Regarding Technofunctional Role

I have 3 years of experience in SAP abap and have done my sap certification in abap .
I have done my MBA In finance and i am looking out for a role in FI or CO
do i need to undergo an FI or CO training or JUST SAP FI or CO certification shall be enough to get into that domain
PLEASE
Regards
Darshan

Hi
You can get yourself invove in FUNCTIONAL DESIGN in your project which are related to FI or CO.
Any functional documentation from SAP which is been used by FI or CO functional consultant will be sufficient enough to groom yourself as a functional consultant.
Obviously, you need to go through the customising settings required in SAP settings through these SAP books.
Hope this will help.
Regards

Similar Messages

Issue regarding Business Role assignment

Hi All,
1.
I have a user Agent1 which is assigned to position POS_IC_AGENT in my org structure.
In the infotype Business Role I have assigned IC_AGENT (standard) business role.
IC_AGENT has PFCG role SAP_CRM_UIU_IC_AGENT assigned to it.
But, when I run the application (for my user Agent1), only telephony buttons are visible on top, navigation bar and work area is empty (nothing is visible there)
2.
Now, when I open my user Agent1 in SU01 and assign PFCG role SAP_CRM_UIU_IC_AGENT.
Now when I run the application everything is visible (telephony, navigation bar and workarea).
Why is it not visible in first case?
I think it should work without assigning Role in SU01.. I mean it should have taken settings from Org. structure
Regards,
Ashish

Hi Ashish,
As far as work center page context is concerned , its decided by the navigation bar profile and business role customizations ( we add work center home and several related stuff etc in navigation bar profile and make them activate/deactivate, visible/invisible through business role customizing ) .
PFCG role has nothing to do with what you see on the Work Center...it decides whether you can see or not..meaning whether you have authorization for disply of a business object and its related subobjects.
PFCG role basically determines the authorization objects that will be grated to the particular business role ( to which this PFCG role is linked ) PFCG is about CREATE/CHANGE/DELETE authorizations.
In first case, its business role linked authorizations. You dont see the work centers may be because USER has not granted the DISPLAY authorization for the business Object related to BP( i.e Account ) , or BO related to account search (BUPASEARCH ) as the IC agent home basically has Account identification home , or account search home...which overrides the PFCG authorizations attached to the business role.
Remember, individual object authorizations set for a user using transaction PFCG will have more priority over the Business role linked authorizations as 1 business role can be assigned to many users however if one user is not grated to see BP related data, this will still remain enforced even though the business Role PFCG is granting him to see...There is a difference between user specific authorizations and Business Role specific authorization...
In second case,its user linked Authorizations. When you add the PFCG role in SU01, this is being the User Specific Authorizations which will always have the priority and thus granting the display.
This is my basic understanding. I am 100% sure that PFCG role only controls the DISPLAY/CREATE/CHANGE related authorizations and lots more in context of authorizations. However what to include & show is decided by Navigation Profile and Business Role customizations.
If everything is intact in navigation bar profile and business role customizations, and still you dont see anything on the work center, then i am 100% sure that its related to User Authorizations
Refer pg 56 in CR580, it will clear your doubt.
Thanks & regards,
Suchita

Regarding displaying role description in alv

Hi All,
Here i got struck up with an issue. I want to display role name and its description. But my problem is description is having more than a single line. I need to concatenate all the lines, But I don't know what to do here exactly. I need to display the output in LAV format. And one more thing the description length is more than 255 characters also in that case how to handle.
Please suggest me a solution for this.
Regards
G.S.Naidu

Hello Naidu,
Plz search in sdn for handle more than 255 char in ALV,
Regards.

Regarding BI Role Import in CMC

Hi all,
I have a problem while importing BI role in BOBJ. I am configuring BI with bobj using test user. After creating Entitled system in bobj, when I click on role import option it display the following error NO_AUTH . What could be a problem. My thought is the user does not have a proper user rights. What are the user authorization need to be assign for a user. Any input will be appreciated.
Thanks and Regards,
Senthil Kumar K

Hi,
the user entered there with password needs a well defined set of authorizations on the SAP system. You can find the details in the installation guide for the SAP Integration Kit.
Ingo

NWA 7.1 - User Administration with regards to Roles/Groups

Hello,
Environment = NWA 7.1 , Java Stack Only , No Central User Administration
Situation      = One group of individuals responsible for developing and maintaining Java Roles & Groups
                      (Permissions). Another group of individuals responsible for maintaining Users and
                      allocating the above Roles & Groups to the Users.
In accordance with various documentation (ie. http://help.sap.com/saphelp_nwpi711/helpdata/en/4a/e06f429c789041e10000000a1550b0/frameset.htm) I have set up a Role which includes the actions: UME.Manage_Roles, UME.Manage_Groups, UME.Manage_Users, UME.Manage_All_User_Passwords & UME.Read_All. This Role is intended for the second group of individual mentioned above.
The problem is however that with the mentioned actions they can not only allocate an user to a Role or Group but also delete the Role/Group from the system. Without the above actions in the Role it is not possible to assign Users to a Role/Group.
This leads me to the question if it is possible to split these two various areas of responibility or does NWA 7.1 view both activities as residing in only group (documentation to this effect would be helpful). If not, which actions will ensure that only Users can be administered but the rights to the system (Roles/Groups) can not be tampered with.
Many thanks in advance,
Jay

Hi Jay,
UME.Manage_All Provides permissions required by an overall user administrator.
These include:
u2022 Administration of users belonging to any company and
possibility of assigning users to companies
(In a multitenant portal, even if a tenant user is assigned this
action, he or she will still only have access to users, groups,
and roles in his or her tenant.)
u2022 Group management
u2022 Role assignment
u2022 User mapping
u2022 Import and export of user data
u2022 Manual replication of user data
To set up delegated user administration, overall user administrators
must belong to a role to which the UME.Manage_All action is
assigned.
In portal installations, any role that includes the UME.Manage_All
action automatically has Role Assigner permissions on all portal roles in the portal installation.
Try this.
Regards,
Gowrinadh

Regarding Client Role change in DEV system.

Hi All,
I had some requirement from SapHR they want to do some Holiday calender changes in Sap Level.
and we have only Test Role client in our Dev System. They want me to change the Client Role from Test to Customizing Client.
Kindly let me know if Client Role is changes from TEST to CUSTOMIZING. is there any inconsistany in TMS.
Thanks,
Abdul

Hi,
Run BDLS to change the source system assn. Then check to see if all your transfer structures are active and also your source system is now the correct one. Easiest way is to goto RSA7 on the src system and see where the system is pointing to.
Cheers,
Kedar

Regarding user role!!!!!!!!!!

One of the user here wants to know , For one particular vendor the user wants access only for herself. All other users shoudn't have access to post invoices or do any transactions to this vendor. My question is ,Is it possible to assign this role only to this user. If yes, please tell me how to do it.

Hi
Create the Vendor in Seperate Account Group and ask the Basis person give authorsation to Particular user role .
Ravi

CRM 7.0 How to create Business role & generate

Hi Team,
Can you please let me know some breif idea about CRM 7.0 security guide.
How to created Business role is this part of functional activity?
Whats the role of Technical colleagues BASIS guys in CRM 7.0 security .
Please help me to get some document regarding business role creation , generation , assignment & authorization checks in CRM 7.0.
Thanks & Regards,
Vyash Mishra

Hello Viyash
I will add the most important information for generation of business roles and assignment of authorizations to users.
You must first create the PFCG roles. PFCG role is built based on the Business Role.
Please see documentation in : SPRO
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Authorization Role
Then the PFCG role can be assigned to the business role in
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Business role
Finally you must assign business roles to Organizations or positions in organizations in
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Organizational Assignment
The users that are assigned to such organizations / positions will be therefore linked to the business role.
With the previous steps the users will have the authorizations that are assigned to the PFCG profile that is linked to their business role.
Business roles are the main way to configure authorizations for users in CRM but you have more options that give you flexibility.Each business role has assigned one PFCG role, but the relationship between business role and PFCG role is not strict. You can even assign a dummy PFCG role to a certain business role in business role customizing and then go to transaction PFCG and assign other PFCG role(s) to the users that are assigned to that business role.
I would say that the previous tasks must be performed by the basis team but in cooperation with the functional team
Best Regards
Luis Rivera

Not able to work with customized Java roles which were edited in ABAP stack

Hello All,
I am trying to copy standard roles into customized roles (i.e. Z roles) using PFCG in XI system. All ABAP based roles are working fine, but all JAVA based roles are not working. I generated profiles as well. And I check all the authorization objects in both standard and customized roles. Everything look same but customized roles are not working.
And when I check the logs on JAVA stack I found the error which says " User XXXXXXXXXX IP address HTTP request processing failed. HTTP error [403] will be returned. The error is [You are not authorized to view the requested resource.No details available]."
I thought there might be any Jco RFC connections missing between the stacks and I tried to check in Visual Admin, but I was not able to find much info regarding these roles.
Am I missing anything or is there any other way for these roles to make customized roles.
And can any one tell me how to run a trace for JAVA stack activitites as we do in ABAP using ST01. Any help will be rewarded. Thanks in advance.
Regards,
Farooq.

Java roles work with influence of permissions in Application Server which we call actions in UME. As you are aware in PI user master record will be in ABAP stack. So the roles in ABAP stack will be having only RFC connections to JAVA stack for the specific JAVA based role. So you need to edit the permission on Java App Server. For that you need to log on to server through visual admin and then go to services and you will find the standard groups assigned to actions. But I dont remember that under which service you will find them
Under that service you will find some 200 actions. And you have to add the name of the custom created JAVA roles on ABAP to all those actions where you find the standard roles. And its a very very lengthy procedure. So SAP advice to go for customized ABAP roles and Standard JAVA roles.
Hope this answer clears your query.
Farooq.

SCCM 2012 SP1 - SUP role removal or reinstall issue resolution

Hello all,
I just want to share a fix regarding SUP removal (re-install) issue.
I think I found a bug regarding SUP role removal/re-install.
When I try to re-install secondary SUP on a site system, when I remove SUP via AdminUI – Administration – Site - Site Systems, it gets removed from the list but I get the following errors, which makes (re-)installation fail.
Severity
Type        Site code
Date / Time
System     Component
Message ID
Description
Information
Milestone PS1
4/12/2013 10:28:09 PM
SMS02SS401.ICBCAGENT.NET
SMS_WSUS_CONTROL_MANAGER
1021        Site Component Manager detected that this component should be deinstalled from this site system. Site Component Manager will attempt to deinstall the component every 60 minutes. Site Component
Manager will abort the deinstallation if it fails to succeed after 1440 minutes.
Information
Audit        PS1
4/12/2013 10:27:58 PM
sms02ss401.icbcagent.net
Microsoft.ConfigurationManagement.exe 30038
User "ICBC\ll1v3" deleted the role of the Windows NT Server "\\SMS02SS401.ICBCAGENT.NET" as a Software update point in the site control file at site PS1.
Error
Milestone PS1
4/12/2013 10:15:45 PM
SMS02SS401.ICBCAGENT.NET
SMS_WSUS_CONTROL_MANAGER
1020
Site Component Manager failed to reinstall this component on this site system.
Solution: Review the previous status messages to determine the exact reason for the failure. Site Component Manager will automatically retry the reinstallation in 60 minutes. To force Site Component Manager to immediately retry the reinstallation, stop
and restart Site Component Manager using the Configuration Manager Service Manager.
Error
Detail       PS1
4/12/2013 10:15:45 PM
SMS02SS401.ICBCAGENT.NET
SMS_WSUS_CONTROL_MANAGER
580
Could not delete the registry key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\SMS_EXECUTIVE\Threads\SMS_WSUS_CONTROL_MANAGER"
on computer SMS02SS401.ICBCAGENT.NET. The operating system reported error 997: Overlapped I/O operation is in progress.
Information
Milestone PS1
4/12/2013 10:15:40 PM
SMS02SS401.ICBCAGENT.NET
SMS_WSUS_CONTROL_MANAGER
1018        Site Component Manager is reinstalling this component on this site system.
Error
Detail       PS1
4/12/2013 9:14:39 PM
SMS02SS401.ICBCAGENT.NET
SMS_WSUS_CONTROL_MANAGER
580
Could not delete the registry key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\SMS_EXECUTIVE\Threads\SMS_WSUS_CONTROL_MANAGER" on computer SMS02SS401.ICBCAGENT.NET. The operating system reported error 997: Overlapped
I/O operation is in progress.
In fact, the registry is under
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Components\SMS_EXECUTIVE\Threads\SMS_WSUS_CONTROL_MANAGER
When I trigger uninstall via AdminUI, it failed to remove, thus it think that it is already there when I try to re-install it.
The fix was to manually remove HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Components\SMS_EXECUTIVE\Threads\
SMS_WSUS_CONTROL_MANAGER registry key then re-try.
Thanks,
Young-
YPae

Yes!!! this worked for me. I have SCCM set up with a number of untrusted forests with a firewall in between my SCCM servers and the untrusted forests. The firewall went down and half of my site servers in the untrusted forests were giving
the "operating system reported error 997: Overlapped I/O operation is in progress" on a number of their components. Finally found this, deleted the reg keys under "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Components\SMS_EXECUTIVE\Threads"
and that allows SCCM to reinstall.

Defaults Roles Doubt - GRC 10.0

Hi All,
I have a query regarding default roles in GRC. In the role search screen when the user selects a role, there will be a defaults roles column which shows all existing defaults roles for different systems maintained in GRC.
Actually our client requirement is that when a user selects role for ECC only defaults roles defined for ECC should show up. But currently default roles column shows all defaults roles defined in GRC.
Is it possible to achieve our scenario? Anyone came across same issue?
Regards,
Sai.

Dear Sai,
the behaviour is standard as you have defined parameter 2011 as ROLE. To change the output you might need help of an ABAPler.
Alternatively you can change parameter 2012 to REQUEST and then the requestor won't see the default roles as they are added to the request after submission. Only the approvers can see the added default roles.
Best regards,
Alessandro

Role for Access to Web Service Navigator in PI 7.31

Hi experts,
Can you please help in regarding which role to provide for web service navigator access in pi 7.31
Regards,
Hemantha

Hi Hemanth,
Please refer below link:
https://help.sap.com/saphelp_nw73/helpdata/de/30/2b552f20da49e291c9d26b675f9019/frameset.htm
Regards,
Akshay

Role Of IV_BLOCK_SIZE in MATERIAL_UPDATE_LOGISTIC_DATA

Hello ,
I am new to ABAP, so any one can help me regarding the role of parameter IV_BLOCK_SIZE in MATERIAL_UPDATE_LOGISTIC_DATA
my requirement is i am updating reorder point of many records in MARC table, but it is updating only last record. I have given IV_BLOCK_SIZE = 2 .
Thanks....

Hi Nandish
A simple look into the code will tell you the use of this FM. It is bascially for processing the records in groups/chunks. Do not pass anything in it and try to use default value.
Nabheet

Replicating authorization roles via HR replication from ECC 6 to SRM 5.0

Hi,
I'm interested in knowing whether anyone has used the distribution model to copy roles (AG objects) between ECC 6 and SRM 5.0.
Someone said that it's possible so I would like to validate that statement as I don't know whether it is possible and practical.
If you have any knowledge or experience could you please share it?
Regards,
Jerry

Hello Yann,
I was told that it can be done but I don't know enough about the HR replication process to acknowledge or challenge, hence the question.
Are you implying that it's not possible or simply that it's not done?
I had an earlier post regarding assigning roles to positions in SRM Replicating authorization roles via HR replication from ECC 6 to SRM 5.0 that you replied to but never replied to my subsequent question. It can be done because one of my other clients is doing it. We're however unable to get it work at my current client's site. Do you have any experience with this subject?
Regards,
Jerry

A question about CA Role Seperation

Hello
Can someone please help me with the following question regarding CA Role Separation (thanks in advance)
I understand by default the 'Local Administrator' or 'Local Administrators Group' have certain high privileges on the CA itself.
I understand enabling 'Role Separation' stops a security principle (e.g. user) being a member of more than one of the pre-defined CA Role Based Administration roles. For example if Role Separation is enabled you cannot have both Audit
and Backup rights.
If the above is correct, when you enable Role Separation does this also take away the default privileges the Local Administrator (and members of the Local Administrators Group) have on the CA?
Or
Does Role Separation simple stop the Local Administrator (or members of the Local Administrators Group) being assigned more than one of the CA Role Based roles (as above) but thereby still allow high privileges to the CA in any event.
The reason I ask is by default I believe Domain Admins group is automatically made a members of the Local Administrators Group on Domain Joined computers (and thereby the CA Server).
I do not want Domain Admins or Enterprise Admins having Rights to the CA (e.g. be able to perform CA tasks).
Therefore do I need to perform 'extra' tasks over and about enabling Role Separation (e.g. restricting membership of the local administrators group) to achieve the security I want?
Thanks All
AAnotherUser__
AAnotherUser__

Hi,
Based on your description, you don’t want Domain Admins or Enterprise Admins having rights to the CA, which cannot be achieved.
That’s because members of local administrators group on a CA can disable role separation. Even if we remove the Domain Admins group from the local administrators group, Domain Admins still can add them back through Restricted Groups group policy.
Here are some references below for you:
Role Separation
http://technet.microsoft.com/en-us/library/cc773161(v=WS.10).aspx
Restricted Groups Policy Settings
http://technet.microsoft.com/en-us/library/cc756802(v=WS.10).aspx
Best Regards,
Amy

Regarding Technofunctional Role

Similar Messages

Maybe you are looking for