MSS Authorizations

Hi Walter,
What authorizations need ot be given to MSS users in ECC6.0 backend system?
I got a note: 844639. Is this relevent? If yes, then:
1. There are so many WD applications based services for MSS. Do I have to get a list of each Authorization Object assigned to all the services and then consolidate it under one single ZMSS role in PFCG?
2. What about the default values of the sub objects of all Authorization Objects?
3. Similar to the ESS composite role SAP_EMPLOYEE_ERP with all the necessary authorizations, dont we have a standard MSS composite role which we can activate directly?
Appreciate any help on the matter.
Thanks,
Shobhit

Sounds like SSO is not working or the user does not have the right authorization on the R/3 side.
Users need to have the S_SERVICE authorization object on their R/3 role. Take a look at this document for Self-Service security details:
https://websmp204.sap-ag.de/~form/sapnet?_FRAME=CONTAINER&_OBJECT=011000358700000566812005E

Similar Messages

  • MSS Authorizations to the ABAP User: Note 844639

    Hi Experts,
    I am implementing MSS 1.0 on mySAP ERP05 and I need information on MSS Athorizations to be assigned to the backend MSS users.
    I have got a note 844639 but I have the following questions:
    1. Do I have to implement note 785345 as a prerequisite? I have upgraded from 4.6c to ECC6. Do I still require to implement this note?
    2. There are so many WD applications based services for MSS. Do I have to get a list of each Authorization Object assigned to all the services and then consolidate it under one single ZMSS role in PFCG?
    3. What about the default values of the sub objects of all Authorization Objects?
    4. Similar to the ESS composite role SAP_EMPLOYEE_ERP with all the necessary authorizations, dont we have a standard MSS composite role which we can activate directly?
    I would really apreciate some help on this.
    Regards,
    Shobhit

    Hi Walter,
    I am putting across my questions again regarding Note 844639:
    1. There are so many WD applications based services for MSS. Do I have to get a list of each Authorization Object assigned to all the services and then consolidate it under one single ZMSS role in PFCG?
    2. What about the default values of the sub objects of all Authorization Objects?
    3. Similar to the ESS composite role SAP_EMPLOYEE_ERP with all the necessary authorizations, dont we have a standard MSS composite role which we can activate directly?
    Appreciate any help on the matter.
    Thanks,
    Shobhit

  • MSS - Authorization

    Hi,
    Different Managers having different responsibilities need to have specific authorization to perform their specific functions... for instance a manager who is entitled to approve PO or approve training request or carry out appraisals etc.....
    Can this be controlled via structural authorizations in the ERP system or is there something in the Portal system.
    Thanx
    Deepak

    Authorizations must be appropriately defined in the back end R/3 system. This is also part of your MSS configurations. You need to do it via IMG ( Implementation Guide).
    *Points will be appreciated.

  • ESS / MSS Authorizations

    Hi gurus,
    For the ESS point of view the composite role used is SAP_EMPLOYEE_ERP.
    Like vise can some one please tell me what will be the composite role for the Manager Self Services.
    Thanks in Advance
    Sera

    Sera,
    Please refer note 844639 and /thread/457780 [original link is broken]. Hope this helps.
    award points if helpful.

  • ESS & MSS related authorizations details..

    Can someone help on whether ESS/MSS authorisation has something specific to be done other tan the pfcg in R/3. Could you give me more details on how is ESS/MSS authorizations are handled.. Is there any stand guide available which guides on setting this up.
    Thanks,
    Chetan Hinduja

    Hi Chetan,
    Among the deployed content of ESS and MSS in the Portal, you'll probably find roles in it that should be assigned to the users which are going to access those services.
    Assigning these roles to the Portal users and the R/3 roles in PFCG should be enough.
    Kind Regards,
    Simone

  • Managing Consultants and Contractors via HCM and MSS

    Hi All,
    We are just launching our HCM initiative.  The promise is high but the learning curve is steep.
    There is one thing we are trying to accomplish that does not seem obvious how it would be done in SAP.  We would like to be able to keep track of consultants / contractors and who their hiring manager is.  However, since consultants come and go all the time, these are not positions that we would maintain as part of the org chart or in OM (doing so also raises co-employment issues). 
    Ideally, we will create a personel type of "Consultant" where we will capture only basic information such as name, start date/end date, and affilated agency. Ideally again, when we introduce MSS, we would like managers to be able to simply provide the information about a newly engaged contractor without needing to define all the elements required for an employee who belongs on the org chart.  The reason for wanting to store this in HCM is so that our interfaces to active directory and other systems will have consultant information and there is a single point of entry.  We want to know who the hiring manager is as well.  We want to assign anyone who walks in the door an world-wide-id number that identifies the person.
    It does not seem like HCM is set up to manage contingent workers or agency employees??
    Thoughts?
    Thanks.

    Hi,
    I cant see any co-employement issues if U maintain consultants in Org structure.
    U can create one Orgunit may be say "Out side vendor" and create positions there.
    And U can maintain the reporting structure for MSS authorizations.
    We can further discuss on this to get a better solution. Other ideas are also welcoming.
    ~BiSu

  • MSS - Profile Matchup Fake TeamViewer Problem

    Hi,
    I have to make some changes to the  Profile Matchup component.  To deploy and run It requires a team views which is part of the Profile Matchup development component.  The component has a Application called TestProfileMatchupApp.  When I run and deploy I get this exception
    com.sap.pcuigp.xssfpm.java.FPMRuntimeException: No instance id defined for VAC com.sap.xss.hr.tmv.vac.VTeamViewerComp.
         at com.sap.pcuigp.xssfpm.java.MessageManager.raiseException(MessageManager.java:111)
         at com.sap.pcuigp.xssfpm.wd.FPMComponent$FPM.getPropertyValue(FPMComponent.java:1003)
         at com.sap.pcuigp.xssfpm.wd.FPMComponent$FPMProxy.getPropertyValue(FPMComponent.java:1141)
         at com.sap.xss.hr.tmv.vac.VTeamViewerComp.onBeforeOutput(VTeamViewerComp.java:234)
         at com.sap.xss.hr.tmv.vac.wdp.InternalVTeamViewerComp.onBeforeOutput(InternalVTeamViewerComp.java:208)
         at com.sap.xss.hr.tmv.vac.VTeamViewerCompInterface.onBeforeOutput(VTeamViewerCompInterface.java:144)
         at com.sap.xss.hr.tmv.vac.wdp.InternalVTeamViewerCompInterface.onBeforeOutput(InternalVTeamViewerCompInterface.java:136)
         at com.sap.xss.hr.tmv.vac.wdp.InternalVTeamViewerCompInterface$External.onBeforeOutput(InternalVTeamViewerCompInterface.java:212)
         at com.sap.pcuigp.xssfpm.wd.FPMComponent.callOnBeforeOutput(FPMComponent.java:602)
         at com.sap.pcuigp.xssfpm.wd.FPMComponent.doProcessEvent(FPMComponent.java:568)
         at com.sap.pcuigp.xssfpm.wd.FPMComponent.doEventLoop(FPMComponent.java:437)
         at com.sap.pcuigp.xssfpm.wd.FPMComponent.wdDoInit(FPMComponent.java:195)
         at com.sap.pcuigp.xssfpm.wd.wdp.InternalFPMComponent.wdDoInit(InternalFPMComponent.java:110)
         at com.sap.tc.webdynpro.progmodel.generation.DelegatingComponent.doInit(DelegatingComponent.java:108)
         at com.sap.tc.webdynpro.progmodel.controller.Controller.initController(Controller.java:215)
         at com.sap.tc.webdynpro.progmodel.controller.Controller.init(Controller.java:200)
         at com.sap.tc.webdynpro.clientserver.cal.ClientComponent.init(ClientComponent.java:429)
    and so on
    Any ideas?
    Thanks Preston Sampson

    Hi,
    Faced this problem before and found out that its a authorization issue more than anything else..
    Did u try
    Note 844639 - MSS Authorizations and roles for WD services in ERP 2005
    Before this note ...
    Use the report contained in Note 785345 to copy the authorization-check
    indicator and authorization default values for the services from the SAP
    tables (USOBX, USOBT) to the customer tables (USOBX_C, USOBT_C), so that
    you can use these in Transaction SU24.
    Let me know if it works after this. MSS has all these peculiar auth problems.
    Cheers!!
    Ashutosh

  • No Adobe Form Is Assigned to the Scenario -ERROR

    Hi All,
    I configured the ADS server and was able to display the test Adobe Forms and test the forms successfully in ECC and Portal side.
    (We are using ERP 2005 and EP 7.0 of NW2004s)
    However when I tried to test the PCR forms in MSS, I get the following error.
    Also I WAS ABLE TO DISPLAY the  forms when I had SAP_ALL autorizations at the backend ECC system. But when I remove the SAP_All and provide with all the ESS/MSS authorization with all the needed RFC authorizations, I'm  unable to display the forms. Can anyone please help me resolve this issue.
    <b>com.sap.pcuigp.xssfpm.java.FPMRuntimeException: No Adobe Form Is Assigned to the Scenario</b>
         at com.sap.pcuigp.xssfpm.java.MessageManager.raiseException(MessageManager.java:111)
         at com.sap.pcui_gp.isr.isrprocessevent.FcISRProcessEvent.raiseExceptions(FcISRProcessEvent.java:1819)
         at com.sap.pcui_gp.isr.isrprocessevent.FcISRProcessEvent.callRFCIsrGetFormUrl(FcISRProcessEvent.java:935)
         at com.sap.pcui_gp.isr.isrprocessevent.FcISRProcessEvent.setTemplateSource(FcISRProcessEvent.java:373)
         at com.sap.pcui_gp.isr.isrprocessevent.FcISRProcessEvent.callRFCIsrProcessEvent(FcISRProcessEvent.java:699)
         at com.sap.pcui_gp.isr.isrprocessevent.FcISRProcessEvent.callIsrProcessEvent(FcISRProcessEvent.java:294)
         at com.sap.pcui_gp.isr.isrprocessevent.wdp.InternalFcISRProcessEvent.callIsrProcessEvent(InternalFcISRProcessEvent.java:1178)
         at com.sap.pcui_gp.isr.isrprocessevent.FcISRProcessEventInterface.callIsrProcessEvent(FcISRProcessEventInterface.java:127)
         at com.sap.pcui_gp.isr.isrprocessevent.wdp.InternalFcISRProcessEventInterface.callIsrProcessEvent(InternalFcISRProcessEventInterface.java:386)
         at com.sap.pcui_gp.isr.isrprocessevent.wdp.InternalFcISRProcessEventInterface$External.callIsrProcessEvent(InternalFcISRProcessEventInterface.java:546)
         at com.sap.pcui_gp.isr.isrprocessevent.showform.VcISRShowForm.onBeforeOutput(VcISRShowForm.java:215)
         at com.sap.pcui_gp.isr.isrprocessevent.showform.wdp.InternalVcISRShowForm.onBeforeOutput(InternalVcISRShowForm.java:412)
         at com.sap.pcui_gp.isr.isrprocessevent.showform.VcISRShowFormInterface.onBeforeOutput(VcISRShowFormInterface.java:137)
         at com.sap.pcui_gp.isr.isrprocessevent.showform.wdp.InternalVcISRShowFormInterface.onBeforeOutput(InternalVcISRShowFormInterface.java:136)
         at com.sap.pcui_gp.isr.isrprocessevent.showform.wdp.InternalVcISRShowFormInterface$External.onBeforeOutput(InternalVcISRShowFormInterface.java:212)
         at com.sap.pcuigp.xssfpm.wd.FPMComponent.callOnBeforeOutput(FPMComponent.java:654)
         at com.sap.pcuigp.xssfpm.wd.FPMComponent.doProcessEvent(FPMComponent.java:619)
         at com.sap.pcuigp.xssfpm.wd.FPMComponent.doEventLoop(FPMComponent.java:474)
         at com.sap.pcuigp.xssfpm.wd.FPMComponent.access$600(FPMComponent.java:87)
         at com.sap.pcuigp.xssfpm.wd.FPMComponent$FPM.raiseEvent(FPMComponent.java:1038)
         at com.sap.pcuigp.xssfpm.wd.FPMComponent$FPMProxy.raiseEvent(FPMComponent.java:1250)
         at com.sap.xss.hr.pcr.selectform.VcPcrSelectForm.toShowForm(VcPcrSelectForm.java:227)
         at com.sap.xss.hr.pcr.selectform.wdp.InternalVcPcrSelectForm.toShowForm(InternalVcPcrSelectForm.java:190)
         at com.sap.xss.hr.pcr.selectform.SelectForm.onActionToShowForm(SelectForm.java:143)
         at com.sap.xss.hr.pcr.selectform.wdp.InternalSelectForm.wdInvokeEventHandler(InternalSelectForm.java:172)
         at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.invokeEventHandler(DelegatingView.java:87)
         at com.sap.tc.webdynpro.progmodel.controller.Action.fire(Action.java:67)
         at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doHandleActionEvent(WindowPhaseModel.java:420)
         at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:132)
         at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:335)
         at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:143)
         at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:299)
         at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingPortal(ClientSession.java:731)
         at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:667)
         at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:232)
         at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:152)
         at com.sap.tc.webdynpro.clientserver.session.core.ApplicationHandle.doProcessing(ApplicationHandle.java:73)
         at com.sap.tc.webdynpro.portal.pb.impl.AbstractApplicationProxy.sendDataAndProcessActionInternal(AbstractApplicationProxy.java:879)
         at com.sap.tc.webdynpro.portal.pb.impl.localwd.LocalApplicationProxy.sendDataAndProcessAction(LocalApplicationProxy.java:77)
         at com.sap.portal.pb.PageBuilder.updateApplications(PageBuilder.java:1291)
         at com.sap.portal.pb.PageBuilder.SendDataAndProcessAction(PageBuilder.java:325)
         at com.sap.portal.pb.PageBuilder$1.doPhase(PageBuilder.java:831)
         at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processPhaseListener(WindowPhaseModel.java:755)
         at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doPortalDispatch(WindowPhaseModel.java:717)
         at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:136)
         at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:335)
         at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:143)
         at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:299)
         at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:711)
         at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:665)
         at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:232)
         at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:152)
         at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
         at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doPost(DispatcherServlet.java:53)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:390)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:264)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:347)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:325)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:887)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)
         at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)
         at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)
         at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
         at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
         at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
         at java.security.AccessController.doPrivileged(Native Method)
         at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
         at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)
    Thanks,
    Regards
    Madhu

    Hi Madhu,
    Please check if ICM is configured properly through the transaction SMICM.
    please refer the thread -  Re: ISR service error :No Adobe Form Is Assigned to the Scenario...
    Do update, onceyou have solved the solution.
    Thanks and Regards,
    Anto.

  • How to maintain Employee photo in ESS who's who without sap_all and sap_new

    Hi ALL,
    Displaying Employee photo in ESS Who's who. it is working but with SAP_ALL and SAP_NEW user profiles.
    My requirment is without SAP_ALL and SAP_NEW user profiles. how it is working where can i maintain authorizations for this issue.
    The parameter i used are as follows:
    Business obj: PREL
    Doc type: HRICOLFOTO
    Personal num: 00000094
    Infotype: 0002
    Photo type: .JPG
    please help me.
    Regaards
    Satya.

    Dear satya .
    Please check the following
    1. Trace with the t.code ST01 and check that object require.
    2. The portal require the following obect:
    S_SERVICE
    S_RFC
    P_PERNR
    PLOG
    P_ORGIN/ P_ORGINCON
    P_HAP_DOC, if you work with Appraisal Document.
    3. Check the table T77S0
    P_PERNR, P_ORGIN, y P_ORGINGCON
    4. Check that you have the roles need for ESS.
    SAP_ESSUSER
    SAP_ESSUSER_ERP05
    SAP_EMPLOYEE_ERP05
    SAP_EMPLOYEE_ERP_13
    SAP_EMPLOYEE_ERP05_xx
    SAP_EMPLOYEE_ERP_13_xx
    5. Check the following notes:
    SAP Note 857431 - ESS: Authorizations and roles for WD services in ERP 2005
    SAP Note 844639 - MSS: Authorizations and roles for WD services in ERP 2005
    SAP Note 1373177 - Back end authorization roles missing in EHP4
    SAP Note 824757.
    [ESS Quick Start|http://www.cogentibs.com/pdf/cogsap08/ESS.pdf]
    Hope is help you.
    Regards
    consultor_ess_mss

  • Business  scenario regarding HR

    Dear friends
    Coul any1 of u get a clear business scenario regarding HR...
    with a clear process flow for it guys..
    cheers
    sakthi

    Hello,
    SAP HR helps in improving SAP-supported HR-processes in terms of usability and quality.
    HR  Moudle covers areas :
    Payroll,
    Personnel Time Management,
    Organizational Management,
    Reporting,
    ESS, MSS,
    Authorizations,
    Infotypes, Related transactions and tables.
    HR 550, Guide will give you an overview of HR.
    I have H350 Guide. which covers Programming in HR. It's close to 1.5MB.
    Very informative one
    Do let me know if you want it.
    Regards,
    Remi

  • ESS + Backend access Issue

    Hi Experts,
    Recently I have come across a design issue for the HR roles in our system.
    Our HCM system has ESS/MSS as well as other backend roles such as payroll, time admin etc.
    The ESS/MSS role is categorized based on country, as such the P_ORGIN object will have full country value for PERSA etc.
    The backend role such as PAYROLL ADMIN will have restrictions based on PERSA.
    When we combine both, the ESS/MSS access overrides PERSA restrictions in PAYROLL Admin role & gives additional access to full country.
    Is there a way to mitigate this & restrict the access without changing the ESS/MSS authorizations?
    Please share your thoughts.
    Nivin

    Nivin,
    Its not exactly a pinpoint solution to your issue but move from P_ORGIN to P_ORGINCON. P_ORGIN is old and IMHO obsolete. P_ORGINCON offers much needed flexibility to meet most of the business scenarios.
    Regards,
    Shivraj Singh

  • Backend roles neeed for user to access ESS related services

    Dear Experts-
    Can any one of you please point me to a document or let me know what exact role need to be assigned for a user on backend for him to access all ESS related services in Standard deployment.

    read the note 857431
    1129412   ESS: Authorizations and roles for WD services in ERP EHP3
    844639    MSS: Authorizations and roles for WD services in ERP 2005
    785345    Copying authorization default values for services
    612585    New: Authorization default values for ext. services
    The following roles were delivered for ESS with ERP 2005:
    SAP_ESSUSER_ERP05: Single role, containing all non-country-specific
                        functions.
    SAP_EMPLOYEE_ERP05_xx:   Single role with the country-specific
                              functions. Each country version has its own
                              role (with xx = country ID). The corresponding
                              composite role is SAP_EMPLOYEE_ERP05.

  • Usage of SAP* user in OOSB

    Hi Gurus,
    I'll be implementing Structural Authorization for my current project.
    I received requirement to restrict ESS and MSS display access specific to Qualification/Qualification Group (by object ID).
    General Authorization cannot specify the restriction by Object ID, thus I'm considering to restrict it using authorization profiles.
    Restriction for MSS view has successfully tested since MSS users will be assigned with MSS Authorization Profile in OOSB. The issue that I'm facing at the moment is how to apply the same restriction to ESS without assigning ESS IDs in OOSB - approximately 40K ESS users; will it impact the system performance anyway?
    If I were to use similar authorization profile defined in OOSP as per MSS, the only way to make it effective for all ESS users without assigning PD profile to each ESS ID in OOSB is by using SAP* - this is based on my understanding referring to notes that I found as attached below. I plan to customize authorization profile specific for ESS users and assign it to SAP* - still in test stage.
    Here are the statement that I'm referring to from the notes mentioned above:
                  " What happens if the table doesnu2019t contain entries for a specific user? In that case, the authorization check uses the
                    entry of the SAP* user. So, the profile stored for this user is applicable if an entry has been left out."
    Please correct me if I'm wrong and appreciate your advice on this matter. Million thanks

    Hi,
    In this scenerio you can activate Context based structural authorizations where the Auth profiles are not assigned to User Ids directly but assigned via Custom roles using authorization objects P_ORGINCON (HR: Master data with Context) and P_ORGXXCON (HR: Master data- Extended Check with Context).
    Authorization objects P_ORGINCON and P_ORGXXCON consists of the same fields as to P_ORGIN and P_ORGXX respectively and has been expanded to include the PROFL field. The PROFL field is used to determine which structural profile the user is authorized to access (as per table T77UA - User Authorizations = Assignment of Profile to User).
    Additionally,I f you have requirements that cannot be mapped using the P_ORGINCON and P_ORGXXCON authorization objects (for example, because you want to build your authorization checks on additional fields of the Organizational Assignment infotype 0001 that are customer-specific) and if you want to implement the context solution, you can include an authorization object- P_NNNNNCON (HR Master Data: Customer-Specific Authorization Object with Context) in the authorization checks yourself.
    Please note following switches have to be activated for Context based Structural authorization in table T77S0 (tcode- OOAC)
    AUTSW INCON (HR Master Data (Context))- Authorization Main Switch that controls whether the P_ORGINCON authorization object should be used in the authorization check.
    AUTSW XXCON (HR Master Data: Extended Check (Context))- Authorization Main Switch that controls whether the P_ORGXXCON authorization object should be used in the authorization check.
    AUTSW NNCON (Customer Authorization Object (Context))- Authorization Main Switch that controls whether the P_NNNNNCON customer-specific authorization object should be used in the authorization check.
    Hope this is helpful!
    Thanks
    Sandipan

  • Authorization object to view Maintain Performance Documents on MSS

    Hi Experts,
    Would like to know which authorization object would require to view Maintain Performance Documents on MSS. Currently, we removed SAP_ALL access from MSS user and not able to peform Maintain Performance Documents.We are on EP 7 and ECC 6.
    It gives following error :
    java.lang.NullPointerException
         at com.sap.xss.hr.mbo.blc.BMboStatusComp.resetGlobalMboR3Data(BMboStatusComp.java:260)
         at com.sap.xss.hr.mbo.blc.wdp.InternalBMboStatusComp.resetGlobalMboR3Data(InternalBMboStatusComp.java:195)
         at com.sap.xss.hr.mbo.blc.BMboStatusCompInterface.resetGlobalMboR3Data(BMboStatusCompInterface.java:150)
         at com.sap.xss.hr.mbo.blc.wdp.InternalBMboStatusCompInterface.resetGlobalMboR3Data(InternalBMboStatusCompInterface.java:168)
         at com.sap.xss.hr.mbo.blc.wdp.InternalBMboStatusCompInterface$External.resetGlobalMboR3Data(InternalBMboStatusCompInterface.java:224)
         at com.sap.xss.hr.mbo.vac.VMboStatusComp.onBeforeOutput(VMboStatusComp.java:227)
         at com.sap.xss.hr.mbo.vac.wdp.InternalVMboStatusComp.onBeforeOutput(InternalVMboStatusComp.java:185)
         at com.sap.xss.hr.mbo.vac.VMboStatusCompInterface.onBeforeOutput(VMboStatusCompInterface.java:143)
         at com.sap.xss.hr.mbo.vac.wdp.InternalVMboStatusCompInterface.onBeforeOutput(InternalVMboStatusCompInterface.java:136)
         at com.sap.xss.hr.mbo.vac.wdp.InternalVMboStatusCompInterface$External.onBeforeOutput(InternalVMboStatusCompInterface.java:212)
         at com.sap.pcuigp.xssfpm.wd.FPMComponent.callOnBeforeOutput(FPMComponent.java:603)
         at com.sap.pcuigp.xssfpm.wd.FPMComponent.doProcessEvent(FPMComponent.java:569)
         at com.sap.pcuigp.xssfpm.wd.FPMComponent.doEventLoop(FPMComponent.java:438)
         at com.sap.pcuigp.xssfpm.wd.FPMComponent.wdDoInit(FPMComponent.java:196)
         at com.sap.pcuigp.xssfpm.wd.wdp.InternalFPMComponent.wdDoInit(InternalFPMComponent.java:110)
         at com.sap.tc.webdynpro.progmodel.generation.DelegatingComponent.doInit(DelegatingComponent.java:108)
         at com.sap.tc.webdynpro.progmodel.controller.Controller.initController(Controller.java:215)
         at com.sap.tc.webdynpro.progmodel.controller.Controller.init(Controller.java:200)
         at com.sap.tc.webdynpro.clientserver.cal.ClientComponent.init(ClientComponent.java:430)
         at com.sap.tc.webdynpro.clientserver.cal.ClientApplication.init(ClientApplication.java:362)
         at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.initApplication(ApplicationSession.java:754)
         at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:289)
         at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingPortal(ClientSession.java:733)
         at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:668)
         at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:250)
         at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)
         at com.sap.tc.webdynpro.clientserver.session.core.ApplicationHandle.doProcessing(ApplicationHandle.java:73)
         at com.sap.tc.webdynpro.portal.pb.impl.AbstractApplicationProxy.sendDataAndProcessActionInternal(AbstractApplicationProxy.java:860)
         at com.sap.tc.webdynpro.portal.pb.impl.AbstractApplicationProxy.create(AbstractApplicationProxy.java:220)
         at com.sap.portal.pb.PageBuilder.updateApplications(PageBuilder.java:1288)
         at com.sap.portal.pb.PageBuilder.createPage(PageBuilder.java:355)
         at com.sap.portal.pb.PageBuilder.init(PageBuilder.java:548)
         at com.sap.portal.pb.PageBuilder.wdDoInit(PageBuilder.java:192)
         at com.sap.portal.pb.wdp.InternalPageBuilder.wdDoInit(InternalPageBuilder.java:150)
         at com.sap.tc.webdynpro.progmodel.generation.DelegatingComponent.doInit(DelegatingComponent.java:108)
         at com.sap.tc.webdynpro.progmodel.controller.Controller.initController(Controller.java:215)
         at com.sap.tc.webdynpro.progmodel.controller.Controller.init(Controller.java:200)
         at com.sap.tc.webdynpro.clientserver.cal.ClientComponent.init(ClientComponent.java:430)
         at com.sap.tc.webdynpro.clientserver.cal.ClientApplication.init(ClientApplication.java:362)
         at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.initApplication(ApplicationSession.java:754)
         at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:289)
         at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:713)
         at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:666)
         at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:250)
         at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)
         at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
         at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doPost(DispatcherServlet.java:53)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
         at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
         at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
         at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
         at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
         at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
         at java.security.AccessController.doPrivileged(Native Method)
         at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
         at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
    Would appreciate kind guidance to resolve issue.
    Thanks in advance.
    Aashish

    I am closing this thread as opened at wrong place.
    Thanks,
    Aashish

  • MSS Edit Appraisals and Authorizations

    We are implementing MSS.  We have setup structural authorizations so the manager can see his reports.  We have the situation where previous year appraisals show up for an employee.  However, the manager has changed recently.  The manager cannot see/edit appraisals for his employee if the manager was not the original appraisor, even thow the appraisals show up in the list for the employee.  Any ideas?

    Hi,
    An objective setting cycle encompasses the following phases:
    Planning
    In a planning consultation, the necessary qualifications and competencies are first identified for an employee and then concrete objectives and required performance levels are agreed. For example, sales targets could be defined and the employee could agree to take on specific tasks in a project, and so on. These aspects can be defined by the manager, by the employee or both. The employeeu2019s personal training and development requirements are discussed and entered in the objective setting agreement.
    Review
    During the review, the objectives agreed with the employee during the planning phase are checked and adjusted to reflect the current situation. The manager and employee discuss the possible need for support, establish whether the objectives defined in the planning phase are still relevant, and add further objectives or decide to delete obsolete ones. Furthermore, the manager can make comparisons between the objectives set previously and the employeeu2019s current performance.
    Appraisal
    During the appraisal, the manager and employee discuss the extent to which the employee has fulfilled the set objectives. They check and assess the employeeu2019s overall performance and the implementation of concrete set objectives. Any further training requirements or an overfulfillment of the objectives are identified in the different areas. The appraisal document is completed when the manager and employee agree on an valuation. As soon as the appraisal document is saved in the system as Completed or Approved, the employeeu2019s compensation can be adjusted automatically and the employeeu2019s qualifications profile can be updated
    Get the proper information from following .
    https://wiki.sdn.sap.com/wiki/pages/viewpage.action?pageId=53773.

Maybe you are looking for

  • Tabular Modeling. What is the best practice for importing data into VS to limit the records in the designer?

    Should I wrap the queries in a procedure with a @StartDate and @EndDate and create a test partition to pass a small date range?  Or can i use the Table properties screen to put the command there and will it run and not be affected or affect the parti

  • About using dynamic sql in jsp

    I make a jsp file with "CreateViewObjec".I can get the message from db ,but I get the same message when I push the button "next" .Please help me! my jsp file is: <%@ taglib uri="/webapp/DataTags.tld" prefix="jbo" %> <%@ page contentType="text/html;ch

  • LDAP: error code 65

    i am trying to connect to the LDAP using the JNDI and i am getting the following error i was unable to solve it here i am posting my sample slapd.cof file as well as my source program and the error import java.util.Properties; import javax.naming.Con

  • Problem in footer

    Hi all, There is a strange problem in our final PDF output in the footer section along with the date we are getting the time too.Our requirement is that we need to have only the date which is fetched from the table.The query is fetching as 06/08/2007

  • Trouble with IE

    I cannot sign onto the internet with my new Toshiba.  Everytime I try I get the error message IE cannot display that page.  When I do the troubleshooting it shows that there is nothing wrong.  What is the matter?