GRC AC v10: User Request Field (User Group for Authorisation Check)

Good Day,
I am wondering if anyone has had any success in pulling across the User Group in the User Access Request Form. In EUP Default View settings, this is set as visible and editable. Yet, I am not seeing the field in the AR form. I would expect to see this field in the User Details tab. That being said, I am also curious about the User System Details tab. I would think the User Group will come across in one of these two tabs. Appreciate any insight... ~Triera

Hi,
The user group of the selected user would be populated in 'User System Details' tab . This field is not there is user details tab as each system can have different user group and we can have multiple systems in the request .
Please check if the user selected in the request has a usergroup assigned in the detail datasource system.
Best Regards,
Aman

Similar Messages

Field Status Group for Special G/L Indicators

Could you define different field status group for special G/L indicators? My problem is I am using two different special G/L indicators but their recon accounts are assigned with the same field status group. I used the same posting keys as well. But when it comes to general posting, they have different screen numbers. One SAPMF05A 303 and the other one is SAPMF05A 304. How did this happen?

Hi Noel,
As you have defined Field Status Group for 2 different SPL GL Indicators then it will create 2 different screens only as it wont consider the reconciliation account.
Regards
andrew

Field Status Group For MIRO

Dear Friends
Pls say me where we can get the field status group for Miro header level where i got a problem to make the business area manditory.
Regards
Vinay Bhaskar

Hi vinay
for busienss place we can make the field mandatory thorugh validations it is not possible through FSG
Plz reward the point if it is useflull
Regards

Change Field selection group for Movt type 701

Hi experts,
I want to change Field Selection group for movt type 701. Right now " Business Area " & " Cost Centre " fields are suppressed. I want to change it to required entry.
Please guide me over this
Regards,
Rajneesh Gulati

the note explaines it:
In Customizing an account assignment can be made for every inventory
adjustment account. To do this the inventory adjustment account must
first be defined as a cost element (Transaction KA01 / KA06):
Accounting -> Controlling -> Cost centers -> Master data -> Cost element
-> Create primary / secondary. Then an account assignment can be made
for the cost element (Transaction OKB9):
Tools -> Customizing -> Setup menu -> Accounting -> Controlling -> Cost
centers -> Actual postings -> Automatic account assignment.
If this account assignment is implemented every posting to the
particular inventory adjustment account will automatically receive the
appropriate account assignment.

Active Users Request is still running for hours in Release 12

Hi Friends,
Today I have installed the Release 12 in the Red Hat AS 4.0. Installation was successfull.
All the Concurrent Managers are up and running.
I have run some requests in the Paybles, Receivable..
Requests are running for hours..all are standard reports...
even
Active Users Request is running for hours..there is no end...
Friends...
How to trouble shoot it???????????
Please give me advice...
Regards,
Subbu

Hi,
Thanks for the reply......
Is this a fresh installation? If so, what version? Which OS?
Ans: Yes This is a fresh installation...After InstallationAll concurrent Managers are up and running...
Was this working properly before? If so, what modifications have you done?
Ans: As this is a fresh installation. This is first time to run the requests. After installation, when i run the requests, I got error like libmawt.so is not opened. I have given libmawt.so file path in the LD_LIBRARY_PATH. After setting libmawt.so in the LD_LIBRARY_PATH. this time I did not before error. but request is running for hours..there is no end.
Have you tried to recover the CM from OAM?
Ans: ya, I tried, but not helpful.
Tracing should be helpful, did you try to run CM Diagnostics test?
If you shutdown the CM and submit the request, what do you get?
Ans: I got status as Inactive and no manager
This is the error in the my manager log file
Routine AFPCMT encountered an ORACLE error. ORA-01012: not logged on.
Review your error messages for the cause of the error. (=<POINTER>)
_ 2 _
Routine AFPCSQ encountered an ORACLE error. ORA-01005: null password
given; logon denied
I tried to relink FND executables using adadmin. But it did not sovle out my problem. As this is solution in metalink for above error.
My Version is : Release 12 on Red Hat AS 4.0
Regards,
Subbu

User Defined Fields greyed out for one user

Hi Experts,
One of our users is a Super User but on the Business Partner Master Data screen, the User Defined Fields are greyed out.
This is user specific as the issue is happening for the same user on 2 seperate PCs.
Other users can update these UDFs - any suggestions?
Thanks
Greig

Hi
take a look at this SAP Note :
Cannot access settings for the user defined fields
Symptom
Cannot access settings for the User Defined Field(UDF)
Other terms
UDF, user defined field, sbo-udf, settings for UDF are inactive, the settings for the udf are greyed out.
Reason and Prerequisites
Need to use the Settings option to order the udf.
In Tools -> User Defined fields -> Settings the option 'Settings' is greyed out and inactive.
Solution
If in Tools -> User Defined fields -> settings and this option is not available then return to the document and click anywhere in the main document window.
Now return to Tools -> User Defined fields -> settings and this option will now be active.

How to get list of Users under an Auth Group (for executable Programs)?

Hi experts. I have a requirement to get a list of all users under a particular Auth Group for Program Objects.
Goal of this requirement is to identify the users allowed to use/access a program - we're doing some sort of Program Inventory and we'd like to identify the users per program, via the Auth Group.
So question is: Which tables hold data about Program <-> Auth Group <-> Users, and how are they linked?
I know this is Basis/Security stuff, but I was thinking of developing a report program to output the information needed.
Thanks in advance.
Edited by: George Esquerra on Nov 17, 2011 10:24 AM

This is available in the standard via tx SUIM - user - users by complex selection criteria - by authorization values.
If you enter auth object = S_PROGRAM and value = auth group, you will get the list of users.
You can analyse how this program finds the information and incorporate it into your own logic.
Thomas

Carrier Details on Field status group for vendor master

Hi,
I have a requirement to make the SCAC and Carrier freight group as required fields on vendor master .
but the standard SAP system requires/ allows three fields : SCAC , carrier freight group and Service agent procedure group as mandatory to be activated under the 'carrier details ' column in the field status group (transaction OB23 and OBD3).
I want to know if there is a way to flag just the SCAC and carrier freight group as required fields for entry in vendor master .
Thanks
Naga Yarramsetty

Hi All,
Thanks for your reply. With user exit and validation, I cannot create mandatory mark in FS00. Actually SAP make this description always mandatory. But there is no mandatory mark in this column. I just want to create mandatory mark in this column. Need you advice.
Thanks,
John

Difference between field staus group for posting key and GL account

Hi all,
can anyone tell me what is the difference of usage for field status group in posting key and GL account as i notice the fileds are the same. during data entry, system will check both field status or how?
thanks.

Hi
Both are to control the field status of the line item.
But, the FSG of the Posting Key and the GL FSG status should not clash like below.
Take 'Assignment' field as example :
Posting key FS - Suppress & GL FS - Required - will give you error message at the time of posting
Posting key FS - Required & GL FS - Suppress - will give you error message at the time of posting
Otherthan the above, all other combination works
VVR

Field Selection Group for Batch Management

Hi All,
I do not want to make the field mandatory for Raw Material during creation of material master.
I checked the fileld selection group for MARA-XCHPF for ROH material type, MM01 , it is optional.
But when i try to create the Material Master for ROH it is showing mandatory field.
Amit Shah

Hi,
Go to the OMS9, here enter the Field sel. group 75 for your MARA-XCHPF, enter and then check the ROH Field refrece, if it shows required then select either Optinal entry or Hide or Display as per the requirement.
Check and revert.
Hrishi

Check G/L field status group for Business area

Hi, when I set the buiness area, I set field status group to required for BA field, the setting always check the BA field on accouting doc. But some G/L is automatic posted, always show "Business area is a required field for G/L account ...",
Can you help me to slove, thanks

Check the following issues
1)Check the status of the other GL accounts field status for business areas.
2)Check if there is any validation for GL accounts which can be given without business area.
Hope this helps.
Regards

Creation of Field Selection Group for MM

Dear Expert,
How to create field selection Group in Material Master Tcode - OMSR
Regards
Alok

Hi,
T- code OMSR is used to assign Fields to Field Selection Group
Define whether a field is hidden or displayed, or whether an entry is mandatory or optional in material master maintenance by assigning the field to a field selection group in OMSR. You can assign a field to one field selection group only.
Each field selection group has a number between 1 and 240.
The values of the field selection groups have been preassigned as follows:
001-110 Material master for industry
111-120 Reserved for customers (except where the values are already in use)
121-150 Material master for industry
151-210 Material master for retail 211-240 Reserved for customers
OMS9 is used to create and maintain field references
Create field selection group in OMSR by clicking new entries-->give field, check the propose field cont box and give maint.status.
Edited by: Padmasri G on Aug 17, 2011 12:03 PM

Field Authorization Groups for partners and texts

Hello,
We would like to use the Field Authorization Groups in the customer master to restrict update of specific fields. One problem we face is that we can't seem to find a way to restrict the authorization on the partners and texts. Has anyone come across this issue and found a solution? If so, could you please share it with us?
Thanks,
Christine

Hi,
For the text this is clearly not possible.
Text is an additional component above of the transaction. It is not fully integrated. So there are some limitations
For the partners. I guess you mean partner functions of a customer.
I'm a bit surprise. The fields below should be customizable
KNVP-DEFPA
KNVP-KNREF
KNVP-KUNN2
KNVP-LIFNR
KNVP-PARNR
KNVP-PARVW
KNVP-PERNR
Hope this helps
Alain

ATP - One Checking group for several checking rules (Trans. OPJJ)

Hello,
In my system, each control group is associated to several checking rules. So, I don't understand how the system choose the right rule to use.
IIs it normal use ? SAP Documentation and forum threads seems to speak always about one checking rule for one checking group.
Thanks for your help,
Emmanuel
Edited by: Kholargol on Oct 2, 2009 11:19 AM

Emmanuel,
Just to add to what Prasobh explained on how to use different check rule 01/02 at production order level there are other checking rules that apply to SD module which is more important for defining ATP stratgey for various finished products.
So a simple sales oder for made to stock product may have checking rule A that considers existing unrestricted stock, purchase orders, production orders dates to promise against.
However a MTO sale order for made to order(MTO) product may have a check rule AE that should consider only the relevant production order and /or replenshipment lead time to promise against.
So while checking group set at material master needs many check rules specific to various Sale orders, production orders, plant mainteneance orders, or project orders.
Hope this helps in your understanding of this concept.
Thanks,
Ram

DPM 2012 still requires put end users into local admin groups for the purpose of end user data recovery?

On client computers that are protected by DPM 2010 and prior versions, you had to put the end users account in the local administrators group. If you did not add the end user account to the local administrators group you would get this error after opening
the recovery tab in the DPM client: “DPM found no recovery points which you are authorized to restore on the specified DPM server. You can restore only those recovery points for which you were an administrator at the time the
backup was taken. To restore other recovery points, contact your DPM administrator, or attempt to restore from another DPM.” This is not ideal on many networks because the end users are not allowed to have local administrator access.
Ths fix to this was included in hotfix 2465832 found here: http://support.microsoft.com/kb/2465832.
This hotfix (a hotfix rollup package for DPM 2010) resolves other issues with DPM 2010 as well. You can find the full list of what this hotfix corrects on that link.
One would think this issue should have been resolved in DPM 2012, however I am encountering the same exact issue, had to include end-users into the workstation local admin group before they can search for recovery points on the DPM server. This is not acceptable
practice.
Is there a new hotfix for the same issue on DPM 2012? I am hesitated to apply KB2465832 since it also includes many other fixes for DPM 2010, which may not appicable for version 2012.
Please help.
Thanks,

This is a hands off solution to allow all users that use a machine to be able to restore their own files.
1) Make these two cmd files and save them in c:\temp
2) Using windows scheduler – schedule addperms.cmd to run daily – any new users that log onto the machine will automatically be able to restore their own files.
<addperms.cmd>
Cmd.exe /v /c c:\temp\addreg.cmd
<addreg.cmd>
set users=
echo Windows Registry Editor Version 5.00>c:\temp\perms.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Data Protection Manager\Agent\ClientProtection]>>c:\temp\perms.reg
FOR /F "Tokens=*" %%n IN ('dir c:\users\*. /b') do set users=!users!%Userdomain%\\%%n,
echo "ClientOwners"=^"%users%%Userdomain%\\bogususer^">>c:\temp\perms.reg
REG IMPORT c:\temp\perms.reg
Del c:\temp\perms.reg
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT] This
posting is provided "AS IS" with no warranties, and confers no rights.
That's a good one! Thanks for that.
I've been scripting on KIX for some time, so here is mine, hope it helps to someone... (it's probably not the best, but it works)
========================================================================
$RC=setoption("WOW64AlternateRegView","on")
$DPMkey = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Data Protection Manager\Agent\ClientProtection"
$uservariable = "%userdomain%\%username%"
If KeyExist ($DPMkey)
$Userstring=ReadValue($DPMkey, "ClientOwners")
If $Userstring == ""
WriteValue($DPMkey,"ClientOwners", $uservariable, "REG_MULTI_SZ")
? "Key created"
else
If not instr($Userstring,$uservariable)
$Userstring = "$Userstring,$uservariable"
WriteValue($DPMkey,"ClientOwners", $Userstring, "REG_MULTI_SZ")
EndIf
Endif
EndIf
==========================================================================
The problem actually is that you still need to use an admin account to write on the registry, so ensure you configure it properly on the schedule task.
In case you use a service account on the schedule task... the "$uservariable" will get populated with that account. As a work around to this... I changed it for the following line:
=========================================================
$uservariable = ReadValue("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI", "LastLoggedOnSAMUser")
=========================================================
The only problem with that, is that key gets created/updated only if user gets logged phisically on that PC, but will not work for anyone connecting through RDP.

GRC AC v10: User Request Field (User Group for Authorisation Check)

Similar Messages

Maybe you are looking for