Mass selection of roles in SU10

Hi
I have to remove lot of roles from 2000 users which have more than 20 roles in SU10.
I am doing part by part by pasting 20 roles in SU10.
Is there a way to select mass roles in su10 like the user selection.
Thanks
Baskar R

> I have to enter every 20 roles in su10 roles tab. Instead of that,
>
> i want to paste entire 500 roles in one short in su10 roles tab.
You want to assign 500 roles to each user!!!!!!! Did you think about the maximum number of profile assignment limit for each user id? If not, then i would like to request you to check the following SAP Notes:
[Note 841612 - Maximum number of profiles per user|https://service.sap.com/sap/support/notes/841612]
[Note 410993 - Maximum number for profiles and authorizations|https://service.sap.com/sap/support/notes/410993]
[Note 511200 - PFCG/PFUD/SU01/SU10: Role assignment and profile comparison|https://service.sap.com/sap/support/notes/511200]
Also, if you need to assign so many roles to each user id then it is missing the important topic SOD. Also the design is itself Incorrect.
Regards,
Dipanjan
Edited by: Dipanjan Sanpui on Oct 22, 2009 3:21 PM

Similar Messages

Mass Removal of Roles through SU10

I have thousands of expired accounts that still have valid roles. I want to remove all roles from these expired accounts. In Su10 to remove roles do you have to list the roles you want to remove? Is there a function in SU10 to simply remove any roles these users have? In Su10 I tried checking the remove box and the change box but then when I execute it is not removing any of the roles when I look in SU01. So to actaully remove the roles does it require you to list them?
Edited by: Alex Williams on Apr 23, 2008 3:13 PM

Sorry I misread your post. I suppose there is a reason why you want to keep the expired accounts ? Otherwise the quickest way is simply to delete the expired accounts.
You can use SU10, but you would need to list every role. You also have to make sure that the role dates encompass the dates of the roles that are assigned to the ids. Usually it is the start date - so you may want to put in a start date prior to even implementation to catch everything.
Edited by: JC on Apr 23, 2008 9:47 AM

Mass consolidation of Roles

Hi,
I have seen many posts on copying, uploading and combining roles. However, I am looking for a slightly different solution. I believe it is probably impossible to accomplish in an automatic manner (via SECATT).
I have individual reporting and inquiry roles by location/module (278). I would like to combine the roles into one role with the transactions and would prefer to maintain the Authorization Data under the Authorizations tab. I intend to consolidate the Auth. Objects during generation.
Here are the issues I am experiencing:
1) In the menu tab, using "From other role", I would have to select each role then each transaction code. eCatt does not deal with spatial selection very well. This is not a good solution for the number of roles I have to add.
2) By uploading roles, I am in the same position as 1.
Why am I looking for an SAP provided solution? My business analysts and I would feel more comfortable with the changes to their roles. They are worried about operator error and I am, too.
At this point, I believe my only solution is to download (via SECATT) all 278 roles, combine the transactions (probably a lot of overlap in the transactions) then upload into one role. Then I would have to re-enter all the authorization data by hand.
If anyone has a better idea, I would love to hear it. Thank you in advance for your help.
Regards,
Shanell

Hi,
Try this ...
Step 1: Execute SE16N for table AGR_TOCDES and find out all the t-codes in your 258 roles
Step 2: Import from the file ....the format would be
something like this -
FORMAT              1.1A
NODE                000020000100001TRANSACTION         PFCG
NODE                000030000100001TRANSACTION         SU01
NODE                000040000100001TRANSACTION         SUIM
NODE                000050000100001TRANSACTION         ST01
NODE                000060000100001TRANSACTION         SU10
NODE                000070000100001TRANSACTION         SUGR
If you need t-code PFCG, SU01 etc to be added. Just notice that the format is kind of hard coded.

VIRSA mass creation of roles

Hi All:
        Can anyone tell me how to perform mass creation of roles using VIRSA role expert,also if you could point me to some documentation it will be very helpful.
        Thanks,
          J D

Hi Olivier,
I am afraid, my help is limited to this forum.
However, I can help you with some ABAP logic :
Table AGR_1252 is used to store the ORG values of derived roles.
You can start working with an ABAP'er to get his coding magic started. Though I am not familiar with ABAP, I believe our ABAP'er debugged PFCG and knew what needed to be done. I have no clue what he did
the logic:
Start of Selection
Load information into internal tables for use in creating report
Upload the Organsational Changes Spreadsheet
Ensure Roles exist and there are no duplicates
Ensure Organistional levels exist and there are no duplicates
*Checks if the file exists
Role must exist
Ignore duplicate roles
Authority Check Role for user
IMP Logic checks-
For Add High range of Role must be greater than low range
*...if adding specific ranges - remove existing * or space entry if it
exists
*...if adding * access remove other accesses if they exist
*Process All Org Levels for each role
...submit report to generate profiles
You can start working with your ABAP'er with this logic.
*Disclaimer* - this may need enhancements to meet your requirements. Also, I have just put the logic what I could remember at the top of my head. I may have missed something.
Hope it helps
Abhishek

Blank Screen after selecting a role within the new WebClient User Interface

Hi,
I have another Problem with the new UI.
I did all steps as described within the Best Practice Guide for the new Web Client (C04). I used this guide to set up our CRM 2007 System.
Unfortunately no matter what I do after selecting the appropriate role after logging on to the system I only get a blank screen and nothin else happens. Even changes to the navigation frame have no effect.
If I do not assign a business role I get at least this error. But after doing this I allways got a blank screen no matter what I change in customizing.
Does anyone have any clues where the error might lie?
Best Regards
Christian

Hi Christian,
Could you please share me your experience how you resolved this issue?
We are at the clients place facing the same problem. After logging in it is asking to select business roles like salespro,marketpro....etc...but after selecting this role we are getting blank white screen in the browser with URl- http://*******.**.com:8030/sap/bc/bsp/sap/crm_ui_frame/default.htm?sap-client=150&sap-sessioncmd=open
We have followed the latest 2007 Best Practice where we have assigned the roles to user like : SAP_CRM_UIIU_FRAMEWORK
SAP_CRM_OR_ADMIN
SAP_CRM_OR_USER
BP_POWERUSER
In best practice 5.2 this role was assigned through Org Model where as in 2007 first it guides us to get the WebClient and then asking us to create Org Model.
you had mentioned that you got rectified through local server settings on OS level. Can you please help in explaining what exactly you did to rectify the DNS setting????
Any other solution most welcome
Regds...Arup

Mass Generation Of Roles

Hi
Which option does user have to choose from the list to output the mass generation of roles at PFCG?
Nag.

Hi ,
unfortunately there is no way in standard to bypass the manual work.
IF SU24-values have been changed for a t-code, all roles that contain that t-code, have to be adapted manually and afterwards regenerated.
The profile gets the status ' To adjust' until you have maintained the authorizations once and saved. Until then no mass generation (SUPC) will be able to regenerate thos profiles.
Please consider enough time to adapt your roles during your test upgrade. A good idea is to adapt all roles to the new authorizations in a test environement and save them afterwards in a transport. AFter you have performed the upgrade in your productive environement, you can import then this transport and you don't have to perform this time consuming 'adaption-work' again in your p-environement....
b.rgds, Bernhard

Selecting a Role from dropdown list throws error

Hi,
I'm using CRM Web UI 7.0. I'm facing problem selecting a Role from dropdown list in the assignment block Roles in the screen Employee. The problem is that the dropdown list doesn't show any value on clicking and gives an error message "Error on page" at the bottom of page. The roles exist in the system and also I'm able to see them for Accounts screen & in the GUI.
Kindly help.
Regards,
Shaili

Hi,
Just to add to this issue: WebUI-> Account Management-> Contacts-> Roles-> Edit list. When we try to add a role from dropdown in Firefox, it works fine but same throws an error in Internet Explorer related to some script.
Did someone face similar issue and how was it solved?
Regards,
Shikha

Display the selecting business role page when launching the transaction

Dear experts,
According to the following URL,
I configured Transaction Launcher to launch CRM GUI transaction.
[https://websmp207.sap-ag.de/~form/sapnet?_FRAME=CONTAINER&_OBJECT=011000358700000311352008E]
1. Create BOR Object Type
2. Define Logical System and Assign ITS URL
3. Use Transaction Launcher Wizard
4. Create Logical Link
I try to launch CRM GUI transaction,
but selecting business role page is displayed(not CRM GUI transaction).
Could you please help us out?
Regards,
Takehiko Kurosawa

If i recall correctly from PS2, business role pages are pages that are only visible in the personal space of users. Normaly users can create there own pages in there own personal space. When you create business role pages, these pages will be available in everybody's personal space.
That's why they are not available in a custom group space. Business role pages are bound to the personal space.
If you want to role out pages to a specific department than you can solve this by using permissions. Create your business page in your custom space and set the permissions so that only people from a specific department can see the page. Therefore you need to put all your users from a specific department in a group.

Mass selection for deletion of mail or messeges?

i have like 4 buzzilion mail and messages that need to be deleted and i'm getting carpel tunnel trying to individually delete them. can someone plz let me know if there is some sort of mass selection available for either one of these
thx!

Open your message list, click "Edit" and delete. This will delete by person but is much faster than deleting individual text messages.

No MASS SELECTION button in Quota Arrangement Header screen

Hi SAP SCM Experts,
My university is testing the latest SAP SCM 7.0 for upcoming semester. At the screen Change Inbound Quota Arrangement (transaction code /SAPAPO/SCC_TQ1), I click the button Creation of a New Entry in the section Quota Ar.Headers so as to add products; however, the button MASS SELECTION is missing at the option Mass Selection. The picture below displays the issue.
Anyone knows SAP Note related to this issue or would you please guide me how to fix this?
Thank you in advance.
Regards,
Danny

Hi Mike,
Thank you for advising me the correct SAP Note. Finally, I can bring the hidden gem "Mass selection button" forward on the Quota Arrangement screen . I implemented the SAP Note 1362364 and here the mass selection button is.
Kind regards,
Danny

ERM : selection of roles listed in multiple pages

Hi
In ERM, we cannot select roles more than what all are shown at current page (for say export or mass maintenance)...Is this a limitation of the product or any configuration setting is possible to address this.
Thanks
Abhijeet

Hi Abhijeet,
I hope I understand your question and the solution is,
Suppose you want to do Mass Maintenance in ERM and you are searching roles on your specific criteria. Now the system given output of 100 roles. But the current page is showing only 8 rows per page. You want to see all 100 rows in this single page.
In the buttom of the nevigation screen you can see Rows per page . Here it is showing 8.
But Total Number of Records is 100 showing. Just replace 8 with 100 in the Rows per page and press the tab key. It will show you all 100 rows in this current page 100%.
Your problem will be resolve by doing this exercise.
Regards,
Sudip.
Edited by: Sudip Saha on May 12, 2009 5:46 PM

Reg: Mass generation of roles with open authorization

Hi,
Is there an option to mass generate roles with open authorizations ?
It would be helpful if it there exists some transactions or reports that would help in doing so unlike CATT scripts or batch sessions.
Regards,

Hi Arravind,
Why cant you correct the roles by filling up those open fields?? I guess you can create a CATT script to acheive your objective but I suggest better to check why there are open fields in the role then generating them blindly.
Do let us know if you need any more information from our side. If you want to know how to create a CATt script then search for it in SDN/Google you will surely get your answer.

Mass deletion of roles from users

I want to delete all roles from locked users. Is there a specific transaction for this instead of SU10? In SU10 one has to enter the roles to remove.

We developed our own application which locks users after a while, then removes their role assignments after a while, and then lists roles which no longer have any assignments or no one is using anything which the role authorizes.
This way you can optimize / automate periodic controls.
There is no standard monitoring cockpit for this, but you can use declaritive system params to destroy password based authentication.
The real trick with periodic controls is to target the sample before you unassign and destroy roles, but the ability to do that depends on how you buikd the roles.
Disclaimer: If you use composite roles then you have no chance. You are doomed.. ;-)
Cheers,
Julius

Create Mass Selections in APO DP

Hi,
does anyone know of a method how to mass create selections e.g. from a file or any other method that is saving manual maintenance?
Thanks and kind regards,
Johannes

We had written a Z program to do this since it is not possible to do through any other transaction. The program essentially makes entry in table /sapapo/TS_SELKO taking a csv file as an input. You would need to call functions GUI_UPLOAD and /SAPAPO/MCPSH_SELECTION_SAVE.
Check in debug mode when you hit save button on creating selection ID for further details on the program.

Su25 - mass generation of roles

Hello,
I have one problem in my upgrade project that...my client has done the upgradation but he has not done that su25 2a - 2d steps....noe i want to do that 2c steps to complete
when i clicked it 2c steps in su25 it shows me long list of roles to be maintained ...os is there any way to do maintainance of all the roles at the same time....and generating all profiles in the roles at the same time....
awaitng for ur reply....will give full reward for usefull answer

Hi ,
unfortunately there is no way in standard to bypass the manual work.
IF SU24-values have been changed for a t-code, all roles that contain that t-code, have to be adapted manually and afterwards regenerated.
The profile gets the status ' To adjust' until you have maintained the authorizations once and saved. Until then no mass generation (SUPC) will be able to regenerate thos profiles.
Please consider enough time to adapt your roles during your test upgrade. A good idea is to adapt all roles to the new authorizations in a test environement and save them afterwards in a transport. AFter you have performed the upgrade in your productive environement, you can import then this transport and you don't have to perform this time consuming 'adaption-work' again in your p-environement....
b.rgds, Bernhard

Mass selection of roles in SU10

Similar Messages

Maybe you are looking for