Issue related to authorization concept

How to assign perticular authorization objects to a perticular user -that the user compalins against missing authorizations,which are observed from su-53 screen -in 4.7EE sr1 environment .
Edited by: kiran nidra on Jan 7, 2008 11:03 AM

Dear Kiran,
In Transaction SU01 -> enter User Name Choose Display/Change -> Choose "Roles" Tab Strip -> Click on Particular Role -> Choose "Authorizations" Tab Strip -> Choose Change Authorization Data -> Enter Values as per the requirement -> Generate.
In Transaction PFCG -> Enter Role that has been assigned to the user -> Choose "Authorizations" Tab Strip -> Choose Change Authorization Data -> Enter Values as per the requirement -> Generate.
Regards,
Naveen.

Similar Messages

Basic Authorization concept

Hi Friends,
I want to be clear in basic authorization terminologies.
Can any one give the definition for the each below mentioned basic authorization terminologies with some example?
1.Object class
2.Authorization
3.Authorization Object
4.Authorization Field
5.Field Value
6.Profile
7.Role
8.Composite role
9.Reference role
10.Derived role
Thanks in advance.
Regards,
Venu

Hi Venu,
Lets come from the top to bottom ...
at the highest level you have the Role. A role can be defined as follows.
Role
The collection of activities that a person performs to participate in one or more business scenarios in an organization.
Access to the transactions, reports, Web-based applications, and other objects contained in roles is through user menus.
Also in a simple manner can be defined as a set of transaction codes in one bundle.
Note : when a Tcode is assigned to a Role hte related authorization objects get autmaticaly assigned to the role. I hope its clear until now.
So every Tcode i sassigned to a specific set pof Authorization objects and every authorization object has a set of Auth fields assigned to it. They can be che3cked in any role in transaction PFCG.
for better programming SAP has classified a set of authorization objects into OBJECT classess. its not much of importance to you as its a system thing.
One more thing is every role has a profile assigned to it when its created and Generated. Usually profiles are the concept until 4.0 system of SAP...later the roles concept came into existence and hence they are defunct exept a few standard SAP profiles like SAP_ALL and stuff which can be assigned to Users directlky. Else Profiles are also automatic assignment and get linked to a uswer once a user is assigned a particular properly generated role.
Coming to other terms, a group of single roles can be bundles into a single composite role. Hence its justa group of single roles.
In authorization concept, wehave the Parent Child relations hip in roles.
That is... when a Role is created we call it the master role and its properties can be inherited by a cild role.
the scenario is if we r having 4 company codes in an org, and i am supposed to create roles for each comp code seperately..so i try to create a master role and create 5 child roles with inheritance properties. this way any change to master role gets drilled down to child roles without having to change all the rolese seperately.
This is the concept of derived roles.
i wish this info has helpfed you...
Br,
Sri
Thanks for the points...

New authorization concept - Access to data

Hello, i'm new in SAP BW and i'm in migration process to the new authorization concept.
Here is what happening:
I have a role with all access to a company (*) of a provider X.
I have another role with restricted access to a company (ex: COMPANY1, COMPANY2 and COMPANY3) of a provider Y.
When i attribute those 2 roles to a user and access a query of the provider Y, i can see all the companies when it was supposed to only see the 1, 2 and 3.
What am i doing wrong?
Thank you in advance.
João Gonçalves

Hi friend,
The Authorization concept works on sets concept of mathematics.
Explanation to your scenario:
For user A you apply company (*) on provider X and company 1, 2, 3 on provider Y. i.e. u are collectively applying All company codes for provider X and Y. as Company (*) set is a bigger set and the providers set is extended to 2 elements X and Y to get her and not separately.
Way to check the actual set by which authorization is getting applied:
RSECADMIN -> Analysis tab -> Execute as user (check with load check box, and RSRT radio button) -> Execute -> Put a query on which you need to check authorizations (the query must have authorization variable if relevant) -> execute the query -> return back after execution -> on the Execute as user screen hit on Display log option.
You will get a detailed log for your query execution. Here you will also get a log where what set is applied for the query execution is displayed. You will get an understanding of your issue there.
Regards,
Sourabh Deo

Hello I don't know who to complain to as you do not appear to have a complaints department, despite searching the web, I trust you can pass this to relevant department for action, as I'm very angry over my recent repair. Following my issue relating to a

Hello
I don't know who to complain to as you do not appear to have a complaints department, despite searching the web, I trust you can pass this to relevant department for action, as I'm very angry over my recent repair.
Following my issue relating to a blank screen 2 weeks ago, your advisor arranged for my iMac to collected by Amsys, for repair and return, this was done and it was returned to me last Tuesday, onWednesday I set up my iMac again and instantly realised I had problems, much worse than before. I called Amsys to inform them of the issue of the computer being very very slow and unable to open iPhoto and pages, and document listing would not show up, plus I had no sound on the mac.They informed me that they had only replaced the video card and what they had done would have not affected the computers performance. He suggested I reinstall OSX again which I did, but this made no difference to the programs, so I called you.
Your technician on the phone was very good as they have always been, and made an appointment for me to go into the Milton Keynes Apple store the next day at 1 pm, which I did.
The gentleman on the Genius Bar was very good and was able to run tests on the iMac in my presence, and diagnosed immediately an issue with the sound problem, and advised me that this could not be fixed while I wait and I would need to leave it for repair. I made him aware of the previous repair, and he was able to see via your system, the list of logged issues I have had with this since purchasing in September 2012. I'm sure you can see from the way you record all calls and issues the problems I have had.
Today I called to ask if my iMac would soon be ready for collection, I was told the repairs had been completed and it was being tested. However to my dismay, I learned of another serious issue relating to the repair carried out by Amsys. I was informed that 6 screws were missing from the the iMac internally, which caused me much distress and concern, they also told me I had to wait even longer as the screws had to be ordered and installed on arrival before I could collect it.
My issues here are: I trusted the Amsys repairer as it was arranged and recommend by you, it is very evident they are not competent to repair, as they have caused more problems with my iMac on its return, despite enclosing a checklist, fully ticked showing everything working well, it clearly wasn't ! Plus the issue of missing parts (screws) during the repair, I have already expressed my disgust with Amsys, by email and had a response, within the hour, apologising and told me they were looking into this.
This where I stand on this, I have not had my iMac for almost two weeks and I do not know when I will get it back. I'm also very worried about what other damage has been caused by Amsys and the quality of my iMac now. I want to know what you, Apple is going to do about this ? I have already been very inconvenienced by this and until now I have been a very loyal apple customer with 2 iPads, and 4 iPhones in our household, not to mention the iMac.
I feel I have been very let down by this experience, on my iMac, which cost a lot of money, I have also lost a lot of money with lost work and unable to carry out my business without it, and I will be seeking compensation.
I trust you will take this complaint seriously and pass it to the relevant department for action.
Yours sincerely
Des Withey
Sent from my iPad
On 26 Feb 2014, at 11:44, Apple Support <[email protected]> wrote:
Thanks for contacting us.
Thanks for contacting Apple Support. If you need more help later, you can open the case below or start a new support request online.
Case ID:
Open this case
Sincerely,
Apple Support
Get help online
Visit Apple Support to learn more about your product, download software updates, and much more.
Join the conversation
Find and share solutions with Apple users around the world.
TM and copyright © 2014 Apple Inc. 1 Infinite Loop, MS 96-DM, Cupertino, CA 95014.
All Rights Reserved / Privacy Policy / Apple Support / Give us feedback
On behalf of Apple Distribution International

Call Apple Customer Relations - 1-800-275-2273. Ask politely & firmly that you want to be transferred to Customer Relations. Tell them exactly what you stated in your post.
GOOD LUCK!
These are user-to-user forums where everyday folk (volunteers) post questions and offer answers (technical support) to each other.

Regarding issue related to RPTBAL00.it's very urgent

hi All,
i am having one issue related to RPTBAL00 report.
this report will dispaly time wage types related to emplyoees.
using this report we can get informtion of time wage type like 9lc1,9lg1,plwp.
Now issue is this report is not running for payroll area 56.it's running properly for other payroll area.the pernrs realted to 56 payroll area have the data in there B2 cluster.i wanted to access data from zl table realted to 56 payroll area.
Please help to solve this issue.
who will help to solve this issue,i will give full points.
Regards,
manjunath

i did the same thing.in standard FM hr_time_results_get,it is accessing data from B2 cluster.after that it is checking condition for the date of last successfully run period.only for pernrs related to 56 payroll area it's not wking.for all other it's wking.
also i dnt have autorization to change std FM.

Issue related to Section

Hi Experts ,
I have an issue related to Section.
I have an report which shows Department Name and the employees under each department.
For this report, we have used "Section" on dimention Object "Department Name".
Now the issue is , when this report is being exported to PDF. In PDF, for some departments , Department name is in one page and its related employees data are in next page.
In some cases, Department Name and first few records are in same page and rest of records are in next page.( Let's say in department 'X' there are total of 30 employees . So in one page its showing department 'X' and its 10 employees in same page and rest of 20 employees of that particular department are shown in next page ).
And in some cases , only Department Name is in last line of the bottom of the page and its related employees are shown in the next page of it.
Can we have any option, which will show both Department Name and its related data only on the same page?
Please be noted that I am working on BO 4.1 version.
Appreciate for your quick responses.

Hi Cris,
Check start on new page and avoid page break in section properties (right click on section block- format section).

Issues with Analysis Authorization on Infoset

Hi all
We are facing an issue with Analysis Authorization on Infoset, it doesnt seem to throw authorization error when we access a record that is outside the authorization. We tried to use the same authorization set up from the same user we try to access the a record that is outside the authorization it behaves correctly.
Here is my setup
0CRM_MKTELM__0CRMCAMPTYP = ZA11
0TCAACTVT = *
0TCAIPROV = *
0TCAVALID = *
When I tried to access ZA12 it should throw an authorization error but for infoset it doesnt seem to work. Is there anything that we should take note for Infoset?

Hi Chee,
I am getting similar issue.
I believe navigational attribute was already a authorization relevant in your case.
What and where did you set it as authorization relevant to make it work on infosets.
Regards,
Ramz

Issues with Analysis Authorization checks in APO

Hi Friends,
I am facing an issue with Analysis authorization checks in APO.
We have setup user access based on Management Entity (Analysis authorization - AGMMGTENT and 0TCAACTVT) and core APO authorizations (based on the work profile - e.g: Demand Planner).
Scenario: Consider User A has access to India and Australia Management Entities with 0TCAACTVT - *
This user also has display access to all management Entities (AGMMGTENT - * and 0TCAACTVT - 03). This scenario works very well in Quality where the RSECADMIN trace shows check on both Characteristics. However in Production the RSECADMIN trace shows up only against AGMMGTENT (*) and by default takes 0TCAACTVT as (*).
In Quality the Characteristics that get checked are as below : and it works as expected. Display access for Management Entities that are supposed to be displayed only and change access to only the Management Entities that it should.
However the Trace for Production shows the following : As a result it is allowing the user to change access to all management Entities. Which is not desirable..
Resultant trace results are as below: This should not happen..
I have compared all Analysis Authorizations and it is same across both Instances. The Demand planner access is consistent too..
Will it be possible for you to advise on what could I be missing.

Hi All,
If it helps, in Quality: the Authorization checks are listed as: Subselection (Technical SUBNR) 1
while in Production it checks Subselection (Technical SUBNR) 1 in one place, however where it fails - the check happens as Subselection (Technical SUBNR) 0.
Is there a way we can change this to SUBNR 1. Is there any table entry that I can look at to check if the Authorization check is functioning incorrectly..
Please advise.. Thanks..
Regards,
Prakash

Issue related to the Credit memo and S.O.

Hi,
I have one issue related to the Credit memo and S.O.
We have a network of Dealers and Dealer inventory is linked with our system. When user creates S.O for Dealer1.If the item is not avail in our inventory and it is avail in any other Dealer inventory (Dealer2), then the system creates S.O wrt the Dealer2.
In this case as the material is directly delivered from Dealer1 to Dealer2, there is no any GI in our system.
So, the transaction with Dealer1 will be the normal as usual. But, we have to return the goods amount to the Dealer2 with any suitable way. We are considering it as a Credit memo.
My question is, as we have created S.O wrt the partner function- Dealer1 and we are creating CR memo for Delaer2, is there any way through which we can link the se two transactions with customizing so that we need not to make any ABAP programming.
I mean can we create Cr memo wrt S.O when the partner functions are different?
Pl. guide me.
Thanks,
Roopan.

You have an interesting Scenario.
You can handle this scenario in multiple ways
1. Third party Scenario (Here Dealer 1 becomes Vendor &Dealer 2 remains Customer)
2. Order related sales & credit memo.
3. Intercompany sales, where you represent dealers place as a plant in your system. (Not an ideal way to handle the scenario, but possible option)
Regards,
Rajesh Banka
Reward points if helpful.

Issue related to the Excise Postings

Issue related to the Excise Postings
My Scenario is i have an Purchase Order with Excise Duty of 16.48%
For Eg: Net Price(1000) + Excise Duty (16.48%) = Rs.1164.8
my vendor gives me a Modvat of 10% i.e Rs.104.8
but i have to pay him the total amount (i.e with excise)=Rs.1164.8
How to do the GR with Excise & Invoice Verification??
Wat amount will be Credited to vendor???
How to do Excise Posting for this Scenario???
Thanx & Regards,
Kumar Rayudu
Message was edited by:
Kumar Rayudu

Hiii Ramakrishna,,
User doesnt know at the Time of Purchase Order that how much excise & Modvat will be getting. Only the Gross value is given in the Purchase order including all
taxes ( No Tax Code in the Purchase Order).
Excise Invoice and Vendor's Bill are received when the Materials are received.
They will get the Modavat according to the Excise Invoice of the Manufacturer
Now while doing GR i manually give the Excise BED & Cess given in the Manufacturer Excise Invoice.
Post the Excise Invoice before doing MIRO.
The Problem is in the MIRO Transaction.
At the MIRO i have selected the Tax Code with Excise.
System is caluclating the the Excise on the PO Value i.e more than the value in the Vendor Excise Invoice (Part 1 & Part 2) and the Liablity of vendor is increased and the difference amount is posted to the material.
Everything is going fine except the Vendor's liability and it should be value of the Purchase Order.
How the system is caluclating the Value ???
am i doing any wrong procedure???
Explain me???
Thanx & Regards.
Kumar Rayudu

Will the new 10.6.8 update fix SATA3 issues related with 2011 MacBook Pros?

Will the new 10.6.8 update fix SATA3 issues related with 2011 MacBook Pros?

It is against TOU to speculate on these message board. Suggest you post your question on the Mac Rumors site.
As I already stated, there is no 10.6.8 update. If there was, it would be listed in Software Update.

Performance issues -- related to printing

Hi All,
I am haviing production system performance issues related to printing. endusers are telling the printing is slow for almost printers. We are having more that 40 to 50 printers in landscape.
As per my primary investigation I didnt find any issues in TSP01 & TSP02 tables. But I can see the table TST01 and TST03 table having many number of entries (more that lakh). I dont have idead about this table. Is ther eany thing related to this table where the print causes slowness or any other factors also makes this printing issue .. Please advice ..
thanks in advance

Hai,
Check the below link...
http://help.sap.com/saphelp_nw70/helpdata/en/c1/1cca3bdcd73743e10000000a114084/content.htm
http://help.sap.com/saphelp_nw70/helpdata/en/fc/04ca3bb6f8c21de10000000a114084/frameset.htm
http://help.sap.com/saphelp_nw70/helpdata/en/86/1ccb3b560f194ce10000000a114084/content.htm
TemSe cannot administer objects that require more than two gigabytes of storage space, regardless of whether the objects are stored in the database or in the file system. Spool requests of a size greater than two gigabytes must therefore be split into several smaller requests.
It is enough if you perform the regular background jobs and Temse consistency checks for the tables.
This will help in controlling the capacity problems.
If you change the profile parameter rspo/store_location parameter value to 'G' this will make the performance better. The disadvantages are TemSe data must be backed up and restored separately from the database using operating system tools, In the event of problems, it can be difficult to restore consistency between the data held in files and the TemSeu2019s object management in the database. Also you have take care of the Hard disk requirements because in some cases, spool data may occupy several hundred megabytes of disk storage. If you use the G option, you must ensure that enough free disk space is available for spool data.
Regards,
Yoganand.V

Issues related to Sound Blaster X-Fi Xtreme Audio (PCI Express 1)

Hi, I've recently bought a SB X-Fi Xtreme Audio (PCI Express edition).
Before I address my issue, I'd like to point out that my rig is:
Maximus Extreme (mobo)?
Q6600 (cpu)
ATI4870 (vid card)
4Gigs of DDR3 (ram)
and my OS is Vista Home Edition (32 bit precision)?
And so after physically installing the hardware, I quickly installed everything there was on the CD- this included the drivers available on the CD. After this installation, I restarted then found most recent updates via online sources (creative.com). But even after all of this, I wasn't able to get my microphone to work. Now from my understanding, the jack is shared between Line-In and Microphone and I'm supposed to configure this setting. And so I tried to do that, but my only problem was that I was unable to use any of the available features. After researching for a few hours I found out that I, appearently have to uninstall everything that I had installed and then reinstall everything from online sources (from creative.com-- latest drivers for vista 32 bit). But even then, I still can't use my mic or configure the settings so that I could use microphone instead of Line-In.
Now going back to my actual question, how do I configure the settings so that I could use Microphone instead of Line-In?

ERe: Issues related to Sound Blaster X-Fi Xtreme Audio (PCI Express )[ Bumping.
Almost the same problem here.
Sound Blaster X-Fi Xtreme Audio edition, Windows 7 64bit.
I downloaded the latest driver from the Creative site, installed it, update with the update manager and then i installed the console.
Issue number : I DONT have your same console. I dont have a "Mode" button, im stuck in Entertainment Mode. I cant control almost nothing and i dont have all the options u have.
Issue number 2: My mic isnt working good. It's VERY low on volume, i cant be heard without the +20db boost (the only boost option i have, i cant boost more) and even with that acti've that's not that loud.
It is still working good with my onboard realtek soundcard. I cant understand what's the problem and how to solve it.
Ah, my headset is a Creative Fatality.

I am having issues related to storage and I believe this is causing my computer to slow down. "Other" files part is the major occupier(180 GB). I have done Omni disk and multiple other cleaning(iTunes-device, restart, etc), yet have not been able to empty

I am having issues related to storage and I believe this is causing my computer to slow down. "Other" files part is the major occupier(180 GB). I have done Omni disk and multiple other cleaning(iTunes-device, restart, etc), yet have not been able to empty any more space, nor to speed up my computer? Any suggestions? All your contributions are welcomed. Thanks. Mehmet Mazhar Celikoyar

Below is the result:
Hardware Information:
 MacBook Pro (15-inch, Mid 2009)
 MacBook Pro - model: MacBookPro5,3
 1 3.06 GHz Intel Core 2 Duo CPU: 2 cores
 4 GB RAM
Video Information:
 NVIDIA GeForce 9400M - VRAM: 256 MB
 NVIDIA GeForce 9600M GT - VRAM: 512 MB
Audio Plug-ins:
 BluetoothAudioPlugIn: Version: 1.0
 AirPlay: Version: 1.9
 AppleAVBAudio: Version: 2.0.0
 iSightAudio: Version: 7.7.3
Startup Items:
 HP IO - Path: /Library/StartupItems/HP IO
System Software:
 OS X 10.9 (13A603) - Uptime: 3 days 22:8:6
Disk Information:
 ST9500420ASG disk0 : (500.11 GB)
 EFI (disk0s1) <not mounted>: 209.7 MB
 Macintosh HD (disk0s2) /: 499.25 GB (220.49 GB free)
 Recovery HD (disk0s3) <not mounted>: 650 MB
 HL-DT-ST DVDRW GS23N
USB Information:
 Apple Inc. Built-in iSight
 Apple Internal Memory Card Reader
 Apple Inc. Apple Internal Keyboard / Trackpad
 Apple Computer, Inc. IR Receiver
 Apple Inc. BRCM2046 Hub
 Apple Inc. Bluetooth USB Host Controller
FireWire Information:
Thunderbolt Information:
Kernel Extensions:
 com.rim.driver.BlackBerryUSBDriverInt (0.0.64)
 com.livedrive.filesystems.livedrivefs (2.1.14)
Problem System Launch Daemons:
Problem System Launch Agents:
Launch Daemons:
 [loaded] com.adobe.fpsaud.plist
 [loaded] com.adobe.versioncueCS4.plist
 [loaded] com.creativebe.MainMenuHelper.plist
 [loaded] com.macpaw.CleanMyMac2.Agent.plist
 [loaded] com.magican.castle.plist
 [loaded] com.microsoft.office.licensing.helper.plist
 [loaded] com.rim.BBDaemon.plist
 [failed] com.zeobit.MacKeeper.plugin.AntiTheft.daemon.plist
Launch Agents:
 [loaded] com.adobe.CS4ServiceManager.plist
 [loaded] com.hp.messagecenter.launcher.plist
 [loaded] com.hp.productresearch.plist
 [loaded] com.rim.BBLaunchAgent.plist
User Launch Agents:
 [loaded] com.adobe.ARM.[...].plist
 [failed] com.macpaw.CleanMyMac2Helper.diskSpaceWatcher.plist
 [failed] com.macpaw.CleanMyMac2Helper.scheduledScan.plist
 [failed] com.macpaw.CleanMyMac2Helper.trashWatcher.plist
 [failed] com.UninstallerTool.plist
 [failed] com.VolumeWatcherTool.plist
 [failed] com.zeobit.MacKeeper.Helper.plist
User Login Items:
 BlackBerry Device Manager
 HP Scheduler
3rd Party Preference Panes:
 Adobe Version Cue CS4
 DC30 Xact Driver Panel
 Flash Player
 Flip4Mac WMV
 Perian
Internet Plug-ins:
 AdobePDFViewer.plugin
 AdobePDFViewerNPAPI.plugin
 Default Browser.plugin
 Flash Player.plugin
 FlashPlayer-10.6.plugin
 Flip4Mac WMV Plugin.plugin
 iPhotoPhotocast.plugin
 JavaAppletPlugin.plugin
 OfficeLiveBrowserPlugin.plugin
 QuickTime Plugin.plugin
 SharePointBrowserPlugin.plugin
 Silverlight.plugin
User Internet Plug-ins:
 OctoshapeWeb.plugin
Bad Fonts:
 None
Time Machine:
 Mobile backups: OFF
 Auto backup: NO
 Volumes being backed up:
 Macintosh HD: Disk size: 499.25 GB Disk used: 278.75 GB
 Destinations:
 TOSHIBA EXT [Local] (Last used)
 Total size: 2 TB
 Total number of backups: 5
 Oldest backup: 2013-10-24 23:21:31 +0000
 Last backup: 2013-10-25 02:59:08 +0000
 Size of backup disk: Excellent
 Backup size 2 TB > (Disk size 499.25 GB X 3)
Top Processes by CPU:
 3% WindowServer
 1% EtreCheck
 1% Microsoft PowerPoint
 0% BBLaunchAgent
 0% fontd
 0% aosnotifyd
Top Processes by Memory:
 168 MB Microsoft PowerPoint
 123 MB Safari
 86 MB Mail
 74 MB WindowServer
 45 MB com.apple.WebKit.Networking
 45 MB com.apple.WebKit.WebContent
 41 MB Finder
 41 MB PluginProcess
 41 MB mds_stores
 33 MB Notes
Virtual Memory Statistics:
 72 MB Free RAM
 1.27 GB Active RAM
 1.24 GB Inactive RAM
 667 MB Wired RAM
 2.58 GB Page-ins
 111 MB Page-outs

Issue related to Unicode character compatibility

Request for the help on the issue related to Unicode character compatibility with Oracle 11G R2 32 Bit DB.
Issue description: I have created a Profile in my application and named it with Unicode characters(German\Russian\Latvian…. alphabets), while opening the profile its throwing an error message “Invoice profile cannot be found in database.”
During the Oracle database installation I have selected the Database character set as Unicode UTF-8. As per our application guide it considers only the Database characterset and not the National character set.
Let me know if I have to still do some additional settings with respect to this globalization settings.
Thanks,
Brij

I don't know what the application does, so I don't also know the profile role and what - exactly - can't be found in the database. At least 'a invoice profile' is not a native Oracle object.
So it's not possible to analyze the application problem.
On the database side characterset UTF8 (although I would prefer the 'newer' AL32UTF8 characterset) is appropriate in a globalized environment. What to do in the interaction between application and database - that depends highly on the application itself.
Werner

Issue related to authorization concept

Similar Messages

Maybe you are looking for