Role Creation for FSCM

I have a developer/functional person who continually requests FI/FSCM transactions such as OBXI. Since he is supposed to be authorized for everything except HR transactions, I initially copied all of the SAP standard menu to this role and removed HR (thinking that this included all but HR and Z transactions). However, all of the transactions that he asks for donu2019t exist in any previous roles, SAP roles, or the SAP menu but the transactions definitely exist.
My question: how, or where, is it possible to have all of these transactions that donu2019t exist in any SAP roles, the SAP menu, or SUIM? I would like to add all of these FI transactions in one transport.

Hi,
isn't OBXI a config transaction and is only accessible menuwise via SPRO?
Not all transactions are available in the SAP standard menu. There are many transactions that only are bound to report and or configuration activites that does not fit into the standard menu.
Config activities are included into SAP roles by ranges. in this case most likely OB*.
Regards Fredrik

Similar Messages

Authorization Object for role creation for query display?

Hi,
Can Anybody here tell me what is the Authorization object that we use for role creation for query display?
I want to assign a role to the newly designed query! that query does not have any role so far!
Pls suggest me
Thanks,
Ravi

Hi,
I could make the authorization tab green by entering the authorization object!
But user tab still remains red as it is not allowing me to enter my username in the user tab!
in the user tab i am unable to enter my user name?
Any suggestions?
Thanks,
Ravi

Role Creation for CMS

Hi Steve,
We use ant scripts to create domain and assign roles. But some how the scripts for role is incomplete.
Can you let me know, where the roles like 'Anonymous' and others should be specified in newly created domain. I mean where do we assign roles and privileges inside domain folders?
Cheers,
Lakshmi

Hi
> i need to create a ROLE only for Plant Maintenence (only Plant maintenence authorization).......
Search the roles for this module & make copy of this roles to zroles.After the zrole was created assign this new roles to that user.
Search the role by writing plant,maint & check which are related to plant maintenence & copy that role.
Again check all the transaction which are going to use in the module PM.Create a new role & assign this transaction in this role.this is another way to create the user with authorization only for PM.
For more details about PM modules transaction check the following link
http://www.sap-img.com/sap-pm.htm

Role creation for Plant maintenence

Hi Folks ,
i need to create a ROLE only for Plant Maintenence (only Plant maintenence authorization).......
regards
sathish

Hi
> i need to create a ROLE only for Plant Maintenence (only Plant maintenence authorization).......
Search the roles for this module & make copy of this roles to zroles.After the zrole was created assign this new roles to that user.
Search the role by writing plant,maint & check which are related to plant maintenence & copy that role.
Again check all the transaction which are going to use in the module PM.Create a new role & assign this transaction in this role.this is another way to create the user with authorization only for PM.
For more details about PM modules transaction check the following link
http://www.sap-img.com/sap-pm.htm

New role creation for display

Hi,
We want to create a role such that the users can see only the pricing but not the costing, for sales quotations and orders, for a particular distribution channel?
Regards,
Ajit

Hi Ajit,
If you wish to create a new Role, Use T. Code: PFCG.
Once created assign the same role in to User's Profile Via T. Code: SU01.
Here itself, in Authorization you may add T. Codes (for Display) and also define/ restrict User's view/ access to Sales Area data (i.e. Distribution Channel).
Better to take help from Basis-Administrator as its purely Basis-job.
Best Regards,
Amit.

Role creation for CATS

Hi all,
How can i create roles and authorisations fo CATS.I need to know how can i find out what are all roles required to manage CATS?
Give me inputs of source where i can find out some roles?
Regards,
Hema

Hi Hema,
The roles and authorizations depends on the work that a particular user is doing.
My suggestion :-
Have a discussion with your super user and find out what are all the tcodes that user is using.
Keep that tcodes in mind create one role to user and assign it.
There might be a specific tcodes to approver also.
Thanks
K. Bhaskar

Role creation for web report

Hello All,
Can any one provide step by step solution to assign web report to role.
Thanks & Regards,
Suneel

Role Menu/Bookmarking/Web Reporting in NW2004s
Hope it Helps
Chetan
@CP..

Request Number is not generated for BRM "new" role creation

Hello Gurus,
I have configured BRM in SAP GRC AC 10, along with the workflow .
I have selected the following methodology
Define Role --> Maintain Auth >Analyze & Access Risk>Request Approval>Generate Roles>Maintain Test Cases
Role name : Y_TEST_BRM_FUNCTIONALITY
So i do the following steps and assign
1) Role approver as Mr. ABC & Alternate approver as Mr. QRS
2) Assign the Required transactions and do the RAR i.e i am done till step 3 of methodology
When i click "Initiate Approval request"
The approval triggers , and goes to the 1st stage as configured in MSMP
1) Power User Approval .
Here the Power User : EFG , open his workflow and see the request as
Role approval required for role Y_TEST_BRM_FUNCTIONALITY
The approver approves the request and then the request all together vanishes.
Unfortunately i am not able to search the request for that role from NWBC -->Search request by
Process Id : Role Approver Workflow
It gives blank !!
Hence neither i am able to find the request no able to do any debugging of it using
GRFNMW_DBGMONITOR_WD
Please note that the Request Id is created for any request in CUP.
Is it that i have to create a number range for BRM request ??
If so will you please let me know the object

Hello All,
I was wrong in posting the cause of problem.
Please note no "Request number" is generated for Role creation Request.
The problem was i was unable to search the Role Request approval status from "Search Request" via Process Id
It got resolved via SAP note 1643539 : UAM: Search Request not returning result for some Process Id.
My Issues is Resolved.
Thank You.
Regards,
Victor

Program for PFCG Role Creation

Hi Guys,
I have a requirement for creating a program that will automate the Role Creation (Transaction PFCG)
I have the following Questions.
Is it Really possible via Program.
The expectation is in selection screen user will give the Standard and Derived Role after execution he expect the role to be created.
If anybody have experience in the same scenario kindly share me.
Regards,
Vijay.

Try with PFCG_START_PFCG
G. Lakshmipathi

Business Partner creation for Customer Master creation

Hi
We have customized our system in order to trigger the creation of Business Partner whenever a Customer Master is created.
I created some customers for which the Business Partner creation was not triggered due to some reason.. In order to manage the same, i created a Business Partner manually and tried to link the same to my customer through T Code FLBPD2, but system returned with a message "The business partner could not be linked to the customer selected" Message Number CVIC_UI023.
Can anyone suggest something.
Thanx in advance
Pankaj

Hi Pankaj,
Please check wether you configured all required node under Master Data Synchronization..In SPRO..I am referring to below node.
Active Synchroniztion Options
Set BP role Category for customer Integration
Define BP Role for direction customer to BP
Field Assignment for customer Integration
Thanks
Veman.

BRM-No Role Creation

Hi gurus,
I have just upgraded my GRC 10.0 to SP18 and when I access to create a new role in the NWBC, the button is in grey, I mean, I can not start the creation of it. However, I can modify the roles without problems.
Any idea of what can be happening?
Thanks,
Regards,

Hello All,
I was wrong in posting the cause of problem.
Please note no "Request number" is generated for Role creation Request.
The problem was i was unable to search the Role Request approval status from "Search Request" via Process Id
It got resolved via SAP note 1643539 : UAM: Search Request not returning result for some Process Id.
My Issues is Resolved.
Thank You.
Regards,
Victor

Role Creation in CUP 5.3

Hello,
I'm trying to understand the concept of what is called "role creation" in Compliant User Provisioning.
My understanding is that the "create role" option in CUP (configuration>Roles>Create Role) means simply adding the "attributes" such as a business process, functional area, system, or company, to the SAP roles that you imported into CUP.
It seems that, with CUP, once you have imported SAP roles and "adjusted" them (adding attributes), you are no longer operating PFCG and SU01 in the SAP backend system. From this point on, everything is done in CUP (provisioning) and ERM (creating additional roles).
Please tell me if I'm wrong.
HM

HM,
The create role option in CUP is mainly for legacy/non-cup supported systems. This way you can follow the standard workflow process for LDAP/Windows/legacy system. In this user provisioning and role assignment will not be done through CUP and will be manual. This is very important for some companies as they want user to go through same process if they want to get access to any system and not only ERP system.
The below statement is wrong.
It seems that, with CUP, once you have imported SAP roles and "adjusted" them (adding attributes), you are no longer operating PFCG and SU01 in the SAP backend system. From this point on, everything is done in CUP (provisioning) and ERM (creating additional roles).
If you don't have ERM then you will have to use PFCG. Once you have CUP, you don't have to use SU01.
Regards,
Alpesh

How to raise role creation/modification request in AC 10

We are implementing AC10. I have issue more related to the process followed than technical. Please suggest from your experience.
We found that we can raise the request for new user account, role assignment to user, etc in Acess Request(formerly CUP), but we cannot raise the request for role creation, role modification. This is directly done in Role management. My question is, how the security admin will recieve the requests for creating or maintaining the roles. Is it necessary to use ticketing tool for users to raise the request for role creation and modification.
Thanks everyone for your valuable solutions.

Dear Ashish,
Whatever you have mentioned is correct to have the common platform for every request, either for user creation or role creation.
But what we decided earlier, that the end users can raise the request in CUP directly, rather than involving security admin. But after realizing that there is no request type for role creation, I think we have to use our ticketing tool as a common platform.
Request will come to security admin from the ticketing tool and than he will create the request in CUP, thereafter it will follow the approval workflow. Only problem I see in this, it goes to the manager twice, once in ticketing tool and than through CUP workflow. i think we need to take out the manager stage from the workflow.

Idm-Vaau Rbac role creations and mapping

Hi All,
I'm working on the integration between Idm and Vaau's Rbacx (role based access control) tool for role creation and provisioning...I've imported the spml.xml and SPMLGetObjectsform.xml into Idm for the SPML calls between Rbacx and Idm.
The challenge I'm facing is mapping the attributes of Rbacx roles to enable the attributes to be populated in Idm...I'm able to export roles into Idm, but they are not populating with any attributes eg. resource type, resource attribute etc. I'm uncertain as to where I have to map these properties and do any customization for this to work. I would appreciate if anyone who has worked on this or know how to do this, to pls give me some pointers/share your experience. I don't have any documentation to refer to and am doing everything on trial and error basis.
Any help is greatly appreciated!
Thank you.

Hi newbie,
Were you able to solve this issue? I am facing the same problem while assigning resource attributes for a created role using a custom workflow.
This is where I set the resource attributes in my workflow:
<Action id='1'>
<expression>
     <block trace='true'>
     <set><ref>role</ref><s>assignedResources[AD].attributes[AD Groups].valueType</s><ref>ADGroupsValueType</ref></set>
     <set><ref>role</ref><s>assignedResources[AD].attributes[AD Groups].requirement</s><ref>ADGroupsRequirement</ref></set>
     <append><ref>role</ref><s>assignedResources[AD].attributes[AD Groups].value</s><ref>ADGroupsValue</ref></append>
     </block>
</expression>
</Action>
where <ref>ADGroupsValue</ref> contains the attribute value.
thanks,
Lokesh

Approval of role creation

Hi All
I need to create a WET for role creation, this is simple But I need to incorporate approval of the creation of the new MX_ROLE entry. I can only find documentation/guides on how to implement approval of role and privilege assignment. Does anyone know if it is possible to setup approval on creation on a new entry?
Kind regards,
Heidi

I have tried to implement the MX_INACTIVE solution. Now it is not possible to see the role on the "Adminstrate"-tab, and there is an approval task on the "To do"-tab. When I click this task, details on the role are displayed properly, but when I try to process the request by clicking the "Show request"-button (button name translated from Danish, it might be translated differently...) I get an error: "Access denied".
I have set correct approver on the approval task, and I was able to process approval requests, before I set the role to inactive.
On the approval task, I have checked the "Use inactive entries" checkbox.
Does anyone have an idea what could be wrong?
Kind regards,
Heidi Kronvold

Role Creation for FSCM

Similar Messages

Maybe you are looking for