Listing transactions for ranged roles

Good afternoon,
I'm attempting to "clean up" a role which was previously created and used many ranges. I want to remove sensitive transactions.
I am able to use SUIM to search transactions by role, and by complex, but this does not list the transactions if they are contained in a range, only if they are
listed explicitly in the menu or S_TCODE.
Is there a transaction or tool that will give me a complete list of transactions in a role, including those that are contained in a range?
Thanks!

In table AGR_1251, input S_TCODE for a role and see the values in Columns Low and High to see the range.
AB.

Similar Messages

Report to fetch assigned transactions for multiple role.

Hi,
I am looking for some report or the way, i can get the list of transaction assigned to multiple roles in one go.
Actually i tried SUIM, but here i have to specify one role at a time and have the list of transactions assigned to it.
My scenario is, i have around 100 composite roles. Now there is a requirment for a report, which gives information of transactions assigned to each role. If i do it one by one, i have to do it for 100 times.
Please suggest the best and quickest way.
Thanks & Regards,
Pravin

> Another way could be to look into the AGR_1251 table for object S_TCODE values. But, this will populate transactions that could possibly not have included intentionally (in the menu). For eg there are many transactions which need authroization for another tcode in the background which have to be inserted as an authroization value.
Which is good, because those are the actual tcode rights, not only the intended ones......
To do this for composites I disagree with Julius on using Excel or Acces
Try the SAP query tools, they're there for you. If you go to the quickviewer (SQVI) you can easily join tables AGR_AGRS and AGR_1251 by AGRNAME. Now if you look for object S_TCODE you can see the relation between a tcode assignment and a composite role.

Transaction for active article list -sitewise-urgent

Transaction for active article list -sitewise plz

Hello,
You can get site-wise list of articles using transaction MM60. But this shows all the articles - active and blocked.
In order to filter blocked articles, you may create an SQVI query between MARA and MARC tables. In the query, include MARA-MSTAE and MARC-MMSTA in the selection screen. They should be set to blank while executing the query to get active articles.
Thanks,
Venu

How to find list of transactions for a given component

Is there any table that holds information about transactions.
My requirement is to retrieve all transactions for a particular component.e.g. list fo transactions for SD or MM.
I am into java and have need to develop a program to retrieve teh above information using sap jco.
Hence if there is any RFC or table holding this info please let me know.
Thanks and Regards,
MNGHosh

Hi
Let me explain this witha na example.
Let us assume that one developer received a requirement on Material Management Module.
(Create Material)
Step1:
Go to the Transaction Code : SDMO.
Step2 :
Execute SDMO Tcode from SE93 or Press /nSDMO
Step3:
It will prompts for you a Dynamic menu with text box.
Step3 :
Enter your required description in that text box and press F8 or press execute button.
Here Iu2019m entering u201CMaterialu201D as description and pressing F8.
Step5 :
We will get the list of Transaction Codes associated with the description u201CMaterialu201D as Follows.
Step6 :
In the above list, we will get all Transaction Codes associated with the description u201CMaterialu201D
Search for your required transaction code based on your need.
Suppose if our requirement is to create a material then search with the word u201Ccreateu201D in the above list.
Step7 :
It will gives you the sub list of Transaction codes associated with Material and Create search terms
Step6 :
In the above list, we will get all Transaction Codes associated with the description u201CMaterialu201D
Search for your required transaction code based on your need.
Suppose if our requirement is to create a material then search with the word u201Ccreateu201D in the above list.
Step7 :
It will gives you the sub list of Transaction codes associated with Material and Create search terms.
Step8 :
If you observe the list, we got many Transaction Codes including
MM01 u2013 Create Material in the Sub list.
In this way we will get the required Transaction Code using the description only.
This is applicable to any module.
Regards,
Sreeram

KP06 - No transactions for cost planning are defined in the Nos range table

Dear CO Experts,
I m trying to post Cost Planning using T-Code KP06.
please help, the Error which pops is :
*No transactions for cost planning are defined in the number range table*
*Message no. K8007*
*Diagnosis*
*You want plan primary or secondary costs/revenues in controlling area 9000. This is not possible because no entries exist in the number range table for the cost planning transactions you want to perform.*
*This is an internal system error.*
*System Response*
*Processing is terminated.*
*Procedure*
*Start program RKTKA04C.*
*Execute*
*After the program has run successfully, start planning again.*

HI,
the planning subobjetcs to be assigned in KANK to a CO-number range are (maybe you do not need all of them):
KAZP
KOAP
KPPB
KPPZ
KSP0
KSPB
KZPP
KZRP
PAPL
RKP1
RKP2
RKP3
RKP4
RKP5
RKP6
RKP7
RKP8
RKP9
RKPB
RKPL
RKPQ
RKPS
RKPU
RKPV
RKPW
RKPX
RKPZ
best regrads, Christian

Standard Transactions for looking at Customer list in 4.5 systems

Hi Friends,
I need your help on this issue.
Can anyone provide me the standard transaction for looking at Customer list for a company code and credit limit overview for customers.
Tables are KNKK AND KNB1

Thanks buddy for the immediate reply but i want to make this question simple.
I am now trying to pull out is there any Standard transaction code which has been used for the table KNKK AND KNB1.
If so how to find that whether any tcode is associated to find the Customer list for both the tables
Thanks in advance
kishore

Report for transaction - Maintain Object - Roles - user Id ( Authorisation)

Hi
I want to generate a report for the following:
for a transaction
for a check/ maintain object name ( Ist column)
what are the roles ( iind column)
and
what are the user id for each roles.. (iiird column)
and
start up (yes / No) (ivth column)
Please advise.
Since, I need to do this report generation for more than 30 transactions, any immediate reply would be of great help.
Thanks in advance.
Partha

Hi
Try SUIM T-code and see if any of the report works
Thanks

Transaction for replacing material in task lists

Hi
Do anyone now a transaction that can be used for replacing material no. in already created task lists.
Regards
Tom

Hello TOM,
You can change the material in task list by choosing the change task list transaction and these are :
IA02:Change Equipment Task List
IA06:Change General Maintenance Task List
IA12: Change FunctLoc Task List
Thanks
Naveen

Where can I find the the list of transactions for ESS screens?

I want to test an ESS functionality in the SAP GUI. Where can I find the transactions for these screens? Is there such a table where these tcodes are stored?
I believe you can test the ESS screens through inputting the tcode in SE93.
Thanks! Any help will be appreciated.
Points will be awarded.
Olekan Babatonde

Bala? Do you even bother to read the original posts/questions?!?! That is soooooo far off and WRONG.
@Clueless
What version backend are you on? For the most part, you can look at it like this....
For ITS based services....each ITS service will be tied to a transaction. You can find this by looking in the "service" file for the interent service (ie. double click on the top folder shown for the service and it will show you the service parameters in the rigth hand content area in t-code SE80). Most (but not all) can be found that way. Also, if you are on ECC5 or ECC6, you can look in t-code SICF at the individual services to find the parameters there as well (a little more navigation required).
For Java Webdynpro and ABAP Webdynpro ESS services, however, you will not really have a transaction so to speak. They communicte primarily through classes and BAPIs. Nothing there for you to find in SE93.
Hope this helps.

Health Report for existing role in support and upgrade documentation

Hi Experts,
I am looking for create a report or using existing report/FM (if any) which will show new objects been thrown for a role with there SAP suggested values when we use PFCG expert mode merge option. I think this will be very helpful for support person to health check for roles and during upgrade in step 2C documentation people can save a hell lot of time. I do not have ABAP knowledge. Can anyone help me on this?
Regards,
Arpan Paik

Hi Julius,
I have been to that wiki before and one by you as well (regarding upgrade steps). For current upgrade I have also noticed that SU25 step2B is not only left with customer related changes only. Where USOBT_C/USOBX_C has same values as of USOBT/USOBX there update to customer table automatically happened in step2A. So 2B left with very less changes where customer prefer the standard way!!!
What I am looking for is actual authorization change delta. Step2C gives us only list of roles get affected. I am lookimg for what change actually can happen to a single piece of role due to upgrade.
I have followed below method.
1. Join table USOBT_CD and USOBT_C to see actual proposal for changed transaction and corresponding auth object. Here I had to perform few excel work to remove data repetation
2. Then take old data for roles from AGR_1251
3. Put together above 2 data and after proper sorting by object manually remove the data which SAP does by expert mode merge function.
Can this step be automated by some ABAP code? or function module?
Otto wrote :
If I start/ when I start and still remember this thread, I will update it
Please do so and thanks for sharing thoughts.
Regards,
Arpan Paik

Hiding of queries for perticular roles in POWL in SRM7.0

Hi Experts,
We have a requirement to hide the certain queries in POWL for perticular roles. I have maintained the entries for the roles through transaction POWL_QUERYR but we are not able to see the desired results.
Also tried by running the report POWL_D01 but this report will delete the queries based on the users. Our requirement is to show or hide certain queries to all the users with a perticular role.
Kindly advice.
Thanks and Regards
Vishal

Hi Lavanya,
Thanks for the reply.
We are following the below approach for hiding the tabs "Team Shopping Carts", Invoice/Credit Memo" and Confirmation Team Shopping Carts".
- Defined a new application id Z_SAPSRM_E_CHECK_STATUS.
- Maintained the entry in POWL_TYPER with the application Z_SAPSRM_E_CHECK_STATUS and type for confirmation and shopping cart along with the role
- Maintained the entry in POWL_QUERY with the application Z_SAPSRM_E_CHECK_STATUS, role and activated the activate check box
- Assigned the application id to the role authorizations "authorizations for Personal Object Work List (POWL) iViews"
When I run the report POWL_D02, I can see that for the application Z_SAPSRM_E_CHECK_STATUS the queries shopping carts abd confirmations are active.
But when I run the report POWL_D01 with the above application id I get the result that no queries found.
Please let me know if the approach that we are following above is correct. or do we need to maintain some more things to accomplish this.
We are defining are our own application id's because we need to hide queries for many transactions, so in our defined application id we will include the queries that needs to be displayed and will assign those application id in the roles after carrying out the above steps.
Thanks and Regards
Vishal

Disable an Authorisation object for Multiple roles.

Hi ,
I need to Disable an authorisation object F_BKPF_BUP for about 345 roles.Is there any way by which we can make mass changes.Doing it for individual role would take a lot of time.kindly advice.
Thanks in advance

Hi,
1. Go to SE16 --> table USOBT_C --> put object F_BKPF_BUP in the field "Object" --> execute without restriction. Download the list of TCodes.
Now go to Table AGR_TCODES --> put the list of TCodes (found with above method) in the field "Extended name" as multiple selection --> execute and download the list of roles.
Look up your list of 345 roles with this list. After matching, you need to sort out the TCodes present in this list of roles which is checking the object F_BKPF_BUP.
2. Now go to SU24.. go to option "Authorization Object" and NOT in the Transaction section.
Put the Object and execute.... go to change mode.... check the proposals for the TCodes you sorted at last step of point 1. Make the proposal Do Not Check where ever it is not so.
Move the Workbench Transport through Landscape. Your purpose will be done. But you should also keep in mind if the TCodes are present in other roles besides of your 345, those will become vulnerable.
Regards,
Dipanjan

RARs' criteria for analyzing roles in ECC backend system?

Hi All,
I'm working on setting up a prototype of Access Control 5.3. In RAR I notice the analyzis of roles is not done for all roles.
I have taken note 1179717 into consideration, and also performed mass user compare. But not all roles are analyzed yet.
Some of the roles are not tied to a profile, but it seems RAR does not segregate on this.
Does anyone have a list of criteria RAR uses when looking at what roles to analyze?
Thanks in advance,
Leif Nilsson

Hello Leif,
You can find SAP Notes only on SAP Service Marketplace
https://websmp103.sap-ag.de/notes
You cannot directly compare the numbers of RAR with the roles you want to analyze, without following the below steps completed successfully.
1- Connect the SAP backend system to Risk Analysis and Remediation and complete all post-install activities.
2- First you have to run the report RHAUTUPD_NEW in your backend system.
3- Select all roles, select 'Perform User Master Comparison', but check only "cleanups" from the 'editing types'.
4- Now execute the report.
5- When finished re-run a full user, role, profile synchronization for this SAP backend system in Risk Analysis and Remediation.
There are two types of synchronization, Full and Incremental:
6- Select Full synchronization
7- Perform Batch Risk Analysis. This is the core function of RAR. By performing a batch risk analysis, the security of the users/roles/profiles are compared against the Segregation of Duties rules to identify possible conflicts. It then makes a call to the back-end system to retrieve the authorization assigned to each of these user/roles/profiles. It then performs the analysis against the rules in the front-end.
8- Run Management Reports. Running this piece of the job is what ultimately updates the numbers you see on the Management Report and table virsa_cc_prmvl is updated.
9- You will get the list of total Number of Violations , the Violation count by Risk and Violation Count by Permission
Now you are ready to compare the numbers in the following way, seen below.
10- Log on to your SAP backend system and use transaction SE11 to identify single roles with profiles from table AGR_1016, but note that roles having multiple profiles appear multiple times in this table.Count the number of distinct roles in table AGR_1016.
11- Now, only count those distinct roles in AGR_1016 that have also an entry in AGR_DEFINE. You can do this with a small custom report or with Excell.
12- In your SAP backend System use transaction SE11 to count the number of profile in table USR10 having the flag 'AKTPS' set to 'A'. Each profile appears only once in this table.
This number should match the number on profiles synchronized in Risk Analysis and Remediation.
Thanks,
Mohi

Do you know of any date specific transactions for year end processes?

We are using SAP ECC6 SD, MM, FI, CO with COPA. Our number ranges are not year specific. We have control of currency conversion rates and they are allowed for.
I have gone through all the end of year transactions listed in our manual and cannot see any that must be carried out on the last day and cannot be done retrospectively. However, we have previously had problems with this in other systems so, just to be sure, does anyone know of any SAP transaction for end of year processes that must be carried out on the last day, and only the last day, of the period?
Thanks in advance
David

Hi,
Though the period end activities are not date specific, there surely exists an order with which it should berun.
Regards,
Sridevi

Transaction to a role

Hi Guys,
I want to find the list of tocdes assigned to a role.
I checked it in table agr_1251 it gave 194tcodes.
But when checking through suim->transaction->excutable fora role it shows 202 tcodes.
COuld you please suggest me which procedure is correct or which can be employed to collect the tcodes assigned to a role.
Regards,
Adithya G

suim->transaction->excutable fora role
Have you read what this report is actually checking? It is not just about S_TCODE but whether the role has the authorisations to start the transaction (SE93 definition of transaction may have additional check)
also, it looks like it's evaluated the generated profile of the code (i.e UST10s/UST12) for S_TCODE access. If you have maintained PFCG but not generated your profile what appears in the AGR_1251will not match the UST* entries.
Suggest you read the help information for that transaction
COuld you please suggest me which procedure is correct or which can be employed to collect the tcodes assigned to a role.
the procedure depends on whether you want to know:
all transactions in the role menu (AGR_TCODES)
all S_TCODE authorisation access AGR_1251 or UST12
all executable transactions in role (SUIM report you ran)
If you read the help information and look at your role build you will probably be able to figure out that procedure yourself.
Regards
Colleen

Listing transactions for ranged roles

Similar Messages

Maybe you are looking for