Regarding Profile and Authorisations

Hi All,
I have task on role management , i have a profile assigned to like 20 users , but one of the user is asking me to have special authorization on particular Z Table he want to have modify rights.
in order to give the rights to this guy fro that table , i have to make this profile modified so that it will apply for all of them, so i wan to have this rights to this particular user with the same profile , does any body ahs idea how to achieve this??
Or can any one suggest me where can i put this question in the forums??
Thanks in advance
Regards,
Sundar

If you dont want to alter the existing profile.. You can create a new profile and put the require authorizations into it and you assign this new profile only to him.... this way all those who are assigned to the old profile wont get the new authorization and you can give the new authorizations to this person only.....
The right forum for this is ->     Security

Similar Messages

  • Regarding Role And Authorisation

    Hello Experts,
    I have got a request today from my help desk asking for , they are having some problem when they use some SD t.codes, they don't ahve authorization, so basis team is asking me to give the objects they can access and they are allowed to change or delete like this, for exp when they want o modify material  they want are not able to see for some pants.
    how can i achive this, how can i make sure the roles of two peopel are same i mean able to access same objects.? pls help urgent
    thanks
    Sundu

    hi,
    u can do this with the use of Tcode su53.
    when the user uses any tcode n he gets an message tht he is not authorised then u go to tcode su 53 immediately after tht transaction, then an Authorisation object appears in tht screen just give the same to ur basis person n tell him to give authorisation of that object to tht user id with the necessary permissions.
    Regds,
    Laxmikant

  • Profiles , roles and authorisations

    hello all sap greats,
                                i have a problem in understanding about the hierarchy of profiles roles and authorisations
    PROFILES(as it constitutes of roles)
          I
          I
    ROLES(as it contitues of authorisations
          I
          I
    AUTHORISATIONS

    Hi ashish,
    Check this link
    http://help.sap.com/erp2005_ehp_03/helpdata/EN/52/671285439b11d1896f0000e8322d00/content.htm
    Regards
    Ashok

  • Regarding ports and partner profiles in ALE.

    Hi All,
    Please tell me how to transport the partner profiles and ports from Development to Quality systems.
    Please reply asap.

    SALE Area Menu for ALE configurations.It includes transactions for
    Logical System definition and linking it to a client, Transactions for
    RFC Destination and Port Definition Etc.
    SM59 RFC Destination
    Here we specify the login settings for the destination including
    the I.P address or Application Server name and the User name and
    password.The information entered here is used to run Remote Function
    Calls(RFC ) on the destination server .We can create number of types
    of RFC Destinations but 3 types are important .
    R/3 (R/3 to R/3), LS(logical system) and TCP/IP.
    The name of the RFC destination should be same as that of Logical
    System as it helps in creation of automatic partner profiles.
    WE21 Port Definition.
    There are 6 types of ports but only 2 types File and Transactional RFC
    types of ports are important.
    We have to specify the RFC Destination before a port can be created.
    WE20 Partner Profile
    Here we create partner profile for each and every partner from / to which
    the messages will be exchanged.There are 6 types of PF generally only
    profiles of type LS(Logical System) ,KU(Customer) ,LI(Vendor) is used.
    We specify the partner number and partner type and the agent and
    the agent type responsible for handling of errors .
    For every message send to the partner we have a outbound record and for
    evry message coming from the partner we have the inbound record .
    We specify the message in the otbound/inbound records ,double
    clicking will take us to the detailed screen where the IDOC Type ,Port
    and whether the IDCO will be immediatelt processed or collected are
    mentioned.
    Reward points if helpful.
    Thanks
    Naveen khan
    Message was edited by:
            Pattan Naveen

  • The Ultimate Guide to Resolving Profile and Device Manager Issues

    The following article also applies to issues after re-setting the severs' hostname. It also applies to situations where re-setting the Code Signing Certifictateas described by Apple has not resolved the issue.
    Hello,
    I have been plagued with Profile Manager and Device Manager issues since day one.
    I would like to share my experience and to suggest a way how to resolve issues such as device cannot be enrolled or Code Signing Certificate not accepted.
    I shall try to be as brief as possible, just giving an overview of the steps that resolved my issues. The individual steps have been described elsewhere in this forum. For users who have purchased commercial SSL certs the following may not apply.
    In my view many of these issues are caused by missing or faulty certificates. So let us first touch on the very complex matter of certificates.
    Certificates come in many flavours such as CA (Certificate Authority), Code Signing Certificate, S/MIME and Server Identification.
    (Mountain?) Lion Server creates a so-called Intermediate CA certificate (IntermediateCA_hostname_1") and Server Identification Certificate ("hostname") when it installs first. This is critical for the  operation of many server functionalities, including Open Direcory. These certs together with the private/public keys can be found in your Keychain. Profile  and Device Manager may need a Code Signing Certificate.
    The most straightforward way to resolve the Profile Manaher issues is in my view to reset the server created certicates.
    The bad news is that this procedure involves quite a few steps and at least 2 hours of your precious time because it means creating a fresh Direcory Master.
    I hope that I have not forgotten to mention an important step. Readers' comments and addenda are welcome.
    I shall outline a sensible strategy:
    1. Clone your dysfunctional server to an external harddrive (SuperDuper does a reliable job)
    2. Start the server fom the clone and shut down ALL services.
    3. It may be sensible to set up a root user access.
    4. Back-up all user data such as addess book, calendar and other data that you *may* need to set up your server.
    5. Open Workgroup Manager and export all user and workgroup accounts to the drive that you using to re-build your server (it may cause problems if you back-up to an external drive).
    6. Just in case you may also want to back-up the Profile Manager database and erase user profiles:
    In Terminal (this applies to Lion Server - paths may be diferent in Mountain Lion !)
    Backup: sudo pg_dump -U _postgres -c device_management > $HOME/device_management.sql
    Erase database:
    sudo /usr/share/devicemgr/backend/wipeDB.sh
    7. Note your Directory (diradmin) password for later if you want to re-use it.
    8. Open Open Server Admin and demote OD Master to Standalone Directory.
    9. In Terminal delete the old Certificate Authority
    sudo rm -R /var/root/Library/Application\ Support/Certificate\ Authority/
    This step is crucial because else re-building you OD Master will fail.
    9. Go back to Server Admin and promote the Standalone Directory to OD Master. You may want to use the same hostname.
    10. When the OD Master is ready click on Overview and check that the LDAP and Keberos Realm reflect your server's hostname.
    11. Go back to Workgroup Manager and re-import users and groups.
    NOTE: passwords are not being exported. I do not know how to salvage user passwords. (Maybe passwords can be recovered by re-mporting an OD archive - comments welcome! ).
    12. Go to Server App and reset passwords and (not to forget) user homefolder locations, in particular if you want to login from a network account!
    If the home directory has not been defined you cannot login from a network account.
    13. You may now want to restore Profile Manager user profiles in Terminal. Issue the following commands:
    sudo serveradmin stop devicemgr
    sudo serveradmin start postgres
    sudo psql -U _postgres -d device_management -f $HOME/device_management.sql
    sudo serveradmin start devicemgr
    14. You can now switch back on your services, including Profile Manager.
    In Profile Manager you may have to configure Device Management. This creates a correct Code Signng Certicate.
    15. Check the certificate settings in Server App -> Hadware -> Settings-> SSL Certificates.
    16. Check that Apple Push Notifications are set.(you easily check if they are working later)
    17. You may want to re-boot OS Server from the clone now.
    18. After re-boot open Server App and check that your server is running well.
    19. Delete all profiles in System Preferences -> Profiles.
    19. Login to Profile Manager. You should have all users and profiles back. In my experience devices have to be re-enrolled before profiles can be pushed and/or devices be enrolled. You may just as well delete the displayed devices now.
    20. Grab one of your (portable) Macs that you want to enrol and go to (yourhostname)/mydevices and install the server's trust profile. The profile's name  should read "Trust Profile for...) and underneath in green font "Verified".
    21. Re-enrol that device. At this stage keep your finger's crossed and take a deep breath.
    22. If the device has been successfully enrolled you may at last want to test if pushing profiles really works. Login to Profile Manager as admin, select the newly enrolled device. Check that Automatic Push is enabled (-> Profile -> General). Create a harmless management profile such as defining the dock's position on the target machine. (Do not forget to click SAVE at the end - this is easily missed here). If all is well Profile Manager will display an active task (sending) and the dock's position on the target will have changed in a few seconds if you are on a LAN (Note: If sending seems to take forever: check on the server machine and/or on your router that the proper ports are open and that incoming data is not intercepted by Little Snitch or similar software).
    Note: if you intend to enrol an Apple iPhone you may first need to install the proper Apple Configuration software.
    Now enjoy Profile and Device Manager !
    Regards,
    Twistan

    HI
    1. In Action profiles, logon to system and recheck correcion are available in action definition as well in condition configuration and the schedule condition is also maintained. but the display is not coming(i.e in the worklist this action is not getting displayed).
    You can check the schedule condition for the action and match the status values...or try recreating the action with schedule condition again....for customer specific ....copy the standard aciton with ur zname and make a schedule condition and check the same.
    2, In suppport team of incident when i give individual processor it throwing a warning that u r not the processor. but when i give org unit it is working perfectly. Could anyone guide on this.
    You need to have the empolyee role for BP ..goto BP and got here dropdown for ur bp and choose role Employee and then enter ur userid
    also make sure that u have the message processing role
    Hope it clarifies ur doubt and resolve ur prob
    Regards
    Prakhar

  • HT5787 What do I do if my iPod was stolen and I checked my support profile and when I entered the serial # I got a message saying it has been registered to another Apple ID? Is there a way to find out that Apple ID so that we can locate the iPod?

    What should I do if my iPod has been stolen and when I checked my support profile and entered my serial # and I received a message that the serial # had been registered to another Apple ID account? Is there a way to find out the Apple ID that it was registered to? I have already checked find my iPod and it shows my iPod is offline. I have already filed a police report.

    No, sorry, there is no way you can get that information. The police perhaps could, but it would probably require a court order and it's unlikely the police will go to those lengths unless they have reason to believe that this theft was not an isolated instance and hence worth more of their time than the single theft of an iPod.
    Even if they got the ID, it may well just be yours. Apple's registration database often contains such errors; I get the same message for some of my devices when I know I registered them to my Apple ID and the devices are all still right here.
    Regards.

  • How to use the selection profile and status profile for production order?

    Hi expert,
       I want to know how to use the selection profile and status profile for production order. what's the usage for these two selection profile and status profile ?
      Please help me.
      thanks in advance.
      george.shi

    Hi George,
    There are are two types of statuses.One is system status and second one is user status.These statuses will tell us current situation of an order.
    We can't change system statuses.But we can create our own statuses through status profile.With this profile we can control user statuses.
    In this status profile,
    1.We define the sequence in which user statuses can be activated,
    2.We define initial statuses
    3. Allow or prohibit certain business transactions.
    Selection profiles are used to select the objects (say production orders) with different status combinations.We assign status profiles to selection profiles in BS42 T-Code.
    Regards,
    Raja.
    Edited by: Rajarao on Oct 30, 2008 6:21 AM
    Edited by: Rajarao on Oct 30, 2008 6:22 AM

  • What are the Different Profiles and what is the Neeed for profiles?

    Hello Basis Gurus,
              I want to know about the profiles.. I know How to Maintain and I don't Know exactly what is the need pls any one send me detail analysys of the profiles ..i will give more reward points.
    1.what are User profiles and transport profiles
    regards,
    balaram

    A Profile is assigned to a particular user, with that profile rights he can access the screens and menus, and the profiles contain the roles which maintains to do particular activities or actions in screens and menus..
    User Profile: we create roles in pfcg and automatically the profile is created and assignend to the user and comparsion is done, this is user profile, we can maintain this profile
    Transport Profile: Whenever you are setting the transport management system the profile is loaded into the database from operating system, and at the same time the TMSADM user is created, when transports are done tp checks the profile parameter u can check it usr/sap/trans/bin where this profile exists. The system itself maintains this profile
    With Regards
    Bhaskar
    Edited by: bhaskar1818 bhanu on May 28, 2008 10:43 AM

  • Partner Profile and its configuration.

    Hi all,
    I am creating an SD IDoc using EDI and send it between two servers.
    I need to know what is a partner profile and why should we create it.
    what are the steps to be followed in maintaining a partner profile and its configuration.
    Any pointers will be highly apppreciated.
    Thanks in advance,
    Regards,
    Jose
    Edited by: Jose Anthony Reddy on Dec 17, 2007 11:23 PM

    Hi Jose,
    Below is a material you can go through .
    Creating an Outbound Partner Profile
    Here you must enter the data manually. Alternatively, you can also transfer the default values from Customizing.
    If you are not yet on the change screen of your desired partner, choose SAP Menu ® Tools ® IDoc Interface/ALE ® Administration ® Runtime Settings ® Partner Agreement (WE20).
    1. Position the mouse on your partner in the required partner type node. Choose in the Outbound Parameter table.
    Key Fields
    2. You have already determined partner number and partner type in general partner processing. The partner function from the master data defines the addressee, that is, it is used for further classification purposes. If you have selected outbound processing under Message Control (MC), the function must be identical to the corresponding Message Control field. Otherwise, it is optional.
    Partner A (customer 1110) wants to order a material from partner B (vendor 1014). Partner B is of the partner type “LI” (vendor) and must choose the Message Control value “VD” (vendor) as the partner function because orders must always be processed using Message Control.
    3. Specify the business process with the “logical” message, within which the IDoc type is used. The logical message is described by three parameters: The message type is based on EDIFACT message types: For example, a purchase order is of type “ORDERS”. You can further divide the message type with the optional fields message code and message function.
    4. Configure the test indicator if you want to send the message as a test.
    Message, partner and test indicator are the seven key fields of the outbound partner profiles (the client comes in addition to these). Also see the graphic at the end of this section.
    Other Fields
    5. In the Outbound options tab page, you can determine whether IDocs are forwarded immediately to the receiving system. You should ensure that your entries are compatible with the Message Control priorities, if you have chosen outbound processing under Message Control. A list of recommended combinations is provided in the section Outbound Processing Under MC: Procedure.
    6. You have already defined the Recipient port in Port definition.
    7. If a port of type TRFC is used, the Queue Processing field is visible. You can use the indicator to specify whether IDocs are to be sent with qRFC. This sending technique is only possible for recipient SAP systems as of SAP Web AS 6.20.
    You should only set this flag if it is really necessary that the IDocs sent are received in the receiving system in the same sequence as they were sent by the sender system. Queuing can cause posting delays in the receiving system, because an IDoc in the queue cannot be posted. In this case, the following IDocs in the queue cannot be posted until the error is resolved.
    8. If you have set the Queue Processing indicator, the Rule Name field, which you must then also maintain, appears as well. The rule name defines the rules for queue names. You can specify these rules in the transaction qRFC IDoc Queue Name Rules (WE85).
    9. Specify the IDoc type as the Basic type with or without extension. If you want to use a view of your IDoc type (for example, to improve the performance), specify this here.
    The figure below shows the m-to-n relationship between logical messages (business meaning) and IDoc types (technical format). Message 1, for example, is always assigned to one IDoc type, while message 3 is assigned to two IDoc types. IDoc type 2, in turn, is also assigned to 2 logical messages.
    10. The segment release specifies the release from which the segment definitions (not the IDoc type definition) originates. We recommend that you leave this field blank so that the most recent segment definition is used.
    11. You can propose an EDI standard, version and EDI message type for the receiving system in the tab page EDI Standard. Most subsystems, however, should be able to determine these EDI settings themselves (from the logical message).
    12. You can define permitted agents for cases in which exceptions occur. This entry overrides the entry in the general partner profiles. Depending on the message, therefore, the exception can be handled by different agents of the same partner.
    13. You can specify whether syntax errors are to be ignored or are to lead to a processing error (Cancel Processing flag under syntax check in the tab page outbound options). For more information about exception handling and permitted agents, refer to the following section: Exception Handling
    14. If your hardware supports it, create partner and message specific telephony data for outbound IDocs. For more information, see General Partner Profile.
    Graphic: Outbound partner profile fields (general)
    Key fields are shown in gray. The values for partner, message and test indicator (and client) therefore provide a unique ID for the IDoc type in outbound processing.
    Regards,
    Praveen

  • Maximum number of connection profiles and group policies for Cisco ASA

    Hi,
    We have a Cisco ASA 5520 running 8.0(2) that we use only for Remote Access VPN.
    Does anyone know how many connection profiles and group policies that are supported on the box? I have not been able to find this in the manual.
    Thanks in advance for your help!
    Best regards,
    Harry

    There is no limit for connection profiles or group policies that can be configured on ASA. However the numbers do depend upon the memory available in the device as the profiles are stored in memory during execution.

  • How to get user profiles and tasklists in axf

    Hi,
    We have configured the the views in the BPM Worklist ,restart all the managed servers like SOA Server,IPM Server and UCM Server.
    After that navigate to url-http://ipm:16000/imaging/faces/Driver.jspx to configure command driver input parameter settings-like SolutionNamespace     
    CommandNamespace     and provide the username.
    After clicking on Execute request it generates the conversation id but when we clicked on Execute Response button the AXF Task lists and user profile fields are empty.
    can anybody suggest the way to get user profiles and axf tasklist?
    Snehal

    Assign proper groups and/or users to BPM view created.
    In IPM login and logout for that user. It will start appearing.
    Regards,
    Vikrant Korde

  • Assign User Profiles and Web Interface Transactions to Users

    Hi EM Gurus,
    Has anyone worked with not standard scenarios in SCEM?
    They are working well but I can't access them on interface web.
    In selection page (search page after logon), where choose tracking scenarios, only standard scenarios appear although I have assigned both scenarios to the user and made same configuration; Assigned and Defined Web Interface Transactions, Configured Fields for User Profiles, Defined User Profiles, Assigned User Profiles and Web Interface Transactions to Users.
    But only Standard Scenarios appear as choice of tracking scenarios that are displayed to the user as a dropdown box on the selection screen after logging on to the Web interface.
    Has anyone accessed not standard scenarios on interface web??
    Help, please!
    Thanks a lot.
    Rodrigo Freitas

    Hello Rodrigo,
    if you have assigned the scenarios to your user in transaction /SAPTRX/UCUSER you must go to the admin page and reload the profile manager.
    /admin in the URL of the WCL instead /ehsearch.
    Afterwards you should see them also in the drop-down box.
    Best regards,
    Steffen

  • Replicate Response Profile and Service Profile to ECC

    Hi
    In our client environmen we will be charging customer for various priorities of SLAs defined. And some more complex calculation for pricing, again dependent upon these. For this we have to replicate Response Profile and Service Profile to ECC. Which will be used for pricing in service order.
    If you have worked on similar type of scenario, please guide me how this can be achieved.
    Thanks & Regards
    Hits

    Requirement dropped

  • RTP interface, update profile and value in ES31

    Hi All,
    Tcode: ES31
    My requirement is to update the profile and constant value for RTP interface in mass. I tried creating BDC, but while selecting the profile role SY-UCOMM is '%GC 132 22' and losing the BDC controls.
    Even I tried to look for any BAPI available for this, but I didnu2019t found any.
    Please suggest.

    Hi,
    ES31 is for installation change. You can use BAPI_EQUI_CHANGE for this.
    Regards,
    Pranaya

  • How can we transport the partner profiles and Port configurations

    Hi everybody,
    How can we transport the partner profiles and Port configurations. While creating these , system will not ask for Dev class and we cant assign any Transport request number. Then How can we transport these settings?
    Your replies are really apreciable.
    Thanks and Regards,
    Vijay.

    Hi,
    please have a look of the OSS note: 182172
    >>
    The partner profiles are stored in the following tables:
    Table EDPP1: General partner profile
    Table EDP12: Partner profile outbound, additional data NAST
    Table EDP13: Partner profile outbound
    Table EDP21: Partner profile inbound
    Table EDIPHONE: Connection to SAP telephony (optional)
    You can use R3TR TABU to manually set the tables into a Customizing request (as of Release 46, into a SYST-type request).
    <<
    Rgd
    Frédéric

Maybe you are looking for