How to create thousands of autorizations roles??

Hi gurus i am working in a project where i have to create thousands of autorization roles and i have to limit information in the DW by group of users, do you know if ther's a tool that help me to create that bunch of objetcs fast and easy? i mean i should create thousand of roles!!! there might be one!
Thanks!

Hi,
For reporting users, in transaction PFCG you have to add the following authorization objects to your profile and maintain the required settings. Security of reporting users mainly focuses on Info Area, Info Provider /Query.
S_RS_COMP: Info Area, Info Provider, Reporting Component
S_RS_COMP1: Reporting Component, Query Owner
S_RS_ICUBE / S_RS_ODSO - Info Area, Info Provider, Sub Object.
S_RS_FOLD: To switch the display of Info Areas ON/OFF.
You have to include the authorization objects S_RFC and S_TCODE. RRMX is the transaction which is to be checked for Reporting purpose.
For securing at Info Object level, you can define your own custom authorization objects in transaction RSSM and add them to your profile.
For securing work books,
the authorization objets available are S_GUI and S_BDS_DS - For saving workbooks to Favourites.
S_USER_AGR and S_USER_TCD (Transaction code: RRMX) is used for saving workbooks to roles.
For Administrative users, you can use templates provided by SAP as reference for defining Authorization Objects.
The main authorization object which provides Primary level of security for Administrative users is S_RS_ADMWB.
Hope this helps.
DST

Similar Messages

How to create a "Firefighter" type role when we do not have GRC

I am just looking for advice or input on this situation.
Currently my company does not have GRC or any other type of software that will allow for automated Firefighter type access and apparently there are no plans in the near future to purchase anything.
Our current process of creating a very powerful role to sign out to users on a case by case basis for a 24 hour period is not working and is getting out of hand.
I have been tasked with coming up with a better solution and they want me to build multiple roles for emergency access based on business area. Since there are thousands of transaction codes in SAP I find this to be a rather daunting task. My question is this...would it be a really bad idea to build say a Finance emergency role with F* in s_tcode and full access? I realize that there are more Finance codes that do not start with F but I am really just looking for input.
Has anyone else faced this situation and how did you approach it?
If someone out there has done this and could provide me with sample roles, that would be great.
Any help or advice is greatly appreciated.
Thanks
Bobbi

Hi Bobbi
There are couple of ways I did it in my previous customers. I am guessing you need these roles during Go-Live and Production Support
1. Create FF roles by business Process ( OTC, RTR etc) or Module wise. Get hold of the respective Functional people and ask them the nodes in SPRO Tcode what they think should be there for those FF roles. Then create those roles accordingly. Remove the Basis / Security admin tcodes and make 03 where-ever necessary.
2. Another way of doing it is you might already have global roles for different modules / business processes. So identify the roles that are best suited for the FF roles and during Go-Live/ Prod Support. Group them and may be create composite roles for those Global single roles
You might need FF roles for Transactional access and Configuration Access.
Transactional FFID: FFID with change access to business transactions of the stream/function. (Can use the create/change access roles built for end users)
Configuration FFID: FFID for any manual configu2019s to be performed directly in production and cannot/may not be transported (ex: number ranges)
There should be process for giving the FF roles and proper approval. Appropriate role owners should be identified for these roles who will give approval
Hope this helps

How to create thousands of sql scripts easily?

Hello,
I would like to create thousand of scripts as following:
insert into table tb_test('aaa');   update table tb_class( set nm = 'aaa');
insert into table tb_test('basd'); update table tb_class( set nm = 'basd');
insert into table tb_test('asdfa');update table tb_class( set nm = 'asdfs');
insert into table tb_test('xxxyy');update table tb_class( set nm = 'xxxyy');
Is there any simple way to generated those scripts automatically? I am thinking of :
    define var_str = ('aaa', 'bbb', 'asdfd',...'xxxyy');
    select 'insert into table tb_test(' || var_str || '); update table tb_class( set nm =' || var_str || ');'
    from dual;
Then how do I generate those scripts from the var_str?
Thanks,

942572 wrote:
I have more than 5000 parameters in a text file as followings, which can be opened by notepad or excel:
'aaa',
'basd',
'asdfs',
'xxxyy'
Ok, so assuming this is a 1-off event, use Excel.
Setup a quick formula to turn each into a proc call:
[edit] if the values are in column "A", then in column "B", you could do:   =concatenate("p_proc('", a1, "');")
then copy that formula down.
[/edit]
p_proc('aaa');
p_proc('basd');
etc.
Then setup a little p_proc as Frank described. (and please, use a WHERE clause on that update ... or you're going to destroy some data )
Then copy past those commands into a routine that ends up looking like:
declare
procedure p_proc ( in_value )
is
begin
      -- Frank's code goes here
end;
begin
   -- proc list goes here
p_proc('aaa');
..... etc.
end;
That's 1 very primitive way to do it.
If you need to reproduce this in future, you may want to consider loading that list of parameter values into a table, then you can do some more funky things. *shrug*

How to create business partner with Role : "Loyalty Partner"

Hello,
During the creation of Loyalty Program, we can add loyalty partners which are Business Partners created with Role --> "Loyalty Partner". In standard package I could not see the the Role "Loyalty Partner"
For this role to be available during the creation of Business Partner, does any business functionality needs to be activated or should we create new role "Loyalty Partner" through BDT
Thanks
Ram

Hi Vishal
Thanks for your explanation but I think it has not answered my question fully.
Yes, I do agree that only Loyalty Partners can be added in a Loyalty Program and those are Business Partners.
If you read through my question, I have asked how the system differentiates between Business Partners for example a sold to party and Loyalty Partner. In other words, which part of data in the Business Partner is the one which actually differentiates a Loyal Partner with other Business Partners. I think, just creating a Business Partner with Role --> Loyaly Partner will not serve our purpose.
The BP view is the same and the BP Role category does not contain my customization to differentiate this
Hope you understand what I am trying to say. Please let me know if you have any questions !!
Regards
Ram

How to create the IView and Roles ,User for WebdynPro Application in Portal

Hi,
I have one simple webdynpro application. i want to create the user,Role and Iview for my webdynpro application in the Portal . after that i need to assign the roles to the user and i want to see the different output for each user depends upon the Role.
Can anyone give me Tutorial page(PDF) or Guide me How to do?
Thanks in Advance
Regards
Ramkumar

Hello Ramkumar,
following please find the link to available documentation in SAP Help Portal:
http://help.sap.com/saphelp_nw70/helpdata/en/42/fa080514793ee6e10000000a1553f7/frameset.htm.
Regards,
SAP AG
Gesine Raith

How to create employee BP role in PCUI.

Dear Experts,
We are trying to maintain case mangement system for employees in CRM but how to create BP with employee role in PCUI. In standard structure only Customer,Prospect,Consumer,& Competitor roles are available.
Is there anyway to directly create Employees in PCUI or replicate emplyee in PCUI after creating in GUI.??
OR,
Is there any functionalities in CRM to capture Cases or complaints of employees with workflow escalations.
Max. points would be rewarded for Userful answers.
Regards,
Basavaraj Patil

Dear Basavaraj ,
Which version of CRM are you using? Not sure about PCUI...In CRM 5.1 we are using UI and that option is available...you can create the Employee in UI. You can create the business role and can assign the corresnding profiles to it.
CRM->Usr Roles->Define Business Role
Thanks,
Atin

How to create and assign role

Dear all,
I want to create the role and assign.
kindly let me know
shailesh

Please have a look at below link. It explains how to create and assign content ( roles, iveiws) in Portal
http://help.sap.com/bp_epv170/EP_US/BBLibrary/documentation/N04_BB_InstallGuide_EN_US.doc
Kindly assign points if helpful
Regards
Jayesh

How to create customized security rolesfrom scratch?

We want to allow developers to certain iviews (or
other objects).
There is no existing SAP roles available.
Would you share your experience how to create
such kind of roles?
Thanks!

Hi,
i have H4 Help problem.
how can i restrict an attributes of infoobject in H4 Help value.
Please help me
Madhu

How to create a report of users in ucm about their roles and permission

Hi All ,
I need to create a report and it should contain all the users in ucm as well as their roles and permissions. Basically the report would be for the admin who can see all the users in a single report and can know about the roles and access of each and every users.
How to create such report ?? I have tried from web layuot editor but the default report template i.e stdUserReport in user datasource does not contain more than three fields..Is there any method to get such kind of report???
Please suggest!!

There was an example component to demonstrate this kind of function. Under Stellent in version 7.5
I do not know if they hand it out anymore but it is not on the standard samples page for Oracle. You may want to open a Support SR to ask for it. It should still be around in their servers if they can get permission to hand it out as a sample again.
Sample CustomReports component to demonstrate how to create customized reports
CustomReportsBundle.zip
Date:     October 30, 2006
Sample Version:     version=2006_10_20 (build 1)
Product and Version:     Content Server
Sample Status:     This is a Stellent Sample. Stellent Samples are free and include non-supported add-ons, utilities, tutorials or programming examples. It may require additional configuration or security auditing for maximum effect. It is not supported by Stellent without a consulting engagement.

How to create a group including several roles?

Hi experts,
Hereby a simple question but urgent, that is, how to create a group in portal which includes several roles. For exemple a group for manager contented the roles for managers and another group for employees. Thus it simplifies the role assignment for any user.
Thanks and with great appreciations

Hi! wuyia,
to create a group and assigining the roles to the group, you will need the userAdministrator role in the portal.
1.Go to userAdministrator role.
2.click on group workset and create a new Group
3.click on Role workset and search the role which you want to assign to the group.
4.edit the role and add your group to this role.
5.click on save button.
regards,
Mithilehwar

How to create a form that requires thousands of checkboxes?

Hello forum members,
I have Adobe Acrobat 8 Professional. I've been searching the internet/forums for the past few hours and I can't seem to find any information on how to create a form with many checkboxes. I do not want to have to give individual names to thousands of checkboxes. I'm hoping there's an easy solution to my problem. Maybe I don't even need to use checkboxes.
Here it is...
I'm a DJ and wedding season is coming up. For each wedding that I do, I usually give the bride and groom a list of my songs and they choose a bunch of songs that they'd like to have at their reception. In the past, I've just been sending them a webpage word document with the songs and they'd send me their selections in a different document or directly in the reply email. I'd like to make this process easy for them (and myself) by making a pdf document where they can simply place a checkmark beside the songs that they want and then send it back to me. As a bonus (if it's possible) i'd like to be able to export the songs that they selected into a separate document so that I don't have to go through the entire pdf (with thousands and thousands of songs) when they send it back to me.
I would be ever greatful if somebody help me or direct me to a link with some additional information.
Thanks in advance,
Mike

George, thank you very much for your quick reply and good advice.
Mike

CRM 7.0 How to create Business role & generate

Hi Team,
Can you please let me know some breif idea about CRM 7.0 security guide.
How to created Business role is this part of functional activity?
Whats the role of Technical colleagues BASIS guys in CRM 7.0 security .
Please help me to get some document regarding business role creation , generation , assignment & authorization checks in CRM 7.0.
Thanks & Regards,
Vyash Mishra

Hello Viyash
I will add the most important information for generation of business roles and assignment of authorizations to users.
You must first create the PFCG roles. PFCG role is built based on the Business Role.
Please see documentation in : SPRO
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Authorization Role
Then the PFCG role can be assigned to the business role in
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Business role
Finally you must assign business roles to Organizations or positions in organizations in
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Organizational Assignment
The users that are assigned to such organizations / positions will be therefore linked to the business role.
With the previous steps the users will have the authorizations that are assigned to the PFCG profile that is linked to their business role.
Business roles are the main way to configure authorizations for users in CRM but you have more options that give you flexibility.Each business role has assigned one PFCG role, but the relationship between business role and PFCG role is not strict. You can even assign a dummy PFCG role to a certain business role in business role customizing and then go to transaction PFCG and assign other PFCG role(s) to the users that are assigned to that business role.
I would say that the previous tasks must be performed by the basis team but in cooperation with the functional team
Best Regards
Luis Rivera

How to do Enhancements in Reporting & What is Role and How to create Roles

Hi All,
Can any one tell How to do Enhancements in Reporting, and also What is Role and How to create Roles in Reporting?
Plz reply back me on [email protected]
Regards,
Kiran

Reporting Enhancement - RSR00001 - BW: Enhancements for global variables in reporting
And using the SAP Exit - EXIT_SAPLRRS0_001
RSR00001- With this enhancement to global variables in reporting you have the option of determining your default values for variables. You can use this enhancement for variables, for which 'Processing by Customer-Exit' has been selected in the variable maintenance. This is valid for all variable types (characteristic value, node, hierarchy, formula and text variables). You use the Exit EXIT_SAPLRRS0_001 for this.
The Enhancement component (RSR00001) must be assigned to a Project Created using the Transaction CMOD. On activating the Project, the Exit would become active and in turn the logic written inside the Exit.
To ensure that the data warehousing soultion reflects your company's structure and business needs it is critical that you establish who is authorized to access the data.With SAP BW, Authorizations can be defined and maintained by object and can also be applied to hierarchies and these authorizations can be inserted into roles that are used to determine what type of content is available to specific users or user groups.
T-code for Role maintainence -PFCG.
Please assign points if it is useful.
Regards
Pavan Prakhya

How to create a Workset in the Role

Hello SDN,
Could you please tell me how to create a Workset within the Role?
I tried to create it via right-click on the Folder of the uploaded Role and the only option is available is New Folder. I don't see any options for Workset.
Thanks for any helps!
Regards,
Niki Nguyen

Hey Niki,
Go to Content Admin->Portal Content.
Select your default work folder. Right click it and select new workset.
Create and save workset.
After that open your role and right click on workset and select the option add to role.
If you are not aware of the location of the role select tab search and type some keywords with *. select it and click locate in catalog.
Hope this helps!
Regards
Atul Shrivastava

How to create a global role with WLST in WL 10

Hi All:
The approach in the protect_resources.py found in dev2dev, doesn't work. I've managed to convert the user and group creation to work with WL 10, but I can't for the life of me figure out how to create the role. There doesn't seem to be a createRole() on what I would think are the appropriate MBeans in poking around.
Anyone know how to do this, or will I have to come up with a screen scraping solution that does this via the weblogic console, where it's so easy to do so?
TIA
Forrest

Not having X's programing background I think of an action reference as something that tells Photoshop what to do. And yes it is like a little action that you write instead of record. For example the code that I and X posted could also be written like this
var ref = new ActionReference();
ref.putProperty( charIDToTypeID( "Prpr" ), stringIDToTypeID('tool') );// what key to get
ref.putEnumerated( charIDToTypeID("capp"), charIDToTypeID("Ordn"), charIDToTypeID("Trgt") );// where to get it from
var cTool = executeActionGet(ref);// in this case returns a one key descriptor
var cToolTypeID = cTool.getEnumerationType( stringIDToTypeID('tool') );// get the value of that key
alert( typeIDToStringID( cToolTypeID ) );// make that value readable
Most of the ordinals you will see will be target as Photoshop likes whatever you are working on to be active. You sometimes see next or previous. I can't recall seeing a 'normal ordinal' like first or second.
There is not much in the way of documentation. Most of what I know comes from looking at the scriptlistner log, xtools and X himself, and a little bit of code I put together for exploring action descriptors and action list. It's not as nice as X's getterdemo but works more the way I think. It sends it's output to the ESTK console window
var ref = new ActionReference();
ref.putEnumerated( charIDToTypeID("Lyr "), charIDToTypeID("Ordn"), charIDToTypeID("Trgt") );
var desc = executeActionGet(ref)
var c = desc.count ;
//for(var i=0;i<c;i++){ // to enumerate list
// $.writeln('Key '+i+' = '+desc.getType(i))
for(var i=0;i<c;i++){ //enumerate descriptor's keys
$.writeln('Key '+i+' = '+typeIDToStringID(desc.getKey(i))+': '+desc.getType(desc.getKey(i)))

How to create thousands of autorizations roles??

Similar Messages

Maybe you are looking for