List roles/profiles/authorizations for end user
HI All
Can anyone please give the list roles/profiles/authorizations
that needs to be added to our end user id so as to view
(Only Display) all the BEx Reports.
Points assured
Thanks
Vijaya
Hi Vijaya,
Go through this link:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a07122ae-8216-2a10-c9a5-996717a0648b
Thanks,
Ajay
Similar Messages
-
Dear Experts,
The scenario,in PA30 and also in PA40 HR end user should not have access to edit his own data but he/she can able to view his own data and he should have access to edit,create,copy for other employees. Kindly let me know authorization object for the same.
Regards,
Deepan
Message was edited by: Sikindar AHello
P_PERNR: will prevent or let a user to maintain/see its own data cfr: P_PERNR (HR: Master Data ? Personnel Number Check) (SAP Library - Authorizations for Human Resources)
then depending if you use Contextual Authorization or not
P_ORGIN or P_ORGINCON lets a user to maintain/display the employees' master data.
Cfr:
P_ORGIN (HR : données de base) - Autorisations pour HR (Gestion des Ressources Humaines) - SAP Library
https://help.sap.com/saphelp_erp60_sp/helpdata/en/4c/197c8fad6671459b9dde3e915336b8/content.htm
regards
Hadrien -
Authentication and authorization for AD users in UCM11g
Hi all
we are using webcenter content server 11g. I read some where that for 11g users authentication is done in weblogic server environment, mean content server for 11g in now managed by weblogic server only, am i right?. we have successfully integrated Active Directory with weblogic sever and user of AD are able to log-in UCM but they don't have any role like contributor or Admin. How to do this role mapping for AD user in UCM i.e. authorization for these users. Please provide any guidence on this issue any doc or blog, we are new to webcenter suite.
Thanks
SomeshAs you already have weblogic integrated with AD, remains only role mapping and Single Sign-On integration. For authorization, AD must contain groups with exact names as roles in the Content Server. Those groups should be where Group Base parameter in the weblogic ActiveDirectoryAuthenticator point (like OU=Roles,OU=Oracle,DC=example,DC=com). Assigning AD user to the AD group named contributor, will add contributor role to logged Content Server user.
As for SSO, refer to the:
http://docs.oracle.com/cd/E23943_01/web.1111/e13707/sso.htm
and
http://docs.oracle.com/cd/E23943_01/doc.1111/e10792/c05_security.htm#autoId21
Procedure steps are:
Create a user account for the hostname of the web server machine in Active Directory
Create krb5.ini file, and locate it in the C:\Windows directory at both machines (Domain Controller and WLS host)
Generate the keytab file
Create a JAAS Login File named krb5Login.conf
Put both keytab and krb5Login.conf files to …/user_domains/domains/my_domain/
Configure the Identity Assertion Provider
Adjust Weblogic Server startup arguments for Kerberos authentication
Redeploy CS (and optionally other servers) server with the documentation given deployment plan
Check web browser configuration (IE and Firefox only)
Take a deep breath and test
If successful have a cake and cup of coffee else goto step one
Regards,
Boris -
No authorization for activating user status PLIM
Dear Gurus,
I'm a newbie to SAP. Currently i'm facing the problem with Tcode KO01 while i'mtrying to create Internal Order. I can initialize the program but after i entered the Order type and pressed enter. Error msg "No authorization for activationg user status PLIM" pop-up. Pls help on this urgently.
Thanks.Dear Payal,
I checked /nSU53 just after i got the error msg. It said authorization check failed. Authorizaton object B_USERST_T status management: Set/Delete User Status using Transaction.
Activity:01
Authorization key: <Dummy>
Object Catagory: ORC
Status Profile: 00000002
What should i do after this??? -
Authorizations for background user
Hi everyone,
Is it ok to assign the user(system user) sap_all profile under whom a background job runs. Is it against the security audit policies. or should we assing only those authorzatons that are required to run the program in the background job.
Thanks.
Neha.> Is it ok to assign the user(system user) sap_all profile under whom a background job runs. Is it against the security audit policies. or should we assing only those authorzatons that are required to run the program in the background job.
>
Hi Neha,
You don't need to provide SAP_ALL for any system user id for daily Business you create. And of course it is against Audit policies to provide such access to Background user. This user id should be of type System.
The authorizations for such user ids should be:
SBTCH_NAM Background Processing: Background User Name_
BTCUNAME = <respestive user name that are going to be authorized for Batch Job execution>
SBTCH_JOB Background Processing: Operations on Background Jobs_
JOBACTION = *
JOBGROUP = *
S_BTCH_ADM Background Processing: Background Administrator
This is required for the administrator administering background Jobs.
Also check the following note: Note 101146 - [Batch: authorization object S_BTCH_JOB, S_BTCH_NAM|https://service.sap.com/sap/support/notes/101146]
Also the user needs access to following Authorizations:
S_ADMI_FCD System Authorizations
S_CTS_ADMI Administration Functions in the Change and Transport System
S_LOG_COM Authorization to execute logical operating system commands
S_RZL_ADM CCMS: System Administration
Regards,
Dipanjan
Edited by: Dipanjan Sanpui on Jul 9, 2009 2:21 PM -
Applet Debugging Option for End Users
Users in our 12.0.4 development system that only have the 'xMII Users' role can see and use the 'Applet Debugging' option under the System Management menu. I'd prefer them to only have the options under the Support menu.
I'm puzzled why this one option is availble for end users. What am I missing?
David MacindoeWhat am I missing?
I guess nothing.
Its just that it is designed this way. Moreover the option is harmless from a Security point of view.
May be you will find this 'fixed' in later versions. -
No portal roles are assigned for this user.If this problem persists, contac
I am trying to access portal first time using j2ee_admin user. It is saying "No portal roles are assigned for this user.If this problem persists, contact your system administrator."
iam using abap+java enginee how config in abap enginne ,iwant which role to assign j2ee_admin user
i already asiigned sap_j2ee_admin,SAP_BC_JSF_COMMUNICATION,SAP_BC_JSF_COMMUNICATION_RO but it show same problem
please help me..
Edited by: Mugala Balu on Aug 7, 2010 5:53 PM
Edited by: Mugala Balu on Aug 8, 2010 7:48 AMBalu,
Well this issue has been discussed many a times in forums. You would have to point your data source to ABAP system.
Check this thread in [here|J2EE Failed to start , after changing UME datasource;.
Good Luck!
Sandeep Tudumu -
Recording NWBC scripts for End User Experience
Hi Experts,
I am recording NWBC scripts using the Netweaver Business Client GUI for loading and running it through Robots for End User Experience Monitoring. I don't see an option to "LogOff" in NWBC client while recording the script. We only have option to "Close all session and LogOff" in NWBC client .
When I am using this option, it closes all the sessions including the EEM Recorder also without saving the recording .
I need to include "LogOff" as the last step so that it doesn't leave any active sessions for each run by different robots.
I have a Solution Manager 7.1 SP10 and NWBC client 3.5 Patch 13.
Please help me achieve this.
Regards,
Manish KHi,
for a browser the recommendation is to open a new, empty tab to keep the browser alive while closing the tab with the session. All that with the hope that the backend will use the triggered event of collapsing tab to close session.
Maybe a similar strategy works for NWBC.. but I don't know the UI in detail. -
Reset passwork for end user using XE version 2.1.0.00.39
Hi All,
I would like to create a link "Change Password" for end users to able to change their password anytime. I've followed the link below
Self Reset Password
but it still require the admin login before end users can change their password.
The following steps that I did:
1. Under "Shared Components", create a Navigation Bar entry name "Change Password".
2. On page 1, click on the "Change Password" link under Navigation Bar and entered
Target Type = URL
URL Target = javascript:popupURL('f?p=4350:53:&SESSION.:::53.F4350_P53_USER_NAME::APP_USER');
How do i make the "Change password" link go directly to reset password page after end users clicked on it without admin login require? I'm using a default authentication and all end users assigned to user group.
Thanks in advance,
KevinKevin,
You want the users to go to popup page 58 (in application 4350). See this thread: Re: Pop Up Change Password Window . But I don't know if that will work in 2.1.
In general, you're better off using other types of account management tools such as LDAP.
Scott -
Page customization for end user
is it possible to use other mechanism for end users to customize their own pages instead using the portal features since it's a little complicated cause each user needs to create new pages, add portlet, etc.
Can we use the mechanism like my cnn, my yahoo,excite and how to do that in a simple way?
thanks for helpingHi,
I have the same question, but I would like to have a seperate page or application, showing only predetermined portlets, for users to choose from and place on their page. I do not want the end user to ever see the customization process Oracle uses. Can this be done???
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Karthika Siva ([email protected]):
A simple way to do this:
1. Create a page that will become the default page for end users. This page will have your branded look & feel (style) and contain a default set of portlets. These are portlets that you think your typical user will find useful.
2. Create portal user.
3. Grant one of the following privileges on the page to the user. Grant 'Full Customization' or 'Add Only Customization' depending on how much control you want to give the end user. Keep in mind that both of these privileges allow the end user to only customize their PRIVATE VERSION of the page. Others will see the default, or their own version if they have also personalized it. See the online help on the Access tab of the Customize Page screen for a description of the privileges.
4. Once that is done, set this page as the default home page for the user. You can do this using the Preferences tab on the edit user screen.
Now the portal user can log into the portal, and personalize his/her page by customizing portlets on the page, hiding/showing default portlets, and even adding other portlets to the page.<HR></BLOCKQUOTE>
null -
Afternoon all, i've recently installed cProjects as a add on to a WEBAS system, i'm after some useful links/information about how to use the product at all, as i've no real experience of it.
Any help would be much appreciated, the SAP guides don't seem to be suited for end users thats all....Hello James,
From your post I cannot make out which release of cProjects have you installed (3.1 or 4.0). Any way pl find below the links to the help.sap.com portal which is a detailed guide to cProjects Suite.
cProjects Suite 3.1
http://help.sap.com/saphelp_cpro31/helpdata/en/home.htm
cProjects Suite 4.0
http://help.sap.com/saphelp_ppm400/helpdata/en/index.htm
Hope this helps.
Rgds
Deepak -
SCSM 2012 SSP Permission for End users
Hello Experts,
I have an issues with SSP - SCSM 2012 SP1.
As an admin user, I can see theOfferings, see the pending requests, can see the requests I have submitted, Approve them etc. But when I am an end user, browsing from my laptop, I see a blank Home page. I dont see the Service offerings in the
homepage..even I dont see the Need Help? text. What is the issue? FYI : Silver light is already installed on my laptop.
Interestingly, I see the Need Help? text with the same end user credential when I am opening the browser inside the server wher SSP is installed.
But, in both the cases, whether I browse in the server or from my laptop, I dont see the service offerings anywhere when i am an end user. I followed the below article..but no success.. :(
http://systemcentertech.com/2012/06/28/scsm-2012-portal-service-catalog-empty-for-end-users/
Please help...
Thanks!
ThanksHi,
Did you add the Service Offerings and Request Offerings to the Catalog Group? Here is another good blog on this you can reference:
http://www.concurrency.com/blog/scsmportalpermisions/
My Blog | www.buchatech.com | www.systemcenterportal.com
If you found this post helpful, please give it a "Helpful" vote. If it answered your question, remember to mark it as an "Answer". This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY suggestion
in a test environment before implementing! -
Customizing Message "No portal roles are assigned for this user"?
Hello,
we would like to give the user some hint on who to speek with in case he has no portal roles assigned.
So we would like to customize the messaage "No portal roles are assigned for this user" to some customer spezific text or to redirekt to a customer specific iView.
I would appreciate any kind of hints.
Best regards,
Lutz RottmannHi,
Check these threads.
Customizing message "No portal roles are assigned for this user"
No portal roles are assigned for this user
Regards,
Harini S -
Cusomize message "No portal roles are assigned for this user"?
Hello,
we would like to give the user some hint on who to speek with in case he has no portal roles assigned.
So we would like to customize the messaage "No portal roles are assigned for this user" to some customer specific text or to redirect to a customer specific iView.
I would appreciate any kind of hints.
Best regards,
Lutz RottmannHi,
Check this thread.
Customizing message "No portal roles are assigned for this user"
No portal roles are assigned for this user
Regards,
Harini S -
Training Material for end-users
Hi SAP Gurus,
I need to prepare a Online Quick Reference (OLQR)/questionnaire/FAQ's (SAP R/3 4.7 -FICO and integration of FI-SD & FI-MM), for the end-users, which they will refer to after Go-Live.
I also need to prepare training material for end-users for (SAP R/3 4.7 -FICO and integration of FI-SD & FI-MM),to be used during the training session's prior to Go-Live.
I would appreciate, if someone could please send me project documents related to the same on my email id [email protected]
This is very urgent and I have to complete the documents ASAP, so please reply at the earliest.
Thank you all in advance.
-- SJ
nullHi Ravi,
Thanks alot for your help.
But, I was looking for some Project documents that I can refer to for preparing Training Material and questionnaire/FAQ's/online documents (SAP R/3 4.7 -FICO, SD & MM) for the end-users, which they can refer to after Go-Live.
It would be great, if you could please send me some project documents on my email id: [Email removed by moderator]
Thanks,
--SJ
Message was edited by:
Mario Herger
Maybe you are looking for
-
ERROR: 'Sky Go unable to load program information as there is no Internet connection'
I was using Sky Go via my iPad and a T-Mobile hot spot generator (Hauwei) to watch programs whilst in my caravan in Devon. Suddenly it stopped working and I now whenever I try and use Sky Go I get the message 'Sky Go unable to load program informatio
-
My PC recently died. I have purchased an ACER Aspire TC ATC-605-UW2U with 8 Gb Ram and an Intel I5 3.2 GHz processor. I would like to know if i can sync my ITunes to my iPod Classic (Transfer the music on my iPod back to iTunes)?
-
How to measure thermocouple in lab view and save the data..
hi.. i am using my DAQ with 2 analog channels.. i need to acquire signal from thermo couple i have T type thermo couple with brown jacket.. i have connected the thermocoupe in ai0.. and i selected the thermocouple type... when i select the built in o
-
After the recent upgrade to 10.5.4 my intel macbook pro 2.16 has gone into low gear. It is sluggish, slow to respond and seem to just take forever to do any thing. Have I done something wrong, have a conflict? What needs to be done to get my speed ba
-
Hal config for Elantech/Eee 1000h touchpad?
I've tried using the one that's in the 901-install Wiki page, and find it massively flakey (sorry no offense to anyone), compared to using xorg.conf.. It doesn't allow precise control at all, and for some reason (I'm sure it's the way I move my finge