Hot to restrict sap_all and sap_new

hot to restrict sap_all and sap_new

Hi,
SAP_ALL & SAP_NEW profiles will not be assigned to any users in production environment (Not even to the OSS Users). However, there will be derivatives to these profiles. i.e, these two profiles will be copied and restricted.
Secondly, profile addition will not be done to any user until and unless it is critical. Instead of SAP_ALL, SAP_NEW, other profiles will be assigned like A_ALL etc.,
Have a look at the following link, which may help you:
http://www.learnbasis.com/knowledgebase/index.php?view=ViewArticle&id=29&set=all
Rgds,
Raghu
<b><removed by moderator></b>

Similar Messages

  • How to maintain Employee photo in ESS who's who without sap_all and sap_new

    Hi ALL,
    Displaying Employee photo in ESS Who's who. it is working but with SAP_ALL and SAP_NEW user profiles.
    My requirment is without SAP_ALL and SAP_NEW user profiles. how it is working where can i maintain authorizations for this issue.
    The parameter i used are as follows:
    Business obj: PREL
    Doc type: HRICOLFOTO
    Personal num: 00000094
    Infotype: 0002
    Photo type: .JPG
    please help me.
    Regaards
    Satya.

    Dear satya .
    Please check the following
    1. Trace with the t.code ST01 and check that object require.
    2. The portal require the following obect:
    S_SERVICE
    S_RFC
    P_PERNR
    PLOG
    P_ORGIN/ P_ORGINCON
    P_HAP_DOC, if you work with Appraisal Document.
    3. Check the table T77S0
    P_PERNR, P_ORGIN, y P_ORGINGCON
    4. Check that you have the roles need for ESS.
    SAP_ESSUSER
    SAP_ESSUSER_ERP05
    SAP_EMPLOYEE_ERP05
    SAP_EMPLOYEE_ERP_13
    SAP_EMPLOYEE_ERP05_xx
    SAP_EMPLOYEE_ERP_13_xx
    5. Check the following notes:
    SAP Note 857431 - ESS: Authorizations and roles for WD services in ERP 2005
    SAP Note 844639 - MSS: Authorizations and roles for WD services in ERP 2005
    SAP Note 1373177 - Back end authorization roles missing in EHP4
    SAP Note 824757.
    [ESS Quick Start|http://www.cogentibs.com/pdf/cogsap08/ESS.pdf]
    Hope is help you.
    Regards
    consultor_ess_mss

  • Spro full authorization without sap_all and sap_new

    Hi Friends,
    Can u suggest me how to give spro full authorization without sap_all and sap_new profile.
    Thanks & Regards,
    Tarun

    Hi Gowrinadh,
    This is an interesting discussion. I don't mean to take shots at your concept, but I have some concerns about it as a solution.
    > I have prepared a role 8 months back, we passed 2 patch upgrade cycles and I can confirm that this role will work even after the next version of ECC upgrade.
    Sometimes the symptoms only make themselves visible later, and we don't know what is coming in the next version of ECC. Of course it should be largely compatable, but there will be new stuff. You can be sure of that.
    > If there are any modules or new functionalities required, then customer has to request for it in addition.
    My understand is that the customer requests a full and working SPRO role for each release. They will not find the tcodes for you and do not want to play ping-pong via support tickets either with it.
    So each time you bill your customer for the 20 or 40 hours work for maintaining these tcodes manually in ranges? Appart from being error-prone, this solution is not scalable for when SAP might introduce another 20000 tcodes into the SPRO. Or someone convinces SAP to introduce an S_TCODE check for every line of code the whole system... (this is something which some people seem to believe in...), which would introduce several billion new tcodes for you...
    > For which we can build separate role.
    That is different. The question here (and certainly your solution) is to have them in the same role without duplicates but still including all SPRO access.
    If you build them as seperate roles, then you can merge them as projects into one composite and live with the duplicates while checking for any known objects which should not be included.
    I would agree with you. That is in my opinion a better solution, but it is not what you have been describing earlier.
    > We can plan for authorizations and build roles based on the inputs for today and tomorrow received from customer.
    That is the whole point in having maintainable roles and scalable processes. Manually maintaining 20k tcodes is incompatable with such requirements.
    > By the way, the max no of consultants and business process owners having this role is not more than 40.
    I don't think that assigning the role to less people will make it more usefull, nor that assigning it to more people will bring down it's per user cost of maintenance.
    There is some old code posted here already which does what you have described in less than 1 minute. You can find it via the tables I have mentioned above, and will recognize it (and it's age)  by the header lines it uses for internal tables. But it still works, since about release 3 point something...
    Cheers,
    Julius

  • ALEREMOTE profile to run chain:do SAP_ALL and SAP_NEW contain S_BI-WHM_RFC?

    In order to run process chain, we know that the RFC user ALEREMOTE has to have the profile S_BI-WHM_RFC assigned to it. 
    Now our we run process chain on BW PROD, find the first few variants fail and the whole chain stops in the beginning.  We check the profiles assigned to ALEREMOTE and find our BASIS gives it two profiles SAP_ALL and SAP_NEW.  Not sure if SAP_ALL and SAP_NEW contains S_BI-WHM_RFC. 
    Any answer?
    Thanks

    Kevin,
    Yes, sap_all have that profile.
    Sap_all and sap_new gives every authorizations of the system (you can say is a "super user").
    This may be a little risky, but you won't have any problems with process chains.
    Which error gives you de chain?
    Hope it helps,
    Regards,
    Diego.

  • Sap_all and sap_new

    hello guys,
    whats the use of assigning sap_new profile to the end users and is it recommended to assign sap_all profile to the user??

    Hi Kevin,
    You'll find documentation on these profiles here:
    http://help.sap.com/saphelp_nw70/helpdata/en/4b/65b7398b5a2d31e10000000a114084/frameset.htm
    Best regards,
    Astrid

  • Authorizations with out sap_all and sap_new

    Hi,
    I need to give access to all the people which does not have Basis authorizations.
    Can any one of you help me in this regard.
    Thanks
    Venu

    Hi Venu,
    There is one way
    create a role in pfcg in the menu select from the right hand side of you screen select the option <b>From SAP Menu</b>
    in this dont select the options <b>Tools</b> and <b>Cross application component</b>
    and select all other which will avoid the Basis and Abap technical transactions
    and then genetate the profile from the authorization tab then assign the users to the role and comare the users
    hope this helps
    Kishore
    Points are always welcome

  • I have forgotten my restrictions code, and don't have an iTunes backup on a PC. How can I reset the code or find my code without using a PC or jailbreaking/hacking into my iPod?

    iPod 5 generation. ios 8.1.2
    I forgot the restrictions code, and I'm trying to reset my iPod, but because of restrictions, it won't let me! I cannot do the thing with the computer, because I never backed it up on a PC before. I've also tried the so-called 'default' code, and it didn't work, either.

    There is no default code.
    - Place the iOS device in Recovery Mode and restore via iTunes. For how to restore: iTunes: Restoring iOS software
    You have to either:
    - Restore from a backup that was make before you added the Restrictions passcode. If you restore from a backup made with the Restrictions passcode the Restrictions passcode is also restored.
    - Restore to factory settings/new iPod

  • Is it possible to restrict copying and printing a pdf?

    Is it possible to restrict copying and printing a pdf without setting a password? I just want to restrict using the document, but don't want a password-demanding window to pop up.

    Hei guys!
    I truly need your reply!
    Any reply or a hint or a reference to another application is welcome.
    Thank you!

  • I want to reset my ipod touch 4th gen but i have forgotten the restrictions passcode and for some reason its not working on my laptop on itunes and the restore thing wont work! any help?

    I want to reset my ipod touch 4th gen but i have forgotten the restrictions passcode and for some reason its not working on my laptop on itunes and the restore thing wont work! any help?

    Make sure you have the Current Version of iTunes Installed on your computer
    iTunes free download from www.itunes.com/download
    Then See Here  >  http://support.apple.com/kb/HT1808
    You may need to try this More than Once...  Be sure to Follow ALL the Steps...
    Take your time... Pay particular attention to Steps 3 and 4.
    After you have Recovered your Device...Re-Sync your Content
    Note:
    To remove a forgotten Restrictions passcode you will need to  Restore the Device as New...
    OR... From a Backup created Before the Restrictions Code was set....

  • I have forgotten my restrictions passcode and i dont want to lose any media on my iphone, or any apps, i am scared to back up my media for restore in future as these photos and videos mean a great deal to me, is there any way i could get around it? Thanks

    I have forgotten my restrictions passcode and i dont want to lose any media on my iphone, or any apps, i am scared to back up my media for restore in future as these photos and videos mean a great deal to me, is there any way i could get around it? Thankyou if you can help; oh and last time i restored my iphone it didnt restore ALL the media only some and very improtant photos went missing :(

    All media and apps on the device should already be in iTunes on the computer.
    If you have forgotten the restrictions passcode, the ONLY option is to restore as new.
    Then sync back any media, apps, contacts, etc back to the device.
    You can not restore from backup as the restrictions passcode is included in the backup.

  • I lost my restrictions password and want to reset my ipod so i can put a new one on, when i try reset it it makes me put in my device password and restrictions password! How can i reset my ipod if i need the restrictions password why i am resetimg my

    I lost my restrictions password and want to reset my ipod so i can put a new one on, when i try reset it it makes me put in my device password and restrictions password! How can i reset my ipod if i need the restrictions password which is why i am resetimg my. Ipod

    Forgotten RESTRICTIONS Passcode
    - Restore from a backup that was make before you added the Restrictions passcode. If you restore from a backup made with the Restrictions passcode the Restrictions passcode is also restored. Place the iOS device in Recovery Mode if necessary to allow the restore.
    - Restore to factory settings/new iPod. . Place the iOS device in Recovery Mode if necessary to allow the restore.   
    - If you are up to file manipulation see the following but it may not work for iOS 6.1.3 or iOS 7
    How to reset forgotten Restrictions...: Apple Support Communities
    - How to Recover Restrictions Forgotten iPhone Restrictions Passcode | The iPhone and iPad Blog

  • Please help, just recently got ios7 on my phone and have updated itunes but my iphone 4s wont sync i have tried everything like turning restrictions on and things, thank you for reading and please help

    please help, just got iso7 and the new itunes and have synced my ipone once already all fine but suddenly it doesnt work i have tried everything like turning restrictions on and off , please help

    fighter19lisa wrote:
    that only makes it say its synced, when its not.
    No, it does not.  It transfers purchases from the iDevice to the computer.  The computer must be authorized for the Apple ID that the content was acquired with.
    fighter19lisa wrote:
    my playlists wont show up on the phone.
    Are they selected to sync?  Is Manually Manage content on the device selected?
    fighter19lisa wrote:
    i had to change my password for my aol account again and i still cannot get my email on my phone to even work
    What does that have to do with syncing content to the device?  FYI, nothing.

  • HT201304 ? I have forgotten my restrictions passcode and can't make any changes. I have already did a reset with iTunes but it still didn't help. The restrictions lock is still there.

    I set a restrictions passcode and have completely forgotten it. I have tried to reset with iTunes but it just clears out my phone and when I turn it back on its still locked in the restrictions menu. U can't do a reset on your phone without it... So I don't know what to do.. Help!!!

    There is no default code.
    - Place the iOS device in Recovery Mode and restore via iTunes. For how to restore: iTunes: Restoring iOS software
    You have to either:
    - Restore from a backup that was make before you added the Restrictions passcode. If you restore from a backup made with the Restrictions passcode the Restrictions passcode is also restored.
    - Restore to factory settings/new iPod

  • HT201274 We want to reset my daughters ipod but when we go to erase all content and settings it asks for a restriction password and we have no idea what that is noone remembers making one how do we get around this.

    We are wanting to reset our ipod but when we go to erase all content it asks us for a restriction password and we have no idea what that is and dont remember ever setting one up.  How do we get around this.?

    Forgotten RESTRICTIONS Passcode
    - Restore from a backup that was make before you added the Restrictions passcode. If you restore from a backup made with the Restrictions passcode the Restrictions passcode is also restored.
    - Restore to factory settings/new iPod.
    - If you are up to file manipulation see:
    How to reset forgotten Restrictions...: Apple Support Communities
    As Ana said,
    Place the iOS device in Recovery Mode if necessary to allow the restore.
    If recovery mode does not work try DFU mode.
    How to put iPod touch / iPhone into DFU mode « Karthik's scribblings

  • Unexpected hot increase,suspended, shotdown and restart in iphone5

    my problem in my iphone5 very noisy sine, I bought  the phone( where the phone5 hot increases during seconds and the phone suspected, then the phone showtdown and restarte. please help me in this problme 

    Mac and iPod customers within 90 days of ownership are eligible for complimentary phone support — one support incident per iPod and unlimited incidents per Mac. iPhone customers are eligible for up to 2 years of technical support with an active AT&T wireless plan subscription.
    U.S. iPod and Mac technical support: 1-800-APL-CARE (1-800-275-2273)
    Joe

Maybe you are looking for

  • Textkommentare verschwinden auf dem PDF-file in Adobe Reader

    Meine Textkommentare, die ich  mit dem "Textkommentar hinzufügen"-Werkzeug auf ein PDF-Dokument schreibe, verschwinden, nachdem ich sie eingegeben habe. Im Moment des Schreibens sehe ich sie zwar noch (Bild 1); sobald ich aber mit dem Cursor woanders

  • A case that works with Vision M play

    I am going to buy a Zen Vision M (can't wait!!!!) this month. I was browsing the selection of players at Wal-Mart and came across this mp3 player case. It was about 3-5 bucks (bought it before Christmas, can't remember the exact price now). A Wal-Mar

  • How to get value from one context node to otehr contect conde in diff views

    Hello Guru's We have a rek which is of getting the value from one context node to other context node, for example there is Total value in BT111H_OPPT/ITEMLIST (One context node) we need to have the same Total value in the in BT111H_OPPT/DETAILS (othe

  • "No Name" drive Icon in "Devices" section. What is this?

    During a work trip, a folder popped up on my desktop. "No Name" but with an icon below Macintosh HD and iDisk under "Devices". It looks like it has people walking across the box, but I cannot see closely. It could be protractors too... It will not ej

  • EWA alert report is not generating in SMP through SDCCN !!

    Dear Techies, Kindly help me on this issue, I am generating EWA in SDCCN, it is generating fine through RFC Connections successful. But I am not getting EWA report in SMP. All steps performed successfully but no EWA report in SMP inbox ( service mess