Regarding Making user authorization matrix

Hwello Friends,
Can anybody tell me the user authorization matrix for sap system ? How can we make and how to make profiles and roles. i know the transaction. but does sap or other documents for this ? plz send me or guide me. waiting for ur reply.send me some link if any or material links. or send me material on my id. [email protected]
Thanks
Deepak

Hi, Deepak!
As your question is quite general - which kind of SAP system? ECC? Portal? PI? - I' m doing a little hard with concrete answers. Probably you' ll find some infos under <a href="http://help.sap.com/saphelp_erp2005vp/helpdata/en/81/0e0f61b566dc44bbb4055b3ccd25be/frameset.htm">Identity Management</a>. If that' s not what you' re looking for, let me know!
Regards,
Thomas

Similar Messages

Devlopment of authorization matrix

Hi All,
I need to devlop an authorization matrix using resecadmin transaction.
what is a genral idea behind authorization matrix?
What should be the steps to create authorization matrix?
What things should be included for creation of the authoriaztion matrix?
Regards,
deepak

Hi,
Check these links.
Authorization Matrix
What is Authorization Matrix?
Regarding Making user authorization matrix
Regards,
Balaji V

Best practice to set up the user authorization

Dear expert,
I have a question regarding the user authorization access. I've attend the BOE training but I'm still blur in term of user authorization planning. Currently, I have around 50 named users that need to access the BOE server. But the certain user will be restricted to access to certain folders or reports. May I know what is the best practice to set up the user authorization access? Should I set up first in the development machine and once its firm, then I migrate it to production machine..or is there any steps that I need to follow...?
Really appreciate if you can let me know on what should I look into first before set up the authorization. Is there any doccument that I can referring to..?
Thanks & Regards,
-Syahida-

Create User Group for each folder (for eg. Sales/Marketing etc) and also based on the type of access you want to provide.
Like Sales VOD/ Sales View/Sales Schedule, and add users to the User Group based on the type of rights you want to provide them. Then add the User Group to respective report folders.
First deploy it in the Development environment, once you have everything finalized then you can replicate the same to QA and Prod environment by migration. Also make sure that in Development environment developers will have full control to develop/add reports to folders, you have to restrict that in QA & Prod environment.

All the users authorization report

Dear Experts,
I want run the all the users authorization in SAP. I want prepare authorization matrix from all the users.
Please help me on this. Thanks for advance.
Regards
S.Prasad

Hi,
post your query in abap forum.
the following tables are useful to create such report
ROLES BY TCODE ASSIGNMENT
TSTCT
AGR_1251
ROLES BY USERS ASSIGNMENT
AGR_USERS
USER_ADDR
ROLES BY ORGANIZATIONAL LEVEL ELEMENT ASSIGNMENT
AGR_1252
USVART
regards,
kaushal

What is Authorization Matrix?

Dear Friends,
What is Authorization Matrix?? Can someone clarify with an example??
Regards,
Alok.

Hi,
As per my knowledge, the auhtorization matrix will have a set of roles that are required for a business user. It is a normal spreadsheet document with list of roles. Further, it also contains the list of transaction in every role. When a new user joins the organization, he can find out the roles for which access is required based on the FUG (Functional User Group) in the authorzation matrix.
Regards,
Raghu

Ultiroute says "Check user authorization"

My Ultiroute has suddenly started giving me a "Please check your User Authorization" error message when I try to route a board. Ultiboard runs fine, the internal rip-up router seems to be OK, but Ultiroute won't run any more. I can't find any way of dealing with this. The software is Ultiboard 2001 SP2.
Thanks!

Hello,
You should be able to use the same Release Code if your hardware configuration hasn't changed; anyway if for some reason you have issues with this, just use the Online Release Code Generator to get a new code.
Ultiboard/Ultiroute 2001 are products that we don't support anymore, therefore I won't be able to tell you what caused this error.
Did the re-install work?
Are you using a hardware dongle?
Operating system?
Ultiboard version (Personal, Pro)?
Regards,
Fernando D.
National Instruments

What User authorization objects needed for connecting to SAP from xMII?

We eneter a SAP user and password for connecting to SAP from xMII to retrieve the metadata of the incoming IDocs.
When I specify a user with SAP_ALL user profiles, the IDocs are received properly in xMII. If I specify a user with privileges to run only certain transactions, IDocs are not received in xMII.
What user authorization objects are needed for this user to connect to SAP from xMII?
Thanks,
Sara

Sam,
I turned on the SAP System trace for this user and figured out the following auth. objects are required for receiving IDocs in xMII:
C_TCLA_BKA
S_RFC
S_CTS_ADMI
B_ALE_MAST
S_IDOCDEFT
The following auth. object is required for making JCO call to SAP from xMII:
C_AFRU_AWK
Thanks,
Sara

SAPB1 copy user authorizations

Hi Expert,
I am now setting up user authorizations and there are a group of more than 5 users login using the same authorizations and wish to have a shortcut by setting up one user and copy it to another 4 users in the SAME COMPANY database. Is there any SQL SCRIPT sample that can help up?
Thank you and regards,
Joan.

Hi,
pls think of using Group authorizations, rather than copying . pls Refer the Authorizations doc for this.
Regards
CSM Reddy

How to give user authorizations for a Program or an ICF service

Hi,
1)How to give user authorizations for a report program or an ICF service.
2)How to create an user authorization object.
Regards,
Vinay.

check this online help for more info on authorization object creation
http://help.sap.com/saphelp_nw04/helpdata/en/52/67168c439b11d1896f0000e8322d00/frameset.htm
for question no1.
ICF - you either maintain the auth obj relevant at the icf service level itself or you can code call authority object and block access
for abap programs:
you maintain auth object at the tcode or code the call authority object within the program
Regards
Raja

Non-Super User Authorization

Dear expert,
SBO only allow super user to modify the authorization. Is there any solution for non-super user to change the authorization setting.
Regards,
Kit

Kit,
Login as SuperUser,
1. Go to Administration>System Initialization>Authorization-->General Authorization.
2. Select your User -->In the right hand side window select "No user Authorizations" at the end of the window -->Give full authorization.
Let me know if this works.
Thanks
Krishna
Message was edited by:
Krishna Kishor Kammaje

Copying User authorization between databases

Hi All,
Let us say i got two DB. How to copy user authorization between them.
Thanks and Regards,
Vin

Hi Vin.......
You can use Copy express in order to transfer Authorizations from one DB to Other......
Regads,
Rahul

CMS user authorizations

Hi CMS expert
when i export some object in IR in using Transfer to CMS Service I got a error.
it looks like user authorizations,
which users is going to responsible for this task?
Sent on 06. 1. 19 at AM 9:47: Unable to establish connection to CMS server http://cmssrv:50000. Unable to transfer the following transport lists: Export list for BUSINESS_PROCESSES, 1.0 of ka.kk.net (send time = 06. 1. 19. AM 9:47, component = BUSINESS_PROCESSES, 1.0 of ka.kk.net, ID = 15fa9530875311dac55a001018006446) Details: User User is not allowed to do this function is not allowed to do this function Check the availability of the CMS and the user authorizations and send the transport request again if necessary
thanks you & regards;

i solved myself. I forgot to create XIREPUSER, XIDIRUSER
thanks

-2 ERR_USRFAIL: User authorization failed

Hello guys,
First to mention my system:
OS: Windows 2003 server
DB: MaxDB 7_7_06_17
I have one problem to connect through Database Manager to one DB instance that just now I have installed.
What I want to do is to install one MDM server.
The bellow are the steps that were already performed:
-installed Java server with sapinst (this created its database ZJD)
-after this Java server was finished installed I started to create one DB MDM instance using SDBSETUP.exe
-I was able to create this MDM instance successful
And the problem is here: This MDM database instance that was created with defaults users DBA and DBM. When the creation of this MDM was finished I tried to connect with both Database Manager and DBMCLI to MDM instance using these users but I am not able to connect. I get the   "-2 ERR_USRFAIL: User authorization failed" error. Can you tell me which is the reason?
I am sure that I typed the right user and password. I tried to uninstall all and installed again inclusive OS and the same error. I mention that to instance ZJD I am able to connect.
I tried with default users for Maxdb (DBA with pass: SECRET and DBA and DBM with pass: SECRET and DBM) but this doesn't work.
Can you help me to solve this problem?
Best regards,
Florin Radulea

Hello,
Bellow is the output for
sdbregview u2013l command:
package "DB Analyzer":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Base >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            bin/dbanalyzer.exe
IS SUBPACKAGE:        NO
DBANALYZER PATH:      E:/sapdb/programs
package "Server Utilities":
PACKAGE DIRECTORY:           e:/sapdb/programs
SOFTWARE VERSION:            7.7.06.17
PACKAGE VERSION:             0
VALID:                       YES
MODE:                        64 bit
MODIFICATION DATE:           13.04.2010
REQUIRE:                     Base >= 7.7.06.17
FILELIST:                    YES
HAS DISPLAY NAME:            NO
SCRIPT:                      YES
TEST FILE:                   bin/x_server.exe
IS SUBPACKAGE:               NO
INDEPENDENT PROGRAM PATH:    E:/sapdb/programs
package "PCR 7300":
PACKAGE DIRECTORY:        e:/sapdb/programs
SOFTWARE VERSION:         7.3.00.59
PACKAGE VERSION:          0
VALID:                    YES
MODIFICATION DATE:        13.04.2010
REQUIRE:                  Base >= 7.3.00.59
FILELIST:                 YES
HAS DISPLAY NAME:         NO
SCRIPT:                   YES
TEST FILE:                runtime/7300/pgm/libpcr.dll
IS SUBPACKAGE:            NO
PRECOMPILER 7300 PATH:    e:/sapdb/programs
package "PCR 7301":
PACKAGE DIRECTORY:        e:/sapdb/programs
SOFTWARE VERSION:         7.3.01.22
PACKAGE VERSION:          0
VALID:                    YES
MODIFICATION DATE:        13.04.2010
REQUIRE:                  Base
FILELIST:                 YES
HAS DISPLAY NAME:         NO
SCRIPT:                   YES
TEST FILE:                runtime/7301/pgm/libpcr.dll
IS SUBPACKAGE:            NO
PRECOMPILER 7301 PATH:    e:/sapdb/programs
package "PCR 7500":
PACKAGE DIRECTORY:        e:/sapdb/programs
SOFTWARE VERSION:         7.5.00.51
PACKAGE VERSION:          0
VALID:                    YES
MODE:                     64 bit
MODIFICATION DATE:        13.04.2010
REQUIRE:                  Base >= 7.5.00.51
FILELIST:                 YES
HAS DISPLAY NAME:         NO
SCRIPT:                   YES
TEST FILE:                runtime/7500/pgm/pgm64/libpcr.dll
IS SUBPACKAGE:            NO
PRECOMPILER 7500 PATH:    E:/sapdb/programs
package "Webtools":
PACKAGE DIRECTORY:    e:/sapdb/programs/web
SOFTWARE VERSION:     7.6.03.09
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              ODBC >= 7.6.03.09 64
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/webdbm.dll
IS SUBPACKAGE:        NO
WEBTOOLS PATH:        E:/sapdb/programs/web
package "SAP Utilities":
PACKAGE DIRECTORY:           e:/sapdb/programs
SOFTWARE VERSION:            7.7.06.17
PACKAGE VERSION:             0
VALID:                       YES
MODE:                        64 bit
MODIFICATION DATE:           13.04.2010
REQUIRE:                     Base >= 7.7.06.17
FILELIST:                    YES
HAS DISPLAY NAME:            NO
SCRIPT:                      YES
TEST FILE:                   bin/dbmrfc.exe
IS SUBPACKAGE:               NO
:                            E:/sapdb/data
INDEPENDENT PROGRAM PATH:    E:/sapdb/programs
package "Redist Python":
PACKAGE DIRECTORY:     e:/sapdb/programs
SOFTWARE VERSION:      7.7.06.17
PACKAGE VERSION:       0
VALID:                 YES
MODE:                  64 bit
MODIFICATION DATE:     13.04.2010
REQUIRE:               Base
FILELIST:              YES
HAS DISPLAY NAME:      NO
SCRIPT:                YES
TEST FILE:             bin/x_python.exe
IS SUBPACKAGE:         NO
REDIST PYTHON PATH:    E:/sapdb/programs
package "Base":
PACKAGE DIRECTORY:           e:/sapdb/programs
SOFTWARE VERSION:            7.7.06.17
PACKAGE VERSION:             0
VALID:                       YES
MODE:                        64 bit
MODIFICATION DATE:           13.04.2010
REQUIRE:
FILELIST:                    YES
HAS DISPLAY NAME:            NO
SCRIPT:                      YES
TEST FILE:                   pgm/dbmcli.exe
IS SUBPACKAGE:               NO
INDEPENDENT DATA PATH:       E:/sapdb/data
INDEPENDENT PROGRAM PATH:    E:/sapdb/programs
package "JDBC":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.6.06.05
PACKAGE VERSION:      0
VALID:                YES
MODIFICATION DATE:    13.04.2010
REQUIRE:              Base
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            NO
IS SUBPACKAGE:        NO
JAVA DRIVER PATH:     E:/sapdb/programs
package "Messages":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     MSG 0.7732
PACKAGE VERSION:      0
VALID:                YES
MODIFICATION DATE:    13.04.2010
REQUIRE:              Base
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            NO
IS SUBPACKAGE:        NO
MESSAGES PATH:        E:/sapdb/programs
package "ODBC":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Base >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/sdbodbc.dll
IS SUBPACKAGE:        NO
ODBC PATH:            E:/sapdb/programs
package "SQLDBC 77":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Database Connectivity >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/libSQLDBC77.dll
IS SUBPACKAGE:        NO
DBC PATH:             E:/sapdb/programs
package "Database Kernel":
PACKAGE DIRECTORY:    f:/sapdb/mdm/db
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Server Utilities >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/kernel.exe
IS SUBPACKAGE:        NO
DEPENDENT PATH:       f:/sapdb/mdm/db
PACKAGE DIRECTORY:    e:/sapdb/zjd/db
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Server Utilities >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/kernel.exe
IS SUBPACKAGE:        NO
DEPENDENT PATH:       e:/sapdb/zjd/db
package "Loader":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Redist Python >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            bin/loadercli.exe
IS SUBPACKAGE:        NO
LOADER PATH:          E:/sapdb/programs
package "SQLDBC":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Base
FILELIST:             YES
HAS DISPLAY NAME:     YES
SCRIPT:               YES
TEST FILE:            pgm/libSQLDBC.dll
IS SUBPACKAGE:        NO
DBC PATH:             E:/sapdb/programs
package "SQLDBC 76":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.6.06.07
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Database Connectivity >= 7.6.06.07
FILELIST:             YES
HAS DISPLAY NAME:     YES
SCRIPT:               YES
TEST FILE:            pgm/libSQLDBC76.dll
IS SUBPACKAGE:        NO
DBC PATH:             E:/sapdb/programs
package "Fastload API":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              SQLDBC 77
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/libSDBLoader.dll
IS SUBPACKAGE:        NO
FASTLOAD PATH:        E:/sapdb/programs

User Authorizations to trigger Workflow

Hi Experts,
We have a User-Authorisation Issue.
What Roles and Parameters should be assigned to Users who are working on Workflows in SU01.
We cannot provide them SAP-ALL Access.
Regards,
Kanika

SAP_BC_SRV_USER    user for wokflow , communication etc
SAP_BC_BMT_WFM_DEVELOPER     for workflow developer.
if you are working on old releases where authorization profiles are used
there are the primary profiles that you will need to work with
S_WF_USER    - workflow agent
S_WF_PROCORG - workflow developer
Regards ,
kiran.

DIR User Authorization

How to provide user authorization and restrictions for DIR's?

Hi,
Please refer link below
http://wiki.sdn.sap.com/wiki/display/PLM/AuthorizationObjectsin+DMS
It has list of authorization objects for DMS using which you can control access to DIR.
Hope this is useful.
Regards,
Deepak Kori

Regarding Making user authorization matrix

Similar Messages

Maybe you are looking for