Exclusion Indicator in PD profiles

Hello, I have a question about the exclusion indicator in IT1017 (PD Profiles. We are upgrading from 4.6C to ECC 6.0. This indicator was not available in 4.6C. We are now concerned that users may inadvertently set this indicator and the recipients authorizations will get impacted.
The documentation only states that "This field allows you to exclude branch structures from structural authorizations."
We have found that if the flag is set (and RHPROFL0 runs), the impact to the user is that they can only see their own data. We have also found that, in order to remove the flag you must remove it from IT1017 and re-run RHPROFL0 with the "delete manually maintained authorization profiles" - PD Authorizations flag switched on.
Can anyone help explain, what the exclusion indicator is used for? and it's function?
Regards,
Gino

The exclusion is used to exclude a specific piece of a structural profile you assign to a user. Example: your user has a structural profile to see all HR infotypes within his/her department. However you don't want this user to see the managers data. You can create a separate structural profile that contains the manager's personnel number.
You assign both structural profiles to the user. Either directly "on the user" using transaction OOSB (Table T77UA) where you see an identical exclusion indicator. The "manager" structural profile will have the exclusion indicator set. That way the user has access to department data exclusive the managers data.
If you assign it on the position by IT1017 you set the exlusion indicator there. You will see that if you run RHPROFL0 that T77UA will be updated with the 2 entries for the user and one will automatically have the exclusion indicator set.
The concern that users inadvertently change this indicator should be very small since there should not be very many users that have access to PO13 and/or OOSB in a production environment.
Ruud Scheenen

Similar Messages

Exclusion Flag in PD Profiles (Structural Authorizations)

Hello, I have a question about the exclusion indicator in IT1017 (PD Profiles). We are upgrading from 4.6C to ECC 6.0. This indicator was not available in 4.6C. We are now concerned that users may inadvertently set this indicator and the recipientu2019s authorizations will get impacted.
The documentation only states that "This field allows you to exclude branch structures from structural authorizations."
We have found that if the flag is set (and RHPROFL0 runs), the impact to the user is that they can only see their own data. We have also found that, in order to remove the flag you must remove it from IT1017 and re-run RHPROFL0 with the "delete manually maintained authorization profiles" - PD Authorizations flag switched on.
Can anyone help explain, what the exclusion indicator is used for? And shed some light on itu2019s function?
Regards,
Gino

The exclusion is used to exclude a specific piece of a structural profile you assign to a user. Example: your user has a structural profile to see all HR infotypes within his/her department. However you don't want this user to see the managers data. You can create a separate structural profile that contains the manager's personnel number.
You assign both structural profiles to the user. Either directly "on the user" using transaction OOSB (Table T77UA) where you see an identical exclusion indicator. The "manager" structural profile will have the exclusion indicator set. That way the user has access to department data exclusive the managers data.
If you assign it on the position by IT1017 you set the exlusion indicator there. You will see that if you run RHPROFL0 that T77UA will be updated with the 2 entries for the user and one will automatically have the exclusion indicator set.
The concern that users inadvertently change this indicator should be very small since there should not be very many users that have access to PO13 and/or OOSB in a production environment.
Ruud Scheenen

What is use of exclusion indicator in access sequence

what is use of exclusion indicator in access sequence, if we tick this indicator what will happen to pricing procedure..

Hi sahu
If you are having more than one condition tables i.e accesss in your access sequence and if you put exclusion indicator in any of the starting tables then system wont search further as it stops searching.
Ex : say you are having condition tables 501, 502,503
and you have put exclusion indicator at 502 . then system will start searching from 501 then next it goes to 502 and it stops there and it wont search further.as you have put exclusion indicator at 502.
But if you have put exclusion indicator to all accesss i.e., conditon tables then system will search from the 1st access and stops at the last access and if any valid condition record is not found in the last record then the system will take the previous conditon table record
Regards
Srinath

Exclusion indicator

what is the use of exclusion indicator in access sequence ?

hi,
In one access sequence there will be somany condition table key combination.. suppose u create condition record for all those key combination...
In sales order when system search for the condition record, system will get the vale from the first key combination itself....so if we mark tht field, system wont check for other key combination.
Sam

How to setup exclusion indicator in price?

who could give me a example about how to use exclusion indicator in price?
That is to say how to cause different result according to different indicator value.
what are needed to setup step by step?

Hi
Exclusion indicator in condition technique controls whether the system stops searching for a record after the first successful access for a condition type within an access sequence.
Condition exclusion indicator

Exclusive indicator in pricing

Hi Everyone,
I just have a simple question. What if we do not check the exclusive indicator box for the condition tables in the access sequence. What condition record does the system pick? Does it pick the last one, or the best one after going through all the condition tables or the first one it found??
Thanks in advance.
Siva

hi Silvia,
you will get all conditions, if you dont stop the search by the exclusive indicator.
Normally, all conditions are valuable --- if you ask in combination with the exclusive indicator.
There is other customizing, tha will regulate, which of the multiple condition will be active or inactive.
hans

Pricing Condition Type R/3 - CRM (Exclusion Indicator)

Hi,
I am facing problem with the condition type in the CRM.
In R/3 in contion type in Control data 2 we have a Condition Exclusion field and Same Exclusion field is not availble in CRM.
The Value in the Exclusion field is set not to perform this Condition Based on the Criteria.
I need the same Condition to perform in CRM to exclude this Condition type in sales order processing.
Can any one suggest how to and where to set or maintained this Value in Condition type in CRM
Your suggestion is Valuble.
Thanks in Advance.
Regards,
Naveen

hi,
You will have to first downlaod the Pricing condition from R/3 to CRM before downloading the condtion table,the download object is CRM_PRC_CNDTYP.
Regards,
Murali

Condition type- exclusion Indicator

In condition types we can specify exclusion
A- Invoice list
O- Event
X- Net price etc..
How are these used? What makes them differet?
Venkat

Hiii i know the system will exclude all the condition types which comes below that condition type in pri proc with the same requirement. What i wanted to know is how are
A- Invoice list
O- Event
X- Net price etc..
these three indicators different from each other? When should we use each of them.
I hope now my question is more clear.
Thanks,
Venkat

Max roles & Profiles in user?

How many roles can we assign to the user? What is the maximum limit of the roles and profiles for the user?? *

Dear Praveen,
You can assign 300 authorization profiles to a user (see SAP Note 410993).
Note 410993:
You would like to know the maximum number of:
profiles per user
authorizations per profile
authorization values per authorization
Reason and Prerequisites
All maintenance transactions work with the USR04, USR10 and USR12 tables.
Solution
As of Release 4.6A, the structure of the database tables used, and not the kernel, causes some restrictions:
1. Table USR04: Profile assignments for users
 This table contains both information about the change status of a user as well as the list of profile names that were assigned to the user.
 The PROFS field is used to save the change indicator (C = User created, M = User changed) and the name of the profiles assigned to the user.
The field is defined with a length of 3,750 characters. Since the first two characters are for the change indicator, 3,748 characters are still available for the list of profile names per user. Since the maximum length for each profile name is 12 characters, the maximum number of profiles per user is 312. Note 841612 delivered a solution for increasing the number of usable profiles per user from 300 to the maximum value of 312.
 Possible enhancements:
When you use roles exclusively, the number of profiles per user can only be doubled by assigning a reference user.
If you also use manual profiles, you can combine these to form collective profiles.
 Caution: In principle, we must advise against using these options. Reason:
Enhancements of this type increase the risk of an unwanted summation of authorizations. On the other hand, the number of entries also increases in the user buffer for authorizations (table USRBF2), which may result in longer runtimes when you perform authorization checks.
2. Table USR10: Authorizations or subprofiles per profile
 Due to the length of the AUTHS field (3,750 characters), you can enter the following maximum values in the manual profile maintenance (transaction SU02):
300 subprofiles per collective profile or
150 authorizations per single profile
Of course, the maximum value of 150 authorizations applies to the profiles generated in transactions PFCG or SUPC. Therefore, after you exceed this threshold, a new profile is automatically created.
3. Table USR12: Authorization values per authorization
 To save the authorization values, you use the VALS field, which is 3,750 characters long (just like the PROFS field in the USR04 table). Since the values can have different lengths, the number of values per authorization also varies. If you are unsure about whether VALS can accept all of the values that you maintain, you can check the length of the character string using the following formula:
NSTRING =
3 + 18*NFLDS +
NNORM( 1)(MAXLEN( 1)+1) + NGENE( 1)(MAXLEN( 1)+3) +
NNORM( 2)(MAXLEN( 2)+1) + NGENE( 2)(MAXLEN( 2)+3) +
... +
NNORM(NFLDS)(MAXLEN(NFLDS)+1) + NGENE(NFLDS)(MAXLEN(NFLDS)+3)
What the parameters mean:
NSTRING = Total length of the character string in VALS
NFLDS = Number of fields in the authorization object (10 = maximum)
MAXLEN(I) = Number of characters in the longest value in field I
NNORM(I) = Number of normal (not generic) values in field I
NGENE(I) = Number of generic values in field I
I = 1, ..., NFLDS
The absolute maximum length of an authorization value is 40 characters. NNORM(I) and NGENE(I) are the total number of values maintained in the 'From' and 'To' columns in field I.
Example:
The following authorization (chosen at random) for the S_USER_AUT object demonstrates how to apply the above formula:
Field No. Field Name From Value To Value
 1 ACTVT 03
 08
2 AUTH TESTFIAUTH00 TESTFIAUTH10
 Z*
3 OBJECT F_KNA1*
 F_BKPF*
 F_KNKK_BED
The variables have the following values:
NFLDS = 3
I MAXLEN(I) NNORM(I) NGENE(I)
1 2 2 0
2 12 2 1
3 10 1 2
This results in the following value for the length of the characterstring in the VALS table field:
NSTRING = 3 + 18*3 +
 2( 2 + 1) + 0( 2 + 3) +
 2(12 + 1) + 1(12 + 3) +
 1(10 + 1) + 2(10 + 3) = 141
Further explanations:
If NSTRING is greater than 3,750, the authorization cannot be activated or generated, which means that the values must be distributed across several authorizations. Exception: The profile generator can automatically divide authorizations in roles (activity groups) with just one field (example: the S_TCODE object) into up to 100 generated authorizations.
If profile generation fails because a role contains too many values for an organisation level, you cannot use additional authorizations to solve the problem. Due to the cross-object validity of organizational levels, their values would automatically be copied to the new authorizations. In this case, you only have the option to distribute values across several roles.
Hope this will help.
Regards,
Naveen.

Condition exclusion - how to only exclude certain ones.

Hello,
I have a condition type ZCPD that has the condition exclusion set to X (net price) in the condition record for ZCPD. The issue is that I want condition ZDUT to be relevant even though ZCPD is set with exclusion. What in the condition set up of ZDUT makes it considered for exclusion? Is it the condition class of A (discount or surcharge)? I do want all other condtions to be excluded if ZCPD is found, the only one I still want to be applied is ZDUT. How can I manage this?
Thanks for your input

Hello Vicky
Not knowing the relationship between ZCPD and ZDUT, it is hard to answer your question. I am not sure how ZDUT is affected by ZCPD.
By your description, there is a requirement in the pricing procedure that is setting the exclusion indicator to X for ZCPD under certain conditions. May be that is not a right solution for your situation.
I would suggest using condition exclusion groups and then assigning condition exclusion group to the pricing procedure to meet your requirement. Let ZCPD be in group 1, all other conditions that you want excluded when ZCPD is present ( but not ZDUT) in group 2. Then use the exclusive option while assigning to the pricing procedure.
All these config steps can be found here:
SPRO/IMG/Sales and Distribution/Basic Functions/Pricing/Condition Exclusion/Condition Exclusion For Groups Of Conditions
Link: http://help.sap.com/erp2005_ehp_04/helpdata/EN/93/7432eb546011d1a7020000e829fd11/frameset.htm
Hope this helps.

Condition exclusion between 2 condition types- Pleaase urgent

Hi gurus
Ihave some problem. please help me to configure the system.
I am giving 2 discounts and one has to excluse from other if it finds better discount.
Ex : Z001 =$5 and Z002= $6 two condition types with 2 different access sequence .(not same access sequence)
if sytem finds both I don't want to give both the discounts.
in my case how to exclude z001 because z002 is better price.
Thanks
Prasad

Condition Exclusion:
 Conditions can be linked to requirements in the pricing procedure.
 A requirement can evaluate the condition exclusion indicator and ignore the condition if set.
 The condition exclusion indicator can be set in either the condition type or the condition record.
 You may create your own exclusion indicators and test for their existence in the requirement routines.
Process Steps for Condition Exclusion:
1. Changing customer-specific prices:
Menu path:
Logistics  Sales and Distribution  Master Data  Conditions  Select using condition type  Change
Choose condition type PR00.
Choose the key combination Customer/Material with release status.
Select the condition line and click the Details button.
Enter X in the Exclusion field.
Save your changes.
2. Creating a standard order:
Menu path:
Logistics  Sales and Distribution  Sales  Order  Create
3. The conditions after condition PR00, which have requirement 2 assigned to them in the pricing procedure, are not taken into account during pricing. For example, this technique can be used when discounts and surcharges are not supposed to affect the net price.
Menu path:
Select the line item and click the Item conditions button.
Click the Analysis button at the bottom of the screen.
4. Removing the exclusion indicator:
Menu path:
Logistics  Sales and Distribution  Master Data  Conditions  Select using condition type  Change
Choose condition type PR00.
Choose the key combination Customer/Material with release status.
Select the condition line and click the Details button.
Remove the exclusion indicator.
Save your changes.
Regards,
Rajesh Banka
Reward points if helpful.

Asset exclusion is selected though it is excluded in the org. structure.

Hi SRM gurus,
We are working on a Standalone scenario (SRM 4.0) where we have assets and asset classes.
In our org. structure we have excluded two asset classes with the exclusion indicator to the corresponding attributes of the purchasing organisation.( Asset class - ANK). But when we create a SC all the assets are selected in the Item details --> Cost assignment ---> dragdown (asset).
From our case it seems there is no effect of the exclusion indicator/ we made something wrong somewhere.
Can we get few suggestions/sap notes from the group that what went wrong?
Thnx. & Reg.,
Sridhar.

Hi Mani,
Thanks a lot for your reply.
If the exclusion indicator is maintained at user level also it is not working.( all
assets are selected from the list and there is no difference between the others)
May I get any further suggestions on this issue pls.
Thx. & reg.,
Sridhar.

Regarding intrastat inclusion/ exclusion report

Hi,
In the billing document header data under the for trade tab and in the declaration there is a field called inclusion/exclusion indicator.some one please explain how this field is given a value.urgent pls.
Thanks In advance

Hi
Hope this helps.
Exclusion/Inclusion indicator for declara. to authorities
Using this indicator, you can control if a document or a document item (SD billing document, MM purchase order) will be excluded from or included in one or more types of declarations to the authorities.
Proceed as follows:
1. Define the inclusion or exclusion indicator. Define for which declaration type an inclusion or exclusion is to take place.
2. Assign the indicator to the document or document item that you want to include in or exclude from a declaration. The assignment takes place in the Foreign Trade data of the document.
3. If you also want to exclude document items with particular item types from a declaration, assign an exclusion indicator to the corresponding item types in Customizing.
Example
You want to define an exclusion indicator that excludes documents from the EXTRASTAT and KOBRA declaration. Create an exclusion indicator and select the "exclusion column" in the definition of exclusion indicators for the EXTRASTAT and KOBRA declaration types.
As soon as this indicator is assigned to a document, this document will not be included in the EXTRASTAT and KOBRA declarations.
Note
Inclusion or exclusion indicators assigned at FT data header level in the document apply to all document items if there is no other indicator at item level.
Thanks
Madhu

What is the result this in access sequence exclusive not marked

Hi Gurus,
In pricing access sequence v/07 if we did not mark the exclusion what will hapeen. In that access sequence it contain 3 tables i did not mark as exlusion what will happen. What is the result of this.
Thanks & Regards
Points will be rewarded

Hi lakshmi pathi
Thanks for your replay. When am maintaining condition record in vk11 all condition recordds coming. In that am selecting am maintaing. Even though if i put exclusive indicator in access sequcne even though same records am getting in the same order.\
please clarify on this
Thanks & Regards
points will be rewarded

Access RemoteApp error: The User Profile Service service failed the sign-in

I have couple of users in MYAPPS group that is a part of Collection.
Only me (domain admin) and other domain member user can access the app from RDWEB.
When an other domain admin and an another domain user try to access the app (from different machines) they get:
"Access RemoteApp error: The User Profile Service service failed the sign-in"
RDS is Server 2012 R2 clients W7, W8.
I found all kind of troubleshooting for Vista and W7 non RDS scenario.
What it could be? A bit confusing... one admin Yes another no. The same for regular domain member
1. users can login to RD Web (https:../rdweb) . The published app appears
2. When clicking on the app icon the screen below appears
"When you hit a wrong note it's the next note that makes it good or bad". Miles Davis

Checked Event. There were errors indicating that default profile files cannot be copied to user_name profile.
One of them:
Windows cannot copy file
\\?\C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk to location
\\?\C:\Users\blue\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk. This error may be caused by network problems or insufficient security rights.
DETAIL - The process cannot access the file because it is being used by another process.
After doing more research I found a suggestion that actually fixed the problem instantly:
-- We also see this problem. You should try to uninstall KB2919355 --
Other people experience the same problem with RDS 2012.
Here is the discussion:
http://serverfault.com/questions/590651/copying-default-profile-for-new-users-fails-with-the-process-cannot-access-the
I did check KB2919355. It looks like pretty important...
All future security and nonsecurity updates for W8.1 and 2012 R2 require this update to be installed...
So how to deal with this thing?
May be somebody from Microsoft will see this post and can suggest other workaround instead of removing the important patch.
Thanks Jay for pushing me to check Event :)
"When you hit a wrong note it's the next note that makes it good or bad". Miles Davis

Exclusion Indicator in PD profiles

Similar Messages

Maybe you are looking for