If you copy the roles to a your own namespace then they won't be touched during upgrade.
I can't comment on what happens to standard roles during upgrade as I tend to avoid them.
There is no accepted best practice around using standard roles, though there is reasonably wide belief that developing your own from the ground up is a better way to develop roles to meet your customers business processes.
I find that where standard roles have been used, the end user roles have generally a lot of unused transactions. Functional & business people see a large list & choose most of them rather than building up from a subset of inscope transactions which are also used for training, BPP's etc.
There is also the consideration that using standard roles guides you to building in the same way. That's not to say it is a bad way, just can limit flexibility if you build down to a task level (nasty, nasty, nasty) or higher at a job or function level.
Cheers
Alex

Deletion of SAP standard roles

I have been asked by the client if we could delete all of the SAP standard roles. I think there are many good reasons not to delete them, but does anyone know what SAP's official recommendation would be to that question and could you point me to the documentation or SAP Note where that recommendations is written?
So far all I have found is the following documentation(http://help.sap.com/saphelp_47x200/helpdata/en/52/67164b439b11d1896f0000e8322d00/frameset.htm) saying that:
Do not change the delivered standard roles (SAP_), but rather only the copies of these roles (Z_). Otherwise, the standard roles that you have modified will be overwritten by newly delivered standard roles during a later upgrade or release change.
But it does not say that you should never delete them.
Br,
Jon

Christensen Jon Jagd wrote:>
> The client want's to "clean up" the authorizations concept by deleting all of the unused roles. And all the SAP_* roles are not assigned to any users (and not generated neither).
I've seen that before, the urge to clean up...... unused roles aren't the worst thing to happen on a system, as long as they're part of the concept.
Come to think of it. I'd delete them from my test and prod systems to avoid confusion and/or (mis)use, but not from dev. On dev the majority of roles is not assigned to users anyway........
> But I would like to know if for example "SAP recommends that you do NOT delete system delivered roles".
I don't think such advice exists. Try to convince the client they should be kept on dev for future reference. Delete them on the other systems to clean up. Everybody happy.
Jurjen
Edited by: Jurjen Heeck on Feb 12, 2008 10:16 AM

SAP standard roles for Mii inside of objects?

Hi,
It is our practice to rename SAP standard roles we plan to use "as is" to our company's naming convention. I am being told by an Mii implementer that Mii uses the standard role names in objects and that by changing these names to our convention, I will create "complications" in their implementation process. I find this hard to believe, it would be a departure from what (little) I know about SAP and how they handle authorizations and roles. It also seems to be very limiting when it comes to customization in the future.
Is this true? Does Mii name standard roles inside of objects? (These "objects" were not clearly defined to me and I plan on calling a meeting so they may show me examples.)
Anyone else on Mii have this issue?

As far as I know, in Mii a user typically needs at least one of these roles:
SAP_XMII_User
SAP_XMII_Developer
SAP_XMII_Administrator
You can of course add additional roles with the authorization the different users require using your own naming convention.
I think this is what the Mii implementer is talking about.
Good luck!

Break sap standard role into two sub roles

hi,
i have one SAP standard role. now i want to break this role into two sub roles. how shall do it.
please suggest me.
regards
ramesh
Edited by: Ramesh Sammiti on Jul 31, 2008 11:00 AM

Hi Ramesh,
When you say that you want to split the SAP Standard role into two roles:
1.Do you mean to say that you want to split the transactions and authorization data of the SAP Standard role into two separate Z* or Y* roles?
2.Do you want to copy the SAP Standard role into two different Z* or Y* roles and then modify the authorization data according to your company's requirements?
In the above two scenarios you must copy the SAP Standard role into Z* or Y* roles in PFCG transaction with the appropriate naming convention and make necessary changes in both the transaction data and the authorization data.
Please be clear which SAP Standard role you are willing to split into roles and i can provide more details.
Hope this helps.
Regards,
Kiran Kandepalli

Implications of uploading roles from SAP 4.7 to SAP ECC 6.0 EHP 5?

HI Gurus,
Please tell what would be the cons for uploading the roles from SAP 4.7 to ECC6.0 EHP5.
Would there be issues in doing the same?
Regards,
Sonu

Hi Sonu,
There me be changes in authorization object assignment for the roles. Some objects may be deleted and new objects may be addedd to the transactions.
Instead of uploading you can better get the list of transactions for every role and create them newly in ECC 6 EHP 5 system and maintain them according to the old roles.
Thanks,
Kranthi

SAP Standard roles assignment

Hi,
I want to assign a SAP standard role SAP_BC_BMT_WFM_ADMIN to a user.
Since I do not directly assign a SAP standard role to a user,i created a copy of the SAP_BC_BMT_WFM_ADMIN of the role and tried assigning it to the user.
But when I tried to generate the role I was not able to because all the objects are Inactive.So when i tried to activate the object it is not possible to do so.
Can anyone provide me a solution for this.
Regards,
Arjun

> But when I tried to generate the role I was not able to because all the objects are Inactive.
Please try to tell us a bit more about what you see and which messages you get. I had a look at this role in my customers'system and did not see any deactivated objects.

Download all roles Individually and list all the SAP standard roles

Hi ,
I have two questions .
1. I want o download all the roles individually in SAP.
2. I want to list all the SAP standard roles whose profile is generated.
Can anyone help me . to achieve this

Dear,
I am no sure what kind of problem you have faced that requires revert back. Which took 2 days. If it's for mass role revert back then mass role download should work. If it few selective role then change history should help you out.
Anyway I might pull this out of the topic.
Even you download mass role in a single file then also if you want then can upload a single role only with 2-3 mins spending on replace function in notepad!!
Let say you have taken 1000 role in a single file and want to upload a specific role only. Open the file (copy of the file) in a notepad. Now replace(Ctrlh) LOADED_AGRS with nothing. Find(Ctrlf) the role you want to upload. In begining of that line paste LOADED_AGRS
Above file will upload the specific role only.
Regards,
Arpan Paik

How to populate custom fields in SAP standard Basic type DELFOR01(E1EDK09)

I've a requirement to include and populate 2 custom fields in SAP standard basic type DELFOR01 and Segment E1EDK09 (it is at hierarchy level 1 ) .
The requirement looks very simple but for this, as per my knowledge, I have to create a new Basic type with the copy of segment E1EDK09 and attach it to outbound process code and write my own function module to populate the segments.
It seems ok but the there are some existing codes in the user-exits for the SAP standard function module.These codes will not get triggered.(Or I've copy the user-exits code in my FM)
Can we do it any other way to handle this kind of situation?
Thanks in advance for your suggestions and help.

Hi Phani,
You have done it correctly. ECC additional data to be moved to EWM, 1. you need to enhance the CIF for master data/ bapi to populate the data in the custom field in EWM. 2. Make your your are not enhancing only one structure. You need to do it in the CI includes so that the field is available in all the related tables/structures.
3. The BAPI/FM which updated these tables will take care automatically to update the custom field data if the field is correctly added in all the tables.
4. If the custom fields are added correctly and still the data is not getting saved , then need to check the mapping of the custom field and bepi extension.
Let me know if this helps.

Security Issue: How to create a derived role from the Base role

Hi All,
Kindly let me know how can i create a derived role from the base role?
Please respond at the earliest.
Thanks in advance.
Ramesh.

Go to PFCG and Create a role with desired Name.
In the Description Tab, on the Left Side there is a text box for "Derive From "
enter the Base role.
Now your newly created role is derived from the Base role.
Save the newly created role and again run PFCG, enter the Base role name and execute.Select Edit role. Go to Authorization tab.
Edit Authorization.
In the Menu Adjust Derived -> Generate and Adjust derive
This will Generate the derived role.
Now you may go and check the authorization in the derived role.

Fetch data from SAP Standard Reports

Hi,
I want to fetch the data of internal Table from SAP-Standard Reports. After than I can use in different report of these data. So Please guide me how to do this. How to fetch the data for use in different programs at run time of new object.
Thanks !
Ram Shanker
Edited by: Ram Shanker on Feb 7, 2012 6:02 PM

YOU WANT LIKE THIS
SELECT VBELN FKART FKDAT KUNAG FROM VBRK CLIENT SPECIFIED INTO TABLE IT_VBRK
    WHERE MANDT = SY-MANDT AND FKDAT IN SO_YEAR
    AND FKART IN SO_TYPE
    AND BUKRS IN SO_BUKRS
    AND KUNAG IN SO_KUNAG.
*********Selection from Billing Document: Item Data ******
IF IT_VBRK[] IS NOT INITIAL.
    SELECT VBELN POSNR FKIMG AUBEL AUPOS MATNR INTO TABLE IT_VBRP
      FROM VBRP CLIENT SPECIFIED FOR ALL ENTRIES IN IT_VBRK
      WHERE MANDT = SY-MANDT AND VBELN = IT_VBRK-VBELN
      AND MATNR IN SO_MATNR.
********Selection from Material Descriptio*****
    IF IT_VBRP[] IS NOT INITIAL.
      SELECT MATNR MAKTX INTO TABLE IT_MAKT
        FROM MAKT CLIENT SPECIFIED FOR ALL ENTRIES IN IT_VBRP
        WHERE MANDT = SY-MANDT AND MATNR = IT_VBRP-MATNR.
    ELSE.
      MESSAGE TEXT-005 TYPE TEXT-001.
      STOP.
    ENDIF.
ELSE.
    MESSAGE TEXT-005 TYPE TEXT-001.
    STOP.
ENDIF.
IF IT_VBRP[] IS NOT INITIAL.
*********Selection from Sales Document: Business Data ******
    SELECT VBELN POSNR KDKG1 INTO TABLE IT_VBKD
      FROM VBKD CLIENT SPECIFIED FOR ALL ENTRIES IN IT_VBRP
      WHERE MANDT = SY-MANDT AND VBELN = IT_VBRP-AUBEL
      AND POSNR = IT_VBRP-POSNR
      AND KDKG1 IN SO_VTEXT.
    IF SY-SUBRC <> 0.
      IF SO_VTEXT IS NOT INITIAL.
        MESSAGE TEXT-028 TYPE TEXT-001.
        STOP.
      ENDIF.
    ENDIF.
ENDIF.
IF SO_VTEXT IS NOT INITIAL.
    SORT IT_VBKD BY VBELN POSNR.
    SORT IT_VBRP BY AUBEL POSNR.
    LOOP AT IT_VBKD INTO WA_VBKD.
***Selection to get warranty period
      SELECT SINGLE VTEXT FROM TVKGGT INTO WA_FINAL-VTEXT
      WHERE KDKGR = WA_VBKD-KDKG1
      AND SPRAS = 'EN'.
      READ TABLE IT_VBRP INTO WA_VBRP WITH KEY AUBEL = WA_VBKD-VBELN POSNR = WA_VBKD-POSNR.
      IF SY-SUBRC = 0.
        WA_FINAL-VBELN = WA_VBRP-VBELN.
        WA_FINAL-POSNR = WA_VBRP-POSNR.
        WA_FINAL-FKIMG = WA_VBRP-FKIMG.
        WA_FINAL-AUBEL = WA_VBRP-AUBEL.
        WA_FINAL-AUPOS = WA_VBRP-AUPOS.
        WA_FINAL-MATNR = WA_VBRP-MATNR.
        CALL FUNCTION 'CONVERSION_EXIT_ALPHA_OUTPUT'
          EXPORTING
            INPUT = WA_FINAL-MATNR
          IMPORTING
            OUTPUT = WA_FINAL-MATNR.
      ENDIF.
      READ TABLE IT_VBRK INTO WA_VBRK WITH KEY VBELN = WA_VBRP-VBELN.
      IF SY-SUBRC = 0.
        WA_FINAL-FKART = WA_VBRK-FKART.
        WA_FINAL-FKDAT = WA_VBRK-FKDAT.
      ENDIF.
      READ TABLE IT_MAKT INTO WA_MAKT WITH KEY MATNR = WA_VBRP-MATNR.
      IF SY-SUBRC EQ 0.
        WA_FINAL-MAKTX = WA_MAKT-MAKTX.
      ENDIF.
***Selection to get sold to party
      SELECT SINGLE NAME1 FROM KNA1 INTO WA_FINAL-NAME1
      WHERE KUNNR = WA_VBRK-KUNAG.
      APPEND WA_FINAL TO IT_FINAL.
    ENDLOOP.

Modifying SAP standard roles - best practice

Hi,
Is there a Best practice How-to guide for configuring SAP BPs roles for client use. I know I shouldn't change the content delivered by SAP but I'm not quite sure what I should delta link copy into client namespace.
I am implementing MSS. Do I just delta link copy the Manager role into client namespace or I should make a delta link copy of the My Staff workset then make changes to the workset and assign it to a completely new ClientManager role?
I have the TransportEP6Content how to guide but it doesn't say explicitly what is best parctice. This doc references 'HowTo Use Business Packages in Enterprise Portal 6.0' but it isn't where it says it is on service marketplace.
TIA,
J

Hi,
'How to use Busiess Packages in Enterprise Portal 6.0' is available in this link.
http://help.sap.com/bp_epv260/EP_EN/documentation/How-to_Guides/misc/Using_Business_Packages.pdf
Check out for the best practices.
Regards,
Harini S

Custom Button in Sap Standard webdynpro Component

Hi Friends,
i have one requirement
1. want to added one custom Button in SAP SRM standard webdynpro component - This is done using component configurator
2. but when i click this button, one   Z webdynpro component should run,
Can any one please give me idea on this
Thanks and Regards
Kumar Srini

Hi,
copy below given code and paste inside of your on action method,
Note: just change the url address
data: l_window type ref to if_wd_window_manager.
data: l_cmp_api type ref to if_wd_component.
data: str             type stinrg.
data: result        type if_wd_window.
CALL METHOD cl_wd_utilities=>construct_wd_url
EXPORTING
application_name = 'ZWEBDYNPRO COMPONENT NAME'
IMPORTING
out_obsolute_url = str.
l_cmp_api = wd_comp_controller->wd_get_api( ).
l_window = l_cmp_api->get_window_manager ( ).
result = l_window->create_external_window(
url = str ).
result->open( ).

How to Transfer Customizing Data from SAP ECC6 to SAP Solution Manager

Hi all,
I want to Transfer Customizing Data (such as organization structure) from SAP ECC6 to SAP Solution Manager.Please tell me how. Thanks.

Hi,
The system cannot capture the customizing data from your ECC6. This is another myth with SAP Solution Manager. Solution Manager can only smoothen the process of your Project Management.
Hope this solves your problem.
Feel free to revert back.
--Ragu

Creation of a custom TAB in SAP standard Transcation

Hi Experts,
Request the ones who created a customized TAB in any standard trascation .Say in ME22N. We will have some tabs at Line item level. Now our requirement is to add one more tab. For that we need to know
whether we have to create screen through se51 and attach it to screen ? or we should use any user exit or badi to create screen or we need to create screen by using configuration?
If anybody having hand-on knowledge about this TAB creation...request you to share the same....Detailed information and fast response will be highly appreciated...Ofcourse reward points for suitable entry.....
Thanks,
Sampath

Hi
IF you want to add one subscreen in the PO screen then use MM06E005 screen exit .
Create your screen and activate the exit and the screen will appear on the ME21n screen.
Other wise use the BADI for PO screen.
Thanks
Lincon

Customer role from sap standard role SAP_SM_SCHEDULER_DIS or SAP_SM_SCHEDUL

Similar Messages

Maybe you are looking for