Role comparision in ECC 6.0
Hi,
facing issues with role comparison in SUIM in ECC 6.0
did cross system ( DEV - PRD) comparison of role.
if any authorization object is missing, it will show red signal, yellow if diffeent values of the field
now problem is when i drill down further by double clicking on the object (missing or different value)
here it show all green for both systems , even if the object is missing in one role
hope you got my point
regards,
Surpreet
Hi,
you need to make sure, that note 1322690 is applied to all of your systems.
Furthermore there is an ongoing correction for rsusr050 (please search for note 1512361, which shall be available during the next days)...
b.rgds, Bernhard
Similar Messages
-
ME49 problem(price comparision) in ECC 6.0
Hi,
we have upgraded SAP from 4.6 c to ecc 6.0.we maintained two quotations for one material with two vendors in SAP 4.6 c.After upgardation,i want to compare prices by using same quotations in ECC 6.0.but,it is throwing an error saying that
when i execute in get the message as ""Selected quotations not directly comparable""
I have maintained the prices in maintain quotation, but still i get in the field as ""quotation item not yet maintained "" in ME49.
The same quotations are working fine with 4.6 c.
Answers will be rewarded..
Sat.Hi Sat,
I think this question is the same as link that you post below
Price comparision in ECC 6.0
Please check -
Creating Roles in SAP ECC for autority in BO
Hi Guru's,
Can anyone point me to additional information about how provisioning works in SAP ECC for BO?
I am also looking for information on how to create some general roles in SAP ECC to transport into BO to control authority.
I have already read through the "Business Objects Enterprise Admin Guide".
Thank you in advance,
StevenHi,
to synchronize the roles you can use CUA. In CUA, you define 1 system as a central store for user administration and then distribute the users + roles + groups to the systems. You configure your EP and ECC to receive the user data from that system, therefor, you user information is in sync.
SAP Help: http://help.sap.com/saphelp_nw70/helpdata/EN/07/622441cd87a12be10000000a1550b0/frameset.htm
For more information, there is an SAP product: Identity Management.
SDN: https://www.sdn.sap.com/irj/sdn/nw-identitymanagement
To upload ECC roles to EP:
SDN Article: https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/06a0e690-0201-0010-4b9f-e529c345a831
User Mapping is for logging in to a backend, when the userid in the backend is different from the userid in the portal
SAP Help: http://help.sap.com/saphelp_nw04s/helpdata/en/f8/3b514ca29011d5bdeb006094191908/frameset.htm
br,
Tobias -
Mass Roles Comparison in ECC System
Hi Forum,
I am know working on Role-Redesign project, which involves about 4000 roles.
We have to eliminate the roles, which have same transactions and activities.
SUIM provides only single role comparison....
Is there any possibility to compare set (range of) of roles with a set (range of) of role in ALL-COMBINATIONS.
Regards.
Sathish Ram.Hi Surya,
There is one way. Download the roles in excel files. I would suggest not more than 80-100 roles in one go. Then for each file convert the various columns into one column using concatenate function. Now for a given set of roles you will 2 files one for each of the involved systems. Now create a third files in which you collate the date from both the original source files and then do a column comparision. It is tedious but in given circumstances the shortest way. I think it will take less time then do role comparision on one to one basis. Take help from an MS excel expert.
Regards.
Ruchit. -
Functionality wise comparision between ECC 5.0 and 6.0 for QM Module
Dear QM Experts,
Can anybody brief the comprehensive functionality wise comparision along with business benifits between ECC 5.0 and 6.0 for QM Module? For example, what are the diffrence for Quality Notification, Inspection plan, etc and other QM functionalities between 5.0 and 6.0.
Best Regards,
Anand RaoHi,
http://erp.fmpmedia.com/Default.aspx?alias=erp.fmpmedia.com/english
This link can be used for same.
Vishal -
Price comparision in ECC 6.0
Hi,
we are moving from 4.6 c to ecc 6.0.I am facing problem while comparing quotations.In 4.6 c,it is working fine but in ecc 6.0 giving an error.
I put the collective RFQ number in the initial screen while carrying out T-code ME49.
when i execute in get the message as ""Selected quotations not directly comparable""
I have maintained the prices in maintain quotation, but still i get in the field as ""quotation item not yet maintained "" in ME49.
Can anyone please suggest where am i going wrong and also whether any customiziing has to be carried out.
Please help me ASAP.
Thanks,
SateeshDear Sat,
Then , just use ME4N, enter all your quotation number, and check if there any different material number among all the quoation. The concept is that we compare quotation with same material number, not with other material number.
You can try in ME49 by remove the quotation with different material number, supposed the error won't appear.
Regards,
w1n -
SAP_AUDITOR* roles on SAP ECC 6.0
Dear all,
I am trying to check some roles existing in the Note 451960, which refer to some audit roles.
Looking for those role in my system (PCFG role name SAP*AUDITOR) I did not get the list of SAP standard roles .
Do you have some idea why? and what I should do in order I can have those standard roles in my system?
I will appreciate any help in this regard.
Thanks in advance.
FedeX>
FedeX wrote:
> Dear all,
>
> I am trying to check some roles existing in the Note 451960, which refer to some audit roles.
>
> Looking for those role in my system (PCFG role name SAP*AUDITOR) I did not get the list of SAP standard roles .
>
> Do you have some idea why? and what I should do in order I can have those standard roles in my system?
>
> I will appreciate any help in this regard.
>
> Thanks in advance.
> FedeX
Put one more * and you'll find them. PFCG->SAPAUDITOR -
What does mean by role comparision
what does mean by role comparision
Hi,
Go through this user guide doc...u could get the req info on role mitigation..
[https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/0043a8ab-bdae-2910-d8bc-cf4abd4d6bed]
[https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/403ae057-4dc2-2910-3cbb-ffdaf1bc55d4]
hope it helps... -
HI,
I need to integrate CRM-ECC customer master data.
I have the 'FI Customer' role in ECC, but I have not seen a similar BP role in CRM (that allows me to enter Company Code).
Where can I find the matching BP roles between CRM-ECC?
Any input is very much appreciated. ThanksBP data is different in CRM to ECC. Matching roles in CRM to account groups in ECC. Look at t-code PIDE in ECC.
-
Hello,
I am trying to integrate CUA into our GRC 10.1 system through the below steps and so far I have completed the below steps following SAP Notes 1680108 and 1616121:
1. Connected CUABOX to GRCBOX like a plug-in system.
2. Updated CUA Global System and CUA Model Distribution in Maintain CUA settings under User Provisioning.
3. Next I am trying to import the roles from CUA(CUABOX) into GRC(GRCBOX) to be able to provision roles in CUA Child Systems(ECCBOX).
After reading few discussions in SCN, I have figured that we have to download a template in Role Import and populate it accordingly to upload the CUA child system roles into GRC system for provisioning in CUA Child Systems.
Unfortunately, this template has multiple fields and I am unable to determine the fields that should be populated as CUA Global System and CUA Child System to import into GRC. Also, when we upload CUA Child System Roles template what selections should be made in Role Import window.
Any help in this regard is very helpful.
Thank you,
PawanHi Alessandro,
I have "Create user if does not exist" setting checked for both change action and assign role action and also have CUA enabled. Here is the list of steps that I am performing:
1. Create an access request for new account, T-CUA_CHILD and select a role from a child system ECC Z_ECC_ROLE_IN_CHILD_SYSTEM.
2. Approvals provided to assign the ECC role.
3. I see the following in GRFNMW_DBGMONITOR_WD.
Auto provisioning activity at end of request at Path GRAC_DEFAULT_PATH and Stage GRAC_SECURITY
New User:T-CUA_CHILD created in System(s): ECC (created without role assignments)
T-CUA_CHILD User does not exist in target system CUA
GRC created an account without role assignment in ECC but also throwed me an error that the user does not exist in CUA.
However, if I select roles from both CUA and ECC it creates the account in both systems with the selected role assignments.
So I am wondering if there is way to provide CUA access to users by default for new account requests types. I have tried setting up default roles for CUA but it does not assign the roles by default until I select the CUA system.
Thank you for your help!
Pawan -
4.6 C to ECC 6.0 Upgrade Project Timeline Sheet in MPP format
Dear all,
We are now proposing our customer for the 4.6c to ECC 6.0 Upgrade.
Our customer is currently in 4.6c/oracle 9i/HPUX 11 i. He wants to move to ECC 6.0.
If you have the project timeline for the above Technical Upgrade, can you pl send it to me.
If you don't have in MPP format atleast send me the Work Breakdown structure with timelines.
I shall modity the same to our customer and submit
Thanks & Regards
Senthil
[email protected]Preparation Phase* 6 days
Kick Off Meeting 1 day
Upgrade Project Procedures Preparation 1 day
Prepare Upgrade Project Plan 1 day
Technical Requirements Assessment 3 days
Assess Training needs of Key-users & End-users 1 day
Prepare Detailed Basis Activity List for DEV, QA & PRD 1 day
Business Blueprint Phase 6 days
Develop System Landscape Upgrade Plan 1 day
Functional Requirement Checklist 1 day
ABAP Development check list 1 day
Develop detailed Training Procedures & Documentation for Key Users & End Users 1 day
Identify Testing Scope & Scenarios 1 day
Identify Authorizations Conversion to Roles for SAP ECC 6.0 2 days
Develop Documents as per Basis Activity List 1 day
Develop Authorization Matrix for Activity Groups to Roles Conversion 2 days
Prepare Upgrade Deliverables Checklist 1 day
Realization Phase 28 days
Installation of Solution Manager 3.2 System 1 day
Creation of New Development System for Upgrade Project (Homogenous System Copy - PRD) 2 days
Upgrade to AIX & Oracle 10g, SAP ECC 6.0 on New Development Server 3 days
Upgrade Frontend Software 4 days
Perform SPAU & SPDD Corrections 5 days
Perform ABAP Development & Corrections 10 days Perform Authorizations Conversions and corrections after upgrade 8 days
Perform Upgrade Testing for each Application Module 7 days
Perform Unit & Integration Testing 6 days
Perform Training to Key Users & End Users (Generic & Specific) 3 days
Upgrade to AIX, Oracle 10g, SAP ECC 6.0 on Quality System 1 day
Homogenous System Copy of PRD to New Quality & Upgrade to AIX, Oracle 10g & SAP ECC 6.0 2 days Perform Testing in Quality System 3 days
Testing by end users on Quality System 1 day
Production Realization & Go-Live Phase 6 days
Upgrade to Production System Operating System to AIX (after close of business hours - 23:00) 1 day
Oracle Upgrade to 10g (after close of business hours - 23:00) 1 day
SAP Release Upgrade to ECC 6.0(Downtime Minimized - Downtime occurs in non-business hours) 2 days
User Acceptance Testing 1 day
Production System Go-Live 1 day
Post Go-Live Support 14 days
Post Go-Live Support 14 days Note: This is high level plan subject to change during Business Blue Print Phase 0 days
This is taken from a post in Ittoolbox, May be this is generic. Hope you can tailor this to meet your requirements. -
Dear All,
In GRC 5.3 we perform the following mapping:
Business Role A mapped with (no owner)
- Technical Role 1 (from ECC with Owner1)
- Technical Role 2 (from CRM with Owner2)
- Technical Role 3 (from HR with Ownwer3)
IN GRC 5.3 we have a business role mapped with multiple child role(techinical role) from other system.
GRC 5.3 request is able to close and provisioned as it can see owners from child role.
Now in GRC 10, we did the same. Create a business role, then mapped the child role (technical role). Unfortunately, when manager approves the workflow reroute to "NO OWNER DETOUR PATH" because it cannot see the technical role owner.
Seems like GRC 10 is only looking at business role owner. We are unable to add Owner1, Owner2, Owner3 to the business role because when one of the owner approves, it will provision all the technical roles. We might have owners who will reject their role.
Please advice.
JackyHi Mustafa,
you can use end user personalization to avoid a role owner to approve roles for himself. Define a dedicated EUP for role owner stage and restrict via "Approve/Reject Own Requests" like shown below:
Does this answer your question?
Regards,
Alessandro -
Defaults Roles Doubt - GRC 10.0
Hi All,
I have a query regarding default roles in GRC. In the role search screen when the user selects a role, there will be a defaults roles column which shows all existing defaults roles for different systems maintained in GRC.
Actually our client requirement is that when a user selects role for ECC only defaults roles defined for ECC should show up. But currently default roles column shows all defaults roles defined in GRC.
Is it possible to achieve our scenario? Anyone came across same issue?
Regards,
Sai.Dear Sai,
the behaviour is standard as you have defined parameter 2011 as ROLE. To change the output you might need help of an ABAPler.
Alternatively you can change parameter 2012 to REQUEST and then the requestor won't see the default roles as they are added to the request after submission. Only the approvers can see the added default roles.
Best regards,
Alessandro -
Not able to comapre roles in DEV and QAS using SUIM?
Hi,
I am trying to compare role in both DEV and QAS, DEV and PRD using SUIM t-code.
While comapring its showing that roles are in different systems, not able to comapre.
Actually role exisitng in both QAS and PRD.
Individually I can login to QAS, PRD can see the role.For role comparision both the roles must be in the same system, in same client
Transaction code SUIM -> Comparision-> Roles
If the roles are in different system, then tranport the role into one of the system and do comparision. If no transport connection defined then, you can use the upload and download option in the PFCG
comparing
Run the t-code SUIM
Go To Comparison and select the option of roles
Click on Across systems option it will give option to select the sys name under Remote Comparison there enter the SYS ID between which system you want to do comparison and put the role name in compare role section then execute it will give you the result.
If there is any difference b/wn the t-codes it will b in red colour otherwisein yellow. -
Hi All,
We r into Interior Products manufacturing inductry & currently r using SAP R/3 ECC 5.0 version.
Now, We are in a process to open around 200 showrooms or retail outlets for our products & with time the numbers
of the stores will keep on growing.
Now i want to know that should we configure all these as plants / depots in existing sap config.
Or, should we go for SAP IS Retail package.
I mean what will be more helpfull in the longrun and its advantages and implications on the current envioroment.
Can anybody provide their valuable inputs on this query.
Rgds
SudeepHi n Thnks,
But also i wanted to know how exactly IS-Retail will help us in comparision to ECC 5.0.
I mean i want to know what excatly will be the added adv. of it over ECC.
(bcoz browsing through sites / forums is not giving me much of a info.)
ALso if i change my existing ECC system to Retail what will be the implications on the current envioroment.
Can i get a Link / PPT/ article relating to this.
Thnks & Rgds
Maybe you are looking for
-
I run windows 7/8 and lightroom 5.7 I am getting an error message and here it is " lightroom encountered an error when reading from its preview cache and needs t quit" How do I fix this.
-
How to find a specific song?
I am looking for the song "To Sir With Love" by Lulu with the group The Mindbenders. My problem is that apparently there are two versions? And when I listen to the samples I can't tell if it's has the lyrics I'm looking for. I want the version which
-
CP8 Interactions and slides with audio and closed captions - not working well - please help
Okay, I am using cp8 on a windows 8 64 bit machine. I have placed an interaction on a slide. I also have audio on that slide and closed captions. When I get to the slide, the audio does not play because the mere fact that the interaction is on there
-
Need help, don't know which version to download
I am a student and I am used to using JCreator from Xinox for my compiler. For a project, i need to use speech recognition as well as java.util abilities as well as breezyswing. I could probably learn javax.swing. but what should i download to get al
-
Installation sccm client on workgroup client in DMZ
Hi Guys, i tried to install the sccm client on workgroup clients in a DMZ environment. First I created a client certifikate for the workgroup client on the sccm server and installed the certifikate on the workgroup computer with certutil.exe. command