RMAN Priviligies and Role to Create backups

Hi everyone,
I have some questions regarding RMAN backup options in my mind and want your help in their clarification.
1) We want to taken backup of Database with RMAN and for that we want to create a new Database user to take the backup rather than sys user. For this what prives this users need other than connect, quota etc. What we want to do is that we want to ensure that this RMAN user can only take backups and nothing else. I've read in the documentation that in order to take backup through RMAN ; the RMAN users must have sysdba role. Is this necessary? Don't you think this can compromise the db security?
Kindly note that currently we are using control file as RMAN repository so no need the discussion of Recovery catalog in our case.
Regards,
Kamran

All RMAN database connections require SYSDBA privilege. So if you are using any other user other than SYS then you should grant it SYSDBA privilege.
http://docs.oracle.com/cd/B19306_01/backup.102/b14192/setup003.htm#i1005954

Similar Messages

Time Machine and NAS: Cannot create backup image

I'm wondering if anyone else has encountered this problem when setting up Time Machine with a NAS. I'm using a Thecus N4100 Pro mounted via AFP. I've enabled Time Machine on unsupported disks so that I can select one of my NAS shares as the backup destination. So far so good. Time Machine attempts to create a backup and ultimately fails because it cannot create the backup disk image. Any idea what's going on?
I just set up a Time Capsule for my parents and it worked very well. I've thought about replacing my AirPort Extreme with a TC if I cannot get Time Machine working with my NAS. However, I'd rather use the NAS for obvious reasons (like, I already own it!).
Can anyone point me in the right direction? Or will this not work?
Thanks!
-Rob

A little searching of the forums answered my questions on setting up Time Machine to work with my NAS. However, I still have one question I hope someone can answer.
The instructions I found describe creating a sparsebundle and copying it to the NAS before Time Machine will work. To create the bundle, one must use the Ethernet ID of the computer. So, what if one is using two network interfaces (ie: WiFi and wired Ethernet)? I prefer wired Ethernet, but use WiFi as well when I'm on the couch, etc.
If I set up the sparsebundle using the WiFi Ethernet ID, will that prevent me from backing up when connected via wired? Or vice-versa? How does Time Capsule handle this?
Thanks,
Rob

PeopleSoft Users and roles

Hi all ,
I want to know about how users and roles are created and managed in PeopleSoft campus , any related documentation or help would be great !!
Thanks

There is and entire chapter in PeopleBooks dedicated to this subject:
PeopleBooks > PeopleSoft Campus Solutions 9.0 Application Fundamentals PeopleBook > Creating and Maintaining User Profiles

How to do Enhancements in Reporting & What is Role and How to create Roles

Hi All,
Can any one tell How to do Enhancements in Reporting, and also What is Role and How to create Roles in Reporting?
Plz reply back me on [email protected]
Regards,
Kiran

Reporting Enhancement - RSR00001 - BW: Enhancements for global variables in reporting
And using the SAP Exit - EXIT_SAPLRRS0_001
RSR00001- With this enhancement to global variables in reporting you have the option of determining your default values for variables. You can use this enhancement for variables, for which 'Processing by Customer-Exit' has been selected in the variable maintenance. This is valid for all variable types (characteristic value, node, hierarchy, formula and text variables). You use the Exit EXIT_SAPLRRS0_001 for this.
The Enhancement component (RSR00001) must be assigned to a Project Created using the Transaction CMOD. On activating the Project, the Exit would become active and in turn the logic written inside the Exit.
To ensure that the data warehousing soultion reflects your company's structure and business needs it is critical that you establish who is authorized to access the data.With SAP BW, Authorizations can be defined and maintained by object and can also be applied to hierarchies and these authorizations can be inserted into roles that are used to determine what type of content is available to specific users or user groups.
T-code for Role maintainence -PFCG.
Please assign points if it is useful.
Regards
Pavan Prakhya

Portal 7.0 and CRM 5.0 Create a new Role and enabling Quick Create.

Hi Experts,
In our Portal Scenario, we need to create a new Role and to customize it with some iviews(CRM BSP iviews).
The role was created and it works fine; in fact in the navigation it is possible to navigate in these BSP application:
1)Account
2)Products
3)Activities
My question is the following: I see that in the standard role <b>com.sap.pct.crm.salesmanager</b> (contained in the Business Package for my SAP CRM 5.0) it is possible to see in the portal desktop the functionality "Quick Create", how it is possible to enable the "Quick Create"??
Kind Regards.
Eugenio

Hi Eugenio,
Did you find how to do that? I am facing the same problem.
Regards,
Mauricio

WLST 92 - How to Create Global Role and Role Condition?

I'm currently using WLS 9.2 and trying to use WLST to create a global role and defining a role condition. Anyone know how to do so using WLST for WLS 9.2?
Trying to:
- create Global Role, testRole
- create condition where 'username = testuser'
thanks!

Did you find out a solution for this?

Rman Full and Archivelog backups

I am scripting my rman stuff and it's part of a much larger Perl maintenance. I have nightly and hourly jobs. Nightly will do a full backup and hourly will do archivelog backup. Full backups take about 2-3 hours.
My question is: is there a problem with running archivelog backups be running while I am doing a full backup. If system resources are not an issues, what are some arguments for or against it?

Thanks Tychos.
That is something that I've debated - if my full would be with Plus ArchiveLog or not. So, I've decided not to backup the log during a full backup.
This is for my nightly:
open (RMAN, "| rman target sys/$SYPASS\@$CSID catalog rman/$CATPSS\@catalog >$Rlog");
print RMAN <<"END";
run {
allocate channel d1 device type disk format \'$HBDir/$HBFiles\';
set controlfile autobackup format for device type disk to \'$HBDir/$ControlFile\';
backup as compressed backupset database;
crosscheck backup;
delete noprompt obsolete;
report need backup;}
END
close (RMAN);
This is the hourly:
open (RMAN, "| rman target sys/$SYPASS\@$CSID catalog rman/$CATPSS\@catalog >$Rlog");
print RMAN <<"END";
run {
allocate channel d1 device type disk format \'$TempArchHBDir/$BUFile\';
CROSSCHECK ARCHIVELOG ALL;
set controlfile autobackup format for device type disk to \'$HBDir/$ControlFile\';
backup archivelog all not backed up 1 times delete input;
END
close (RMAN);

Difference betwen RMAN,COLD and HOT backup

Hi Experts,
I have faces some interview question .
what is difference between COLD and HOT backup ?
what is difference between RMAN, COLD and HOT backup?

You mean the following,
Mark the beginning of the online tablespace backup.
SQL> ALTER TABLESPACE users BEGIN BACKUP;
Back up the online datafiles of the online tablespace with operating system commands. For UNIX:
% cp /oracle/oradata/trgt/users01.dbf /d2/users01_'date "+%m_%d_%y"'.dbf
After backing up the datafiles of the online tablespace, run the SQL statement ALTER TABLESPACE with the END BACKUP option.
SQL> ALTER TABLESPACE users END BACKUP;
Please visit here for more details:
Making User-Managed Backups of Online Read/Write Tablespaces
http://download.oracle.com/docs/cd/B19306_01/backup.102/b14191/osbackup004.htm#sthref1489
Adith

RMAN-05556: not all datafiles have backups that can be recovered to SCN

Oracle 11.2.0.2 SE-One
Oracle Linux 5.6 x86-64
Weekly refresh of a test db from prod, using rman DUPLICATE DATABASE, failed with “RMAN-05556: not all datafiles have backups that can be recovered to SCN”
Background Summary:
Weekly inc 0 backup of production starts on Sunday at 0100, normally completes around 1050. Includes backups of archivelogs
Another backup of just archivelogs runs on Sunday at 1200, normally completes NLT 1201.
On the test server, the refresh job starts on Sunday at 1325. In the past this script used a set until time \"to_date('`date +%Y-%m-%d` 11:55:00','YYYY-MM-DD hh24:mi:ss')\"; -- hard-coded for ‘today at 11:55’.
For a variety of reasons I decided to replace this semi-hard coding of the UNTIL with a value determined by querying the rman catalog, getting the completion time of the inc 0 backup. This tested out just fine in my vbox lab, even when I deliberately drove some updates and log switches during the period the backup was running. But the first time to go live I got the above reported error.
Details:
The key part of the inc 0 backup is this (run from a shell script)
export BACKUP_LOC=/u01/backup/dbprod
$ORACLE_HOME/bin/rman target=/ catalog rman/***@rmcat<<EOF
configure backup optimization on;
configure default device type to disk;
configure retention policy to recovery window of 2 days;
crosscheck backup;
crosscheck archivelog all;
delete noprompt force obsolete;
delete noprompt force expired backup;
delete noprompt force expired archivelog all;
configure controlfile autobackup on;
configure controlfile autobackup format for device type disk to '$BACKUP_LOC/%d_%F_ctl.backup';
CONFIGURE CHANNEL DEVICE TYPE DISK FORMAT   '$BACKUP_LOC/%U.rman' MAXPIECESIZE 4096 M;
sql "alter system archive log current";
show all;
backup as compressed backupset archivelog all delete all input format "$BACKUP_LOC/%U.alog";
backup as compressed backupset incremental level 0 database tag tag_dbprod;
sql "alter system archive log current";
backup as compressed backupset archivelog all delete all input format "$BACKUP_LOC/%U.alog";
list recoverable backup;
EOF
The archivelog-only backup (runs at noon) looks like this:
export BACKUP_LOC=/u01/backup/dbprod
$ORACLE_HOME/bin/rman target=/ catalog rman/***@rmcat<<EOF
configure backup optimization on;
configure default device type to disk;
configure retention policy to recovery window of 2 days;
crosscheck backup;
crosscheck archivelog all;
delete noprompt force obsolete;
delete noprompt force expired backup;
delete noprompt force expired archivelog all;
configure controlfile autobackup on;
configure controlfile autobackup format for device type disk to '$BACKUP_LOC/%d_%F_ctl.backup';
CONFIGURE CHANNEL DEVICE TYPE DISK FORMAT   '$BACKUP_LOC/%U.rman' MAXPIECESIZE 4096 M;
sql "alter system archive log current";
show all;
backup as compressed backupset archivelog all delete all input format "$BACKUP_LOC/%U.alog";
list recoverable backup;
EOF
And the original refresh looked like this:
>> a step to ftp the backups from the prod server to the test server, and some other housekeeping <<, then
cd /backup/dbtest
echo "connect catalog rman/***@rmcat" > /backup/dbtest/dbtest_refresh.rman
echo "connect target sys/*******@dbprod" >> /backup/dbtest/dbtest_refresh.rman
echo "connect auxiliary /"             >> /backup/dbtest/dbtest_refresh.rman
echo "run {"                           >> /backup/dbtest/dbtest_refresh.rman
echo "set until time \"to_date('`date +%Y-%m-%d` 11:55:00','YYYY-MM-DD hh24:mi:ss')\";" >> /backup/dbtest/dbtest_refresh.rman
echo "duplicate target database to DBTEST;" >> /backup/dbtest/dbtest_refresh.rman
echo "}" >> /backup/dbtest/dbtest_refresh.rman
So, my mod to the refresh was
bkup_point=`sqlplus -s rman/***@rmcat <<EOF1
set echo off verify off feedback off head off pages 0 trimsp on
select to_char(max(completion_time),'yyyy-mm-dd hh24:mi:ss')
from rc_backup_set_details
where db_name='DBPROD'
and backup_type='D'
and incremental_level=0
exit
EOF1`
cd /backup/dbtest
echo "connect catalog rman/***@rmcat"     > /backup/dbtest/dbtest_refresh.rman
echo "connect target sys/*******@dbprod"    >> /backup/dbtest/dbtest_refresh.rman
echo "connect auxiliary /"                >> /backup/dbtest/dbtest_refresh.rman
echo "run {"                              >> /backup/dbtest/dbtest_refresh.rman
echo "set until time \"to_date('${bkup_point}','YYYY-MM-DD hh24:mi:ss')\";" >> /backup/dbtest/dbtest_refresh.rman
echo "duplicate target database to DBTEST;" >> /backup/dbtest/dbtest_refresh.rman
echo "}"                                  >> /backup/dbtest/dbtest_refresh.rman
Now the fun begins.
First, an echo in the refresh script confirmed the ‘bkup_point’:
=======================================================
We will restore to 2013-08-25 10:41:38
=======================================================
Internally, rman reset the ‘until’ as follows:
executing command: SET until clause
Starting Duplicate Db at 25-Aug-2013 15:35:44
allocated channel: ORA_AUX_DISK_1
channel ORA_AUX_DISK_1: SID=162 device type=DISK
contents of Memory Script:
   set until scn 45633141350;
Examining the result of LIST BACKUP (the last step of all of my rman scripts) the full backup shows this:
BS Key Type LV Size       Device Type Elapsed Time Completion Time
5506664 Full 61.89M     DISK        00:00:03     25-Aug-2013 02:11:32
        BP Key: 5506678   Status: AVAILABLE Compressed: NO Tag: TAG20130825T021129
Piece Name: /u01/backup/dbprod/DBPROD_c-3960114099-20130825-00_ctl.backup
SPFILE Included: Modification time: 24-Aug-2013 22:33:08
SPFILE db_unique_name: DBPROD
Control File Included: Ckp SCN: 45628880455   Ckp time: 25-Aug-2013 02:11:29
BS Key Type LV Size       Device Type Elapsed Time Completion Time
5507388 Incr 0 206.03G    DISK        08:30:00     25-Aug-2013 10:41:30
List of Datafiles in backup set 5507388
File LV Type Ckp SCN    Ckp Time             Name
1    0 Incr 45628880495 25-Aug-2013 02:11:38 +SMALL/dbprod/datafile/system.258.713574775
>>>>>>>>> snip lengthy list <<<<<<<<<
74   0 Incr 45628880495 25-Aug-2013 02:11:38 +SMALL/dbprod/event_i2.dbf
Backup Set Copy #1 of backup set 5507388
Device Type Elapsed Time Completion Time      Compressed Tag
DISK        08:30:00     25-Aug-2013 10:41:36 YES        TAG_DBPROD
    List of Backup Pieces for backup set 5507388 Copy #1
    BP Key Pc# Status      Piece Name
    5507391 1   AVAILABLE   /u01/backup/dbprod/eeoi55iq_1_1.rman
    >>>>>>>>>>>>> snip lengthy list <<<<<<<<<<<
    5507442 52 AVAILABLE   /u01/backup/dbprod/eeoi55iq_52_1.rman
Notice the slight difference in time between what is reported in the LIST BACKUP and what was reported by my query to the catalog.
Continuing with the backup list, the second archivelog backup in the script generated six backupsets. The fifth set showed:
BS Key Size       Device Type Elapsed Time Completion Time
5507687 650.19M DISK        00:02:18     25-Aug-2013 10:54:53
        BP Key: 5507694   Status: AVAILABLE Compressed: YES Tag: TAG20130825T104156
Piece Name: /u01/backup/dbprod/ekoi643j_1_1.alog
List of Archived Logs in backup set 5507687
Thrd Seq     Low SCN    Low Time             Next SCN   Next Time
1    1338518 45632944587 25-Aug-2013 05:58:18 45632947563 25-Aug-2013 05:58:20
    >>>>>>>>>>>>> snip lengthy list <<<<<<<<<<<
1    1338572 45633135750 25-Aug-2013 10:08:21 45633140240 25-Aug-2013 10:08:24
1    1338573 45633140240 25-Aug-2013 10:08:24 45633141350 25-Aug-2013 10:30:06
1    1338574 45633141350 25-Aug-2013 10:30:06 45633141705 25-Aug-2013 10:41:51
1    1338575 45633141705 25-Aug-2013 10:41:51 45633141725 25-Aug-2013 10:41:55
Notice the availability of the archivelogs including the referenced scn.
Investigation of the ftp portion of the refresh script confirmed that all backup pieces were copied from the prod server.
So what am I overlooking? Having reverted back to the original script to get the refresh completed,

HemantKChitale wrote:
So, technically, you only need the database and archivelogs backed up by the database script and not the noon run of the archivelog backup.
backup as compressed backupset archivelog all delete all input format "$BACKUP_LOC/%U.alog";
backup as compressed backupset incremental level 0 database tag tag_dbprod;
sql "alter system archive log current";
backup as compressed backupset archivelog all delete all input format "$BACKUP_LOC/%U.alog";
Yet, why does backupset 5 of the noon archivelog backup show archivelogs from 10:30 to 10:40 if they had been deleted by the database backup script which has a delete input ? It is as if the database backup script did NOT delete the archivelogs and the noon run was the one to backup the archivelogs (again ?)
No, that is from the morning full backup. Note the 'Completion Time" of 25-Aug-2013 10:54:53
However, the error message seems to point to a datafile. Why would reverting the recovery point to 11:55 make a difference, I wonder.
As do I.
Also puzzling to me are the times associated with the completion of the backups. I don't recall ever having to scrutinize a backup listing this closely so I'm sure it's just a matter of filling in some gaps in my understanding, but I noticed this. The backup report (list backup;) shows this for the inc 0 backup:
BS Key Type LV Size
Device Type Elapsed Time Completion Time
5507388 Incr 0 206.03G
DISK
08:30:00
25-Aug-2013 10:41:30   ------- NOTE THE COMPLETION TIME ----
List of Datafiles in backup set 5507388
File LV Type Ckp SCN
Ckp Time
Name
1
0 Incr 45628880495 25-Aug-2013 02:11:38 +SMALL/dbprod/datafile/system.258.713574775
------ SNIP ------
74   0 Incr 45628880495 25-Aug-2013 02:11:38 +SMALL/dbprod/event_i2.dbf
Backup Set Copy #1 of backup set 5507388
Device Type Elapsed Time Completion Time
Compressed Tag
DISK
08:30:00
25-Aug-2013 10:41:36 YES
TAG_DBPROD   ------- NOTE THE COMPLETION TIME ----
List of Backup Pieces for backup set 5507388 Copy #1
BP Key Pc# Status
Piece Name
5507391 1   AVAILABLE   /u01/backup/dbprod/eeoi55iq_1_1.rman
------ SNIP ------
5507442 52 AVAILABLE   /u01/backup/dbprod/eeoi55iq_52_1.rman
Then the autobackup of the control file immediatly following:
BS Key Type LV Size
Device Type Elapsed Time Completion Time
5507523 Full
61.89M
DISK
00:00:03
25-Aug-2013 10:41:47   ------- NOTE THE COMPLETION TIME ----
BP Key: 5507587   Status: AVAILABLE Compressed: NO Tag: TAG20130825T104144
Piece Name: /u01/backup/dbprod/DBPROD_c-3960114099-20130825-01_ctl.backup
SPFILE Included: Modification time: 25-Aug-2013 05:57:15
SPFILE db_unique_name: DBPROD
Control File Included: Ckp SCN: 45633141671   Ckp time: 25-Aug-2013 10:41:44
Then the archivelog backup immediately following (remember, this created a total of 5 backupset, I'm showing number 4)
BS Key Size
Device Type Elapsed Time Completion Time
5507687 650.19M
DISK
00:02:18
25-Aug-2013 10:54:53   ------- NOTE THE COMPLETION TIME ----
BP Key: 5507694   Status: AVAILABLE Compressed: YES Tag: TAG20130825T104156
Piece Name: /u01/backup/dbprod/ekoi643j_1_1.alog
List of Archived Logs in backup set 5507687
Thrd Seq
Low SCN
Low Time
Next SCN   Next Time
1
1338518 45632944587 25-Aug-2013 05:58:18 45632947563 25-Aug-2013 05:58:20
------ SNIP ------
1
1338572 45633135750 25-Aug-2013 10:08:21 45633140240 25-Aug-2013 10:08:24
1
1338573 45633140240 25-Aug-2013 10:08:24 45633141350 25-Aug-2013 10:30:06
1
1338574 45633141350 25-Aug-2013 10:30:06 45633141705 25-Aug-2013 10:41:51
1
1338575 45633141705 25-Aug-2013 10:41:51 45633141725 25-Aug-2013 10:41:55
and the controlfile autobackup immediately following:
BS Key Type LV Size
Device Type Elapsed Time Completion Time
5507984 Full
61.89M
DISK
00:00:03
25-Aug-2013 10:55:07   ------- NOTE THE COMPLETION TIME ----
BP Key: 5508043   Status: AVAILABLE Compressed: NO Tag: TAG20130825T105504
Piece Name: /u01/backup/dbprod/DBPROD_c-3960114099-20130825-02_ctl.backup
SPFILE Included: Modification time: 25-Aug-2013 05:57:15
SPFILE db_unique_name: DBPROD
Control File Included: Ckp SCN: 45633142131   Ckp time: 25-Aug-2013 10:55:04
and yet, querying the rman catalog
SQL> select to_char(max(completion_time),'yyyy-mm-dd hh24:mi:ss')
2 from rc_backup_set_details
3 where db_name='DBPROD'
4 and backup_type='D'
5 and incremental_level=0
6 ;
TO_CHAR(MAX(COMPLET
2013-08-25 10:41:38
SQL>
which doesn't match (to the second) the completion time of either the full backup or the associated controlfile autobackp.
Hemant K Chitale
I hope this posts in a readable, understandable manner. I really struggeled with the 'enhanced editor', which I normally use. When I pasted in blocks from the rman report, it kept trying to make some sort of table structure out of it .... guess I'll have to follow that up with a question in the Community forum ....

Duplicate Problems (RMAN is looking at the wrong backup)

We are running into a problem when we try to duplicate our database. Here is the process we use to duplicate:
delete old backup files (we only use RMAN for cloning so we don't need them)
set prod db environment variables<run rman
connect target sys/####;
backup database;
exit;
set test db environment variables<shutdown test database, rename test db folder (in case we missed getting something important out) create a new folder for test db.
start test db (nomount)
rman
connect target sys/####@PROD
connect auxiliary sys/####@TEST
run
allocate auxiliary channel disk1 type disk;
duplicate target database to TEST;
we get this error:
channel disk1: reading from backup piece E:\RMAN\PROD\BKUP_PROD_610891176_1
ORA-19870: error reading backup piece E:\RMAN\PROD\BKUP_PROD_610891176_1
ORA-19505: failed to identify file "E:\RMAN\PROD\BKUP_PROD_610891176_1"
ORA-27041: unable to open file
OSD-04002: unable to open file
O/S-Error: (OS 2) The system cannot find the file specified.
failover to previous backup
The backup file RMAN is trying to read is the backup from our previous clone. How can I tell RMAN to look at the backup we just made?
I've run "list backup;" and the most recent backup is shown there. We've run into this problem a couple of times now, but not everytime. I can't find any rhyme or reason for why it works or fails but the process is the same sometimes we can just wait a half-hour or an hour and it works. Anyone have any ideas that could help?
BTW - We aren't using a recovery catalog.

http://dbataj.blogspot.com/2006/12/duplicating-database-with-recovery.html

Setting access for an account to create backups

We are moving from creating backups via stsadm to a vendor backup product. That product runs with its own sa account.
I was asked to add that account to the sharepoint farm admins group and I have done that.
I just am wondering whether that account needs to have site collection admin privleges as well to be able to backup all the site collection data?
If so, how do you handle that? typically a site collect has a primary and a secondary admin. Is there some way to set things up so that this specific sa account doesn't require being one of those 2 roles and still have the permissions needed to backup -
and recover - SP items?
Thanks for your opinions.

check the below technet and compare your account permission with it.
Configuring permissions for backup and recovery (SharePoint Server 2010)
also check this technet for more detail about the Backup & recovery.
Backup and recovery for SharePoint Server 2010
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

RMAN / channels and device types

Hello,
I have a question.
In the RMAN documentation (for instance in "Oracle Database Backup and Recovery Advanced User's Guide 10g Release 2") one can find the description / instructions how
to allocate RMAN channels and define the device types.
There are 2x described device types - DISK and SBT (Tape).
My question is:
IS IT POSSIBLE TO USE A PIPE AS A RMAN DEVICE TYPE ?
If it is not possible to define direct, perhaps there is a possibility to define it
indirect and to use a pipe to write data.
Regards.
Neitour

Thank you for the link. Is it this RMAN 'duplicate database' option, what you
would like to recommend me to use?
I think, it is not exactly what I really need. For 'duplicate database' I will need
to have as a source a backup of the database and not a running productive
database.
Is it correct?
If it is, it is not what I'd like to do.
I'd like to make a copy of a productive running database, which is placed on ASM
storage, to another server creating such a way a database also placed on ASM
storage. I'd like to do it directly. I think the best possible way can be
RMAN / BACKUP --> PIPE --> RMAN / RESTORE.
The issue is - how can I configure RMAN to write BACKUP into a PIPE and
to read data for RESTORE from a PIPE.
Any ideas?
Regards
Neitour

Background job fails for BDC profile creation and role assignment

Hi Experts,
I have created a BDC Function module for Tcode 'PFCG' for profile creation and role assignment, and called this FM in my zprogram. the problem is that when i run this program in foreground it executes succesfully, but if i schedule it in background it fails throwing error in job log 'Role 'Z...' does not contain any active authorizations'. But i have created one more program to create authorization objects which runs before this zprogram.I have also checked the authorization object in 'RSECADMIN', it reflects active. I dont understand whats happening exactly when it runs background.
Below is the process of job
   1. ZMIS_AUTH_OBJECT_CREATE
       Variant : auth-create
   2. ZMIS_AUTH_ASSIGN_TO_ROLE
       Variant : auth-assign
The problem is in second program, runs in foreground but fails in background.
Code which i have written in my second program
***BDC for Profile creation and assignment to Roles
    CALL FUNCTION 'ZROLE'
      EXPORTING
       ctu                     = 'X'
       mode                    = p_mode
       UPDATE                  = 'L'
*   GROUP                   =
*   USER                    =
*   KEEP                    =
*   HOLDDATE                =
       nodata                  = '/'
        agr_name_neu_001        = wa_role-role_name
        text_002                = wa_role-desc
        text_003                = wa_role-desc
        text_004                = wa_role-desc
       value_01_005            = 'T-ML330881'
        h_fval_low_01_006       = wa_role-auth
        profn_007               = lv_profile
        ptext_008               = lv_text1
* IMPORTING
*   SUBRC                   =
     TABLES
       messtab                 = temp_message.
***Generation of Profile created
CALL FUNCTION 'PRGN_AUTO_GENERATE_PROFILE_NEW'
     EXPORTING
       activity_group                      = wa_role-role_name
*     PROFILE_NAME                        =
*     PROFILE_TEXT                        =
      no_dialog                           = ' '
      rebuild_auth_data                   = ''
      org_levels_with_star                = ' '
      fill_empty_fields_with_star         = 'X'
      template                            = ' '
      check_profgen_tables                = 'X'
      generate_profile                    = 'X'
      authority_check_pfcg                = 'X'
   EXCEPTIONS
     activity_group_does_not_exist       = 1
     activity_group_enqueued             = 2
     profile_name_exists                 = 3
     profile_not_in_namespace            = 4
     no_auth_for_prof_creation           = 5
     no_auth_for_role_change             = 6
     no_auth_for_auth_maint              = 7
     no_auth_for_gen                     = 8
     no_auths                            = 9
     open_auths                          = 10
     too_many_auths                      = 11
     profgen_tables_not_updated          = 12
     error_when_generating_profile       = 13
     OTHERS                              = 14 .
Experts please help me out its very urgent. your help is appreciated and rewarded. Thanking you in advance.
Regards,
Chetan

Hi Praveen,
Yeah definately, my requirement is that I have to access of some BI reports to certain users, so contract data will be downlaoded from ECC on application server, need to read that file from application server and for the each contract i ahould create a authorization object, role creation and assigning of role to the user and profile generation and activation.
To achieve this i have written two programs
1) ZMIS_AUTH_OBJECT_CREATE- This program will create the Authorization Object using BDC and Role creation Using the BAPI
"" Creation of Authorization Object
CALL FUNCTION 'ZAUTHOBJ'
        EXPORTING
         ctu                    = 'X'
         mode                   = p_mode
         UPDATE                 = 'L'
*   GROUP                  =
*   USER                   =
*   KEEP                   =
*   HOLDDATE               =
         nodata                 = '/'
         g_authname_001         = 'ZDUMMY_MIS'
          g_targetauth_002       = wa_tab-auth
          g_authtxt_003          = wa_tab-short_desc
          g_authtxtmd_004        = wa_tab-med_desc
         marked_04_005          = 'X'
          g_authtxt_006          = wa_tab-short_desc
          g_authtxtmd_007        = wa_tab-med_desc
         tctiobjnm_04_008       = 'ZBUS_UNIT'
          g_authtxt_009          = wa_tab-short_desc
          g_authtxtmd_010        = wa_tab-med_desc
         marked_05_011          = ''
         opt_01_012             = 'EQ'
          low_01_013             = wa_tab-bu
          g_authtxt_014          = wa_tab-short_desc
          g_authtxtmd_015        = wa_tab-med_desc
         marked_04_016          = 'X'
          g_authtxt_017          = wa_tab-short_desc
          g_authtxtmd_018        = wa_tab-med_desc
         tctiobjnm_04_019       = 'ZCONTRCT'
          g_authtxt_020          = wa_tab-short_desc
          g_authtxtmd_021        = wa_tab-med_desc
         marked_05_022          = ''
         opt_01_023             = 'EQ'
          low_01_024             = lv_contract
          g_authtxt_025          = wa_tab-short_desc
          g_authtxtmd_026        = wa_tab-med_desc
          g_authtxt_027          = wa_tab-short_desc
          g_authtxtmd_028        = wa_tab-med_desc
          g_authname_029         = wa_tab-auth
* IMPORTING
*   SUBRC                  =
       TABLES
         messtab                = temp_message.
"" Creation of role
LOOP AT it_role INTO wa_role.
      CLEAR wa_text.
      wa_text-text = wa_role-desc.
      wa_text-langu = 'E'.
      APPEND wa_text TO it_text.
      wa_jobrole-agr_name = wa_role-role_name.
      wa_parentrole-agr_name = 'ZM_CT_DUMMY_MIS'.
      wa_method-usmethod = 'CHANGE'.
      CALL FUNCTION 'ZBAPI_JOBROLE_CLONE'
        EXPORTING
          jobrole          = wa_jobrole
         parent           = wa_parentrole
         method           = wa_method
       TABLES
*   RETURN           =
         shorttext     = it_text
*   LONGTEXT         =
*   MENU_NODES       =
*   MENU_TEXTS       =.
    ENDLOOP.
2) ZMIS_AUTH_ASSIGN_TO_ROLE - This program will generate the profile created assign it to the role.
""*BDC for Profile creation and assignment to Roles
    CALL FUNCTION 'ZROLE'
      EXPORTING
       ctu                     = 'X'
       mode                    = p_mode
       UPDATE                  = 'L'
*   GROUP                   =
*   USER                    =
*   KEEP                    =
*   HOLDDATE                =
       nodata                  = '/'
        agr_name_neu_001        = wa_role-role_name
        text_002                = wa_role-desc
        text_003                = wa_role-desc
        text_004                = wa_role-desc
       value_01_005            = 'T-ML330881'
        h_fval_low_01_006       = wa_role-auth
        profn_007               = lv_profile
        ptext_008               = lv_text1
* IMPORTING
*   SUBRC                   =
     TABLES
       messtab                 = temp_message .
   COMMIT WORK AND WAIT.
""*Generation of Profile created
LOOP AT it_role INTO wa_role.
    CALL FUNCTION 'PRGN_AUTO_GENERATE_PROFILE_NEW'
     EXPORTING
       activity_group                      = wa_role-role_name
*     PROFILE_NAME                        =
*     PROFILE_TEXT                        =
      no_dialog                           = ' '
      rebuild_auth_data                   = ''
      org_levels_with_star                = ' '
      fill_empty_fields_with_star         = 'X'
      template                            = ' '
      check_profgen_tables                = 'X'
      generate_profile                    = 'X'
      authority_check_pfcg                = 'X'
   EXCEPTIONS
     activity_group_does_not_exist       = 1
     activity_group_enqueued             = 2
     profile_name_exists                 = 3
     profile_not_in_namespace            = 4
     no_auth_for_prof_creation           = 5
     no_auth_for_role_change             = 6
     no_auth_for_auth_maint              = 7
     no_auth_for_gen                     = 8
     no_auths                            = 9
     open_auths                          = 10
     too_many_auths                      = 11
     profgen_tables_not_updated          = 12
     error_when_generating_profile       = 13
     OTHERS                              = 14
    IF sy-subrc <> 0.
      MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
              WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
    ENDIF.
ENDLOOP.
For creating authorization objects, role & profile i have created one dummy auth, dummy role & dummy profile respectively.
i have created dummy objects to copy the roles from dummy object and assign the same to new Auth obj, role & profile.
Let me know what needs to be done. because these both the programs run perfectly in foreground, but fails in background.
Regards,
Chetan

HT3275 I continue to get the following error message: Unable to complete back up.an error occurred while creating backup folder. It's a brand new drive. When I attempt to repair it using disk utility I get:unable to repair disk cannot unmounted

I have been trying to use time machine on a new lacie 2tb usb 2 drive for back up. I continue to get: "unable to complete backup.An error occured while creating backup folder". When I use disk utility to repair I get another error message: unable to repair disk unmountable.
Help me Obie One Canobie you are my last hope

I have confused myself with the facts! Started out keeping track of every step and every variable but have sort of lost it as we progress here. First I quit all applications then swapped connections between mouse port and backup disk port to influence possible bad connections question. Changed power outlet receptacle for the backup disk. Disabled the put-the-HD-to-sleep option. Then powered down the computerator.
Next started up computerator. Turned Time Machine ON and experienced multiple successful backups! Then I started up a few applications, Mail and Text Edit (but not Safari so far). Had a few more successes. After each backup, I used Disk Utility to verify the backup disk is still OK. This because the error about unable to unmount the backup disk seems to go hand in hand with Disk Utility finding the backup disk to be bad.
Put computer to sleep for the night. Upon starting up in the morning, and before doing anything else, I did a backup disk verification... BAD! Did a restart and verified the backup disk... OK.
Did a few Sleep-bad, Restart -OK repetitions.
It seems consistent: Sleeping the computer apparently messes up the backup disk but doing a Restart "repairs" it.
=============================
Now then, I don't understand everything I know here. Methinks that maybe keeping the HD from sleeping during lulls in activity has allowed successful backups through the day but manually putting everything to sleep for the night causes a return to the problem of spinning-back-up-too-slowly (which was explained earlier). Is there any truth in this?
I may abandon this Seagate thing for something more compatible. What's out there that we know works reliably for us?

Hi, just upgraded my iphone 4s to ios6. all of my playlists are gone and if i create a new one, i does not appear on my phone. itunes match is activated. can someone help me?

Hi, just upgraded my iphone 4s to ios6. all of my playlists are gone and if i create a new one, i does not appear on my phone. itunes match is activated. can someone help me?

You should be syncing your contacts with an app on your computer or cloud service (iCloud, Gmail, Yahoo, etc), and not relying on a backup. If you haven't been doing this, start now and then restore your old backup. You will then be able to sync the new contacts back into the phone. However, you will lose all messages, etc newer thant the backup.

RMAN Priviligies and Role to Create backups

Similar Messages

Maybe you are looking for