Display Authorization to PE01,PE02,PE03,PE04 and PE50
Hi Experts,
We have requirement to have display authorization only to PE01,PE02,PE03,PE04 and PE50 transactions. Is it possible? Is their any alternative transactions which would provide that access?
Would really apprecaite kind guidance on the same.
Thanks in advance.
Thanks,
Aashish
Hi,
When I check in the objects behind this transactions only three objects found.
P_PCLX (HR: Clusters). Only this object has maintainance functionality. Read more about this object in
http://help.sap.com/saphelp_47x200/helpdata/en/98/b7b83b5b831f3be10000000a114084/content.htm
If you just set the filed AUTHC to R and test it. The display possibility might be okay. You can also perform trace and see if this transactions are using any other HR objects and set only display access on them as well.
and other two objects are S_TCODE and P_TCODE. Which are used to call the transactions.
Regards,
Gowrinadh
Similar Messages
-
Difference between Change Authorization Data / Display Authorization Data
Hello,
My question is wrt to implementation of "principle of treble control" i.e three SAP administrators i.e.
1. Authorization data administrator
2. Authorization profile administrator
3. User Administrator
I have created a role & added a transaction to it e.g. "FAGLL03" or "FF67".
No authorization data is displayed in the authorization tab unless I enter authorization tab with change button and provide inputs for org level field & generate profile. Even when I save the profile with the proposed name, it status still says "No authorization data exists". Since no authorization data is available, administrator 2 is unable to generate profile. If administrator 1 has to generate profile then why is administrator 2 required.
Definition of Administrator 1 is:
The authorization data administrator creates the roles, selects transactions and
maintains the authorization data. He or she simply saves the data in the Profile
Generator since he does not have the necessary authorization for generating the
profile. He or she accepts the proposed profile name T-.... The authorization data
administrator may not change users, nor generate profiles.
Definition of Administrator 2 is:
The authorization profile administrator starts transaction SUPC and chooses All
Roles. He or she then restricts his selection, for example by entering the ID of the
role to be edited. On the next screen, he or she chooses Display Profile to check
the data. If all the data is correct, he or she generates the authorization profile. The
authorization profile administrator may not change users, change the data for roles,
nor generate profiles containing authorization objects beginning with S_USER*.
Thanks.Hasan Saeed Khan wrote:
Actually I started off my question with the "implementation of treble control" that SAP course AD940 suggests.
I had never heard of this treble control and the added value of splitting rolebuilding and profile generation doesn't make much sense to me but that's my personal opinion.
On the technical side of things: in your first post you state "No authorization data is displayed in the authorization tab unless I enter authorization tab with change button and provide inputs for org level field & generate profile."
It is also possible to change the data and save this but not generate the profile yet. I just tried this by doing the following:
Create role
Add transactions to menu
Edit profile, org levels & authroization data.
Hit 'save'.
Accept proposed profile name.
Go back to PFCG main screen and ignore message of profile not being generated. (Click 'continue')
And this leaves me with a role with yellow traffic light on the authorization tab an the profile status is: "Current version not generated"
So it should be possible to maintain roles and profiles separately. -
Create Display Authorization Profile for SAP Transaction SPRO (IMG).
Dear All,
In my current implementation project there is an requirement to create display authorization profile for SPRO. I have tried a lot but was not able to do so.
Any one is having an experience in creating display profile for SPRO (IMG) ? If any one has worked on this issue then please guide me.
Thanks,
AvinashHi
This is security related question. I am not security expert.
But you can check this, Include the following authorization objects in the profile and assign this profile to the target user.
S_IMG_ACTV
S_PROJECT
S_PROJ_AUT
S_PRO_AUTH
and assign activity = 03 (Display).
Hoipe it helps.
regards
Srinivas -
Display Authorization for MASSD
Hi,
There is a requirement for giving a user only display authorizations for MASSD.
I've tried various combinations of objects, however have been unsuccessful so far..
Pls. help.
Thanks,
Saba.Hi Saba,
the proposals (values maintained in SU24) should save time to role administrators.
The developers maintain those values which make sense in their eyes. As example if they provide a transaction for creation of an item, they propably would maintain the activity 01, for a display transaction actvt=03 and so on. That will save time to admins, as they would not have to enter the values once more (compared to an empty field....). Of course, that proposals are still proposals only!
For complex transactions it makes sense, to have a proposal of which authorization objects are necessary to be able to execute that transaction.
Maybe you can remember the old procedure before pfcg had been invented - it was hard work first to identify all the objects checked with its values, then create the corresponding authorizations in SU03, then create the corr. profiles in SU02 and finally assign that profiles to users in SU01. That was really time consuming....
So the invention of pfcg opened a very comfortable and quick possibility for that tasks with a high range of automatism. Of course this automatism can only be as good as the values which are behind it. So having accurate SU24 settings help a lot.
So enjoy pfcg
b.rgds, Bernhard -
Role for display Authorizations
Hi All,
We need to know if thre are any standard Roles available by which i can have all Display authorizations in Production system.
Currently we have many Custom roles and this thisng is really messed up in our organization. So i have suggested to Standardized the role related issues and starting with MM, i would like to know if in production we can have access with all Disply rights for all relevant authorizations along with SPRO display. Can anyone suggest something on this?
Also if we need to create some "Z" or "Y" role; please suggest how we can achieve it.
thanks a lot in advance!
PrashantHi Prashanth,
First identify all the transactions which you want to have to give display authorization.
Go to PFCG--> Enter All transactions which everyou want to give authorization for display.
Save.
Go to Authorization tab check for objects vreated for relevant transactions and provide display as activity in those objects.
With Regards,
Vijaykumar P -
Complaints Display Authorization
Hi Experts,
My requirement is to restrict complaints Transaction Types to search and Dispaly for certain users.
I tried restricting autorization object CRM_CMP and CRM_ORD_PR in the PFCG roles. In Autorization object CRM_ORD_PR, though I have given Activity as Display and in Transaction types the companis which I want to be displayed.
Despite all this in the Web UI it allows me to create complaints. More over I have given display authorization for 3 complaints where as it is pops up for all complaints transaction types.
Could please guide me, if I am missing any other authorization objects to be restricted??
Only complaints should be searched and display.
Regds...
ArupHi
check all the PFCG roles if your user has multilple roles assigned and make sure that SAP_ALL and SAP_NEW profiles are not assigned to your user.
Regards,
S Reddy -
WEB UI- only Display authorization for LEADS to users
Hi Gurus,
I have a requirement like i need to give only display authorizations for users to leads.
I have created a new business role and assigned only search links. but in that search link we have Create New option. How i need to disable this.
Users needs only display authorizations for Leads.
Waiting for reply...
Regards,
Ajay.Hi Ajay,
First of all, It is possible to disable the New button on the Search page without any code change. There is an SPRO setting which is to be done in order to achieve this.
You might have created a new z navbar profile as you have created a new business role as per your business requirement.
Lets take an example, you want to disable the New button on Contact Search Page. follow these steps:
1.Go To T. code /ncrmc_ui_nblinks
2. Select the Z navbar profile you have created for your business role
3. Double Click on "Define Generic OP Mapping" in left hand side
4. Select Object Type as BP_CONTACT and remove the Following entry
BP_CONTACT D Create MD-BPCP-CR MD-CONP-SR
Please note the Obj. Action here D Create, if you remove this entry it means you are disabling the Create Action for this business role for object Contact.
Hope this will help you.
Regards
Ajay -
Hi all
I have to configure the CMS for NWDI setup
Iwas unable to click the LANDSCAPE CONFIGURATOR,it is in disable mode
When i login usin my user id,having NWDI.admin role and NWDI.developer roleit is saying that this use is not havin the display authorizations.
What is this DISPLAY authorization
Plz help me out
thnx
madhuhave a look at the std documentation here --
http://help.sap.com/saphelp_nw04s/helpdata/en/da/f812d366aa44ad83a30418b34dae1c/frameset.htm
it talks about authorization on CMS
Thanks,
GLM -
Hi Gurus,
I need to give display authorization of SPRO(including all the nodes)
How should i do this ?
Thanks and regards
Tushar PathakYou might want to try a search for "SPRO Display" first...
I vaguely remember about 100 threads about the same topic...
Cheers,
Julius
ps: Feel free to delete this thread if you find the answer via the search. -
Help! My iPhone 4 displays a cord to an itunes icon and I can't get it to go away...even when plugged into my computer. My computer doesn't recognize it as a device. How can I just cancel all this and get my phone back to normal?
You might want to try performing a hard reset of your device; this will restart it and generally clear out any errors, it will not erase any data on your device.
Press and hold both the home button and the lock button (the button on the top right of the iPhone) for several seconds until the Apple logo appears. -
The display on my iPod Touch is HUGE and I have no idea why. I tried the HOME button and power button at the same time.....no help. I cannot enter my unlock code because I can't scroll without entering a wrong number! HELP!!
Using three fingers, double-tap the screen.
http://support.apple.com/kb/TS3129 -
while updating my ipad to new software through itunes it got stuck and does not work anymore - it just displays the screen with symbols of itunes and the cable to connect to it - help - what should i do?
Disconnect the iPad, do a Reset [Hold the Home and Sleep/Wake buttons down together for 10 seconds or so (until the Apple logo appears) and then release. The screen will go blank and then power ON again in the normal way.] It is 'appsolutely' safe!, reconnect and follow the prompts.
If that does not work then see here http://support.apple.com/kb/HT1808 -
I used to have a +.- displayed in upper left corner to click and change text size. My sister used my computer and now I can no longer find this feature
Do you still have all toolbars visible (View > Toolbars)?
Did you use an extension or the standard zoom buttons that you can find in the toolbar palette in the View > Toolbars > Customize window ?
Press F10 or tap the Alt key to bring up the "Menu Bar" temporarily. -
Good afternoon, I would like some information I have an ipod nano 6th generation and has the same one-year warranty is only 2 months of use, and it fell down and broke the glass of the display, I called technical assistance in Brazil and informed me that Brazil has no repair services for Apple, which was the basis of its price change in the exchange is not worth half the value of the product.
I wonder how I do to change this device without the expense of 50% for the same product is in warranty?
Thanks in advance.yes agree, plus a multinational seeing a product and has no technical assistance to do the maintenance then it's no use I buy a new product if it is damaged I will always be because it has no prejudice in this maintenance.
sorry but even more products coming from China to Brazil in technical assistance. -
Have CS 5 Installed on my iMac and works ok. But installed on my new MacBook Pro it won't open NEF files from my Nikon D810. Displays NEF icons, but when I try and open them the response is: Make sure latest RAW updates are installed. If problem persists follow link: http://www.adobe.com/go/kb407111. Have installed Bridge 5.0.2.4; Raw Ref Version 7.0.0.308; DNG converter_8_7_1.dmg; Bridge 5.0.2 Update 2. Also same problem with Lightroom which I don't normally use. Lightroom_3_LS11_mac_3_6.dmg installed.
In the link you posted it states that the Nikon 810 requires ACR 8.6 or newer.
Version of ACR are specific to versions of Photoshop. You cannot use 8.6 nor even 7.0.in CS5.
I believe that ACR 6.7 is the latest that will work with CS5, so make sure you have this installed and get rid of ACR 7.
Having 2 versions of ACR will cause problems.
You have already downloaded DNG Converter 8.7.1.
Have you double clicked the DMG file to allow you to install DNG Converter on your computer?
Be aware that DNG converter is a stand-along application and not a plug-in.
You need to open DNG converter at select the FOLDER that contain your .NEF files.
Don't open the folder and try to select individual files, it doesn't work that way.
After converting your D810 files to DNGs you can then open the DNGs in CS5
The problem is your camera didn't exist when CS5 & its version of ACR was developed.
i don't use Lightroom, but the list mentions Lightroom 5.6 as needed to open D819 so your 3.6 version of LR won't cut it.
Maybe you are looking for
-
Can anyone give a quick overview of the open item clearing process? Also, can anyone give me an idea of the differences between F-03, FBRA, and F.13 t-codes in regards to how they work in the system? Any limitations around what can be cleared and w
-
Stupidly, i left auto updates on and my FCPX has been updated to the new version,10.1.3. I let it update all my files to work with the updated version but now not only do i have backups running in a constant loop but i can't seem to import any files!
-
I think I've got a memory leak and could use some advice
We've got ourselves a sick server/application and I'd like to gather a little community advice if I may. I believe the evidence supports a memory leak in my application somewhere and would love to hear a second opinion and/or suggestions. The issue h
-
Captivate Scorm 1.2 with Moodle and max. apptempts
Dear all, I am the person who pushed Captivate in our company and now everyone is looking at me because its not doing as we are used by Articulate. The setting: Moodle allows three tries to see if someone passed or failed a lesson. After the third tr
-
IPod Touch (2nd Generation) Problems
Lately my iPod Touch has been having problems. I open an app and it closes it automatically. Once it closes I have to open it again and it works. Another problem I'm facing is this... When I go to my music section and look at the albums it has two of