Profiles Roles

Hi, I am configuration Solman 3.2, need to know that type of users and that rolls and profiles to assign, my question to them is where I can find information about this. Thank you very much by its aid.
Message was edited by: Adrian Torreblanca

Hi Adrian,
Go to SAP Online Help: http://help.sap.com/saphelp_sm40/helpdata/en/ae/64c33af662c514e10000000a114084/frameset.htm
Select SAP Solution Manager Roles. There is an overview of all the roles and profiles.
Regards,
Raquel Cunha

Similar Messages

Same select (user, name, profile, role, table_name, privilege table)

hello Everyone
1.- i don't know how to merge the two qys to see in the same select (user, name, profile, role, table_name, privilege table)
Im using the tables usuarios and view dba_users : See next qry
SELECT Nvl(US.IDUSUARIO,DU.USERNAME) USUARIO,
US.DESCRIPCION NAME,
ACCOUNT_STATUS STATUS,
DU.PROFILE,
CREATED FECHA_CREACION
FROM USUARIOS US,
SYS.DBA_USERS DU
WHERE DU.USERNAME = US.IDUSUARIO(+)
UNION
SELECT Nvl(US.IDUSUARIO,DU.USERNAME) USUARIO,
US.DESCRIPCION NAME,
ACCOUNT_STATUS STATUS,
DU.PROFILE,
CREATED FECHA_CREACION
FROM USUARIOS US,
SYS.DBA_USERS DU
WHERE DU.USERNAME = UPPER(US.IDUSUARIO)
ORDER BY NAME;
this extract me, USER, REAL NAME, STATUS, PROFILE, CREATION_DATE
JP01 Johan Pena OPEN DEFAULT 05-07-2010
on the other hand:
select * from role_tab_privs
this extract me, ROLE, TABLE_NAME and PRIVILEGE
DBA TABLE1 SELECT
DBA TABLE1 INSERT
DBA TABLE2 DELETE
1.- i don't know how to merge the two qys to see in the same select (user, name, profile, role, table_name, privilege table)
2.-i want something like this.
USER, REAL NAME, STATUS, PROFILE, CREATION_DATE ROLE, TABLE_NAME PRIVILEGE
JP01 Johan Pena OPEN DEFAULT 05-07-2010 DBA TABLE1 SELECT
JP01 Johan Pena OPEN DEFAULT 05-07-2010 DBA TABLE1 DELETE
Ect Ect. Ect.
who can HELP ME.

I have part understood your requirement and assumed the rest! Hence, I have used dba_role_privs in addition to the list of tables you used.
Also, I think your LEFT OUTER JOIN on sys.dba_users is incorrect. I think you are trying to get all users from USUARIOS table for which roles / privileges exist in the database. If that is what you want the following query should help out. If not change the LEFT keyword in the MAIN query (NOT the one in WITH clause) to RIGHT but the results might be unpredictable.
Note: Using ANSI standard keywords for JOIN allows you to use functions in the JOIN clause (such as UPPER(column name), which the Oracle propreitary notation does not allow and hence made you opt for the UNION option).
WITH OS AS
        SELECT
             DU.USERNAME
            ,DU.ACCOUNT_STATUS
            ,DU.PROFILE
            ,DU.CREATED
            ,DRP.GRANTED_ROLE
            ,RTP.TABLE_NAME
            ,RTP.PRIVILEGE
        FROM
            sys.dba_role_privs drp
        LEFT OUTER JOIN
            role_tab_privs     rtp
        ON
            ( drp.granted_role    = rtp.role    )
        LEFT OUTER JOIN
            sys.dba_users      du
        ON
            ( du.username         = drp.grantee )
SELECT
     NVL (US.IDUSUARIO, OS.USERNAME)    USUARIO
    ,US.DESCRIPCION                     NAME
    ,OS.ACCOUNT_STATUS                  STATUS
    ,OS.PROFILE                         PROFILE
    ,OS.CREATED                         FECHA_CREACION
    ,OS.GRANTED_ROLE                    ROLE
    ,OS.TABLE_NAME                      TABLE_NAME
    ,OS.PRIVILEGE                       PRIVILEGE
FROM
    USUARIOS US
LEFT OUTER JOIN
    OS -- temporary result set created using WITH clause above
ON
    UPPER (US.USERNAME) = OS.USERNAME
ORDER BY 2 ;Edited by: VishnuR on Jul 5, 2010 8:44 PM
Edited by: VishnuR on Jul 5, 2010 8:47 PM

Profiles , roles and authorisations

hello all sap greats,
                            i have a problem in understanding about the hierarchy of profiles roles and authorisations
PROFILES(as it constitutes of roles)
      I
      I
ROLES(as it contitues of authorisations
      I
      I
AUTHORISATIONS

Hi ashish,
Check this link
http://help.sap.com/erp2005_ehp_03/helpdata/EN/52/671285439b11d1896f0000e8322d00/content.htm
Regards
Ashok

CUA client doesn't know any profile/role anymore after adding child system

Hi,
I did set up a CUA client on our Solman system. The client is client 500 which has been copied over from 000 via the SAP_CUST profile.
In this client 500 I did create some users with the SAP_ALL profile, so no problem here.
After adding a child system to the CUA, it seems that if I want to create a new user in the CUA client 500 it doesn't know any role/profile anymore which is standard available in this client.
In PFCG I can find a lot of standard roles, but when adding one via SU01 I do get the error that it doesn't exist. The same goes for the profile SAP_ALL.
Just to be clear, adding profiles or roles from child systems is not a problem, just adding roles or profiles for the CUA client itself doesn't seems to work anymore.
I had this problem on a 7.0 solman system and now also on a 7.01.
Did anyone had the same problem?
Thanks,
Gregory

Hello Georges,
I have exactly the same issue.
I have created a new CUA. I have copie 001 client to 333 client, using SAP_ALL profile.
Now, from CUA client (333), I cannot add any roles or profiles to my user.
I have created an RFC D1CCLNT333, but it does not resolved the problem.
Did you do anything else to fix your issue ?
Thanks
Best regards
CP2009

SRM RFC users for ERP , what are the profile/roles should be used?

Hi All,
I have integrated SRM and ERP systems using config wizard. Multiple rfc accounts were created automatically by the wizard but what i did was i skipped on the profile and role field because i don't know what to put. Now, I am battling on what profiles and roles should i put there since the wizard didn't do the automatic placing of authorizations and roles for me.
here are the users that have been created automatically by the config wizard.
ERP System:
SRM2ERP
SRM2ERPD
ERPLOCAL
SRM System:
ERP2SRM
ERP2SRMD
SRMLOCAL
Please help on what ABAP Roles and Profiles should i place to it.
Regards,
Tony
Edited by: Tony on Jun 9, 2011 12:34 PM

Hi ,
The user should have profile SAP_ALL assigned automatically when you run the CTC script.
Else please assign manually.
Regards
Sam

User Profiles, Roles and Permission folder empty

Hi,
We installed Peoplesoft 8.49 Apps 9.0, and 10G Oracle on Windows 2003, everything working perfectly except User profiles and Roles and Permission Folders
I have ran AE scripts well, even then we are not able to browse those sections
Any help much appreciated
Thanks

>
We installed Peoplesoft 8.49 Apps 9.0, and 10G Oracle on Windows 2003, everything working perfectly except User profiles and Roles and Permission Folders
>
What do you mean by this? What is not working? What are you expecting and what is happening?

Profile/Role to READ all projects

I am looking for a role or profile to read ALL projects in cPro. Can somebody help me out?

I confirm Florian's answer.
You can create a PFCG role with authorization object ACO_SUPER with::
- activity: ADMIN
- object category: *
You may also have to add wild card authorization for project type.
BR
Matthias

How to check user role/profile

Dear all,
I'm finding function module to get a list of profile/role of user. Would you please suggest me on this?
Btw, if you have any other advise please feel free to let me know.
Thanks in advance.
Peersit

I've just found the related threads on this site.
User Profile Details
Re: User Profile Details
User Wise Authorization/profile report needed
User Wise Authorization/profile report needed
Have a good day.

Why do we need Profiles ?

Hi all,
I know it a bit stupid question you would think but do read it complete before answering.
1. When we create a role the role name is given and tcodes are assigned to it.
Then we go to the authorization tab, before that it asks us to save the role.
So the function of the role is only that much ? .
2. Then we go to the authorization tab and then go to generate profiles. It pulls the authorizations and authorization profiles for all the objects in a role.
Now my question is :-->
Why SAP needed to maintain roles and profiles separately, whereas it could simply have a single activation button as we have in ABAP in authorization tab which would pull the authorization into the objects ? That would not generate any profile and we need not maintain tables related to Profiles.
NOW PLEASE DONT ANSWER THAT WITHOUT PROFILE ROLE IS OF NO USE.....TILL WE DONOT GENERATE THE PROFILE WE CANNOT USE THE ROLE.
hope all have understood my question if there is any doubt let me know.

The profiles hold the actual authorizations which are checked in the software (by the AUTHORITY_CHECK statement).
The roles are a sort of building and administration aid.
Apart from that, as Wojtek points out, the roles bring along additional functionality which has no influence on the actual authorizations.
In earlier versions of SAP (as I've been told, my experience starts at 4.5) the profiles were maintained manually, which was not an easy task.
Nowadays the role concept (started from activity groups...) makes authorization maintenance a lot easier. More intuitive interfaces etc... underneath these lies the original profile concept. As you can guess it is nearly impossible to chuck the whole profile concept overboard and replace it with roles as this would not only mean rewriting the statement AUTHORITY_CHECK but also debugging all programs in the system. Backward compatability can be a good thing.
So, think of the profile generator as your nifty toolbox in which you can click all requirements together and, once satisfied, hit the button that does all the boring stuff (creating the actual profile) for you.
With this I do not really understand the second part of your question as it is only the role you have to maintain. The profile is generated at the push of a button.
Hope this helps
Jurjen
Edited by: J. Heeck on Jan 2, 2008 12:06 PM

RTP interface, update profile and value in ES31

Hi All,
Tcode: ES31
My requirement is to update the profile and constant value for RTP interface in mass. I tried creating BDC, but while selecting the profile role SY-UCOMM is '%GC 132 22' and losing the BDC controls.
Even I tried to look for any BAPI available for this, but I didnu2019t found any.
Please suggest.

Hi,
ES31 is for installation change. You can use BAPI_EQUI_CHANGE for this.
Regards,
Pranaya

GRAC_ROLE_MASS_IMPRT : roles not getting imported

Hi Friends,
I am working on GRC AC migration from AC 5.3 to 10.1
Currently I am importing the Data from backend systems.
While performing intra-migration tasks before RAR data import, I am stuck at below step :
Importing roles for defined connectors : GRAC_ROLE_MASS_IMPRT
My roles are not getting imported from backend systems. I have tested the connection and it is working properly.
Profile, role and authorization sync also has been done successfully.
I am looking forward for help from you expert people.
Thanks in advance,
Achala.

Hi,
I am able to import few roles. When I try to import say 'XC:*' roles, I can see only around 500 roles in the output log where there are around 7000 "XC:*"roles present in the system.
Secondly, when I try to enter multiple roles in the role tab, the import gets executed only for first role and not for remaining once. Please find attached file of screenshots.
Please advise if there is any limit for number of roles imported at a time via GRAC_ROLE_MASS_IMPRT.
Please also adivse if any workaround available.

Roles not being removed from CC5.2

After we run a full sync for users and roles we are still finding roles in CC 5.2 that have been removed/deleted from the SAP backend systems.

HI,
Try with a new job and for being on the safer side select all of the choices for full Sync - i.e profile, role and users. Also, select the relevant options for your system for the Batch Risk Analysis and the Management Reports too.
Sometimes it is a common problem that Management reports show data for a role to be in Risk, which does not even exist because we did not check this option of Management reports while running the BG job.
This might take a bit of longer time but will be accurate.
Regards,
Hersh.

SAP ISU RTP Price Profile

I am trying to configure RTP for real time scenarios like index prices which will be coming as input from market.We have done some configuration on this but on billing we are getting bill as Normal bill i.e. Total amount . I want to see the calculation as per the intervals ? e.g every 30 mins.
Also If I have to attach prices for every 30 mins How can I do that ? If we have to use price profile ...then we cannot create a RTP operand for price as RTP operand will be used only for Quantity,demand & Amount.
Any help will be appriciated.
thanks

I think you have 2 options:
1. If you just want to bill each 30 mins with a price then you can create a formula profile for each customer that is to be billed like this.
The profile should have PV category Amount and as a formula you may use LIMIT02. Define the limit as 0 and all your consumption will be above the limit and evaluated with the price profile.
You would then have to calculate your formula profile to be able to bill the customer. The RTP interface can then calculate the total amount and if you require eg. peak demand.
2. You can do it completely in the RTP interface.
Define a price profile and use this as an input parameter, either by role or enter the specific profile number in the RTP interface, to your formula.
As the other input parameter use your quantity profile, allocated by role.
Then your formula will calculate price * quantity and return a profile. The result functions in the RTP interface result parameters make it 1 value (the sum, minimum or maximum or any other function you define).
Make your formula store the calculated result profile as well, by finding the result profile to store on based on the input profile (allocation to register, profile role to find right profile).
Option 1 is the most simplistic and would need no custom development.

ChaRM - Role associations in target clients

Hi Guys
I have tried to assign the roles in target clients, but they don't exist.
This is the roles:
SAP_CHANGEMAN_DEVELOPER
SAP_CHANGEMAN_OPERATOR
SAP_CHANGEMAN_ADMIN
They are not in customer name space. What I can do?
There is a SAP note or I create them manually?

Hi,
depending on the release of your satellite system you should have the following roles/profiles:
Roles for the Change Management in satellite systems:
1)
Release >= 6.10
Role: SAP_CHANGEMAN_DEVELOPER
Release < 6.10
Profile: S_TMW_DEVELO
Authorizations for developers;
This profile contains CTS authorizations for developers: No authorization to create transport
requests, and no authorization to release transport requests but to create and release tasks
2)
Release >= 6.10
SAP_CHANGEMAN_OPERATOR
Release < 6.10
Profile: S_TMW_OPERA
Authorizations for operators;
This profile contains CTS authorizations for operators: All transport authorizations;
no configuration authorizations
3)
Release >= 6.10
SAP_CHANGEMAN_ADMIN
Release < 6.10
Profile: S_TMW_ADMIN
Authorizations for administrators;
This profile contains CTS authorizations for administrators:
All authorizations in the CTS (including configuration)
Taken from the Security Guide SAP Solution Manager 7.0 as of SP16.
What is your satellite system component and version?
I just checked in ECC 6.0, those roles are there.
Regards

Role for a particular Transaction

Hi,
How will I know the role for a particular Transaction?
like , I need to know the role of Transaction PFCG coz i dont have access to this Transaction now.....

Vamsee,
If you dwell down to the bottom of the access/authorizations/profile/roles etc what ever you call....you have something called authorizations.
If you are talking about a particular transaction a custom one or a standard one, there is an auth. group assigned to it. Basis is the team which creates auth. objects and they create a profile which are infact added to the roles.
These are the roles which are added to the user ids of the people using the system.
Different roles which give us different authorizations to work with in the system.
Hope I made my point clear.
One more important thing is, you cant just ask basis to assign a particular profile or role which you might have found by some means like SU53. Because a tcode can be there in many roles or profiles. It is up to basis to decide what role they have to assign based on what authorizations you need. The profile or role which you might have found out may contain other auth's for other tcodes which basis may not want to offer.
Thanks,
Message was edited by: Naren Somen

Profiles Roles

Similar Messages

Maybe you are looking for