PI Transactions and Role Descriptions

Hi,
Could anyone please help to get for the below Transaction descriptions and Security role descriptions
Transactions:
IDX4 -
SRMD -
S_EXCH_INFRA -
Security Roles :
SAP_SLD_GUEST
SAP_XI_BPE_MONITOR_ABAP
SAP_XI_DEMOAPP
SAP_XI_MONITOR_ABAP
SAP_XI_MONITOR_J2EE
Thank you for your time and support.

Hi Srisaila,
Here you have a description of the standard roles and authorizations:
http://www.erpgenie.com/sap/netweaver/xi/xiauthorizations.htm
Regards,
Juan

Similar Messages

SoD Analysis , tables to relate roles, transactions and auth objects

Hi everyone,
I am analyzing my company SAP roles in terms of segregation of duties, however I having a problem.
I need a table/report to give me for each role, every transactions and for each transaction in the role every authorization objects.
For example I want to know for Role B that have transaction C which have the follow authorization object D with values X and Y.
Therefore I want to know for each role and respective transactions which are only display or/and execute or/and editable. How can I do that?
Thanks!

Hi,
There is no default report/table which gives you the required information. However, you can achieve this by using SQVI. Join the tables, and create a tcode for the same. Refer the below link:
Re: SAP Query in SQVI transaction
Alternatively, you can download all the data into spreadsheet and create Pivots to plot the information.
The other alternative is to have a custom program built which takes the information from AGR_DEFINE, AGR_AGRS, AGR_1251, AGR_1252, AGR_TCODE tables.
Hope this helps!!
Regards,
Raghu

PFCG Role Descriptions and Longtext in a Second Language

Hello,
I am a bilingual key user who maintains PFCG user roles for my organization (usually in German). I want to maintain the longtext and description fields for these same roles for admins signed on in English so that a translated version in English appears matching my German text. How can I do this?
Sorry for the post but the SAP help and also OSS were surprisingly no help on this issue.
Thank-You,
Ray Fischer

Hi,
Please apply the note-854311 and follow the below mentioned procedure.
For changing role description, please run the report Z_ROLE_SET_MASTERLANG.
It will ask for Agr_name(Role name) and orgin_lang(required language)
Regards,
KKRao.

List of roles and corresponding transactions and infotypes

Hi Friends,
I want to prepare baseline list of roles and corresponding transactions and infotypes that we have access to in Production system. Please let me know easiest way.
Thanks,
Ankitha

In [this thread|Security - HR Authorizations; you'll find a similar question and some suggestions. Once you've got your roles it should be fairly easy to determine which transactions are in them.
Jurjen

In transaction OBA7 the description is not coming in Spanish

Hi Everybody,
Spanish ( ES ) language imported in ECC 6 thru SMLT and activated the same thru report RSCPINST.
After that login in Spanish is working fine.
But problem is in transaction OBA7 the description is not coming in Spanish.
Problem reported only for this tcode only , may be there are problem in other tcode also.
Any idea !!
Regards
Santanu

Hi,
check in client 000, if you don't have spanisch there, then most probably its not translated (yet)
you can transate yourself if needed...
Rgds
Nico

How to add a role description to the Role Library:Role Information Column

Hi to all,
I have an interesting question.I have a task to show a role description in the role sorting table information column.Is there any way to get this parameter ?
I tried with waveset.roleinfos.info.description but nothing happened.I saw that in some forms is used waveset.availableRoleInfos[$(rolename)].info.description, but i can not understand what is this parameter actualy for and from where it comes (and i did not get anything from it either when i tried with it).
So my question is is there any way i can add this description attribute to the Information role column ?

Hi Mariana,
one way is to use the role upload if you want to use existing BI roles in Portal:
Here are more infos: http://help.sap.com/saphelp_nw04s/Helpdata/EN/9d/8c174082fe1961e10000000a155106/frameset.htm
Regards,
Adem

Automatic Creation of Roles and Role Mappings in GRC

Hi,
we are planning to use SAP Identity Management and SAP GRC Access Management.
In SAP IDM we have defined several business roles that contain privilieges in SAP systems. When a user is requesting a role, the request will first be sent to SAP GRC for approval and risk checking.
In order to get this to work, we need to load the business roles of SAP IDM into SAP GRC and we also need to configure the role mapping between the business roles and the technical SAP privileges.
From what I understood, this could be implemented by loading the required information via Excel filles into SAP IDM.However, this is a quite cumbersome and error-rpone approach an we would like to automate this.
Is there a way to use e.g. web service calls to create/delete roles and role mappings in SAP GRC?
BTW: is a documentation of all available GRC web service calls and their parameters available?
Thanks for your help in advance!
Best regards
Tom

Hi Tom,
as stated before, the web service description is in the config guide.
Unfortunately there is no web service to create roles or even mappings in CUP - this is one of many I would also like to se created
I don't think in your context you will be able to directly send Business Roles to CUP. The role mapping only happens after you send the request, so I'm not sure if that's in time for risk analysis - you will need to try that.
Are you a customer or a consultant - anyway, feel free to contact me if you need further help integrating CUP and IdM. This is an evolving interface with many possible scenarios, so it's not easy to give you good advise without seeing the full picture.
Frank.

How to display name of the table and the description and the table type

Hi,
Can you people tell me how to display the name of the table and the description and the table type (View, structure, etc...) used in the program.
I want to display in a list.
Kind Regards

use this program
TABLES : TSTC, tstct.
TABLES : DD03l, DD02l.
DATA : Program like sy-repid.
DATA : BEGIN OF I_FINAL OCCURS 0,
tabname LIKE dd02l-tabname,
TABCLASS LIKE dd02l-tabCLASS,
TEXT LIKE DD02T-DDTEXT,
END OF I_FINAL.
DATA : BEGIN of ITAB Occurs 0,
name like dd02l-tabname,
END OF ITAB.
DATA : TCD(100) TYPE C.
DATA : var1 LIKE dd02l-tabname.
DATA : DESC LIKE TSTCT-TTEXT.
selection-screen skip.
SELECTION-SCREEN : BEGIN OF BLOCK b2 WITH FRAME TITLE text-002.
PARAMETERS : r1 RADIOBUTTON GROUP r DEFAULT 'X'.
Parameters : Tcode like sy-tcode.
selection-screen skip.
PARAMETERS : r2 RADIOBUTTON GROUP r.
Parameters : Prog like sy-repid.
SELECTION-SCREEN END OF BLOCK b2.
SELECTION-SCREEN BEGIN OF BLOCK B1 WITH FRAME TITLE text-001.
select-options : Type for dd02l-tabclass .
SELECTION-SCREEN END OF BLOCK B1 .
at selection-screen.
if r1 = 'X' and Tcode is initial.
message e001(00) with 'Enter Transaction Code' .
elseif r2 = 'X' and Prog is initial.
message e001(00) with 'Enter Program Name' .
endif.
START-OF-SELECTION.
if r1 = 'X'.
Prog = ' '.
select single * from TSTC where tcode = tcode.
if sy-subrc = 0.
program = TSTC-PGMNA.
select single TTEXT from tstct into desc where tcode = tcode and SPRSL = 'E'.
else.
Write :/ 'Invalid Transaction Code'.
exit.
endif.
elseif r2 = 'X'.
Tcode = ' '.
program = Prog.
endif.
CALL FUNCTION 'GET_TABLES'
EXPORTING
PROGNAME = Program
TABLES
TABLES_TAB = itab.
if itab is initial.
skip.
skip.
skip.
skip.
skip.
WRITE :/40 'No Data Found' color 6 INTENSIFIED OFF.
ELSE.
PERFORM : categorize.
endif.
END-OF-SELECTION.
LOOP AT I_FINAL.
WRITE :/4 I_FINAL-tabname COLOR 2 INTENSIFIED OFF NO-GAP HOTSPOT ON, 35 I_FINAL-TABCLASS COLOR 2 INTENSIFIED OFF NO-GAP,
50 I_FINAL-TEXT COLOR 2 INTENSIFIED OFF NO-GAP.
ENDLOOP.
AT LINE-SELECTION.
TCD = SY-LISEL.
var1 = TCD+3(30).
set parameter id 'DTB' FIELD VAR1.
call transaction 'SE11' and skip first screen.
TOP-OF-PAGE.
WRITE :/45 'TABLE DETAILS RELATED TO THE TRANSACTION CODE' COLOR 7 .
WRITE :/2 'DATE : ' COLOR 1, SY-DATUM COLOR 1 INTENSIFIED OFF NO-GAP.
WRITE :/2 'TRANSACTION CODE : ' COLOR 1, Tcode COLOR 1 INTENSIFIED OFF NO-GAP.
WRITE :/2 'TCODE DESCRIPTION : ' COLOR 1, desc COLOR 1 INTENSIFIED OFF NO-GAP.
WRITE :/2 'PROGRAM NAME : ' COLOR 1, PROGRAM COLOR 1 INTENSIFIED OFF NO-GAP.
SKIP 1.
WRITE :/1(140) SY-ULINE.
WRITE :/4 'TABLE NAME' COLOR 5 INTENSIFIED OFF NO-GAP,35 'TABLE TYPE' COLOR 5 INTENSIFIED OFF NO-GAP,
55 'DESCRIPTION' COLOR 5 INTENSIFIED OFF NO-GAP.
WRITE :/1(140) SY-ULINE.
*& Form categorize
text
--> p1 text
<-- p2 text
FORM categorize .
SELECT dd02ltabname dd02ltabCLASS DD02T~DDTEXT
FROM dd02l INNER JOIN DD02T ON dd02ltabname = dd02Ttabname
INTO TABLE I_FINAL
FOR ALL ENTRIES IN itab
WHERE DD02L~TABNAME = ITAB-NAME AND TABCLASS IN TYPE AND DDLANGUAGE = 'E'.
if sy-subrc <> 0.
skip.
skip.
skip.
skip.
skip.
WRITE :/40 'No Data Found' color 6 INTENSIFIED OFF.
endif.

Help needed in getting the Role Description from BOL Entities

Hi All,
I am trying to retrieve BP Role and BP Role Description and display the details at the top of account over view page.
I am fetching the BP Role details using 'BuilRolesRel'. but i am not able to find any BOL Query to get Role Description.
Any pointers on this is really very very helpful.
Thanks,
Udaya

Hello Udaya,
under BuilRolesRel there is a entity BuilRoles and this entity has an Attribute RLCTITLE.
this is a Description of the role.
Good Luck
Eli Steklov
Please Reward Points if it Helped

Trying to install features and Roles

OK I've selected my features and Roles. When I run the install from a PXE boot using the Lite Touch Windows PE (x64). The OS installs and reboots and then attempt to run the roles and features install, at which point it dies and return the summary screen
showing errors. These error are listed below from the ZTIOSRoles log. Close to the bottom of this transaction list is the following.
<![LOG[Copying source files locally from
\\WIN-DEPLOY-SRV\DeploymentShare$\Operating Systems\Windows Server 2012 R2 SERVERSTANDARDCORE x64\sources\sxs]LOG]!><time="12:46:55.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1"
thread="" file="ZTIOSRole">
I am able to browse to the share and dig down to the directory. I guess at this point my questions are.
1. Why is it looking to something on the deploymentshare when the fuctionallity is built into windows itself?
2. What component is ZTIOSRole and how do I find out what it is really looking for?
Note: This is a 2012 R2 Server and I'm trying to install ... And it fails at the First Role
File and Storage Services
---- File Services
--------File Server
--------Data DeDuplication
Hyper-v
Role Administration
---- Hyper-v Management Tools
-------- Hyper-v GUI Management Tools
-------- Hyper-v Module for Windows Powershell
Windows Server Backup
Can someone please help
<![LOG[Microsoft Deployment Toolkit version: 6.2.5019.0]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[The task sequencer log is located at C:\Users\ADMINI~1\AppData\Local\Temp\SMSTSLog\SMSTS.LOG. For task sequence failures, please consult this log.]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole"
context="" type="1" thread="" file="ZTIOSRole">
<![LOG[Roles will be installed.]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[Roles specified in Role:]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[ FileAndStorage-Services]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[ Hyper-V]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[RoleServices specified in RoleService:]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[ File-Services]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[ FS-FileServer]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[ FS-Data-Deduplication]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[Features specified in Feature:]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[ RSAT-Role-Tools]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[ RSAT-AD-Tools]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[ RSAT-Hyper-V-Tools]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[ Hyper-V-Tools]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[ Hyper-V-PowerShell]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[ Windows-Server-Backup]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[No items were specified in variable OptionalOSRoles.]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[No items were specified in variable OptionalOSRoleServices.]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[No items were specified in variable OptionalOSFeatures.]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[ZTI Heartbeat: Processing roles (0% complete]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[Event 41003 sent: ZTI Heartbeat: Processing roles (0% complete]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[Property Parameters is now = -FeatureName FileAndStorage-Services]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
<![LOG[Validating connection to
\\WIN-DEPLOY-SRV\DeploymentShare$\Operating Systems\Windows Server 2012 R2 SERVERSTANDARDCORE x64]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread=""
file="ZTIOSRole">
<![LOG[Mapping server share:
\\WIN-DEPLOY-SRV\DeploymentShare$\Operating Systems\Windows Server 2012 R2 SERVERSTANDARDCORE x64\sources\sxs]LOG]!><time="12:46:55.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1"
thread="" file="ZTIOSRole">
<![LOG[ZTI ERROR - Unhandled error returned by ZTIOSRole: Path not found (76)]LOG]!><time="12:47:00.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="3" thread="" file="ZTIOSRole">
<![LOG[Event 41002 sent: ZTI ERROR - Unhandled error returned by ZTIOSRole: Path not found (76)]LOG]!><time="12:47:00.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread=""
file="ZTIOSRole">

OK I've selected my features and Roles. When I run the install from a PXE boot using the Lite Touch I am able to browse to the share and dig down to the directory. I guess at this point my questions are.
1. Why is it looking to something on the deploymentshare when the fuctionallity is built into windows itself?
I think you are incorrect in stating that all functionality is built into Windows. Windows may require the sxs directory contents to install some OS Roles and Features. Does this directory exist in your Deployment Share, and if so does it contain all the files
synced with your original OS source?
Keith Garner - keithga.wordpress.com

Distributed Transactions and Linked Servers

I'm somewhat of a novice with SQL Server but I'm learning rapidly from an application I'm developing that uses SQL Server very heavily. In conjunction with the development of this application, I have 3-4 systems set up running SQL Server and I am using those
systems to develop the database that will ultimately support the application. I decided to try to use linked servers because I am moving data back-and-forth among the different servers frequently and I ran into some consequences that I wasn't expecting.
I was doing a simple delete query on one of the servers (Delete from TableName Where ...) and I was expecting, of course, that it would only impact the server I was running it on; however, when the query finished after running for a long time, it was apparent
that SQL Server had automatically escalated that simple delete query into a distributed transaction and applied it to all four of the linked servers I had defined. I was totally surprised by that and it took some time to recover the data that was inadvertently
lost on the other servers.
I want to ensure that this doesn't happen again without me expecting it - I think the right way to prevent this from happening is to run the following stored procedure:
EXEC sp_serveroption 'servername', 'remote proc transaction promotion', 'false';
Can someone please verify that this assumption is correct and will prevent SQL Server from automatically creating distributed transactions impacting multiple servers?
Thanks,
Chuck

Hello,
Based on your description, it seems that when you connect to a SQL Server database and execute a DELETE statement to delete a recode on a table, and then the same recode were delete in the linked server which has the same table.
As pre my understand, the statement executed on one server will not apply to the linked servers unless you specify the logic yourself in the application. For example, you use dynamic query and exec the query synchronously on linked servers.
What's more, did you specify replication between this linked server?
If I have any misunderstanding, please let me know.
Regards,
Fanny Liu
If you have any feedback on our support, please click here.
Fanny Liu
TechNet Community Support

User roles and role mapping

I've just start as an intern in Change Management team that is helping to implement SD. My two tasks are to "develop SAP user roles specific to the new business processes" and "manage the role to position mapping for provision of security roles." None of the real employees in my team has ever done this, and my manager is now on three weeks leave. I'm new to SAP and I don't really know where to start. Can anyone offer any advice, or point me to some references? Thanks.

Intern,
Its a pretty cold manager who will dump a task on a inexperienced subordinate without any guidance or mentoring, and then take three weeks off.
Anyhow, you first need to get some insights as to what the expectations of the client are: What type of users will there be? What tasks will each user be responsible for carrying out?
You also will want to collect a list of names of the actual users. Your Basis people will tell you which bits of data will have to be collected in order to create users on the system
Next, you need to talk to the SD expert on your team about the solutions that will be implemented. Quotes? Consignment? Scheduling agreements? Pricing? Customer Service? Marketing? Customer Master? Material Master? The SD expert should be able to tell you at a very minimum which transactions should be made available.
There are standard roles available delivered in the system. These are pretty much un-usable as delivered, but they make a good starting point. Review http://help.sap.com/erp2005_ehp_04/helpdata/EN/b4/3f9c41919eae5fe10000000a1550b0/frameset.htm
and
http://help.sap.com/erp2005_ehp_04/helpdata/EN/06/57683801b5c412e10000009b38f842/frameset.htm
Once you have all the info needed from the client and your SD experts, you then design the supporting roles at a high level. I usually use an Excel Spreadsheet with two tabs: One tab listing roles to be developed, with all the transactions and authorization object limitations for each one; and another tab listing Users and the supporting data needed to create a user. If you are a Basis expert, you already know the next steps. If not, then you typically hand your designs to the Basis team for creation of the actual Roles.
Good luck. Remember not to treat your interns the same way you have been treated.
DB49

BRM message "Role Description cannot be updated" after generate

Hi SAP experts,
So I’m trying to configure BRM and everything looks good except for when trying to generate the role (single role) I’m getting the error “Role Description cannot be updated”. After doing some research I saw that note 1735705 should address the issue but after
trying to implement the note trough tcode “SNOTE” it comes grey out (message ”Cannot be implemented”) so I'm guessing is not relevant to our system. I can't really find anything else related to a similar issue in the community so I'm wondering what could be the issue here? Any help is greatly appreciated.

Hi Andrzej,
Thanks for the advice; I was so focus thinking that the issue was related to language (Master role data vs Log) or access on my ID that I forgot about tracing the RFC user. The issue was due to missing authorization to manage roles from RFC user. Issue is now fix.

SMQS transaction and Vertex calls timeout

Hi,
    We just went live with one our SD projects. Before we went live we never had Vertex timeout issue, but after we went live we started getting 0 or 2 or sometimes 4 dumps in a day "CALL_FUNCTION_REMOTE_ERROR" The function where it dumps is RFC_CALCULATE_TAXES_DOC destination VERTEX. The description says "timeout during allocate" no connect of TP /usr/lpp/vertex/translink/verrfc from
host ansapap7 after 122 sec" .
RFC status: "CODE=CM_PRODUCT_SPECIFIC_ERROR CM_NO_STATUS_RECEIVED
CM_NO_DATA_RECEIVED SAPCODE=456 CONV=06153020"
RFC error text: "RFC_IO27"
CPI-C error text: "CPIC-CALL: 'ThSAPCMRCV'#Timeout during connection setup
(check that partner exists) "
Wierd thing is that it does not happen all the times. It happens 3 to 4 times in a day, sometimes it happens only once and sometimes does not happen at all.
I checked the SMQS transaction, it shows destination Vertex, max connection 1, max timeout 60. With this setting since last 3 + years we never had timeout issue, then why now when we have some 500 more orders being processed per day. These settings are still working for majority of orders, only some orders could pass through and get this dump.
Can someone guide me what this problem can be. Also can someone tell me is it safe to change the max connections and max timeout parameters in SMQS transactions and will changing those settings help in solving this.
Thanks in advance
Pulin

I had checked 645527 note also. We have not upgraded SAP since last 3 yrs. Its still 4.7, we have not applied any upgrade patches. It started happening after we went live on November 4th 06.
I think, this is some load distribution issue. Should I change the settings in SMQS transaction. Is that safe ?
If any one of you are using Vertex with SAP 4.7 or higher, then can you tell me what is present in table TTXC. Does this table contain old RFC calls(RFC_CALCULATE_TAXES1) or new RFC names(RFC_CALCULATE_TAXES_DOC).?

Regarding displaying role description in alv

Hi All,
Here i got struck up with an issue. I want to display role name and its description. But my problem is description is having more than a single line. I need to concatenate all the lines, But I don't know what to do here exactly. I need to display the output in LAV format. And one more thing the description length is more than 255 characters also in that case how to handle.
Please suggest me a solution for this.
Regards
G.S.Naidu

Hello Naidu,
Plz search in sdn for handle more than 255 char in ALV,
Regards.

PI Transactions and Role Descriptions

Similar Messages

Maybe you are looking for