Role Comparison Cross System - alternatives to RSUSR050

Hello Experts,
Would there be an alternative for Cross system role comparison outside of using RSUSR050 ?
We have a variety of landscapes and are on different basis levels...SAP notes have corrected all but one
which is older release level- business not ready to upgrade this one
I have dabbled with SCMP tcode but results are not clear or complete. I was using table AGR_1250 and 1251
Any thoughts appreciated ..
Dan.

Thanks Bernhard,
i guess i need a little instruction on how to use this tcode (if that's the best method). When i compare  2 roles that are different
SCMP notes they are the same ? but i notice there is a field that selects Role id - only allows one numeric input. Can't seem to
get an entire display of the auth objects. I did this by entering our RFC dest and table name AGR_1251.
Any other alternatives.   The SUIM (RSUSR050) works fine functionally and we have RFC dest but because of the differing Basis levels on this particular destination server- the results are erroneous and incomplete.  Thanks !

Similar Messages

  • How to create Cross system role - Access Enforcer

    Hi,
    What is mean by cross system composite role, how should we create that.
    Thanks&Regards,
    Vijay

    This would be a reference to CUA.  You can define a composite role in the CUA system that contains single roles from the child systems.  When a user is assigned the composite role, CUA automatically provisions the user and appropriate single role assignments to the appropriate child systems.
    This simplifies things for the AE end user.  Rather than having to select multiple single roles from multiple systems in the request, they can select one role from the CUA system (representing their job).  CUA takes care of the rest.

  • Mass Roles Comparison in ECC System

    Hi Forum,
    I am know working on Role-Redesign project, which involves about 4000 roles.
    We have to eliminate the roles, which have same transactions and activities.
    SUIM provides only single role comparison....
    Is there any possibility to compare set (range of) of roles with a set (range of) of role in ALL-COMBINATIONS. 
    Regards.
    Sathish Ram.

    Hi Surya,
    There is one way. Download the roles in excel files. I would suggest not more than 80-100 roles in one go. Then for each file convert the various columns into one column using concatenate function. Now for a given set of roles you will 2 files one for each of the involved systems. Now create a third files in which you collate the date from both the original source files and then do a column comparision. It is tedious but in given circumstances the shortest way. I think it will take less time then do role comparision on one to one basis. Take help from an MS excel expert.
    Regards.
    Ruchit.

  • Cross System Lock using for roles?

    Hi everybody,
    maybe one of you can support me or have some experiences in case of using the Cross System Lock. We are checking the possibilty to implement the Cross System Lock (using in ChaRM, Scenario E (/TMWFLOW/Config_Lock).
    First of all, we made a successful test in usage of table content.
    Example:
    You save a table modification in a Transport Request generated in ChaRM. Thus, the Transport Request is buffered in a Change Document. The result is that the table modification is locked in the object-monitor (/TMWFLOW/LOCKMON).
    However, you save a role (pfcg) in a Transport Request generated in ChaRM the included objects in this role are not buffered in the object-monitor (/TMWFLOW/LOCKMON)
    Thanks for your answers!
    Best regards
    Joachim Eichner

    If you use the report TMW_TRKORR_LOCK_UPDATE against the role transport after saving your changes in it, this will register the role objects in the CSOL.
    The Role transport tool does not automatically trigger the FM that registers the objects in the CSOL, just like manually adding objects to a transport doesn't trigger it. Therefore the workaround is to run this report. Only the transport owner is allowed to run TMW_TRKORR_LOCK_UPDATE.
    In our experience it is not that CSOL does not support roles and authorizations; for the purpose of retrofit, it is able to detect conflicts reliably if the report is run consistently after saving role changes to transport. If no conflicts exists, auto-import works fine. If conflicts exist, then roles must be manually retrofitted.

  • Cross-systems analysis and max. rules for a risk

    Hi all,
    Customer environnement: GRC AC RAR 5.2 linked to 3 R3 4.6C environments (FB0, FB1 and FB2) with different purposes. Users and roles can exist in the 3 systems so we need to run cross systems analysis.
    It turns out that the cross-systems analysis works well only if you declares the functions on only 2 environments (FB0 and FB2 or FB0 and FB1).
    If we declare the functions on 3 environments (FB0, FB1 and FB2) one reaches the maximum number of rules for a risk, namely 46 655.
    This limit is it revised upwards in version 5.3 (if yes, how?)
    Or there happens a workaround solution to run cross system analysis on multiple physical systems (the customer environment target is 6!) ?
    Regards

    The limit is based on the number of character combinations are available for a risk, so if the number of characters has been increased thenteh number of rules available won't have been increased.
    In AC 5.3 the number of characters for a risk ID is 4 which is the sames as AC 5.2 therefore I doubt trhat the limit has been lifted of the code changed to accomodate mor rules per risk.
    The only way around the issue is to create smaller risks instead of looking in systems 1, 2 & 3 look in 1 & 2, and 2 & 3 and 1 & 3.  Not ideal but at least you will get some results.
    Sounds likje an enhancement request needs to be raised to me.

  • Cross system SOD check

    Hi All,
    We have SAP Compliance Calibrator by Virsa Systems Release 4.0 . One of the clients does not have Virsa installed and we need to check for user and role SOD conflicts in this client. Please advice what are the settings required for cross system connections and how to run the reports for remote checks. Also, will this affect any existing settings / setup?
    Many thanks
    Vijaya

    Vijaya,
      As far as I know, you will need CC 4.0 RTA installed on every system. Please open a message with SAP and check with them. Most of the customers have moved to RAR 5.3 which is the latest and advanced version of CC 4.0 and I will recommend you to upgrade to RAR 5.3.
    Regards,
    Alpesh

  • Intercomany Asset Transfer - Cross System

    Hi All,
    We have a requirement to do intercompany transfer of assets across system. One company code is in one system and the other one is in different instance.
    I researched on SCN and got to know about ALE scenarios for Cross-System Asset Transfer. (https://help.sap.com/saphelp_globext607_10/helpdata/en/47/e49bf3c3f511d1952f0000e82debf7/content.htm?frameset=/en/47/eb0…)
    Wanted to check if someone has experience with this scenario (interco asset transfer between different systems) or is there any alternative solution.
    Thanks,
    Mayank Agarwal

    Please go through with the link, it might help you. If it will help you please assign point to me.
    Basics of Asset Accounting - Asset Transfer (Intercompany) - ERP Financials - SCN Wiki

  • ChaRM:Cross system object lock:Ovelapping

    Hi Friends,
    In SE38, while activating the service "/TMWFLOW/CONFIG_SERVICES", i am seeing following conflict scenarios:
    Cross-Project, Client Specifi, Ovelapping
    Cross-Project, Client Specifi, Partial Ovelapping
    What is the meaning of overlapping? In which scenario it can be used?
    Thnaks for your input
    PSK

    Hi
    There is a feature call cross object locking in solman it is used for that
    you can check below note for all the available modes
    Note 981729 - Cross-system object lock: Alternative lock modes
    Hope it solved ur basic doubt
    Regards
    Prakhar

  • Cross system lock for Contracts

    Hello Experts,
    I really appreciate if someone route me in right direction for below scenario:
    Requirements: We used standards SALESCONTRACT object to download salescontracts from R3 to CRM, additonally development custom XCONTRACT object to replicate from CRM to R3. Now I would like to introduce cross system lock similar way of Sales Order. Do you recogn this will work out or any other suggestions?
    Thanks,
    Bob

    If you use the report TMW_TRKORR_LOCK_UPDATE against the role transport after saving your changes in it, this will register the role objects in the CSOL.
    The Role transport tool does not automatically trigger the FM that registers the objects in the CSOL, just like manually adding objects to a transport doesn't trigger it. Therefore the workaround is to run this report. Only the transport owner is allowed to run TMW_TRKORR_LOCK_UPDATE.
    In our experience it is not that CSOL does not support roles and authorizations; for the purpose of retrofit, it is able to detect conflicts reliably if the report is run consistently after saving role changes to transport. If no conflicts exists, auto-import works fine. If conflicts exist, then roles must be manually retrofitted.

  • CSOL Cross System Object Lock - RFC error in satellite system

    Hi
    We are currently implementing Solution Manager 7.1 (ChaRM) and of the mandatory requirements is to activate Cross System Object Lock.
    I have globally activated this in Solman and have gone into /TMWFLOW/CMSCONF to activate for our development client. This is now activated.
    A transport has now been created in ChaRM and I login to the above mentioned development system and make a customizing change. I then choose the transport and save change. I am presented with an error:
    "Error in RFC SM_DSMCLNT001_BACK to Solution Manager System" (Message No. STMWFLOW025)
    I have now been looking at this for a few hours and found OSS Note 824521. However, I have already done all this. From a RFC perspective we have:
    SOLMAN:
    SM_DSMCLNT001_BACK - works fine in SM59. The assigned user has all the correct profiles.
    In transaction SDCCN, the above RFC appears also.
    In transaction SM30, table BCOS_CUST, "CHARM_DEST" and "OSS_MSG" are both set to destination NONE.
    SATELLITE SYSTEM:
    In transaction SDCCN, the above mentioned RFC exists
    In transaction SM30, table BCOS_CUST, "CHARM_DEST" and "OSS_MSG" are both set to the above mentioned RFC
    The user SMB_DSM for the RFC only exists in Solman and not in satellite system. Don't think this is needed though.
    As soon as I deactivate CSOL in /TMWFLOW/CMSCONF in Solman (for development client), I can make changes and the above error (in red) does not appear. However, we needed CSOL working and this error not to appear.
    Any suggestions???
    Thanks
    Shaun

    Ok, the resolution was to ensure SMB_X82 (in Solman) has the following roles and profiles:
    Roles
    SAP_SOLMANTMWCOL
    Z_SOLMAN_BACK
    Profiles
    D_SOLMAN_RFC
    S_BDLSM_READ
    S_CSMREG
    S_CUS_CMP
    S_SD_CREATE
    S_TMW_ADMIN
    This resolved my issue.
    Thanks
    Shaun

  • Logical Systems vs Cross Systems

    Dear all,
    I have two physical SAP ERP systems grouped under one logical system.
    Now I want to connect to a third SAP ERP system in order to execute Cross System analysis between the systems under the logical system and the new third system.
    I understand that I cannot do a Cross System RA on systems of the same logical system so that´s the reason why I need to set up the third system as a single new ERP system.
    Anyhow the new ERP system should use the same rule set than the two systems of the logical system.
    So I´d just like to set up the new system connector for the GRC 5.3 but I do not want to load the same rules again for the new ERP system, etc.
    Is this possible? I tried to create a new logical system containing the new ERP system and regenerate the rules for the logical systems. But after that no simple RA is possible for the new ERP system.
    Thanks for any advice and regards,
    Markus Richter

    Hello Markus,
      Yes, you are right that you can not include the third system in the same logical group if you wish to use it for cross-system analysis. If you choose to have this as a stand alone system in RAR then first you will have to upload the rules for this stand alone system in RAR. The rules loaded for logical system will not work for this system as it is not part of the logical system group.
    Regards, Varun

  • Error while performing Risk Analysis at user level for a cross system user

    Dear All,
    I am getting the below error, while performing the risk analysis at user level for a cross system (Oracle) user.
    The error is as follows:
    "ResourceException in method ConnectionFactoryImpl.getConnection(): com.sap.engine.services.connector.exceptions.BaseResourceException: Cannot get connection for 120 seconds. Possible reasons: 1) Connections are cached within SystemThread(can be any server service or any code invoked within SystemThread in the SAP J2EE Engine), 2) The pool size of adapter "SAPJ2EDB" is not enough according to the current load of the system or 3) The specified time to wait for connection is not enough according to the pool size and current load of the system. In case 1) the solution is to check for cached connections using the Connector Service list-conns command, in case 2) to increase the size of the pool and in case 3) to increase the time to wait for connection property. In case of application thread, there is an automatic mechanism which detects unclosed connections and unfinished transactions.RC:1
    Can anyone please help.
    Regards,
    Gurugobinda

    Hi..
    Check the note # SAP Note 1121978
    SAP Note 1121978 - Recommended settings to improve peformance risk analysis.
    Check for the following...
    CONFIGTOOL>SERVER>MANAGERS>THREADMANAGER
    ChangeThreadCountStep =50
    InitialThreadCount= 100
    MaxThreadCount =200
    MinThreadCount =50
    Regards
    Gangadhar

  • IDocStatus:Error in ALE service Cross-system company code does not exist

    HI All,
    I am sending CREMAS04 IDOC from XI to one R/3 system,and in R/3 a vendor should get created in master table.
    My IDOC is getting posted successfully but in R/3 system I am getting error that
    IDoc: 0000000000705816 Status: Error in ALE service
    T100 Text: Cross-system company code XXX does not exist
    I have created partner profiles in receiver system and in partner profiles I have set the process code as CRE1.
    Please help me to resolve this problem.

    Hi Shweta
    Have you checked with the data i.e. company code .
    May the company code which you are passing is not there in ur receiver system.
    Just check it out.
    Regards
    -Mitesh

  • AE 5.2 cross system risk analysis with CC 4.0

    Hi,
    We have an unique situation.
    We have CC 4.0 (central) set up in ECC system where the rules and risks are defined for systems such as R/3, HR and SRM
    We need AE to use this central CC system to do the risk analysis when an access request for HR or SRM is submitted in AE 5.2. Right now for a request to a HR system, risk analysis is being done in HR system where there are no rules and hence no risks are identified.
    Environment :
    CC 4.0 in  ECC 5.0 with VIRSANH RTA 520_640 Level 3 and VIRSAHR RTA 520_640 Level 2
    AE 5.2 JAVA in NW 7.0 SP level 2
    Risk analysis for Access requests to ECC system is done with out any issues and the connectors in AE are defined as well as CC 4.0 configuration for cross system is enabled.
    Please give your suggestions and also tell me if this below scenario is possible.
    Use CC 5.2 Java stand alone system and define logical/cross system to connect to multiple systems such as HR and SRM and use those specific rules to do the risk analysis.
    Thanks

    Hi RM,
    You can setup Risk Analysis inside AE Configuration.
    You can identify the level of risk analysis and specify the Compliance Calibrator version for processing risks.
    See the details from the AE Configuration Manual
    In the Select Compliance Calibrator Version pane, from the Version drop-down list, select the version of Compliance Calibrator.
    In the URI field, enter the appropriate URI address for the web services.
    In the User Name field, enter your User ID. Your User ID must have security access
    to web service.
    In the Password field, type your password.
    Select the Perform Org Rule Analysis option to perform org. rule analysis at risk
    analysis time.
    Note: There are two selectable versions of Compliance Calibrator. If you select 5.0 Web Service, three additional fields appear (URI, User Name, and Password). For the URI field, you need to navigate to the
    SAP NetWeaver Web Application Server Home page > Web Services Navigator > CCRiskAnalysisService > WSDLs > Standard link of Document, where you will see a list of all web
    services in the server. Select the desired URI address.
    If you select Compliance Calibrator 4.0, there is no need to connect to a URI address
    So the answer is YES, you can connect AE  5.2 with CC 4.0 for Risk Analysis.
    Hope this helps,
    Regards,
    Kiran Kandepalli.

  • Cross-System Depreciation Area Transfer

    Hi,
    I need to execute inter-co asset transfer between COD that have different depreciation areas.
    For eg,
    COD 1 - book depreciation area 01, tax depreciation 02
    COD 2 - book depreciation areas 01, US tax depreciation 10, 11,12,13
    Can anyone advise how do I configure the above? The transfer to book area should be using gross method and to tax area should be net method.
    Thank you.

    HI,
    Following are the steps required for the configuration as per your requirement
    1. define cross syteme depreciation area for both book of depreciation and tax of depreciation  in each company company code and as per the requirement mentioned check tax depreciation area  in COD 1 whethere any functionality (properties)of the tax  depreciation area mentioned in COD2 ma tches if it matches then we can mapp the cross system depreciation area to that particular depreciation area.
    2. check comapny id : whether it is legal entitiy( company code assigned to same company)
                                         whether it is independent legal entity ( company code assigned to different company)
    3. create transfer variant  enter the cross system depreciation area and mentioned transfer method( 1- gross method 2- nett method) and mention the transaction type one for retirement and acqusition resp  and mention the transaction type fro prior acq and current year acqsition.

Maybe you are looking for