Mass generation of profiles of customize role in sap

Dear All,
I am unable to generate mass profile for customize roles in SUPC.After pressing Generate button its showing "Choose at least One role".

A brave route is to delete the profiles on mass and then mass regenerate. You can even do this in PROD to improve transport performance, but you must be sure that SU24 is perfect.
But as mentioned before, you have to be very sure about what is going to happen and who is changing roles, otherwise all hell breaks loose.
Opening roles in "Edit old status" and then transporting them as a habit in role maintenance is not a good symptom to use this approach - as an example.
If you have used SU24 and do keep the role proposals intact, then it works very nicely and you can upgrade all your roles in about 1 day - max 1 week.
If you want to do a lot of checks against historic Excel lists and manual regression testing (with manual / changed authorizations which are divorced from the menus) then you are looking at between 1 month and forever to upgrade the roles...
For me, the concept of "forever maintenance" means start over from scratch in the design.
Cheers,
Julius
Edited by: Julius Bussche on Apr 29, 2011 12:06 AM

Similar Messages

Significance of Mass generation of profile

Hi friends
what is the significance of mass generation of profile
regards
krishna

Hi Krishna,
Mass generation of profiles is used to determine which roles already have authorization profiles. Its a post installation Basis activity to make all roles active.
In case you create new role or modify the existing one, you have to generate profiles for that role individually. You can limit the choice of roles.
You do it using transaction SUPC. Its also possible to generate the missing role authorization profiles in the background.
Regards,
Prashant
Do reward points for helpful answers

Mass Generation Of Roles

Hi
Which option does user have to choose from the list to output the mass generation of roles at PFCG?
Nag.

Hi ,
unfortunately there is no way in standard to bypass the manual work.
IF SU24-values have been changed for a t-code, all roles that contain that t-code, have to be adapted manually and afterwards regenerated.
The profile gets the status ' To adjust' until you have maintained the authorizations once and saved. Until then no mass generation (SUPC) will be able to regenerate thos profiles.
Please consider enough time to adapt your roles during your test upgrade. A good idea is to adapt all roles to the new authorizations in a test environement and save them afterwards in a transport. AFter you have performed the upgrade in your productive environement, you can import then this transport and you don't have to perform this time consuming 'adaption-work' again in your p-environement....
b.rgds, Bernhard

Su25 - mass generation of roles

Hello,
I have one problem in my upgrade project that...my client has done the upgradation but he has not done that su25 2a - 2d steps....noe i want to do that 2c steps to complete
when i clicked it 2c steps in su25 it shows me long list of roles to be maintained ...os is there any way to do maintainance of all the roles at the same time....and generating all profiles in the roles at the same time....
awaitng for ur reply....will give full reward for usefull answer

Hi ,
unfortunately there is no way in standard to bypass the manual work.
IF SU24-values have been changed for a t-code, all roles that contain that t-code, have to be adapted manually and afterwards regenerated.
The profile gets the status ' To adjust' until you have maintained the authorizations once and saved. Until then no mass generation (SUPC) will be able to regenerate thos profiles.
Please consider enough time to adapt your roles during your test upgrade. A good idea is to adapt all roles to the new authorizations in a test environement and save them afterwards in a transport. AFter you have performed the upgrade in your productive environement, you can import then this transport and you don't have to perform this time consuming 'adaption-work' again in your p-environement....
b.rgds, Bernhard

Mass generation of Derived Roles

Hello,
SUPC helps me in Mass generation of Master Roles. But how do I generate Derived roles in a lot?
Thanks.

Hello,
we also missed this function when we started using derivation of roles. I developed some years ago a program which does this, also possible to start it in background mode. It runs daily (in front of PFCG_TIME_DEPENDENCY) and adjust derived roles from updated parent roles (which came into the system via transport request).
Because I developed the program in my working time it's owned by my company, therefore I can not post the source. Just a few hints:
- parent roles and derived roles: you will find them in table AGR_DEFINE
- roles imported into the system: with function module TMS_TM_GET_TRLIST you can get yesterday's imported transport requests, you can read the object list with function module TMS_WBO_READ_REQUEST (those with R3TR ACGR have roles in it).
- build up an internal table of parent roles (consider the derivation level: first process the top level role, then it's derived roles, and then their derived roles and so on).
- use function module SUPRN_TRANSFER_AUTH_DATA for adjusting the derived roles of a parent role.
HTH and kind regards
Jens Hoetger

Background job fails for BDC profile creation and role assignment

Hi Experts,
I have created a BDC Function module for Tcode 'PFCG' for profile creation and role assignment, and called this FM in my zprogram. the problem is that when i run this program in foreground it executes succesfully, but if i schedule it in background it fails throwing error in job log 'Role 'Z...' does not contain any active authorizations'. But i have created one more program to create authorization objects which runs before this zprogram.I have also checked the authorization object in 'RSECADMIN', it reflects active. I dont understand whats happening exactly when it runs background.
Below is the process of job
   1. ZMIS_AUTH_OBJECT_CREATE
       Variant : auth-create
   2. ZMIS_AUTH_ASSIGN_TO_ROLE
       Variant : auth-assign
The problem is in second program, runs in foreground but fails in background.
Code which i have written in my second program
***BDC for Profile creation and assignment to Roles
    CALL FUNCTION 'ZROLE'
      EXPORTING
       ctu                     = 'X'
       mode                    = p_mode
       UPDATE                  = 'L'
*   GROUP                   =
*   USER                    =
*   KEEP                    =
*   HOLDDATE                =
       nodata                  = '/'
        agr_name_neu_001        = wa_role-role_name
        text_002                = wa_role-desc
        text_003                = wa_role-desc
        text_004                = wa_role-desc
       value_01_005            = 'T-ML330881'
        h_fval_low_01_006       = wa_role-auth
        profn_007               = lv_profile
        ptext_008               = lv_text1
* IMPORTING
*   SUBRC                   =
     TABLES
       messtab                 = temp_message.
***Generation of Profile created
CALL FUNCTION 'PRGN_AUTO_GENERATE_PROFILE_NEW'
     EXPORTING
       activity_group                      = wa_role-role_name
*     PROFILE_NAME                        =
*     PROFILE_TEXT                        =
      no_dialog                           = ' '
      rebuild_auth_data                   = ''
      org_levels_with_star                = ' '
      fill_empty_fields_with_star         = 'X'
      template                            = ' '
      check_profgen_tables                = 'X'
      generate_profile                    = 'X'
      authority_check_pfcg                = 'X'
   EXCEPTIONS
     activity_group_does_not_exist       = 1
     activity_group_enqueued             = 2
     profile_name_exists                 = 3
     profile_not_in_namespace            = 4
     no_auth_for_prof_creation           = 5
     no_auth_for_role_change             = 6
     no_auth_for_auth_maint              = 7
     no_auth_for_gen                     = 8
     no_auths                            = 9
     open_auths                          = 10
     too_many_auths                      = 11
     profgen_tables_not_updated          = 12
     error_when_generating_profile       = 13
     OTHERS                              = 14 .
Experts please help me out its very urgent. your help is appreciated and rewarded. Thanking you in advance.
Regards,
Chetan

Hi Praveen,
Yeah definately, my requirement is that I have to access of some BI reports to certain users, so contract data will be downlaoded from ECC on application server, need to read that file from application server and for the each contract i ahould create a authorization object, role creation and assigning of role to the user and profile generation and activation.
To achieve this i have written two programs
1) ZMIS_AUTH_OBJECT_CREATE- This program will create the Authorization Object using BDC and Role creation Using the BAPI
"" Creation of Authorization Object
CALL FUNCTION 'ZAUTHOBJ'
        EXPORTING
         ctu                    = 'X'
         mode                   = p_mode
         UPDATE                 = 'L'
*   GROUP                  =
*   USER                   =
*   KEEP                   =
*   HOLDDATE               =
         nodata                 = '/'
         g_authname_001         = 'ZDUMMY_MIS'
          g_targetauth_002       = wa_tab-auth
          g_authtxt_003          = wa_tab-short_desc
          g_authtxtmd_004        = wa_tab-med_desc
         marked_04_005          = 'X'
          g_authtxt_006          = wa_tab-short_desc
          g_authtxtmd_007        = wa_tab-med_desc
         tctiobjnm_04_008       = 'ZBUS_UNIT'
          g_authtxt_009          = wa_tab-short_desc
          g_authtxtmd_010        = wa_tab-med_desc
         marked_05_011          = ''
         opt_01_012             = 'EQ'
          low_01_013             = wa_tab-bu
          g_authtxt_014          = wa_tab-short_desc
          g_authtxtmd_015        = wa_tab-med_desc
         marked_04_016          = 'X'
          g_authtxt_017          = wa_tab-short_desc
          g_authtxtmd_018        = wa_tab-med_desc
         tctiobjnm_04_019       = 'ZCONTRCT'
          g_authtxt_020          = wa_tab-short_desc
          g_authtxtmd_021        = wa_tab-med_desc
         marked_05_022          = ''
         opt_01_023             = 'EQ'
          low_01_024             = lv_contract
          g_authtxt_025          = wa_tab-short_desc
          g_authtxtmd_026        = wa_tab-med_desc
          g_authtxt_027          = wa_tab-short_desc
          g_authtxtmd_028        = wa_tab-med_desc
          g_authname_029         = wa_tab-auth
* IMPORTING
*   SUBRC                  =
       TABLES
         messtab                = temp_message.
"" Creation of role
LOOP AT it_role INTO wa_role.
      CLEAR wa_text.
      wa_text-text = wa_role-desc.
      wa_text-langu = 'E'.
      APPEND wa_text TO it_text.
      wa_jobrole-agr_name = wa_role-role_name.
      wa_parentrole-agr_name = 'ZM_CT_DUMMY_MIS'.
      wa_method-usmethod = 'CHANGE'.
      CALL FUNCTION 'ZBAPI_JOBROLE_CLONE'
        EXPORTING
          jobrole          = wa_jobrole
         parent           = wa_parentrole
         method           = wa_method
       TABLES
*   RETURN           =
         shorttext     = it_text
*   LONGTEXT         =
*   MENU_NODES       =
*   MENU_TEXTS       =.
    ENDLOOP.
2) ZMIS_AUTH_ASSIGN_TO_ROLE - This program will generate the profile created assign it to the role.
""*BDC for Profile creation and assignment to Roles
    CALL FUNCTION 'ZROLE'
      EXPORTING
       ctu                     = 'X'
       mode                    = p_mode
       UPDATE                  = 'L'
*   GROUP                   =
*   USER                    =
*   KEEP                    =
*   HOLDDATE                =
       nodata                  = '/'
        agr_name_neu_001        = wa_role-role_name
        text_002                = wa_role-desc
        text_003                = wa_role-desc
        text_004                = wa_role-desc
       value_01_005            = 'T-ML330881'
        h_fval_low_01_006       = wa_role-auth
        profn_007               = lv_profile
        ptext_008               = lv_text1
* IMPORTING
*   SUBRC                   =
     TABLES
       messtab                 = temp_message .
   COMMIT WORK AND WAIT.
""*Generation of Profile created
LOOP AT it_role INTO wa_role.
    CALL FUNCTION 'PRGN_AUTO_GENERATE_PROFILE_NEW'
     EXPORTING
       activity_group                      = wa_role-role_name
*     PROFILE_NAME                        =
*     PROFILE_TEXT                        =
      no_dialog                           = ' '
      rebuild_auth_data                   = ''
      org_levels_with_star                = ' '
      fill_empty_fields_with_star         = 'X'
      template                            = ' '
      check_profgen_tables                = 'X'
      generate_profile                    = 'X'
      authority_check_pfcg                = 'X'
   EXCEPTIONS
     activity_group_does_not_exist       = 1
     activity_group_enqueued             = 2
     profile_name_exists                 = 3
     profile_not_in_namespace            = 4
     no_auth_for_prof_creation           = 5
     no_auth_for_role_change             = 6
     no_auth_for_auth_maint              = 7
     no_auth_for_gen                     = 8
     no_auths                            = 9
     open_auths                          = 10
     too_many_auths                      = 11
     profgen_tables_not_updated          = 12
     error_when_generating_profile       = 13
     OTHERS                              = 14
    IF sy-subrc <> 0.
      MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
              WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
    ENDIF.
ENDLOOP.
For creating authorization objects, role & profile i have created one dummy auth, dummy role & dummy profile respectively.
i have created dummy objects to copy the roles from dummy object and assign the same to new Auth obj, role & profile.
Let me know what needs to be done. because these both the programs run perfectly in foreground, but fails in background.
Regards,
Chetan

SQ01 mass generation of quries problem

i need a sample code or FM for mass generation of SQ01 quries.bcz aftter changing in client i have to regenerate again all quries..so i want some workaround so i can perform this task in one go. any idea?

Hi,
i do not understand why this post is marked as "answered".
The recommended ABAP RSAQR3TR is not usable for the requested mass generation of queries.
(It only covers the transport aspect (export/import))
Can you please give us a short explanation or correct the status to "not answered"
There are two posts regarding the mass-generation of queries, but none of them contains a solution.
SQ01 - Generate program
Query - Mass generation
(The first one is at least a chance and usable via CATT or SE37)
Best regards
Christian

Mass Generation of Sales Orders via Marketing Projects

Hi all,
Is it possible to generete ERP order when using the functionality for mass generation of sales orders via marketing projects?
cheers Camilla

Hi Camilla,
We need to see your requirement by breaking it into two steps. Both are possible.
1) Generating Mass orders in CRM using the marketing Projects.
2) Creating ERP order.
Technically what you want is achievable. Personally i have not done it, but am confident it is possible.
You may refer to these links to get more info.
http://help.sap.com/scenarios_bus2007/helpdata/en/47/31a375878f203de10000000a114a6b/content.htm
http://sap.ittoolbox.com/groups/technical-functional/sap-crm/generate-sales-orders-in-mass-based-on-marketing-campaign-crm-60-2943656
rgrds,
Randhir

Error in generating Profile for Child Role

Hi Experts,
My requirement is to chnage profile for child roles created. I'm using FM 'PRGN_AUTO_GENERATE_PROFILE_NEW' to generate the Profile for child role. However it gives an error saying "Open authorizations or org. levels in role & => no profile generated"
when I execute it. Infact the same error occurs when i run it for parent role also.
But prior to attaching the child role to parent role, profile gets generated with no issues.
Kindly help.
Regards,
Anjali

Hello All/Experts,
I am also getting same error. how to resolve this?
regards
A

Mass generation of activities (for field force) from Trade Promotion

Hi gurus,
is it possible to mass generate activities from Trade Promotions?
I've done it several times using campaigns but i don't know if it's possible from Trade Promo. The business scenario is the following: The Sales manager define some extradisplay for a customer hierarchy node: i'd like to mass generate activities for each BP belonging to that node so that field rep. can check the execution of the promotion.
Any help is appreciated
Regards
Carminem

hi there
its very much possible
first u need to ensure that you have assigned either target group members or, if you are working with a trade promotion, a planning customer.
now follow these steps
1. You create an opportunity template or activity template in the Marketing/Activity Template Details tile set.
2.You define the criteria for determining the employees responsible for the generated activities in the Employee Responsible Details tile.
3.You start mass generation in the Marketing/Activity Templates tile set, and select a target group. For trade promotions, you have the option of selecting either a target group or a planning customer.
4.The application checks whether the opportunities or activities are already generated for each business partner and contact in the selected group.
An activity can be generated only once for a business partner or contact for each campaign or trade promotion.
5.The application identifies generates an activity for each business partner or contact assigned to the campaign or trade promotion by using the relevant template.
6.The application assigns the employees responsible for each activity according to the criteria that you specified earlier.
best regards
ashish

JDev hangs when opening a file in customization role

Using JDev PS5.
when I open JDev in default role, everything works fine.
When i open JDev in customization role everything seems to work fine at first but when I double click on a file to open it, JDev just hangs. It mostly happens when I try to open a taskflow definition. JSF fragements sometimes work, sometimes don't...
It's quite difficult for me to work because I work a lot with WebCenter and I have to customize a lot of taskflows...
I tried uninstalling JDev and installing it again... Didn't work.
I don't have a clue how to solve this...
Edited by: Yannick Ongena on Sep 3, 2012 11:15 AM

Just as a reference...
This is a known bug in JDev with the WebCenter extensions and has been resolved in patch 13948973.

Copy sap_all profile to other role

hi
How i can copy sap_all profile to other role?

Hii sorry for the last post!
But don't just remove the transactions - make the objects display
only. There are many ways into the functionality, but it's controlled
ultimately by the objects
Rohit

Customization role in jdeveloper

I have been trying to customize the taskflows as per the guide(http://download.oracle.com/docs/cd/E17904_01/webcenter.1111/e10148/jpsdg_taskflows.htm#BACDDBII)
i am not able to edit the requied library files eventhough i have opened the jdevloper in customization role
Please guide how can i edit the reuired file in jdeveloper

you can follow the links-
Customizing Announcemet task flow in webcenter ps3
http://www.oracle.com/technetwork/middleware/webcenter/owcs-ps1-custom-taskflow-wp-129410.pdf
http://www.oracle.com/technetwork/middleware/webcenter/owcs-r11-custom-taskflow-wp-129672.pdf
even if ,you have done all the steps ,sometimes some fields are hidden in nature.
For that ,in properties window -Label value will be hidden (for example).then what you need to do is -
Go to exrpession builder for particular component (here label value) and do the necessary modifications.
Hope it will help you.

BP Role in SAP CRM 7.0

Hi Gurus,
As i am new to SAP CRM, not able to understand from where to start the config can anybody help in this regards.
Which are the steps to follow for BP-LEAD-OPPORTUNITY-QUOTATION
and also give your ideas regarding How to create BP Role in SAP CRM 7.0
Thanks in advance....
Regards,
Dinesh Deshpande.

Well, first of all you should do a business blueprint so that you know what business process you need to support. And then you can consider the actual implementation.
And then you can use SAP's best practice guides as a starting point when doing the actual setup. Here are some links:
http://help.sap.com/bp_htel603/BBLibrary/Content_Library_HTE_EN_US.HTM
http://help.sap.com/bp_crmv12007/CRM_DE/BBLibrary/html/BBlibrary.htm
/Anders

Setting the Roles in SAP

Hi,
I am integrating SAP with IDM. I have developed a code to create the user in SAP and at the same time trying to set the roles and timezone to the user. There is no problem in creating the user object. But, Roles and timezones are not set in the user object.
I need your help in setting up the values in SAP...
Thanks
Ilayarajan

Nikhil,
As you suggested, I have created an object to set the roles in SAP.
<Object name='SAP'>
<Attribute name='activityGroups' value='ROLE1'/>
<Attribute name='fromDate' value='07/15/2007'/>
<Attribute name='toDate' value='12/31/9999'/>
</Object>
* 'activityGroups' is the resource mapping variable. I am using this code snippet in my provisioning WF. But, the vaue is not setting in the SAP.
Could you Pls, tell me what changes I have to make to set the Roles in SAP.
Thanks
Ilayarajan P

Mass generation of profiles of customize role in sap

Similar Messages

Maybe you are looking for