ESS user Authorzation

Hai Gurus
I have assigned the standard Composite role(ZSAP_EMPLOYEE_ERP) of ESS to a user.But if he logs on to his ECC, he is able to create and view the data of the selected infotypes assigned in the role.But i want restrict his permission to view and create in the ECC level.
Can anybody help...
Nidhin

Hi Maorriyan 
Structural authorizations do use authorization object, it's build on PD objects, relations and evaluation path's.
You can, in OOSB, using the Info Button, or with the report RHAUTH01, get an overview over which object are accessible for a specific user. In here, check if the approver (object type P and Personal number I Guess) is included in the list, if not you have two option:
1. If you have a relation in your HR structure defining the approver relation,  you can include this in your structural profile (OOSP), you might need to define a new evaluation path for this (OAW) .
2. You also be able to skip this check using the authorization object P_ABAP, (but please make sure if you are using this feature that do not enter the logical database in the ABAP field - by doing so you will skip all checks on the logical database) - you can find documentation on P_ABAP Here http://help.sap.com/saphelp_47x200/helpdata/en/16/b8b83b5b831f3be10000000a114084/content.htm
Regards
Morten Nielsen

Similar Messages

  • Error while creating ESS user in HRUSER

    Dear all,
    We are trying to implement ESS for one of our Client.Here we need to connect to the sandbox where all the HR Data is existing.When we create a ESS User and assign him to the Emoloyee we are getting the following error:
       *Error occurred when creating relationship for user P1126 to employee
    00001126
         Message no. PWWW105
    Diagnosis
         A user has been generated for an employee, but could not be assigned
         the employee (the "Communication" infotype in HR master data).
    Procedure
         Please create the appropriate assignment manually in HR master data.*
    We have tried of adding it manually by creating the Communication type.BUt No  Luck
    Reply asap
    Thanks & Regards
    Ravi.S

    Ravi,
    Could you please describe how you resolved this issue?  I am currently having the same problem and I cant figure it out.
    Any Helpful answers will be greatly appreciated!
    Best Regards,
    Steven

  • AE5.2:Automatic ESS User Set up and email notification to the User

    Forum,
    In AE, stageless ESS user set up creates the ESS user and sends an email to new user like below...
    This is to inform you that your request REQUESTNUMBER provisioning has been done. Your account has been created. Please find the information below.
    User ID:
    Password:
    SAPSystem:
    Is it possible to change the wording in the email? Has anyone tried it? I am aware that it is a system generated Email, but is it configurable?
    Thanks for any insight.
    Edited by: Bhanu Reddy on May 22, 2008 1:26 AM

    Just an FYI - the free Yahoo accounts do NOT use POP mail...If you want this type of access, you have to pay for the upgraded version of Yahoo Mail...
    WyreNut
    I am a Volunteer here, not employed by HP.
    You too can become an HP Expert! Details HERE!
    If my post has helped you, click the Kudos Thumbs up!
    If it solved your issue, Click the "Accept as Solution" button so others can benefit from the question you asked!

  • How to assign candidate to already existing ESS users

    Hi all,
    We implemented ESS in EP7.0 with ECC6.0 backend.we have already created ess users and asigned to employees.there is a problem with career and jobs workset.I checked in ST22.It is showing No candidate is assigned to the employee or user.How to create a candidate for the existing ESS users.I know the report RCF_CREATE_USER.But i think it is for new users.But I want to asign a candidate for the existing Ess users.Any suggestions please.
    thanx & regards,
    rajesh

    You are right, the report is also used for hirings with future start date. For hiring on date or in past the candidate is created directly / synchronous by the integration implementation. Similar to the data synchronization in E-recruiting 600.
    If you hire someone with a start date in the future you need the report scheduled. But as i said just scheduling the report won't help if you did not set up the integration properly.
    Btw: before running the report check all available updates. Last customer had to put in 19 notes to get it running.
    Btw2: You can check the attachment on note 997181 on more details for the whole integration topic.
    Best Regards
    Roman

  • ESS User maintenance by T-code HRUSER  - User ID change

    Hi,
    I have been creating ESS users ( P Users ) by T-code HRUSER. For instance, there is an employee number 5. It does two steps for us.
    1. Creates R/3 user as P00000005.
    2. Maintains system user name at IT 105 as P00000005.
    But, now I need to change the user id format created by HRUSER. I need to create using only alphabets Eg. GEORGEME.
    Please let me know how to achieve this.
    Thanks.
    Suganya

    Did you figure out how to create users using different user id?  If you have can you update thread.
    Thanks,
    Joe

  • Portal ESS users without R/3 accounts

    Hi,
    I'm not sure if this is the correct category to post this question, if not, please advise as where would be the most appropriate place to post this question.
    I would like to create portal users (EP 6.0 on WAS 6.40 SP15) for ESS access but the users do not have SAP R/3 accounts (4.7)... is this possible, if so, what would be the best steps to accomplish this.
    Thank you.
    Eloy

    Hi Eloy,
    I'm afraid Arun has a point there.
    Even though the users from ECC and Portal are different, the ESS iviews get their information from the backend, in our case ECC, through the Jco connections.
    We started out by the same thought you had, but we reached a point where we had to connect the Portal users to the ECC employees and there was no escaping from it.
    The license is different tho, even though our users are in both systems, the ESS users can only access their information through the Portal and can't get into the SAP GUI. I couldn't give you more details about it cause I'm not sure how it works either.
    Hope it helps.
    Simone

  • Clarification in ESS User Licensing

    Dear All,
    Greetings!
    We are to implement ESS in a R3 4.7 Ext 1.10 system through ITS and SAP NW EP 6.0/SP21.
    ESS Users will be using the portal system to verify their personal details and other functionalities. I have used SSO and User Mapping.
    As per the settings the user created in the Portal System also needs to be created in the R3 system with the same user name as a dialog user. When I tried creating the user as a communication user I was not able to connect to my R3 backend system from portal using the defined communication user.
    Is this because of some configuration problems in SSO and User Mapping or such a scenario is not
    possible?
    I have a series of questions,
    1. If a user is created in R3 and Portal system only with ESS roles, should the user be allowed to login to the R3 system (or) the user logging-in to R3 system violates the ESS license?
    2. If the ESS user ids are created in both the R3 and Portal systems, how will the license be calculated?
    3. Is there a possibilty of maintaining the R3 ESS user id's as a communication user and not allowing them a login through SAP Logon GUI?
    Kindly advice if I am wrong.
    Expecting your replies at the earliest.
    Thank you
    Regards,
    Vineeth

    hi
    ESS License and SAP R/3 License are different. So if you have e.g. 1000 ESS license and 500 SAP r/3 license, so in total you can have 1500 ESS users in an organisation as the 500 SAP r/3 license will work as ESS users by default. So users from departments like Lisioning, Legal and Admin, to whom you don't want to give access to SAP R/3, you can assign ESS or MSS role accordingly through which they can access ESS MSS services without access to R/3.
    But before my strong confirmation I would like to speak with Sales/SAP Concerned person.
    regards
    Vijay

  • Display custom service for an ESS user

    Hi,
    I need to extract Employee Education details based on his Employee id ( Pernr ) from R/3 table and display them in ESS.
    For example, ESS employee 123 is accesing his data in ESS. When 123 clicks custom Education tab, it should display his details.
    I have created a ABAP program and assign T-codes, services. But this program needs Employee number as Input. How do I get his Employee number in ABAP Editor ?
    Thanks.
    jey

    Thanks for the info guys. But what I need exactly is,
    - When an ESS user click particular tab, it should display his Education details.
    - In R/3, I wrote a small program which extacts these info using <b>Personal number</b>
    - How does the program come to know which Employee ( <b>Perosnal number</b>) clicks the tab ?
    - How do I extract the clicked Employee number and pass it to my custom program ?
    Thanks
    jey

  • ESS User Issue

    Please can you advise if there is a way that managers can view their employees records through the portal if the employee does not have a IT0105.
    We are getting the following error message:
    *"Please assign ESS user to Personel Number *******. Otherwise requested service not possible"

    hi,
    In Mss , if you are using Ecc6 and eportal 7.0 , the managers can see the people under him in the MSS , only thing you need to maintain the Org structure properly.
    Regards
    sameer

  • ESS User Can't See Approver Name

    Hi All,
    Our ESS user could not see their approver name. We already checked with our functional team and this should be an authorisation issue.
    Any body had same experience?
    What is the authorisation object we need to use to close this issue?
    Thanks in advance

    Hi Maorriyan 
    Structural authorizations do use authorization object, it's build on PD objects, relations and evaluation path's.
    You can, in OOSB, using the Info Button, or with the report RHAUTH01, get an overview over which object are accessible for a specific user. In here, check if the approver (object type P and Personal number I Guess) is included in the list, if not you have two option:
    1. If you have a relation in your HR structure defining the approver relation,  you can include this in your structural profile (OOSP), you might need to define a new evaluation path for this (OAW) .
    2. You also be able to skip this check using the authorization object P_ABAP, (but please make sure if you are using this feature that do not enter the logical database in the ABAP field - by doing so you will skip all checks on the logical database) - you can find documentation on P_ABAP Here http://help.sap.com/saphelp_47x200/helpdata/en/16/b8b83b5b831f3be10000000a114084/content.htm
    Regards
    Morten Nielsen

  • Enabling ESS user to enter Bank information

    Hi All,
      I am new to SAP portal 7.3 version. My requirement is to make the ess user to enter his/her bank details for the first time and after that this should not be editable. But in the portal there is no option to add the bank details as like in others( ie. ADD option in ADDRESSES).
      How to make it available?
    Thanks in Advance
    Vengadesh R

    Hi,
    You will have to enhance the infotype. Refer the links below. It might help.
    http://scn.sap.com/community/erp/hcm/employee-self-service/blog/2014/06/30/enhancement-of-standard-infotype-in-ess-personal-profile-ehp-5-and-above
    http://scn.sap.com/community/erp/hcm/employee-self-service/blog/2012/10/10/enhancing-infotype-0009-using-de-coupled-frame-work-in-ess
    Regards,
    Navya

  • Send Email to ESs user

    hi Expert,
    How do we send email to ess User, so that when the user login to the ess he/she can see the email? And further more where exactly he/she will read the email? is there any specifi iview for that? I tried to send email via SAP Business workplace to ess user but when i login ess i just can't find the email. thanks
    Edited by: Hendri Salim on Jun 30, 2010 12:24 PM

    Hi,
    As per my understanding there are two option for sending email.
    1) Through Work Flow.
    2) Through Program.
    In program or function module please use sap standard function module to send e mails.
    You can use the FM SO_OBJECT_SEND.
    The mail can be read in outlook, lotus notes etc.
    Thanks & Regards,
    Sandip Biswas.

  • Restrict ESS user to login via sapgui

    Hello All,
    Can anyone pl  suggest if the ESS users can be restricted by some means to access into the R/3 via the sapgui.
    Thanks in advance

    Shiva,
    By design SAP B1 permits two instances for one user login.  Therefore the same user/ password will be permitted to login on 2 clients at the same time.
    I do not think this can be changed.
    Suda

  • Assign an employee on the system to ESS user profile

    I am trying to assign an employee on the system to ESS user profile and the message I get is personnel number 00000001 does not exist. When   this employee has full record on the system and is an active employee What am I doing wrong?

    hi ramana,
    IT 0185 can be used for India payroll. This is for pan no, gratuity.
    This will not affect payroll.
    OR
    We maintain subtypes in table v_t591a. Goto tcode sm30 --> v_t591a --> select maintain
    OR
    Check his Infotype 105 and see if there is a valid record for the employee.
    Regards,
    Sujatha Reddy L.

  • Mass ESS users creation

    Hi All,
    I have more thn 200 new employees, for them I have to create ESS user IDs.
    If I create ESS user IDs one by one, it will be too time consuming.
    Anybosy can help me that how can I  create mass ESS IDs.
    Thanks in Advance
    Regards,
    Priya

    Hi Priya,
    Check this:
    Re: How i can create multiple users at a time (User Administration) in EP
    Regards,
    Shyam.

Maybe you are looking for

  • Using external monitors

    I'm currently using a 17" macbook pro intel core 2 duo with one apple 23" cinema display attached in extended desktop mode. I also own a 15" apple cinema display, is there any way that I can use this also and have a total of three monitors(the built

  • Solution Monitor

    Hi All,          I am in a process of Implementing Solution Manager Monitoring for our landscape. Our landscape is ECC 6.0, XI, BW, EP. Can you please suggest what we can monitor using Solution Manager in order to get as much as possible information

  • FTP best practice with XI

    What is the best practice in using FTP adapter which is in vendor network ( external) ? If the connection parameter is set as permanent, or file per transfer, whats the major difference in performance and security? The vendor FTP has uname and pwd fo

  • Oracle VM Server for SPARC - network multipathing architecture question

    This is a general architecture question about how to best setup network multipathing I am reading the "Oracle VM Server for SPARC 2.2 Administration Guide" but I can't find what I am looking for. From reading the document is appears it is possible to

  • Counter problem

    The counter on the main page of my iWeb site seems to have stopped working although its fine on the other pages. I've fiddled around with it but can't for the life of me think what the problem is - any ideas? Digitographer http://web.mac.com/digitogr