FM for users who have authorization for some transactions.

Hi there.
Does anybody know any FM where from a list of transactions the system shows you all the user who have authorization to these transactions?
I know that there are transactions to obtain this information, but we need a FM.
Thanks and regards.
Raúl.

Hi Mahalakshmi.
With FM SUSR_USER_DISPLAY_WITH_S_TCODE and GET_AUTH_VALUES you populate users and you get transactions. But we need to populate transactions and to get users.
Regards.
Raúl.

Similar Messages

  • List of users who have authorization for a particular transaction?

    Hi All,
    Can anyone guide me how to know the list of users who have authorization for a particular transaction?
    I need this to find out the list of authorizations that are obsolete ,when the particular trnsaction is obsolete in an Upgrade process.
    Thanks in advance.

    we can get the list of users for a particular transaction as below.
    get the tcode and place in AGR_TCODES and we get the list of roles .
    loop the roles and pass each role to AGR_USERS and we get list of users for that role.
    finally we got the list of users for that tcode.

  • CSV file for users who have one-time password email address

    Hi Guys,
    I am trying to extract the list of users who have one-time password email address in FIM or users who have registered with one-time password reset authentication workflow. I need to get their email addresses in CSV file.
    Regards
    Sarwar
    Sarwar

    Take a look at:
    http://social.technet.microsoft.com/wiki/contents/articles/3616.how-to-use-powershell-to-export-all-users-who-have-registered-for-self-service-password-reset-sspr.aspx
    The script queries a WorkFlow called "Password Reset AuthN Workflow" and returns its ObjectID, then uses it to do a new query searching for "Users" with these parameters:
    AuthN WorkFlow Registered = ObjectID of "Password Reset AuthN Workflow"
    The script exports these details to a CSV.
    Also, all OTP email addresses should be stored in the "msidmOneTimePasswordEmailAddress" attribute in the FIM Portal.

  • Is Azure File Service available for User who have MSDN subscritpion

    is  Azure File Service available for User who have MSDN subscritpion

    Hi Mohit,
    I responded to your other post as well, please see the approach there:
    https://social.msdn.microsoft.com/Forums/azure/en-US/f789cbeb-b01b-4cf8-ac97-513340ae7a5c/azure-file-services-not-available-in-preview?forum=windowsazuredata
    Thanks,

  • Network Drive Mapping for users who have Port 445 (possibly others) Blocked by their ISP to a Server 2008 system

    Nice to see my original posts are still up.  I was hoping that in the ensuing time someone had found a solution.  At least I can now see many other posting the same problems.  :)  Thought I was losing it for a while.
    We have 100% proven that the problem (in our case) is from the ISP blocking port 445 (possibly others but 445 for SURE) with the reasoning that it prevents the spread of some Internet "worms".  It also just happens to prevent people who work
    from home from being able to map to their network drives at work.
    What I was hoping was that eventually someone would comer up with a solution for this short of having to load a server using a different OS from Windows.  The SMB protocol is the one needing port 445 as far as I can tell.  Not all ISP block
    port 445 and the laptops that use those ISP's  have no problem.  Unless they travel.  Then it is "hit or miss" as to whether the ISP for the Hotel they stay at blocks it.
    I have run multiple tests to prove that this was in FACT the problem.  Even the particular ISP in question which is a very large national ISP company freely admits they do this supposedly to prevent the spread of an unnamed Internet Worm.  It also
    happens to prevent Business use of their Internet by Home Subscribers at they cannot map to their Business Servers which also need port 445 to map.
    I have used WebDAV successfully to get around this but at a huge loss of speed and performance.  Cloud services all do essentially the same thing and all have pretty much the same loss of speed.
    If anyone has come across a method of allowing a drive mapping to be rerouted to any other port, that is the only hope I have short of changing to an alternate OS for the Office Server and even then I cant be sure until I try if it would help.  I read
    somewhere about the possibility of routing through a proxy but again, the problem would still be that the requests for mapping are expected on port 445 on the server and they will not get through even to the proxy since the originating ISP is the one blocking
    the port from the User's system. 
    Any help or suggestions would be greatly appreciated  I have posted this question now for several years with no one yet providing a working solution.  Hope burns Eternal though :)

    Yes, OwnCloud is an option as well as many others.  Even self hosted Cloud services such as the WD MyCloud all work.  The problem is speed.  JungleDisk is the best I have found so far.  I am not sure exactly what they use to allow the
    drive mapping but it seems to work faster that anything else I have found.
    VPN's don't work.  At least none of them I have tried.   I can connect a VPN with no problem.  But still cannot map a drive over it.   Actually, there are some issues with the VPN as well but these are just a matter of methodology. 
    Mapping to the FQDN works for some people while others require the public IP.  Some users on some ISP's can map using the FQDN, others have to map to the IP.  That in itself was a bit odd.
    I have tried every trick I could find including adding  the IP and/or FQDN to the Windows Hosts file on the server as well as on the client systems.  This actually did help to get the VPN to connect in some cases.  However, it still would
    not allow me to map a drive letter.
    I can create a Network Place,  This also works.  But it will not allow me to MAP that "network place" to a drive letter.  I have tried multiple utilities that allow mapping of Drive letters to almost anything but they wont work to map to a
    Network Place.
    The software that needs the mapped drive is a SQL database which runs on port 2004.  The program itself has no problems at all connecting to the server to run the database.  Even on systems which cannot map to the needed drive letter for the documents
    referred to in the database.    Users can run it and look up all kinds of material but it it is only a half-solution since the database refers to files stored in a "common-mapped" drive letter.  Which I cannot Map.
    I have tried every possible configuration of the VPN setup I could find, I have even tried a "Test System" with the NIC connected directly to the T1 Modem.  With all firewalls off and no AV software.  Even if that had worked,  there is no
    way I could run like that.  But it didn't.  Same issues.  All this did was put the blame squarely on the User's ISP which was the only reason I did it.  I had to rule out even the slightest chance that it was something in our equipment.
    This was already almost a certain fact since the same user could take their laptop to a WiFi Hotspot at a fast food restaurant and connect as well as map the drive.  As soon as they went back home, no drive.  On the ones I could convince to pay
    the extra charges, if they switched to a business connection from their ISP, No Problems.
    On most MiFi or other Cellular Internet devices, No Problem,  Although that had a habit of changing.  We had a few that worked for a while, then they got a software update for their MiFi which immediately blocked the ability to map.  Others
    it would be that some models of Cellular HotSpot units worked while other would not work even if both came from the same carrier.
    Coincidentally, we had none of these problems before two other events occurred: 
    One was the release of Server 2008 R2, (which was a kid of "surprise" change for all of us used to Server 2008 R1.  Welcomed changes, but not expected with a simple SP release. 
    The other was IPV6 finally became a reality:  June of 2012.
    This left us with much head scratching as to what was the real cause of the problem.  It took months to narrow it down to port blocking by the Outside ISP's with a 100% certainty.  Even tried reloading a system with Server 2008 R1 just to rule
    that out.  As well as disabling IPV6 on every network device.  The problem stayed with the User when Outside and which ISP they were connected to.
    Currently we are using a mix of normal VPNs for those who can run them, and CLOUD access for those who can't.  Even this is problematic since we have to keep both the local copy and the cloud copy in constant sync so that everyone sees the same versions
    of the same files on each one.
    Sorry to make this so long but I wanted to cover everything to show that we tried it all.  The only thing left short of getting the ISP's to remove the port blocks would be to find a way to route the SMB file requests around port 445 in some way. 
    I have been told that this is easy enough if using a file system other than Windows but that is not an option even if true. 
    Thanks for the updates and ideas.  I keep hoping that eventually there will be some secure method for mapping a drive letter that does not depend on having port 445.

  • Converting wmv files for use in imovie 9 for users who have pc

    To convert wmv files use your pc windows movie maker. (if you have one) On your pc, open windows movie maker, get collections and get your wmv project/video, drag it into the timeline, and then save in your computer, save it as an avi file and rename it. After send file to your memory card reader, that way you can transfer that file onto your mac!! And voila! I tried to email it but file became too large so transfering it to a memory card is the easiest. This took me days to figure out, I hope I have helped someone out there.....

    I don't want to use DV because these .m2t files are from an HDV camcorder and I want to preserve the aspect ratio and resolution in the files. What other "flavor" of HD would you suggest that I convert them to since (a) I can't bring the files into FCP6 or Compressor (b) I don't see any other flavors of HD to use in VisualHub.
    The whole business of converting .m2t files to a FCP6 compatible format, i.e. a Quicktime format, would seem to be one that is commonly encountered, and yet I have never found a thread on this forum that really answers this question: What is the best workflow for converting .m2t files for use in FCP? Surely, one of the pros who frequent this forum must have dealt with this issue and have an answer.
    I don't want to have to recapture the files from tape all over again just to use them in FCP6.
    Tom

  • Subscription for users who have personal subscript...

    Hi there
    I'm trying to add a subscription for a user but it refused to do so because that user has existing personal subscription. it says that the user needs to cancel that subscription.
    However, even after cancelling the subscription its still showing the same message. The subscription although cancelled is still active until march 2012 (it was paid yearly). Please don't tell me that I have to wait for 10 months to be able to manage subscription to that user. It would be really stupid to not have a way to cancel the subscrption completely, get a refund for remainding period and be able to manage from the manager.

    Hi Mahalakshmi.
    With FM SUSR_USER_DISPLAY_WITH_S_TCODE and GET_AUTH_VALUES you populate users and you get transactions. But we need to populate transactions and to get users.
    Regards.
    Raúl.

  • User XIRWBUSER does not have authorization for message monitoring

    Hi All,
    In the Runtime WorkBench, when I choose the Message Monitoring, display Messages from Component Adapter Engine from Database, when I click on the start button, it shows me a error "User XIRWBUSER does not have authorization for message monitoring", how can I configure my xi to get the authorization for message monitoring of Adapter Engine? Thanks!
    Regards,
    Nick

    Hi Nick,
    Transaction PFCG. Enter the role you wish to check (SAP_XI_RWB_SERV_USER) and click on the display button.
    Check that the Authorizations tab is green. If it is not, then you might need to generate the auth profile. Also check the User tab. If it is not green, then you should do a User Comparison as well (just click on the button inside the tab).
    SAP Help URL:
    http://help.sap.com/saphelp_nw04s/helpdata/en/52/67151e439b11d1896f0000e8322d00/frameset.htm
    Cheers
    Manish

  • Steps to deploy Lync for users who own Office 365 E1/E2 licenses, but don't have Office 365 E3, using Office Deployment tool.

    After many hours of debugging with Microsoft support the system to install the Lync Client silently can be done with a SINGLE LINE command.  The steps to take are below. It should be an easy next step to put this as GPO installation since
    it is a simple command.
    Comments appreciated. 
    side question: Why is there no Lync 2013 or Lync Office 365 forum?
    Basic steps to deploy Lync for users who own Office 365 E2 licenses, but don’t have Office 365 E3, using Office Deployment tool.
    This also applies for other Office 365 service types where the full office suite download is not included.  In April 2015 This was impossible to find online and not know by the Lync support team.
    Steps are:
    Download the Office deployment tool from
    http://www.microsoft.com/en-in/download/details.aspx?id=36778 and extract it to a folder. For this
    example we will use the \\server\sharename
    location.
    Extracting it creates a setup.exe file and it show a sample XML file.
    2. Create XML file and give it a name such as LyncEntryRetail.xml
    Note: The key is the productID that has to be the “LyncEntryRetail”. Other product IDs will download a version that needs another office 365 license. The productID “LyncRetail” needs an E3 license of Office 365.
    <Configuration>
      <Add SourcePath="\\server\sharename" OfficeClientEdition="32" >
        <Product ID="LyncEntryRetail">
          <Language ID="en-us" />
        </Product>
      </Add> 
    </Configuration>
    3. From the folder where you extracted the Office deployment tool, run the following command on the command prompt to download the source files and store them on the shared drive:
     (on single line)
    Setup.exe /download LyncEntryRetail.xml  
    (This is the name of the XML file created above)
    One can also run the same on a server share by using UNC path names such as  (on single line)
    \\servername\sharename\Setup.exe /download
    \\servername\sharename\LyncEntryRetail.xml  
    (This is the name of the XML file created above)
    4. Run the following command on the command prompt on a machine where you want to install the software: (on single line)
    \\servername\sharename\Setup.exe /configure
    \\servername\sharename\LyncEntryRetail.xml  
    (This is the name of the XML file created above)
    Once you are comfortable that it all works, you may want to edit the XML file if you want to have silent installation and add the following lines.
      <Display Level="None" AcceptEULA="TRUE" /> 
      <Property Name="AUTOACTIVATE" Value="1" /> 
    Regards
    Bart
    Bart Louwagie

    Hi Chudly，
    For the office365 issue, I also recommend you can post in dedicated forum for more efficient support:
    http://community.office365.com/en-us/f/166.aspx
    If you want to modify the powershell script, please post the current script and the issue, we will notice and continue to follow up.
    If there is anything else regarding this issue, please feel free to post back.
    If you have any feedback on our support, please click here.
    Best Regards,
    Anna Wang
    TechNet Community Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • User does not have authorization for InfoProvider

    Hi,
         We are in BI 7.0 and want to display the data in the cube that I created and loaded data to. In RSA1, I am do a right click on the cube and select "display data". I am getting to selection screen and after selecting the output fields and executing, I am getting the following error:
    User XXX does not have authorization for InfoProvider ZFREDC
    The long text is like this:
    You do not have sufficient authorization
    Message no. EYE007
    Diagnosis
    You do not have sufficient authorization for the requested data records.
    Procedure
    Either select other data or get the required authorizations from your administrator.
    I did a authorization check in SU53 after I got the error and it says the last authorization check was successful.
    Can somebody suggest me what to do. If there are any authorization objects that I need to have in my role?
    Thanks.

    Hi,
    Be sure to have authorisation object S_RS_ICUBE assigned with at least activity 03 (execute) and subobject data and agregate for the respective cube(s) or infoarea(s).
    Regards, Patrick Rieken.
    Message was edited by:
            Patrick Rieken - BI-Formance B.V.

  • How to Control authorization for users with certain status for level 2 WBS Element

    Dear All,
    Is there any standard way or enhancement available to control authorization for users with certain status for WBS Element i.e. for example
    Pre-requisite:
    There is only 2 level of project i.e.
    Lev_ WBSE_______Description
    1___ 7-14.E_______summay outage controller
    2___ 7-14.E.2310__ Plant/unit # 2310
    2___ 7-14.E.2310__ Plant/unit # 2220
    Project Controller  (authorization role assigned "Z_PS_OP7_OTGCON_C") have all project level authorization
    Plant/Unit Controller (authorization role assigned "Z_PS_OP7_PLNTOTG_C_2310") have only level 2 authorization with enhancement that we did in system by Z table.
    User ID_ Plant #
    123345_ 2310
    122455_ 2220
    Issue:
    After System Status released and User Status approved the WBS basic date for Plant/Units should be restricted from updating/changing by Plant/Unit Controller level and only project controller should have this authority.
    Solution required: 
    Can any one tell how to control this scenario either by standard or enhancement available to control authorization
    BR
    Saqib Usman   

    Hi,
    Did you explore SAP Enhancement CNEX0002 Using Transaction CMOD?
    Thank you and regards,
    Varshal Kachole
    The SCN Rules of Engagement

  • Do not have authorization for access with activity 03 on the InfoProvider

    Hi,
    I have developed new cube & ODS and created new Web Templates based on queries on these Infoproviders.
    I have created new role and adde these templates to menu of this Role.
    In Authorization profile i have used following Authorization objects.
    S_RS_BTMP
    S_RS_COMP
    S_RS_COMP1
    S_RS_ICUBE
    S_RS_ODSO
    In all these objects i hace selected activity 3.
    Infoarea used for these new Cube & ODS is also added and for cube & ODS selection ihave used * (full authorization)
    But when user is opening the web template it is showing error messahe
    "You do not have authorization for access with activity 03 on the InfoProvider ZICXEROX."
    Is there is any authorization object missing in the profile?
    Regards
    SSS

    Dear SSS,
    Have the same problem ' You do not have sufficent  authorization for the infoprovider'. so could you please send the document from my mail id
    [email protected].......
    plaase very very urgent
    Regards
    Ahmed.

  • For people who have had it die due to sweat - how did you have it?

    The title is basically my question. For people who have had it die due to sweat, what orientation/where did you have it? I'm just wondering if all the claims are from having the open adapter slot face up, where sweat would easily drip into it.

    @WalleWalle you are brave. Try drying it out in the sun or in some rice, and don't turn it on for a day or 2. The best thing to do would be to take it apart right away, disconnect the batter and wash the circuit with DI water, but that would be very difficult!

  • Exchange Outlook 2013 freezes when deleting shared calendar for employees who have been removed

    Hi,
    I am removing users' shared calendars from my outlook 2013 in exchange environment. The problem is, that the shared calendars belong to users who have left the company and have been removed from the domain, this is causing outlook to freeze because i think
    it's trying to find the entry then delete it, rather than delete it.
    There is no problem deleting a shared calendar for an user who still is in the domain. This seems to be strictly affecting users who have left the domain.

    Hi,
    Generally, if the shared calendar owner is removed from the Exchange environment, the shared calendar which was added before should be removed from Outlook client normally.
    Please use Outlook with Exchange cached mode, and make sure the shared calendar was not added in Advanced tab in Account Settings. Please start Outlook in safe mode and remove the shared calendar to have a try.
    If the issue doesn’t happen in safe mode, please disable the third-party add-ins one by one to find out the cause.
    Regards,
    Winnie Liang
    TechNet Community Support

  • Custom Auto Attendant Prompts through TUI not working for users who migrated from 2010 to 2013

    In Exchange 2010, we started using unified messaging and set up Auto Attendants. We setup a admin role/RBAC for people of a security group to be able to update the message on the auto attendants. They have the UMPrompts assigned role. All of this is working
    great in 2010. We have now migrated to 2013, and the users who were migrated from 2010 to 2013 can no longer update the messages through TUI. Newly created 2013 users can and are assigned the EXASCT same permission as the users who have been doing this for
    well over a year on 2010.  When they call the AA and press #,* they are asked to provide their extension, after doing so the system tells them that extension is not correct. and asks for the extension again.  Newly created users with the same permissions
    get prompted for their PIN and can log in and change the message just fine. 
    Confirmed Bug?  anybody else having this issue?
    What would be different for this process between a user who was migrated from a previous version like 2010 compared to a newer user who has only ever existed on 2013?

    What if the migrated 2010 users are in the same DB as the system mailbox? I had a similar issue during a migration; http://www.skypeadmin.com/2014/11/10/known-issue-um-automated-attendant-tui-editing-broken-migration/
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
    SWC Unified Communications
    This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Maybe you are looking for