Mass Generation of standard SAP roles

IS there a way to generate & Activate SAP standard roles in mass. We want to generate and activate following standard SAP roles so that we do not have to go through them manually for authorization changes.
SAP_PP_BD_RTG_DISPLAY
SAP_PP_BD_RTG_MAINTAIN
SAP_PP_BD_WKC_DISPLAY
SAP_PP_BD_WKC_MAINTAIN
SAP_PP_CAPA_PLAN
SAP_PP_CAPA_PLAN_EVAL
SAP_PP_KAB_CONTROL
SAP_PP_KAB_REPORTING
SAP_PP_MATERIAL_MANAGEMENT
SAP_PP_MP_FORECAST
SAP_PP_MP_LONG_TERM_PLANNING
SAP_PP_MP_MPS_PLANNING
SAP_PP_MRP_COORDINATION
SAP_PP_MRP_EVALUATIONS
SAP_PP_MRP_MASTER_DATA
SAP_PP_MRP_PLANNED_ORDER
SAP_PP_MRP_PLANNING
SAP_PP_PI_ALERT_MGMT_STD
SAP_PP_PI_BATCH_RECORD_EXP
SAP_PP_PI_BATCH_RECORD_SUPER
SAP_PP_PI_CAPA_EVAL_STD
SAP_PP_PI_CAPACITY_EXP

Dev,
It is possible to generate roles using PFCG or PFUD up to a extent of choosing 8 per a time and it won't accept more than that. So please check with it before proceeding in this issue.
It is advisable not to use SAP predefined roles, rather than using customized roles.
Regards,
VeerendraKumar.

Similar Messages

Third party background ID requires standard SAP role

We are connecting to a 3rd party through a background ID that we have created on the ABAP side.
However, in testing this access, we notice that this connection does not work if we assign a custom role (or even SAP_ALL) to it. It works ONLY if we assign a specific SAP-delivered role (SAP_XI_ADMINISTRATOR_J2EE) to it.
We have logged into the J2EE UME and assigned our custom group (which corresponds to our ABAP role - ZSAP_BATCH_XI) TO the Administrator Role in the UME. But this still doesn't seem to fix the problem, and it is still requiring the standard SAP role.
Can you pls. let me know if there is another step I should do, to force my background ID to use my custom role, rather than the standard SAP role.
Thank you,
Ashish

Hi,
This is standard in SAP and you would only need to assign the WBS to the Sales Order for which the Material is being Procured for and the Cost / budgets can be tracked through this WBS element.
This activity can be seen thru PS Reports
Best regards
Amit Bakshi

"standard" SAP roles for Sales and Operations Planning (SAP SOP)

Hallo,
I´d like to ask SOP specialists, if there are any "standard" SAP roles, which could be created when SOP is implemented into the SAP system.
If not, could you please send me advice, what is (are) the general role(s) for SOP (which SOP transactions and roles)?
Thank you for your effort,
Martin

-->
If you dont have the role --> open OSS
if you dont find it because there are so many:
Good luck :-)

Best practices / preferred usage of SAP standard (delivered) roles

Dear Experts,
When going about designing roles for a new system, what is the preferred usage on SAP standard/delivered roles? I was thinking of using them as a "base", then tweaking auth objects here and there to make the roles work but the more I work with them, I find it may be better to create roles entirely from scratch. A lot of the time, I find a lot of inactivated auth objects or objects that seem to not really be needed when looking at the t-codes offered in the menu (S_TCODE).
In that case, I figured it might be cleaner if I started creating roles and adding t-codes via the Menu and maintaining only the auth objects that are proposed in PFCG (and adding a few if necessary).
Do people typically build their roles around these the standard SAP role set or is it preferred to create your own and only use the SAP standard roles as reference (i.e. the t-codes offered in the menu, etc.)?
Thanks for any insights!

> When going about designing roles for a new system, what is the preferred usage on SAP standard/delivered roles?
Those are provided by SAP as a reference so that you can consult with the Authorization Structure of a Standard Position / Task for which you are going to create your own role. For e.g. what are the TCodes, values of Objects should be given to users for their tasks.
I was thinking of using them as a "base", then tweaking auth objects here and there to make the roles work but the more I work with them, I find it may be better to create roles entirely from scratch.
Absolutely! Please do not use SAP delivered roles for you use and also don't try to alter any values.
A lot of the time, I find a lot of inactivated auth objects or objects that seem to not really be needed when looking at the t-codes offered in the menu (S_TCODE).
>
> In that case, I figured it might be cleaner if I started creating roles and adding t-codes via the Menu and maintaining only the auth objects that are proposed in PFCG (and adding a few if necessary).
>
> Do people typically build their roles around these the standard SAP role set or is it preferred to create your own and only use the SAP standard roles as reference (i.e. the t-codes offered in the menu, etc.)?
>
Yes.. as reference.. as you say..
Regards,
Dipanjan

Mass Generation Of Roles

Hi
Which option does user have to choose from the list to output the mass generation of roles at PFCG?
Nag.

Hi ,
unfortunately there is no way in standard to bypass the manual work.
IF SU24-values have been changed for a t-code, all roles that contain that t-code, have to be adapted manually and afterwards regenerated.
The profile gets the status ' To adjust' until you have maintained the authorizations once and saved. Until then no mass generation (SUPC) will be able to regenerate thos profiles.
Please consider enough time to adapt your roles during your test upgrade. A good idea is to adapt all roles to the new authorizations in a test environement and save them afterwards in a transport. AFter you have performed the upgrade in your productive environement, you can import then this transport and you don't have to perform this time consuming 'adaption-work' again in your p-environement....
b.rgds, Bernhard

Su25 - mass generation of roles

Hello,
I have one problem in my upgrade project that...my client has done the upgradation but he has not done that su25 2a - 2d steps....noe i want to do that 2c steps to complete
when i clicked it 2c steps in su25 it shows me long list of roles to be maintained ...os is there any way to do maintainance of all the roles at the same time....and generating all profiles in the roles at the same time....
awaitng for ur reply....will give full reward for usefull answer

Hi ,
unfortunately there is no way in standard to bypass the manual work.
IF SU24-values have been changed for a t-code, all roles that contain that t-code, have to be adapted manually and afterwards regenerated.
The profile gets the status ' To adjust' until you have maintained the authorizations once and saved. Until then no mass generation (SUPC) will be able to regenerate thos profiles.
Please consider enough time to adapt your roles during your test upgrade. A good idea is to adapt all roles to the new authorizations in a test environement and save them afterwards in a transport. AFter you have performed the upgrade in your productive environement, you can import then this transport and you don't have to perform this time consuming 'adaption-work' again in your p-environement....
b.rgds, Bernhard

Standard AC Roles in SAP GRC AC 5.3

Hello,
Can anyone list the STANDARD AC ROLES in SAP GRC AC 5.3 Suite for
1- RAR,
2- SPM,
3- CUP,
4- RT,
5- ERM,
6- GRC PC 2.5
7- GTS,
8- GRC Repository.
I know that the Standard AC Roles that are delivered for CUP are
1- AEADMIN,
2- AESecurity &
3-AEApprover.
Each role comes with different actions in them.
I need similar type of standard AC roles for the above listed modules.
Thanks!!!

Hello Varun,
Below are answers to your statements.
1- There are no portal roles for AC5.3 as such. There is portal role for RM which you have already found.
**ANSWER 1: *There are portal roles for AC 5.3. Kindly see the link http://help.sap.com/saphelp_grcpc30/helpdata/en/27/c67fe32e684e4c85125645dc5918ee/frameset.htm.***
*The role I found in from the above link.*
2- To access AC5.3 applications from portal you would have to create IViews etc.
ANSWER 2 Since SAP provides the predelivered roles, as seen in HELP.SAP.COM in above link, we need not create iViews. The custom IViews are required for custom roles, not the standard roles**
Thanks!!!
Edited by: abdul haleem on Jul 21, 2009 9:44 AM

Mass generation of Derived Roles

Hello,
SUPC helps me in Mass generation of Master Roles. But how do I generate Derived roles in a lot?
Thanks.

Hello,
we also missed this function when we started using derivation of roles. I developed some years ago a program which does this, also possible to start it in background mode. It runs daily (in front of PFCG_TIME_DEPENDENCY) and adjust derived roles from updated parent roles (which came into the system via transport request).
Because I developed the program in my working time it's owned by my company, therefore I can not post the source. Just a few hints:
- parent roles and derived roles: you will find them in table AGR_DEFINE
- roles imported into the system: with function module TMS_TM_GET_TRLIST you can get yesterday's imported transport requests, you can read the object list with function module TMS_WBO_READ_REQUEST (those with R3TR ACGR have roles in it).
- build up an internal table of parent roles (consider the derivation level: first process the top level role, then it's derived roles, and then their derived roles and so on).
- use function module SUPRN_TRANSFER_AUTH_DATA for adjusting the derived roles of a parent role.
HTH and kind regards
Jens Hoetger

Standard SAP HR Roles in SUCCESSION PLANNING

hai all,
Can any one please let me know what are the standard SAP HR Roles in SUCCESSION PLANNING for user.
Thanks

Hi,
Career and Succession Planning
Purpose
The Career and Succession Planning component enables you to create, implement and evaluate succession planning scenarios. In Career Planning, you can identify possible career goals and draw up career plans for employees. You use Succession Planning to find people to fill unoccupied positions. Career and Succession Planning has two main goals. One is to advance employeesu2019 professional development within a company, the other is to ensure that staffing requirements are met.
Integration
If Career and Succession Planning is integrated with the Qualifications and Requirements component, you can:
Create profiles for objects. You can include these profiles in Career and Succession Planning.
You can compare these profiles against each other (to see how suitable a person is for particular positions, for example).
Integration with the Development Plans component gives you the following functionality:
You can plan and manage your employeesu2019 further training and education
Suitable development plans for eliminating qualification deficits are proposed automatically
See also the recommendations contained in the Integration section of Personal Development.
Features
The Career and Succession Planning component provides you with the following functions:
You can create careers. These describe the various career paths possible within a company. Careers are used in career and succession planning scenarios.
You can use a whole range of planning criteria when working through career and succession planning scenarios. These planning criteria are independent of each other.
You can define user parameters to specify whether essential requirements, alternative qualifications or depreciation meter information should be taken into account in career planning scenarios. See User-Specific Settings.
You can plan for a specific key date.
To identify career and development goals, you can carry out career planning for persons and for other object types.
To identify potential successors, you can carry out succession planning for positions. You can analyze the knock-on effects of succession planning by conducting a simulation.
You can work through career and succession planning scenarios without taking careers into account.
You can display a ranking list for every career and succession planning scenario. This ranking list is sorted on the basis of an objectu2019s suitability. Suitability is expressed as a percentage value.
Suitability percentages should be regarded merely as a criterion for sorting lists.
You can also define suitability ranges and thus structure the ranking list better (Customizing).
You can specify how the system should handle overqualification when the suitability percentage is being calculated (Customizing).
You can display ranking list entries by screen (Customizing setting).
From the career (or succession) plan you can:
Access the profiles of all the objects displayed
Match up profiles with each other
Evaluate qualification deficits
Display training proposals and book courses (business events)
Access careers
Create preferences and potentials
In career and succession planning scenarios, you can designate planning objects for positions. You can then include these designations for the rest of the planning scenario.
If you have found a suitable position for a person, or if you have selected a person as the successor to a position, you can transfer the person directly to the position in question.
Rupa Prasad

SAP Enterprise Portal 7.0 Error while customizing Standard Admin roles.

Hi All,
I have a business requirement of Creating Transport role which should access only Transport Navigational Tab in Enterprise Portal 7.0.
Because we can't give Standard Administrator roles to Users.
For that, I have created a role and added Standard System admin role as role to role and i hide the Navigational tabs except Tranport Tab (by changing Properties of ''Invisible in Navigational areas of System Admin role'')
I have assigned this role to a user. and i have also given read/write permission to folders and in security zones. Export is working o.k and when i click on browse tab in import it is showing-->>
"Unexpected error. Check the log files for details."
I have checked logfiles and i didn't find any thing.
Any ideas??
Your early response would be highly appreciated.
Thanks in advance,
Khasim.

Hello Khasim,
                    My name is Mohammed and I am talking from chicago. I am facing problem in EP 6.0 Authorization.
First of explain me what is Security Zone. why it is used
   I have created one new role and added system admin role(inbuild role) into new role. Is that possible to restrict all portal content folder. I want to show only centain folder and other foldr should be invisible or not able to see.
Example
              New Role
                          added system admin role
When user login and he should be only see his folder in portal content not others folder. So if you have solution or detail explaination please send me info to mtajamulatgmail.com or call me 7735010306
Thanks
Mohammed

How to add button in standard SAP transaction

Hi All,
I would like to know how to add a button in the application toolbar of the standard SAP transaction CO01/CO02. Is there a screen exit for this?
Hope you can help. Thanks
Regards,
April

Check Enhancment CCOWB001. If not then u can search the below list, all of which are called from the T-code.
CCOWB001            Customer exit for modifying menu entries
COIB0001            Customer Exit for As-Built Assignment Tool
COZF0001            Change purchase req. for externally processed operation
COZF0002            Change purchase req. for externally procured component
PPCO0001            Application development: PP orders
PPCO0002            Check exit for setting delete mark / deletion indicator
PPCO0003            Check exit for order changes from sales order
PPCO0004            Sort and processing exit: Mass processing orders
PPCO0005            Storage location/backflushing when order is created
PPCO0006            Enhancement to specify defaults for fields in order header
PPCO0007            Exit when saving production order
PPCO0008            Enhancement in the adding and changing of components
PPCO0009            Enhancement in goods movements for prod. process order
PPCO0010            Enhancement in make-to-order production - Unit of measure
PPCO0012            Production Order: Display/Change Order Header Data
PPCO0013            Change priorities of selection crit. for batch determination
PPCO0015            Additional check for document links from BOMs
PPCO0016            Additional check for document links from master data
PPCO0017            Additional check for online processing of document links
PPCO0018            Check for changes to production order header
PPCO0019            Checks for changes to order operations
PPCO0021            Release Control for Automatic Batch Determination
PPCO0022            Determination of Production Memo
PPCO0023            Checks Changes to Order Components
STATTEXT            Modification exit for formatting status text lines

Mass Generation of Sales Orders via Marketing Projects

Hi all,
Is it possible to generete ERP order when using the functionality for mass generation of sales orders via marketing projects?
cheers Camilla

Hi Camilla,
We need to see your requirement by breaking it into two steps. Both are possible.
1) Generating Mass orders in CRM using the marketing Projects.
2) Creating ERP order.
Technically what you want is achievable. Personally i have not done it, but am confident it is possible.
You may refer to these links to get more info.
http://help.sap.com/scenarios_bus2007/helpdata/en/47/31a375878f203de10000000a114a6b/content.htm
http://sap.ittoolbox.com/groups/technical-functional/sap-crm/generate-sales-orders-in-mass-based-on-marketing-campaign-crm-60-2943656
rgrds,
Randhir

Email output using Standard SAP and outlook

Can anyone provide detailed configuration tips for output determination which includes defining communication strategy, output types, output procedure and condition records?
I am trying to set up email generation to customers based on billing documents.
Regards,
Ottley.

Hi
Please see if the below steps help you- let me know if you need any more information, You ahve to seek help from your basis team in completing the necessary basis related settings
1. You must maintain email address in Customer master data.
2. The same applies to user master data. For the output type for default values, a communication strategy needs to be maintained in the Customizing that supports the e-mail. You can find the definition of the communication strategy in the Customizing via the following path:
(SPRO -> IMG -> SAP Web Application Server -> Basic Services -> Message Control -> Define Communication Strategy).
As a default, communication strategy CS01 is delivered. This already contains the necessary entry for the external communication. Please see that without a suitable communication strategy it is not possible to communicate with a partner via Medium 5 (external sending).
3. Use the standard SAP environment
4. In the condition records for the output type, use medium '5' (External send).
5. You can use Transaction SCOT to trigger the output manually. The prerequisite for a correct sending is that the node is set correctly. This is not described here, but it must have already been carried out.
6. To be able to display, for example, the e-mail in Outlook, enter PDF as the format in the node.

Best practice for standard security role

Hi, I'd like to know which is the best practice for standard role use, some people tell me that a standard role should never be used, that a copy must be made and assign the users to the copy, but then, why should SAP bother creating the standard role?

They are provided as a template for you, and you can copy them into a different namespace and make changes there before generating the profiles and authorizations.
Why you should use a copy of them is because SAP will also update them sometimes. If transactions change in the standard menues with SP's and upgrades, then you will find them in transaction SU25.
If you do a search on "standard AND roles" in the SDN then you will also find more detailed infos and opinions on the use of them.
Cheers,
Julius

Significance of Mass generation of profile

Hi friends
what is the significance of mass generation of profile
regards
krishna

Hi Krishna,
Mass generation of profiles is used to determine which roles already have authorization profiles. Its a post installation Basis activity to make all roles active.
In case you create new role or modify the existing one, you have to generate profiles for that role individually. You can limit the choice of roles.
You do it using transaction SUPC. Its also possible to generate the missing role authorization profiles in the background.
Regards,
Prashant
Do reward points for helpful answers

Mass Generation of standard SAP roles

Similar Messages

Maybe you are looking for