Function module to Delimit the roles assigned to the user

Hi All,
I am working on security role automation process abap report.My requirement is to delimit the roles assigned to the user on account of employee termination or retirement. I have used the function module "BAPI_USER_ACTGROUPS_ASSIGN" to delimit the role assigned to the user.
Passing the importing parameter "username" and in the Tables parameter"ACTIVITYGROUPS" passing the respective parameters AGR_NAME(Role), FROM_DAT(Start Date),TO_DAT(termination date - 1). When I passing the parameters as mentioned above,the role assigned to the user is getting deleted,instead of delimitation of the role assigned to the user.
Is there any other function module we can use to delmit the roles assigned to the user? Please help.
Regards,
Krishnan

hai,
please try this.
/VIRSA/RE_BAPI_CREATE_ROLE- Create Roles
/VIRSA/ROLE_ASSIGN_CUA_NH
/VIRSA/RE_BAPI_ROLE_TO_USERS
ASSIGN_USERS_HIERARCHY - User Assignment to Role - this is a Normal FM
try this bapis this may work
BAPI_USER_LOCK
- BAPI_USER_PROFILES_ASSIGN
- BAPI_USER_LOCPROFILES_ASSIGN
- BAPI_USER_LOCACTGROUPS_ASSIGN
- BAPI_USER_CHANGE
- BAPI_USER_UNLOCK

Similar Messages

SPML: search the roles assigned to a user and add others to him

Hi,
as in the subject i'm trying to create a method in idmClient to search the roles assigned to a user and then add some other (one or more).
How can i implement the search/filter of the available roles assigned to a user?
Thanks in advance,
Gentjan

coocooche wrote:
Hi,
as in the subject i'm trying to create a method in idmClient to search the roles assigned to a user and then add some other (one or more).
How can i implement the search/filter of the available roles assigned to a user?I already find how to do it. I have to asked another question about SPML: is there any way to add new roles without searching the old ones?
In other words i implemented a method that:
1) search the roles assigned to a user and copy it to a List
2) add to the List of the old roles, the new ones.
Is it possible just to add the new roles without doing a search of the old ones? In this way the performance is better.
Thanks in advance,
Gentjan

ESW: What are the roles assigned with CRM user in ESW?

I would like to see the CRM from a Sales role and a marketing role

Hi,
you can use the installation Guid for that:
http://help.sap.com/saphelp_nw04/helpdata/en/25/33533dc1c0b60fe10000000a114084/frameset.htm
Only thing that is not exactly mentioned there. If you create a special user to use NWA on the J2EE - this user should have J2EE_ADMIN authorisation.
Rest is described exactly in the Guide Mentioned above.
Hope this helps to solve the issue.
Regards,
Oliver

Best way for limit users ? How to limit also the role assignment?

Hi gurus, we are facing a strange situation.
due to the politics implemented in our company , we are not allowed to delete the user record once this guy has finished in the company. We need to have an historic of users to consult who has made something in our R3 4.7 ERP
We use instead the fiel VALID TO in the user record, so the user can´t access the system once the date is reached (it is the same thing that the standard transaction HRUSER manages the validity of the users...)
The problem is that the roles assigned to the users are not limited the same way, I mean if an user has the validity of a role form the 2008/01/01 to 9999/21/31 its not limited.
That means that in PFGC you can see the roles with user assigned but they are not really actives...
Please, is there any possibility to limit also this range of dates in PFCG in an automatic way? It will help us a lot to have the role assignments up to date
Thanks in advance
Best regards.

due to the politics implemented in our company , we are not allowed to delete the user record once this guy has finished in the company. We need to have an historic of users to consult who has made something in our R3 4.7 ERP
Good! There are many discussions in the forum on the disadvantage of deleting users.
We use instead the fiel VALID TO in the user record, so the user can´t access the system once the date is reached (it is the same thing that the standard transaction HRUSER manages the validity of the users...)
The problem is that the roles assigned to the users are not limited the same way, I mean if an user has the validity of a role form the 2008/01/01 to 9999/21/31 its not limited.
What's wrong with taking away all roles from these users? You can always retreive their previous assignments from the change documents.

Multiple roles assigned to an user

Hi folks,
My question sounds to be something weird, but wanted to be cautious. I see a lot of users in my environment with multiple roles assigned to them. When i checked the roles of an user who has three roles assigned to him, i noticed that all the roles have some tables in common with the same grants in all the three roles, and all these three roles are assigned to the same user. Will there be any problem?
An example to explain my senerio...
User scott has three roles A,B and C assigned to him. All the three roles have execute on xy.abc procedure and select,insert,update,delete on xy.xyz table. Will there be any problem to the user who is assigned all these three roles. Will there be any confusion from oracle to chooose from which role?
Thanks

This sounds to be something new. So When a oracle
tries to hold all the privileges does it do a
distinct on the table grants, so that i will have
just one entry of the privilege of an object, though
it exists in all the roles assigned to that user.No, the table objauth$ looks like this,
1* select * from objauth$ where rownum < 100
SYS@etest> /
      OBJ#   GRANTOR#   GRANTEE# PRIVILEGE# SEQUENCE# PARENT                OPTION$       COL#
       133          0          5          0          1
       133          0          5          3          2
       133          0          5          5          3
       133          0          5          6          4
       133          0          5          9          5
       133          0          5         10          6
       133          0          5         11          7
       135          0          5          0          8
       135          0          5          3          9
       135          0          5          5         10
       135          0          5          6         11
      OBJ#    GRANTOR# GRANTEE# PRIVILEGE# SEQUENCE# PARENT                OPTION$       COL#
---------- ---------- ---------- ---------- ---------- ------------------ ---------- ----------where
OBJ# is object ID, could be any object not only table,
GRANTOR# is user# , ROLE is also considered a special USER internally in Oracle.
SYS@etest> select user#, name from user$
2 /
     USER# NAME
         0 SYS
         1 PUBLIC
         2 CONNECT
         3 RESOURCE
         4 DBA
         5 SYSTEM
         6 SELECT_CATALOG_ROLE
         7 EXECUTE_CATALOG_ROLE
         8 DELETE_CATALOG_ROLE
         9 EXP_FULL_DATABASE
        10 IMP_FULL_DATABASE
..............So different roles will have different records in objauth$. Even it's same privilege of same object granted to same user.
a GRANTEE# can have same privilege to the same object from different GRANTOR#

Function module to get the roles assigned to user

Hi to all experts,
I need a fm to retrieve the roles assigned to user .
if a pass sy-uname as importing parameter i should to get all the roles assigned to that particular user

hai,
please try this.
/VIRSA/RE_BAPI_CREATE_ROLE- Create Roles
/VIRSA/ROLE_ASSIGN_CUA_NH
/VIRSA/RE_BAPI_ROLE_TO_USERS
ASSIGN_USERS_HIERARCHY - User Assignment to Role - this is a Normal FM
try this bapis this may work
BAPI_USER_LOCK
- BAPI_USER_PROFILES_ASSIGN
- BAPI_USER_LOCPROFILES_ASSIGN
- BAPI_USER_LOCACTGROUPS_ASSIGN
- BAPI_USER_CHANGE
- BAPI_USER_UNLOCK

How to get the list of roles assigned to a user in all the child systems

how to get the list of roles assigned to a user in all the child systems from CUA SYSTEM

Try transaction SUIM in your CUA system. Go to user, cross-system information, users by roles. If you run it wide open, you'll get all users and all roles assigned for all systems managed in your CUA.
Krysta

Function module to get 'Date one year in the past' in APO

Hi,
Required function module to get date one year in the past in APO.
Thanks and regards,
M.R.Reddy.

Hi Reddy,
Try these function modules
/SAPAPO/DATE
/SAPAPO/FISCAL_BDATE
/SAPPO/MAPI_MAP_CREATDATE
/SAPPO/MAPI_MAP_POSTDATE
/SAPAPO/LCP_CALC_DATE
/SAPAPO/VS_ORDER_GET_DATES
/SAPAPO/PERIOD_CONVERT_DATE
/SAPAPO/PERIOD_DATE_GET_FROMTO
/SAPAPO/PERIOD_GET_DATE_RANGE
/SAPAPO/PERIOD_GET_FOR_DATE
/SAPAPO/PERIOD_GET_FROM_TODATE
Regards
R. Senthil Mareeswaran.

Required function module to get date one year in the past.

Hi,
Required function module to get date one year in the past.
Thanks and regards,
M.R.Reddy.

Hello,
You can check this:
DATA:
V_DATE1 TYPE D,
V_DATE2 TYPE D.
V_DATE1 = SY-DATUM.
TRY.
    CALL METHOD CL_HRPAD_DATE_COMPUTATIONS=>SUBTRACT_YEARS_FROM_DATE
      EXPORTING
        START_DATE = V_DATE1
        YEARS      = 1
      RECEIVING
        DATE       = V_DATE2.
CATCH CX_HRPA_VIOLATED_POSTCONDITION .
ENDTRY.
WRITE:
/ V_DATE1, / V_DATE2.
Hope this helps.
Br,
Suhas

Function module or any BAPI that lets park the document in the transaction

Function module or any BAPI that lets park the document in the transaction FBV1.
I need to park the invoice by providing some test value in FBV1. I want to know is there any function module or BAPI that is used to park the doucument in transaction FBV1

hi,
Use the BAPI BAPI_INCOMINGINVOICE_PARK to park the Document
Regards
Sudheer

Assigning the role automatically when a user is created.

Hi all,
we are usign the EP 7.0 eph1 sp6 . we have a requirement that:
When we are creating a new user and click save, then a user is created and to that user automatically a role should get assigned (without manual assignment of role to user). the role will have the framework page etc.
and suppose we are assigning some role to the same user the above assigned automatic role should be deassigned automatically again.
is there any possible way.
Please help.
regards,
kavitha

Hi
When we are creating a new user and click save, then a user is created and to that user automatically a role should get assigned (without manual assignment of role to user). the role will have the framework page etc.
for the above one we can follow the simple process ,
as u need 2 assign the role automatically while creating the user it self, u have to do the following.
In user Adminstartion we have a button called Copy To New User.
u just slect a user already created and just click on the button above, the new user which is going to be created will get all the credntails and roles groups ,everything as the previous one.
Just have a try .
Sandeep

Getting roles assigned to a user in OIM

We need to write a query to find what are the roles assigned to a particular user and when it has been assigned , is there any source where the OIM tables and their attributes have been explained? We were referring the UPA_GRP_MEMBERSHIP for getting the roles( referring UGP_KEY) and the user with (UPA_USR_KEY), is this correct or is there some other table which has the info?

Thanks for your reply...
To getting the roles of a user, what is the common attribute between USR and UPA_GRP_MEMBERSHIP table? Is it usr_key from usr table and upa_usr_key from UPA_GRP_MEMBERSHIP? if not, what are the differences between the two attributes and is there any other attribute to refer ?

How to get list of Roles assigned to each User

Hi,
I have to create a list containing Roles assigned to each user in xMII 11.5.
Need your help !
Thanks in Advance !
Regards,
Alok

Alok,
Did you search (sometimes it is also good to make sure to search the forum for All threads not just the default time window)?
https://forums.sdn.sap.com/click.jspa?searchID=22562502&messageID=5969490
https://forums.sdn.sap.com/click.jspa?searchID=22562502&messageID=4890045
More info from the help docs: http://help.sap.com/saphelp_xmii115/helpdata/en/Connectors/IlluminatorSystemConnector.htm
Regards,
Jeremy

How to find out the roles set for the current session?

Hi,
I wanted to find out the roles set to the current session. Which system view or table gives this info?
Thanks
Seshu

SELECT * FROM session_roles

HR-ABAP.How to Find the Employees assigned to the Appraisal Template

Hi ,
Please help me out.how to find the employees assigned to the Appraisal template.
Ex. 7825232 is a appraisal template id and i want to know in the system how many employees assigned to it..
Please let me know if the post is missing something.
Suggestion also appreciated ...
Thanks Inadvance!
Law.

check this fm HRHAP_DOCUMENT_GET_LIST_XXL
Thanks
Bala Duvvuri

Function module to Delimit the roles assigned to the user

Similar Messages

Maybe you are looking for