Mass  Generation Of  Roles

Hi
Which option does user have to choose from the list to output the mass generation of roles at PFCG?
Nag.

Hi ,
unfortunately there is no way in standard to bypass the manual work.
IF SU24-values have been changed for a t-code, all roles that contain that t-code, have to be adapted manually and afterwards regenerated.
The profile gets the status ' To adjust' until you have maintained the authorizations once and saved. Until then no mass generation (SUPC) will be able to regenerate thos profiles.
Please consider enough time to adapt your roles during your test upgrade. A good idea is to adapt all roles to the new authorizations in a test environement and save them afterwards in a transport. AFter you have performed the upgrade in your productive environement, you can import then this transport and you don't have to perform this time consuming  'adaption-work' again in your p-environement....
b.rgds, Bernhard

Similar Messages

  • Su25 - mass generation of roles

    Hello,
    I have one problem in my upgrade project that...my client has done the upgradation but he has not done that su25 2a - 2d steps....noe i want to do that 2c steps to complete
    when i clicked it 2c steps in su25 it shows me long list of roles to be maintained ...os is there any way to do maintainance of all the roles at the same time....and generating all profiles in the roles at the same time....
    awaitng for ur reply....will give full reward for usefull answer

    Hi ,
    unfortunately there is no way in standard to bypass the manual work.
    IF SU24-values have been changed for a t-code, all roles that contain that t-code, have to be adapted manually and afterwards regenerated.
    The profile gets the status ' To adjust' until you have maintained the authorizations once and saved. Until then no mass generation (SUPC) will be able to regenerate thos profiles.
    Please consider enough time to adapt your roles during your test upgrade. A good idea is to adapt all roles to the new authorizations in a test environement and save them afterwards in a transport. AFter you have performed the upgrade in your productive environement, you can import then this transport and you don't have to perform this time consuming  'adaption-work' again in your p-environement....
    b.rgds, Bernhard

  • Reg: Mass generation of roles with open authorization

    Hi,
             Is there an option to mass generate roles with open authorizations ?
             It would be helpful if it there exists some transactions or reports that would help in doing so unlike CATT scripts or batch sessions.
    Regards,

    Hi Arravind,
    Why cant you correct the roles by filling up those open fields?? I guess you can create a CATT script to acheive your objective but I suggest better to check why there are open fields in the role then generating them blindly.
    Do let us know if you need any more information from our side. If you want to know how to create a CATt script then search for it in SDN/Google you will surely get your answer.

  • Mass generation of Derived Roles

    Hello,
    SUPC helps me in Mass generation of Master Roles. But how do I generate Derived roles in a lot?
    Thanks.

    Hello,
    we also missed this function when we started using derivation of roles. I developed some years ago a program which does this, also possible to start it in background mode. It runs daily (in front of  PFCG_TIME_DEPENDENCY) and adjust derived roles from updated parent roles (which came into the system via transport request).
    Because I developed the program in my working time it's owned by my company, therefore I can not post the source. Just a few hints:
    - parent roles and derived roles: you will find them in table AGR_DEFINE
    - roles imported into the system: with function module TMS_TM_GET_TRLIST you can get yesterday's imported transport requests, you can read the object list with function module TMS_WBO_READ_REQUEST (those with R3TR ACGR have roles in it).
    - build up an internal table of parent roles (consider the derivation level: first process the top level role, then it's derived roles, and then their derived roles and so on).
    - use function module SUPRN_TRANSFER_AUTH_DATA for adjusting the derived roles of a parent role.
    HTH and kind regards
    Jens Hoetger

  • Significance of Mass generation of profile

    Hi friends
    what is the significance of mass generation of profile
    regards
    krishna

    Hi Krishna,
    Mass generation of profiles is used to determine which roles already have authorization profiles. Its a post installation Basis activity to make all roles active.
    In case you create new role or modify the existing one, you have to generate profiles for that role individually. You can limit the choice of roles.
    You do it using transaction SUPC. Its also possible to generate the missing role authorization profiles in the background.
    Regards,
    Prashant
    Do reward points for helpful answers

  • SQ01 mass generation of quries problem

    i need a sample code or FM for mass generation of SQ01 quries.bcz aftter changing in client i have to regenerate again all quries..so i want some workaround so i can perform this task in one go. any idea?

    Hi,
    i do not understand why this post is marked as "answered".
    The recommended ABAP RSAQR3TR is not usable for the requested mass generation of queries.
    (It only covers the transport aspect (export/import))
    Can you please give us a short explanation or correct the status to "not answered"
    There are two posts regarding the mass-generation of queries, but none of them contains a solution.
      SQ01 - Generate program
      Query - Mass generation
    (The first one is at least a chance and usable via CATT or SE37)
    Best regards
    Christian

  • Mass Generation of Sales Orders via Marketing Projects

    Hi all,
    Is it possible to generete ERP order when using the functionality for mass generation of sales orders via marketing projects?
    cheers Camilla

    Hi Camilla,
    We need to see your requirement by breaking it into two steps. Both are possible.
    1) Generating Mass orders in CRM using the marketing Projects.
    2) Creating ERP order.
    Technically what you want is achievable. Personally i have not done it, but am confident it is possible.
    You may refer to these links to get more info.
    http://help.sap.com/scenarios_bus2007/helpdata/en/47/31a375878f203de10000000a114a6b/content.htm
    http://sap.ittoolbox.com/groups/technical-functional/sap-crm/generate-sales-orders-in-mass-based-on-marketing-campaign-crm-60-2943656
    rgrds,
    Randhir

  • Mass generation of activities (for field force) from Trade Promotion

    Hi gurus,
    is it possible to mass generate activities from Trade Promotions?
    I've done it several times using campaigns but i don't know if it's possible from Trade Promo. The business scenario is the following: The Sales manager define some extradisplay for a customer hierarchy node: i'd like to mass generate activities for each BP belonging to that node so that field rep. can check the execution of the promotion.
    Any help is appreciated
    Regards
    Carminem

    hi there
    its very much possible
    first u need to ensure that you have assigned either target group members or, if you are working with a trade promotion, a planning customer.
    now follow these steps
    1. You create an opportunity template or activity template in the Marketing/Activity Template Details  tile set.
    2.You define the criteria for determining the employees responsible for the generated  activities in the Employee Responsible Details tile.
      3.You start mass generation in the Marketing/Activity Templates tile set, and select a target group. For trade promotions, you have the option of selecting either a target group or a planning customer.
    4.The application checks whether the opportunities or activities are already generated for each business partner and contact in the selected group.
    An  activity can be generated only once for a business partner or contact for each campaign or trade promotion.
    5.The application identifies generates an  activity for each business partner or contact assigned to the campaign or trade promotion by using the relevant template.
    6.The application assigns the employees responsible for each  activity according to the criteria that you specified earlier.
    best regards
    ashish

  • VIRSA mass creation of roles

    Hi All:
            Can anyone tell me how to perform mass creation of roles using VIRSA role expert,also if you could point me to some documentation it will be very helpful.
            Thanks,
              J D

    Hi Olivier,
    I am afraid, my help is limited to this forum.
    However, I can help you with some ABAP logic :
    Table AGR_1252 is used to store the ORG values of derived roles.
    You can start working with an ABAP'er to get his coding magic started. Though I am not familiar with ABAP, I believe our ABAP'er debugged PFCG and  knew what needed to be done. I have no clue what he did
    the logic:
    Start of Selection
    Load information into internal tables for use in creating report
    Upload the Organsational Changes Spreadsheet
    Ensure Roles exist and there are no duplicates
    Ensure Organistional levels exist and there are no duplicates
    *Checks if the file exists
    Role must exist
    Ignore duplicate roles
    Authority Check Role for user
    IMP Logic checks-
    For Add High range of Role must be greater than low range
    *...if adding specific ranges - remove existing * or space entry if it
      exists
    *...if adding * access remove other accesses if they exist
    *Process All Org Levels for each role
    ...submit report to generate profiles
    You can start working with your ABAP'er with this logic.
    *Disclaimer* - this may need enhancements to meet your requirements. Also, I have just put the logic what I could remember at the top of my head. I may have missed something.
    Hope it helps
    Abhishek

  • Mass Generation of standard SAP roles

    IS there a way to generate & Activate SAP standard roles in mass.  We want to generate and activate following standard SAP roles so that we do not have to go through them manually for authorization changes.
    SAP_PP_BD_RTG_DISPLAY
    SAP_PP_BD_RTG_MAINTAIN
    SAP_PP_BD_WKC_DISPLAY
    SAP_PP_BD_WKC_MAINTAIN
    SAP_PP_CAPA_PLAN
    SAP_PP_CAPA_PLAN_EVAL
    SAP_PP_KAB_CONTROL
    SAP_PP_KAB_REPORTING
    SAP_PP_MATERIAL_MANAGEMENT
    SAP_PP_MP_FORECAST
    SAP_PP_MP_LONG_TERM_PLANNING
    SAP_PP_MP_MPS_PLANNING
    SAP_PP_MRP_COORDINATION
    SAP_PP_MRP_EVALUATIONS
    SAP_PP_MRP_MASTER_DATA
    SAP_PP_MRP_PLANNED_ORDER
    SAP_PP_MRP_PLANNING
    SAP_PP_PI_ALERT_MGMT_STD
    SAP_PP_PI_BATCH_RECORD_EXP
    SAP_PP_PI_BATCH_RECORD_SUPER
    SAP_PP_PI_CAPA_EVAL_STD
    SAP_PP_PI_CAPACITY_EXP

    Dev,
    It is possible to generate roles using PFCG or PFUD up to a extent of choosing 8 per a time and it won't accept more than that. So please check with it before proceeding in this issue.
    It is advisable not to use SAP predefined roles, rather than using customized roles.
    Regards,
    VeerendraKumar.

  • Mass generation of profiles of customize role in sap

    Dear All,
    I am unable to generate mass profile for customize roles in SUPC.After pressing Generate button its showing "Choose at least One role".

    A brave route is to delete the profiles on mass and then mass regenerate. You can even do this in PROD to improve transport performance, but you must be sure that SU24 is perfect.
    But as mentioned before, you have to be very sure about what is going to happen and who is changing roles, otherwise all hell breaks loose.
    Opening roles in "Edit old status" and then transporting them as a habit in role maintenance is not a good symptom to use this approach - as an example.
    If you have used SU24 and do keep the role proposals intact, then it works very nicely and you can upgrade all your roles in about 1 day - max 1 week.
    If you want to do a lot of checks against historic Excel lists and manual regression testing (with manual / changed authorizations which are divorced from the menus) then you are looking at between 1 month and forever to upgrade the roles...
    For me, the concept of "forever maintenance" means start over from scratch in the design.
    Cheers,
    Julius
    Edited by: Julius Bussche on Apr 29, 2011 12:06 AM

  • Mass Generation of Crystal Reports

    Hello Experts,
             We have a requirement in our company for creating Complex Growth Reports for Rebate Solution. Currently I am creating those out of BeX Analyzer using workbooks and writing Macros in it.
            I would say it is complex because each workbook has 5-10 Queries on average and it has graphs/chart and other things. Also, user wants to generate each of these Reports for different Customers in PDF and Excel format and save it in one folder on there machine which they can review and later on send it to End Customers.
          Current solution out of BeX is very complex and Business Users are not happy with it so we are looking for some tool on top of BW that can do these complex generation of Reports in mass and save it PDF format in some desktop folder.
    Any guidance is appreciated
    Regards,
    DNP

    In order to implement report bursting based on CR and BW data sources you need to have
    1) either a BO Enterprise or a BO Edge installation (The CR Server does not support access to SAP BW data).
    2) installed the BO integration Kit for SAP solutions on your BO Server and on your clients (workstations where the CR Designer is installed)
    3) configured the BW publisher (part of the int.Kit) on the server
    4) creatd the reports using the SAP toolbar in the CR Designer and stored them in your BW system (done in the CR Designer through the int.Kit functionality)
    5) configured server side SNC between BW and BO server (when personalization is required)
    Regards,
    Stratos

  • Mass consolidation of Roles

    Hi,
    I have seen many posts on copying, uploading and combining roles.  However, I am looking for a slightly different solution.  I believe it is probably impossible to accomplish in an automatic manner (via SECATT).
    I have individual reporting and inquiry roles by location/module (278).  I would like to combine the roles into one role with the transactions and would prefer to maintain the Authorization Data under the Authorizations tab.  I intend to consolidate the Auth. Objects during generation. 
    Here are the issues I am experiencing:
    1) In the menu tab, using "From other role", I would have to select each role then each transaction code.  eCatt does not deal with spatial selection very well.  This is not a good solution for the number of roles I have to add.
    2) By uploading roles, I am in the same position as 1.
    Why am I looking for an SAP provided solution? My business analysts and I would feel more comfortable with the changes to their roles.  They are worried about operator error and I am, too.
    At this point, I believe my only solution is to download (via SECATT) all 278 roles, combine the transactions (probably a lot of overlap in the transactions) then upload into one role.  Then I would have to re-enter all the authorization data by hand.
    If anyone has a better idea, I would love to hear it.  Thank you in advance for your help.
    Regards,
    Shanell

    Hi,
    Try this ...
    Step 1: Execute SE16N for table AGR_TOCDES and find out all the t-codes in your 258 roles
    Step 2: Import from the file ....the format would be
    something like this -
    FORMAT              1.1A
    NODE                000020000100001TRANSACTION         PFCG
    NODE                000030000100001TRANSACTION         SU01
    NODE                000040000100001TRANSACTION         SUIM
    NODE                000050000100001TRANSACTION         ST01
    NODE                000060000100001TRANSACTION         SU10
    NODE                000070000100001TRANSACTION         SUGR
    If you need t-code PFCG, SU01 etc to be added. Just notice that the format is kind of hard coded.

  • Generation of Role in Role Expert

    Hi all,
    I have created role in Role Expert and after clicking the generation button it is asking UME password
    even so i entered the correct password it is showing that name or password is incorrect (repeat logon)

    Hi Karunkar,
    Try creating a user in backend (R/3) and give all authorizations and set the password as well.
    Then when it is asked in RE, please enter the password of the above created user in R/3.
    Hope this will solve your problem
    Regards,
    Faisal

  • Error in stage of Role generation in Role Expert

    Hi,
    While generating the role in backend from RE, its throwing an error " Exception condition : " NOT_Authorised" raised. please suggest me any solution.
    Thanks

    Hello Hima,
    The user ID should be the same in frontend as well as in backend with enough authorizations for role generation in the backend too. For getting this authorization correct, you can first try to create and Generate a role in the backend itself, if you are not sure what authorizations this user should have to generate a role.
    Also, I would like to suggest you to maintain the same password for this user in both the frontend as well as backend.
    Regards,
    Hersh.

Maybe you are looking for