Maintaining the authorizations for parent role and derived role
Hi Experts,
Kindly advice me the Pro and cons of the parent role and derived role.. below is the scenario
Currently we have created the 700 role in our regionally organization and we want to dervie the roles for each country
1 ) we want to do the Auth field (activity level) settings in parent role and Org levels in the derived role .
2) But one my collegue says do the default Auth filed ( activity values) common to every country in the parent role and diff activity one in the derived role .
please advice me wat will be the best scenario for mantaining the authorizations filed values like (activity level one)
I will try to answer both your queries here:
"my collegue says they are some NON ORG values different from each country ..suggest us to maintain all the default values in Parent role and auth with diff values needs to be maintained in derived role (child role).. "
The only set of values which should/can be different in a child role (when compared with its parent) will be the org level values. So if this filed is NON_ORG you will not be able to maintain it directly inside the child roles.....this is the basic principle of derived role conceptu2026 that the only item you will directly maintain in a child role are the org levels(which will come as u2018organisational levelsu2019 in the upper tab in the auth data of a role).
All NON_ORG fields inside a child role is acquired from the parent role. You should never change the values of any such fields (non-org fields) in the child role. these changes will get lost the next time you run the parent child inheritance from u201Cgenerate derived roleu201D function in your parent role.
Coming to the second question on how to run the program, you just need to enter the technical name of the field you want to convert (tech names like BUKRS, WERKS etc u2026 figure out the name of the concerned field you have in hand)u2026.executeu2026 you will that the field will now onwards appear as an org level value in all roles in the system and not just as a field inside the auth objectsu2026.I would suggest you take one field and try running it in ur dev or sandbox..see how the field changes in your roles.... the change can always be reverted by using PFCG_ORGFIELD_delete. ... you will understand it better....
Soumya
Similar Messages
-
Master role and derived role concept
Guys,
1) How to assign the organizational levels for the derived role?
Say for example, I have to create the derived roles with respect to the plant code.And after inheriting the tcodes ,authorizations from the master role , I noticed a pop up page with organizational level tabulation and I assigned the respective plant code there and in the same way for all the following derived roles.But the rest of the rows like company code,sales organization,distribution channel etc which are seen in the tabulation are left empty.I noticed that all the fields which are left empty in the org.levels of the derived roles are been filled up with the vaules of the corresponding master role org.level values when the derived button icon , which is seen under the authorization tab of master role is pressed.So pls let me know the correct procedure to assign.*Do we really need to maintain org.values for master roles?*
2) If a master role is transported to QA or PRD, will the derived role along with it move automatically?
3) Is master and derived role tested parallely in the QA system or first master role is tested ,followed by the derived role?
4) According to my understanding we dont assign any user to the master roles, but why do we move it to PRD?
Greatly appreciate for some body's help.> 1) How to assign the organizational levels for the derived role?
> Say for example, I have to create the derived roles with respect to the plant code.And after inheriting the tcodes ,authorizations from the master role , I noticed a pop up page with organizational level tabulation and I assigned the respective plant code there and in the same way for all the following derived roles.But the rest of the rows like company code,sales organization,distribution channel etc which are seen in the tabulation are left empty.I noticed that all the fields which are left empty in the org.levels of the derived roles are been filled up with the vaules of the corresponding master role org.level values when the derived button icon , which is seen under the authorization tab of master role is pressed.So pls let me know the correct procedure to assign.*Do we really need to maintain org.values for master roles?*
Only if you assign the master roles to users. (and maybe for testing, see 3)
>
> 2) If a master role is transported to QA or PRD, will the derived role along with it move automatically?
Nope, but if one of it's derived roles is transported the master is automatically included in the transport. You'll have to make sure all derived roles are transported yourself.
>
> 3) Is master and derived role tested parallely in the QA system or first master role is tested ,followed by the derived role?
Best order is to do all unit testing wit the master, with all org levels at * and create the derived roles only when the master is tested and corrected to satisfaction. In that way the derived roles only have to be tested for organizational shielding.
>
> 4) According to my understanding we dont assign any user to the master roles, but why do we move it to PRD?
See 2, it goes there automatically. No choice.
Jurjen -
Manually added auth objects and Derived roles
If there are manually added auth objects in the parent role do they come across to the derived roles?
Also if you manually added auth objects into a derived role will they be overwritten by the parent role if you auto derive from the parent role?yes, any auth objects will come across to derived roles when you click 'generate derived roles' from your parent role. basically its copying your parent role authorizations to derived roles except org. level data( if you had maintained them thru 'org. maintainence' button and not adding in individual objects).
yes. manually added auth objects in your derived roles will be overwritten by the parent role authorizations when you click 'generate derived roles' from your parent role.
if you just derived the role menu and din't copy the authorizations(generate derived roles) then there will not be any interlink between the parent and derived roles for authorizations.
http://help.sap.com/erp2005_ehp_02/helpdata/en/1c/c38028816c11d396bc0000e82de14a/content.htm -
Authorization for material type and material views
Hello all,
I would need to restrict a user group, in creation (MM01) and modification of material master, based of type material and material views.
The authorization, for each user should be:
- view, modify and create of all views, except accounting (B) for type material ZFER;
- view, modify and create of all views for type material ZOFF.
I tried to create 2 roles in PFCG with the following authorization objects:
1) M_MATE_MAR (Material Master: Material Types) ACTVT = *, BEGRU = ZFER and M_MATE_STA (Maintenance Statuses) ACTVT = *, STATM = A,C, D, E, F, G,K, L, P, Q, S, V, X, Z (excluding B)
2) ) M_MATE_MAR ACTVT = *, BEGRU = ZFER and M_MATE_STA ACTVT = *, STATM = B
but the effect is to be authorized, to all view for material type ZFER and ZOFF.
I have already updated the authorization group of the type materials (OMS2).
Is there a solution for this problem?
(component version SAP ECC 6.0)
Thanks.
Regards,
LucaI tried to create 2 roles in PFCG with the following authorization objects: 1) M_MATE_MAR (Material Master: Material Types) ACTVT = *, BEGRU = ZFER and M_MATE_STA (Maintenance Statuses) ACTVT = *, STATM = A,C, D, E, F, G,K, L, P, Q, S, V, X, Z (excluding B) 2) ) M_MATE_MAR ACTVT = *, BEGRU = ZFER and M_MATE_STA ACTVT = *, STATM = B
- Are both these roles assigned to the same user? then your purpose is not solved, It is more or less like giving full authorization.
- One role should be
M_MATE_MAR (Material Master: Material Types) ACTVT = *, BEGRU = ZFER and M_MATE_STA (Maintenance Statuses) ACTVT = *, STATM = A,C, D, E, F, G,K, L, P, Q, S, V, X, Z (excluding B) for view, modify and create of all views, except accounting (B) for type material ZFER. This should be assigned to one user
- Second role should be
M_MATE_MAR ACTVT = *, BEGRU = ZOFF and M_MATE_STA ACTVT = *, STATM = * for view, modify and create of all views for type material ZOFF. This role should be assigned to the second user.
Regards,
Subbu -
i have a line drawing (black on white paper) i have scanned and need to make the white paper transparent, maintaining the line drawing, can i and then HOW can i do this in PS? this is for my business logo. ive used it for years but with a solid background. id like to have it just be the drawing over my photos with a transparent background.
First let me apologize for posting a reply that was only suitable for advanced users. Photoshop is broad and powerful therefore has a huge learning curve. In fact I would state no one knows and uses all of Photoshop. When we first get Photoshop it intimidate us and we're very uncomfortable using it. Many thing are not intuitive there in much learning involved. After some time we begin to know something and we are able to do some thing. Learning become rapid and we start playing in Photoshop. It is very important to play with Photoshop. Playing with Photoshop and asking for help with in forums like this IMO is the best way to learn.
Photoshop Power lies in layers, selection and automation. However it takes knowledge to use photoshop well so most powerful tool you have ins Photoshop is the gray matter between your ears. Most at one time or another want to watermark or put a logo on their image. So its best to automate this process. All run into a problem in the process. "Size" We find our assets vary in size and aspect ratios. Landscape, Portraits, Panoramas and others. This complicates automation. Vector graphics works best when size vary greatly. If you can not work out how to create a vector solution like a custom shape. Create your Logo and watermark large thing scale down better the up. Text scale well for text uses vectors graphics however if you rasterize text it will not scale well.
I do not type or do English well so let me do some screen captures. I can not stress enough how important Black, White, Grays and Blending is when it come to image processing. Become friends with Multiply, Screen, Overlay and Luminosity blending.....
However when there is a white or black background though you can blend them you can not add a style like a drop shadow, emboss or make it invisible setting fill to 0 so only the style is visible. When there is contrast between the logo and background it is easy to separate the two. To select the background and delet it to have the logo with a transparent background. Many tools can be used to create the selection hee I use my action kill white.
Vector Shape would work better for scaling However it would be best to create the logo from scratch in a vector program like illustrator but I never had the resources to justify the Creative suite. I only had Photoshop. Recently Adobe gave me and other a year subscription to the creative suite for our participation here. I still have not installed anything but Photoshop, A while back I found a program that can create vector patf for black and white art work. It will not be as good as using something like illustrator. However vector paths can be edited in Photoshop and cleaned up some. Here is the PSD it 13MB because od the gradient http://www.mouseprints.net/old/dpr/AmPm24-7.psd -
Siebel BIP Integration Objec for Parent, Child and Grand Child
Hi,
I 'm trying to create a one report for displaying Parent, Child and Grand Child.
Service Request
- Quote
- Quote Item.
Successfully create the BIP Integration object and generated the xml file. problem here is when trying to include the fields in BIP desktop word, not able to see the grand child fields, could see only the parent and child fileds and for grand child only 'ListOfQuoteItem' text.
Could some one please let me know the reason for this behavoir and wherther BIP supports 3 levels.
Is there any Out of Box Siebel report showing parent, child and grandchild.
Thanks,
Ravi kanthOne Siebel Adapter Upsert operation should be sufficient to insert the parent and child. In the Integration object definition, you define the Template child instances with the Parent of Template. i.e
You define Template first as an Integration Component and then define
Template child instances to have a Parent as Template.
Thanks
Swarna -
Maintain the variants for the deletion program
How to Maintain the variants for the deletion program during Document Archiving
Try this.
Execute SE38 and Select the program name ( Archiving )
Click Variant and Click Change Icon
and entry the new Variant and click Create icon and save with your own values
Ensure that System setting from the menu bar Settings - User Specific Settings PopUp Screen - Repository infosystem Tab - All Selection Criteria
Hope this Helps
Thanks
S.N -
Maintain the variants for the deletion program first
Hello Experts,
When i am trying to archive documents through SARA Transaction, am getting the following error "Maintain the variants for the deletion program first".
Awaiting your early reply..
Rgds
RamanaYou get this message because there is a new program being used for this archive object. In addtion to adding a comment to the default variant, it would be wise to test the program in your QA system and review OSS for any updates.
-
System Status Authorizations for Marketing Plans and Campaigns
Hi Experts,
We are using the Standard System Statuses on the Marketing Planner like the Created , Released, Approved, Finished, Locked and Rejected. My requirement is to limit the access to the Users for these Statuses. For Example :
User 1 will have access to Created.
User 2 will have access to Aproved.
User 3 will have access to Aproved,Released, Create
How do I set the Authorizations for the System status based on the User? I tried creating Authorization Keys under Status Profiles, but I am not clear on where to assign them.
Please guide me.
Thanks in Advance.Hi ,
Thanks for your input. I am planning to go with your second option to go with assigning the Authorization objects at the Marketing Plan and also at the Campaign level . My only concern here is will we be able to assign status specific authorizations here ?
The Authorization objects given are for change, create etc. There are no status specific authorization objects mentioned. My requirement is the person who creates the MP should have access to release it and only the approver should be able to see the approved status and change the status o approved.
Do you suggest using Authorization keys and assigning them ?If so where do we define the restictions on the Authorization keys like
Authorization Group 1 has authorization to Create , modify a MP and can only View / Change the statuses to Create and Release.
Authorization Group 2 has access to Modify and has access to change the statuses to Aproved.
Is there any way this can be achieved ? Please let me know if I am going in the right direction.
Regards,
Pooja -
My macbook pro's screen display has suddenly gone into a strange colour setting where everything appears in a kind of infrared colour palette an I can;t seem to change it back. It's the same for all icon and websites, does anyone know how to restore?
Wow! I think I had this same issue just last night.
I was cleaning my macbook pro retina on the outside. Then I opened it up and was wiping dust off the monitor and I can't pinpoint exactly when, but the colors changed suddenly. It looked super strange, it was like green halo's and it looked worse when looking at it at an angle. Of course I took no pictures!!! I was freaking out that my 2 grand laptop was busted and I somehow removed a protective film or something.
But I digress... The image looked very green and spacey, it was almost a neat effect. After about 5 minutes it started to look a little more digital though. There were straight lines of this halo effect on the edges and top. After about 10 minutes it turned into a predominate issue with the blacks on screen. I could open a web browser and it was unnoticable on a white background. After about 15 minutes, you could only barely see the green cloud effect if you looked at the monitor from an extreme angle. After about 20 minutes, it was completely back to normal, I almost feel paranoid like I see a halo or something strange. But I believe that might be all in my head now.
So yerp, lemme know what you guys figure out. -
updated my mac to mountain lion 10.7.8.3 and now my app store, mail or facetime won't open. Also, I am not longer able to play videos through firefox. I tried downloading the combo for mountain lion and it refuses to install saying that I need to see developer. Whenever I try to open my appstore, mail or facetime it says that the programmes need to be installed and might not be compatible with this version of mac operating system. Can anyone help me?
It's not a bad install of Mountain Lion. I've had the same thing happen to me, but it affected not only Mail, but a variety of other programs including iPhoto and MS Office, where I had to delete preferences, caches, and reinstall the OS as well as the program itself. I'm still having issues with Mail, so I've gone to another program.
Everything was fine upon the initial install. I restarted my iMac about two weeks after the install, and that's when the issues began to happen. I've reinstalled Mountain Lion twice, but the same issues arise.
As I mentioned above, you'll need to figure out which preferences are causing the issue, then reinstall the program, as a fresh reinstallation will do you no good unless you wipe the drive completely.
Here's a thread that helped me with iPhoto:
https://discussions.apple.com/thread/4794375?start=0&tstart=0 -
I need help iTunes 10.6.3 Mac running 10.7.3 not responding I have deleted iTunes and reinstall iTunes and it keeps happening I also scanned the computer for any trojans and any other possible viruses but the pc is running perfect waft do I do ? Please help me ?
Hey thanks for replying.
Here's what I did:
First I tried the Winsock reset in the Command prompt. Nothing changed.
Next, I tried the instructions on http://http://support.apple.com/kb/TS4123. The only other program that came up on the 'Winsock Providers' tab on the program was 2 Windows Live applications, which I can do without. So I deleted all Windows Live Applications.
I did the Winsock reset in the Command Prompt again and rebooted my comp.
Unfortunately, nothing has changed. iTunes keeps freezing at various stages of the sync, then shows the candy cane-striped bar with either the words 'Finishing sync' or 'Cancelling sync', before showing the Apple logo.
Sometimes, iTunes gets to the syncing stage - "Copying # of ####" - where it will trudge through the first, second and third tracks before flashing "Copying 4 of ####" for a split second and I catch "Cancelling sync" briefly before the Apple logo appears.
Again, I've repeated the steps I mentioned in my previous post. Does ANYONE know when the new version of iTunes is set to be released?! This one is driving me INSANE, to say the least!! -
How can I monitor my monthly data usage for all 3 computers in my house? I have an Airport base station and it seems there should be software to monitor it from that point rather than monitoring the usage for each computer and then adding it up.
The following example was one of dozens that showed up on a simple Google search of.....
monitor Internet data use on a Mac
Watch your Internet usage with NetUse Monitor | Macworld
Most service providers have an application for their users as well. -
I was using the iCloud for my iPod and had recorded several irreplaceable Voice Memos. It went up to the Cloud, but I wasn't too savvy with the Cloud at that point, so it wasn't syncronizing to my home computer. So, the thing is that the iPod died and the backup is in the Cloud and I would like to load the backup to my iMac to recover my data. How can I do that? Thanks
The new device I got to replace the iTouch is a iPad and I don't see the playlist I created with previous voice memos on it at all. Is there any way to access them on the iPad? If I erase the iPad and restore it with the old back up will the Voice Memos come along and get in to my home computer or will I be out of luck?
-
After upgrade my Iphone 4 to iso5, I can't add contact and I can't access the settings for mail,contacts and calender. The moment I select the setting for Mails, Contact and Calender it will jump back to home. Can someone advice what's wrong with it?Problr
Dear All
i have done the same activity ( buy a new iphone 4 -> upgrade to ios5 - > configure email) with success-
than when i start to move the contacts from old mobile to iphone (using the microsim) i receive the same crash
in disgnosis e use i saw 2 dump with this title 'latestCrash-Preferences.plist and LatestCrash.plist. in each file the date is the same and i read:
Exception Tyle: EXC_CRASH (SIGABRT)
Exception code: 0x00000000, 0x00000000
Chrashed Thread: 6
in thread 6: name: Dispatch queue:
com.apple.addressBookUI.ContactsSettingPlugin
and thaan a lot of data.
Have you any idea?
thank in advance
Fabio
Maybe you are looking for
-
I need help to do with downloading apps.
My apps aren't installing and I'm not able to update the ones I already have either. My server is fine because I checked by downloading some apps on the other iPod touch. And I've downloaded apps before. It's just from very recently that this has bee
-
Does anyone know how I can get four never ending loading aps that never finish loading? One of them is Skype. The other one is a gps ap for Spain. I don't want to delete them and re install for fear of losing all. I already lost hundreds of photos an
-
When I try to update to the newest version of itunes it won't let me. Why?
When I try to update to the newest version of itunes it won't let me. Why?
-
Audio extract - how do I put it back in?
I extracted audio from a clip and now the clip does not have audio in it... how to I put the audio back into the clip after extracting it?
-
Not seeing other Macs on network (but the G4 did)?
My new Mac Mini is connected via ethernet to my FIOS router (same connection as my now-dead G4 tower which had OSX10.4.11). Internet connection on the new Mini is fine. Dear Daughter number one can print to the printer connected to my Mini with her M