Mass Roles Comparison in ECC System

Hi Forum,
I am know working on Role-Redesign project, which involves about 4000 roles.
We have to eliminate the roles, which have same transactions and activities.
SUIM provides only single role comparison....
Is there any possibility to compare set (range of) of roles with a set (range of) of role in ALL-COMBINATIONS. 
Regards.
Sathish Ram.

Hi Surya,
There is one way. Download the roles in excel files. I would suggest not more than 80-100 roles in one go. Then for each file convert the various columns into one column using concatenate function. Now for a given set of roles you will 2 files one for each of the involved systems. Now create a third files in which you collate the date from both the original source files and then do a column comparision. It is tedious but in given circumstances the shortest way. I think it will take less time then do role comparision on one to one basis. Take help from an MS excel expert.
Regards.
Ruchit.

Similar Messages

  • Role Comparisons across Mutliple Systems

    Does anyone know an easy way to do a role compare across multiple systems?  Using the current SUIM reports only limits a compare between two systems.    Need to be able to look at the complete landscape from based upon a role.  Can SOLMAN help with this ?
    Any info or ideas would be great.
    Thanks

    Hi Mark,
    The best possible way is that you can schedule a job in every system which runs every 30 mins and it will do the user comparision for you in each of the systems. I have seen this working in one of my clients. For more information about this job you can search. Meanwhile let me check i can find the details for that job.
    Thanks,
    Avneesh

  • Role Comparison Cross System - alternatives to RSUSR050

    Hello Experts,
    Would there be an alternative for Cross system role comparison outside of using RSUSR050 ?
    We have a variety of landscapes and are on different basis levels...SAP notes have corrected all but one
    which is older release level- business not ready to upgrade this one
    I have dabbled with SCMP tcode but results are not clear or complete. I was using table AGR_1250 and 1251
    Any thoughts appreciated ..
    Dan.

    Thanks Bernhard,
    i guess i need a little instruction on how to use this tcode (if that's the best method). When i compare  2 roles that are different
    SCMP notes they are the same ? but i notice there is a field that selects Role id - only allows one numeric input. Can't seem to
    get an entire display of the auth objects. I did this by entering our RFC dest and table name AGR_1251.
    Any other alternatives.   The SUIM (RSUSR050) works fine functionally and we have RFC dest but because of the differing Basis levels on this particular destination server- the results are erroneous and incomplete.  Thanks !

  • Role comparision in ECC 6.0

    Hi,
    facing issues with role comparison in SUIM in ECC 6.0
    did cross system ( DEV - PRD) comparison of role.
    if any authorization object is missing, it will show red signal, yellow if diffeent values of the field
    now problem is when i drill down further by double clicking on the object (missing or different value)
    here it show all green for both systems , even if the object is missing in one role
    hope you got my point
    regards,
    Surpreet

    Hi,
    you need to make sure, that note 1322690 is applied to all of your systems.
    Furthermore there is an ongoing correction for rsusr050 (please search for note 1512361, which shall be available during the next days)...
    b.rgds, Bernhard

  • ERM - MASS ROLE UPLOAD

    Hi All,
    when using the Mass role upload from SAP backend systems, i expect that all roles will be uploaded to the final stage in the role methodology inthe ERM and that they will be already generated.
    After all, those roles already exists in the systems.
    well, i see that this is not the case and i have to go through the different stages with every role.
    is this indeed the system behavior or did we do somthing wrong ?
    thanks

    Hi
    We did as you suggested but configured the approval stage in the methodology since the role is already approved and is in ECC PROD.
    Now we encountered a situation where we need to update the role in ERM as part of continuos maintainance (after upload) but we don't have the authorization option to enter and change it but only the "save" and "change history" push buttons.
    We changed bach the methodology to the relevant one with all the stages but still we can't maintain the uploaded role. the change in the methodology did not effect the role already uploaded.
    Do you have any suggestions regarding how we can fix this issue?
    Thank you

  • Data Migration from Legacy system to ECC systems via ETL through SAP PI

    Hi All,
    I wanted to know if we can migrate the data from Legacy systems to ECC systems via PI.
    What I understand is there is ETL tool is used to extract the data from legacy system, and what client is looking to load that data via PI?
    Can we do that ? I am concerned because this will involve mass data?
    If I have to use PI , I see option of  PROXY / IDOC /FILE as receiver in ECC system (take the data from ETL)?
    Can somebody has done this earlier , please share the approach.
    Thanks,
    Pushkar Patel

    Hi ,
    I require few details from you.
    1. What ETL tool you are using, If Informatica, it already have PowerConnect to connect to SAP. So you can create source and Target Structure and also you can use RFC's to send data to R/3. Else, for other ETL tools, can you prepare RFC's or any other way to send data to R/3. let me know the tool.
    2. Does R/3 contains the master data tables? If yes, then try to use LSMW for Mass upload of data to tables.
    If your client don't want to use either of these options please elaborate, what is the case.
    Regards
    Aashish Sinha

  • Integrate GRC 10.1 with CUA and how to import roles from CUA & Child systems into GRC for provisioning

    Hello,
    I am trying to integrate CUA into our GRC 10.1 system through the below steps and so far I have completed the below steps following SAP Notes 1680108 and 1616121:
    1. Connected CUABOX to GRCBOX like a plug-in system.
    2. Updated CUA Global System and CUA Model Distribution in Maintain CUA settings under User Provisioning.
    3. Next I am trying to import the roles from CUA(CUABOX) into GRC(GRCBOX) to be able to provision roles in CUA Child Systems(ECCBOX).
    After reading few discussions in SCN, I have figured that we have to download a template in Role Import and populate it accordingly to upload the CUA child system roles into GRC system for provisioning in CUA Child Systems.
    Unfortunately, this template has multiple fields and I am unable to determine the fields that should be populated as CUA Global System and CUA Child System to import into GRC. Also, when we upload CUA Child System Roles template what selections should be made in Role Import window.
    Any help in this regard is very helpful.
    Thank you,
    Pawan

    Hi Alessandro,
    I have "Create user if does not exist" setting checked for both change action and assign role action and also have CUA enabled. Here is the list of steps that I am performing:
    1. Create an access request for new account, T-CUA_CHILD and select a role from a child system ECC Z_ECC_ROLE_IN_CHILD_SYSTEM.
    2. Approvals provided to assign the ECC role.
    3. I see the following in GRFNMW_DBGMONITOR_WD.
               Auto provisioning activity at end of request at Path GRAC_DEFAULT_PATH and Stage              GRAC_SECURITY
                   New User:T-CUA_CHILD created in System(s): ECC (created without role assignments)
                   T-CUA_CHILD User does not exist in target system CUA
    GRC created an account without role assignment in ECC but also throwed me an error that the user does not exist in CUA.
    However, if I select roles from both CUA and ECC it creates the account in both systems with the selected role assignments.
    So I am wondering if there is way to provide CUA access to users by default for new account requests types. I have tried setting up default roles for CUA but it does not assign the roles by default until I select the CUA system.
    Thank you for your help!
    Pawan

  • How to install BI-CONT 7.37 in SAP ECC system EHP 5

    Hi SAP Gurus,
    We recently upgraded BI_CONT in our BW landscape(SAP netweaver 7.3) from 7.36 to 7.37
    What is the strategy to upgrade BI _CONT or corresponding changes in SAP ECC system(EHP 5).
    Currently we don't have BI_CONT installed in our  ECC system.
    KIndly, let me know how to upgarde BI_CONT related objects.
    Earlier we used to use custom extractors and data sources in ECC system for BI_CONT now we business has planned to use all standard data sources.
    Question here is do we need to install BI_CONT in SAP ECC and what is the procedure?
    Thanks,
    Avadhesh
    +91 8095226536

    Hi Avadhesh,
    No need to upgrade or install add-on BI CONTENT in ECC system if you have already BI landscape for doing BI functions.
    BI content includes below functionality which can be installed as an add on in ECC when you dont have BI landscape.
    DataSources
    Process chains
    InfoObjects
    InfoSources
    Transformations
    InfoProvider (InfoCubes and DataStore objects)
    Variables
    Data mining models
    Queries
    Workbooks
    Web templates
    Roles
    Aggregation level
    Planning function
    Planning function type
    SAP Crystal Reports (BI Content Ext.)
    SAP BusinessObjects Dashboards (BI Content Ext.)
    Regards,
    Karthik

  • SAP GRC 10 - PSS Access from SAP ECC System

    I have configured Password Self Service in GRC System and is working perfectly fine for all password resets if access provided to NWBC from  GRC System.
    We have requirement to provide end users to reset password using SAP ECC System only. I have tried to access NWBC using SAP ECC System but is giving me error that Menu not configured or roles not assigned.
    Currently Maintain Data Sources is configured as below
    User Search Data Sources , User Detail Data Sources  & User Authentication Data Sources set to ECC Connector and End User Vertification Set to yes.We are not using LDAP / Active Directory for the User Search Database and instead ECC Only
    Can anyone provide the roles to be assigned in SAP ECC System to access NWBC - Password Reset .

    Hi Anil,
    In support to Colleen's comments, It seems that you have not configured the USER on the End User Services.  You need to make sure that the guest user (not available in GRC) is configured in each of the 10 services in SICF for the end user Login Pages to work.
    Here are the 10 required services to be activated:
    1.)GRAC_OIF_MY_PROFILE_EU
    2.)GRAC_GAF_NAME_CHANGE_SERV_EU
    3.)GRAC_POWL_REQUEST_STATUS_EU
    4.)GRAC_GAF_PWD_SELFSERVICE_EU
    5.)GRAC_OIF_USER_REGISTER_EU
    6.)GRAC_GAF_ACCREQ_WITH_REQREF_EU
    7.)GRAC_OIF_REQUEST_SUBMISSION_EU
    8.)GRAC_GAF_ACCREQ_WITH_TEMPL_EU
    9.)GRAC_GAF_ACCREQ_WITH_USEREF_EU
    10.)GRAC_UIBB_END_USER_LOGIN
    You can refer note#http://service.sap.com/sap/support/notes/1628387
    If the user is not present in GRC system then, they have to go with end-user-logon page to reset their passwords where you can always define the user authentication configurations.
    Regards,
    Ameet
    Message was edited by: Ameet kumar

  • ERM - Mass Role Import Error

    I just upgraded to SP11 and am trying to mass import a few roles.  It doesn't give me an error on the mass input screen, but it doesn't import the role, so I put DEBUG on and looked at the system logs.  I created the download file as both ANSI and UTF-8 and neither is working.  Here is the system log output:
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG
    -- Request dump for Action Path is cnvMassRlImport.scrMassRlImport.loadMassRoleImport
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG recordHistory:0::true#
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG -- End Request dump for Action Path is cnvMassRlImport.scrMassRlImport.loadMassRoleImport
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG Current Module: |CFG| Conversation: |cnvSysLog| Screen: |scrSysLog|
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG  Module#CFG#Conversation#cnvMassRlImport#Screen#scrMassRlImport#Action#loadMassRoleImport#
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG Changing Conversation: FROM: cnvSysLog TO cnvMassRlImport
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG com.virsa.framework.Context : clearConversationRep :   : 0 entries cleared from conversation repositiory
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG com.virsa.framework.Context : clearScreenRep :   : 0 entries cleared from screen repositiory
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG Handler found:class com.virsa.re.configuration.action.MassRoleImportAction
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG forwarding to:/cfg_mass_role_import.jsp
    2010-03-23 11:27:09,316 [SAPEngine_Application_Thread[impl:3]_28] DEBUG
    -- Request dump for Action Path is scrMassRlImport.importRoles
    2010-03-23 11:27:09,316 [SAPEngine_Application_Thread[impl:3]_28] DEBUG -- End Request dump for Action Path is scrMassRlImport.importRoles
    2010-03-23 11:27:09,316 [SAPEngine_Application_Thread[impl:3]_28] DEBUG Current Module: |CFG| Conversation: |cnvMassRlImport| Screen: |scrMassRlImport|
    2010-03-23 11:27:09,316 [SAPEngine_Application_Thread[impl:3]_28] DEBUG  Module#CFG#Conversation#cnvMassRlImport#Screen#scrMassRlImport#Action#importRoles#
    2010-03-23 11:27:09,316 [SAPEngine_Application_Thread[impl:3]_28] DEBUG Handler found:class com.virsa.re.configuration.action.MassRoleImportAction
    2010-03-23 11:27:09,332 [SAPEngine_Application_Thread[impl:3]_28] DEBUG dirName-->E:\usr\sap\WMS\GRC\ROLEIMPORT\1269358029332
    2010-03-23 11:27:09,347 [SAPEngine_Application_Thread[impl:3]_28] DEBUG returnStatus###success
    2010-03-23 11:27:09,347 [SAPEngine_Application_Thread[impl:3]_28] DEBUG forwarding to:/cfg_mass_role_import_status.jsp
    2010-03-23 11:27:10,769 [SAPEngine_Application_Thread[impl:3]_31] DEBUG
    -- Request dump for Action Path is scrMassRlImport.generateRolesForeGround
    2010-03-23 11:27:10,769 [SAPEngine_Application_Thread[impl:3]_31] DEBUG -- End Request dump for Action Path is scrMassRlImport.generateRolesForeGround
    2010-03-23 11:27:10,769 [SAPEngine_Application_Thread[impl:3]_31] DEBUG Current Module: |CFG| Conversation: |cnvMassRlImport| Screen: |scrMassRlImport|
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG  Module#CFG#Conversation#cnvMassRlImport#Screen#scrMassRlImport#Action#generateRolesForeGround#
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG Handler found:class com.virsa.re.configuration.action.MassRoleImportAction
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG In LockedObjBO.getLockedObjListByType(String objType) starts.....
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG In LockedObjBO.getLockedObjListByType(String objType) ends.....
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG GET_BUS_PROC =====  SELECT BP.BPROCID, BP.BPROCNAM, BL.BPROCDES FROM VT_RE_BPROC BP LEFT OUTER JOIN VT_RE_BPROCLNG BL ON(BP.BPROCID = BL.BPROCID AND BL.LNGID=?), VT_RE_BPSPASSOC BSP WHERE BP.BPROCID = BSP.BPROCID AND BSP.SUBPROCID =?
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG bprocName ===== HR00
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG keys.size():- 42
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 1 cache statusid = 1 value = DEVELOPMENT Desc = Kehitys
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 2 cache statusid = 2 value = PRODUCTION Desc = Produksjon
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 3 cache statusid = 1 value = DEVELOPMENT Desc = ??
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 4 cache statusid = 1 value = DEVELOPMENT Desc = Development
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 5 cache statusid = 2 value = PRODUCTION Desc = �retim
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 6 cache statusid = 1 value = DEVELOPMENT Desc = Projektowanie
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 7 cache statusid = 2 value = PRODUCTION Desc = Production
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 8 cache statusid = 2 value = PRODUCTION Desc = Produ��o
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 9 cache statusid = 1 value = DEVELOPMENT Desc = Desarrollo
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 10 cache statusid = 2 value = PRODUCTION Desc = Production
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 11 cache statusid = 2 value = PRODUCTION Desc = Produzione
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 12 cache statusid = 1 value = DEVELOPMENT Desc = ??
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 13 cache statusid = 1 value = DEVELOPMENT Desc = ??
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 14 cache statusid = 2 value = PRODUCTION Desc = ??
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 15 cache statusid = 1 value = DEVELOPMENT Desc = Udvikling
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 16 cache statusid = 2 value = PRODUCTION Desc = Produkt�v
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 17 cache statusid = 1 value = DEVELOPMENT Desc = ??????????
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 18 cache statusid = 2 value = PRODUCTION Desc = V�roba
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 19 cache statusid = 2 value = PRODUCTION Desc = Productie
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 20 cache statusid = 1 value = DEVELOPMENT Desc = Fejleszt�s
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 21 cache statusid = 2 value = PRODUCTION Desc = Produktion
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 22 cache statusid = 1 value = DEVELOPMENT Desc = Desenvolvimento
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 23 cache statusid = 2 value = PRODUCTION Desc = ???
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 24 cache statusid = 1 value = DEVELOPMENT Desc = Ontwikkeling
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 25 cache statusid = 2 value = PRODUCTION Desc = V�roba
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 26 cache statusid = 2 value = PRODUCTION Desc = ????????????
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 27 cache statusid = 1 value = DEVELOPMENT Desc = Sviluppo
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 28 cache statusid = 1 value = DEVELOPMENT Desc = Utveckling
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 29 cache statusid = 2 value = PRODUCTION Desc = Tuotanto
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 30 cache statusid = 2 value = PRODUCTION Desc = Produkcja
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 31 cache statusid = 1 value = DEVELOPMENT Desc = Utvikling
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 32 cache statusid = 1 value = DEVELOPMENT Desc = V�voj
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 33 cache statusid = 2 value = PRODUCTION Desc = Produktion
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 34 cache statusid = 1 value = DEVELOPMENT Desc = V�voj
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 35 cache statusid = 2 value = PRODUCTION Desc = ??
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 36 cache statusid = 2 value = PRODUCTION Desc = Produktion
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 37 cache statusid = 2 value = PRODUCTION Desc = Proizvodnja
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 38 cache statusid = 1 value = DEVELOPMENT Desc = Entwicklung
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 39 cache statusid = 1 value = DEVELOPMENT Desc = Geli?tirme
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 40 cache statusid = 1 value = DEVELOPMENT Desc = Razvoj
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 41 cache statusid = 2 value = PRODUCTION Desc = Producci�n
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 42 cache statusid = 1 value = DEVELOPMENT Desc = D�veloppement
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 1RoleStatusName:- DEVELOPMENT
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 2RoleStatusName:- PRODUCTION
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG MissingDescriptionHelperDAO.java@37:com.virsa.re.dao.MissingDescriptionHelperDAO.getMissingRoleDesc()missingLst.size(): 1
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG startIndex: 0; endIdex: 1
    2010-03-23 11:27:10,800 [SAPEngine_Application_Thread[impl:3]_31] DEBUG RoleImportBO.java@1393:com.virsa.re.bo.impl.RoleImportBO.createRole()Creating Role:ZM:HR_PY_DEPT_SUPP_COMP profile:'Z:DEPTSUPP'
    2010-03-23 11:27:10,800 [SAPEngine_Application_Thread[impl:3]_31] DEBUG  InsIde getLastGenerateDate(3572,11)
    2010-03-23 11:27:10,800 [SAPEngine_Application_Thread[impl:3]_31] DEBUG  InsIde getLastGenerateDate(3572,11) ResultSet and got an entry
    2010-03-23 11:27:10,800 [SAPEngine_Application_Thread[impl:3]_31] ERROR Cannot assign a java.lang.String object of length 389 to host variable 7 which has JDBC type VARCHAR(100).
    java.lang.Throwable: Cannot assign a java.lang.String object of length 389 to host variable 7 which has JDBC type VARCHAR(100).
         at com.sap.sql.log.Syslog.createAndLogOpenSQLException(Syslog.java:85)
         at com.sap.sql.log.Syslog.createAndLogOpenSQLException(Syslog.java:124)
         at com.sap.sql.types.GenericResultColumn.checkLength(GenericResultColumn.java:212)
         at com.sap.sql.types.VarcharResultColumn.setString(VarcharResultColumn.java:63)
         at com.sap.sql.jdbc.common.CommonPreparedStatement.setString(CommonPreparedStatement.java:511)
         at com.sap.engine.services.dbpool.wrappers.PreparedStatementWrapper.setString(PreparedStatementWrapper.java:355)
         at com.virsa.re.dao.jdbc.ChangeHistoryDAO.saveChangeHistory(ChangeHistoryDAO.java:318)
         at com.virsa.re.bo.impl.ChangeHistoryBO.saveChangeHistory(ChangeHistoryBO.java:77)
         at com.virsa.re.bo.impl.RoleBO.updateRoleWithChngeHist(RoleBO.java:469)
         at com.virsa.re.bo.impl.RoleImportBO.createRole(RoleImportBO.java:1437)
         at com.virsa.re.bo.impl.RoleImportBO.importRoles(RoleImportBO.java:639)
         at com.virsa.re.bo.impl.RoleImportBO.importRoles(RoleImportBO.java:333)
         at com.virsa.re.configuration.action.MassRoleImportAction.generateRole(MassRoleImportAction.java:597)
         at com.virsa.re.configuration.action.MassRoleImportAction.execute(MassRoleImportAction.java:78)
         at com.virsa.framework.NavigationEngine.execute(NavigationEngine.java:273)
         at com.virsa.framework.servlet.VFrameworkServlet.service(VFrameworkServlet.java:230)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.runServlet(FilterChainImpl.java:117)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:62)
         at com.virsa.comp.history.filter.HistoryFilter.doFilter(HistoryFilter.java:43)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:58)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:384)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
         at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
         at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
         at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
         at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
         at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
         at java.security.AccessController.doPrivileged(Native Method)
         at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
         at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)

    Hi All,
    Two weeks ago, I have trying to load roles in ERM. The result hasn´t been than expected. I use SAP GRC AC (5.3). I need to load 6375 single roles, but only I have loaded 914 single role. Next I described to you a general context of my situation:
    1.  I divided the file VIRSA_RE_DNLDROLES.txt into 16 files (UTF - 8) with single roles per module (AM, PO, PS, GL, SD...)
    2. Each file contains segmented roles associated to a business process and multiples sub - business process.
    3. When I checked roles in ERM, I notice that just load any roles. Not all roles in template was loaded.
    4. Files size varies between 18 kb y 145 kb.
    5.  Files concerned "Mass Role Import" have the following extensions: Bulk Download File* (.txt), Enterprise Role Management Information File (.xls) and Primary Org. Level File (.xls).
    5. A error generated was "Unknown error occurred while performing operation (No space left on device (errno:28))."
    Honestly, I don´t know the reason for not loading all roles from template. Any suggestions? or ideas?
    Thanks in advance

  • Mass Role Import Error - When download files exceeds 10000 lines

    Hi,
      Whenever I import any role from the backend system with the download file from SE38 of more than 10000 lines, I am getting the following error. If the download file is less than 10k lines it works .
    please assist me.
    Unknown error occurred while performing operation (n/a)
    My version is GRC 5.3 backend is ECC 6.0.
    Thank you.
    Edited by: Deepan Chakravarthy on May 12, 2009 2:58 PM

    Hi Harleen,
         Thanks for your suggestion.
         My system SP level is 5. can you please instruct me how to get the error logs.
      Regards.
    Deepan....
    Edited by: Deepan Chakravarthy on May 12, 2009 6:51 PM
    Edited by: Deepan Chakravarthy on May 12, 2009 6:52 PM

  • Data Migration from R3 to new ECC System

    Hello,
    We are doing a fresh implementation for SAP MDM. Currently we have 3 SAP R/3 systems and 1 non-R3 system (BPCS system). One of the project goals is to do data migration from all these 4 systems into a new SAP ECC system and to MDM for Vendor Master, Customer Master and Material Master. My manager says that we need Business Objects tool to Migrate these data. But, my question is that is it not possible to achive this through XI/PI itself ? Can anyone let me know the entire process in XI/PI as to how do I receive the Idocs from R/3, convert into XML and then send it to the new ECC system in Idoc format ?
    Thks & Rgds,
    Hema

    Hi Gandhi,
    You have SAP MDM, BPC and R/3 systems in your landscape, when you are migrating data to new ECC system, what is the role of mdm, did you moving the same data to MDM to avoid duplicate/redundant data??is there any data migration from R/3 to MDM(any integration required)or MDM to R/3,
    You have to develop different interfaces to transfer data from MDM to ECC, BPC to ECC.definelty you required one middleware, the option definitely SAP PI. it offers very easy of integration between MDM and R/3 system, you can use MDM-PI adapter to connect to directly MDM syndicator file port from there you can pull the XML file and convert it in to IDoc format use Receiver IDoc adapter in PI, the same way we can integrate BPC system with R/3.
    Search in sdn, there are some scenarios integration of R/3 and MDM using PI, refer those links, if still you have any doubts let me know,
    Regards,
    Raj

  • Creating Roles in SAP ECC for autority in BO

    Hi Guru's,
    Can anyone point me to additional information about how provisioning works in SAP ECC for BO?
    I am also looking for information on how to create some general roles in SAP ECC to transport into BO to control authority.
    I have already read through the "Business Objects Enterprise Admin Guide".
    Thank you in advance,
    Steven

    Hi,
    to synchronize the roles you can use CUA. In CUA, you define 1 system as a central store for user administration and then distribute the users + roles + groups to the systems. You configure your EP and ECC to receive the user data from that system, therefor, you user information is in sync.
    SAP Help: http://help.sap.com/saphelp_nw70/helpdata/EN/07/622441cd87a12be10000000a1550b0/frameset.htm
    For more information, there is an SAP product: Identity Management.
    SDN: https://www.sdn.sap.com/irj/sdn/nw-identitymanagement
    To upload ECC roles to EP:
    SDN Article: https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/06a0e690-0201-0010-4b9f-e529c345a831
    User Mapping is for logging in to a backend, when the userid in the backend is different from the userid in the portal
    SAP Help: http://help.sap.com/saphelp_nw04s/helpdata/en/f8/3b514ca29011d5bdeb006094191908/frameset.htm
    br,
    Tobias

  • User created in ECC system does not appear in Identity management

    Hi all,
    For the already new built GRC system, I am trying to configure buidling blocks 678: RiskAnalysis and Remediation.
    1- In section 5.2 (5.2     Add Roles to Existing Users in User Management Engine) I have to add roles to the users which were created in ECC system. But in Identity management I could not see those ID's existing.
    2 - I could not see these roles RE_ADMIN and CC_ADMIN in UME
    Could anybody help me moving forward.
    Thanks
    Lakshmi

    Hi,
    > 1- In section 5.2 (5.2     Add Roles to Existing Users in User Management Engine) I have to add roles to the users which were >created in ECC system. But in Identity management I could not see those ID's existing.
    >
    Have you defined Master User Source in RAR ?
    > 2 - I could not see these roles RE_ADMIN and CC_ADMIN in UME
    >
    Initially you have to upload Roles in Identity management. There will be 3 files:
    cc_ume_roles.txt
    ae_ume_roles.txt
    re_ume_roles.txt
    Upload them in identity management then you will get these roles.
    Thanks
    Sunny

  • How to generate mass roles in SUPC

    Hi All,
    I have to generate mass roles at one time. There are 3000 roles to be generated. I am using tcode SUPC to do this but when give the list of roles and click on generate button it is taking only one role.
    I am generating derived roles.
    Please advise..
    Thanks,
    Masood

    > I am generating derived roles.
    Perhaps Salman123 wrote a CATT to hit the "Adjust derived roles" function once, or dug deeper?
    If you have less than 50 roles and all standard and maintained authorizations you are better off using the delete menu and import from role option in my opinion. (make sure the root node is small and use redundancy compression).
    If you have more than 50 roles, then (shame on me...) try to keep them very small with only selected objects and use the option to delete their profiles completely and upload them on mass. Such roles are anyway usually best suited for BW systems and an entirely different concept (Analysis Authorizations).
    You can avoid derived roles completely this way.
    Cheers,
    Julius

Maybe you are looking for