RFC for role maintenance
We are in the process of developing an ASP.NET web application which will be used to raise requests for user and role creations in SAP.
We will be making use of Sonic ESB to update SAP through IWAY SAP adapter.
IWAY SAP adapter supports RFCs, Bapis & IDocs.
We are aware of RFCs that could be used for user creation, updating and deletion.
We have NOT come across any RFCs or Bapis for role maintenance
1) We would need RFCs for the following requirements:
1) To create a new role (single or composite role ).Creating a new role would include adding transactions to a role, deriving from an existing role or assigning more than one role to another role.
2) To update a role
3) To delete a role.
4) To get the details of an existing role
If there are no RFCs for the above requirement, will we need to create a custom RFC?
If we need to create a custom RFC, are there any transactions already available for the above requirements so that we could write a RFC wrapper?
2) Are there any RFCs that would give us the complete list of roles (single or composite) in an SAP system?
3) Are there any RFCs that would give us the complete list of transactions in an SAP system?
Presently for 2) & 3) , we are making use of RFC_READ_TABLE to read SAP tables to get the list of roles and transactions.
Thanks for your answers
Hi Nicole,
I think you are in the wrong forum.... For Guided Procedures, this is only about process roles and not roles used in the ABAP Stack.
Best regards,
David
Similar Messages
-
RFC- Bapi - For Role Maintenance (Single and Composite)
We are in the process of developing an ASP.NET web application which will be used to raise requests for user and role creations in SAP.
We will be making use of Sonic ESB to update SAP through IWAY SAP adapter.
IWAY SAP adapter supports RFCs, Bapis & IDocs.
We are aware of RFCs that could be used for user creation, updating and deletion.
We have NOT come across any RFCs or Bapis for role maintenance
1) We would need RFCs for the following requirements:
1) To create a new role (single or composite role ).Creating a new role would include adding transactions to a role, deriving from an existing role or assigning more than one role to another role.
2) To update a role
3) To delete a role.
4) To get the details of an existing role
If there are no RFCs for the above requirement, will we need to create a custom RFC?
If we need to create a custom RFC, are there any transactions already available for the above requirements so that we could write a RFC wrapper?
2) Are there any RFCs that would give us the complete list of roles (single or composite) in an SAP system?
3) Are there any RFCs that would give us the complete list of transactions in an SAP system?
Presently for 2) & 3) , we are making use of RFC_READ_TABLE to read SAP tables to get the list of roles and transactions.
Thanks for your answersHi,
check these FM , i dont know it will work for u or not.
BAPI_USER_ACTGROUPS_ASSIGN User: Change entire activity group assignment
BAPI_USER_ACTGROUPS_DELETE User: Delete entire activity group assignment
BAPI_USER_CHANGE Change User
BAPI_USER_CLONE Create User with Template in Another System
BAPI_USER_CREATE
BAPI_USER_CREATE1 Create a User
BAPI_USER_DELETE BAPI to Delete a User
BAPI_USER_DISPLAY Display Users
BAPI_USER_EXISTENCE_CHECK Check a user exists
BAPI_USER_GETLIST Search for Users
BAPI_USER_GET_DETAIL Read User Details
BAPI_USER_INTERNET_CREATE Create a user in the Internet
BAPI_USER_LOCACTGROUPS_ASSIGN Change Activity Group Assignment for Dependent Systems from Central Sy
BAPI_USER_LOCACTGROUPS_DELETE Delete Activity Group Assignments in the Dependent Systems
BAPI_USER_LOCACTGROUPS_READ Change Activity Group Assignment for Dependent Systems from Central Sy
BAPI_USER_LOCK Lock User
BAPI_USER_LOCPROFILES_ASSIGN Change Profile Assignment for Dependent Systems from Central System
BAPI_USER_LOCPROFILES_DELETE Delete Profile Assignments for Dependent Systems
BAPI_USER_LOCPROFILES_READ Change Activity Group Assignment for Dependent Systems from Central Sy
BAPI_USER_PROFILES_ASSIGN User: Assign profiles
BAPI_USER_PROFILES_DELETE User: Delete All Profile Assignments
BAPI_USER_UNLOCK Unlock user
Reward points if useful..
Regards
Nilesh -
Exact inbound Idoc or RFC for BP based on ROLE/Customer/Vendor ?
Hi ,
I need a inbound IDOC or RFC for Business partner in BP transaction posting based on Customer master or vendor master Role ...Hi Frederic,
I need to post data in to BP transaction(customer master data and vendor master) role using BODS via IDOC. Required IDOC's for posting. -
Bapi's for creating Maintenance order in IW31 with notification
Hi All,
Is there any bapi's for creating Maintenance order with Notification number in the transaction iw31.
Also is there any bapi's for creating measurement document.
Points will be awarded.
Regards,
vinothRFC MeasDocument: Individual Processing, Create
MEASUREM_DOCUM_RFC_SINGLE_001
RFC MeasDocument: Individual Processing, Change/Display or Read
MEASUREM_DOCUM_RFC_SINGLE_002 -
How do we create role maintenance
hi gurus
How do we create user role maintenance could any one give me step by step procedure. It will be helpful for me
Thanks in advanceHello,
The roles for the users normally created by BASIS by transaction PFCG. If you want ore details about the stepwise procedure, please post the thread in the BASIS forum.
Prase -
Create folder from role maintenance
Hi,
How can I create a folder with the name of my choice from role maintenance? I see the Role Menu from the Menu tab, but I don't see the paper icon to create a folder.
ThanksI think I don't have authorizations. I only see the + sign that says 'Authorization default' and then the vanilla folder 'Role menu'.
I just want to create a folder to put queries to the browser for the users to get to instead going through the RRMX.
Is there another way to do this?
Thanks. -
Hi Guru.
I need this: I wish to export the new and the modified roles and profiles to an external non-SAP system. This non-SAP system is able to receive iDoc message.
Is it possible? Can I find n the SAP system the change point and the iDoc to do this?
Regards
Manuel Chiarellinot for roles. no. you can:
transport them
up-/download them
RFC-copy them
but not idoc them. -
How to create transaction for a maintenance view, Thank you.
How to create transaction for a maintenance view,
Thank you.
deniz...Hi Deniz,
Go to se93.
Then create the new T.code.
Under that select parameter Transaction.
Then give the sm30 in the t.code in default values tab.
check the checkbox skip initial screen.
in classification tab.
click checkbox inherit gui attributes..
Now below..
In the default values..
select
viewname and give ur table name.
UPDATE= Xsave
view - table name ( Should be upper case
update X ( should be upper case).
http://www.sap-basis-abap.com/sapbs011.htm
Hope this helps you.
Regards,
Viveks -
How to Extract Data for a Maintenance View, Structure and Cluster Table
I want to develop 3 Reports
1) in First Report
it consists only two Fields.
Table name : V_001_B
Field Name1: BUKRS
Table name : V_001_B
Field Name2: BUTXT
V_001_B is a Maintenance View
For this one I don't Find any Datasource
For this Maintenance View, How to Extract the Data.
2)
For the 2nd Report also it consists Two Fields
Table name : CSKSZ
Field Name1: KOSTL (cost center)
Table name : CSKSZ
Field Name2: KLTXT (Description)
CSKSZ is a Structure
For this one I don't Find any Datasource
For this Structure How to Extract the Data
3)
For the 3rd Report
in this Report all Fields are belonging to a Table BSEG
BSEG is a Cluster Table
For this one also I can't Find any Datasource,
I find very Few Objects in the Datasource.
For this One, How to Extract the Data.
Please provide me step by step procedure.
Thanks
PriyaHi sachin,
I don't get your point can you Explain me Briefly.
I have two Fields for the 1st Report
BUKRS
BUTXT
In the 2nd Report
KOSTL
KLTXT
If I use 0COSTCENTER_TEXT Data Source
I will get KOSTL Field only
what about KLTXT
Thanks
Priya -
I am attempting to upload a manually edited WADConfig xml to my VM. The WAD service is functioning correctly, I needed to add some custom WinEventLogs. The prescribed steps result in an error.
What am I overlooking?
I am following these instructions:
Step 5: Remotely install Diagnostics on your Azure Virtual Machine
azure.microsoft.com/en-in/documentation/articles/cloud-services-dotnet-diagnostics/#virtual-machine
$storage_name = "wadexamplevm"
$key = "<StorageAccountKey>"
$config_path="c:\users\<user>\documents\visual studio 2013\Projects\WadExampleVM\WadExampleVM\WadExample.xml"
$service_name="wadexamplevm"
$vm_name="WadExample"
$storageContext = New-AzureStorageContext
-StorageAccountName $storage_name -StorageAccountKey $key
$VM1 = Get-AzureVM
-ServiceName $service_name -Name $vm_name
$VM2 = Set-AzureVMDiagnosticsExtension
-DiagnosticsConfigurationPath $config_path
-Version "1.*"
-VM $VM1 -StorageContext $storageContext
$VM3 = Update-AzureVM
-ServiceName $service_name -Name $vm_name
-VM $VM2.VM
Unfortunately, I am receiving this error:
Update-AzureVM : BadRequest: Invalid update to extension reference for role: XXXXXX and reference: IaaSDiagnostics.
What's missing from the above script?Hi,
Since Azure SDK 2.5 uses the extension model the diagnostics extension, the configuration and the connection string to the diagnostic storage are no longer part of the deployment package and cscfg. All the diagnostics configuration is contained within the
wadcfgx. The advantage with this approach is that diagnostics agent and settings are decoupled from the project and can be dynamically enabled and updated even after your application is deployed.
Due to this change some existing workflows need to be rethought – instead of configuring the diagnostics as part of the application that gets deployed to each environment you can first deploy the application to the environment and then apply the diagnostics
configuration for it. When you publish the application from Visual Studio this process is done automatically for you. However if you were deploying your application outside of VS using PowerShell then you have to install the extension separately through
PowerShell.
There PowerShell cmdlets for managing the diagnostics extensions on a Cloud Service are -
Set-AzureServiceDiagnosticsExtension
Get-AzureServiceDiagnosticsExtension
Remove-AzureServiceDiagnosticsExtension
You can use the Set-AzureServiceDiagnosticsExtension method to enable diagnostics extension on a cloud service. One of the parameters on this cmdlet is the XML configuration file. This file is slightly different from the diagnostics.wadcfgx file. You can
create this file from scratch by either following the article that you are referring to or you can modify the wadcfgx file and pass in the modified file as a parameter to the powershell cmdlet.
To modify the wadcfgx file –
Make a copy the .wadcfgx.
Remove the following elements from the Copy:
<DiagnosticsConfiguration xmlns="http://schemas.microsoft.com/ServiceHosting/2010/10/DiagnosticsConfiguration">
<PrivateConfig xmlns="http://schemas.microsoft.com/ServiceHosting/2010/10/DiagnosticsConfiguration">
<StorageAccount name=" " endpoint="https://core.windows.net/" />
</PrivateConfig>
<IsEnabled>false</IsEnabled>
</DiagnosticsConfiguration>
Make sure the top of the file still has xml version and encoding –
<?xml version="1.0" encoding="utf-8"?>
Effectively you are stripping down the Wadcfgx to only contain the <PublicConfig> section and the <?xml> header. You can then call the PowerShell cmdlet along with the appropriate parameters for the staging slots and roles:
$storage_name = ‘
<storagename>’
$key= ‘<key>’
$service_name = '<servicename>'
$public_config = '<thepublicconfigfrom_diagnostics.wadcfgx>'
$storageContext = New-AzureStorageContext –StorageAccountName $storage_name –StorageAccountKey $key
Set-AzureServiceDiagnosticsExtension -StorageContext $storageContext -DiagnosticsConfigurationPath $public_config –ServiceName $service_name -Slot ‘Staging’ -Role ‘WebRole1’
Hope this helps !
Regards,
Sowmya -
Create a business object for a Maintenance object
Hello,
I want to create a business object for a maintenance object to change all XML attributes to XML elements.
Should I have to change the whole XML Schema from attributes to elements one by one?
For example, I create the business object CM_Person_BO for the maintenance object Person, and use the business object to add user in a more standard way.
But it is a quite large job to rewrite the whole schema for the maintenance object Person, which has following elements, which are PersonIdentifiers, PersonNames, PersonPhones, PersonCharacteristics, Person and SeasAddress.
Is there any easy way to do it?
Thanks,
KerrShould I have to change the whole XML Schema from attributes to elements one by one?
Is there any easy way to do it?Unfortunately not, you will have to define the schema containing each field/element, once. The primary objective is that you should create a scaled down version of the BO having only the required fields or subset of available fields, you may not need all the fields of a MO. This increases performance as the IO is performed only for specified fields in the BO.
You can define separate Data Areas for each Person object's context, i.e. Identifiers, Names, Phones, etc. and include them (includeDA) within the Person BO (CM_Person_BO) for clarity. -
How to create a PR for each Maintenance Order
Dear All,
Please guide me how to create a PR for each Maintenance Order.
I test on Ides, I have some Maintenance Orders, all of them require the same stock material. When I run MRP, system always create one PR for all requirements. I don't know how to change.
Regards,
QuangDDHi,
As you planning for Stock Items, by running MRP, system will create single PR only. If it is non stock items, then it would be possible to create different PR based on Orders.
Regards,
Maheswaran. -
ERROR while CREATING RFC FOR SOLUTION MANAGER DIAGNOSTICS
Dear all,
Hi,
I am configuring solution manager 7.0.
In SPRO>basic setting >operation>solution manager diagnostics > create RFC for solution manager diagnostics i am getting this error
program WEBADMIN not registerred.
can any one tell me how to register this program in sap gateway.
best regards
azeemHi Azeem,
Just before creating the rfc connection do this step.
Set-Up Solution Manager Connection to Solution Manager Diagn
Use
Check the connection to function Solution Manager Diagnostics.
Default Settings
The function Solution Manager Diagnostics is installed on the Java instance of the Solution Manager system by default.
Activities
If the default values are correct, save the settings.
To run the Solution Manager Diagnostics in another system, enter the required data and save.
Also check that your java is active.
Regards
Ashok -
OIM 11g R1 - Container for Roles
Hi,
is it possible to create container for roles?
For Example:
Container1: RoleA, RoleB, RoleC
Container2: RoleV, RoleY, RoleZ
The reason is, i want to create authorization policies, which allows the user to assign specials roles. The problem is, that a lot of roles will be added during the operation. This means, if a new role will be created, i have to edit the authorization policy
The best way is, i assign a Role-Container to the authorization policy. If i create a new role, i add the role to the special container.
Is this possible in OIM 11g R1?
Edited by: 960944 on Apr 3, 2013 5:18 AMYes, you can do that using authorization policy.
Try this:
Create a Role called 'X'
Create a Authorization Policy of Role Management Entity Type called 'X Role Authz Policy' and under the Permission tab:
Grant Modify Role Membership, Search for ROle, View Role Detail and View Role Membership
Under Data Constraints: Add all the roles that a user can self assign except SYS ADMIN role.
Under Assignemnt: Add Role 'X'
Save and apply to test it.
You can have a look at the default Role Management All Users Policy for reference.
Regards,
Sunny -
User exit IPRM0002 for preventive maintenance
user exit IPRM0002 for preventive maintenance
has anyone used this user exit? or BADI: BAdI: IPRM_MCP_SCHE_CHANGE ?
I seem to have some difficulty in knowing how to use these....
I need to basically be able to influence a calling date for next PMorder to be opened but documentation is not explanatory and, even if I do know what these exit/badi are used for, i do not understand how to use the parameters provided.
can anyone help?Hi,
I dont think you would be able to test the exit if you dont implement them for the user exits simply passing the parameters wont help,actually there is a process of implementing a USER-EXIT i suppose u would already be familiar to it, I order to activate the exit you have to create a project in CMOD transaction and assign the enhancement to that and then also create the include that is avaliable inside the FM and there you would be able to put your code.
For the BAPIs ,yes the control should go inside the BADI once you put a breakd point inside the right method but there to you need to implement the BADI and then you can put your code in the method for the effects to take place and you can test.
The detail process of implementation are already avaliable on SCN, It seems that you dont have developer authorizations so i would suggest to take help from some one who has, Best of Luck:).
Regards,
Himanshu
Maybe you are looking for
-
Best Practice Advice - Using ARD for Inventorying System Resources Info
Hello All, I hope this is the place I can post a question like this. If not please direct me if there is another location for a topic of this nature. We are in the process of utilizing ARD reporting for all the Macs in our district (3500 +/- a few he
-
Downloading PO's into excel sheet?
Hello All! I am trying to download the po's into excel sheet through a programm. In this regard i would like to know the procedure for that. Presently my plan is to collect all the fields into two internal tables (one for header and another for item
-
So I've transferred pictures and video from my iPhone 4s and 5 to my Windows based computer running Windows 7. I attempted to play the video's in WMP and it wouldn't play the .mov files. After a search, I downloaded QuickTime as the recommended playe
-
ORA-02393 Exceeded Call Limit on CPU Usage
I have created a Profile and attached it to a user, in this example: Create Profile percall Limit CPU_PER_CALL 10 IDLE_TIME 5; I have attached it to one user - USER1 When USER1 runs a SQL Statement - SELECT COUNT(*) FROM TABLE1 A WHERE A.EFFDT = (SEL
-
Printing pdf auto portrait/landscape setting
acrobat X print of PDFs no longer has auto portrait/landscape as default but only for 1 user on the laptop. does anyone know how to amend the default setting please