Duplicate profiles and Roles

Hi,
I created a few profiles with special roles and metadata fields in my ucm.
I did all the work in my computer and now i want to change the machine(computer) and i don't want to loose all my work.
Are there any ideas how to duplicate all my profiles and roles(my configuration) to another computer??
NOTE: I just want to duplicate my custom environment of the ucm.
Eran z

For this purpose you have Administration -> Comfig Migration Admin (Configuration Migration Utility).
http://download.oracle.com/docs/cd/E17904_01/doc.1111/e10792/c06_migration.htm#CHDBIJAJ
Regards,
Boris

Similar Messages

Profile and roles internet sales

Hi.
I need profiles and roles that are use in internet sales.
Thanks

There are basic three type of user in ISA.
1) B2B_FULL
2) B2B_ORDER
3) B2B_VIEW
For B2B Full below is the Roles
SAP_ISA_B2B_FULL
SAP_ISA_SUB_BILLING_VIEW
SAP_ISA_SUB_CATDISPLAY
SAP_ISA_SUB_CATPRICE
SAP_ISA_SUB_CONTRACT_UI
SAP_ISA_SUB_CUSTOMER_READ
SAP_ISA_SUB_ORDER_MAINTAIN
SAP_ISA_SUB_QUOT_DISPLAY_UI
SAP_ISA_SUB_QUOTATION_UI
SAP_ISA_SUB_RFC
SAP_ISA_SUB_TEMPLATE_MAINTAIN
For B2B_ORDER
SAP_ISA_B2B_ORDER
SAP_ISA_SUB_CATDISPLAY
SAP_ISA_SUB_CATPRICE
SAP_ISA_SUB_CONTRACT_UI
SAP_ISA_SUB_CUSTOMER_READ
SAP_ISA_SUB_ORDER_MAINTAIN
SAP_ISA_SUB_QUOT_DISPLAY_UI
SAP_ISA_SUB_RFC
SAP_ISA_SUB_TEMPLATE_MAINTAIN
For B2B_VIEW
SAP_ISA_B2B_VIEW
SAP_ISA_SUB_CATDISPLAY
SAP_ISA_SUB_CATPRICE
SAP_ISA_SUB_CUSTOMER_READ
SAP_ISA_SUB_RFC
SAP_ISA_SUB_TEMPLATE_MAINTAIN
pl. reward a point if it helps you.
Thanks and Regards.
Ashish Patel.

Difference between profile and role

Can any explain me the difference between profile and role.
I was given a user Id on ABAP stack of XI.
My profile: SAP_ALL
I was not assigned any roles.
I am not sure if I need different roles or this profile
would serve the purpose.
-Naveen.

Hi Naveen,
Adding to Gus points a few more inputs.
Profiles were the menas of assiging authorizations to users until 4.0 Versions.
Later to the same it was upgraded to the concept of Roles. The crux always remains the same.
Be it a profile or a role, it contains the Auth Object and the respective values.
But in present scenario, you can get confused by the profiles that are assignable to Users.
IN short the following points can be helpful.
1. The profiles like SAP_ALL;SAP_NEW,S_SPO_ALL etc are standard Profiles delivered by SAP which when assigned to a user in his profile in SU01 would get all the related authorizations.
( You must be lucky to have SAP_ALL assigned to ur ID by ur basis guy)
2. A role is created by assigning a few transactions to this role and when this role is generated, it generates a PROFILE. But this profile is a system generated one and cannot be ever assigned to any user. These profiles can be sorted out as they have the standard naming like T-XXXXXXXX where they are the numbers and it can never be assigned to any user.
3. Note prior to 4.0 its all Profiles that are assigned to users and later to the same came the concept of Roles and hence this change.
Hope the answer is helpful in making u undersand a few inputs form my side.
FYI:
Method to create a role can be checked out from the link below.
http://help.sap.com/saphelp_bw21c/helpdata/en/52/6714b6439b11d1896f0000e8322d00/frameset.htm
Br,
Sri
Award points if answer is helpful.

Oracle Profile and Role scripts

RDBMS :Oracle 10.2
Hi,
I have several Profile and Roles on my server.
Can I extract sql to create those Profile and Roles ?
e.g. I have role datareader, I want to extract its creation script and it include all the privileges assigned to that role
thanks

try
SELECT dbms_metadata.get_ddl('ROLE', 'datareader') FROM dba_roles;
SELECT dbms_metadata.get_granted_ddl('ROLE_GRANT', 'datareader) FROM dual;
SELECT dbms_metadata.get_granted_ddl('SYSTEM_GRANT','datareader') FROM dual;
SELECT dbms_metadata.get_granted_ddl('OBJECT_GRANT','datareader') FROM dual;
datareader should be in CAPS

Creatkion of customized profiles and roles

Dear Experts,
Im new to SAP and SDN.
My requirement is that i need to create a new profile for technical people
as z_tech_role giving access to transactions as SE38,S71,smartforms etc.
Similarly a functional one needs to be developed as z_func_role access to Se16,
solar01,solar02 ,va01,ad other VA transactions.
The same for a workflow profile.
Can you please provide me with steps how i need to create this profile and how to attach roles in it to the profile.
Thanks in advance

Hi,
There is one forum for SAP Security, you've to post this message in that forum to get quick and exact reply..
Anyways, please follow the help.sap link above povided already.
Somebasic concepts:
1. Tcodes are assigned to Roles.
2. When Roles are generated, they create profiles.
3. Roles are assigned to Users. (profiles are not directly assigned, except few like sap_all, sap_new etc)
So what you can do, create a role z_tech_role in PFCG and add transaction SE38,S71.. etc.then maintain authorizations, generate the role. and then go to user tab, add the users whom you want to be assigned with the new role z_tech_role. (role assignement can also be done in SU01, roles tab)
Thanks,
Debasis.

Two user with same profile and role having different authorization

Dear All,
I have very strange case of authorization . We have a new abap developer in our company . Her profile as copied from an exiting abap developer's profile in Development system. But she don't have authorization for lot of transaction that the existing user have. I checked the profile tabs , role tabs . then done the user compare for all the roles , but of no use.
I did a compare of the two uses using S_BCE_68001430 and could see is that the existing abap user is having authorization starting with T_PXXXXXXXX that is giving him extra rights. These authorization is not present in any of the existing role he is assigned to (checked using S_BCE_68001396). The authirsaction in the roles start with T-DXXXXXXXX
Will appreciate if any one can give any input . The problem is i need to assign each authorisation the existing user having manually to the new user.
regards
Tony

Thanks for the mail.
I check the "Reference User for Additional Rights" -- there is no refernce user assgined.
I checked the table USR04 the no. of Profle for the two users are diffrent and in the table UST04 also the the existing uer is having addtional profiles.
I like to add one more point Some of the roles of the two users are composite roles and both the composite and its orignial roles are included the profile of both users.
Does any one have idea of the authorisations starting with T_PXXXXXXXX
regards
tony
MANDT BNAME          PROFILE
100   CHARLHO        B_LSMW_ALL
100   CHARLHO        T-D1780054
100   CHARLHO        T-D1780057
100   CHARLHO        T-D1780058
100   CHARLHO        T-D17800581
100   CHARLHO        T-D1780075
100   CHARLHO        T-D17800751
100   CHARLHO        T-D1780086
100   CHARLHO        T-D17800861
100   CHARLHO        T-D17800862
100   CHARLHO        T-D17800863
100   CHARLHO        T-D17800864
100   CHARLHO        T-D1780087
100   CHARLHO        T-D1780088
100   CHARLHO        T-D1780247
100   CHARLHO        T-D1780304
100   CHARLHO        T-D1781182
100   CHARLHO        T_P0920411
100   CHARLHO        T_P09204111
100   CHARLHO        T_P092041110
100   CHARLHO        T_P09204112
100   CHARLHO        T_P09204113
100   CHARLHO        T_P09204114
100   CHARLHO        T_P09204115
100   CHARLHO        T_P09204116
100   CHARLHO        T_P09204117
100   CHARLHO        T_P09204118
100   CHARLHO        T_P09204119
100   TESTUSER2      B_LSMW_ALL
100   TESTUSER2      T-D1780054
100   TESTUSER2      T-D1780057
100   TESTUSER2      T-D1780058
100   TESTUSER2      T-D17800581
100   TESTUSER2      T-D1780075
100   TESTUSER2      T-D17800751
100   TESTUSER2      T-D1780086
100   TESTUSER2      T-D17800861
100   TESTUSER2      T-D17800862
100   TESTUSER2      T-D17800863
100   TESTUSER2      T-D17800864
100   TESTUSER2      T-D1780087
100   TESTUSER2      T-D1780088
100   TESTUSER2      T-D1780247
100   TESTUSER2      T-D1780304
100   TESTUSER2      T-D1781182

Custom Auth. Object with Profile and role assignment not working

Hi,
I have created custom Authorization Object with field ACTVT with allowed values - 01,02, 03. Now test it with custom program using AUTHORITY-CHECK OBJECT 'Z_AUTHORIZ' it is working fine and returning sy-subrc 12. At this point i have not created any role using this Auth Object.
Now I have created custom role ZPM_**** and assigned above Auth object to it with value ACTVT 03. Assigned this role to user.
When I try to test the above custom program with any ACTVT value it is giving sy-subrc as 0. Used below custom code in program.
AUTHORITY-CHECK OBJECT 'Z_AUTHORIZ'
ID 'ACTVT' FIELD '01'.
Am I missing anything? The profiles are generated correctly.
Best Regards,
Nilesh

Below are the screen shots for PFCG:

Duplicate Profiles and Syncing Issues

My duplicate accounts are:
# [email protected]
# [email protected]
# [email protected]
I have a problem that has plagued me for several years now and keeps getting worse. I have three profiles setup because of various log-in issues over the years. I would like to merge these profiles or get rid of two of them, whatever is easiest. The main issue this is causing me is that I never know what I am logged in as when I do things like post in the forums. Further, I can't get syn to work at all. Especially between Mobile and Desktop. Any ideas?
The issue I have with syncing between devices and desktop is that both show the "Connect to Sync" codes, meaning that neither is going to allow me to input the code from the other. I've tried everything.
Basically, I have used Chrome for the past 6 months because of this issue. I'd like to get back to Firefox, but not if I can't sync and can't have a single functioning profile.

For this purpose you have Administration -> Comfig Migration Admin (Configuration Migration Utility).
http://download.oracle.com/docs/cd/E17904_01/doc.1111/e10792/c06_migration.htm#CHDBIJAJ
Regards,
Boris

BAPI to create,get Profiles and roles

Hi,
I am using the SAP RFC SDK to do the provisioning of entities in the SAP environment.
My SAP system is 6.20 .
I wanted to know if there are BAPI's which exist for the following
a)Profile creation
b)Profile Fetching
c)Role creation
d)Role Fetching
I could not find the same in the SAP IDM document provided for IAM vendors
Best Regards
Manoj

Hi Manoj,
Everything you need to know about this, and more, can be found in the following PDF from SAP: <a href="https://www.sdn.sap.comhttp://www.sdn.sap.comhttp://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/668e6629-0701-0010-7ca0-994cb7dec5a3">SAP Identity Management APIs</a>.
In summary:
To find a user's roles and profiles, use BAPI_USER_GET_DETAIL.
To assign & delete a user's roles, use BAPI_USER_ACTGROUPS_ASSIGN and BAPI_USER_ACTGROUPS_DELETE.
To assign and delete a user's profiles, use BAPI_USER_PROFILES_ASSIGN and BAPI_USER_PROFILES_DELETE.
Hope this helps,
Darren
<a href="http://www.fortybeans.com/">My blog</a>

Mybt history disappeared, duplicate profiles and a...

Anyone else having problems with their account holder status. got in touch with online chat more than 2 weeks ago, no longer the primary account after hours trying to fix another problem with my account. Pin doesn't work, spent another hour trying to sort Friday and would told it would be done with 28 hours. Now I can log on but my entire onlline billing and payment history has disppeared, plus all my orders etc. Basically, the site is pointless to me.
Still the same problem that I'm my account holder status is still pending.. and same problems that the pin which was sent out doesn't work.
don't get anywhere with online chat at all. so disappointed. last time logged in successully was told I'd be in debt at the end of the year but can't access any of the bills to see why this is.
Have both phone and broadband with BT... and been a BT customer for almost 20 years. Anyone know how to get results, because frankly I'm not getting anywhere with what I see is essentially a technical problem. Surely it must be a simple thing to sort?

I have asked a moderator to provide assistance, they will post an invite on this thread.
They are the only BT employees on this forum, and are a UK based team of people, who take personal ownership of your problem.
Once you get a reply, make sure that you are logged into the forum, then click on their name, you will see a screen like this. Click on the link as shown below.
Please do not send them a personal message, as they may not be on duty for a long time, and your message will not be tracked properly.
For your own security, do not post any personal details, on this forum. That includes any tracking number you are give.
They will respond either by phone or e-mail within 5-6 working days.
Please use the tracked e-mail, to reply, not via the forum. Thanks
This is the form you should see when you click on the link. If you do not see this form, then you have selected the wrong link.
When you submit the form, you will receive an enquiry number, so please keep a note of it
There are some useful help pages here, for BT Broadband customers only, on my personal website.
BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

Analysis Authorization (Role, Profile and Direct Assignments)

Analysis Authorization Question:
1) In BW 3.x environment, customers have used Role Maintenance Process to assign proper object level security and then assign to the users.
2) Most of the places R/3 security team takes over support/administration function of BI Security and they continue to use Role method to assign Reporting Authorizations as per the process defined in BW 3.x system.
3) Customer sometime have 100 + Roles to have 3.X Reporting Authorizations. This is Managed, assigned, approved using role concept.

Migration Options:
1) New Analysis Authorization makes process of Role Maintenance like "hierarchy authorizations" of BW 3.x. You have to create Value in other transactions and assign them in Role as a pointer or link object. With Analysis Authorization concept, Actual value of the Object Assigned Like Company code 1100 not visible in Role Maintenance PFCG transactions. It is only visible in Transaction code RSECADMIN.
2) Analysis Migration Tool - RSEC_MIGRATION does not update ROLES. It creates or changes PROFILES.
3) Profiles are assigned to the users and Roles does not reflect any Impact by Analysis Authorization migration.
Questions
a) This means customer need to update all the roles by hand. If they want to use Roles to manage the assignment of the Security to users. Migration Tool does not update Roles, it only updates PROFILES.
b) Does any one use direct assignment to Users? It is good business practice?
c) Is Profiles recommended method of Authorization Maintenance?
d) Can we run migration tool to create Analysis Authorizations, but not assign to the users as a Profile. But stop at creating Analysis Authorizations. If Customer wants to use Roles maintenance process then, they can do not have delete profile assignments from all users before updating Roles using Analysis Authorizations.
Just want to check how other folks have done migration that can be supported going forward.
Pankaj Gupta

Hey Pankaj,
In general, assigning the analysis authorization directly to user makes a lot of sense for granular levels of authorization. For example, if you had 3,000 users, 3,000 specific authorization combinations, and 3,000 roles, using roles is a lot of additional overhead. If you had 12 roles and 3,000 users, your role concept makes a lot of sense.
Therefore, the recommendation is that it varies on what makes the most sense logically. Authorization groups can be created to group analysis authorizations and combine them. Also, you have the ability to generate analysis authorizations using the Content Datastores for this. That is an option as well.
RSEC_MIGRATION does use profiles as you've stated. If you want, there would be manual work to convert to roles afterwards. In case you haven't seen Marc's presentation on security, it's pretty good and covers how to generate authorizations from the datastore.
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/media/uuid/ac7d7c27-0a01-0010-d5a9-9cb9ddcb6bce

Background job fails for BDC profile creation and role assignment

Hi Experts,
I have created a BDC Function module for Tcode 'PFCG' for profile creation and role assignment, and called this FM in my zprogram. the problem is that when i run this program in foreground it executes succesfully, but if i schedule it in background it fails throwing error in job log 'Role 'Z...' does not contain any active authorizations'. But i have created one more program to create authorization objects which runs before this zprogram.I have also checked the authorization object in 'RSECADMIN', it reflects active. I dont understand whats happening exactly when it runs background.
Below is the process of job
 1. ZMIS_AUTH_OBJECT_CREATE
 Variant : auth-create
 2. ZMIS_AUTH_ASSIGN_TO_ROLE
 Variant : auth-assign
The problem is in second program, runs in foreground but fails in background.
Code which i have written in my second program
***BDC for Profile creation and assignment to Roles
 CALL FUNCTION 'ZROLE'
 EXPORTING
 ctu = 'X'
 mode = p_mode
 UPDATE = 'L'
* GROUP =
* USER =
* KEEP =
* HOLDDATE =
 nodata = '/'
 agr_name_neu_001 = wa_role-role_name
 text_002 = wa_role-desc
 text_003 = wa_role-desc
 text_004 = wa_role-desc
 value_01_005 = 'T-ML330881'
 h_fval_low_01_006 = wa_role-auth
 profn_007 = lv_profile
 ptext_008 = lv_text1
* IMPORTING
* SUBRC =
 TABLES
 messtab = temp_message.
***Generation of Profile created
CALL FUNCTION 'PRGN_AUTO_GENERATE_PROFILE_NEW'
 EXPORTING
 activity_group = wa_role-role_name
* PROFILE_NAME =
* PROFILE_TEXT =
 no_dialog = ' '
 rebuild_auth_data = ''
 org_levels_with_star = ' '
 fill_empty_fields_with_star = 'X'
 template = ' '
 check_profgen_tables = 'X'
 generate_profile = 'X'
 authority_check_pfcg = 'X'
 EXCEPTIONS
 activity_group_does_not_exist = 1
 activity_group_enqueued = 2
 profile_name_exists = 3
 profile_not_in_namespace = 4
 no_auth_for_prof_creation = 5
 no_auth_for_role_change = 6
 no_auth_for_auth_maint = 7
 no_auth_for_gen = 8
 no_auths = 9
 open_auths = 10
 too_many_auths = 11
 profgen_tables_not_updated = 12
 error_when_generating_profile = 13
 OTHERS = 14 .
Experts please help me out its very urgent. your help is appreciated and rewarded. Thanking you in advance.
Regards,
Chetan

Hi Praveen,
Yeah definately, my requirement is that I have to access of some BI reports to certain users, so contract data will be downlaoded from ECC on application server, need to read that file from application server and for the each contract i ahould create a authorization object, role creation and assigning of role to the user and profile generation and activation.
To achieve this i have written two programs
1) ZMIS_AUTH_OBJECT_CREATE- This program will create the Authorization Object using BDC and Role creation Using the BAPI
"" Creation of Authorization Object
CALL FUNCTION 'ZAUTHOBJ'
 EXPORTING
 ctu = 'X'
 mode = p_mode
 UPDATE = 'L'
* GROUP =
* USER =
* KEEP =
* HOLDDATE =
 nodata = '/'
 g_authname_001 = 'ZDUMMY_MIS'
 g_targetauth_002 = wa_tab-auth
 g_authtxt_003 = wa_tab-short_desc
 g_authtxtmd_004 = wa_tab-med_desc
 marked_04_005 = 'X'
 g_authtxt_006 = wa_tab-short_desc
 g_authtxtmd_007 = wa_tab-med_desc
 tctiobjnm_04_008 = 'ZBUS_UNIT'
 g_authtxt_009 = wa_tab-short_desc
 g_authtxtmd_010 = wa_tab-med_desc
 marked_05_011 = ''
 opt_01_012 = 'EQ'
 low_01_013 = wa_tab-bu
 g_authtxt_014 = wa_tab-short_desc
 g_authtxtmd_015 = wa_tab-med_desc
 marked_04_016 = 'X'
 g_authtxt_017 = wa_tab-short_desc
 g_authtxtmd_018 = wa_tab-med_desc
 tctiobjnm_04_019 = 'ZCONTRCT'
 g_authtxt_020 = wa_tab-short_desc
 g_authtxtmd_021 = wa_tab-med_desc
 marked_05_022 = ''
 opt_01_023 = 'EQ'
 low_01_024 = lv_contract
 g_authtxt_025 = wa_tab-short_desc
 g_authtxtmd_026 = wa_tab-med_desc
 g_authtxt_027 = wa_tab-short_desc
 g_authtxtmd_028 = wa_tab-med_desc
 g_authname_029 = wa_tab-auth
* IMPORTING
* SUBRC =
 TABLES
 messtab = temp_message.
"" Creation of role
LOOP AT it_role INTO wa_role.
 CLEAR wa_text.
 wa_text-text = wa_role-desc.
 wa_text-langu = 'E'.
 APPEND wa_text TO it_text.
 wa_jobrole-agr_name = wa_role-role_name.
 wa_parentrole-agr_name = 'ZM_CT_DUMMY_MIS'.
 wa_method-usmethod = 'CHANGE'.
 CALL FUNCTION 'ZBAPI_JOBROLE_CLONE'
 EXPORTING
 jobrole = wa_jobrole
 parent = wa_parentrole
 method = wa_method
 TABLES
* RETURN =
 shorttext = it_text
* LONGTEXT =
* MENU_NODES =
* MENU_TEXTS =.
 ENDLOOP.
2) ZMIS_AUTH_ASSIGN_TO_ROLE - This program will generate the profile created assign it to the role.
""*BDC for Profile creation and assignment to Roles
 CALL FUNCTION 'ZROLE'
 EXPORTING
 ctu = 'X'
 mode = p_mode
 UPDATE = 'L'
* GROUP =
* USER =
* KEEP =
* HOLDDATE =
 nodata = '/'
 agr_name_neu_001 = wa_role-role_name
 text_002 = wa_role-desc
 text_003 = wa_role-desc
 text_004 = wa_role-desc
 value_01_005 = 'T-ML330881'
 h_fval_low_01_006 = wa_role-auth
 profn_007 = lv_profile
 ptext_008 = lv_text1
* IMPORTING
* SUBRC =
 TABLES
 messtab = temp_message .
 COMMIT WORK AND WAIT.
""*Generation of Profile created
LOOP AT it_role INTO wa_role.
 CALL FUNCTION 'PRGN_AUTO_GENERATE_PROFILE_NEW'
 EXPORTING
 activity_group = wa_role-role_name
* PROFILE_NAME =
* PROFILE_TEXT =
 no_dialog = ' '
 rebuild_auth_data = ''
 org_levels_with_star = ' '
 fill_empty_fields_with_star = 'X'
 template = ' '
 check_profgen_tables = 'X'
 generate_profile = 'X'
 authority_check_pfcg = 'X'
 EXCEPTIONS
 activity_group_does_not_exist = 1
 activity_group_enqueued = 2
 profile_name_exists = 3
 profile_not_in_namespace = 4
 no_auth_for_prof_creation = 5
 no_auth_for_role_change = 6
 no_auth_for_auth_maint = 7
 no_auth_for_gen = 8
 no_auths = 9
 open_auths = 10
 too_many_auths = 11
 profgen_tables_not_updated = 12
 error_when_generating_profile = 13
 OTHERS = 14
 IF sy-subrc <> 0.
 MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
 WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
 ENDIF.
ENDLOOP.
For creating authorization objects, role & profile i have created one dummy auth, dummy role & dummy profile respectively.
i have created dummy objects to copy the roles from dummy object and assign the same to new Auth obj, role & profile.
Let me know what needs to be done. because these both the programs run perfectly in foreground, but fails in background.
Regards,
Chetan

Critical Action and Role/Profile Analysis

Hi,
I want to know the purpose of the Batch Risk Analysis back ground job "Critical Action and Role/Profile Analysis" in RAR 5.3.
I'm assuming that I need not run this job if I do not want the critical roles/profiles like SAP_ALL to be analysed which were defined to be critical in rule architect.
Please let me know if there is any other purpose to run the BG job "Critical Action and Role/Profile Analysis".
Thank you,
Partha

Hello Partha,
You got this right. It will analyze the defined critical actions/roles/profiles.
Regards, Varun

Critical Action and Role/Profile Analysis job in not running in GRC 5.3

Hi Team,
I am working for a client where GRC 5.3 is installed( support pack 4 and patch 1).
The installation is complete and also the post processing is done.
We have scheduled a periodic ( weekly ) incremental background job for Critical Action and Role/Profile.
Following are the parameter setting used:
Task: Risk Analysis -Batch
Batch Mode : Incremental
First time it run successfully on 28th June'09 and it is completed with spool also. But next time it is supposed to run on 4th of July'09 . But it does not. And since then it is in same state.
I am not able to find any reason that why it is behaving this way where other incremental jobs are running successfully.
It will be helpfull if any one can guide me providing the solution.
Regards,
Kakali

Hi Varun,
I go to the Job History Button. It shows the following data only :
2009-06-28 00:00:59 Done Job Completed successfully
2009-06-27 23:45:00 Started RAR_PE1CLNT100_Critical Action and Role/Profile Analysis started :threadid: 0
Under the Last Run Colomn it shows 28th June ( Status -completed)
Under Next Run Date it is showing 4th July
Follwoing are the list of Updates available From SP05
When executing the critical roles/profile jobs in background, a message
"error while executing the Job: null" comes up. ---( this one is for which come under Informer Tab)
Background job spools are not available after upgrade from 5.2 to 5.3.
Critical action and critical role/profile analysis cannot be run in
background by system. --- ( But in my case It ran for once )
Selection parameters (System, User and User Group) have been provided for
"Critical Action and Role/Profile Analysis" in Configuration->Background
Job->Schedule Job. --- ( it means it run usually)
Critical Actions report in detail view shows no results after executing the
Risk Analysis Job in the background. The same report shows data when
executed in the foreground. ( this one is for which come under Informer Tab )
When there is only one periodic job configured in RAR, this job fails to
start after the first time in the specified time. ( this is not true, becoz there other periodic jobs running successfuly)
Unable to run Informer - audit reports - critical role and profiles with
logical systems. ( this is again under Informer Tab )
I had gone through this earlier also, but not able to match any update with my problem. If if have any other suggestion you can provide me the same.
Is there any way to check for job log so that I can check what is the problem. View Log option is also greyed out as we have sap logger set up as a default logger Parameter. I have made it enable just to check but there is nothing.
Please Guide.
Regards,
Kakali

Getting domain and role profiles

i have access to the user profile and the application profile via the public API but i also need to have access to the domain profile ( i need to get some attributes at the domain level ) and found no way of doing that in the public API?
is there a way to do that via the API or do i need to create my own methods to access the ldap directory and retrieve the information?

Sreekanth, step 2 of the role has priority over the access profile.

Duplicate profiles and Roles

Similar Messages

Maybe you are looking for