PE51- Display Access only??

Dear all
how do we restrict PE51 SAPMPE51 HR form editor for only display access..sooner i gave it it dosent give any objects for me to maintain the disply authorization..can come one tell me if there any objct goes with this T-code where i can maintain only the Display access to the user..

Hi,
Goto SU24> enter the T.code in which u want the user should have only display . Execute it (Button on Appl> Toolbar), it gices 2 objects and on Appl. toolbar its a button as check indicator> click on this button.
It display a list of objects, select the objects with CHECK AND MAINTAIN priority.
Now goto the role of that user in which u assigned tat perticular Authorization , Double click on that role, it takes u in PFCG screen, click on Authorization Tab. Check that it shold be in change mode. Now check tat perticular object which v searched in SU24 with check and maintain, (cntrl+F), find tat object, after getting the object , in activity remoce all the selected fields, and just select 03 which is for display. Repeat the same for all objects and generate.
Now the user has only Display access.
Regards
Syed.

Similar Messages

PE51 Display Acess only??

Dear all
how do we restrict PE51 SAPMPE51 HR form editor for only display access..sooner i gave it it dosent give any objects for me to maintain the disply authorization..can come one tell me if there any objct goes with this T-code where i can maintain only the Display access to the user..

Hi perara,
Create a Role using PFCG with your required transaction and reports. Generate the authorization profile with authorization level as R only for Tcode PE51. Assign the role to the User.
Good Luck
Om
Reward it, if u feel helpful.

Display access to UCWB

We are trying to create an authorization role that allows display access only to UCWB. The role we currently have is a "change" role. Our QA and production systems are closed, so by defualt a user can only display in these environments. However, we have business users who help develop test scripts and require display access to UCWB in our development environment. Because the development system is open, the current change role allows the users to change config. Has anyone created a pure display role for UCWB?

Hi Deborah,
You can ask your BW or BASIS consultants to crate a Display role for UCWB, this is a simple job.
Technically you can first crete a role with UCWB display acces and then assingn to the respective users.
While giving diaplay access, you can even restrict only the Master data and others if required. Again better to give restricted display access to UCWB, as it involed many things which users are not aware.
Hope this resolves your problem.
All the best,
Sunil M

BASIS- Give display rights only to FBCJ(Cash journal) Tcode

Hi,
I want to restrict transaction FBCJ(Cash journal) in display mode only.
I created a test role and added only FBCJ Tcode.
At object level (F_FBCJ), I maintained as below
Activity 33(Read)
Authorization Group * (only * selection is posible)
When this role is attached to a user( he has only this role), he is still able to change and save cash journal.
What to do to give display access only ?
Thanks in advance
AshrafKT

I know it s an old post, but for future references here is the answer.
If you need only display, transaction FBCJ3 can be use.
If other activities are needed then FBCJ needs to be used, but in order for the object F_FBCJ to work, the authorization group should be set in every journal.
The authorization group can be set using the transaction FBCJC0.
Hope this helps.
Regards, Jose.

Transaction similar to VKM1 with only display access

Hi,
I would like to ask, do you know the transaction which would be similar to VKM1 (Blocked SD documents), but its user would be granted with display mode only?
I tried to check the rest of the transactions from VKM* group but it seems there are none such reports.
This kind of transaction shall be used by our Logistics to check which current orders are blocked and what is the reason behind it (lack of credit
limit/overdue items on customer account) – but they mustn’t be authorized to release anything.
Regards,
Kiran

Just wanted to add to Siva's response that user access is regulated not just using the transaction codes but the authorization objects within those transactions. Just like in this case, the same transaction may be used for the change and display purposes.
There is authorization trace available in ST01 transaction that can be used to see what objects are checked when running a transaction. There might be other tools as well (I'm not a Security expert), but this one worked well for me so far.

System with only Display Access

Hi,
I have the following question, is it possible to configure a system copy with only Display access (at a sap level or Oracle Display mode,
et cetera) without creating restrictions in an authorization level?
Kind regards,
Luis

Hi Luis,
I don't think this is possible, what you can do is create a system copy and assign display only authorizations to the users.
Regards
Juan
Please reward with points if helpful

Display access for the tcode SCC4

Hi all,
I want only the display access for the tcode SCC4. In which authorization object I can do this.
Regards,
R.Suganya

Good Afternoon yes you can goto transaction SU24 insert transaction SCC4 and execute, click on display indicator, and you will see the object S_TABU_DIS assign activity value (03) to your role for this object which has that transaction SCC4 assigned to it. Also make sure that no other roles for that user has this object other wise the values will overwrite it.
Make sure you have locked transaction code OY24 as its a duplicate of SCC4.
Hope this helps
Edited by: nadim razaq on Sep 17, 2008 4:13 PM

Display access in Netweaver 2004s

Hi all
How do i give display access to user for Tcode SXMB_MONI and SXMB_IFR in Netweaver 2004s
Thanks

Hi Jacko,
For transaction SXMB_MONI you have:
- S_XMB_ADM. The authorization object Integration Engine Administrator, determines the global administrator for the monitoring and administration of the Integration Engine. The field can have the following contents:
X (The user is the administrator and can access XML messages in all clients in the system)
Empty (User is not the administrator and can only access XML messages in the current client)
-S_XMB_AUTH. This provides authorization protection for all actions that affect configuration, administration, monitoring, runtime, the cache, and time-controlled and prioritized message processing.
Activity (Activity executed in the area: change 02, display 03, execute 16, activate/deactivate 63, reorganize 65).
Area for Integration Engine (CACHE, CONFIG, FILTER,...and so on).
- S_XMB_MONI. The authorization object XI: Monitoring of XML Messages is used during monitoring of the XML messages that are processed by the Integration Engine and saved in the database. In particular, this includes the transaction Integration Engine Monitoring (Monitor for Processed XML Messages) and the message monitoring in the Runtime Workbench.
Activity (you must fill with 03 - Display).
You can not give display access to transactio SXMB_IFR because this tcode let to user open the folder X:\Documents and Settings\<current user>\SapWorkDir.
I hope helps you.
Regards, Leandro

Adding tcode to role in display access.

Hello,
Please can someone suggest how we can add transaction codes to a SAP role with only display access.
That means users should have only display access when they execute that transaction. Please suggest.
Thanks.

>
adnan shahid wrote:
> I would like to add the following tcodes in display access. In all the tcodes only auth object present is S_TCODE.
>
> OKY9
> OKYA
> OKY0
> OKKM
> OKK6
> OKK5
> OKG6
>
> Please suggest.
I suggest that your run an authorisation trace to see what objects those transactions reference.
Create a role with those transactions and objects in display only mode. Then get a functional consultant to negative test those roles.
Don't assign with other roles which give change access to the auth objects you have restricted.

Read access only

Dear Viewers,
When I am trying activate the funds management under the node
SPRO->Public sector management->Funds Management Government->Actual and Commitment Update/Integration-> Activate/Deactivate Funds Management.
Read access only
Message no. SV044
Diagnosis
You have attepted, in change or transport mode, to access data which
cannot be changed. This data can only be displayed.
System Response
The system has rejected the requested processing mode and switched to
display mode.
Procedure
You can either acknowledge the message to display the data, or cancel
processing.
Can I get any solution to solve this issue?
Thanks
Aswin

Dear expert
Please check this:
sm30 :View V_T001_FMACT should have 'Maintenance status' set to 'Read and
Change' instead of 'Read Only'.
This table is defaulted to Read only in the standard system
You can make this change through SE11-maint. status here you can change
Regards
Ajeesh.s

Authorization roles for display access to PD transactions

Hi all,
There is a requirement to create a new security role to allow display access to PD transactions :
> Organisational and Staffing Display PPOSE,
> Display Position PO13D,
> Display Organisational Unit P010D
With this role, display access needs to be restricted to view organisation units and positions within the line of business where the position with this security role sits, eg position is within Direct Sales and Service 55001641 therefore they can only view organisational structures that report through to this top org unit.
Any inputs regarding this would be appreciated.
Regards,
Manasee

Try with object 'S_ENQUE' and ID 'S_ENQ_ACT'...
Hope it helps!
Bye,
Roberto

Display access to be made on the Maintenance Plan.

Hi Experts
On the Preventive Maintenance Plan Creation in IP41/ IP42 / IP43 when I enter the Equipment Number all the master data gets copied in the Plan.
But I am able to change the Planning Plant and also the Planner Group. I would like to have these two fields on the Display mode only. When Equipment number is entered all gets copied automatically and I should not have access to change it in creation of plans.
Similarly I would also like to make the Tack List mandatory on the maintenance plan.
I checked in the SPRO but not able to find the node. Should I go for an enhancement ?
Regards
Venkat

Venkat,
Just a practical issue here.
What if you create the MP using the equipment data (say PG1), then at some point in the future you change the PG in the equipment to PG2.
How would you now update the MP with the new PG since the fields would be display-only???
PeteA

PO display access on Release status

Hi,
Is there any way through which we can restrict PO display access (to user ) untill it is release completely. The requirement is ..no other user except procurement dept should be allowed to view PO which is not yet released completely. Once it is released completely, then it should be open for display to all.
Thanks,
Dinabandhu.

Hi,
This is not the case here. Procurement department wants to restrict other user for UNreleased PO, NOT for Released PO. If we remove access for ME23N, other users will not be able to view released PO.
As per Internal control, PO should be submitted to supplier by Procurement department only. It affect the orgamisation operation process if PO details is communicated to supplier. What if the PO is rejected by any approval authority which pending, and goods delivered by supplier with reference to unreleased PO ????? these are all the issue for which we want to restrict VIEW access to unreleased PO.
Thanks,
Dinabandhu.

SM59 Display Access

Hello All,
In our Audit Role user needs Tcode SCU0 for Cross System Viewer, after assigning this Tcode to Role, this Tcode in turn calls SM59 which is a Risk of giving this Tcode.
Is there a way to give SM59 as display access access for SCU0.
Please help with your valuable experiences.
Thanks,
CB

Hi,
I agree that S_RFC_ADM can be used to restrict SM59 access to display only. But S_RFC_ADM is available only from ECC 6.0 versions, so how about pre ECC 6.0 versions?
Currently I am on ECC 5.0 where I don't have S_RFC_ADM and SM59 program has a authority check for S_ADMI_FCD=NADM hardcoded in it which makes it impossible to make SM59 just display.
Someone suggested using tcode- RSRFCCHK for displaying the RFC destinations and Execute connection tests but unfortunately this tcode skips SM59 initial screen and calls SM59 internally. In addition to that once the destinations are displayed, and you double click any, it takes you to the SM59 screen with full access to create, change and delete!!!
Am I missing on something? Please advice
Thanks
Sandipan

MBPro w/Mini DisplayPort to Cinema Display w/only USB and Firewire ports?

I've searched the threads for something that will explain what kind of cable I need to use my Cinema Display with my MacBook Pro, and I'm not finding anything. The MacBook Pro has the Mini DisplayPort for video out, and the Cinema Display's only ports are two USB and two FireWire.
All of the video cables I've seen in the online Apple store are either Mini DisplayPort to DVI or Mini DisplayPort to VGA, neither of which would work. Tech support told me that the computer and the display are compatible -- can anyone tell me which cable I need?

I have been using the display for several years, connected to my G4 PPC Mac Pro. Now that I have a new MacBook Pro, I was thinking of getting rid of the tower and simply using the laptop.
The cord coming out of the back of the display is connected to the tower with both the DVI plug and two USB plugs. It didn't occur to me to look on that cord because my understanding was that there was a port on the display itself, and I always think of that cord as simply a power cord.
I understand getting a DVI-to-Mini DisplayPort converter cable, but the Cinema Display is apparently powered by the Mac Pro tower. Would a laptop be able to power the Cinema Display? And would I have to connect both USB plugs to the laptop? That would take up both of the MacBook Pro's USB ports.

PE51- Display Access only??

Similar Messages

Maybe you are looking for