Role Areas in Favorites

Hi Experts,
Is there any way through which i can define all my role areas in my favorites ?
When i login that screen comes through which i can asses my define roles.
Thanks & Regards.
Ankur Garg.

You probably have the feature that shows blown highlights on.
Just click Feature Shift H and it will disable that option to show blown highlights.

Similar Messages

Adding T-code to Role Area Menu which doesn't exist in box

Hello,
We are using a SAP system called QIM which has "jumplink" functionality, which is a web based linked (NWBC) which will launch you into a ERP system transaction when clicked. For example, in QIM we will display a outbound delivery, and if we click on the link it launches VL03N from the ERP system and displays as web UI.
In PFCG under area menu, this transaction code appears under the menu, but VL03N doesn't actually existing in the system... The issue is we created a custom object for inbound delivery and we need ot add it under this area, but when we attempt to add a transaction code under the Role Area, the system says the t-code doesn't exist... Even when we try this with an existing t-code showing in the menu (Vl03N) it says it doesnt exist. Same if we look at the authorization object S_TCODE. These t-codes exist in here, but when you try to readd them they system says it doesn't exist.
Please find the attachments with some screen shots... Any idea how we can do this?

You can create a role menu as remote enabled remote menu.
The authority checks will happen on the remote side, also against objects which don't exist in the calling system as the music is on the other side.
On the RFC client system side, you only need the parameter transaction to start the remote transaction in the remote system.
See the documentation on SYST function module ABAP4_CALL_TRANSACTION.
This is however a rather antiquated technology... it is more popular to use a SAP Portal or webdynpro applications for this sort of thing (the user does not notice the difference) or later versions of such integration such as Fiori UIs or imbedded links within the Business Client.
I don't want to lean out the window too far, but the buggy phase of these new things is approaching an end and they are usable if you are on newer releases. Then you can pool the menu and use APIs for navigation and no more irritating S_TCODE checks.
Cheers,
Julius

How to not display nodes in a tree if Oracle roles are NOT used?

How to not display nodes in a tree if Oracle roles are NOT used?
We don't use Oracle DB roles to grant users access to Forms from the menu. We use a template and role system of our own. Basically a few tables with templates and roles.
We want to convert our normal Forms menu to a tree menu and one of our key requirements is that when the tree is populated ONLY nodes with programs (i.e. forms) he has been granted to execute is shown.
Since we don't use Oracle Roles how to do this in a tree?
I created a function to show/hide LEAF nodes, BUT problem is that there are sub-menu nodes showing even if the leaf-nodes under it has not being displayed. My function has suppressed it.
My tree query is like this:
SELECT
     t.status, LEVEL, t.label, t.icon, t.node VALUE
FROM
     tma_tree_menu t
WHERE
tma_authenticate_sys_chk_role(USER, t.node) = 1
CONNECT BY
     PRIOR t.node = t.master
START WITH
     t.MASTER IS NULL
ORDER SIBLINGS BY
t.position
The tma_authenticate_sys_chk_role will return 1 only if the user has access to the form under that node.
I tried the FTree functions in Forms but even that has nothing.
Any help would be greatly appreciated.
Edited by: Channa on Mar 17, 2010 6:49 AM

Would you share the source code? I guess what I need is how exactly you retreive the user credentials from the DB table and set that boolean variable.
and then how to condition it in UIX?

No portal roles are assigned for this user.If this problem persists, contac

I am trying to access portal first time using j2ee_admin user. It is saying "No portal roles are assigned for this user.If this problem persists, contact your system administrator."
iam using abap+java enginee how config in abap enginne ,iwant which role to assign j2ee_admin user
i already asiigned sap_j2ee_admin,SAP_BC_JSF_COMMUNICATION,SAP_BC_JSF_COMMUNICATION_RO but it show same problem
please help me..
Edited by: Mugala Balu on Aug 7, 2010 5:53 PM
Edited by: Mugala Balu on Aug 8, 2010 7:48 AM

Balu,
Well this issue has been discussed many a times in forums. You would have to point your data source to ABAP system.
Check this thread in [here|J2EE Failed to start , after changing UME datasource;.
Good Luck!
Sandeep Tudumu

Is Distributed Transaction Coordinator services of the application role are required by SQL Server 2012 for clustering and support of SharePoint 2013.

All I want to know is if Distributed Transaction Coordinator services of the application role are required by SQL Server 2012 for clustering and support of SharePoint 2013.
I have been planning and deploying my companies first Windows Server 2012/SQL Server 2012 Always On cluster and Always On Availability Groups Multi-Subnet cluster and instances for SharePoint 2013, and I will be brutally honest, the documentation on either
the MSDN and TechNet leave alot to be desired. Continually finding links in the documentation will take me from a Windows 2012 reference to a page talking about Windows Server 2008 or R2, The differences of which there are so many when it comes to configurations,
settings, roles, services when working with SQL Server 2012. I have been confused, frustrated, screaming mad, with all the misdirection in this documentation. The documentation takes me windows 2008 R2 which is different than 2012!
Tired and trying to pick myself up off the floor!
Greg
Gman

In general, DTC is not required for SQL 2012. But, since you are asking specifically about SharePoint, it would be better to ask in a SharePoint forum. They would be more likely to know those situations where FTC might be needed by SharePoint.
.:|:.:|:. tim

Roles are not updating in the GRC 10.0 System.

Hi
We had created Z role in ECC system and Ran the Sync Jobs in the GRC 10.0 System .
But the role created in backend System(ECC) was not updating in the roles of the GRC system.
Can any one provide right solution.
Thanks

Hi Wipro Basis Team
On running the sync job what are you expecting to occur when you say the roles are not updating in GRC System? I wonder if you are expecting a different outcome to the purpose of the sync jobs.
Regards
Colleen

What roles are required to use Guided Procedures?

Hi ,
What roles are required to use Guided Procedures?
Thanks
Srinivas.K

Hi,
Refer this block https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/3603. [original link is broken] [original link is broken] [original link is broken]
This blog is very useful to u and in this blog she is explained what roles to needed for Guided Procedure.The Composite Application Framework role is used for the Guided Procedure in the Portal.First create the user and then assign the CAF role for that user.This is way to obtain the Guided Procedure for that user.
Thanks,
satheshkumar.R

After Login Business roles are getting diffrent format

Dear Experts,
        After upgrading when i am login getting business roles with different format like one business role is divided into 3 to 4 lines but i want that only horizontal
means in single line.
Any help really appreciated.
Thanks & Regards,
Laxman

Hi Dhimant,
Business roles are splits like below fromat
select business role :
                                . sales
                                 organisation
                                . service
                                  organisation
                                . marketing
                                  organisation
like this my business roles are coming but i want that names in single line
. select business role
                     sales organisation
                     service organisation
                     marketing organisation
Thanks,
Laxman

BW Roles are not updated in BOBJ system

Hi All,
We have created additional roles in BW system. But these roles are not updated in BOBJ system(BI 4.0). I am not able to see these roles in SAP Authentication when we update the user option too. Any solution for this?
Regards,
Krishna.K

Thanks for the reply victor,
Users are not yet assigned to these roles. But, it should display in the left hand side while importing?
So, Is this because of no users in these roles?
Regards,
Krishna.K

What roles are required to run the export import?

Hi,
I want some info on roles are required to run the export import.
I have done the following in sys user:
GRANT EXP_FULL_DATABASE TO IMP_TEST
GRANT IMP_FULL_DATABASE TO IMP_TEST
But Doing the above command the IMP_TEST will get all priviles (also the system tables)
Is there any mechanism to restrict the user to export and import only the tables not anything?
Thanks and Regadrs

Hi!
If you create a user like this
CREATE USER imp_test identified by password;then the user will be able to import or export only its own schema. If you grant the exp_full_database and imp_full_database roles to this user like you did then the use will be able to export or import the hole database (with SYS schema). But as far as I know you can't set any more restrictions to the user.
yours sincerely
Florian W.

Re: Portal roles are Inconsistent

Recently my systems are upgraded from SP 13 to SP 16. Up to now EPA is working fine with SP13. But now I imported same EPA file in SP 16 system. In some machines some roles are working but same roles are not working in another SP 16 level systems. My Portal is not a FPN.
Regards
Narayana
Edited by: narayana on Dec 9, 2008 5:36 AM
Edited by: narayana on Dec 9, 2008 5:36 AM

Hi Michael,
My problem is solved by SAP support team. Below is the reasons and solution
When assigning a portal role to a user, permissions to the user on the
role are automatically created. These automatic permissions are called
Inner ACLs.
Sometimes, when transporting content between portals, the Inner ACLs arenu2019t created. This is why you could not see the role for the user.
After you logon to the portal with a super administrator user, change
the relative URL to : http://<server>:<port>/irj/servlet/prt
/portal/prtroot/com.sap.portal.admin.acleditor.listPermissions (you can
also do this through the URL http://<server>:<(>
<<)>port>/irj/servlet/prt/portal/prtroot/PortalAnywhere.Go and search
for "listpermissions"). After few minutes you should see a page that has the permission information of the portal. Scroll down all the way, if
you see a button on the bottom, click on it.
Thank you Michael and Others
Regards
Narayana

Profile Type Privilege Assignments through IDM roles are stuck in Pending State

Hi Everyone,
We are getting a strange problem in our project in IDM 7.2 SP8. We use IDM role based concept where backend system specific technical roles, profiles (called as privileges in IDM) combined into IDM roles and these IDM roles are assigned to users.
Events are configured on the privileges level (i,e backend system specific technical roles, profiles) in IDM so that once a IDM role is assigned to a user the corresponding privileges are assigned to user in IDM and these assignments triggers provisioning to associated backend systems.
Now for role type privileges the provisioning is working fine. But for profile type privileges the provisioning status is always showing as pending and nothing happening and even no logs are showing in job log.
I tried with execution of the mc_analyze_assignments stored procedure that came with SP08 to find the logs at least but still no information appearing. Looks like the triggering itself is not happening.
I also compared the member events definition for the profile type privileges with the role type privileges (for which the provisioning is working fine) and looks like the settings are exactly same.
Can any one suggest any other things that we are suppose to check? Any help is highly appreciable.

Hello Venkata,
did I understand correctly: You have business roles, that have SAP-profiles & SAP-roles (both privileges in IDM) assigned. Now you assign such a business role to a user, but only the SAP-roles are provisioned to the backend system and the SAP-profiles are not?
Since you can see them in the UI for the user as pending, it looks like at least the provisioning is triggered, just not completed.
You could check with the following SQL-statement, if they are waiting for the sucessful completion of another task and work your way from there:
select * from mxp_provision where msg like 'Wait for%'
The MSG-column gives you the audit-id of the "blocking" task and you can find more information about that one via
select * from mxp_audit where auditid=<auditid>
to see, what is going on there.
Also do you have access to the Monitoring-tab via http://<portalurl:port>/idm/admin? In the provisioning-audit you might find some clues for those operations, too.
Regards,
Steffi.

Users are created but Roles are not Provisioned in the Target System

Hi,
It would be great if somebody would provided solution to my problem. The problem is when I try to create the Users in Identity Managment UI then the Users are created in the Target systems but the Roles are not provisioned to the Users.
In the provisioning job SetABAPRole&ProfileForUser,
It is says In the Error putNextEntry failed storing
Exception from Modify operation:com.sap.idm.ic.ToPassException: User does not exist
MSKEY 58437
Please note the When we create the User, the user is created however the Roles is not provisioned to the user.
Regards,
Hakim

Hello Nits,
since this thread is from 2010 and the OP was logged on last in 2012 (as you can see in the profile), I don't think you'll get an answer here.
Please create a new thread to explain your problem (with version and SP numbers, logs etc). You can add a link to this thread to show, that the problem is similar.
Regards,
Steffi.

CUA issue; after roles are removed systems assigned to users remain?

Hello,
I've had this specific issue with CUA for some time, but haven't needed to try and resolve until now.
The problem is this:
- after security roles for a user have been removed for an entire system, in the system tab entries remain.
- this results in the user account remaining in the child system, even though there are no security roles assigned.
I have tried removing system entries once all roles are removed, however after saving the changes I see that the systems still exist.
So, can anyone comment on why this happens? Is there an SAP note to resolve this?
Appreciate the feedback.
Paul

Paul Vipond wrote:
Thanks Julius.
My intention is not to delete users. What I'm expecting to happen is that after I remove all the roles assigned to user for a specific child system, that user should not exist in the child system anymore.
If you delete the system assignment for a child system, A deletion of the user in that system will happen.
Paul Vipond wrote:
This is the way it has worked for many child systems, but not all. For me it's specifically my production systems where a user account remains after all the roles have been removed.
In dev/test systems I've removed all roles assigned to a user and after saving their account no longer exists in those dev/test systems.
Make sense?
If that is so, that is a bug in your dev/test system. I suggest to open an incident wiht SAP then.
It should work like in a standalone system.... Removing all roles there will never lead to a deletion of that user!
b.rgds, Bernhard

HOW MANY ROLES ARE ELGIBLE FOR THE USER

hello gurus,
how many roles can we assign to the user... what is the maximum limit of the roles and profiles for the user.
thanks in advance!
sri

Dear Srinivas,
About roles it's indeed not to easy to tell..just imagine the scenario:
1. Maximum number of profile is 312 ... (however due to some known bug system reads about 300). So, let's say 300 profile maximum can be assigned to an user
2. Now you can have single ABAP role which generally one-to-one to profile. So, this theory says if you are only assigning single ABAP roles, you can assign maximum 312 (or 300) roles.
3. But, you might also have Composite ABAP role. A composite ABAP role can have one or more Single/Composite ABAP role. So, one Composite ABAP role can correspond to any number of Profile which is determined by number of individual Single roles under than composite role. So, when you are assiging Composite ABAP role, you have to take care underlying number of profiles and make sure total does not exceed 312 (or 300 without note correction)
4. Now, last part of complication (and my favourite one). Sometimes, there is an empty Role which does not have any ABAP authorization assigned to it. But, this type of roles are used to map a authorization role in JAVA system. These roles does not have any Profile (as it does not have any ABAP authorization). Now, that brings my confusion ..What happens you assign 300 ABAP profiles via ABAP Roles and another 20 empty role for JAVA system without profile. You see my point
Hope this clarifies a bit
Cheers !!
Satya.

Role Areas in Favorites

Similar Messages

Maybe you are looking for