Query to fetch users and User Authorizations

Hi
I have a task to retrieve the all users and the authorizations. I am trying to run a query to get the results.
Inorder to get the users, I use
select * from OUSR
But I am stuck with authorizations.
Can anyone help.
Thanks in advance.
MSJ.

Hi Manoj,
It is not possible in SAPB1.
Try to Export to Excel File.
check the thread,
Re: Authorisations List
Regards,
Madhan.

Similar Messages

How does schedule with RESTful API a Webi report for a group of users ("Schedule For" to "Schedule for specified users and user groups" with one or more users/groups)?

SAB BO 4.1 SP1
Does it have an RESTful API to schedule a Webi report with the parameter to specify a group of users ("Schedule For" to "Schedule for specified users and user groups" with one or more users/groups)?

Hello Ricardo,
have you try a call like this one ?
    <schedule>
      <name>"test"</name>"
      <format type=\"webi\"/>
      <destination>
        <inbox>
         <to>userId1,userId2,userId3,groupId1,groupId12</to>
        </inbox>
      </destination>
    </schedule>
Regards
Stephane

Field to distinguish standard users and user defined users

Hi,
   I want to distinguish the standard users and user defined users for getting one report to filter what are all the standard users in sap like sap*.....I dont know how to split the standard users and users created by us.is there any way to distinguish both the users
                                           Thanks in advance

>
J@Y wrote:
> In table USR04, MODBE is the Last changed by check if its your Zbatch, or any of your basis guyz initials on it. if not its standard created by SAP.
Nice try - but on my system SAP* has a MODBE of one of our basis people.

All Users and User Groups member count 0

I've setup SCCM 2012 R2, configured the AD User Discovery. But my Member count for All Users and User groups is 0, Memebers Visible on Site is 968.
I'm not sure how to get the Member count working.

Hi,
Please check Smsprov.log to see whether there are any errors when you open Device Collections.
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Get user and user-roles in form based authentication

How do I get user and roles associated with the user in my bean for "form based authentication".
regards,
nirvan.

HttpServletRequest#getUserPrincipal().
This has nothing to do with JSF. Form based authentication is part of Servlet spec.
In JSF you can get the HttpServletRequest by ExternalContext#getRequest().

LDAP/AD - List of Users and User Attributes

I have successfully authenticated myself using Java/LDAP with a Active Directory, now I need to be able to retrieve the attributes of the users in the active directory.
My confusion is that I am not sure of the CN/OU/O/etc.. configurations, or how to determine what they are on my Active Directory Server. I understand that DC=host,DC=credit,DC=com is basically host.creditwave.com, but I need to be capable of retrieving an enumeration of users, and what object to cast them to etc...
Any help would be appreciated.
Regards,
Dean.

If you have access to the Active Directory itself, and it has the Win2k Support Tools installed on it, you can see the schema in terms of CN, OU etc. using ADSIEdit
Often though, for Users created on the AD itself, they can be found in
cn=Users,dc=yourdomain,dc=com
A user is generally listed as a "cn=User.Name".
If you create your InitialDirCtxt using the URL "ldap://adserver/dc=yourdomain,dc=com"
then you can search for Users with
initDirCtxt.search("cn=Users","(cn=*)",new SearchControls());
Another good way to figure out the schema is to download the excellent 100% Java LDAP Browser from
http://www.novell.com/coolsolutions/tools/1283.html

Query not fetching results and shows executing

All,
When I run a query from SQL Plus I am getting query results immediately table with more than 50,000 rows), but when I run from TOAD or PL/SQL Developer am not getting any result and all I see is query executing no error message also.
Surprising part is I am able to see results if the table is less than 100 rows in SQL Plus, TOAD and PL/SQL Developer.
Please tell me is there anything I have to do in the database configuration, I am facing this issue due to database move to a new server.
Thanks in advance

Anand,
I don't see this as an issue with TOAD or PL/SQL Developer, the reason is using my TOAD or PL/SQL Developer I am able to connect to the copy of this database (DEV) and able to fetch results. Only in the database I migrated to the new server I am not able to fetch results from connecting through any application, the only place I am able to run and get results is SQL PLUS.
So I believe this is something which I am missing in my database configuration or in my new server.
Please help me
Thanks in Advance

Limited Logistics users and User Defined Fields - UDF

The SAP "Overview of SAP Business One License User Types" shows, in the last section under General, that only Professional users have any access at all to User-defined fields and tables.
This seems counterintuitive as these fields are usually set up for others to see and to use.
What is the real scoop on this?
Thank you,
Sal

Hi Sal,
It only means Professional User License has unlimited usages of UDF & UDT including managing and defining them.
To read the values and use them are available to all license types.
Thanks,
Gordon

Need help migrating OD users and user data

I need some advise.
I have OD user accounts, more precisely NetHomeAccounts, and the users home folders reside on a 1TB RAID. The RAID is full. No surprise, new that would happen.
I've acquired a 12TB RAID that i plan to move the home folders too.
I also want to consolidate two servers into one. I believe I can use migration assistant to move the OD acounts from one server to another.
my question is about the user data i need to move between two RAIDs...
should I use rsyc to move the NetAccount Home folders from the full RAID to the new 12TB RAID?
- will the accounts migrated from server A to server B recognize there old home folder that is now hosted on a new 12TB RAID? will i run into permission errors?
please advise. Thank You.

There are serveral ways you can do this, and would depend very much on how you have set things up, although I feel the simplest would simply to shut your file sharing services down, clone the old RAID volume to the new RAID volume, modify/recreate your Users file sharing volume to point to the new RAID drive (so there's no need to modify OD records) and start your file sharing services again.
Another way would be to use the ditto (or rsync) command in Terminal to do the copy process if you aren't wanting to more the entire contents of a volume. Ultimately if your OD user records aren't being changed then user IDs, and hence permissions, should remain constant.
Without know exactly what is where and how things are set up it's hard to know exactly what the preferred route would be.

CPIC user and user roles

Greetings Everyone,
    I have developed a few ETL type scripts with PHP and SAPRFC. It was decided by other powers that the user to be given RFC access would be a single CPIC user. My dilemma now, is how can I make sure that users logged in to the intranet portal only have access to data controlled by their SAP username, which is the same name they login to the portal with, and not the roles/activity groups of the CPIC user id. Any help on this issue would be greatly appreciated!
Thanks,
Christopher

Hello Christopher,
if the Secude Secure Login provides your User a SAP Logon Ticket Cookie then you can use this Coding to establish the connection using that ticket:
[code]<?php
$ticket = $_COOKIE["MYSAPSSO2"];
$login = array (
               "ASHOST"=>"application.server.domain",
               "SYSNR"=>"00",
               "CLIENT"=>"002",
               "MYSAPSSO2"=>$ticket,
$rfc = saprfc_open ($login );
if (! $rfc ) { echo "SSO2 RFC connection failed"; exit; }
echo "SSO2 OK<br>";
?>[/code]
Regards
Gregor

Users and authorizations

Hi All,
I have created a report which shows users and their authorization in each object class.
Now i want to the add the field values for each object related to the object class.
Suppose in MM class user can only post the PO with amount between 1000 Rs to 10,000 Rs. So i can't able to find this limits table in the Data dictionary.
Thanks in an advance and reward points to appropriate answers.
Regards,
Bharat Mistry.

Hi UR,
If you mean by "no data is populated" that the cubes are not "loaded" with data then this is ok since these InfoCubes are virtual providers (formerly called remote cubes). They access data directly on the underlying system tables.
For more information, check out the below link on BW documentation:
[http://help.sap.com/saphelp_nw70/helpdata/en/c0/fd8b41b5b3b45fe10000000a1550b0/frameset.htm]

Retrieving user and group information from LDAP using j_securrity_check

Hi
I am using j_security_check to authenticate users against LDAP. I have made all necessary configuration for the server to perform LDAP group search as well as mentioned in the WAS documentation of LDAP settings. Now, how can I retrieve the user and the user group info after the j_secuirty_check. Apart from the UserPrincipal object which I can get from the request which just has the user name, is there any other object which will give me the user and user group info by which I need to connect to LDAP using my java code to retrieve these informations?
Regards
Deepak

Hi
I am using j_security_check to authenticate users
against LDAP. I have made all necessary configuration
for the server to perform LDAP group search as well
as mentioned in the WAS documentation of LDAP
settings. Now, how can I retrieve the user and the
user group info after the j_secuirty_check.
Apart
from the UserPrincipal object which I can get from
the request which just has the user name, is there
any other object which will give me the user and user
group info by which I need to connect to LDAP using
my java code to retrieve these informations?Hmm, you don't need the user group info to connect to the LDAP server, right? You would need the user's Id (which you have) and password (which you don't). You could use the LDAP credentials and bind as that to look up the user info via the user id. Or if the server is set up to allow anonymous bind you could do it without credentials. But if all you want is group info then you should be able to call Security.getCurrentSubject().getPrincipals() to get the user principal as well as all groups (this is true in BEA WebLogic at least).
Good Luck
Lee

Locked users and modify user screens modifications.

Hi,
Need a suggestion how to...:
1. Filter locked users list screen so it will display
users locked with a particular reason only.
2. Make "modify user" action (available from locked
users and users search result lists) to display my
edit user form instead of portal's default one.
Thank you,
Yuri

Hi;
1. How can I log in to SYS account despite being locked. Is it because i logged in through external authentication?set ORACLE_HOME, ORACLE_SID than
sqlplus "/as sysdba"
alter user xx account unlock;
2. Is locking the SYS user a standard practise ? If so, why ?
SYS and SYSTEM are default users, created with the creation of the database. Although they have much power - as they are granted the DBA role - they're still ordinary users. Because SYS owns the data dictionary, (s)he is considered a bit more special than SYSTEM. But SYS has the SYSDBA privilege which SYSTEM doesn't. This makes it possible for SYS to become a very very powerful user. This is the case when (s)he connects as sys/password as SYSDBA or / as sysdba. The as sysdba phrase is a request to aqcuire the privileges associated wht the single SYSDBA system privileges (see here).
Source:
http://www.adp-gmbh.ch/ora/misc/sys_system_internal.html
Regard
Helios

Problem with Notifications on Create User/ Change User Password

Hello,
I'm having a problem sending emails to users when an account is created in OIM.
I added a notification to the user and user's manager on the Create User task in the Xellerate User process definition but the emails are not being sent.
I know that if I create another task with the purpose of sending emails and invoke it through the response in the Create User task, it will work.
My aim is to avoid adding tasks for something OIM should be able to do OOTB.
I'm also unable to send an email when a password is updated.. I did the same thing as for the Create User and I know the task (Change User Password) is being invoked by looking at the logs but the emails aren't being sent.
Has anyone ran into such problems?
I'm having these problems in the Xellerate User process task.. i've added notifications in other process tasks (mainly approval tasks) and they are working fine.
Thanks in advance

Hi,
I am just confuse with your response.Have you added the "Password Updated" task in xellerate user provisioning process?
Now if you changing password in OIM profile it will trigger "Change User Password" task not the "Password Updated" task and even if you add "Password Updated" task on Xellerate User provisioning task you can't see this task in Resource Details.
Now assume if you added your notification on "Password Updated" task of any resource which user is provisioned to even then when you change oim password it only trigger "Change User Password" task.So try to have your notification on "Change User Password" task.
Please clarify so that I can response correctly.
Regards
Nitesh

Query problem - authorization and user entry variable as filter

hi,
I made two variables for the characteristic 0COMP_CODE.
The first variable is a user entry variable for the selection.
The second variable is my authorization variable with multiple single values.
This two variables are defined as filter in the query.
The problem is as follows:
A user is authorized to see the data from three companies. For example companies 1, 2 and 3.
Now he enters on the selection for the 0COMP_CODE the value 2 to see only the data of this company. The query result gets me confused. It shows all data of the companies 2 and others. It basicly shows more companies than he has selected.
Other companies of the authorization variable are shown.
It works if the user has the authorization over all companies.
Did someone has the same problem?
Thanks for your help/advice.
regards,
Pascal

Hi Pascal,
this is an issue. The main problem is that you just can't influence via the exit for a vairable "ready for input".
What could be done is define a dummy element (hidden in the final display) in your query like a restricted KeyFigure to a variable based on COMP_CODE; let's say VAR1 ready for input.
You char COMP_CODE would then be filtered by a variable not ready for input processed by user exit, VAR2.
The exit would ready VAR1. If there any value complying with the authorized one then populate VAR2 with it, otherwise remove it (you could use STEP_3 to raise a message "you aren't authorized to use comp_code XYZ" and return to the initial variable screen). If VAR1 is empty, then populate VAR2 wit all corresponding aithorized values.
The main issue is that
1- this is bypassing the standard functionality of authorization variables
2- any report would have to be designed like that!
What we have done is to add nav_attr / and added more IObjs in the InfoProviders related to 0COMP_CODE reflecting a country, region or any other group of comp_code authorization and then have based our authorizations on those nav....
hope this helps...
Olivier.

Query to fetch users and User Authorizations

Similar Messages

Maybe you are looking for