Linking Query group to an SAP role
I am able to link the Query group to the role but when we test the user does not have access to it. I know this used to be a problems years ago that I thought was fixes. Any ideas on how to get this to work?
Hi,
Assign the required user groups to the user in Sq03. if user still getting same error even after assignments in Sq03, ask user to please change query areas as below and check.
Sq01 --> Environment --> Query areas --> select "Stanard area (client-specific).
Regards,
Gowrinadh
Similar Messages
-
User does not appear in group created from SAP role
Hello --
I have a user that has logged into InfoView successfully with SAP authentication and is showing in the CMC under the "User List." When I view the list of users in the group that was created from the SAP role he was a part of, he is not there. When I go to the user account and view "Member of," the group IS shown in the list.
Any idea? Any way I can "refresh" the group or anything like that?
Thanks
CaseyThanks for the replies.
We are on XI 3.1 FP1.8 and we do have a CMS cluster. Server reboots this weekend seem to have resolved the problem. I am curious why this question was asked, though:
"Did you reassign the user to another SAP role after the user has already logged at least once in the InfoView?"
Is this something that could have caused the problem or is it a possible workaround if we run into the issue again?
Thanks again...
Casey -
The FIM team is pleased to announce the availability of some additional Connectors for FIM2010R2.
General Availability of PowerShell Connector
The PowerShell Connector can be used to communicate with a system through PowerShell scripts. This allows an easy and flexible way to communicate with other systems but also to pre-/post-process data and files before handed over to the FIM Synchronization
Service. We believe the community will help providing scripts for this Connector for various systems and will open a place where scripts can be published for reuse.
TechNet docs:
http://go.microsoft.com/fwlink/?LinkID=393057
Download:
http://go.microsoft.com/fwlink/?LinkID=393056
Release Candidate of Generic SQL Connector
The Generic SQL Connector will allow you to connect to any database where you have an ODBC driver available. It enables new features compared to the built-in MA such as support for Stored Procedures, running SQL scripts, built-in delta import support, import
multiple object types, connect to multiple tables, and much more. This Connector is built on ECMA2.3 which allows schema discoverability to be customized in the Sync Engine UI. A pre-release of the next Sync Engine hotfix is included with the Connector download
and is required for the Connector to work.
Download:
https://connect.microsoft.com/site433/Downloads/DownloadDetails.aspx?DownloadID=52652
Release Candidate of SAP Users and Roles/Groups
The updated SAP templates for Users and Roles/Groups allows you to manage Users, Roles, and Groups in SAP. This also include password sync for Users to SAP. The Connector will make sure roles are represented as groups to make it possible to manage these
with bhold. This template will require the previously published WebService Connector:
http://go.microsoft.com/fwlink/?LinkID=235883.
Download:
https://connect.microsoft.com/site433/Downloads/DownloadDetails.aspx?DownloadID=52651
If you have participated in any other Connector preview program you will have access to the Release Candidate downloads. If you have not participated before then to get access to the preview programs on Connect either join the program “Identity and Access
Management”, “FIM Synchronization Service Connectors Pre-release” on
http://connect.microsoft.com/directory or follow this link
http://connect.microsoft.com/site433/SelfNomination.aspx?ProgramID=6709&pageType=1
We have also published an update to the Generic LDAP Connector adding support for some additional LDAP directories, see
http://support.microsoft.com/kb/2936070/. If you have additional LDAP directories you think we should support, please feel free to contact me.
On behalf of the FIM Sync team,
/Andreas KjellmanOn Tue, 18 Mar 2014 08:09:43 +0000, David Burghgraeve wrote:
We've been using the OpenLDAPXMA to be able to connect to ACF2 CA-LDAP (from Computer Associates) running on a IBM Z-OS Mainframe System. We've been using it for password synchronization since 2004 on MIIS. Today it's still used via the
OpenLDAPXMA (64bit) on FIM 2010 R2.
We had to tweak the password management component in the OpenLDAPXMA to support the error messages we get from the ACF2 System, as we support a multi-master password setup between Mainframe and Active Directory (one can change the password on
MF and/or on Windows). by example "LDP0406E ACF2 error modifying lid(ACF00155 NEW PASSWORD CANNOT BE THE SAME AS CURRENT PASSWORD)".
Additionally, we cannot get the delta import to work with the CA-LDAP, there's no capability in it and we tried to use the time attribute to use in the query for recent changes, but it does not work. (I think we need it in a large integer format
or unix time integer).
Would be great to have Microsofts' support in this :)
In a case like this where your follow-up has nothing to do with the
original post you should create a new thread.
Having said that, neither of the MAs to which you refer are official
Microsoft MAs and as such there is no support from Microsoft available.
Also, keep in mind that the ECMA1/XMA extensibility framework has been
deprecated and replaced by the ECMA 2.0. You should plan on replacing
existing ECMA1 management agents with ECMA2.0 connectors.
Paul Adare - FIM CM MVP
"It's 106 light-years to Chicago, we've got a full chamber of anti-matter,
a half a pack of cigarettes, it's dark, and we're wearing visors."
"Hotsync." -- Paul Tomblin & Peter da Silva -
BO authorization model with sap roles / access tot folders, functionalities
Hi Specialists,
As authorization cunsultant in BI, I have little knowledge of the security setup in Business Objects.
I have to setup an authorization model were the authorizations are assigned via sap roles in the backend BI system. These roles are imported in BO were they can serv as 'user groups' and access to folders, functionalities.
Can anyone provide me a overview, guide, training document... on how the authorizations are managed in BO and best practice when they are linked to sap backend roles.
The goal will be to user the sap BI backend roles and user them to grant users in BO specific access to specific folders. Eg; User A can access folders 1 as "refresher only", User B is able to publish reports in folder 2, User C has only view access in folder 2...
Any help would be great!
Thanks very much in advance.
rgrds
KristofHello,
this is the best approach you mentioned here.
I prefer to create roles serverd as functionalities in the Backend. For Example you have a "View" role, a "Refresh" role and so on.
On the other hand i saw some setups where there is only on role in the Backend with all the BO Users. Then you have to create you functional groups in BO and have to assign the Users there to the Groups.
Check the Adminguide of BO XI 3.1 for more Informations.
Regards
-Seb. -
search criteria is not working in Responsible Group field in sap crm could you please help me this how to achieve.I have writen code on EH_ONSEARCH .as per below...what changess i need to do..and through partner function and adding the selection params please send the sample .
code. partner funtction - ZRG DATA :
DATA : lv_partner_fct type .
types: begin of ty_resp,
partner type but000-partner,
name_last type but000-name_last,
name_first type but000-name_first,
mc_name1 type but000-mc_name1,
mc_name2 type but000-mc_name2,
end of ty_resp.
DATA: lv_resp_bp type STANDARD TABLE OF ty_resp INITIAL SIZE 0,
lw_resp_bp type ty_resp.
IF lv_attr_name = 'Rgroup'.
lr_entity->get_property_as_value( EXPORTING iv_attr_name = if_crm_srqm_uiu_const=>gc_attr_low
IMPORTING ev_result = lv_low ).
IF lv_low IS INITIAL.
SELECT partner
name_last
name_first
mc_name1
mc_name2
FROM but000 INTO table lv_resp_bp
WHERE mc_name2 = lv_low and bu_group = '0010'.
loop at lv_resp_bp into lw_resp_bp.
lv_low = lw_resp_bp-mc_name2.
lr_query_service2->add_selection_param( iv_attr_name = 'Rgroup'
iv_sign = lv_sign
iv_option = lv_option
iv_low = lv_low
iv_high = lv_high ).
ENDLOOP.
if lv_partner_fct = 'ZRG'.
lr_entity = lr_iterator->get_next( ).
CONTINUE.
ENDIF.
lv_attr_name = 'BU_PARTNER'.
ENDIF.<b>You can acheive this .... first by creating the search help exit ... by creating the maintaince view then using it in the Creation of the search help </b> ...
see the link for attaching the view to the serach help .
<a href="http://">http://www.sapdevelopment.co.uk/dictionary/shelp/shelp_elementary.htm</a>
reward points if it is usefull...
Girish -
Query Group in Query Category different with Authorization's group number
Hi All,
In Authorization screen, it allowed to authorize up to 20 query group
Whereas in Query Category window, it has only max 15 query group.
Anyone has idea on why is the difference?
Thanks in advance,
MHYou have a very good point. I believe something must be for system to use during development. You may post a development request to see if the next version could have matched numbers of query groups. The forum is on this link:
/community [original link is broken]
Thanks,
Gordon
Edited by: Paulo Calado on Jun 19, 2009 3:33 PM -
Multiple linked query report in 6i
Hi,
I have a report with multiple linked queries.
Group 1 (1st query)
Group 2 (2nd query linked to 1st query)
Group 3 (3rd query linked to 1st query)
There is a page protect on group 2, when group 2 goes to a the second page it sometimes leaves room for group 3 to print on the first page.
I do not want group 3 to print until group 2 has finished printing entirely.
How can I push group 3 to print on the second page if there is room on the first page??
Any help would be great!
KellyHi Kelly,
Typically, group 2 will be in a variable sized frame (M_2). If group 3 is below "M_2" (and there's nothing between them) then group 3 should be implicitly anchored to "M_2". That is, as "M_2" expands, group 3 will move down to make room for "M_2".
The implicit anchor that would normally be created in the above scenario would be against group 3 with the following print conditions:
- Print Object On: "Last Page"
- Base Printing On: "Anchoring Object" (ie: "M_2")
In this case, Group 3 would only print when "M_2" has completed - by the sounds of, this should be the bahaviour you want.
Check the above values against your Group 3. You can always re-set the "Print Object On" property to "Default" to get Reports to create these values for you.
If you have to, you can create an explicit anchor between Group 3 & "M_2" and set the above print conditions manually against Group 3.
Robin. -
Getting Java error while connect BEx query to WebI report (SAP BI4.0 )
Not able to connect BEx query to WebI report (SAP BI4.0 ) . Below is the error I get while creating a new BEx connection to BOBJ WebI report .
Please find the below error and help me ,
"Select a BW Bex query window box " displayed "Nothing to display " and server error as mentioned below
Java.uti.concurrent.executionException: Com.sap.sl.sdk.repository.service.repositor******
at Java.uti.concurrent.futuretask (Unknown source )
at java.swing.swing.timer.fireactionperformed(Unknown source )
at java.awt.event.invocationEvent.dispatch(Unknown Source)
Thanks ,
Pradeep GorpaduHi,
I am on BO 4.0 SP05 Patch 6. Webi reports are just showing processing but not giving results. When I try to create new report it is throwing java security error.
Tried applet patch upgrade(From link : https://websmp207.sap-ag.de/~sapidb/011000358700000902752013E) for webi certificate but didn't help.
Please suggest what could be done.
Thanks and Regards,
Ankit Sharma -
SAP roles- "getResourceObjects" search options?
Hi,
I'm trying retrieve all the roles (activity groups) from a SAP resource. I use the "getResourceObjects" form util method to do this. This method retrieves all the roles on SAP system. But I need to get only the roles starting with a particular character (say "X"). I went through the java docs for "getResourceObjects". I see only "map" in the arguments. I'm not sure which options to user get the roles starting with "X" only. Any direction would be highly appreciated.
Thanks,
kIDMan.Hi MV
Thanks for responding.
I was trying my hands at Closing Cockpit.
In CLOCOC i was able to create hierarchies. One question regarding hierarchies: Is it possible to do closing for any one of the organizational unit like PRCTR or CCode? Or is the closing applicable to all the units in the hierarchy?
Secondly: I am not clear about task list. What exactly goes in there. SAP help is not that helpful in this regard.
What are dependencies?
I understand that we need to register programs and transactions: prerequisites for CLOCOC. But I didn't understand why we need to do that. Whats the logic.
I was going to try out all the steps but I ended up getting an ABAP Run time error which is not yet resolved, therefore, I may have asked more questions than I should have.
One last thing, why do we need CLOCOS?
Thanks in advance and excuse my novice knowledge level in this area.
Regards,
Vj -
I am new to SAP and BW. A goal of mine, straight from my GEM form, is to "Increase my knowledge of the security in the SAP application by understanding SAP roles and how they apply to Business Warehousing". Please point me to websites, books, white papers, etc.
[email protected]Zip
Please check these links and hope it helps
http://help.sap.com/bp_biv235/BI_EN/documentation/Authorization_BW_Proj.pdf
http://help.sap.com/saphelp_nw04/helpdata/en/52/671595439b11d1896f0000e8322d00/frameset.htm
Thnaks
Sat -
Link Query and Ref Cursor Query
Hi all!!
How can I link Query and Ref Cursor Query??
I mean, How can I pass input parameters to the PL/SQL procedure if they are not User parameters but they come from another table??
Thanks a lot
F.I have searched the forum and this is the closest to my problem.
Just started using ref cursors in my reports.
The problem I am running into is that I have two ref cursor queries in my report - they each contain a column named seq_no which forms a join (in the database) .
My report returns the correct number of records in each query, but I can't find a way to enforce the join. I've tried all the methods I can think of including combining the results into one query.
The IDE won't let me join on a column and when I join on the group (which I make only contain the seq_no fields) that join is ignored.
Can anyone help me on this? -
Is it possible to create a Material Group Hierarchy in SAP ECC?
Hi,
I'm trying to create a Material Group Hierarchy (not a Product Hierarchy) in SAP ECC.
I've read some discussions about this theme:
MM Material group hierarchy ?
but still I'm sure if it is possible to create a Material Group Hierarchy in SAP ECC or if it is only an IS Retail functionality.
Thanks in advance,
Luis.Please check this answered link:
Re: Material Group Hierarchy
Re: Material Group Hierarchy
Re: Material Group Hierarchy
Edited by: Afshad Irani on Jul 1, 2010 1:03 PM -
Configure custom query group in navigation menu
How do we configure custom query groups? Say for example: I have created a custom query group and added my custom query definitions to it. How do I configure this so that when I click on Contract Management Tab on the workbench, my custom query group is invoked?
I need to configure custom query group in navigation menu. Any help would be appreciated.
Regards,
Bindu SharmaHi Bindu,
As per my understanding, it is standard and query group cannot be added in the navigation but you can add your quries under Agreement and Claus Library.
Kindly refer the blog for the same: http://scn.sap.com/docs/DOC-55733
Let me know if you need any other information.
Thanks,
Kushagra A -
Erro when importing SAP roles into BO Edge XI 3.1
Hello,
I'm currently setting up the SAP Best Practices on a BO Edge XI 3.1 system (32 bit) and trying to link up with an SAP ECC 6 EHP 4 system (64-bit).
When getting to the authorisation step I go to the CMC > Authentication > SAP > Role IMport.
There I receive following error:
JCO.classInitialize(): Could not load middleware layer 'com.sap.mw.jco.rfc.MiddlewareRFC' JCO.nativeInit(): Could not initialize dynamic link library sapjcorfc. Found version "2.1.9 (2010-01-28)" but required version "2.1.8 (2006-12-11)".
After closing and re-entering the same tab I receive following message: org.apache.jasper.JasperException
I have not even the possibility to enter the roles manually. The system doesn't allow me.
There is no specific SNC security set up for my SAP system.
I have been able to connect to the logical system of SAP because when I updated on the tab: "Entitlement Systems" it proposed my logical system name that I created in SAP.
As I found on another SAP forum the version 2.1.9 should also be the good version.
Can someone help me out with this one (does anyone has still the older SAP Java connector version 2.1.8)?
thanks in advance
ThierryHello,
That's what i did but didn't help.
I finally managed to find the problem. I had also to install a file named librfc32.dll in the same directory. When installing the necessary files apparently the version of this file librfc32.dll was not the correct one because it didn't match with the version that is installed together with the Sap gui (I presume). So by re-installing the former version of this file librfc32.dll it finally worked.
thanks anyway -
Third party background ID requires standard SAP role
We are connecting to a 3rd party through a background ID that we have created on the ABAP side.
However, in testing this access, we notice that this connection does not work if we assign a custom role (or even SAP_ALL) to it. It works ONLY if we assign a specific SAP-delivered role (SAP_XI_ADMINISTRATOR_J2EE) to it.
We have logged into the J2EE UME and assigned our custom group (which corresponds to our ABAP role - ZSAP_BATCH_XI) TO the Administrator Role in the UME. But this still doesn't seem to fix the problem, and it is still requiring the standard SAP role.
Can you pls. let me know if there is another step I should do, to force my background ID to use my custom role, rather than the standard SAP role.
Thank you,
AshishHi,
This is standard in SAP and you would only need to assign the WBS to the Sales Order for which the Material is being Procured for and the Cost / budgets can be tracked through this WBS element.
This activity can be seen thru PS Reports
Best regards
Amit Bakshi
Maybe you are looking for
-
Invoice number - in the return order purchase order tab page
Hi User needs invoice number in the PO Tab of the return order when Created with reference to invoice . usually PO number of the Sales order will be comming . what needs to be done for this Regards Anil
-
[CS3][JS] Is there a JS equivalent of AS 'ignore application responses'
I used 'ignoring application responses' a few times in AppleScript to speed up a script execution. Is there a Javascript equivalent. Curious.
-
Why can't I restore my iPhone 4 with error 28?
My iPhone 4 wouldn't turn on for 3 days, so eventually I plugged it into iTunes - it said the phone was in recovery and that I needed to restore it. After doing this, it gave me the eror code 28 and I have tried everything to restore it?!
-
How do I COMPLETELY uninstall Avast anti-virus (free edition) from my Mac?
How do we completely uninstall Avast anti-virus, latest edition from my Mac? This product has really messed up my Safari browser with all the extensions and possible plug-ins! Thank you for any advice!
-
I have 3gs ..accidently it droped dwn in water ..since then its not working ... only when m connecting to charger it says emergency only . and when m connecting to laptop .. it shows only apple logo on and off . help me with this issue.