Question on hoe to delegate administration rights (BOE XI 3.1)

Hi,
I'm working through the admin document from SAPs site for this product and see that I can delegate administration rights to a user or group. This is something I would find usefull in my company as we have geographically disparate offices and can't always do the work when it is first requested. The idea would be to set up an admin group in each of the offices and add a user to the group to manage things like new starters, group assignments and scheduling on behalf of someone else.
The admin guide is a little vague when it comes to this particular section as it explains what can be done but not how to do it. I have been testing this feature to see how easy it is to set up and I can't get it working.
Question: What rights do I need to configure to permit a user permissions to add a new user and against which object(s) should they be set?
Thanks,
Mike

I'm doing something like this.  For each department, I've created an Admin user group.  These user groups are sub-groups of the administrators group so they get the same rights as the Administrator.
I then go through other parts of the CMC and give these admin sub-groups view only access to things like servers and other areas of the CMC where I don't want them messing around.  They have full control over their department folders, department user groups, and users, but nothing else in the system.  It's a pain to set it up, but it's worth it in the long run.
-Dell

Similar Messages

  • Installation of SAP Business One client and required administration rights

    Dear community,
    I would like to kindly ask you for your feedback on the installation of SAP Business One client and its patches on end-user computers.
    The pain points I have heard so far are the following:
    - The installation of SAP Business One client and its patches has to be started by a user with administrator rights.  As far as I know (and please correct me if I am wrong), this is also required in case of installation of any other software.
    - End users usually do not have administrator rights and therefore the SAP Business One clients have to be manually upgraded by administrator.  This is time consuming (and therefore costly) activity.
    We are considering to design a new solution which would overcome the above limitations.
    I would like to confirm with you if my understanding is correct:
    Question 1:
    Is it a common situation that the end-users of SAP Business One client do not have administrator rights and therefore cannot install the patches of SAP Business One client by themselves?
    If yes, how do you resolve this currently?
    Question 2:
    Do you use Microsoft System Center Configuration Manager or Active Directory (or any other 3rd party solution) to automatically distribute software packages and updates to client PCs at your customers?
    Question 3:
    If the SAP Business One client installation (and its patches) is delivered as MSI package with silent installation capability, would you be able to automate the deployment of B1 client updates to client PC using the abovementioned technologies? Or can you still see some obstacles?
    Thank you
    Best regards
    Jan Ruzarovsky
    SAP Business One Product Management

    Dear all,
    Thank you very much for your comments, very helpful!
    @Marco - SAP Business One 8.8 client currently does not support the silent installation / upgrade. However we are currently considering this requirement and we would like to deliver it as soon as possible.
    We are currently considering several possible designs. One of them is as follows:
    1. A new SAP Business One Updater Service will be installed on each client workstation.
    It will be a windows service installed and running under a local system account.
    2. The updater service will check regularly if there are any new patches of SAP Business One client or add-ons uploaded to a configured shared directory.
    3. If a new patch is found in the shared directory, the updater service will SILENTLY install the new patch (add-ons, SAP Business One) on the client workstation.
    The service would be able to install patches even if nobody is logged in.
    Questions:
    If we consider the above design, there are a few open topics:
    1. During the upgrade of the SAP Business One server, the client patches (and SAP add-on patches, partner add-ons) would be placed to a SHARED directory instead of into SBO-Common (as it is implemented currently).
    - Does this have any impact on your tools, processes or add-ons?
    2. SAP Business One upgrade wizard will put the latest patch of SAP Business One client into a configured shared directory. The shared directory will have to be read-only for everybody in the network to avoid that the valid installation files are replaced by malware or virus infected files
    - Can you configure such a shared directory? 
    From customer perspective, if a new patch is put into the shared directory, the updater service can behave as follows:
    1. Manually initiated upgrade of the client
    Example: Customer starts the old (not upgraded) SAP Business One client. The client will inform him/her that a new patch has been found and it has to be installed in order to continue working with the client. After customer clicks "Yes", the upgrader service starts the silent installation of the client and informs customer about the progress. Once the upgrade is finished, the upgraded SAP Business One client will be started automatically.
    2. Automatic update:
       - Update the client automatically (e.g. overnight) if customer is not working with SAP Business One
       - If SAP Business One client is running, ask customer if he/she wishes to upgrade the client now or to delay the upgrade by X minutes.
    Question: Which of the above two scenarios would you and your customers prefer?
    If the upgrade is fully silent, automated and handled by the upgrader service, Is it acceptable for customers to trigger the installation manually and wait till the client is upgraded? Or would they prefer to have the client updated for them e.g. overnight so they can immediately start to work?
    Best regards
    Jan
    Edited by: Jan Ruzarovsky on Sep 29, 2010 9:37 AM

  • No Administrative Rights in v6.0 for Level 10?

    2 questions:
    1) I have delivered my first upgrade of Lookout to v6.0.1 for a customer.
    Two days later I go to add another person to level 10 and find I do not have administrative rights to do this.
    I get a pop-up window that tells me this.
    Bad news, I set myself up as Level 10, like always, and now I can't get in to change users?
    I mean, like with level 10 I should be able to do *anything*.
    2) I cannot find where I get to change the default user variable save period. It's default of 60min is too long and I need to drop it to 10 or so.
    It is on the System page in 3.8 "Save State Files every: xxx min". But no such luck in 6.
    System is a new PC with XP Pro

    Well the forum administrator has prevailed on me to relay the answers.
    1) Obviously I did not give myself full administrator functions in Lookout when I set myself up, level 10 doesn't cut it any more. The name being the same as the windows terminology led me to look to the windows administrator function. I wonder what the ghosts at Georgetown would say now, it doesn't come on a single floppy diskette any more guys.
    2) The default user save period is called "state", I knew that. Alls you do is search on "state" and not "save" or "variable" or anything else, and when you do figure out the magic word is "state", you find it has migrated from "Options\System" to "File\Modify Service".
    Oh that's much more logical...
    It's so easy when you know how.
    I will now put on my dunces cap and stand in a corner.
    Message Edited by Billy d on 03-03-2006 05:24 PM

  • How to keep administrative rights to our program

    Hi experts,
         I want to know how to have administrative right to my program so that only i can make changes to program,Not the enduser.
    The other question is :
    how display logo/picture in my program.Can any one give the code for this question? 
    thanks & regards,
    Prasanth

    Hi,
    Below are the steps to follow for displaying logog.
    1.In transaction OAER, give class name as 'PICTURES' and clas type 'OT'.
    2. Enter the object key as the name of the logo you wish to give and execute
    3. Then in the new screen select Standard doc. types in bottom window
    Click on the Screen icon
    Now, it will ask for the file path where you have to upload the logo
    7. Now you can use this logo in REUSE_ALV_COMMENTARY_WRITE
    call function 'REUSE_ALV_COMMENTARY_WRITE'
    exporting
    it_list_commentary = i_header
    i_logo = Ur logo .

  • How provide CrystalReports without administrator rights?

    Post Author: vtortola
    CA Forum: .NET
    Hi!
    I'm developing a SmartClient application that is deployed with ClickOnce from a web server. The application, use several crystal reports features and I need deploy the needed dlls with ClickOnce.
    From my understanding, for install Crystal Reports runtime I need administrator rights, but this mean that the sysadmin must go to each computer and installs it, that isn't posible.
    I need deploy the Crystal Reports assemblies or dlls in my application path and know how use it. How I can do it??
    Thanks in advance.
    Regards.

    Thanks for the link, John. It takes me to customer support but they say I need technical support.
    While I wait for their office to open, can you provide some details how you or others got around this issue? There are a few tertiary questions I hope to have answered if possible. And since you were te first to reply, I thought you would be best suited for them.
    Wha that are your thoughts on the remaining questions?

  • Are local Administrator rights required to install or run the following pieces of software

    Hello,
    I was wondering if you would be able to assist me. I am currently cataloging various bits of software in use within our company and need to know if they a) require local administrator rights to install on a computer and b) require local administration rights to run after being installed.
    The pieces of software in question are:
    Blackberry Desktop Manager Version 4.3.0.15
    Blackberry Enterprise Server Version 4.1.3.18
    Any assistance gratefully received, or if you could point me in the direction of who I should be asking that would be great.
    Many Thanks,
    Phil Booth
    Group M
    IT Desktop Support technician.
    Phillip Booth
    GroupM
    Technical Support Engineer
    IT
    [email protected]
    Office: 0207 158 5995
    DID: 5995
    124 Theobald's Road London WC1X 8RX United Kingdom
    www.groupm.com

    Superb detail, thank you.
    (1) Download the Windows Installer CleanUp utility installer file (msicuu2.exe) from the following Major Geeks page (use one of the links under the "DOWNLOAD LOCATIONS" thingy on the Major Geeks page):
    http://majorgeeks.com/download.php?det=4459
    (2) Doubleclick the msicuu2.exe file and follow the prompts to install the Windows Installer CleanUp utility. (If you're on a Windows Vista or Windows 7 system and you get a Code 800A0046 error message when doubleclicking the msicuu2.exe file, try instead right-clicking on the msicuu2.exe file and selecting "Run as administrator".)
    (3) In your Start menu click All Programs and then click Windows Install Clean Up. The Windows Installer CleanUp utility window appears, listing software that is currently installed on your computer.
    (4) In the list of programs that appears in CleanUp, select any iTunes entries and click "Remove", as per the following screenshot:
    (5) Quit out of CleanUp, restart the PC and try another iTunes install. Does it go through properly this time?

  • Windows 7, removed Administrator rights from my user with Administrator disabled..

    Windows 7, removed Administrator rights from my user with Administrator disabled..how solve without restore everything please??
    Cause drag&drop was disabling each time there was an high privilege process, I tough to fix this annoying trouble removing my user from Administrator group..in fact I fixed that situation.
    But NOW I have another serious problem: my user is not able to do nothing, and my administrator user was disabled and as only belonging to homeuser group I cannot enable it!!! In this moment I am crying because I have fear I will need to restore everything, please do you know a way to enable the administrator user again even if without admin privilege?? Do you know a software that fix it or an also not clean way to avoid a complete restore??
    Thanks in advance and ciaoo
    Fabio

    in control panel > user accounts > change account type select admin.
    Thinkpad R61 7733-1GU
    Thinkpad X61T 7762-54U
    Thinkpad X60T 6363-4GU
    Did a member help you today? Thank them with a Kudo!
    If a post answers your question, please mark it as an "Accepted Solution"!
    Regards,
    GMAC

  • Retrieving a Database from a Computer Without Administrative Rights

    I am not sure if I have the correct forum for this question, but ... I have a computer with only one login account with administrative rights. The login is kludged now that the registry value for the administrative user is messed up. When I try to log
    in, I get a message saying something to the effect of "The user profile service service failed the logon".  I looked it up on msdn and saw that I can fix it by changing the registry, but of course, I cannot do that because the bad user
    account is the administrative account.
    The only thing that I need to retrieve from that hard drive is a sql server database.  Is there any way for me to do that, perhaps by putting the drive in a USB "sled" device and attaching it to a different computer as an external hard drive? 
    Will I be able to access the data folder where the database resides or will I get a message saying that I do not have permission?
    Rob E.

    Sounds like I have a chance.  SQL Server is installed on my C drive. I am concerned that when I try to open the data folder on the usb drive I will get a message saying I do not have permission to open the folder.  Do you think that would
    happen?
    Rob E.
    no, that should not happen..because you are effectively making the drive as an "external drive that has some files "to the new computer..
    just copy them over and attach to the new sql instance...
    Hope it Helps!!

  • Can't Open Server Manager - don't have System Administrator Rights

    Hi,
    I am new to BPC
    After i updated the support patch to BPC 7.5 MS  SP3 ,  pack level 2
    and Restart the server
    Then Server Manager can't open again.
    Error Message :
    This ID (xxxxxx)  don't have System Administrator Rights; you must log on with a user ID that has system administrator  privileges
    But I have logon the user which is used to install BPC 
    I have try to restart the service, but it is not working .
    Any method reset it ?  or solve it?
    thx
    John

    Dear Kong Chong Shun,
    From your information, I'm sorry I could not get several information. Did you upgrade your BPC Clients too, lets say BPC Administrators ?.
    Kind Regards,
    Wandi Sutandi

  • Is there a way to prevent an account with no administrative rights to install firefox to their local profile on Windows XP?

    Our users are normally not allowed to install any programs since their user accounts do not have administrative rights to their pc's. Has this been a feature in FireFox before?
    We noticed that one user was able to simply download firefox, run the installation setup, and the setup would default to install firefox under their local desktop profile instead of the usual c:\Program Files folder.
    ie. c:\Documents and Settings\userid\Local Settings\Application Data\Mozilla Firefox\
    Is there a way to prevent this from happening? We do not want to allow our users to be able to install any programs without our knowledge.

    The Skype add-in was the culprit in my case. Disabling it fixed the problem. As soon as I enable it, the problem comes back.

  • User with Farm Administrator rights, but NOT in Farm Administrators Group

    I have an account that we recently discovered has Farm Administrator rights and was used to access Central Admin and cause some harm.  When I use the "Check Permissions" on the Central Admin site, it says that account has Full Control via
    the Farm Administrators Group.  However, that account is not in the Farm Adminstrators group.
    There is an entry in the Farm Administrators group for "BUILTIN\Administrators" and this account is in the Local Admin group on this server.  However, there are other accounts in the Local Admin group too, and when I "Check Permissions"
    for them, it returns 'None'. 
    I am confused as to how this one account has Farm Administration level access, while others in Local Admin do not, and how can I remove this accounts Farm Administration rights if it is NOT in the Farm Adminstrators Group?
    What are the potential problems/issues if I remove the "BUILTIN\Administrators" entry from the Farm Adminstrators Group?
    Thanks in advance for any feedback/help.

    If you have BUILTIN\Administrators as part of the Farm Admins, any user that is a Local Administrator will have Farm Admin rights. SharePoint doesn't enumerate groups when checking permissions, so the behavior you're seeing is correct. If you do not want
    Local Admins to have Farm Admin rights, remove BUILTIN\Administrators from the Farm Admins group in SharePoint.
    There should not be any issue with removing the group from Farm Admins, only that users will need both rights to fully manage SharePoint.
    Trevor Seward
    Follow or contact me at...
    &nbsp&nbsp
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

  • Same user with administrative rights on all the servers in single domain versus domainadmin as a part of administrator group in all the servers

    same user with administrative rights on all the servers in single domain user as a part of administrator group in all the servers:
    same user is configured as administrator on all the servers in one domain at windows 2003 server. Should this user be made part of domain admin and then this can be set up in the group of administrator for all the servers.
    How this is technically different?
    If same user is set up as an administrator on all the servers in domain, will it have the same access on all the files as a domain admin user?
    dhomya

    If the account is not admin on the domaincontrollers and the account is not member of domain admins or any other privileged AD group, the account has only user privileges on AD and thus cannot perform actions like creating and managing  accounts,
    groups, OUs,policies, sites, ...in other words cannot potentially ruin Active Directory.
    I think that is a pretty big difference.
    In fact, it is bad practice to perform you daily server management with an AD privileged account.
    In regards of file access. The domain administrator will be just an admin, and thus has the privilies assigned to the local admin group, just as any other admin. But if it are different accounts they might be member of different groups assigning different
    privileges. Always be carefull when assuming resulting privileges will be the same.
    MCP/MCSA/MCTS/MCITP

  • I just got a new ipad 2 and i can't buy stuff on it asks for security question when my apple id was right why

    i just got a new ipad 2 and i can't buy stuff on it asks for security question when my apple id was right why

    It's a security feature that was brought in a few months ago - when you try to purchase something for the first time on a new computer or device then you will be asked for the answers to your questions (or to set them up if you haven't yet created them).

  • HT1923 I had to reinstall Itunes due to "runtime error" and the instructions said to run as administrator.  I did that but I'm getting a message about administrator rights to my mobile device and it won't load.  What do I do now?

    Having issues reinstalling ITunes.  I ran as administrator but getting message that I do not have administrator rights for mobile device.  Any suggestions.

    See this User Tip by turingtest2
    https://discussions.apple.com/docs/DOC-6562

  • I am trying to install itunes for my mobile, and I keep getting the message "You do not have administrator rights, please contact the system administrator to preform an update."  I have it set as adminstrator as the user.

    I am trying to install itunes for my mobile, and I keep getting the message "You do not have administrator rights, please contact the system administrator to preform an update."  I have it set as adminstrator as the user. I am running Windows 7 Ultimate. Help please?

    Thanks, but I've done that several times & it still says I need administraive privileges. I had itunes installed with no problems until I did the latest update. After that it just disappeared, so I tried reinstalling. Now I can't sync my phone. This is so frustrating!

Maybe you are looking for

  • Trying to open Indesign and it keeps crashing... help!

    Process:         Adobe InDesign CC [333] Path:            /Applications/Adobe InDesign CC/Adobe InDesign CC.app/Contents/MacOS/Adobe InDesign CC Identifier:      com.adobe.InDesign Version:         9.2.1.101 (9210) Code Type:       X86-64 (Native) Pa

  • Special character and htp.p()

    I am trying to use PL/SQL procedure to present my customized item. If user type in secial character, e.g. single quote ', in the attribute, I got this error on the page: Error 30584: DBMS_SQL has raised an unhandled exception. ORA-06550: line 1, colu

  • N900 so close but so far

    I am so frustrated with Nokia.  I have the n97 and whereas I find it reasonably functional - as many other users I have found it to be full of bugs and annoyances which Nokia seem unable or unwilling to address. So I have been waiting on the n900 to

  • Remembering passwords for HTTP 403 pages in Safari

    Hi, I've turned on autofill for names and passwords in settings; however, it only appears to save passwords that are entered in forms (i.e. the web designers used the form html element) - it does not appear to remember passwords when an HTTP 403 is g

  • Database not supported on oracle9i

    Hello, in our company we use zfd4.01 ir6 and oracle 8 for inventory. All is working fine. Now we have to upgrade our oracle 8 to oracle 9i. When inventory starts, we get error 627 - database not supported, even though novell supports oracle 9i since