Mass change of user roles

Dear all,
we have created near by 20 user roles in our BW system for one area, the roles consist of the same authorizations but different company codes.
Now we must extend all this roles by some settings.
Is there a tool or a helpful way to change all roles together, because all roles will get the same changes.
It will take a lot of time to change all roles manually.
It could also be, that I must change this roles in the future again,
therefore we need an effective solution for this problem
with best regards Osman Akuzun

I would often try recording the first change as a test script in SCAT, then export a default variant and try updating all the roles at once. With PFCG this method is prone to error if the roles have different amounts of authorisation objects in them.
Also, if you don't like the above method, use SUPC to group the roles in an overall list, then work through each one methodically - the advantage with using SUPC in the "All Roles " mode, is that you can access the authorisations directly rather than having to go into Role description tab, choose auths tab, hit the pencil. might not sound much but if you ar changing a lot ANY time saver is welcome

Similar Messages

Mass Change for Indirect Role Assignment

Hi all,
I am in the process of changing the companys authorisations from a standard SU01 role assignment to a position based indirect role assignment.
At the moment I am using PFCG going to the Org Mg button under the User tab then attaching the position that way. Is there a way of assigning more than one role to a position at the same time?
Is there a Mass Assignment option in PFCG or is there a separate transaction available to make this process quicker??
Thanks for your help
Ian

you can mass-assign people and roles if you go to transaction PPOME instead of PFCG. to make role assignments from PPOME please apply note 578271 first. be careful whilst implementing this <insert nasty word here> note because some of those view-clusters tend to refuse to load your changes = you can see them, but they don't work - might be you will have to flush table buffers for the changes to take effect.

Mass Changes to Users

Dear Gurus,
We are in work of cleaning roles in the systems.
For this, I'm using SU10 for deleting a role assigned to 1000 users.
But I'm not able to see the changes after this was done.
Please do help me in this.
Regards,
Suren.

Good question, we did it last week with our education users, but it seemed not to work. We only had to change 10 users, so we did it manually, that was faster.
Are there any other suggestions?
Best Reagards,
Marcel

Changing User Roles

Hi,
I need to change the user roles from Admin to some other roles from transaction. Is it possible to do this without going into UME and java codes? How to do this from BLS transaction?
Regards,
Senthil

Sentil,
I do not know BLS, but if you are trying to change Java users then you have to use a Java application like the UME identity management application to change them. You can change ABAP users with this application if the data source of the UME is the ABAP system in question. The standard ABAP tools for managing users and roles are SU01 and PFCG. Does that help?
-Michael

Mass change the steps user in released SM37 jobs

Hello,
I wonder if there is a possibility to mass change the user entered in the steps overview of a released job.
I know that in the Table TBTCS the Jobowner is saved and in TBTCP I can view the user entered in the steps overview but only for jobs which have already been executed, does anyone of you know which table keeps the steps user for a released job?
Kind regards
Florian Wittmann

Yes, I know but this table does not contain the owner of the steps executed by the Job, only the job owner. The step owner is saved in TBTCP, but in this table I am only able to identify the already executed jobs not the relesed ones...Regards Florian Wittmann

BAPI (FM) to maintain User Roles

Hello ABAP Experts,
I´m looking for a BAPI or FM which could create/change the Users Roles, like in TX PFCG.
Backround: We like to change the area menus in users roles in a nightly batch job.
Has anybody an idea? Thank you very much in advance.
Kind regards
Axel

Hi Micky,
thank you for reply.
the function group and function module your mentioned is just to change/create a role assignment in user masterdata (TX SU01) but not to change/create the role (TX PFCG) itself.
Any other ideas?
Best regards
Axel

User roles were deleted for the mass change in CUA system.

Dear Team,
I have assigned a role to a set of users in CUA via SU10 to a specific child system, as like I have executed the task 3 to 4 times for the assignment of the different roles to a set of users and some users may repeated in each execution .
And when I check in child system after few hours the old roles were deleted and contains the role which I have assigned in the mass change.
It was happened only to few users not more than 20 users, then I expected that may be the users who get repeated in SU10 more than one time for the different role assignment it get impacted.
But that is not a problem, because I verified some of the users who repeated more than one time in child system and they didnu2019t get deleted the old roles and it was appended with the new role to the existing rights of the user.
Still some of the IDOC were showing in SCUL transaction with Yellow signal triangle shape
So please help me out what would be the issue.
Kindly let me know if need more information....
SV

Hi,
It is a problem related to IDOC issue. Please contact Basis Team regarding pushing of the Idocs. I am giving an over view of the steps that needs to be executed for idoc push. Please contact Basis with the same.
Run RBDAGAIN report (se38)
Give Idocs and save as variant.
Now go to sm36 specify a job name and start.
This will change the Idoc status from 02 to 30. For 03 to 30 it needs a different report. Please check and let me know if any issue. As long as idocs are not pushed properly it will give an error. At times also check the CUA user is ok or not. It gets locked at times. To know which one is the CUA user->Login to child system->su01->See the change executed by the user->Get the user name.
Let me know if any issue.
Regards
Aveek.

Mass deletion of SAP roles from users

Hello All,
i need to delete all assinged roles from a big number of users. I know the users but not the roles which the users have. I need to delete all roles from the users-id's.
I know SU10 and i can select all my needed users. But in the role tab i can not work with roles-names like Z* to delete. I can select all z*-roles and select "remove" but when i click to save, i get the message no changes made on the users???
Any idea?
Gruß
Toni

Hi David.
David Berry wrote:
I take it this is being run in PRD? What checks are being carried out during the table entry deletions and are you 100% happy sitting at your keyboard when pressing the 'run' button?
Changes are made in PRD. The program was tested and is approved by each customer.
Is there an easy way back to the previous state should it go wrong and how do you explain it to the auditors if needed that you assigned-number of roles in PRD against your own user ID possibly with no CDHDR/CSDPOS entries to back you up.
Sorry for the 'negative vibes' but I don't like direct table maintenance in PRD for security.
Best wishes
David
The way back is uploading the old role assignment previously exported from AGR_USERS. The program takes an excel sheet. In addition this excel sheet is attached to the change requests.
From risk perspective we say (and experienced): mass changes through copy and paste lead to much more errors and faulty authorizations.
Regarding direct table maintenance: standard function modules are used (like the one mentioned above) and the changes are visible in the change documents, Therefore the auditors grant an exception for using such tools.
Cheers, Tobias

Mass change of authorization objects in several roles

Hello,
we have to change a authorization object in almost 200 roles. Is there any possibility for mass change of authorization objects in several roles? We don't use the central SAP user administration.
Best Regards
Andreas Walter

> at the moment all entries has the value "*". We want to change this value into "0001".
Good!
Here comes:
1- download all relevant roles in once from PFCG. Make sure you use an appropriate codepage so you don't loose special characters in the role and menu texts.
2- copy and backup the download file
3- in the download file (is a text file) look for all lines starting with AGR_1251 and conatining M_MATE_WGR and the field you want to change
4- take out the star and two spaces and replace by 001. This file is a set of fixed record length table exports and keeping the original length is very important.
5- upload the edited file and generate the profiles.
As you may see this is not SAP standard and completely at your own risk. Best try in a sandbox client first.
Good luck!
Jurjen

Changing Portal Role after the status change of user status at the CRM end.

Hi,
I have Portal with Java database as the default and CRM is connected to it using SSO.The database in both the case in separate.The users that are created in Portal will have a BP status in CRM sytsem.
Now my requirement is that if the status of the BP gets changed at the backend simultaneoulsy its Portal role should also gets changed.How shall i facilitate this procedure of changing the Portal Role?
Is there any RFC ,BAPi or Webservices required for this?
Regards,
Amarys
Edited by: amarys on Sep 13, 2011 11:20 AM

Hello,
Since the status has no number it will appear under statuses W/O number bottom right in status overview window.
These status will appear as additional text beside current user status. For example if user staus is BUG and status without number is DFL and sets when deletion flag is set and gets deleted when it is revoked than user status will appear as
BUG DFL -
Deletion flag set.
BUG -
When deletion flag revoked.
You have to live with it. I don't think there is a way out for that.
Thanks
Saikishore Ganga.

SECATT - Mass creation of users with different assigned roles

Hello! I've been tasked with creating an eCATT to do a mass creation of users and each user will have a different role assigned (besides the general roles). We're doing this to test out the different roles we have created. I've done some searching through the forums and found some different ideas but I'm not sure they are exactly what I need. One suggestion was to use SU10 to make the role assignement but I'm guessing I would still need to setup a parameter for each role so I would initially need to know how many roles would be entered. I would like for the eCATT to be able to handle assigning multiple roles to a user with each user possibly getting a different number of roles. Would anyone be able to suggest a way to assign different roles to different users through an eCATT?
Thank you!

Hi Wendy,
To create users, maybe SU01 or SU10 can be used. To assign users to a role, maybe you can try with PFCG.
SU01 and SU10 have the view from the user - for each user, different roles can be selected and assigned to that user.
PFCG has the view of roles - for each role, different users can be selected and assigned to that role.
Hence if you know which roles should be assigned to which users, PFCG might be easier.
Hope such information is helpful for you.
Kind Regards, Qian

How to check mass change(vendor) done by any particular user .

Hi,
What is a transaction used to check mass change(vendor) done by any particular user .
Thanks,
Dharmesh

HI
pls try this table CDHDR
Thanks & Regards
Phaneendra

I have 100 groups in planning for those 100 groups i want to build roles like interactive,view user,planner etc.for those how to change in export -import folder .xml file in that edit how to change user roles in that xml it will generate automatic id.h

I have 100 groups in planning for those 100 groups i want to build roles like interactive,view user,planner etc.for those how to change in export -import folder .xml file in that edit how to change user roles in that xml it will generate automatic id.how to do that in xml file ?

Thanks john for you are reply.
I had tried what you sad.I open shared service in that foundation project i had export shared service.after that in import-export file.In that role.csv,user.csv,group.csv.Like this file have.When i open user file added some users after i trying save in excel it shown messgse
I click yes and save the .csv file and import from share servie. i got error like this
am i doing right way john.or explain clearly

User license mass change

We need to classify many of our users in many systems as multi-client.
If you do an individual SU01 change on the license tab then multi-client is an option on the drop down.
However if you do a mass change (SU10) the multi-client is not on the drop down!
The same problem applies if we try to do a mass change with the system measurement transaction USMM i.e. multi-system is not on the contractual user type drop down.
Can anyone point me in the right direction to find out where the SU01/SU10/USMM contractual user dropdowns are controlled?
Thanks
Jackie

You will need to look at the config of the IO group to see which fields can be changed.
Make sure the relevant fields can be changed.
Then perform a LSMW on the change IO Master
This will allow you to perfrom a mass change on the IO.

Is it possible to mass change desktop wall paper for all users using WGM?

is it possible to mass change desktop wall paper for all users using WGM?

yes, it's easy - change a machine to the desktop you want (the image must be on all the machines, with the same name, of course), find ~/library/preferences/com.apple.desktop.plist Copy that to your server (or just put it on a flash drive) In workgroup manager select preferences - details - "add". Navigate to that plist. (Optional - hit "edit" and cut and past from "often" to "always", then the user cannot change the desktop at all, if you leave it in "often" it will reset next log-on.)

Mass change of user roles

Similar Messages

Maybe you are looking for