Report to Display All Authorizations for User

Dear Experts,
Is the any standard report or table from which we can get the full authorization details of a user.
EX: User Name -> Role -> T-Codes -> Authorization Objects -> Field Values.
Atleast pointing User Name -> Authorization Objects -> Field Values.
Please Help.
Thanks

Hello Simonjohn,
There is not any direct way to do that, but you can do one thing,
Through table "AGR_1251" you can fetch the authorization object and field value by mentioning the roles assigned to particular user, which you can fetch using table "AGR_USERS".
You can also create quick view by joining these two tables using t-code "SQVI", which will help you to get your result.
Here after joining tables you can also get report name which is created by SQVI automatically in "quickview"--> additional functions --> display report name
Hope it helps.
Regards,
Amit Barnawal
Edited by: Amit Barnawal on Jan 5, 2012 11:20 AM
Edited by: Amit Barnawal on Jan 5, 2012 11:22 AM
Edited by: Amit Barnawal on Jan 5, 2012 11:33 AM

Similar Messages

Any report to check vacation rule for users?

any report to check vacation rule for users?

Hello Anand,
there is no report but you may use the production order info system with list "components" and create a layout contaning the issued quantity and/or the final issue indicator. With a correct sorting, the list should show all orders with non-issued components at the top.
Regards, Andreas

How to Control authorization for users with certain status for level 2 WBS Element

Dear All,
Is there any standard way or enhancement available to control authorization for users with certain status for WBS Element i.e. for example
Pre-requisite:
There is only 2 level of project i.e.
Lev_ WBSE_______Description
1___ 7-14.E_______summay outage controller
2___ 7-14.E.2310__ Plant/unit # 2310
2___ 7-14.E.2310__ Plant/unit # 2220
Project Controller (authorization role assigned "Z_PS_OP7_OTGCON_C") have all project level authorization
Plant/Unit Controller (authorization role assigned "Z_PS_OP7_PLNTOTG_C_2310") have only level 2 authorization with enhancement that we did in system by Z table.
User ID_ Plant #
123345_ 2310
122455_ 2220
Issue:
After System Status released and User Status approved the WBS basic date for Plant/Units should be restricted from updating/changing by Plant/Unit Controller level and only project controller should have this authority.
Solution required:
Can any one tell how to control this scenario either by standard or enhancement available to control authorization
BR
Saqib Usman

Hi,
Did you explore SAP Enhancement CNEX0002 Using Transaction CMOD?
Thank you and regards,
Varshal Kachole
The SCN Rules of Engagement

How to generate Inventory Report to display all details at end of mon/yr?

Hi Guys..
I would like to know how we can generate a
Inventory report to display all inventory details at the end of every
month or year?
Also, another question.How can we create a PO past delivery date report?
Any help is appreciated.
Thanks,
Sri Harsha;

Hi,
Pls the code here-
TYPES :
        BEGIN OF ty_mard,
          matnr TYPE matnr,
          werks TYPE werks_d,
          lgort TYPE lgort_d,
          labst TYPE labst,
          retme TYPE retme,
          umlme TYPE umlme,
        END OF ty_mard.
TYPES :
       BEGIN OF ty_mska,
          matnr TYPE matnr,
          kalab TYPE labst,
          vbeln TYPE vbeln,
          posnr TYPE posnr,
        END OF ty_mska.
TYPES :
        BEGIN OF ty_vbap,
          matnr TYPE matnr,
          kwmeng TYPE kwmeng,
          pstyv TYPE pstyv,
        END OF ty_vbap.
TYPES :
        BEGIN OF ty_mbew,
          matnr TYPE matnr,
          salk3 TYPE salk3,
          stprs TYPE stprs,
        END OF ty_mbew.
TYPES :
        BEGIN OF ty_mchb,
          matnr TYPE matnr,
          charg TYPE charg_d,
        END OF ty_mchb.
TYPES :
        BEGIN OF ty_mara,
          matnr TYPE matnr,
          mfrpn TYPE mfrpn,
        END OF ty_mara.
TYPES :
       BEGIN OF ty_makt,
         matnr TYPE matnr,
         maktx TYPE maktx,
       END OF ty_makt.
TYPES :
        BEGIN OF ty_ekpo,
         matnr TYPE matnr,
         netpr TYPE bprei,
         meins TYPE bstme,
        END OF ty_ekpo.
DATA :
       BEGIN OF final OCCURS 0,
        matnr LIKE mard-matnr,
        maktx LIKE makt-maktx,
        werks LIKE mard-werks,
        lgort LIKE mard-lgort,
        mfrpn LIKE mara-mfrpn,
        usp LIKE mbew-stprs,
        labst LIKE mard-labst,
        salk3 LIKE mbew-salk3,
        kalab LIKE mska-kalab,
        vbeln LIKE mska-vbeln,
        sov LIKE ekpo-netpr,
        uom LIKE ekpo-meins,
        posnr LIKE mska-posnr,
        pstyv LIKE vbap-pstyv,
        kwmeng LIKE vbap-kwmeng,
        retme LIKE mard-retme,
        umlme LIKE mard-umlme,
       END OF final.
DATA :
      BEGIN OF itab OCCURS 0,
        matnr LIKE mard-matnr,
        werks LIKE mard-werks,
        lgort LIKE mard-lgort,
        labst LIKE mard-labst,
        retme LIKE mard-retme,
        umlme LIKE mard-umlme,
        charg LIKE mchb-charg,
      END OF itab.
DATA :
       i_mard TYPE STANDARD TABLE OF ty_mard,
       i_mbew TYPE STANDARD TABLE OF ty_mbew,
       i_mchb TYPE STANDARD TABLE OF ty_mchb,
       i_mara TYPE STANDARD TABLE OF ty_mara,
       i_vbap TYPE STANDARD TABLE OF ty_vbap,
       i_mska TYPE STANDARD TABLE OF ty_mska,
       i_makt TYPE STANDARD TABLE OF ty_makt,
       i_ekpo TYPE STANDARD TABLE OF ty_ekpo.
DATA :
       wa_mard TYPE ty_mard,
       wa_mbew TYPE ty_mbew,
       wa_mchb TYPE ty_mchb,
       wa_mara TYPE ty_mara,
       wa_vbap TYPE ty_vbap,
       wa_mska TYPE ty_mska,
       wa_makt TYPE ty_makt,
       wa_ekpo TYPE ty_ekpo.
DATA :
       sov_total TYPE currency,
       urestrict_total type currency.
*Select options:
SELECTION-SCREEN BEGIN OF BLOCK a WITH FRAME TITLE text-001.
SELECT-OPTIONS : s_matnr FOR gf_matnr, " Material No.
                 s_werks FOR gf_werks, " Plant
                 s_lgort FOR gf_lgort, " Storage Location
                 s_charg FOR gf_charg. " Batch No.
SELECTION-SCREEN END OF BLOCK a.
*Validation of Selection Fields
AT SELECTION-SCREEN.
IF     s_matnr IS INITIAL
     AND s_werks IS INITIAL
     AND s_lgort IS INITIAL
     AND s_charg IS INITIAL.
    MESSAGE e001(zcir).
ENDIF.
*Function Module for Checking the inputs
CALL FUNCTION 'MMIM_ENTRYCHECK_MAIN'
    TABLES
      it_matnr = s_matnr
      it_werks = s_werks
      it_lgort = s_lgort.
*Checking of input values for S_CHARG
IF NOT s_charg-low IS INITIAL OR NOT s_charg-high IS INITIAL.
    SELECT charg FROM mchb into table LT_charg WHERE charg IN s_charg.
    IF sy-subrc NE 0.
      MESSAGE e002(zcir).
    ENDIF.
    clear wa_mchb.
ENDIF.
*TOP OF PAGE
TOP-OF-PAGE.
FORMAT COLOR COL_HEADING.
WRITE sy-uline(105).
WRITE :/ '|',2 text-101, "MATERIAL NO:
         16 text-102,    "MATERIAL DESCRIPTION
         52 text-103,    "PLANT
         60 text-104,    "STORAGE LOCATION.
         74 text-105,    "MANUFACTURE PARTNER NO.
         88 text-106,    "VALUATED STOCK.
         95 text-107.    "STANDARD PRICE.
        105 '|'.
FORMAT COLOR COL_GROUP.
WRITE :/ '|',2 text-108, " UNRESTRCTED STOCK
          16 text-109,     " SALES DOCUMENT NO:
          20 text-110,     " ITEM NO:
          27 text-111,     " UNIT
          32 text-112,     " NET VALUE
          39 text-113,     " ITEM CATEGRY
          50 text-114,     " QUANTITY
          60 text-115,     " BLOCKED STOCK
          79 text-116,     " TOTAL STOCK
          95 text-117.     " STOCK TRANSFER
         87 '|'.
FORMAT COLOR OFF.
WRITE sy-uline(105).
*START OF SELECTION
START-OF-SELECTION.
IF NOT s_matnr IS INITIAL
    OR NOT s_werks IS INITIAL
    OR NOT s_lgort IS INITIAL.
    PERFORM select1.
ELSEIF NOT s_charg IS INITIAL.
    PERFORM select2.
ELSEIF NOT s_matnr IS INITIAL
    OR NOT s_werks IS INITIAL
    OR NOT s_lgort IS INITIAL
    AND NOT s_charg IS INITIAL.
    PERFORM select3.
ENDIF.
PERFORM final1.
PERFORM collect.
*END OF SELECTION
END-OF-SELECTION.
LOOP AT LT_FINAL.
    FORMAT COLOR COL_KEY.
    WRITE :/2 LT_FINAL-matnr,
           14 LT_FINAL-maktx,
           52 LT_FINAL-werks,
           58 LT_FINAL-lgort,
           69 LT_FINAL-mfrpn,
           73 LT_FINAL-labst,
           87 LT_FINAL-usp.
    FORMAT COLOR OFF.
    FORMAT COLOR COL_NORMAL.
    WRITE :/2 LT_FINAL-kalab,
            14 LT_FINAL-vbeln,
            17 LT_FINAL-posnr,
            24 LT_FINAL-uom,
            28 LT_FINAL-sov,
            36 LT_FINAL-pstyv,
            46 LT_FINAL-kwmeng,
            57 LT_FINAL-retme,
            65 LT_FINAL-salk3,
            75 LT_FINAL-umlme.
ENDLOOP.
FORMAT COLOR COL_TOTAL.
WRITE :/2 text-119,     " TOTAL VALUE
          28 V_sov_total,
          87 V_urestrict_total.
FORMAT COLOR OFF.
Form Name: select1
text: Population of internal table LT_MARD and using LT_MARD populating
      the internal table LT_MCHB
FORM select1.
SELECT matnr
         werks
         lgort
         labst
         retme
         umlme
         FROM mard
         INTO TABLE LT_mard
         WHERE matnr IN s_matnr
         AND werks IN s_werks
         AND lgort IN s_lgort.
SELECT matnr
         charg
         FROM mchb
         INTO TABLE LT_mchb
         FOR ALL ENTRIES IN LT_mard
         WHERE matnr EQ LT_mard-matnr.
ENDFORM.                                                    "select1
Form Name: select2
text:Population of internal table LT_MCHB and using LT_MCHB populating
     LT_MARD
FORM select2.
SELECT matnr
         charg
         FROM mchb
         INTO TABLE LT_mchb
         WHERE charg IN s_charg.
SELECT matnr
         werks
         lgort
         labst
         retme
         umlme
         FROM mard
         INTO TABLE LT_mard
         FOR ALL ENTRIES IN LT_mchb
         WHERE matnr EQ LT_mchb-matnr.
ENDFORM.                                                    "select2
Form Name: select3
text: Population of internal table LT_TAB using inner join and then
      populating internal tables LT_MARD and LT_MCHB
FORM select3.
SELECT a~matnr
         a~werks
         a~lgort
         a~labst
         a~retme
         a~umlme
         b~charg
         INTO CORRESPONDING FIELDS OF TABLE LT_TAB
         FROM mard AS a
         INNER JOIN mchb AS b ON bmatnr = amatnr
         WHERE a~matnr IN s_matnr
         OR a~werks IN s_werks
         OR a~lgort IN s_lgort
         AND b~charg IN s_charg.
LOOP AT LT_TAB.
    MOVE: LT_TAB-matnr TO wa_mard-matnr,
          LT_TAB-werks TO wa_mard-werks,
          LT_TAB-lgort TO wa_mard-lgort,
          LT_TAB-labst TO wa_mard-labst,
          LT_TAB-retme TO wa_mard-retme,
          LT_TAB-umlme TO wa_mard-umlme,
          LT_TAB-matnr TO wa_mchb-matnr,
          LT_TAB-charg TO wa_mchb-charg.
    APPEND wa_mard TO LT_mard.
    APPEND wa_mchb TO LT_mchb.
ENDLOOP.
ENDFORM.                                                    "select3
Form Name:collect
text:population of LT_FINAL internal table-LT_FINAL using other internal
      tables
FORM collect.
LOOP AT LT_mard INTO wa_mard.
    MOVE : wa_mard-matnr TO LT_FINAL-matnr,
           wa_mard-werks TO LT_FINAL-werks,
           wa_mard-lgort TO LT_FINAL-lgort,
           wa_mard-labst TO LT_FINAL-labst,
           wa_mard-retme TO LT_FINAL-retme,
           wa_mard-umlme TO LT_FINAL-umlme.
    READ TABLE LT_makt INTO wa_makt WITH KEY matnr = wa_mard-matnr.
    MOVE wa_makt-maktx TO LT_FINAL-maktx.
    READ TABLE LT_mska INTO wa_mska WITH KEY matnr = wa_mard-matnr.
    MOVE: wa_mska-kalab TO LT_FINAL-kalab,
          wa_mska-vbeln TO LT_FINAL-vbeln,
          wa_mska-posnr TO LT_FINAL-posnr.
    READ TABLE LT_vbap INTO wa_vbap WITH KEY matnr = wa_mard-matnr.
    MOVE: wa_vbap-kwmeng TO LT_FINAL-kwmeng.
    READ TABLE LT_mara INTO wa_mara WITH KEY matnr = wa_mard-matnr.
    MOVE : wa_mara-mfrpn TO LT_FINAL-mfrpn.
    READ TABLE LT_mbew INTO wa_mbew WITH KEY matnr = wa_mard-matnr.
Calculation of Unrestricted value
    LT_FINAL-usp = wa_mard-labst * wa_mbew-stprs.
    V_urestrict_total = V_urestrict_total + ( wa_mard-labst * wa_mbew-stprs ).
   CALL FUNCTION 'CONVERSION_EXIT_ALPHA_OUTPUT'
     EXPORTING
       input         = V_urestrict_total
    IMPORTING
      OUTPUT        = V_urestrict_total
    MOVE wa_mbew-salk3 TO LT_FINAL-salk3.
    READ TABLE LT_ekpo INTO wa_ekpo WITH KEY matnr = wa_mard-matnr.
    MOVE wa_ekpo-meins TO LT_FINAL-uom.
Calculation of Sales Order Value
    LT_FINAL-sov = wa_mska-kalab * wa_ekpo-netpr.
    V_sov_total = V_sov_total + ( wa_mska-kalab * wa_ekpo-netpr ).
    APPEND LT_FINAL.
ENDLOOP.
ENDFORM.                    "collect
*Form Name:FINAL1
*Population of all the internal tables
FORM FINAL1.
SELECT matnr
         kalab
         vbeln
         posnr
         FROM mska
         INTO TABLE LT_mska
         FOR ALL ENTRIES IN LT_mard
         WHERE matnr EQ LT_mard-matnr.
SELECT matnr
         kwmeng
         pstyv
         FROM vbap
         INTO TABLE LT_vbap
         FOR ALL ENTRIES IN LT_mard
         WHERE matnr EQ LT_mard-matnr.
SELECT matnr
         salk3
         stprs
         FROM mbew
         INTO TABLE LT_mbew
         FOR ALL ENTRIES IN LT_mard
         WHERE matnr EQ LT_mard-matnr.
SELECT matnr
         mfrpn
         FROM mara
         INTO TABLE LT_mara
         FOR ALL ENTRIES IN LT_mard
         WHERE matnr EQ LT_mard-matnr.
SELECT matnr
         maktx
         FROM makt
         INTO TABLE LT_makt
         FOR ALL ENTRIES IN LT_mard
         WHERE matnr EQ LT_mard-matnr.
SELECT matnr
         netpr
         FROM ekpo
         INTO TABLE LT_ekpo
         FOR ALL ENTRIES IN LT_mard
         WHERE matnr EQ LT_mard-matnr.
ENDFORM.                                                    "final1
Reward if helpful.
Chandralekha

Screen or Report that shows all Responsibilities for Org Unit

How can we find out in Oracle application from the front end,,,, the screens... or may be report that shows all responsibilities for ORG Unit ‘Vision Operation’ (204).
SELECT FR.RESPONSIBILITY_NAME, FPOV.PROFILE_OPTION_VALUE ORGID, NAME ORG_NAME
FROM FND_PROFILE_OPTIONS FPO,
FND_PROFILE_OPTION_VALUES FPOV,
FND_RESPONSIBILITY_TL FR,
HR_ALL_ORGANIZATION_UNITS HOU
--HR_OPERATING_UNITS HOU
WHERE --UPPER (FPO.PROFILE_OPTION_NAME) LIKE UPPER ('MO%OPERATIN%')
PROFILE_OPTION_NAME = 'ORG_ID'
AND FPO.PROFILE_OPTION_ID = FPOV.PROFILE_OPTION_ID
AND FPOV.LEVEL_VALUE = FR.RESPONSIBILITY_ID
AND HOU.ORGANIZATION_ID = FPOV.PROFILE_OPTION_VALUE
the above query displays the data from the backend,,I want to see how to see that data from the front end,, does anyone know the navigation, thank you so much in advance.

Hello Kashif,
Thank you for the reply. So, there is no screen that shows all the responsibilities that are assigned to a operating unit.
The link that you provided really did not give any information that i was looking for.
And as you said .. "there is no specific screen to show all except responsibilities form".... what does the responsibilities form show,
I have also tried to look in the System Administrator -> Profile -> System
and in the Responsibility, I query for Payables manager, and look which Orgs are assigned to it, I am not able to find it. I know I am wrong, but can you please help me how to see which responsiblity is assigned to which Operating Unit.
Thank you

A report to display all PO by vendor?

Hi,
Report me2L/me2m is to display open purchase order by vendor, Is there a report to display all PO(preferrably can select a time period, say since last year) by vendor?
Thanks,
Meg

Hello Meg,
ME2L is the best report in purchasing meeting all the requirement i.e. open purchase order, closed purchase order, pending invoice etc.
The output will be based on your "Selection parameters" so check which one is most appropriate selection parameter to meet your requirement.
Here you have time line selection also.
Hope this helps.
Regards
Arif Mansuri

Report to display all the contacts of an opportunity.

Hello,
I have a requirement, can we create a report which displays all the contacts of an opportunity apart from primary contact.
Any inputs on the same will be appreciatable. TIA
Edited by: 1004233 on May 6, 2013 12:16 AM
Edited by: 1004233 on May 6, 2013 3:28 AM
Edited by: 1004233 on May 6, 2013 3:28 AM

Hey Aveek;
   Try this, which will get the most recent one. You would just need to change it to loop at the edids records to get at them all...
      TABLES: *edidc, *edids, *t100.
      DATA: wf_string type string.
      CLEAR *edids.
      SELECT SINGLE *
         INTO *edids
         FROM edids
         WHERE docnum = *edidc-docnum
           AND status = '51'.
      SELECT SINGLE text
         INTO *t100-text
         FROM t100
         WHERE sprsl = 'EN'
           AND arbgb = *edids-stamid
           AND msgnr = *edids-stamno.
         CLEAR wf_string.
      MOVE *edids-stapa1 TO wf_string.
      REPLACE '&' WITH wf_string INTO *t100-text.
      IF sy-subrc EQ 0.
        CLEAR wf_string.
        MOVE *edids-stapa2 TO wf_string.
        REPLACE '&' WITH wf_string INTO *t100-text.
        IF sy-subrc EQ 0.
          CLEAR wf_string.
          MOVE *edids-stapa3 TO wf_string.
          REPLACE '&' WITH wf_string INTO *t100-text.
          IF sy-subrc EQ 0.
            CLEAR wf_string.
            MOVE *edids-stapa4 TO wf_string.
            REPLACE '&' WITH wf_string INTO *t100-text.
          ENDIF.
        ENDIF.
      ENDIF.
      A little sloppy (OK, alot!), but it gets the job done...
Cheers,
John

How To Display All Comments for a Planning Package

Hi,
I have the How-to guide mentioned in the subject and have now moved onto BI7. Is the guide still applicable in BI7 and how would I go about implementing the above How-to in IP instead of BPS?
Thanks,
Ale

Thanks Marc.
I will use BW-BPS for the time being as I've seen screenshots of the solution in the how-to. Still need to answer the question here:
How To. Display All Comments for a Planning Package
As I have no idea how to achieve the functionality detailed in the thread above.
Thanks for your time Marc,
Regards,
Ale

NOT WORKING -How To Display All Comments for a Planning Package

Hi All,
I am using How to Document "How To Display All Comments for a Planning Package" to display comments for list of "cost center" against different "fiscal/year" for Key Figure "Budget Amount".
Below is how the Layout looks like where comments are posted against Cost Center- year combination.
Cost Center                          2007     2008     2009     2010     2011
3          2.00     2.00     2.00     2.00     2.00
4          2.00     2.00     2.00     2.00     2.00
6          2.00     2.00     2.00     2.00     2.00
7          2.00     2.00     2.00     2.00     2.00
This case is very similar to the example given in how to document but after following all the steps correctly in the document and also followings various forum links such as below , I am not able to display the comments for list of Cost Centers.
"How to...BSP display comments"...problem with row comment
Below are the issues being faced:
1) When i save the comments , the icon for comments (indicating that some comments have been entered) is not shown against selection of Cost Center-Year although the comment is saved.Comment are also visible in BPS0.
2) On execution "Web interface could not be loaded" - is the message that is shown in the area where BPS application should show all the comments.
Highly Appreciate any help with issues mentioned above.
Kind Regards,
Robin Johri

Hello Robin,
1) please check if you set the row/cell selection property correctly for the layout component in the web interface.
2) the error does not make sense since the comments are displayed in an iframe using a BSP application, not a web interface. Check the URL in the HTML text component.
Regards,
Marc
SAP Techology RIG

All authorization for only PM/FI from SAp_ALL

if i wnat to create all authorization for Plant Maintainence(PM) can i copy from SAP_ALL and deactivate everything(100%) except only one auth obj- PM or do i need to keep any thing else?

doing that would probably not give you the result that you want. I would start by looking for a SAP delivered role that does what you are asking. Then make a copy and work from that.
Regards,
Paul
PS an example would be SPOOL. That is in the Basis section not in PM so the person would not be able to print.

How many ways we can create authorization for user groups in sap query reports

Hi Gurus, I am getting a problem when I am assigning users to user group in sap query report .The users other than created in user groups are also able to add &change the users .So please suggest me how to restrict users outside of the user group.
Please send me if u have any suggestions and useful threads.
Thank You,
Suneel Kumar.

I don't think it can be done. According to the link below 'Users who have authorization for the authorization object S_QUERY with both the values Change and Maintain, can access all queries of all user groups without being explicitly entered in each user group.'
http://help.sap.com/saphelp_46c/helpdata/en/d2/cb3f89455611d189710000e8322d00/content.htm
Although I think you can add code to your infoset and maybe restrict according to authority group, i.e.:
Use AUTHORITY-CHECK to restrict access to the database based on user.
Press F1 on AUTHORITY-CHECK to find out how to use it in the code

Defining Authorizations for User to restrict the data in report.

Hi Gurus,
I have no idea on authorization concept in BI. Please give me anyone steps to creating authorization objects, roles and profiles to restrict the data for users.
Ex.
i have functinal location info object checked as authorization relavent with below data.
FL001
FL002
FL003
FL004
FL005
FL006
FL007
FL008
FL009
We have users like below.
User1
User2
User3
Now, if User1 is analysing a report he can see only FL001, FL005, FL009 only, remaining have to be omited.
If User2 is analysing that report he can see only FL002, FL003, FL009. And like wise.
So, Please help me providing the completed steps. I have done somting but failed.
Thanks in advance
Peter.

Hello Peter,
Please go through the following links
Authorization :
http://help.sap.com/saphelp_nw70/helpdata/en/59/fd8b41b5b3b45fe10000000a1550b0/frameset.htm
SAP Authorization Concept :
http://help.sap.com/saphelp_nw70/helpdata/en/52/671285439b11d1896f0000e8322d00/frameset.htm
Thanks.
With regrads,
Anand Kumar

Authorizations for users to change their own data

Hi
All the employees are given the userids to logon to sap when these employees log on to sap with the particular userids they should be able to change /Display only the details pertaining to them not others
We have not implemented ESS but this is in pipeline but only after 3 -4 months But Authorizations are required for users now only
How to design role which should apply to all user requirements and they should get their Personnel no by default
Kind Regards
Vinod

Hi,
   For your requirement goto transaction SU21 and select the object P_PERNR and click DOCUMENTATION. Refer the Documentation for the steps to be followed.
(i.e) For a user to be able to maitain his or her own data. You should assign the user an authorization for the HR: Master data - Personnel number check object (P_PERNR), with the following specificatons:
1. Authorization level: *
2. Interpretation of assignment
   User - personnel no: I
3. Infotype           : 0002
4. Subtype            : *
A related link http://www.sapfans.com/forums/viewtopic.php?p=502235&sid=cd1bde22eb24059e4d5a2eae086b7c96

Authorization for user on WF

HI All ,
I am using WF for invoice and I want that during the process the user will
assign it to other user .
my question is how it work with authorization i.e. if user 1 get the WF and send it to user
2 that don't have any authorization to display the invoice .
does it work or it fail that the user dont have authorization?
one more thing does the user need to have authorization for WF besides the business authorization
for invoice ?
Regards
Alex

Yes even as a end user you should haveenough roles to receive and process the workitems, aprat from the respective business process authorizations. As the workitems is a part of Org. management you should have right authorizations..
[PLease refer Sap Help Docu|http://help.sap.com/saphelp_nw04/helpdata/en/8c/1923d1932b11d2a5ea0060087a79ea/frameset.htm]

Authorizations for user db2 sid after systemcopy with DB2 V9.7 on AIX

Hello,
I made a homogenous systemcopy from the system PRD to ENT with an redirected restore. I had the following system environment:
AIX 5.3 TL10 SP1
DB2 V9.7 (without any fixpack)
After the restore and the recovery were finished, I was able to start the database manager and to activate the database.
I tried to execute a script for cleanup some tables according to the systemcopy guide but I got the following SQL messages:
SQL0551N, SQL0552N for the user db2ent. I checked the authorization for this user and got the following information:
db2 => get authorizations
Administrative Authorizations for Current User
Direct SYSADM authority                    = NO
Direct SYSCTRL authority                   = NO
Direct SYSMAINT authority                  = NO
Direct DBADM authority                     = NO
Direct CREATETAB authority                 = NO
Direct BINDADD authority                   = NO
Direct CONNECT authority                   = NO
Direct CREATE_NOT_FENC authority           = NO
Direct IMPLICIT_SCHEMA authority           = NO
Direct LOAD authority                      = NO
Direct QUIESCE_CONNECT authority           = NO
Direct CREATE_EXTERNAL_ROUTINE authority   = NO
Direct SYSMON authority                    = NO
Indirect SYSADM authority                  = YES
Indirect SYSCTRL authority                 = NO
Indirect SYSMAINT authority                = NO
Indirect DBADM authority                   = NO
Indirect CREATETAB authority               = NO
Indirect BINDADD authority                 = NO
Indirect CONNECT authority                 = NO
Indirect CREATE_NOT_FENC authority         = NO
Indirect IMPLICIT_SCHEMA authority         = NO
Indirect LOAD authority                    = NO
Indirect QUIESCE_CONNECT authority         = NO
Indirect CREATE_EXTERNAL_ROUTINE authority = NO
Indirect SYSMON authority                  = NO
db2 =>
The user db2ent was/is in the group dbentadm and the group dbentadm is configured as SYSADM:
SYSADM group name                        (SYSADM_GROUP) = DBENTADM
SYSCTRL group name                      (SYSCTRL_GROUP) = DBENTCTL
SYSMAINT group name                    (SYSMAINT_GROUP) = DBENTMNT
The only solution was to grant the authorizations with an other user to db2ent.
For the restore I created an new instance with the following command (as user root):
/db2/ENT/db2_software/instance/db2icrt -a SERVER_ENCRYPT -s ESE -u db2ent db2ent
I set the correct DBM configuration and created an empty database as user db2ent with the following command
db2 create db ENT on /db2/ENT
The restore was executed with db2 -tvf restore_prd.clp as user db2ent.
Is there a bug in the db2 software or is there any other solution? I did not changed the environment for the user db2ent.
The authorization concept has been changed in DB2 V9.7
http://www-01.ibm.com/support/docview.wss?uid=swg21385801
Kind regards,
Christian

Hello All,
I finished restore using redirect method, but i did not know about this security issue.
Now I tried creating db2<oldsid> user and tried granting dbadm secadm priv.
but i get this error
db2 => GRANT DBADM to USER DB2P60
DB21034E The command was processed as an SQL statement because it was not a
valid Command Line Processor command. During SQL processing it returned:
SQL0707N The name "DBADM" cannot be used because the specified identifier is
reserved for system use. SQLSTATE=42939
Please help me.
I need a solution at the earliest possible.
Thanks,
Sree

Report to Display All Authorizations for User

Similar Messages

Maybe you are looking for