Is it possible to make 'user group' in SU01 obligatory?

We would like to make the field Úser group for authorization check' obligated. Is this possbile?
If so, how?
thanks
Peter

Hello,
I don't think there is a direct function available, however you can probably ask your ABAPer to check the code for SU01 and determine if a user exit exists in the code where he/she can put appropriate validation check.
If it does, then copy and create a new transaction ZSU01 and lock transaction SU01.
Regards,
Siddhesh

Similar Messages

Assign SQ03 Abap Query User Group to role

Please advise how to assign SQ03 Abap Query User Group to a role. Thanks.
Moderator message: please do more research before asking.
[Rules of engagement|http://wiki.sdn.sap.com/wiki/display/HOME/RulesofEngagement]
[Asking Good Questions in the Forums to get Good Answers|/people/rob.burbank/blog/2010/05/12/asking-good-questions-in-the-forums-to-get-good-answers]
Edited by: Thomas Zloch on May 12, 2011 5:40 PM

Hello Sunil,
The problem is that I have hundreds of users to maintain user groups.
found out that it is possible to assign user group to role and role to user groups. implementing hr authorization with in-direct assignment of auth. So if I could use sq10, user groups could also be link to position in the org chart.
sq10 does allow you to assign a user group to a role but when you assign the role to a user and the user runs a query, it reports that no user group has been assigned.
Suspect that there must be a parameter or switch that is not turned on
Regards

User group [$CLASS] not an Org level field in IA, whereas it is in DA

Hi All,
We have an authorization problem that we faced while SAP Upgrade. In the development system while we upgraded all the roles, we did not face any issue. User group field [$CLASS] was actually an org level field in that system and the roles were upgraded based on that condition.
When the Integration system was up and the upgraded roles were transported to IA, we noticed that they ended with a warning. On checking the logs we found out that User group [CLASS] actually was not an Org level value in the INtegration system, whereas it was an org level field in the development system.
Can someone tell me the reason why it is different? Is there any settings we have to change to make User group an org level field in IA. Thanks a lot for your help.
Vijith

Hello, I ran into this also and found these notes to explain why this is suddenly an org value and how to fix it:
http://search.sap.com/notes?id=0001580048
http://search.sap.com/notes?id=0001739055
Basically, GRC 10 add-on makes the user group an org value and the note instructs how to undo this manually, but there is a required pre-requisite because you cannot modify this for SAP delivered fields normally.
You know what else would be nice.... maybe there's a note that explains why Account Type is an org value. It REALLY should not be, IMO.

Authenticated User group

We have following doubt regarding Authenticated User group in Windows 7
1. When this user group is added to a Drive/folder/file automatically.
2. As per our observation, mostly it shows in the drive in which OS is installed. On some machines it shows in other drives. How this is added in other automatically.
3. Another observation is, due to the presence of this group, it is possible to write a file(which is created by administrator or system) with an application which is started with Standard User token. So do we need to add any extra permission to work
our application(with standard user token) to read and write to the folder/file with Authenticated User group.
4. Is it possible that Authenticated User group will not exist in OS installed drive.
5. Is it possible that an application with standard user cannot write to a file/folder even if Authenticated User group is present for the same.
Thanks, Renjith V R

Hi,
To learn more about authenticated users group, you can refer to the related thread:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/e1a8e680-03a2-4690-a7e5-f17ad7389ecd/authenticated-users?forum=winserverDS
Andy Altmann
TechNet Community Support

Tracking USER GROUP changes

Hi All,
I have two questions regarding user groups:
1) How to find out who has created/changed a particular user group?
2) Is it possible to transport user groups?
Thanks,
Vijaya

Hi Vijaya,
as 'usergroups' are non-critical, there seem to be no changelogs for usergroups. So you could track changes only, if you switch on table-logging for the usergroup table.
The table name is USGRP.
To transport usergroups, just transport tablecontents of table USGRP.
(R3TR TABU).
b.rgds, Bernhard

CLIENT_TEXT_IO.put_line how to make user select path

Hi. I am using oracle forms and creating a text file using CLIENT_TEXT_IO.put_line.
But forms creates file wherever it wants. Is it possible to make user to select path for text file.
Thanks...

See e.g. here:
CLIENT_GET_FILE_NAME Specifying path
also there are tons of samples if you search for clent_get_file_name on google.
cheers

New user. Need to know where my email contacts are on my macbook pro and how I can make a group email address

New user. Email contacts imported to MacBook pro from PC - but I'm unable to call up entire contact list or to make a group emailing contact.

Assuming you are using Apple's Mail application, contacts are managed via the Contacts application, in your application folder. As for various addressing methods, including groups, maybe this:
Mail (Mountain Lion): Address messages - Support - Apple

Is it possible to prevent a group of users be added into other groups?

We have a admin group named "app admin" which has full privileges to a target OU "ou=apps,ou=services,dc=xxx,dc=com".
And we are looking for solution to prevent members in the admin group putting their own account or group members into the target OU.
Tried the aci with "deny self write", but it only prevents admin user put their own DN into the target OU.
And they still can add their group members into the target OU.
Just wondering is it possible to prevent a group of users be added into the target OU while they still can add/delete/modify normal users into the target OU?
The version of our Directory Server is 6.3.1.
Thanks

goog,
For each data member, you will need a unique URL. There is not a way to bundle them into one URL.
Randy Hoskin
Applications Engineer
National Instruments
http://www.ni.com/ask

Possible to make an item editable for certain users and read only for other

Is it possible to make an item editable for certain users and read only for others?
I've been able to accomplish this by taken the select statement that I used to define an authorization scheme, placing it in the Read Only condition of the item. However, I would like to simply reference the authorization scheme to utilize caching, and to help keep things cleaner for future maintenance.
Is it possible to reference an authorization scheme in an item condition similar to the way another item can be referenced by preceding it with a colon (i.e. :P1_First_Name)?

Thank you, your suggestion worked.
It would be nice on a future release of APEX if a drop-down box existed under the Ready Only section that would allow an existing Authorization Scheme to be selected or negated when applying the Read Only attribute to a form item.

Is it possible to map a Sponsor Group in Cisco ISE to a user group in Active Directory, through a RADIUS server?

Hi!!
We are working on a mapping between a Sponsor Group in Cisco ISE and a user group in Active Directory....but the client wants the mapping to be through a RADIUS SERVER, for avoiding ISE querying directly the Active Directory.
I know it is possible to use a RADIUS SERVER as an external identity source for ISE.....but, is it possible to use this RADIUS SERVER for this sponsor group handling?
Thanks and regards!!

Yes It is possible to map Sponser group to user group in AD and if you want to know how to do please open the below link and go to Mapping Active Directory Groups to Sponsor Groups heading.
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html#wp1096365

Is it possible to make a planning on a cost element group?

Is it possible to make a planning on a cost element group? I have created several cost element groups with the appropriate hierarchy. Now my aim is to try to allocate cost on an element cost group.
Thank you in advance for your reply.
Best regards
Pascal Cuenin

Yes you can - There are multiple ways of doing it.
If you have the BPS module, you can do it over there - If you want to do it in R/3, you can there too. Go to KPZ3 to view previous budget planning for Cost Center Groups.
Hope that helps.
Thanks,
Nandita

To make the User group Filed mandatory for the Tcode SU01

Hi Gurus,
I need to make the 'User Group' Filed mandatory for the Tcode 'SU01'.
I know we can do it using Transaction variant.
But i do not want to create a new custom Tcode (e.g ZSU01) for the same.
I understand we have a User Exit 'SUSR0001' for the Tcode SU01.
Can we use this to make the User Group field mandatory.
Or is there is some alternative way to do this ?
Please advice.
Thanks in Advance.
Regards,
Anubhav Mishra

Hi Anubhav Mishra,
> I know we can do it using Transaction variant.
> But i do not want to create a new custom Tcode (e.g ZSU01) for the same.
You don't need to create a custom Tcode to assign a transaction variant, just declare it as being a "standard variant" (in the SHD0 transaction too), and you'll make it assigned automatically to SU01 when this last is started.
BR
Sandra

Is it possible to restrict user access to files that need read/write permissions?

I am in the process of implementing electronic payments for a company's AP department. Dynamics GP (Great Plains) needs to create an EFT file that will get sent to the bank. After it is created, a script is run that sends the TXT file to the
bank and then renames the file extension to SNT. Users are logged on to the Great Plains server and have their own permission group.
Because the file is sending payment instructions, it is essential that users cannot modify or create a file with fraudulent payment instructions to the bank (incorrect bank account info).
With testing, I was able to save the file from GP to a folder where users cannot read it's contents, however the script cannot send the file to the bank without "read access" (it says not files available).
Any ideas for solutions? For instance, is it possible to make Great Plains and/or the script file "system" so that it can override the user profile's permissions?
I was also looking into the ability to hide the folder/files, but it appears users can choose to view hidden files and folders.

I dont think so you can do it that way..

Move a query to from one user group to another user group

Hi,
it's possible to move a query (SQ01) from one user group to another user group ??
Thank you.

Hi,
You can copy queries only if you have the authorization to make changes. Within your current user group, you can copy all queries. However, queries of other user groups can only be copied if the InfoSet used to define the query is assigned to both user groups.
To copy a query, proceed as follows:
1. Choose the name of the query you want to copy on the initial screen.
If you do not know the name, use the directory functions to display the query directories and then choose a query to copy from there.
2. Choose Copy.
3. Enter the name and the user group of the query that you want to copy in the dialog box. Furthermore, you must enter a name for the copied query. The system proposes values for this.
4. Choose Continue.
This takes you to the initial screen. The query is added and appears in the query directory. You can now continue.
Regards,
Amit

Custom user/group properties

Hi,
Is there a possibility to extend the standard user/group properties (CQ5 Security)? I would like to add some more properties then the standard name, mail, about,....
I've tried to extend the dialog by cutomizing the UserProperties.js Dialog. The Problem is that cq5 doesent save the newly added propertes. There is a save function using the folowing service.
                url = CQ.HTTP.externalize("/bin/security/authorizables/POST");
                url = CQ.HTTP.addParameter(url, "Authorizable", frm.findField("id").getValue());
It posts the parameter but it doesent get saved.
Is there a way to make it work?

I have used a kind of a workaround. Just created a new tab for the user/group properties and registered it in the UserAdmin.js . The Tab is implemented similar to the CQ.security.UserProperties and has a similar save handler.
I'm getting the stored Properties the following way:
        private static final String PREFERENCES_NODE_PATH = "/preferences";
        preferencesNode = currentSession.getNode(group.getPath() + PREFERENCES_NODE_PATH);
        if (preferencesNode.hasProperty(preferenceName)) {
            preferenceValue = preferencesNode.getProperty(preferenceName);
I know it's not the most elegant solution but the fastest I have found.

Is it possible to make 'user group' in SU01 obligatory?

Similar Messages

Maybe you are looking for