How to restrict selected Role under a Role???

Hi Friends,
I have 3 roles, which are Role-1, Role-2, Role-3.
Role-2 & Role-3 are Under/Part of Role-1.
Now, I have assigned Role-1 to a user. By doing this, When he logs in he is able to see the Role-2 and Role-3 also eventhough we havent assigned Role-2&3.
Now My question is, How to restrict a role under a role. For example, I dont want to show Role-3.
When i checked the user roles assigned, i see only Role-1 but not 2 other roles.
Could anyone advice on how to make unwanted role in role. Assuming, no one is going to assign directly with Role-2 & Role-3. They got assigned only Role-1.
Thanks for u r time!!
Thanks,
Raghavendra.P

Hi Praveen,
Thanks for important/useful information. I really dont understand is., Inspite of giving the properties to the each of role/workset, How do we call the approprite under the role. for example :
If we have Role-2 with propery dept=sd,
and Role-3 with propert dept=xi, etc.
Now i have Role-1, within which i have Role-2 and Role-3.
Now, if i want to see only roles with dept=xi then where should i mention and what should i mention.
I understood till creating the properties, assigning the properties to roles/worksets, giving values to properties.
Only i doesnt understood is how to activate which we want in the scenario.
Thanks for your time..!!!
Thanks,
Raghavendra Pothula

Similar Messages

How to Restrict Search based on the Roles for External crawled sites

I have a situation where the search results have to be restricted based on role
When External sites are crawled, how can we restrict the search results based on roles,
I know that we can restrict the search to a group or set of groups that can contain many users but if the group have different roles and if that group has given access to a web repository search, how can we restrict the document/search access based on roles for the same group?
For Example an Index that has external site as data source and the permissions were set for a group and that group has 2 roles, lets say <b>"Admin" and "user"</b> and the external site have some documents when searched the documents should come up only for the "Admin" role during search, but should not come up for the "user" role
Is it possible to achieve this? Is there a solution?
Any advices are greatly appreciated and awarded
Thanks,
kk

Is it possible to restrict on role based?
Any suggestions are appreciated
Thanks
KK

How to restrict sale offices under company code

Hi guru's
I want to see all the sales offices under the company code, like comapny code br11 and sales office is br01, if i select comapny( user entry) it will display all the invetory information then in the filter if i slect saleas office it should display all the sales offices(br01,br02...) which r under( br11).
del
( assign points if helpful)

Hi,
I think you are in Bex queries.
In Query Designer you can restrict Company code with Sale soffices.
Just try it.
Place the onject in Filters and right click and select restict.
Hope this helsp...
Let us know status.....if you still any issues.
Reg
Pra

How to restrict selections...

Hello guys,
How can I restrict certain values on a system table? for example: p_matnr like matnr in the selection-screen. Also, how can I show a error message that when a user selects an invalid value?
Thanks guys!help would really be appreciated.

Hi ,
You have event called AT-SELECTION_SCREEN.
Validate your input value on the same table and rasie error message if that value is not found.
AT SELECTION-SCREEN.
    SELECT single matnr FROM mara
           INTO mara-matnr
           WHERE matnr eq p_matnr.
    IF sy-subrc NE 0.
      MESSAGE ezzz. " Invalid Material Number
    ENDIF.
Hope this helps.
Regards,
Sudheer

How do i select everything under my pen tool path.

I have made a path with my pen tool around an image that i desperately want. But if i delete the pentool path everything underneith stays alive. They are both in the same layer so i do not know how to do it. Any help?
Yours sincerely,
Joep

Joep,
My guess is that you will obtain the desired appearance if you select both the Pen Tool path and the image and Object>Clipping Mask>Make (Ctrl/Cmd+7).
That will show what is beneath the path and hide what is outside it.

Restrict select options

I am using a logical database in HR.I use the selection screen of the logical database but i want to restrict a select options for only permit introduce one value.
I restrict in abap to only use values ,nor intervals by example and other conditions.Now i have to restrict to only one value.
it must be work like a parameter

Hi,
U can use No-extension to restrict multiple selcet option button.
See this link
http://www.sapdevelopment.co.uk/reporting/selscr/selscr_restrictso.htm
*: Report: ZRESTRICT_SELOPT                                           :
*: Author: www.SAPdev.co.uk                                           :
*: Date : 2004                                                       :
*: Description: Demonstrates how to restrict select options to only    :
*:              allow specific restriction options:                    :
*:                                     i.e.. EQ, NE, BT etc..          :
REPORT ZRESTRICT_SELOPT.
* Include type pool SSCR
TYPE-POOLS sscr.
TABLES: EKPO.
* Selection-screen
select-options : so_ebeln for ekpo-ebeln,
                 so_ebelp for ekpo-ebelp.
* Variables for populating restriction data
DATA: gd_restrict TYPE sscr_restrict.   "structure containing 2 tables
DATA: gd_optlist TYPE sscr_opt_list,   "header line for table 1
      gd_***      TYPE sscr_***.        "header line for table 2
*INITIALIZATION.
INITIALIZATION.
* Restrict SO_EBELN to only except EQ, BT and NE.
gd_optlist-name = 'KEY1'.      "Can be anything
gd_optlist-options-eq = 'X'.
gd_optlist-options-bt = 'X'.
gd_optlist-options-ne = 'X'.
APPEND gd_optlist TO gd_restrict-opt_list_tab.
clear: gd_optlist.
gd_***-kind = 'S'.
gd_***-name = 'SO_EBELN'.
gd_***-sg_main = 'I'.
gd_***-sg_addy = SPACE.
gd_***-op_main = 'KEY1'.       "Must be same as above
APPEND gd_*** TO gd_restrict-***_tab.
clear: gd_***.
* Restrict SO_EBELP to only except CP, GE, LT.
gd_optlist-name = 'KEY2'.      "Can be anything
gd_optlist-options-cp = 'X'.
gd_optlist-options-ge = 'X'.
gd_optlist-options-lt = 'X'.
APPEND gd_optlist TO gd_restrict-opt_list_tab.
clear: gd_optlist.
gd_***-kind = 'S'.
gd_***-name = 'SO_EBELP'.
gd_***-sg_main = 'I'.
gd_***-sg_addy = SPACE.
gd_***-op_main = 'KEY2'.       "Must be same as above
APPEND gd_*** TO gd_restrict-***_tab.
clear: gd_***.
CALL FUNCTION 'SELECT_OPTIONS_RESTRICT'
   EXPORTING
*    PROGRAM                      =
    restriction                  = gd_restrict
*    DB                           = ' '
   EXCEPTIONS
     TOO_LATE                     = 1
     REPEATED                     = 2
     SELOPT_WITHOUT_OPTIONS       = 3
     SELOPT_WITHOUT_SIGNS         = 4
     INVALID_SIGN                 = 5
     EMPTY_OPTION_LIST            = 6
     INVALID_KIND                 = 7
     REPEATED_KIND_A              = 8
     OTHERS                       = 9.
IF sy-subrc <> 0.
    MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
          WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
ENDIF.
Kindly reward points for the answer which helped u and close the thread if ur problem got solved.
Message was edited by: Judith Jessie Selvi

Creation of role inside a role

hi,
is it possible to create a role under another role in cProjects. I mean, with parent child relations ship.. so, i can see the subrole(s) staffing getting roled up on to the parent role and check the status of supply agianst the demand on the parent role
(which i got from the item through Transfer Demand).
Pls suggest.

Hi sujata,
No, it is not possible to build up a role hierarchy.
Though internally the resource assignments of a role are builed up using a parent-child relations, but it has other meaning as you expected.
Either you need to develop your own program bot fulfill the requirements. Wr you may use the task-role assignement to build you scenario, that means task is used as the 'parent-role'. In this case you get the assigned roles information be rolled up.
Kind regards,
Zhenbo

How to get the role under which a query is published

Hi All.
I want to know how will I know under which role a particular query is published. I have the query name. Please provide some suggestions at the earliest.
Thanks in advance,
Sananda

Hi Sananda,
When you go to RSRREPDIR table selection screen in SE16, you will see 2 'Query' fields. Put your query technical names in second 'Query' field and execute. From the output, collect the values in first 'Query' field (GENUNIID). Take these IDs and put them in AGR_HIER table to see menu roles against these IDs. You can download data from both these tables into excel sheets and put vlookup to find menu roles against query technical names.
Hope it helps.
Thanks,
Abhishek.

Custom ESS/MSS ROLE under ADMININTRATION workset - How to approach?

HI
Dear
ESS/MSS Experts,
We have a requirement with our client for a custom development ESS/MSS ROLE under ADMININTRATION workset for the functionality.
ADMINISTRATION(workset)
This workset provides administrative information regarding an employee. The services available under this workset are:
INBOX(service)under--->This service will show the SAP inbox for an employee. The details shown on the screen are,
u2022     Inbox
u2022     Outbox private
u2022     Shared
u2022     Resubmission
u2022     Trash
how can i implement in portal...
I am New From Portal consultant so kindly please help me its very much helpful.
Regards,
Rafi Shaik

inbox you meant UWL ie universal worklist
first note that SAP provides standard roles and you can copy it to z role and modify it accordingly and remove the roles
as per required/
For ESS, the standard composite role is SAP_EMPLOYEE_ERP. You can make a Z copy of this role and customize it per your needs.
http://help.sap.com/erp2005_ehp_04/helpdata/EN/a4/93554056bd1f24e10000000a1550b0/frameset.htm
There is no standard role provided for MSS applications. You will need to build one as per your needs.
See SAP Note 844639 for more details.
http://help.sap.com/erp2005_ehp_04/helpdata/EN/a4/93554056bd1f24e10000000a1550b0/frameset.htm
https://www.sdn.sap.com/irj/scn/wiki?path=/display/bpx/uwl+faq

OIM 11g-How to restrict the role administrator from seeing "other" roles

Dear All,
How to restrict Administrator from seeing roles he is not suppose to administer?
My administrator is suppose to assign only Role A. When he logs in He can see every single role. How to correct it so that he can see only Role A?
Thank you for your time
Maria

Modify "All User Role Management Policy"

Mass transport: how to select more than 7 roles at a time

I have about 50 roles I need to transport. I would like to use mass transport, but when I select all 50 roles, only the first 7 are actually added to the transport list.
I have to repeat the selection many times before all the roles are included in my transport request.. still a rather time consuming process. How can I select more than 7 at a time?

> And now we're back to my original problem.
Oh, dear....
> We have a structured role naming convention that would make it very easy to select with wildcards.. however, when I try to do it that way, the system won't let me select more than 8 roles at a time.
This is where I think you do not have a problem but a misunderstanding. Never mind, we see those quite often.
> See if you can reproduce this problem in your environment:
I had to start it first (minisap Nw2004), renew the license and wait for the transport tool to compile. You've got me busy here on a saturday
> 1. Start PFCG
done
> 2. Utilities -> Mass Transport
yep, watched it compile.
> 3. Click multiple selection button
yep
> 4. Enter a mask that would match more than 8 roles,
yep
> press F4
NO! NO! NO! NO! NO! NO! NO! NO! NO! NO!
This is where the misunderstanding starts
> 5. Click select all (make sure more than 8 roles are selected)
No
> 6. Click copy button
No
> 7. Observe that only the first 8 role are actually copied to the multiple selection list
Instead, hit F8 where you have hit F4 and find out all roles that fit the mask will be entered into the transport.
You have mixed up the actual report selection and the search functionality of the selection screen. Play with it, it's fun.
One word of caution: Mass transport can cause perfromance problems and errors. I always try not to enter more than 500 roles into a transport at a time.
Cheers!
Jurjen

How to remove transaction that was added under Menu - Role Menu

We have roles that we need to remove some transactions.
These transactions were added under Menu - Role Menu and expanded for ex: Logistics and Picked Miro transaction.
When I go to PFCD and check under s_tcode I cannot remove Miro transactions since it's grayed out.
The only way to remove this is to go back to the Menu and do a find on miro and work through the menu until I get to Miro transaction and then delete it.
Is there another way to accomplish this.
Thanks
Joe

This is the intended way a role built from a menu works. What might be the use of an authorization without any corresponding transaction to start it? It is only a risk...
Unless of course you know better or design differently and don't make the effort to adjust SU24, then you can insert manually or cause "changed" authorizations, but PFCG will not look at it from a "your own fault" view and not adjust it or protect it against illogical changes.
To use the discipline of the one approach but keep the flexibility of manual authorizations is not possible for S_TCODE, S_RFC and S_SERVICE objects (the entry points).
Cheers,
Julius
PS:
> Total Questions: 42 (36 unresolved)
Please follow-up on your unresolved questions. There is a limit now of 10 open questions asked since July 2008.

How many folders in browser can I create under a role?

Hello everybody,
I used to create folders under role but this time I don't arrive to....
I already have 22 folders under this role....
Thank you for helping per advance

Hello everybody,
I used to create folders under role but this time I don't arrive to....
I already have 22 folders under this role....
Thank you for helping per advance

How to Create an iView under Home in Standard User Role

Hi,
Can anybody guide me how to create an iView under Home which access the content available from Windows Share folders on a non SAP system.
Its not URL iView , I wanna create an iView to access the content from a windows system (
share)
Thanks

You have to create a File System Repository Manager under System Admin -> KM Admin. You can access any Windows Shared drive through that File System Repository manager. The shared folder would be displayed in your portal like a KM folder. You can easily create a KM Navigation iView (from template) over that folder and achieve your goal.
Please see <a href="http://help.sap.com/saphelp_nw04/helpdata/en/e3/92322ab24e11d5993800508b6b8b11/content.htm">THIS</a> for the complete documentation on how to do this step by step.
Regards,
Shubhadip

Roles included in Roles and how it effects User Content

I want to have one role which generates a tab called "Budget Development" under this tab depending on the users other assigned roles I want from 1 to 3 addition tabs or selections to appear. Based opn user assigned Roles
When I create 3 additional roles, and assign them to the Parent Role (Budget Development) all 3 tabs appear evenif the addional roles are not assigned to the user.
Role 1 "Budget Development"
            Role 1.1 "Budget Add"
            Role 1.2 "Budget Change"
            Role 1.3 " Budget Delete"
I have access to all 3 tabs/selection and the functionality when I am assigned the 1 role of "Budget Development"
How do I selectivly Display Sub-Roles based on Portal Roles and permissions etc.
Thanks for any help.
Sarah

Hi Sarah,
             You can achieve this by the 'Merged Role Concept'.
1)Create 3 roles with the same name say "Budget Development" which will have different ID's though.
-Under the role properties set the "Merge ID" for each role. The mergeID has to be the same for all the 3 roles.
2) Now create 3 worksets say "Budget Add", "Budget Change" and " Budget Delete".
- and assign each of these worksets to 3 different roles that we have first defined.
Now depending upon which user needs what access you can assign the roles. The user will see one role but different worksets underneath based upon what he has been assigned.
-Let me know if you have any further issues with this.

How to restrict selected Role under a Role???

Similar Messages

Maybe you are looking for