Organization level

Hi gurus
How can I get that an authorization object appear like an organization level?
Christian.

Hi Pole Li
Thanks for your help, I manged to create program to fetch from Organization level , Is that possible to see the description for Authorization-low and Authorization-high from any tables
As you wrote ,v can get description of Org Level from USVART , Like that if we need the same for Authorzation-low and High resp .
Regards
Piroz

Similar Messages

"Setup encountered a problem while validating the state of Active Directory: Exchange organization-level objects have not been created, and setup cannot create them because the local computer is not in the same domain and site as the schema master. Run se

Team,
I am trying to Install Exchange on my Lab, getting below error
message.
The Schema Role is installed on Root Domain and trying to install
exchange on Child domain.
1 Root Domain - 1 Child domain. both are located on single site.
“Setup encountered a problem while validating
the state of Active Directory: Exchange organization-level objects have not been created, and setup cannot create them because the local computer is not in the same domain and site as the schema master. Run setup with the /prepareAD parameter and wait for
replication to complete.”
Followed below articles:
http://support.risualblogs.com/blog/2012/02/21/exchange-2010-sp2-upgrade-issue-exchange-organization-level-objects-have-not-been-created-and-setup-cannot-create-them-because-the-local-computer-is-not-in-the-same-domain-and-site-as-the-sche/
http://www.petenetlive.com/KB/Article/0000793.htm
transferred the schema roles to different server on root domain, still no luck.
can someone please help me.
regards
Srinivasa k
Srinivasa K

Hi Srinivasa,
I guess, you didn't completed the initial setup schemaprep and adprep before starting the installation. You can do it as follows:
1. Open command Prompt as administrator and browse to the root of installation cd and run Setup.exe /PrepareSchema /IAcceptExchangeServerLicenseTerms
After finishing this,
2. Setup.exe /PrepareAD /OrganizationName:"<organization name>" /IAcceptExchangeServerLicenseTerms
3. To prepare all domains within the forest run Setup.exe /PrepareAllDomains /IAcceptExchangeServerLicenseTerms. If you want to prepare a specific domain run Setup.exe /PrepareDomain:<FQDN of the domain you want to prepare> /IAcceptExchangeServerLicenseTerms
4. Once you complete all of the 3 steps, install the pre-requisities for Exchange 2013
5. Finally, run the setup program
Hope this will help you
Regards from Visit ExchangeOnline |
Visit WindowsAdmin

Storage location on basis of Plant in organization level in MM01

Hello,
Here is the scenario.. I select a material in mm01 and click on the 'Organization Level' tab. In this tab(on the basis of view selection, i get Plant and Storage Location) , i give in a Plant, lets say suppose 1000. Now if i press F4 on the Storage location, instead of displaying all the location, can it display the stor.location of the specific plant, i.e 1000. Is this possible and if yes and then how to do it ?
Help Needed Big time.
Thanks,
Shehryar Dahar

HI,
yes it is possible.
use "F4IF_INT_TABLE_VALUE_REQUEST"..
example
FORM f_get_str_value .
SELECT lgort from MARD
    where werks = <your valuewerks>
into <IT_table>.
CALL FUNCTION 'F4IF_INT_TABLE_VALUE_REQUEST'
    EXPORTING
      retfield         = l_c_fieldname
      dynpprog         = sy-cprog
      dynpnr           = sy-dynnr
      dynprofield      = l_c_dynprofld
      window_title     = text-078
      value_org        = 'S'
      callback_program = sy-cprog
    TABLES
      value_tab        = <IT_table>
    EXCEPTIONS
      parameter_error = 1
      no_values_found = 2
      OTHERS           = 3.
IF sy-subrc <> 0.
MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
        WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
ENDIF.
ENDFORM.
regards,
nazeer
reward if useful

TEMPLATE FOR ORGANIZATION LEVEL ROLE

HI.
I HAVE MYSAP ERP VER 5.1 . BUT I DONT HAVE HR OR IDM IN MY SYSTEM.
I CREATED A ROLE FOR TRANSACTION FK01 AND FK02. IN THE AUTHORIZATION OBJECTS PUT VALUES 01 AND 02 FOR ACTIVITIES FIELDS AND ORGANIZATION LEVEL WERE LEFT WITH BLANKS.
I CREATED OTHER ROLE WITH THE SAME AUTHORIZATION OBJECTS CREATED MANUALLY WITH ORG LEVEL IVALUES IN THE AUTHORIZATION OBJECT AND NO VALUES IN ACTIVITIES FIELD
THE OBJETIVE IS MERGE BOTH ROLES WITH ADDITIVE EFFECT IN A USER ACCOUNT TO REDUCE THE NUMBER OF DERIVED ROLES.
BUT THIS DESIGN IS NOT WORKING PROPERLY. I NEED TO NOW WHY?

Hi,
As per your query you create a new role and assign to these objects value in the new one.
Anil

In Material Master creation (MM01) organizational levels tab.

Hi,
In the transaction MM01 after selecting the views i choose the organizational levels for selecting the plant and the storage location, But here i am not able to see the plant field, and only storage location filed is there for me to key in the data how do i recover this for the plant option in the organizational level tab.
I checked this in OMS9 and OMSR but i could not able to identify the modification for the field that i have done earlier.
Request you help how to make that visible again to the transaction MM01 and MM02.
Regards,
Deepak GS

1. I have entered transaction OMS9
2. Entered the Field selection group as 2
3. Below the fields option 3 RM03M-WERK280 (Plant) i double clicked and checked there is hide option.
4. I came back selected the T001W - Name1 (Name) I double clicked that in 34 , 35 , 54 was enabled with hide i changed to opt entry but still it seems to be the same.
5. I came back again and below in the field selection tab checked for the MM01 and MM02 transaction as well as fert,halb,roh as opt entry
It did not work.Kindly guide me if there is some other option available for this to revoke the plant option.
Any help would be really appreciatable.
Regards,
Deepak GS

Merging two company codes at sales organization levels

Hello Guru's,
I am working on a complex project, the client wants to merge two company codes at sales organization level. Will anyone guide me the procedure to do it.
Regards,
PV

One Sales Organization can be assigned to only One Company Code.
One Company Code can have several Sales Organization assigned to it.
Hence, it is not possible to merge two Company Code to one Sales Organization.
Regards,
Rajesh Banak

Help - Item Assignment at Inventory Organization level from the Interface

Hi,
I have developed an Inventory Item upload Interface (MTL_SYSTEM_ITEMS_INTERFACE Table) for Oracle Apps R12.
It works fine in uploading the Items to Master Org which the template is created. But When I tried to upload at Inventory Organization level it returns an error says 'Template or Template ID is not assigned for the Organization'.
How can I assign/upload the Item at Inventory Organization Level? I have already tried the Organization Item Assignment Report, It works fine and assign the Items to relevant Organizations. But the parameters are Item Range which I cant use those parameters.
Please help me to Upload items at Inventory Organization level from the Interface.
Thanks

open any delivery.
1. select any delivery item number( double click).
2. go to text tabstrip of the item.
3. select the text type and double click on the blank space where we write some texts will give you new screen for writing text will give you text screen.
then in menu: goto->header will popup screen with details given below.
text name: delv+item num
Language: 'EN'
text ID: '0001'       " for first text type and so on.
Text Object: 'VBBK'
****CODE.
data: ist_text type table of tline,
      wa_text type tline.
CALL FUNCTION 'READ_TEXT'
EXPORTING
   CLIENT                        = SY-MANDT
    id                            = 'textid'
    language                      = sy-langu
    name                          = 'textname'   " its concatenation of Dlv no. and item number.
    object                        = 'VBBP'
tables
    lines                         = ist_text
EXCEPTIONS
   ID                            = 1
   LANGUAGE                      = 2
   NAME                          = 3
   NOT_FOUND                     = 4
   OBJECT                        = 5
   REFERENCE_CHECK               = 6
   WRONG_ACCESS_TO_ARCHIVE       = 7
   OTHERS                        = 8
IF sy-subrc <> 0.
MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
        WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
ENDIF.
Reward points if helpful.
Regards
Ashok

Order Unit at purchase organization level

Hello,
     I have a vendor / material info record and depending on the purchase organization that makes the purchase order the unit is different.
    I was goingto prepare it but I have had the surprise that order unit is at general level so any changes affects all purchase organizations
    How can avoid that and define the Order unit at purchase organization level???
Thank you

Example:
Vendor code 100000
Material number : 25200
We have 2 purchase organizations : 9000 and 9100
In purchase organization 9000 order unit is Pieces y purchase organization 9100 orde unit is pack (equal to 5 pieces).

Create materials with multiple organizational levels using BAPI

Dear Gurus,
I have to develop a program generating materials from an Excel file. I am using the BAPI_MATERIAL_SAVEDATA.
On the Excel file a new material can be associated to 'n' organizational levels. For eg :
MATNR              MTART            SALES_ORG            DISTR_CHAN
01                       ZAAA                Z100                           Z1
01                       ZAAA                Z100                           Z2
We can add sales_data in the BAPI but in a structure, not in a table !
The funny thing is that I have found online the /AFS/BAPI_MATERIAL_SAVEDATA which allowed n sales data line but this BAPI is delivered in a package specialised in footwear industry !
I cannot find a good way to solve this problem. I will strongly appreciate any help to find a solution as I am blocked.
Thanks a lot!
Ben

Thanks Jurgen for your quick answer.
Just what do you put in the field 'Function' of the different tables ?
Here's my code for headdata and salesdata :
CLEAR ls_headdata.
ls_headdata-function = 'INS'.
ls_headdata-material = gs_datatab-matnr.
ls_headdata-ind_sector = gs_datatab-mbrsh.
ls_headdata-matl_type = gs_datatab-mtart.
ls_headdata-sales_view = 'X'.
APPEND ls_headdata TO lt_headdata.
CLEAR ls_salesdata.
CLEAR ls_salesdatax.
ls_salesdata-function = 'INS'.
ls_salesdatax-function = 'INS'.
ls_salesdata-material = gs_datatab-matnr.
ls_salesdatax-material = gs_datatab-matnr.
ls_salesdata-sales_org = gs_datatab-vkorg.
ls_salesdatax-sales_org = gs_datatab-vkorg.
ls_salesdata-distr_chan = gs_datatab-vtweg.
ls_salesdatax-distr_chan = gs_datatab-vtweg.
ls_salesdata-sal_status = gs_datatab-vmsta.
ls_salesdatax-sal_status = 'X'.
ls_salesdata-valid_from = gs_datatab-vmstd.
ls_salesdatax-valid_from = 'X'.
APPEND ls_salesdata TO lt_salesdata.
APPEND ls_salesdatax TO lt_salesdatax.
CLEAR ls_salesdata.
CLEAR ls_salesdatax.
ls_salesdata-function = 'INS'.
ls_salesdatax-function = 'INS'.
ls_salesdata-material = gs_datatab-matnr.
ls_salesdatax-material = gs_datatab-matnr.
ls_salesdata-sales_org = gs_datatab2-vkorg.
ls_salesdatax-sales_org = gs_datatab2-vkorg.
ls_salesdata-distr_chan = gs_datatab2-vtweg.
ls_salesdatax-distr_chan = gs_datatab2-vtweg.
ls_salesdata-sal_status = gs_datatab2-vmsta.
ls_salesdatax-sal_status = 'X'.
ls_salesdata-valid_from = gs_datatab2-vmstd.
ls_salesdatax-valid_from = 'X'.
APPEND ls_salesdata TO lt_salesdata.
APPEND ls_salesdatax TO lt_salesdatax.
CALL FUNCTION 'BAPI_MATERIAL_SAVEREPLICA'
    EXPORTING
      noappllog                  = 'X'
      nochangedoc                = ' '
      testrun                    = ' '
      inpfldcheck                = ' '
FLAG_CAD_CALL              = ' '
NO_ROLLBACK_WORK           = ' '
FLAG_ONLINE                = ' '
   IMPORTING
     return                     = ls_return
    TABLES
      headdata                   = lt_headdata
     salesdata                  = lt_salesdata
     salesdatax                 = lt_salesdatax
(Of course I have other structures like clientdata, plantdata etc.)
But I get the error message M3305 (The material &&&&& does not exist or is not activated)
Edited by: Fonctionnel OSS on Oct 29, 2010 2:20 PM

Need organization level object

HI,
I am want to insert organization level in this S_ALR_87012294 report,
but in PFCG->Authorization->authorization change show no organization level,
is there any authorization object for giving organization level.
Best Regards
Dilip Pasila

The note says that you can apply it as a "download" via SNOTE ahead of the Support Pack (level), or apply the whole Support Packs up to that level (which will include the "corrections), or you can install a brand new ERP system on the highest current release and SP stack.... but in all cases the checks are not performed against these objects until you modify the code in a SAP standard include program to activate the check.
I can understand backward compatibility with existing role concepts, however a "normal" procedure to not perform such new checks is an approach something like the default values of PRGN_CUST are used for, where you can activate the checks via customizing views (for each of the three objects independently) when you need them or discover the gap. Then in some higher release you can switch the defaults to "ON" if the requirement / opportunity is there.
It also makes it easier to implement, transport and perform cross system comparisons of settings.
Forcing customers to make a modification to the standard system at each installation to close a security hole is about as elegant a software logistics solution as a frontal lobotomy is to peace of mind...
I will add this to the [Security Functionality Wishlist in the Wiki|https://wiki.sdn.sap.com/wiki/display/Security/SecurityFunctionalityWishlist-Topics] and suggest you check your systems to see whether your F_BKPF_BE* object security has a hole in the bottom of the bucket.
For me it is self-explanatory that this should be changed, but the inventors of it wanted to know whether it is just me or possibly a whole mob out there wanting it (and possibly not knowing about it either).
Cheers,
Julius

Adding the organization level to one Role

Hi Experts,
                I have one role in PFCG, this role contains
some authorizations.
These role maintain the role.organization level values also.
now i want to include one organization level to this role
for example
                   company code----
> *
                   purchasing group------> *
                   division----
> *
now i want to add "Work center"
how can i include? is there any option is there?
Thanks is advance
sundar.c

Thanks for the Doc. This will be my Plan B.
I am still researching on How to Directly publish to Portal. I was able to do that from Query Designer using Publish to Portal and the report shows up as an iview in a PCD folder in the Portal. The Endusers have only Business Explorer Role and all they can see is the the Busineess Explorer tab of the Portal. So, I need to figure out a way to assign the iview to End user role.
In one of the threads,
Prakash Darji suggested
"The "publish into Role" from WAD saves to BI Roles which doesn't help you in web deployment, so I typically don't use this. I usually "Publish to Portal" and then will add my iView on the portal to a portal role that users are assigned to. This would make these iViews available to users on the portal. "
I am going to assign points for your suggestion though.

Changing Organization level for derived roles

Dear All,
Below is my query:
When there is any requirement to change the organization level of a derived role, we go to the role and change the organization level manually.
We have derived our roles, based on the units(company codes).
Now we have a scenario, where we need to add one unit in a particular derivation of all roles.
Please suggest if there is any way of updating the organization level in mass for a specific derivation.
Regards,
Reshma Vijayan.

Colleen Lee wrote:
At least with this option you are using the PFCG functionality and not hitting the tables directly
Hi Reshma, Colleen,
Some additional warnings about manipulating the downloads:
The downloadfile is a fixed record length text file, do not mess up the data positions.
Be aware of case (upper/lower) when manipulating the file.
Make sure you do a unicode download to preserve special characters in the menu texts.
There are very, very few checks done on the file contents when uploading again. It will allow you to pollute your AGR* tables in such a way you'll need an ABAP-er or SQL-savvy colleague to clean up the mess. It is very close to manipulating the tables directly.
I once managed to get entries into AGR_1251 which didn't show up in PFCG and wouldn't even disappear from the tables after I had deleted the roles in question.
And yes, I still use this method, but I won't advise it to anyone I cannot personally train to be aware of the pitfalls ;-)
Jurjen

Organization Level screen on Material Master

Hi experts,
I am trying to use User Exit or BADI which runs Organization Level screen on Material Master.
However, I don't know which one I should use...
Could someone help me to tell me the User Exit or BADI that I'm searching for?
Sally
Edited by: Sally10 on Jan 21, 2011 8:21 AM

This problem is caused by the program design.
In the R/3 System the low-level code is only ever increased and never reduced when the product structure is changed.
The low-level code is not reduced for reasons of performance and is thus greater than absolutely necessary. The larger low-level code does not disrupt the MRP however, that is, the material can be planned correctly.
please read OSS Note 494236 - Low-level code not reduced
for more detailed info

Organization level initialization through backend

Hi,
In the Oracle EBS, whenever I open a form I have a popup asking for organization. Now I want to run a program from backend to replicate the front end. But before running the program, I want to initialize in the same way it happens in the front end. Please let me know how to initialize at organization level. fnd_global.apps_initialize will do the same at a responsibility level. But that is not enough for my requirement.
Kindly help
Warm Regards

This has to be done through custom reporting.

GRC Access Control 5.3 Organizational Levels - logical AND - OR changed

Hello GRC Community,
We are working with Access Control 5.3 SP 12 and we are setting up organization levels for the risk analysis.
The setup is loaded with a flat file, and the configurations seems to be loaded in the right way.
Doing the configuration on the RAR portal, openning the tab "rule architect" then "organization rules" and "create", we have this information:
Organization Rule: Z001
Description: TEST
Risk             Organization Level     from            to             search type     Status
F001*     BUKRS               PRE0                  AND                  Enabled
F001*     EKORG               PR00                 OR                  Enabled
F001*     EKORG               PR01                 OR                  Enabled
F001*     EKORG               RP00                 AND                  Enabled
F001*     VKORG               RP00                 OR                  Enabled
F001*     VKORG               RP01                 OR                  Enabled
F001*     VKORG               RP02                 AND                  Enabled
F001*     WERKS               SV00                 OR                  Enabled
F001*     WERKS               VS00                 OR                  Enabled
Finally save button.
When we want to edit an organization rule or add new one with the screen of organization rules, after saving we have the next result when load the rule again:
In the case of the same organization rule (Z001), the RAR returns this info:
Organization Rule: Z001
Description: TEST
Risk             Organization Level     from            to             search type     Status
F001*     BUKRS               PRE0                  AND                  Enabled
F001*     EKORG               PR00                 OR                  Enabled
F001*     EKORG               PR01                 OR                  Enabled
F001*     EKORG               RP00                 OR                  Enabled
F001*     VKORG               RP00                 OR                  Enabled
F001*     VKORG               RP01                 OR                  Enabled
F001*     VKORG               RP02                 OR                  Enabled
F001*     WERKS               SV00                 OR                  Enabled
F001*     WERKS               VS00                 OR                  Enabled
So the RAR has changed the logical AND for OR.
Why is it happening? This effect doesnt happen if i made an upload from a ftlat file of organizational rules.
We already tryed this symptom doing the same exercise with RAR SP 14 with the same issue.
Thanks in advance for all your comments
Regards,
Alejandro
Edited by: Alejandro Acuña Acosta on Jun 3, 2011 8:53 AM

Hi,
>
> 1. The Addons HR and NonHR are installed on the erp?
>
Yes.
> 2. The GRC could be an stand alone java server?
>
It should be on separate server.
> 3. The Spro config for process control is configured on the ERP or the grc server?
>
ERP server.
Thanks
Sunny

Basic Information about Organizational Level & Org. level value.

Hello Experts,
I am new to the field of SAP and security. I have the following questions:
1. What is an organizational level & org. level value? What do they represent? How do they matter in PFCG?
2. What is a derived role and what is its usage?
I appreciate your help regarding this. If you could point me to some documentation regarding this that will be very helpful.
Regards, Ben

Ben,
I am new to the field of SAP and security. I have the following questions:
1. What is an organizational level & org. level value? What do they represent? How do they matter in PFCG?
if you want to restrict on region vice (best use org level & values (plant,company code, sales org)
In role u will notice them in red color
2. What is a derived role and what is its usage?
Derived role inherits menu struture and the function from the parent role. Derived role do not differ in their functionalities(identical menu & trans) but have different characterticts with regard to Org levels.
Eg1; Master role
PFCG -> role name -> create->menu->enter tcodes-.Auth tab->export mode->read old status and merge with new data->Pop for org levels (give a full access)->see to that everything is green->generate it.
http://e-mory.blogspot.com/2007/12/sap-pfcg-create-role.html
Eg2: Derived role
pfcg->role name->create->in describtion tab towards right enter the master role name->Auth tab->export mode->read old status and merge with new data->you will get a pop for org levels (here you can restrict on plant lvel,purchasing group,company code....)
->let say for plant : 1000 ->generated / user comparssion
Once the role is added to the user. User will be albe to see only those plant related details (1000) (i.e he will have access to only plant 1000)
suppose if the user enters 2000,he will get a error message saying no access to 2000
NOTE: Any changes to the role should be done in master role (like adding tcodes)
.http://www.rssfeeddirectory.org/directory/items/346239.aspx
https://cw.sdn.sap.com/cw/docs/DOC-12021
http://help.sap.com/saphelp_wp/helpdata/en/1c/c38028816c11d396bc0000e82de14a/content.htm
Re: Authorization error after transport
Thanks,
Sri

Organization level

Similar Messages

Maybe you are looking for