How to control the users' authorization?

Hi All,
Please help me for the below scenario in system.
A & B users have access to same business role (Ex: SERVICEPRO) in Web UI. However, user A should be able to create and edit anything, but user B should have only display authorization (User B should not be able to create and edit anything in application).
Could you please suggest me how/where to control the authorization for these users?
Regards,
Maddy

Hello Maddy,
Hello Maddy there is no specific authorization object for user. That can be done with PFCG menu. You need to play around with the PFCG Role “Menu”. The solution for your scenario is as below:
When I say changes in the menu, I mean changes in the menu tab of the PFCG role assigned to the user. You have to delete the UIU component from the respective folder. In the present case I have taken Sales folder - transaction Opportunity. This holds good for any transaction (eg activities, lead, etc). The moment you delete the link (UIU_COMP link) and save the PFCG Role the authorization tab will become red. Reason being that specific authorization of create/display is deleted. You need to go to authorizations make all green and generate the profile.
You can also refer to the link below, which will be of help to you for better understanding.
Some facts about UIU_COMP authorization object in SAP CRM.
Hope this answer was helpful
Thanks!
Neha

Similar Messages

How to create the user on Internet Application Server(IAS) control console

Hi All,
My Client is asking me for How to create the user on Internet Application Server(IAS) control console 10.1.2( 10g release 2).
If anyone have the document for How to Create the User on Internet Application Server (IAS) console 10g release 2 , then please send me the document and help me out from this Concern.
Regards,
Yadav@intelli.
Edited by: 851080 on Apr 8, 2011 6:31 PM

Are you using OID? Can you provide more details about your iAS environment?

How to restrict the user to change/enter field value in me21n?

Hi, Experts,
in the me21n screen..for matkl field we need to validate the user authorization.
if that user having the authorization then it should allow to enter value in the matkl(material group) field.
other wise it should not allow.
how to do this validation?
can anybody help me on this.
Thanks and Regards,
venkat

Hi Aprna,
Thanks for your reply, but can you give some code for that.
actually i am new to badi or userexits...
if you can provide code it will be more helpful for me.
Thanks in Advance,
venkat

File upload....How to find the user entered any file or not

Hi Team,
I am working on with file upload UI.
Some times without clicking on browse button, I mean without entering any file they are cliking on upload button, which is giving the exception.
I know there is no action for UI element, Then how to resolve this?
I just control the user, not to press the upload button without entering any file name there?
How to resolve this?
regards,
Bala

Hi,
This code will solve ur problem.
public void onActionUploadFile(com.sap.tc.webdynpro.progmodel.api.IWDCustomEvent wdEvent )
    //@@begin onActionUploadFile(ServerEvent)
    IWDAttributeInfo attributeInfo = wdContext.getNodeInfo().getAttribute(IPrivateFileUploadDownloadView.IContextElement.FILE_RESOURCE);
    IWDModifiableBinaryType binaryType = (IWDModifiableBinaryType)attributeInfo.getModifiableSimpleType();
    IPrivateFileUploadDownloadView.IContextElement element = wdContext.currentContextElement();
    if(element.getFileResource() !=null)
         try
              String mimeType = binaryType.getMimeType().toString();
              byte[] file = element.getFileResource();
              //element.s
              wdComponentAPI.getMessageManager().reportMessage(IMessageFileUploadDownloadComp.SF__UPLOAD,new Object[] {binaryType.getFileName()},false);
         catch(Exception e)
              throw new WDRuntimeException(e);
    else
          wdComponentAPI.getMessageManager().reportMessage(IMessageFileUploadDownloadComp.NO__FILE,new Object[] {" "},true);
    //@@end
Here "fileresource" is context attribute name
Regards,
Sunaina Reddy T

How to find the user exits and BADIS from SPRO

Hi all,
please let us know how to find the User exits or BADIS for an application from SPRO.
Regards,
Madhavi

Hi Varisetty,
Finding user exits and BAdis from SPRO can be cumbsersome. In most instances you know the standard SAP program and want to check (find) an exit called in the flow of the transaction. You can do this as follows:
For User Exit:
Put "/h" in the command box (to start debugging)
Execute your transaction
When you enter debugging - put a breakpoint at statement
CALL CUSTOMER-FUNCTION
the control will stop at all calls to User Exits
For BAdi (it's simpler)
Go to class CL_EXITHANDLER in SE24
Enter method GET_INSTANCE
Put a breakpoint in this method
Run your standard transaction - control will stop at all BAdis called within the flow since this method is used to check BAdi implementations before invoking them
Also, if you want to find enhancements by package - go to SE80, enter the package and check function groups starting with X - those contain function exits (conventional user exits). For BAdis in a package, there is normally a separate tree node (under the package) for Enhancements hence clearly identifiable.
Cheers,
Adi

How to restrict the user from making any changes in Sales order- item level

Hi to all
How to restrict the users from making any changes in sales order at item level if the same sales order is released by senior user through status profile.
Regards
Anish Parikh
Edited by: anish parikh on Jan 24, 2008 5:16 AM

Hi Anish,
This can be achieved through the roles and authorization.
This can be done through the basis team. they can create user profiles and roles.
For the roles they assign some transaction codes so that they can view the only assigned tr. codes.
Like that ur requirement can be done.
Also u can prevent the user to change any fields in the sales order screen (VA02). for that please modify the authorisations.
Hope i answers.
Reward points if useful.
Edited by: kaleeswaran bhoopathy on Jan 24, 2008 9:57 AM

How to stop the users from changing the Decimal in SAP

How to stop the users from changing User Profile

Hai,
It is not possible to restrict SU3 to display, because it has only S_TCODE has the authorization object.
If you really want to restrict users from changing their profile you have to remove the SU3 access and give SU1 or SU2 which gives access only to Personnel details and Parameters.
Hope this helps.
Regards,
Yoganand.V

How to control the measure based on the related dimension.

Hi Experts,
In order to improve performance, I have created three kinds of time tables in DB,such as Year .Month, Day.
Then import them into the physical layer in RPD, and combine them into one dimension in BMM.
Actually, it has three level fact related with three time tables,so they are also dragged into one fact in BMM,and one column will be corresponding with three column derived from different Fact table in physical layer.
So I want to know how to control the measure based on the related dimension.
For example:
when users drag the Year,Sales column, it will come from Year Dimension and Year Fact Table.
when users drag the Month,Sales column, it will come from Month Dimension and Month Fact Table.
when users drag the Day,Sales column, it will come from Day Dimension and Day Fact Table.

Hi,
Create a dimension Hierarchy, with Year >> Month >> Day Levels and
Next Double click on Year Table LTS >> click on Ocntetnt Tab >> set as Year
same way for Month LTS and Day LTS.
So now when you select year column then server canknow which LTS to hit and Hits Year LTS.
Mark If Helpfu/correct
Thanks.

How could control the scroll events in ALV OO?

Hello experts!
I'm programing a report, inside there is a field that need time of processing. I'm using ALV OO.
I have thought that it could only calculate the field for the lines that visualize.
How could control the scroll events to calculate the field of the visualized lines?
I'm using CL_SALV_TABLE class and cl_salv_events_table to control the events, but there aren't any event to control the scroll.
best regards!

Hi Sriram,
I did view the information that you was attaching, but this don't resolve my problem. With methods get_scroll_info_via_id and set_scroll_info_via_id, we can get and put information of selection and view rows in the screen but we don't control when the user click in the scroll for advance or to back down a page.
I would like to refresh the data in ALV when the user view news rows.
I want your genial ideas.
Best regards!

How to control the permission for reports in share folder?

Hi Experts,
In OBIEE 11.1.1.6.0.
I have created two folders in share folder,one is sales folder which contains some sales reports,and the other is dashboard folder which contains some dashboard pages that have these sales reports.
So I want to new users who do not access the sales folder, but can view the sales reports in dashboard pages.
How to control the permission for reports in share folder? Thanks for your help.
Note: Dashboard pages have whole sales reports for showing.

Hi User,
1. Give access to the users for all reports.
2. Give No Access to Retail Folder
3. GIve read or full access to dashboard folder.
To set the permission , click on the object/folder bottom left you will find Permission. you set there.
Mark if correct,
fiaz

Best practice to set up the user authorization

Dear expert,
I have a question regarding the user authorization access. I've attend the BOE training but I'm still blur in term of user authorization planning. Currently, I have around 50 named users that need to access the BOE server. But the certain user will be restricted to access to certain folders or reports. May I know what is the best practice to set up the user authorization access? Should I set up first in the development machine and once its firm, then I migrate it to production machine..or is there any steps that I need to follow...?
Really appreciate if you can let me know on what should I look into first before set up the authorization. Is there any doccument that I can referring to..?
Thanks & Regards,
-Syahida-

Create User Group for each folder (for eg. Sales/Marketing etc) and also based on the type of access you want to provide.
Like Sales VOD/ Sales View/Sales Schedule, and add users to the User Group based on the type of rights you want to provide them. Then add the User Group to respective report folders.
First deploy it in the Development environment, once you have everything finalized then you can replicate the same to QA and Prod environment by migration. Also make sure that in Development environment developers will have full control to develop/add reports to folders, you have to restrict that in QA & Prod environment.

APO Security to control the users access

Hi,
Is there any possibility to control the users access by controlling through selection ID's or does it possible through any of the product lines (Characteristics)?
My requirement is I have to control all the APO DP users in various levels of Product lines and the access has to be granted at specific product level. Right now I am trying do through selection ids, but I am looking for more effective way.
Please help me with your views.
Thank you in advance!
Jegan

Hi Jegan,
There are so many security objects in DP that you can try out and see if they meet your requirement.
The way I understand your issue is to restrict user by certain products or BW characteristics.
To control by Products, try the object C_APO_PROD with activity APO_PROD (Product Identifier). You can select specific products here for each role and restrict by either display, change, execute, delete etc.
If you want to restrict by BI characteristics, try object S_RS_AUTH.
Be careful with this as you are selecting BI objects, the system restricts them even if they are remote part of your work.
If you have to restrict by specific product levels like all product lines, I am not sure how to do it but you can certainly try searching based on keyword "PROD".
Please let us know if you discover something useful.

How to trace the missing authorizations using NWBC at object level

Hi all,
In SAP R/3 any authorization issue can be tracked down till authorization object level using SU53 tcode and ST01 tcode.
1 - I have a super user who has all the roles in Solution manager system and test user which I created with just 1 role Incident management role. But when I login with Super user ID I can see in tcode (WDY_APPLICATION - Incident Management ) I have 4 tabs (Overview,Messages,Reports and Queries) but when I execute the same tcode using test ID I can only see Overview and Messages tab. Report and Query tab were missing . Please advice on how to trace the missing authorizations using NWBC at object level? or how to solve this issue......
2 - How to add a Web dynpro Transaction code (example WDY_APPLICATION - Incident Management )while building a role in PFCG?
Thanks
LAK

Hi Gurus,
Can anyone please help me with my questions.
In addition here are few more info that I need
How to bring in the new authorizations without logiing off and logging in back in NWBC ( Equivalent to Menu-->Refresh in SAP GUI)
Thanks
LAK

How to let the user define the colors for each plots in the graph (I use LabVIEW 7)?

How to let the user define the colors for each plots in the graph (I
use LabVIEW 7)?

Hi,
Take a look at this example, it uses property nodes to select tha
active plot and then changes the color of that plot.
If you want to make the number of plots dynamic you could use a for
loop and an array of color boxes.
I hope this helps.
Regards,
Juan Carlos
N.I.
Attachments:
Changing_plot_color.vi ‏38 KB

How to avoid the user selecting a different path in my installer

Hello again all you helpful forum-goers!
I have an application and a corresponding installer, and then I have a separate installer putting some support files in the same directory. My problem is that if the user selects a different path to which to install my primary application, the secondary installer will not put the required support files in the same spot.
Now, I think I've figured out how to get the user-selected path from the "Run executable at the end of installation" option in the Advanced pane of the LabVIEW installer configuration, and I can pass that in to my secondary installer, and that should fix the problem. However, what I'd really like to do is just not give the user the option to install my primary application in a different directory to begin with. I've looked, but cannot find any way to do that.
Does anyone know of any way to not present the option to install an application in a different directory when using the LabVIEW installer?
Thanks in advance for any suggestions,
-Joe

Ben64,
That's great! Thank you so much for your quick reply. The only reason I haven't already accepted that as my solution is that it requires a manual post-compile change to a text file. Ideally I'd prefer not to have to remember to do that every time I rebuild my installer. Is there any way that you know of to automate the process?
If not, I'm happy to have a good solution even if it takes an extra step each time to implement.
-Joe

How to control the users' authorization?

Similar Messages

Maybe you are looking for