Report or table to analyze Roles where Profile comparison is required

Hello,
does anybody know a table or report where I can find all roles which have the Status "Profile comparison required" in the system.
Thanks

Hi Sami
Have a look at transaction SUPC, I think that's what you are looking for
Regards
Morten  Nielsen

Similar Messages

  • VIRSA tables for users, roles and profiles sync?

    Hello,
    I am in a customer, implementing CC 5.2. At the first time, we tried CC 5.2 in DEV environment, and when everything was OK, we redirect RFC connectors to QA environment.
    After doing user, roles and profiles sync in DEV and in QA environment too, I have 4.500 user (1.100 from DEV + 3.400 from QA) when I recover all users "*" with "user level - risk analysis" from the "Informer" tab.
    It seems that "users, roles, profiles, sync" works like and "APPEND", but I did a COMPLETE syncronization not an INCREMENTAL.
    If I start an analysis for QA environment, CC works properly and only analyse QA users (3.400). But I would like to clean CC tables (users, roles and profiles) in order to have a clean copy of QA in CC.
    Which VIRSA tables (users, roles and profiles) I need to clean?
    It is necessary to do the same with authorization and text objects? Which would be these tables?
    Thanks in advance,
    Victor

    Hi all,
    SAP GRC Support provides a script which allows you to remove a connector since it does delete all data link to it. Anyway, I would recommend a deep analysis of it and find out if it does what you really want to do.
    Víctor, if what you want to do it is just to remove all user, role and profile master data (stored in tables VIRSA_CC_SYSUSR and VIRSA_CC_GENOBJ) you could upload a text file using data extractor functionality with the delete field set to X. Doing so user, role and profile master data will be removed from CC database.
    In order to use data extraction functionlaity you connector must be of type "File Local".
    Be careful about removing data directly from DB since, as Prem states, you might loose the DB consistency.
    Hope it helps. Best regards,
       Imanol

  • Asigning Reports, specific tables and Url links to the Role

    Hello Gurus,
    could you please tell me the procedure of asigning Reports, specific tables and Url links in the role.actually i know the process of assigning T-Codes to the role but i dont know the procedure for reports and url links and tables...
    i hope u people will respond positively.
    Cheers.......
    srinivas.korva

    Hi Srinivas,
    "i want to add only one particular table not all tables", you can do this using a Custom Transaction Code, the following are the steps to do it:
    1) goto se93, give a unique name, say zxxx
    2)Enter SE16 into the transaction field and select the flag the ‘skip initial screen’ field:
    3)On the lower portion of the screen, enter the following information:
    Name of screen field: DATABROWSE-TABLENAME
    Value: Enter the name of the table you want to browse with
    4)save it.
    5) Now add the transaction zxxx in th role, and assign it to the user.
    With this, when user executes the transaction, he/she will be able to see only the perticular table you added.
    "in PFCG what is the use of Exper mode for profile generation. what is the difference between general profile generation and expert mode profile generation".
    Expert mode has 3 options:
    1) Delete and recreate profile and authorizations---This will completely delete the old profile and add only  the new once.
    2) Edit old status----It will edit the old values
    3) Read old status and merge with new data----This will add the new values aithout actually disturbing the old ones.
    Hope it helps.
    Please award points if it is useful.
    Thanks & Regards,
    Santosh

  • Report: username R/3-his roles-profiles (like SU01).

    Hi,
    I need to report my users (by username R/3) and his roles and profiles - exactly like SU01. I used tables like UST04, UST10S, UST12, AGR_1016 but I didnt get any correct result - never like SU01. Is there any class or  ...?
    Thanks, zd.

    Hello,
    For roles you can use something like this -
      CALL FUNCTION 'PRGN_READ_ACTIVITY_GROUPS'
         EXPORTING
              TIME_DEPENDENT               = ' '
              call_by_su01                 = 'X'
           TABLES
                USERS                        = PRGN_USERS
                ACTIVITY_GROUPS_USERS        = I_ACTIVITY_GROUPS_USERS
           EXCEPTIONS
                NO_ACTIVITY_GROUPS_AVAILABLE = 1
                OTHERS                       = 2.
    For Profiles, you can make a call like this -
    CALL FUNCTION 'SUSR_GET_PROFILES_OF_USER'
         TABLES
              USERS    = USERS
              PROFILES = PROFS
         EXCEPTIONS
              OTHERS   = 1.
    For both the function module you need to pass the username(s) in the first tables parameter.
    Hope that helps...
    Regards,
    Anand Mandalika.

  • BW Roles and profiles Tables

    I would like to download a list of all users and what roles and profiles each has.  I did it once before but now I can't remember the table names.  Can anyone help?

    Hi,
    Roles:
    SAP_BW_DEVELOPER
    Profile:
    SAP_ALL
    S_BW_D____
    S_BW_D____1
    Authorizations are
    S_Rs_Admwb_a
    S_rs_adw_a
    S_rs_exp_a
    S_rs_wb_all
    Links for user roles:
    http://help.sap.com/saphelp_nw2004s/helpdata/en/52/6714b6439b11d1896f0000e8322d00/content.htm
    http://help.sap.com/saphelp_nw2004s/helpdata/en/42/271d24d86211d2961a0000e82de14a/content.htm
    http://help.sap.com/saphelp_nw2004s/helpdata/en/e4/15e48efd6c11d296430000e82de14a/frameset.htm
    http://help.sap.com/saphelp_erp2005vp/helpdata/en/d3/559a4271c80a31e10000000a1550b0/frameset.htm
    http://help.sap.com/saphelp_erp2005vp/helpdata/en/4e/52b74065448431e10000000a1550b0/frameset.htm
    For profiles and authorisations:
    http://help.sap.com/saphelp_nw2004s/helpdata/en/52/67151e439b11d1896f0000e8322d00/frameset.htm
    http://help.sap.com/saphelp_erp2005vp/helpdata/en/20/efcbfed8a511d397110000e82de14a/frameset.htm
    Also chk this link..
    http://www.bwexpertonline.com/archive/Volume_04_(2006)/Issue_10_(Nov_and_Dec)/V4I10A2.cfm?session=
    screenshots..
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/1b439590-0201-0010-ea8e-cba686f21f06
    Hope this helps,
    regards
    CSM reddy

  • RARs' criteria for analyzing roles in ECC backend system?

    Hi All,
    I'm working on setting up a prototype of Access Control 5.3. In RAR I notice the analyzis of roles is not done for all roles.
    I have taken note 1179717 into consideration, and also performed mass user compare. But not all roles are analyzed yet.
    Some of the roles are not tied to a profile, but it seems RAR does not segregate on this.
    Does anyone have a list of criteria RAR uses when looking at what roles to analyze?
    Thanks in advance,
    Leif Nilsson

    Hello Leif,
    You can find SAP Notes only on SAP Service Marketplace
    https://websmp103.sap-ag.de/notes
    You cannot directly compare the numbers of RAR with the roles you want to analyze, without following the below steps completed successfully.
    1- Connect the SAP backend system to Risk Analysis and Remediation and complete all post-install activities.
    2- First you have to run the report RHAUTUPD_NEW in your backend system.
    3- Select all roles, select 'Perform User Master Comparison', but check only "cleanups" from the 'editing types'.
    4- Now execute the report.
    5- When finished re-run a full user, role, profile synchronization for this SAP backend system in Risk Analysis and Remediation.
    There are two types of synchronization, Full and Incremental:
    6- Select Full synchronization
    7- Perform Batch Risk Analysis. This is the core function of RAR.  By performing a batch risk analysis, the security of the users/roles/profiles are compared against the Segregation of Duties rules to identify possible conflicts. It then makes a call to the back-end system to retrieve the authorization assigned to each of these user/roles/profiles.  It then performs the analysis against the rules in the front-end.
    8- Run Management Reports. Running this piece of the job is what ultimately updates the numbers you see on the Management Report and table virsa_cc_prmvl is updated.
    9-  You will get the list of total Number of Violations , the Violation count by Risk and  Violation Count by Permission
    Now you are ready to compare the numbers in the following way, seen below.
    10- Log on to your SAP backend system and use transaction SE11 to identify single roles with profiles from table AGR_1016, but note that roles having multiple profiles appear multiple times in this table.Count the number of distinct roles in table AGR_1016.
    11- Now, only count those distinct roles in AGR_1016 that have also an entry in AGR_DEFINE. You can do this with a small custom report or with Excell.
    12- In your SAP backend System use transaction SE11 to count the number of profile in table USR10 having the flag 'AKTPS' set to 'A'. Each profile appears only once in this table.
    This number should match the number on profiles synchronized in Risk Analysis and Remediation.
    Thanks,
    Mohi

  • How to know BW report there in how many roles

    dear master's,
    In the BW system version 3.5 ,how to know roles by BW report, i have checked in SUIM for cheking the same,i could able to search by T code and object not by report in the role menu
    Edited by: rameshbabu muddana on Feb 12, 2009 1:56 PM
    Edited by: rameshbabu muddana on Feb 12, 2009 1:57 PM

    Hi,
    You can find the roles which all having particular BW report by the table AGR_1251.
    For this you need to know the technical name of the report, you can find the technical name of the report either in Bex analyzer or in RSRT.
    For granting access to any BW report in a role the technical name of the role should be included in the object S_RS_COMP,
    1) go to transaction SE16.
    2) open the table AGR_1251
    3) enter in the field "object with "S_RS_COMP"
    4) and the field "FIELD" with "RSZCOMPID"
    5) Give the BW report (technical name) which you want to search in the field "LOW"
    6) click on execute.
    Caution: in case you are giving complete techincal name of the report, it will show only if the roles are updated under the object S_RS_COMP with complete technical names, however if in the roles you are giving ranges something (as example : BW_FIN_*) you need to give the range in SE16 as well.
    Hope this helps you!
    Regards,
    Ananth

  • Create a Cockpit (Transaction) for Reports and Tables

    Hi Gurus,
    i am very new in ABAP. I want to create a Transaction/view in SAP BW where i can put my favourite Abap reports and tables and execute These directly from the created view/Transaction without se16/se11 or se38 Access and dont know if this is possible and how to do it.
    the reason herefore is that we get deprived in differently time ranges our authorizations for the Standard Transactions.
    I have a list of my tables and programms.
    Thanks for your help.

    we get deprived in differently time ranges our authorizations for the Standard Transactions.
    So you try to bypass security checks put in place by the Basis team
    or could you explain your requirement ?
    Remember (or learn) that creating such transaction, you are able to bypass following authorization checks using SU24 (Identity Management, User and Role Administration of Application Server ABAP, AS ABAP Authorization Concept, From the Programmed Authorization Check to a Role, Editing Authorization Default Data (Development System) / Editing Authorization Default Data (Customer System). )
    Regard,
    Raymond

  • After BI 7.0 Upgrade, Roles and profiles are not visible

    Hi Gurus,
                                  We have issue with the roles and profiles, all our users doesnt see any roles or profiles in Bex Analyzer, under there user access after BI 7.0 Upgrade. 
                                   When I go and check there profile in SU01 and I can see all roles are assigned but not able to see in the Bex Analyzer reporting tool.
                                   Do we need to do any configuration settings after BI 7.0 upgrade to visible roles. This problem with every user.
                                   Your help will be really appreciated.
    Thanks
    Ganesh Reddy.
    Edited by: Ganesh Reddy on Oct 22, 2009 5:19 PM

    Hi Mohan/Vijay,
                            Sorry for little bit late. I have all authorization roles access, and users dont have that access. Difference between our roles is I have SAP_ALL and SAP_NEW.
                            But when they login with old bex analyzer they can see all roles, but not with new bex analyzer.
                            Please some suggest me still I need to run SU25.
    Thanks
    Dayaker Reddy.
    Edited by: Ganesh Reddy on Oct 26, 2009 10:19 AM

  • Generate report for displaying transaction codes role wise

    hi,
    i want to generate a consolidated report in which all transactions codes are displayed role wise.In TR SUIM the report is generated using one role at a time.i want an option where i can fill the require roles and get the consolidated reports.is it possible.please help..
    thanx,

    Hi,
    Your question is not about SOA.
    You should ask you question in an appropriate forum (Security ?) where you will have more chances to get a useful answer.
    Regards,
    Olivier

  • Report or table  for the changed sales orders

    Hi Friends,
      Does anyone know of the standard report with which we can track all the sales orders where the changes have been made in particular date range?
      If not standard report then atleast the table or the structure where the value is stored.
    I know that we can track the orders one by one but I am looking for a list of orders.
    Thanks in advance.
    Regards
    Karan

    Hi,
    Try CDHDR for header and CDPOS for items.
    The only trick here is finding the object.
    Reward points if useful
    Regards,
    Amrish Purohit

  • Report In Table Format in Email

    Dear sir,
    i want to send mail to user in format of report of issues in table Format in Body of mail.
    Actully i want to send mail daily to user with Pending Issues of user.
    HOD allote issue to user with Close target Date .Mail would be fire till tagget date >sysdate .
    There can be Multiple issue with user.
    so i want to create a list of All pending issue in report in table which are not Closed .
    Report should be display with that column
    eg. User 0010 has 3 Pending Issue
    Issue No-----subject-----Create On-----Target Date
    001---------ABC-------27-Mar-2011-------30-Jnn-2011
    002--------BHN-------23-Jun-2011---------06-July-2011
    003--------JHN--------05-Jun-2011---------02-July-2011
    That Report Should be sent to User in mail.
    My Code is
    DECLARE
    l_id number;
    to_add varchar2(1000);
    to_sub_by varchar2(1000);
    from_add varchar2(1000);
    l_body varchar2(4000):=:P33_DESCRIPTION;
    l_sub varchar2(1000):=:P33_SUBJECT;
    I_case varchar2(10):=:P33_CASE_ID;
    I_isue_dte date:=:P33_SUBMITTED_ON;
    l_regd    varchar(100);
    CURSOR C1 IS SELECT EMAIL_ID,(SELECT EMAIL_ID FROM USER_MAS WHERE USER_ID =:P33_SUBMITTED_BY_ID) AS D FROM USER_MAS WHERE USER_GR_ID=:P33_ASSIGNED_TO_GROUP_ID AND USER_ID NOT IN(:APP_USER);
    BEGIN
    if :P33_ASSIGNED_TO_GROUP_ID is not null then
    open C1;
    LOOP
    FETCH C1 INTO to_add,to_sub_by;
    EXIT WHEN C1%NOTFOUND;
    select email_id,user_name into from_add,l_regd from user_mas where user_id=:app_user;
    l_id:=APEX_MAIL.SEND(
            p_to        => to_add, -- change to your email address
            P_cc        => to_sub_by,
            p_from      => from_add,
            p_body      => 'Issue Information'||''||chr(13)||chr(10)||chr(13)||chr(10)||
                           'www.farhorizonindia.net:7777/crm'||''||chr(13)||
                           'Issue Title'||':'||l_sub||CHR(13)||chr(10)||
                           'Issue Number'||':'||I_case||CHR(13)||
                           'Issue Open Date'||':'||I_isue_dte||''||chr(13)||chr(10)||CHR(13)||chr(10)||
                           'Most Recent Comment'||':'||''||chr(13)||chr(10)||
                           l_body||chr(13)||chr(10)||''||CHR(13)||chr(10)||'Regards'||chr(13)||chr(10)||''||l_regd||CHR(13)||chr(10)||CHR(13)||chr(10)||'Please do not reply to this email.If you wish to update the call.please login to the issue Management.',
      P_subj      => I_case ||' Issue '||l_sub);
    end loop;
    close C1;
    end if;
    COMMIT;
    apex_mail.push_queue(
    P_SMTP_HOSTNAME => '102.111.0.9',
    P_SMTP_PORTNO => 25);
    commit;
    END;How can i create that format in Body Of sending Email.
    Thanks
    Vedant
    Edited by: Vedant on Jun 30, 2011 3:44 AM
    Edited by: Vedant on Jul 5, 2011 9:17 PM

    Look at using an interactive reports and subscription routine..: http://st-curriculum.oracle.com/obe/db/apex/r40/apexirr/apexirrdev/apexirrdev_ll.htm
    Death called while you were out, so I gave him your cell number.
    Thank you,
    Tony Miller
    Webster, TX

  • Report to view all the Roles and Transactions assinged to a particular user

    Hi,
    I need to develop a report to view all the Roles and Transactions assinged to a particular user along with the Authorization values. So, if provide the Username, the report should be able to give Roles, Transaction Codes and the fields and thier authorization values for that TCodes..
    Regards,
    Sreenivas Raju

    Try this FM once - SUSR_USERS_LIST_ALV . It provides a list with Roles, Profiles, and also a detail button to check the authorization values etc.
    Also try this FM - SUSR_USER_DISPLAY_WITH_AUTHS, SUSR_USER_AUTH_FOR_OBJ_GET , SUSR_USER_DISPLAY_WITH_S_TCODE

  • Is file created by report CRMD_UI_ROLE_PREPARE mandatory in CRM Role Design

    Hi All,
    The CRM 7security guide mentions usage of file created by report CRMD_UI_ROLE_PREPARE for Designing role. Can anyone suggest, whether it is Manadatory to perform this report.
    I have designed Role, WITHOUT using this report.

    Hi Raghu, your explaination is not clear to me.
    my understanding-The report produces the file from a Business Role, which contains Services/BSPs,etc.... This file needs to be imported into Menu Tab, by option 'Import From File'. So, when these Services/BSPs are added into Menu tab, they will auto-populate their SU24 entries(authorization objects) in Authorization Tab(like in Transaction Codes)
    Could you be clear on "report CRMD_UI_ROLE_PREPARE will help you with generating the CONTENT automatically", as mentioned by you. Which CONTENT: Entries(Services,etc...) in Menu Tab OR their SU24 auth. Objects.
    Also, "you can import the file from PFCG profile menu" is not clear. Which MENU are you referring here? The MENU tab which contains Services/BSPs,Transaction Codesetc.. OR the MENU bar inside Authorization Tab
    Could you suggest on this, as i this is what i am desparately looking for

  • ASSIGNING REPORTS AND URL LINKS IN ROLE

    Hello Gurus,
    could you please tell me the procedure of asigning Reports, specific tables and Url links in the role.actually i know the process of assigning T-Codes to the role but i dont know the procedure for reports and url links and tables...
    i hope u people will respond positively.
    Cheers.......
    srinivas.korva
    Message was edited by:
            srinivas.korva korva

    Hi Nuno,
    you can achieve this by changing the XSL file.
    Check out this thread for more infos: XML form display in same browser window
    Best regards,
    Robert

Maybe you are looking for