How to check list of users from OS level with type and validity AIX+DB2

Hi,
We have 40 clients in our ECC -PRD system. we do not have authorizations to login all clients , only we have 000 accessonly.
we need to check all users type and validity in the system. can any one please help me this script.
regards,
balarami

Hello,
Yes you can check the user validity and tye from OS level with DB script.
ORACLE SQL scripts : I assume that schema for your system as sapr3.
First you check the table fields by desc sapr3.usr02;
then can select these fields for user as select <field name1>, <field name2> from sapr3.user02 where uname=<required user name> and mandt=<client>;
check exact details before you execute script @ ORA level*
If you want to see logged on users - you can see them with your '000' ID for all 40 clients.
Hope this helps.
Thanks,
Amit Thombare

Similar Messages

How to get the SSO user from PL/SQL with Windows native authen

I connect to a 10g daabase using SSO through Windows Native Authentication wher the OID user mapps to a single Database user.
I need to get the SSO user from pl/sql
My fornt end is Portal & Forms

Hmm, I see.
Well your problem boils down to being in the database and needing to have access to web environment variables. The SSO sets specific variables in the environment but your stored procedure is not privy to them.
Now having said that, note that the mod_plsql Web Toolkit has a utility for accessing cgi variables. For instance,
owa_util.get_cgi_env('Osso-User-Dn')
If your web application cannot capture the SSO info and pass it to the stored proc in a parameter, OWA may be the only way.
Check out the Single Sign-On Developers Guide, specifically the part about developing statically protected PLSQL applications.
Hope this helps.
regards,
tt

How to get list of user from Role in workflow

Hi,
I want to send notification to all user belongs to a certain role in OIM.
How can i do this?
My req:- User put's request for provisioning. now we have to send notification to all the approver about the request.
I know i have to use BPEL for sending notification.
But can some one let me know how can i get email id of approver in BPEL.

Make a groups in OIM and assign all the approves for that role in that group.
Select this group as an approve in SOA composite.
Now when ever any approval request is send for provisioning it will go to all the members of that group.

How do you import a list of users from a file? (BPC 7.5NW)

In adding users from a network domain, the related personnel filter provides three choices. One of the choices allows a BPC administrator to import a list of users from file. For some reason, the radio button alongside that option is grey and the choice is inoperable. Does anyone know what steps-configuration or later-must be taken to make this choice operable and to be able to import the list of users from a file?
Edited by: Greg Tyrl on Jul 11, 2011 8:17 PM

make a new addressbook and in that import Outlook's

How to Check when the user is connected to different desktop.

How to Check when the user is connected to different desktop.Sometimes the user maynot see the theme in the personalize theme list. In that case the person must be using different kind of desktop.How to check, I need a path.And how to apply the theme to that user?
Thanks,
Paturi

Hi,
you can create the new portal desktop from
System Administration => Portal display => Desktop and Display Themes
Select your folder from Portal Content and from its context create new Desktop.
Add The Framework page and the theme to this desktop page.
Go to your folder from Portal Content and from the context of the framework page select add framework page to portal desktop.
Adding Theme to desktop
From Portal content select Theme folder and select the theme right click it and select Add theme to Portal Desktop.
Create rule for the Desktop.
Navigate to System Administration => Portal Display => Desktop and Display Themes Portal Content => Portal Administrators => Super Administrators =>main_rules.
Click Add IF Expression.
create the expression if user = xyz then click on apply
Select the then clause of the if and navigate to your folder where Desktop is created ,Add it and Click Apply.
Save the Changes to the rule.
Hope it helps you.
(reward points if its helpful)
Thanks,
Gunjan

How to check my job name from the database...

I have written one job scheduler which is as follows :
SQL> ED
Wrote file afiedt.buf
1 DECLARE
2 X NUMBER;
3 JobNumber NUMBER;
4 BEGIN
5 SYS.DBMS_JOB.SUBMIT
6 (
7 job => X
8 ,what => 'scott.SPLITSMS;'
9 ,next_date => SYSDATE+1/1440
10 ,interval => 'SYSDATE+1/1440 '
11 ,no_parse => FALSE
12 );
13 JobNumber := to_char(X);
14* END;
15 /
PL/SQL procedure successfully completed.
Now I want to check whether the job has been really created or not?
so for that I have used the following command line:
SQL> SELECT JOB_NAME FROM DBA_SCHEDULER_JOBS WHERE JOB_NAME = 'SCOTT.SPLITSMS';
SELECT JOB_NAME FROM DBA_SCHEDULER_JOBS WHERE JOB_NAME = 'SCOTT.SPLITSMS'
ERROR at line 1:
ORA-00942: table or view does not exist
how to check my job name from the database...
what is the command used to check the job_name ????
and how can i ensure that my job scheduler is running properly...???
please help ........my dear friends.....!

957029 wrote:
Now I want to check whether the job has been really created or not?
so for that I have used the following command line:
SQL> SELECT JOB_NAME FROM DBA_SCHEDULER_JOBS WHERE JOB_NAME = 'SCOTT.SPLITSMS';
SELECT JOB_NAME FROM DBA_SCHEDULER_JOBS WHERE JOB_NAME = 'SCOTT.SPLITSMS'
ERROR at line 1:
ORA-00942: table or view does not existYou can use DBA_* views only if the User has been Granted a DBA Privilege.
how to check my job name from the database...
what is the command used to check the job_name ????You can use USER_JOBS view to check. But, is it not that you have just created the Job, so you must be knowing it?
and how can i ensure that my job scheduler is running properly...???If USER_JOBS.FAILURES is Non Zero, that means the Job has encountered a problem that needs to be Investigated. Similarly, the LAST_DATE, LAST_SEC, NEXT_DAY, NEXT_SEC can be used to determine if the Job has been running successfully.
if you are on 11g, you should consider using DBMS_SCHEDULER.

How to check if the user has only the display authority of a message

hi,
How to check if the user has only the display authority of a message but does not have the change authority for a certain message?
Best regards,

hi blake
though i am an application consultant and for authorisation u need to have help of BASIS person if u r not the one but still i can guide u regarding the same,
Basically Authorization Management
Use
You can use the following authorization objects to control the authorizations for maintaining business partner data:
        Authorization objects for the Business Partner:
             B_BUPA_GRP
             B_BUPA_ATT
             B_BUPA_FDG
             B_BUPA_RLT
Authorization objects for relationships:
             B_BUPR_BZT
             B_BUPR_FDG
In addition, you can assign an authorization group to a business partner in the dialog. The authorization group controls which users may maintain data for this business partner.
You can also define authorizations for fields and field groups using the Business Data Toolset (BDT). Depending on the settings you have made, the system carries out the relevant authorization checks.
In the dialog in the SAP GUI, you can display an overview of the authorizations assigned to you by pressing the button Settings.
For more information on authorization management, see the Implementation Guide (IMG) of the Business Partner, as well as in the Developers Handbook for the BDT under Authorizations.
IntegrationAuthorization management for the Business Partner forms part of the SAP authorization concept.
Prerequisites
You have made the necessary settings in Customizing of the Business Partner under Basic Settings--> -Address Management.
Moving over
AS ABAP Authorization Concept
The ABAP authorization concept protects transactions, programs, and services in SAP systems from unauthorized access. On the basis of the authorization concept, the administrator assigns authorizations to the users that determine which actions a user can execute in the SAP system, after he or she has logged on to the system and authenticated himself or herself.
To access business objects or execute SAP transactions, a user requires corresponding authorizations, as business objects or transactions are protected by authorization objects. The authorizations represent instances of generic authorization objects and are defined depending on the activity and responsibilities of the employee. The authorizations are combined in an authorization profile that is associated with a role. The user administrators then assign the corresponding roles using the user master record, so that the user can use the appropriate transactions for his or her tasks.
Authorization Checks
To ensure that a user has the appropriate authorizations when he or she performs an action, users are subject to authorization checks.
The following actions are subject to authorization checks that are performed before the start of a program or table maintenance and which the SAP applications cannot avoid:
        Starting SAP transactions (authorization object S_TCODE)
        Starting reports (authorization object S_PROGRAM)
        Calling RFC function modules (authorization object S_RFC)
        Table maintenance with generic tools (S_TABU_DIS)
Checking at Program Level with AUTHORITY-CHECK
Applications use the ABAP statement AUTHORITY-CHECK, which is inserted in the source code of the program, to check whether users have the appropriate authorization and whether these authorizations are suitably defined; that is, whether the user administrator has assigned the values required for the fields by the programmer. In this way, you can also protect transactions that are called indirectly by other programs.
AUTHORITY-CHECK searches profiles specified in the user master record to see whether the user has authorization for the authorization object specified in the AUTHORITY-CHECK. If one of the authorizations found matches the required values, the check is successful.
Starting SAP Transactions
When a user starts a transaction, the system performs the following checks:
        The system checks in table TSTC whether the transaction code is valid and whether the system administrator has locked the transaction.
        The system then checks whether the user has authorization to start the transaction.
The SAP system performs the authorization checks every time a user starts a transaction from the menu or by entering a command. Indirectly called transactions are not included in this authorization check. For more complex transactions, which call other transactions, there are additional authorization checks.
             The authorization object S_TCODE (transaction start) contains the field TCD (transaction code). The user must have an authorization with a value for the selected transaction code.
             If an additional authorization is entered using transaction SE93 for the transaction to be started, the user also requires the suitable defined authorization object (TSTA, table TSTCA).
If you create a transaction in transaction SE93, you can assign an additional authorization to this transaction. This is useful, if you want to be able to protect a transaction with a separate authorization. If this is not the case, you should consider using other methods to protect the transaction (such as AUTHORITY-CHECK at program level).
        The system checks whether the transaction code is assigned an authorization object. If so, a check is made that the user has authorization for this authorization object.
The check is not performed in the following cases:
You have deactivated the check of the authorization objects for the transaction (with transaction SU24) using check indicators, that is, you have removed an authorization object entered using transaction SE93. You cannot deactivate the check for objects from the SAP NetWeaver and HR areas.
This can be useful, as a large number of authorization objects are often checked when transactions are executed, since the transaction calls other work areas in the background. In order for these checks to be executed successfully, the user in question must have the appropriate authorizations. This results in some users having more authorization than they strictly need. It also leads to an increased maintenance workload. You can therefore deactivate authorization checks of this type in a targeted manner using transaction SU24.
             You have globally deactivated authorization objects for all transactions with transaction SU24 or transaction SU25.
             So that the entries that you have made with transactions SU24 and SU25 become effective, you must set the profile parameter AUTH/NO_CHECK_IN_SOME_CASES to Y (using transaction RZ10).
All of the above checks must be successful so that the user can start the transaction. Otherwise, the transaction is not called and the system displays an appropriate message.
Starting Report Classes
You can perform additional authorization checks by assigning reports to authorization classes (using report RSCSAUTH). You can, for example, assign all PA* reports to an authorization class for PA (such as PAxxx). If a user wants to start a PA report, he or she requires the appropriate authorization to execute reports in this class.
We do not deliver any predefined report classes. You must decide yourself which reports you want to protect in this way. You can also enter the authorization classes for reports with the maintenance functions for report trees. This method provides a hierarchical approach for assigning authorizations for reports. You can, for example, assign an authorization class to a report node, meaning that all reports at this node automatically belong to this class. This means that you have a more transparent overview of the authorization classes to which the various reports are transported.
You must consider the following:
              After you have assigned reports to authorization classes or have changed assignments, you may have to adjust objects in your authorization concept (such as roles (activity groups), profiles, or user master records).
              There are certain system reports that you cannot assign to any authorization class. These include:
              RSRZLLG0
              STARTMEN (as of SAP R/3 4.0)
              Reports that are called using SUBMIT in a customer exit at logon (such as SUSR0001, ZXUSRU01).
              Authorization assignments for reports are overwritten during an upgrade. After an upgrade, you must therefore restore your customer-specific report authorizations.
Calling RFC Function Modules
When RFC function modules are called by an RFC client program or another system, an authorization check is performed for the authorization object S_RFC in the called system. This check uses the name of the function group to which the function module belongs. You can deactivate this check with parameter auth/rfc_authority_check.
Checking Assignment of Authorization Groups to Tables
You can also assign authorization groups to tables to avoid users accessing tables using general access tools (such as transaction SE16). A user requires not only authorization to execute the tool, but must also have authorization to be permitted to access tables with the relevant group assignments. For this case, we deliver tables with predefined assignments to authorization groups. The assignments are defined in table TDDAT; the checked authorization object is S_TABU_DIS.
You can assign a table to authorization group Z000. (Use transaction SM30 for table TDDAT) A user that wants to access this table must have authorization object S_TABU_DIS in his or her profile with the value Z000 in the field DICBERCLS (authorization group for ABAP Dictionary objects).
please See also:
        SAP Notes 7642, 20534, 23342, 33154, and 67766
guess this info will help you,there is one graphic which actually explain the hierarchy of authorisation,i will find some time out to let u know more info about the authorisation
but if u sit with ur BASIS guy then u can learn lot of things in PFCG
i guess u r a basis guy,then its not a problem
best regards
ashish

How can we prevent a user from entering a value in Parameter Field?

how can we prevent a user from entering a value in Parameter Field and Select-options Field?

make it invisible, make it inactive, make it display only.
if the field is not there or not to be seen the user WILL have problems inputting data.
BUT once the field is there you can NOT prevent that the user fills it with data.
all you can do is on PAI check if the data the user inputted was good or bad, and clear his inputs, but you can NOT prevent him inputting something.

How to check the unused users in portal.

Hi Guru,
We are doing auditing in Portal server.Can any tell us
How to check the unused users in portal?.
Regards,
Vivek

Use portal activity reporting for monitoring the users. This way you can monitor the users in the portal who logged on to the portal.
Below are things you can monitor from portal activity report iview
1) number of users logged on during the period of time.
2) Details of the users who logged on
3) monitoring particular iview/page
Check the below threads for more help
http://help.sap.com/saphelp_nw04s/helpdata/en/47/87329cc84a199ce10000000a42189d/frameset.htm
http://help.sap.com/saphelp_nw04s/helpdata/en/47/87346dc84a199ce10000000a42189d/frameset.htm
Raghu

How to check if all values from a dataset has come to an internal table

How to check if all values from a dataset has come to an internal table ?

Hi,
After OPEN DATASET statement check if sy-subrc = 0 if its success then proceed with split statement and save the dataset values into a internal table and while debugging the internal table you will find that whether all values get into internal table.
Checking sy-subrc after OPEN DATASET statement is must to fill up the values in the internal table.
For e.g.
OPEN DATASET p_inpfile FOR INPUT IN TEXT MODE ENCODING DEFAULT.
IF sy-subrc NE 0.
    WRITE :/ 'No such input file' .
    EXIT.
ELSE.
READ DATASET p_inpfile INTO loc_string.
      IF sy-subrc NE 0.
        EXIT.
      ELSE.
        CLEAR loc2.
*Spliting fields in the file-
        REPLACE ALL OCCURRENCES OF '#' IN wa_string WITH ' '.
       SPLIT wa_string AT const INTO loc2-pernr
                                       loc2-werks
                                       loc2-persk
                                       loc2-vdsk1.
Hope you get some idea.
Thanks,
Sakthi C

How can I list all users who have access to a particular TABLE or VIEW

Hi,
Can someone tell me how I can list all users who have access to a particular TABLE or VIEW.
Abhishek

Hi,
Take a look on this link: http://www.petefinnigan.com/tools.htm
Cheers

How to prevent a portal user from using the BEx Analyzer ?

Hi,
we have different type of users : most users may use the portal as well
as the analyzer ;
we have one special user with extended authorizations : this user
should use the portal , where he has a limited set of queries to run
with hardcoded filters ==> this user should not be able to use the
analyzer however, since he then would be able to call all other queries
by using the find function ;
how can we make sure this user cannot use the analyzer , using SAP
authorizations ?
best regards,
Erwin Van Giel.

Hi,
if I remove the complete S_RFC authorization for the user then the BEx Analyzer cannot connect anymore to the BW system, but neither can the user run reports from the portal : it needs the S_RFC with 'SYST'.
If I only remove the RRMX from the S_TCODE and from the S_RFC, it does not prevent the user from starting the BEx Analyzer and connecting to the BW system. It only stops the user if he would start the RRMX transaction from within an SAPGUI session.
Perhaps there should be a value in the S_RFC that allows connections from the portal but not from the BEx Analyzer .... ?
so not solved yet ....
best regards,
Erwin.

How do i delete a user from my macbook pro?

How do I delete a user from my macbook pro?

If you've admin privileges and there are no files in the user account that you want to keep, just go to System Preferences>Users & Groups and unlock it with your admin password. Select the user that you want to delete and click on the minus button. You'll get a warning before you completely delete the user but once it's gone, it's gone.
Clinton

How to extract external directory users from a shared services group from shared services RDBMS repository

Hi,
I have a security group in shared services, which has external directory users. I want to extract the list of users from shared services RDBMS repository using a SQL query. Please let me know if this is possible and from which table(s) I can query such list.
Thanks...

You need to use CSS_Groups, CSS_GROUP_MEMBERS and CSS_USERS tables in your Foundation DB. Something like below will give you these details:
select b.Name ,a.Name from HYPFOUND.CSS_GROUPS b ,
HYPFOUND.CSS_USERS a ,
HYPFOUND.CSS_GROUP_MEMBERS c
WHERE c.MEMBER_IDENTITY = a.IDENTITY_ID and
c.GROUP_IDENTITY = b.IDENTITY_ID
GROUP BY (b.Name,a.name)

How can i know iphone users from contacts, how can i know iphone users from contacts

how can i know iphone users from contacts, how can i know iphone users from contacts

You could open that contact in messages, and your iPhone should say "iMessage" instead of "Message" in the text field. However, this depends wether the contact has iMessage enabled, but it could also mean the contact is using an iPad or iPod touch.
Make sure that their mobile number is in iMessage, and if the text field says "iMessage", then they are using an iPhone (if they've enabled it).

How to check list of users from OS level with type and validity AIX+DB2

Similar Messages

Maybe you are looking for