Mass roles deletetion (PFCG ?)

Hy,
I'd like to do a mass roles deletetion as : "all client roles begining with ZFI* ".
I did nt see anything with : PFCG, SE16 on TSTCT, SE38 (abaps like "PFCG*"),...
Have you an idea ?.
Thank's a lot.
Etienne

you use sap standard authorization object and not reporting authorization object that we create.
using PFCG create a role and assign with authorization object s_rs_comp twice, one combination of with display(02) and query = * and the other change and az*.
you may need s_rs_comp1 also, take a look this how to doc
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/fda2a990-0201-0010-5497-b81b1556df24
hope this helps
RSUSR002_ADDRESS - Users by address data
In 4.6x you used Role for each users and SAP will generate the necessary profiles and authorizations.
PFCG - Basic Maintenance
Type in a meaningful  ZXXX role name and click Create
Menu -> Transaction (insert all the transaction code for this role)
Authorization -> Change authorization data -> Generate
You can create a customizing role in PFCG:
in the menu tab utilities/customizing auth; you can use a project IMG (maintainable in SPRO) to restrict the authorizations for example to FI or CO.
regards
vinod

Similar Messages

  • Mass Role Creation

    Hi All,
    We have an requirement to create large number of roles in BW, is there any existing tool that we can use to create mass roles or should it be done through BDC on PFCG?
    Thanks for your answers in advance.
    Regards
    SS

    Deepu,
    Thanks for your reply. Could you give more details as to, how do we do it through PFCG?
    Regards
    SS

  • Mass role risk analysis issue

    Hello GRC Community,
    I have a following issue:
    When I use mass risk analysis the deactivated authorization objects in the role are displayed as result. At the same time, when I use Role Level Risk Analysis the role with deactivated critical authorization objects doesnt appear.
    Does anybody know how to solve this issue? Is there any configuration parameter to be adjusted?
    thanks
    best regards
    Sabrina

    Prasant,
    here are the screenshots of the Job result:
    1. Mass role Risk Analysis
    2. Risk Analysis on the (Single) Role Level
    Im Backend you can see that the role contains lots of deactivated autorization objects.
    I have run all sync Jobs, but seemingly it doesnt help.
    Thanks,
    Sabrina

  • Business Role and PFCG Role

    Hi all,
        I am new to CRM 7.0 Can someone explain  What is a Business Role in CRM 7.0 and what is the relationship between Business role and PFCG role. What is the transaction Code to create a Business role.
       And also I heard that there is no PCUI in CRM 7.0. Is it true and if so what is used in place of the PCUI
    Thanks.
    Neha.

    Neha,
    Next time please do a search in this forum on business roles, and you would find many topics discussing this information more completely.  I'm locking this thread due to it fact that this question has been asked many times before by many different people.
    These threads explain the topic in more detail:
    Re: Reg: Business Role
    Assignment pfcg-role to user and assignment pfcg-role to business role
    Thank you,
    Stephen

  • ERM - Mass Role Import Error

    I just upgraded to SP11 and am trying to mass import a few roles.  It doesn't give me an error on the mass input screen, but it doesn't import the role, so I put DEBUG on and looked at the system logs.  I created the download file as both ANSI and UTF-8 and neither is working.  Here is the system log output:
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG
    -- Request dump for Action Path is cnvMassRlImport.scrMassRlImport.loadMassRoleImport
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG recordHistory:0::true#
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG -- End Request dump for Action Path is cnvMassRlImport.scrMassRlImport.loadMassRoleImport
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG Current Module: |CFG| Conversation: |cnvSysLog| Screen: |scrSysLog|
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG  Module#CFG#Conversation#cnvMassRlImport#Screen#scrMassRlImport#Action#loadMassRoleImport#
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG Changing Conversation: FROM: cnvSysLog TO cnvMassRlImport
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG com.virsa.framework.Context : clearConversationRep :   : 0 entries cleared from conversation repositiory
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG com.virsa.framework.Context : clearScreenRep :   : 0 entries cleared from screen repositiory
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG Handler found:class com.virsa.re.configuration.action.MassRoleImportAction
    2010-03-23 11:26:51,160 [SAPEngine_Application_Thread[impl:3]_39] DEBUG forwarding to:/cfg_mass_role_import.jsp
    2010-03-23 11:27:09,316 [SAPEngine_Application_Thread[impl:3]_28] DEBUG
    -- Request dump for Action Path is scrMassRlImport.importRoles
    2010-03-23 11:27:09,316 [SAPEngine_Application_Thread[impl:3]_28] DEBUG -- End Request dump for Action Path is scrMassRlImport.importRoles
    2010-03-23 11:27:09,316 [SAPEngine_Application_Thread[impl:3]_28] DEBUG Current Module: |CFG| Conversation: |cnvMassRlImport| Screen: |scrMassRlImport|
    2010-03-23 11:27:09,316 [SAPEngine_Application_Thread[impl:3]_28] DEBUG  Module#CFG#Conversation#cnvMassRlImport#Screen#scrMassRlImport#Action#importRoles#
    2010-03-23 11:27:09,316 [SAPEngine_Application_Thread[impl:3]_28] DEBUG Handler found:class com.virsa.re.configuration.action.MassRoleImportAction
    2010-03-23 11:27:09,332 [SAPEngine_Application_Thread[impl:3]_28] DEBUG dirName-->E:\usr\sap\WMS\GRC\ROLEIMPORT\1269358029332
    2010-03-23 11:27:09,347 [SAPEngine_Application_Thread[impl:3]_28] DEBUG returnStatus###success
    2010-03-23 11:27:09,347 [SAPEngine_Application_Thread[impl:3]_28] DEBUG forwarding to:/cfg_mass_role_import_status.jsp
    2010-03-23 11:27:10,769 [SAPEngine_Application_Thread[impl:3]_31] DEBUG
    -- Request dump for Action Path is scrMassRlImport.generateRolesForeGround
    2010-03-23 11:27:10,769 [SAPEngine_Application_Thread[impl:3]_31] DEBUG -- End Request dump for Action Path is scrMassRlImport.generateRolesForeGround
    2010-03-23 11:27:10,769 [SAPEngine_Application_Thread[impl:3]_31] DEBUG Current Module: |CFG| Conversation: |cnvMassRlImport| Screen: |scrMassRlImport|
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG  Module#CFG#Conversation#cnvMassRlImport#Screen#scrMassRlImport#Action#generateRolesForeGround#
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG Handler found:class com.virsa.re.configuration.action.MassRoleImportAction
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG In LockedObjBO.getLockedObjListByType(String objType) starts.....
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG In LockedObjBO.getLockedObjListByType(String objType) ends.....
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG GET_BUS_PROC =====  SELECT BP.BPROCID, BP.BPROCNAM, BL.BPROCDES FROM VT_RE_BPROC BP LEFT OUTER JOIN VT_RE_BPROCLNG BL ON(BP.BPROCID = BL.BPROCID AND BL.LNGID=?), VT_RE_BPSPASSOC BSP WHERE BP.BPROCID = BSP.BPROCID AND BSP.SUBPROCID =?
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG bprocName ===== HR00
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG keys.size():- 42
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 1 cache statusid = 1 value = DEVELOPMENT Desc = Kehitys
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 2 cache statusid = 2 value = PRODUCTION Desc = Produksjon
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 3 cache statusid = 1 value = DEVELOPMENT Desc = ??
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 4 cache statusid = 1 value = DEVELOPMENT Desc = Development
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 5 cache statusid = 2 value = PRODUCTION Desc = �retim
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 6 cache statusid = 1 value = DEVELOPMENT Desc = Projektowanie
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 7 cache statusid = 2 value = PRODUCTION Desc = Production
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 8 cache statusid = 2 value = PRODUCTION Desc = Produ��o
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 9 cache statusid = 1 value = DEVELOPMENT Desc = Desarrollo
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 10 cache statusid = 2 value = PRODUCTION Desc = Production
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 11 cache statusid = 2 value = PRODUCTION Desc = Produzione
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 12 cache statusid = 1 value = DEVELOPMENT Desc = ??
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 13 cache statusid = 1 value = DEVELOPMENT Desc = ??
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 14 cache statusid = 2 value = PRODUCTION Desc = ??
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 15 cache statusid = 1 value = DEVELOPMENT Desc = Udvikling
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 16 cache statusid = 2 value = PRODUCTION Desc = Produkt�v
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 17 cache statusid = 1 value = DEVELOPMENT Desc = ??????????
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 18 cache statusid = 2 value = PRODUCTION Desc = V�roba
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 19 cache statusid = 2 value = PRODUCTION Desc = Productie
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 20 cache statusid = 1 value = DEVELOPMENT Desc = Fejleszt�s
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 21 cache statusid = 2 value = PRODUCTION Desc = Produktion
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 22 cache statusid = 1 value = DEVELOPMENT Desc = Desenvolvimento
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 23 cache statusid = 2 value = PRODUCTION Desc = ???
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 24 cache statusid = 1 value = DEVELOPMENT Desc = Ontwikkeling
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 25 cache statusid = 2 value = PRODUCTION Desc = V�roba
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 26 cache statusid = 2 value = PRODUCTION Desc = ????????????
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 27 cache statusid = 1 value = DEVELOPMENT Desc = Sviluppo
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 28 cache statusid = 1 value = DEVELOPMENT Desc = Utveckling
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 29 cache statusid = 2 value = PRODUCTION Desc = Tuotanto
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 30 cache statusid = 2 value = PRODUCTION Desc = Produkcja
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 31 cache statusid = 1 value = DEVELOPMENT Desc = Utvikling
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 32 cache statusid = 1 value = DEVELOPMENT Desc = V�voj
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 33 cache statusid = 2 value = PRODUCTION Desc = Produktion
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 34 cache statusid = 1 value = DEVELOPMENT Desc = V�voj
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 35 cache statusid = 2 value = PRODUCTION Desc = ??
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 36 cache statusid = 2 value = PRODUCTION Desc = Produktion
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 37 cache statusid = 2 value = PRODUCTION Desc = Proizvodnja
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 38 cache statusid = 1 value = DEVELOPMENT Desc = Entwicklung
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 39 cache statusid = 1 value = DEVELOPMENT Desc = Geli?tirme
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 40 cache statusid = 1 value = DEVELOPMENT Desc = Razvoj
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 41 cache statusid = 2 value = PRODUCTION Desc = Producci�n
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 42 cache statusid = 1 value = DEVELOPMENT Desc = D�veloppement
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 1RoleStatusName:- DEVELOPMENT
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG 2RoleStatusName:- PRODUCTION
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG MissingDescriptionHelperDAO.java@37:com.virsa.re.dao.MissingDescriptionHelperDAO.getMissingRoleDesc()missingLst.size(): 1
    2010-03-23 11:27:10,785 [SAPEngine_Application_Thread[impl:3]_31] DEBUG startIndex: 0; endIdex: 1
    2010-03-23 11:27:10,800 [SAPEngine_Application_Thread[impl:3]_31] DEBUG RoleImportBO.java@1393:com.virsa.re.bo.impl.RoleImportBO.createRole()Creating Role:ZM:HR_PY_DEPT_SUPP_COMP profile:'Z:DEPTSUPP'
    2010-03-23 11:27:10,800 [SAPEngine_Application_Thread[impl:3]_31] DEBUG  InsIde getLastGenerateDate(3572,11)
    2010-03-23 11:27:10,800 [SAPEngine_Application_Thread[impl:3]_31] DEBUG  InsIde getLastGenerateDate(3572,11) ResultSet and got an entry
    2010-03-23 11:27:10,800 [SAPEngine_Application_Thread[impl:3]_31] ERROR Cannot assign a java.lang.String object of length 389 to host variable 7 which has JDBC type VARCHAR(100).
    java.lang.Throwable: Cannot assign a java.lang.String object of length 389 to host variable 7 which has JDBC type VARCHAR(100).
         at com.sap.sql.log.Syslog.createAndLogOpenSQLException(Syslog.java:85)
         at com.sap.sql.log.Syslog.createAndLogOpenSQLException(Syslog.java:124)
         at com.sap.sql.types.GenericResultColumn.checkLength(GenericResultColumn.java:212)
         at com.sap.sql.types.VarcharResultColumn.setString(VarcharResultColumn.java:63)
         at com.sap.sql.jdbc.common.CommonPreparedStatement.setString(CommonPreparedStatement.java:511)
         at com.sap.engine.services.dbpool.wrappers.PreparedStatementWrapper.setString(PreparedStatementWrapper.java:355)
         at com.virsa.re.dao.jdbc.ChangeHistoryDAO.saveChangeHistory(ChangeHistoryDAO.java:318)
         at com.virsa.re.bo.impl.ChangeHistoryBO.saveChangeHistory(ChangeHistoryBO.java:77)
         at com.virsa.re.bo.impl.RoleBO.updateRoleWithChngeHist(RoleBO.java:469)
         at com.virsa.re.bo.impl.RoleImportBO.createRole(RoleImportBO.java:1437)
         at com.virsa.re.bo.impl.RoleImportBO.importRoles(RoleImportBO.java:639)
         at com.virsa.re.bo.impl.RoleImportBO.importRoles(RoleImportBO.java:333)
         at com.virsa.re.configuration.action.MassRoleImportAction.generateRole(MassRoleImportAction.java:597)
         at com.virsa.re.configuration.action.MassRoleImportAction.execute(MassRoleImportAction.java:78)
         at com.virsa.framework.NavigationEngine.execute(NavigationEngine.java:273)
         at com.virsa.framework.servlet.VFrameworkServlet.service(VFrameworkServlet.java:230)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.runServlet(FilterChainImpl.java:117)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:62)
         at com.virsa.comp.history.filter.HistoryFilter.doFilter(HistoryFilter.java:43)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:58)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:384)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
         at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
         at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
         at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
         at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
         at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
         at java.security.AccessController.doPrivileged(Native Method)
         at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
         at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)

    Hi All,
    Two weeks ago, I have trying to load roles in ERM. The result hasn´t been than expected. I use SAP GRC AC (5.3). I need to load 6375 single roles, but only I have loaded 914 single role. Next I described to you a general context of my situation:
    1.  I divided the file VIRSA_RE_DNLDROLES.txt into 16 files (UTF - 8) with single roles per module (AM, PO, PS, GL, SD...)
    2. Each file contains segmented roles associated to a business process and multiples sub - business process.
    3. When I checked roles in ERM, I notice that just load any roles. Not all roles in template was loaded.
    4. Files size varies between 18 kb y 145 kb.
    5.  Files concerned "Mass Role Import" have the following extensions: Bulk Download File* (.txt), Enterprise Role Management Information File (.xls) and Primary Org. Level File (.xls).
    5. A error generated was "Unknown error occurred while performing operation (No space left on device (errno:28))."
    Honestly, I don´t know the reason for not loading all roles from template. Any suggestions? or ideas?
    Thanks in advance

  • Import roles to the ERM without using the "Mass Role Import

    Hello,
    I want to know if there is another way to import roles to the ERM without using the "Mass Role Import.
    Im'm using SAP GRC AC 5.3
    Best Regards.
    Pablo Mortera.

    Hi.
    There is NO other way to import roles..
    We need to use only ERM for "Mass Role Import.
    Regards
    Gangadhar

  • How to generate mass roles in SUPC

    Hi All,
    I have to generate mass roles at one time. There are 3000 roles to be generated. I am using tcode SUPC to do this but when give the list of roles and click on generate button it is taking only one role.
    I am generating derived roles.
    Please advise..
    Thanks,
    Masood

    > I am generating derived roles.
    Perhaps Salman123 wrote a CATT to hit the "Adjust derived roles" function once, or dug deeper?
    If you have less than 50 roles and all standard and maintained authorizations you are better off using the delete menu and import from role option in my opinion. (make sure the root node is small and use redundancy compression).
    If you have more than 50 roles, then (shame on me...) try to keep them very small with only selected objects and use the option to delete their profiles completely and upload them on mass. Such roles are anyway usually best suited for BW systems and an entirely different concept (Analysis Authorizations).
    You can avoid derived roles completely this way.
    Cheers,
    Julius

  • ERM - MASS ROLE UPLOAD

    Hi All,
    when using the Mass role upload from SAP backend systems, i expect that all roles will be uploaded to the final stage in the role methodology inthe ERM and that they will be already generated.
    After all, those roles already exists in the systems.
    well, i see that this is not the case and i have to go through the different stages with every role.
    is this indeed the system behavior or did we do somthing wrong ?
    thanks

    Hi
    We did as you suggested but configured the approval stage in the methodology since the role is already approved and is in ECC PROD.
    Now we encountered a situation where we need to update the role in ERM as part of continuos maintainance (after upload) but we don't have the authorization option to enter and change it but only the "save" and "change history" push buttons.
    We changed bach the methodology to the relevant one with all the stages but still we can't maintain the uploaded role. the change in the methodology did not effect the role already uploaded.
    Do you have any suggestions regarding how we can fix this issue?
    Thank you

  • Mass Role Import  -- 9000 derived roles with 9 org Levels, how to get TXT

    Hello,
    I hava a problem.
    I want to use the (Mass Role Import) Bulk Role Import element in the ERM  (SAP GRC AC 5.3 )for importing SAP roles (I only found that way to import roles from SAP).
    I have 100 primary roles and more or less 9000 derived roles with 9 org Levels.
    Is there a way to get this 9000 derived roles with their 9 org Levels in a TXT file?. Or do I have to do it manually this part to insert it in the "Bulk Role Import ".
    Can someone help me?
    Thank you in advance.
    Pablo Mortera.

    Hi Mike,
    what kind of TA´s are in your role. Is it possible to integrate a "dummy" TA (without conflicting
    your SOD)?
    In my example I have CO TA´s bundled in a role:
    Role:   ZXXXX_O:CO_ORDERMANAGER_CRE - CO Order Manager Pflege
    with
    KO01 Create Internal Order ...
    KO02 Change Order ... 
    KO04 Order Manager ... 
    KOK2 Collective Proc. Internal Orders ... 
    KOK4 Aut. Collect. Proc. Internal Orders
    update this role with TA KO01 and KOKRS will be available for derivation.
    Done this manually without import in ERM.
    Reg,
    Ulrich

  • Mass role import

    Hi guys,
    i have a problem with mass role import. When i want to do a mass role import the system warns me with the following error: Failed processing; role not imported and the log does not help.
    Thanks in advance!!!
    Kind regards!!!
    Isaac

    I attach the System Log
    2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]3b0c[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!ZAP:SOL_ANT_VIAJES_COMPEN-G102 : ]
    2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]6f28[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!CO:RPTE_CO-LLAD : ]
    2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]b79e[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!GL:VIRL_CTAS_CONTAB-ALL-CTRL : ]
    2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]608b[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!TR:ADMR_DATOS_MTRO-G103 : ]
    2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]b29c[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!GL:ANAL_VALU_MONETARIA-ALL : ]
    2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]55c2[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!AR_SOL_ANTICIPO-I102 : ]
    2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]8e78[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!Z_FI_TX_S_ALR_87012083 : ]
    2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]08f5[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!/VIRSA/Z_VFAT_ADMINISTRATOR : ]
    2010-04-08 09:10:54,788 [Thread-1507] DEBUG BackgroundJobHistoryDAO before

  • Runtime error while creating role in pfcg.

    hello friends,
    Runtime error occurs while i creating the role in pfcg. when i click the option under the menu tab  in PFCG the following Runtime error occurs.
    Runtime Errors         *CALL_FUNCTION_PARM_UNKNOWN*
    Except.                CX_SY_DYN_CALL_PARAM_NOT_FOUND
    Please help me to solve this issue.
    thanks&Regards,
    Farkath.C
    Edited by: farkath ulla on Jul 4, 2011 1:33 PM

    Hi,
    Check SAP  Note 980625 - PFCG: Runtime error during menu transfer
    Thanks
    Sunny

  • Error in Mass role import in Role Expert

    Hi,
    While configuring role expert, in mass role import ,I am able to import the bulk download file but its import is getting failed and error is "<b>File is in invalid format</b>"
    If I alter the downloaded file, another error is generated saying "<b>Cannot write to Upload Directory
    ursula\sap_temp\ROLEIMPORT or Directory does not exist.</b>
    Please help me out!
    Regards,
    Anubha

    Hi Michael,
    I am not able to import the SAP roles properly.
    I downloaded the roles from backend properly. But while importing them I am getting a list of backend roles and against each of them following message <b>Error in processing role infomation. Role not imported</b>.
    What could be the possible mistake? I have set <b>Upload Directory</b> = ursula\sap_temp.
    One more problem, while creating a new role I am able to reach successfully till the risk analysis phase. After that, as soon as I click on approval , i am getting message <b>Error in creating request</b>.
    I suppose the control should go to Access Enforcer from here.I have already set AC Workflow URL for role approval in Configuration -> miscellaneous.
    Thanks in advance!
    Anubha

  • Regarding publishing query inside a role in pfcg

    Hello All..
    I currenlty  created a role in pfcg in BW system,.
    In role I have assigned object S_RS_COMP,S_RS_COMP1...
    In BEX Analyzer,i then published a query to that role.
    After publishing the same , i was able to see query in the role.
    I assigned this role to the user.
    When user tries to execute the query,the web browser opens up.
    Can u pls let me know why this is happening...
    Regards
    Ajit

    Ajit,
    The Internet Graphics Server (IGS) is a Server-based engine for generating graphical and non-graphical content
    Without this properly installed, the web content will can not be displayed.
    BW_IGS_CHART_TEST is a program which tells if IGS is installed properly or not.
    Please check the path of the query.
    Also note that using this link you can only access the web query and not BEx query.
    For BEx query you'll have to type RRMX and proceed. Double clicking on the link would only open the web page and not BEx.
    Hope that helped.
    Saurabh.
    Edited by: Saurabh parashar on Jan 25, 2010 11:52 AM

  • SAP Standard Menu Text missing while Creating Role in PFCG

    All:
    I am having a weird issue to where the "SAP Standard Menu Text" is missing when creating a role in PFCG and using the "Copy Menu > From SAP Menu" function.
    When I click the button I get the following:
    1) Popup of the SAP standard menu tree
    2) The area for the folders where there should be text is missing
         - appears as the " [ ] " symbols
    3) "[ ]" symbols appears through entire menu tree for folders and transactions.
    Any ideas?
    - Thanks Matt

    Yes this is a bug....Please see note 1421375 for the solution

  • Assign queries to authorization role via PFCG maintenace

    Hi,
    I would like to assign several queries to existing authorization roles.
    Therefore I am using the transaction PFCG > maintain the menu > add "other" SAP BW Query URL and fill in the name as well as object description.
    However, the new query will not be shown in the BEx Analyzer in the role folder.
    What do I have to administrate that the query will be shown in the role menu (BEx Analyzer)?
    Thanks!

    Dear Arvind,
    thanks for your reply.
    As an authorization administrator for SAP BI I do have the authorization for S_USER_AGR already.
    I am just testing in our development system.
    However, the query will not appear in the BEx Analyzer while selecting "Open Query" and search in "Roles".
    As far as I know queries could provided to authorization roles via BEx Analyzer.
    But does no possibility exists to maintain the authorization role via PFCG?
    Regards, Christian

Maybe you are looking for