List of roles and corresponding transactions and infotypes

Hi Friends,
I want to prepare baseline list of roles and corresponding transactions and infotypes that we have access to in Production system. Please let me know easiest way.
Thanks,
Ankitha

In [this thread|Security - HR Authorizations; you'll find a similar question and some suggestions. Once you've got your roles it should be fairly easy to determine which transactions are in them.
Jurjen

Similar Messages

Any way to list users' roles and teams in the advanced fine list?

Hello,
Is there any way to list user's Roles and Teams in the advanced find list?
In general, I am looking for a technique to list the related entities of the main entity in the advanced find.
Thank you,

Unfortunately not. Advanced Find can only display records of one type - i.e. you can't show an entity, along with its related entities.
Also, the underlying entities that store the team membership and role membership are not available for output in Advanced Find.
Instead, you could create a report to display this data
Microsoft CRM MVP - http://mscrmuk.blogspot.com/ http://www.excitation.co.uk

Report to view all the Roles and Transactions assinged to a particular user

Hi,
I need to develop a report to view all the Roles and Transactions assinged to a particular user along with the Authorization values. So, if provide the Username, the report should be able to give Roles, Transaction Codes and the fields and thier authorization values for that TCodes..
Regards,
Sreenivas Raju

Try this FM once - SUSR_USERS_LIST_ALV . It provides a list with Roles, Profiles, and also a detail button to check the authorization values etc.
Also try this FM - SUSR_USER_DISPLAY_WITH_AUTHS, SUSR_USER_AUTH_FOR_OBJ_GET , SUSR_USER_DISPLAY_WITH_S_TCODE

Job role design - transaction role and auth object role

Hi all, please kindly comment following job role design:
(1) transaction role:
Keep transactions in single job role to represent business processes in different application areas, e.g.MM: maintain PR, PO, OA. CO: maintain cost center, internal order HR: maintain org structure, personnel management.
The single job role will only keep role menu, object S_TCODE and inactivated all other application related authorization objects.
(2) authorization role
Keep application component related authorzation objects except S_TCODE in single job role by different application area, e.g. Objects of MM_B, MM_E, MM_G in MM role. Objects of K_CCA, K_CSKS_SET in CO role. Objects of HR in HR role.
Then maintain org level of MM, CO, HR roles for different companies, e.g. Company A MM role, company A CO role, company A HR role, company B MM role.;....
User will be assigned transaction role + auth object role. For example, user of company A to perform MM and CO functions will be assigned
with MM transaction role + company A MM role + company A CO role.
Please let me know the pros and cons of above design. Thanks.
Regards,
Donald
* I can see the disadvantage of this design is during SAP upgrade (SU25), revised of authorization object will not reflect in authorization role

Brent Van Dyck wrote:
Keep in mind the project was for an HCM implementation where there's already hardly any connection between tcodes and authorization values so it may have made more sense in that context than it would in a classic SD/MM.
That is correct - but it still exceeds "horrible" beyond imaginable boundaries if you try to split the fields of the objects into different roles and expect it to work or that there will be less roles.
In the case of HCM and also BW the auths admin needs to know more about the data and organization than what classic ERP auths admins can get away with. That is why they take longer to migrate away from manual profiles and have a greater tendency to have manual authorizations inserted into roles - which could however also be achieved by maintaining fields proposed without values and at least proposing those (such as activity type fields) which are known.
But splitting cube / characteristics / key figures or infotype / personel group / auth code into different roles can only go wrong.
Another mistake some "value role experts" sometimes make is that they don't want Su24 proposals in PFCG because they don't understand them. So what they do is that they clean out the SU24 tables completely... Well... the side affect of that is that all SU24 check indicators flagged as "no check" suddenly become alive in their system although there are mostly good reasons not to have the checks active.
Cheers,
Julius

List normal users and corresponding ops$users in Oracle database in groups

Hi,
We are having Oracle database version 11.2.0.2 on Oracle Ent. Linux 5.1. Basically, according to our requirement, we need to list similar users in the database which are having individual usernames as well as their corresponding ops$usernames (in one query).
Eg. in the database if have users 'xyz' and 'ops$xyz', 'abc' and 'ops$abc', then we need to write a query which can list this users together in groups as below;
xyz
ops$xyz
Similarly,
abc
ops$abc.
Can you help me write a query so that I can list all these similar users residing in my database together.
Also, later I need to find out the roles and privileges assigned to these users once its listed.
Thanks in advance.
~ Rahul

Hi, Rahul,
To ignore leading 'OPS$' when sorting:
SELECT       username
FROM       dba_users
ORDER BY REGEXP_REPLACE ( username
                        , '^OPS\$'
;'$' has a special meaning in regular expressions, so when you literally want a '$' sign, it has to be "escaped" as '\$'.
Edited by: Frank Kulash on May 17, 2013 9:52 AM

How to hide users' (and roles and organization) list from a user in OIM

Hi,
Admin (xelsysadm) has created a user in OIM. Now if that user is logged in to OIM Self Service (http://<url>/identity), he can see other user in his organization, along with list of roles, role categories, organizations etc. I have requirement to hide all the administration links from end user. Right now, he only has "All Users" role, and doesn't have any admin role, but can see all these administration links. What do I need to do to hide these links from end user? Do need to remove "All Users" role, or assign any other role, or do something in entitlement or in access policy ??
Thanks.

Thanks Karthik for you reply. It helped a lot.
Steps, just for reference...
1). Create SandBox
2). Activate
3). Customze and view by source
4). Select your link which you want to hide
5). Edit Visible properties and use #{oimcontext.currentUser.roles['SYSTEM ADMINISTRATORS'] != null}
6). Save
7). Publish
8). Test
Edited by: 966405 on Feb 20, 2013 3:50 PM

Long List Of CFLOGIN Roles and Performance

I have a very long list of Roles for the "roles" attribute of
cflogin (around 60). Is this going to be a severe performance
problem?
Boybles

You can try connecting to weblogic from the console and using: listAppRoles(“obi”) and listAppRoleMembers(“obi”,”BIConsumer”). You can find more details by following this link: http://www.rittmanmead.com/2011/04/oracle-bi-ee-11g-migrating-security-policy-store-part-2/

Role and User not listed

Previously I had created a role and added a user. The user
waited several weeks to try to login and now is receiving a message
that his role is no longer valid. When I login to administer the
site his role is not listed and when I re-created the role I can't
add him because his name is 'grayed' out and indicates that he is
currently assigned to the previous role.
Has anyone else had this problem? How can I fix it?

When selecting "Database", a Planning Create will create (or recreate) the Planning application in Essbase. This will erase any Planing supporting detail, account annotations, etc. It will also (IIRC) blow away the Essbase database.
A Planning database refresh updates Essbase with metadata changes (if any).
You know, I've never tried doing a Create->Security Filters.
Now if you mean Administration->Manage Security Filters->Create -- that will just update the filters with whatever the latest and greatest dimensional security is. If you selected all of the filters, it is as if you did a Administration->Manage Database->Security Filters. The idea being you might want to target it if you have many users/large filters.
I think the first time that user logs in you will see the username in the Administration->Manage Security Filters list.
Going backwards, re your first question -- provision the username in SS with access to the Planning app (however you do that, groups, individually, etc.), and give him Essbase server access. Have him log in. All should be good to go.
Regards,
Cameron Lackpour

CRM Architecture: relations between business roles and transaction

Hello Experts!
I am dwelling on the topic of the relations between Business Roles, Transactions, Transaction Types etc. Do you know if there is any architectual diagram to make clear how these objects are related, and how they depend on each other?
Thank you for help!
Karolina

Hi Javier,
As far as I understand you want to restrict transaction types per business role.
You can achieve this by customizing. You can create a transaction profile in customizing for each business role and assign the transaction types you have created to this transaction profile.You can find this customizing activity in spro transaction.
Then you can assign transaction profile you have created to your business roile by assigning function profile 'transaction profile' to the business role in crmc_ui_profile tcode.
In this way when you login with the business role the transactions you have maintained in transaction profile will only be shown up in the pop up.
I hope this helps yiour requirement. Let me know if you require any further information. Thanks.
Regards
Yogesh

Extraction list roles and users for entreprise portal.

Hi Everyone,
I work on Enterprise Portal only java.
I want to extract the list of all these users with their roles
How do I proceed?
Thanks for the help!
Regards Giglio

Giglio,
Its possible to access the list of user and their roles from portal in several ways:-
Approach 1:
User Admin -> Import/Export -> User Data Export -> Press Export Button -> Copy the user content and store in a seperate file -> Done.
Approach 2:-
You can write a custom progrram in Java using UME API to get the portal user information. You can use webdynpro for java or JSP Dynpage/abtract portal component to use UME API.
Ram

Roles and Role List

Hi all,
Please explain me about the Roles and Role List used in Projects...
Thanks
Dinesh

Hi
Roles are using in Projects for two goals -
A) a basis for project-based security. You might create roles as project roles and assign people to the role in a project. For example, project manger, project admin, project billing person, etc. You then might configure the security access to forms and functions of specific roles.
B) when implementing Proejct Resource Management, the project roles may be scheduled on a project and serve as a template for resource demand. In that case you might configure the team member role on a project, such as competencies, job information, and security.
You might want to review Oracle Projects Fundamentals and Projects Implementation Guide for more details.
Dina

List of Users and Roles Assigned in Portal (producer & consumer)

Hi
We are running federated portal EP 7.0 EHP1 SPS07, we need to pull the list of users and their roles assigned from tables or thru report in our federated portal, so that we can have a consolidated list of users and their roles in both producer and consumer portal
Thanks
Senthil

Hi Senthil,
Use report RSUSR002 to get list of roles for the users.
Regards,
Marasa.

SD Customization team member --Role and Profile

Dear All,
I want to assign the roles to our SD customize person. Please tell me which role i should give him so that he can only customize its own area (SD). Same issue for FI customize person.
Currently i gave sap_all to them and they disturb each other work.
Thanks
UsmanRana

HI Usman,
Check this site.
http://sapecc.com/sox_sod/sod_matrix_sd.htm
In the SOD matrix, the list of transactions atre listed for each responsibility. You can create single roles for each responsibilitry and assign it to your SD consultant.
I am sure u would be aware of the procedure for creation of roles via PFCG transaction.
Br,
Sri
Award points if helpful.

Table whihc contains the roles and its authorisations

i have to view all the authorisations and the roles in which they are present .
Please let me know the table for the Same

Hi,
From table AGR_USERS , you can see the roles corresponding to any user.
From table AGR_TCODES, you will get the tcodes corresponding to any role.
Hope this solves your problem
Well this will tell you the roles with respect to the users.
Also you can into transaction PFCG and search the roles, go to change mode for that particular role and there under authorizations see the objects clicking on change authorization objects.
reward with points.

APO roles and auth objects

Hello all,
Can someone tell me the most common used Tcodes, roles and auth objects in SAP APO - DP and APO-SNP security
thanks

I was going to type them out but luckily for me found this link to the DP & SNP auth objects - the info there is as detailed as anything else I have seen
http://help.sap.com/saphelp_scm50/helpdata/en/21/f6253b90e48743e10000000a11402f/content.htm
There is a list of useful APO transactions here
http://help.sap.com/bp_scmv241/documentation/SCM_AIO_BP_Function_List.xls
I can't help with the standard roles as I build my own.

List of roles and corresponding transactions and infotypes

Similar Messages

Maybe you are looking for