Report or table to analyze Roles where Profile comparison is required
Hello,
does anybody know a table or report where I can find all roles which have the Status "Profile comparison required" in the system.
Thanks
Hi Sami
Have a look at transaction SUPC, I think that's what you are looking for
Regards
Morten Nielsen
Similar Messages
-
VIRSA tables for users, roles and profiles sync?
Hello,
I am in a customer, implementing CC 5.2. At the first time, we tried CC 5.2 in DEV environment, and when everything was OK, we redirect RFC connectors to QA environment.
After doing user, roles and profiles sync in DEV and in QA environment too, I have 4.500 user (1.100 from DEV + 3.400 from QA) when I recover all users "*" with "user level - risk analysis" from the "Informer" tab.
It seems that "users, roles, profiles, sync" works like and "APPEND", but I did a COMPLETE syncronization not an INCREMENTAL.
If I start an analysis for QA environment, CC works properly and only analyse QA users (3.400). But I would like to clean CC tables (users, roles and profiles) in order to have a clean copy of QA in CC.
Which VIRSA tables (users, roles and profiles) I need to clean?
It is necessary to do the same with authorization and text objects? Which would be these tables?
Thanks in advance,
VictorHi all,
SAP GRC Support provides a script which allows you to remove a connector since it does delete all data link to it. Anyway, I would recommend a deep analysis of it and find out if it does what you really want to do.
Víctor, if what you want to do it is just to remove all user, role and profile master data (stored in tables VIRSA_CC_SYSUSR and VIRSA_CC_GENOBJ) you could upload a text file using data extractor functionality with the delete field set to X. Doing so user, role and profile master data will be removed from CC database.
In order to use data extraction functionlaity you connector must be of type "File Local".
Be careful about removing data directly from DB since, as Prem states, you might loose the DB consistency.
Hope it helps. Best regards,
Imanol -
Asigning Reports, specific tables and Url links to the Role
Hello Gurus,
could you please tell me the procedure of asigning Reports, specific tables and Url links in the role.actually i know the process of assigning T-Codes to the role but i dont know the procedure for reports and url links and tables...
i hope u people will respond positively.
Cheers.......
srinivas.korvaHi Srinivas,
"i want to add only one particular table not all tables", you can do this using a Custom Transaction Code, the following are the steps to do it:
1) goto se93, give a unique name, say zxxx
2)Enter SE16 into the transaction field and select the flag the skip initial screen field:
3)On the lower portion of the screen, enter the following information:
Name of screen field: DATABROWSE-TABLENAME
Value: Enter the name of the table you want to browse with
4)save it.
5) Now add the transaction zxxx in th role, and assign it to the user.
With this, when user executes the transaction, he/she will be able to see only the perticular table you added.
"in PFCG what is the use of Exper mode for profile generation. what is the difference between general profile generation and expert mode profile generation".
Expert mode has 3 options:
1) Delete and recreate profile and authorizations---This will completely delete the old profile and add only the new once.
2) Edit old status----It will edit the old values
3) Read old status and merge with new data----This will add the new values aithout actually disturbing the old ones.
Hope it helps.
Please award points if it is useful.
Thanks & Regards,
Santosh -
Report: username R/3-his roles-profiles (like SU01).
Hi,
I need to report my users (by username R/3) and his roles and profiles - exactly like SU01. I used tables like UST04, UST10S, UST12, AGR_1016 but I didnt get any correct result - never like SU01. Is there any class or ...?
Thanks, zd.Hello,
For roles you can use something like this -
CALL FUNCTION 'PRGN_READ_ACTIVITY_GROUPS'
EXPORTING
TIME_DEPENDENT = ' '
call_by_su01 = 'X'
TABLES
USERS = PRGN_USERS
ACTIVITY_GROUPS_USERS = I_ACTIVITY_GROUPS_USERS
EXCEPTIONS
NO_ACTIVITY_GROUPS_AVAILABLE = 1
OTHERS = 2.
For Profiles, you can make a call like this -
CALL FUNCTION 'SUSR_GET_PROFILES_OF_USER'
TABLES
USERS = USERS
PROFILES = PROFS
EXCEPTIONS
OTHERS = 1.
For both the function module you need to pass the username(s) in the first tables parameter.
Hope that helps...
Regards,
Anand Mandalika. -
I would like to download a list of all users and what roles and profiles each has. I did it once before but now I can't remember the table names. Can anyone help?
Hi,
Roles:
SAP_BW_DEVELOPER
Profile:
SAP_ALL
S_BW_D____
S_BW_D____1
Authorizations are
S_Rs_Admwb_a
S_rs_adw_a
S_rs_exp_a
S_rs_wb_all
Links for user roles:
http://help.sap.com/saphelp_nw2004s/helpdata/en/52/6714b6439b11d1896f0000e8322d00/content.htm
http://help.sap.com/saphelp_nw2004s/helpdata/en/42/271d24d86211d2961a0000e82de14a/content.htm
http://help.sap.com/saphelp_nw2004s/helpdata/en/e4/15e48efd6c11d296430000e82de14a/frameset.htm
http://help.sap.com/saphelp_erp2005vp/helpdata/en/d3/559a4271c80a31e10000000a1550b0/frameset.htm
http://help.sap.com/saphelp_erp2005vp/helpdata/en/4e/52b74065448431e10000000a1550b0/frameset.htm
For profiles and authorisations:
http://help.sap.com/saphelp_nw2004s/helpdata/en/52/67151e439b11d1896f0000e8322d00/frameset.htm
http://help.sap.com/saphelp_erp2005vp/helpdata/en/20/efcbfed8a511d397110000e82de14a/frameset.htm
Also chk this link..
http://www.bwexpertonline.com/archive/Volume_04_(2006)/Issue_10_(Nov_and_Dec)/V4I10A2.cfm?session=
screenshots..
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/1b439590-0201-0010-ea8e-cba686f21f06
Hope this helps,
regards
CSM reddy -
RARs' criteria for analyzing roles in ECC backend system?
Hi All,
I'm working on setting up a prototype of Access Control 5.3. In RAR I notice the analyzis of roles is not done for all roles.
I have taken note 1179717 into consideration, and also performed mass user compare. But not all roles are analyzed yet.
Some of the roles are not tied to a profile, but it seems RAR does not segregate on this.
Does anyone have a list of criteria RAR uses when looking at what roles to analyze?
Thanks in advance,
Leif NilssonHello Leif,
You can find SAP Notes only on SAP Service Marketplace
https://websmp103.sap-ag.de/notes
You cannot directly compare the numbers of RAR with the roles you want to analyze, without following the below steps completed successfully.
1- Connect the SAP backend system to Risk Analysis and Remediation and complete all post-install activities.
2- First you have to run the report RHAUTUPD_NEW in your backend system.
3- Select all roles, select 'Perform User Master Comparison', but check only "cleanups" from the 'editing types'.
4- Now execute the report.
5- When finished re-run a full user, role, profile synchronization for this SAP backend system in Risk Analysis and Remediation.
There are two types of synchronization, Full and Incremental:
6- Select Full synchronization
7- Perform Batch Risk Analysis. This is the core function of RAR. By performing a batch risk analysis, the security of the users/roles/profiles are compared against the Segregation of Duties rules to identify possible conflicts. It then makes a call to the back-end system to retrieve the authorization assigned to each of these user/roles/profiles. It then performs the analysis against the rules in the front-end.
8- Run Management Reports. Running this piece of the job is what ultimately updates the numbers you see on the Management Report and table virsa_cc_prmvl is updated.
9- You will get the list of total Number of Violations , the Violation count by Risk and Violation Count by Permission
Now you are ready to compare the numbers in the following way, seen below.
10- Log on to your SAP backend system and use transaction SE11 to identify single roles with profiles from table AGR_1016, but note that roles having multiple profiles appear multiple times in this table.Count the number of distinct roles in table AGR_1016.
11- Now, only count those distinct roles in AGR_1016 that have also an entry in AGR_DEFINE. You can do this with a small custom report or with Excell.
12- In your SAP backend System use transaction SE11 to count the number of profile in table USR10 having the flag 'AKTPS' set to 'A'. Each profile appears only once in this table.
This number should match the number on profiles synchronized in Risk Analysis and Remediation.
Thanks,
Mohi -
How to know BW report there in how many roles
dear master's,
In the BW system version 3.5 ,how to know roles by BW report, i have checked in SUIM for cheking the same,i could able to search by T code and object not by report in the role menu
Edited by: rameshbabu muddana on Feb 12, 2009 1:56 PM
Edited by: rameshbabu muddana on Feb 12, 2009 1:57 PMHi,
You can find the roles which all having particular BW report by the table AGR_1251.
For this you need to know the technical name of the report, you can find the technical name of the report either in Bex analyzer or in RSRT.
For granting access to any BW report in a role the technical name of the role should be included in the object S_RS_COMP,
1) go to transaction SE16.
2) open the table AGR_1251
3) enter in the field "object with "S_RS_COMP"
4) and the field "FIELD" with "RSZCOMPID"
5) Give the BW report (technical name) which you want to search in the field "LOW"
6) click on execute.
Caution: in case you are giving complete techincal name of the report, it will show only if the roles are updated under the object S_RS_COMP with complete technical names, however if in the roles you are giving ranges something (as example : BW_FIN_*) you need to give the range in SE16 as well.
Hope this helps you!
Regards,
Ananth -
Create a Cockpit (Transaction) for Reports and Tables
Hi Gurus,
i am very new in ABAP. I want to create a Transaction/view in SAP BW where i can put my favourite Abap reports and tables and execute These directly from the created view/Transaction without se16/se11 or se38 Access and dont know if this is possible and how to do it.
the reason herefore is that we get deprived in differently time ranges our authorizations for the Standard Transactions.
I have a list of my tables and programms.
Thanks for your help.we get deprived in differently time ranges our authorizations for the Standard Transactions.
So you try to bypass security checks put in place by the Basis team
or could you explain your requirement ?
Remember (or learn) that creating such transaction, you are able to bypass following authorization checks using SU24 (Identity Management, User and Role Administration of Application Server ABAP, AS ABAP Authorization Concept, From the Programmed Authorization Check to a Role, Editing Authorization Default Data (Development System) / Editing Authorization Default Data (Customer System). )
Regard,
Raymond -
After BI 7.0 Upgrade, Roles and profiles are not visible
Hi Gurus,
We have issue with the roles and profiles, all our users doesnt see any roles or profiles in Bex Analyzer, under there user access after BI 7.0 Upgrade.
When I go and check there profile in SU01 and I can see all roles are assigned but not able to see in the Bex Analyzer reporting tool.
Do we need to do any configuration settings after BI 7.0 upgrade to visible roles. This problem with every user.
Your help will be really appreciated.
Thanks
Ganesh Reddy.
Edited by: Ganesh Reddy on Oct 22, 2009 5:19 PMHi Mohan/Vijay,
Sorry for little bit late. I have all authorization roles access, and users dont have that access. Difference between our roles is I have SAP_ALL and SAP_NEW.
But when they login with old bex analyzer they can see all roles, but not with new bex analyzer.
Please some suggest me still I need to run SU25.
Thanks
Dayaker Reddy.
Edited by: Ganesh Reddy on Oct 26, 2009 10:19 AM -
Generate report for displaying transaction codes role wise
hi,
i want to generate a consolidated report in which all transactions codes are displayed role wise.In TR SUIM the report is generated using one role at a time.i want an option where i can fill the require roles and get the consolidated reports.is it possible.please help..
thanx,Hi,
Your question is not about SOA.
You should ask you question in an appropriate forum (Security ?) where you will have more chances to get a useful answer.
Regards,
Olivier -
Report or table for the changed sales orders
Hi Friends,
Does anyone know of the standard report with which we can track all the sales orders where the changes have been made in particular date range?
If not standard report then atleast the table or the structure where the value is stored.
I know that we can track the orders one by one but I am looking for a list of orders.
Thanks in advance.
Regards
KaranHi,
Try CDHDR for header and CDPOS for items.
The only trick here is finding the object.
Reward points if useful
Regards,
Amrish Purohit -
Report In Table Format in Email
Dear sir,
i want to send mail to user in format of report of issues in table Format in Body of mail.
Actully i want to send mail daily to user with Pending Issues of user.
HOD allote issue to user with Close target Date .Mail would be fire till tagget date >sysdate .
There can be Multiple issue with user.
so i want to create a list of All pending issue in report in table which are not Closed .
Report should be display with that column
eg. User 0010 has 3 Pending Issue
Issue No-----subject-----Create On-----Target Date
001---------ABC-------27-Mar-2011-------30-Jnn-2011
002--------BHN-------23-Jun-2011---------06-July-2011
003--------JHN--------05-Jun-2011---------02-July-2011
That Report Should be sent to User in mail.
My Code is
DECLARE
l_id number;
to_add varchar2(1000);
to_sub_by varchar2(1000);
from_add varchar2(1000);
l_body varchar2(4000):=:P33_DESCRIPTION;
l_sub varchar2(1000):=:P33_SUBJECT;
I_case varchar2(10):=:P33_CASE_ID;
I_isue_dte date:=:P33_SUBMITTED_ON;
l_regd varchar(100);
CURSOR C1 IS SELECT EMAIL_ID,(SELECT EMAIL_ID FROM USER_MAS WHERE USER_ID =:P33_SUBMITTED_BY_ID) AS D FROM USER_MAS WHERE USER_GR_ID=:P33_ASSIGNED_TO_GROUP_ID AND USER_ID NOT IN(:APP_USER);
BEGIN
if :P33_ASSIGNED_TO_GROUP_ID is not null then
open C1;
LOOP
FETCH C1 INTO to_add,to_sub_by;
EXIT WHEN C1%NOTFOUND;
select email_id,user_name into from_add,l_regd from user_mas where user_id=:app_user;
l_id:=APEX_MAIL.SEND(
p_to => to_add, -- change to your email address
P_cc => to_sub_by,
p_from => from_add,
p_body => 'Issue Information'||''||chr(13)||chr(10)||chr(13)||chr(10)||
'www.farhorizonindia.net:7777/crm'||''||chr(13)||
'Issue Title'||':'||l_sub||CHR(13)||chr(10)||
'Issue Number'||':'||I_case||CHR(13)||
'Issue Open Date'||':'||I_isue_dte||''||chr(13)||chr(10)||CHR(13)||chr(10)||
'Most Recent Comment'||':'||''||chr(13)||chr(10)||
l_body||chr(13)||chr(10)||''||CHR(13)||chr(10)||'Regards'||chr(13)||chr(10)||''||l_regd||CHR(13)||chr(10)||CHR(13)||chr(10)||'Please do not reply to this email.If you wish to update the call.please login to the issue Management.',
P_subj => I_case ||' Issue '||l_sub);
end loop;
close C1;
end if;
COMMIT;
apex_mail.push_queue(
P_SMTP_HOSTNAME => '102.111.0.9',
P_SMTP_PORTNO => 25);
commit;
END;How can i create that format in Body Of sending Email.
Thanks
Vedant
Edited by: Vedant on Jun 30, 2011 3:44 AM
Edited by: Vedant on Jul 5, 2011 9:17 PMLook at using an interactive reports and subscription routine..: http://st-curriculum.oracle.com/obe/db/apex/r40/apexirr/apexirrdev/apexirrdev_ll.htm
Death called while you were out, so I gave him your cell number.
Thank you,
Tony Miller
Webster, TX -
Report to view all the Roles and Transactions assinged to a particular user
Hi,
I need to develop a report to view all the Roles and Transactions assinged to a particular user along with the Authorization values. So, if provide the Username, the report should be able to give Roles, Transaction Codes and the fields and thier authorization values for that TCodes..
Regards,
Sreenivas RajuTry this FM once - SUSR_USERS_LIST_ALV . It provides a list with Roles, Profiles, and also a detail button to check the authorization values etc.
Also try this FM - SUSR_USER_DISPLAY_WITH_AUTHS, SUSR_USER_AUTH_FOR_OBJ_GET , SUSR_USER_DISPLAY_WITH_S_TCODE -
Is file created by report CRMD_UI_ROLE_PREPARE mandatory in CRM Role Design
Hi All,
The CRM 7security guide mentions usage of file created by report CRMD_UI_ROLE_PREPARE for Designing role. Can anyone suggest, whether it is Manadatory to perform this report.
I have designed Role, WITHOUT using this report.Hi Raghu, your explaination is not clear to me.
my understanding-The report produces the file from a Business Role, which contains Services/BSPs,etc.... This file needs to be imported into Menu Tab, by option 'Import From File'. So, when these Services/BSPs are added into Menu tab, they will auto-populate their SU24 entries(authorization objects) in Authorization Tab(like in Transaction Codes)
Could you be clear on "report CRMD_UI_ROLE_PREPARE will help you with generating the CONTENT automatically", as mentioned by you. Which CONTENT: Entries(Services,etc...) in Menu Tab OR their SU24 auth. Objects.
Also, "you can import the file from PFCG profile menu" is not clear. Which MENU are you referring here? The MENU tab which contains Services/BSPs,Transaction Codesetc.. OR the MENU bar inside Authorization Tab
Could you suggest on this, as i this is what i am desparately looking for -
ASSIGNING REPORTS AND URL LINKS IN ROLE
Hello Gurus,
could you please tell me the procedure of asigning Reports, specific tables and Url links in the role.actually i know the process of assigning T-Codes to the role but i dont know the procedure for reports and url links and tables...
i hope u people will respond positively.
Cheers.......
srinivas.korva
Message was edited by:
srinivas.korva korvaHi Nuno,
you can achieve this by changing the XSL file.
Check out this thread for more infos: XML form display in same browser window
Best regards,
Robert
Maybe you are looking for
-
Okay so I set up my Time Capsule already and is now backing up 2 of my iMacs. Works great. What I want to know is how to use the TC to directly store files? I want to do this to delete some files on iMac 20inch but still have them on the TC for futur
-
I just got my new dv7-4290us from the HP store and after a little while of playing with it, I noticed that the fan seems to always be running. It's not spinning very fast, just kind of a soft blowing or purring sound but audible for sure. Is this nor
-
Isight is not working anymore after updating to snow leopard
it used to work very well. i updated snow leopard 5 days ago. i try to use skype and photo booth, it is never working again. do people have the same problem? thank you for your information
-
The bottom of the screen of the iMac to the 2011 shooting yellow
Good afternoon / evening, I am originally French so sorry for my language if not completely understandable ! Uh, my problem is the screen of my iMac 21.5 range 2011, it is pale! Yes indeed, it tends to be yellowish gray even see! This is my 3rd iMac,
-
How to automate a cmd-K in a shell script
I want my shell script (.sh file) to clear the screen and buffer before it executes the rest of the script. There doesn't appear to be a command to do this, however I know that the command-k keystroke does this. Is there a way to send a command K to