Role for authorization to create sub element

Hello All,
When am trying to create a sub element in SICF it says no authorization.What is the role that i need to request to basis team?
Thanks,
Rakesh.

Hello Rakesh,
Run transaction SU53 after the authorization error to find the missing authorization objects.
Edgar

Similar Messages

HT201320 Does my email service provider have to provide the ability for me to create an IMAP email account in order for me to create Sub-folders within Apple Mail?

Hi, Apple Mail provides a function to create sub-folders within my mailbox so that I can group emails of similar subjects or from the same sender. My service provider only provides POP email protocol and the New Folder button does not appear in my Apple Mail account for that service provider. Icloud provides the opportunity for the iPad user to select between POP and IMAP. I can select IMAP and the New Folder button appears allowing me to create sub-folders within the icloud email account. Does this mean I cannot create sub-folders in my email account unless my service provider provides customers with the option of creating an IMAP email account?
This appears to be a problem for quite a few Apple Mail users, but service providers appear reticent to provide a response other than 'use Microsoft Exchange / Hotmail, Google GMail, or some other third party email service provider'. This is why I have chosen icloud as my email service provider. It is Apple and therefore Apple supports it. I have been a Telstra customer for over 15 years and they informed me today, strongly, that they support their own products and services, not Apple products, even though Telstra sell them. When I asked the Telstra Customer Support Manager whether they support Telstra customers, I was informed 'no, because the Telstra customer is not a Telstra product or service'. I have since cancelled my Telstra email account and am in the process of cancelling all of my Telstra services.

Apple Sceptic wrote:
Does this mean I cannot create sub-folders in my email account unless my service provider provides customers with the option of creating an IMAP email account?
Yes. That is what it means. You need an IMAP account in order to create sub folders on the iPad.

Com.bea.xml.XmlException error for "could not create child element"

In Workshop 9.2, after I created a project with XMLBeans Builder Builder against the xsd's and created a web service control against a wsdl, I inserted the control in a client project for consumption. However, when calling into a method of the control, I got a com.bea.xml.XmlException, saying "could not create child element" for an object parameter passed in the call to the method. The relevant info in the server console looks like this:
Caused by: com.bea.xml.XmlException: could not create child element 'wirelessPhoneNumber' for Wrapped XMLBean operation on '<?xml version="1.0" encoding="UTF-8
"?><m:sendSMSMessage xmlns:m="http://service.xyz.com/provider/mobile/abc/sendSMSMessage/200701/"><ns:behaviorVersion xmlns:ns="http://service.xyz.com/entity/message/2003/">0</ns:behaviorVersion><ns:custNbr xmlns:ns="http
://service.xyz.com/entity/party/2003/">Hello</ns:custNbr></m:sendSMSMessage>'
Does any have an idea what this is trying to tell me?
Thanks in advance for any help,
Jason

Looking into it further, I think it's the parameter wirelessPhoneNumber, which is a complex type from xsd and a java object passed to the call sendSMSMessage, that is having a namespace problem, or other problem.
This parameter object was from XMLBeans java binding. I created and set it up like this before passing it to the call:
PhoneNumberType phoneNumberType = phoneNumberType.Factory.newInstance();
phoneNumberType.setFormat(PhoneNumberFormatEnum.FREEFORM);
phoneNumberType.setFullNumber(phoneNumber);
Obviously, com.bea.xbeanmarshal.buildtime.internal.util.XmlBeanUtil.createWrappedXBeanTopElement of XmlBeanUtil.java had a problem creating a wrapper element for it.
Any clue from anyone?
Jason

How to create authorization role for just displaying query prefix Q and X.

Hi Expert,
I hope someone can help me on how to create authorization role for just displaying and executing BEX Queries prefix Q and X. I'm currently using SAP BI 7.1.
Actually, I already created one role called : Z_FORINDO_ONLYDISPLAY_QX
where I only put in the Authorization Component (in the Role Maintenance - Tcode 'pfcg'):
-->Manually Business Information Warehouse
--> Manually Business Explorer - Components
Activity : Display, Execute, Enter, Include, Assign
InfoArea : *
InfoCube : *
Name(ID) of a reporting component : *
Type of a reporting component : Calculated key figure, Restricted key figure, Template structure
--> Manually Business Explorer - Components
Activity : Display, Execute
InfoArea : *
InfoCube : *
Name(ID) of a reporting component : Q* , X*
Type of a reporting component : Query
But, the problem is I still can make changes on that queries (Q* and X*). Even, I still can run query with prefix Z. I use S_RS_RREPU Tamplete for Query Display and execution.
Please assist. Very much appreciate your help. Thanks.
Edited by: nadiyah salleh on Mar 18, 2008 11:22 AM

Question close. This issue has been resolved.

How to create a authorization role for new Multiprovider

I have a new InfoCube and a new Multiprovider on top of that cube. I would like to find how to create a role for new New Multiprovider. Can someone please provide me the step by step procedure to do this.
Thanks
Arjun

Hi,
You can check if there is a log when creating virtual machines. Hyper-V event logs are stored in the Event Viewer under "Applications and Services Logs", "Microsoft", "Windows". If yes, you can create a event rule monitor for that.
http://technet.microsoft.com/en-us/library/hh457593.aspx
Niki Han
TechNet Community Support

Create new sub-element (Service reference) SICF

Hello Friends,
I have created a new BSP extension.
Now i want to add this into SICF...as a sub element...
while trying to do this...it is throwing a error that "no authorization"...
My user is having "SAP_ALL" profile too...
Please help me, what are the other authorizations i need to do this...

Hi Ramkumar,
Have you found a solution for this problem? I'm facing the same message and can't activate my BSP now..
Thanks,
Hayo

How would you create a read/display only applicaiton montior role for SRM

Hello,
I was hoping to get some insight on how to create a display/read only SRM Application monitor role. This role would be used by our Service Desk to perform basic trouble shooting before escalating. Currently in our system it is tied into a tab named SAP Administration and has the capability of doing more than read. How do you create a read version of this to only display the application monitoring in read mode? We currently have an SRP role that has the followiing auths below. Would a EPP portal role need to be created and if so how> Thank you for any assistance.
   Manually   BBP Component                                                BBP
          Manually   SRM: General Access Authorizations in EBP                    BBP_FUNCT
           Manually   SRM: General Access Authorizations in EBP                    T-SD59003000
             Function in SRM (for Authoriza MON_ALERTS                                                                  BBP_FUNCT
- Todd

Hello,
I was hoping to get some insight on how to create a display/read only SRM Application monitor role. This role would be used by our Service Desk to perform basic trouble shooting before escalating. Currently in our system it is tied into a tab named SAP Administration and has the capability of doing more than read. How do you create a read version of this to only display the application monitoring in read mode? We currently have an SRP role that has the followiing auths below. Would a EPP portal role need to be created and if so how> Thank you for any assistance.
   Manually   BBP Component                                                BBP
          Manually   SRM: General Access Authorizations in EBP                    BBP_FUNCT
           Manually   SRM: General Access Authorizations in EBP                    T-SD59003000
             Function in SRM (for Authoriza MON_ALERTS                                                                  BBP_FUNCT
- Todd

Roles and Authorization strategy for SAP BIBO

Hello All,
We are doing an implementation where Source is a Oracle, SAP BI warehouse and BO XI3.1 as reporting solution.
Our customer has asked for the authorization strategy that will be implemented in SAP BI. Currently the users belong to different companies or plants or countries
Current structure is like,
User 1 belongs to Plant1 of Country1
User 2 belongs to Plant2 of Country2
user 3 belongs to Plant3 of Country1 etc..
We have more than 500 users who will use the reports. The user belonging to a particular plant should only see the plant data/Country data he belongs to.
As I understand, we need to create the roles in BW and these roles to be imported into BO to use for the row and column level security.
The options we considered are,
1. Use Bex queries in BW to with ABAP code in CMOD to identify the user belongs to Plant 1, 2 or 3 and provide necessary authorizations.
2. Create user groups based on the country or company they belong to and create as many roles as required. This will however impact the maintenance of so many roles in the BI system.
We are also forced to avoid Bex queries in BW and hence, trying to connect Multiproviders directly in BO universe.
How should we go forward in designing the authorization concept? Any better ideas?
Thanks and Regards,
Srinivas

There are two ways which we can implement this kind of authorization based on my knowledge.
1. Data Security purely at BW
If the data is secured based on roles and users, there is no need of additional authorization from BO side except at report and folder level if you go for SAP Authentication.
Once you use SAP authenication and enable single sign on option in universe connection, the SAP users can access data based on their profile set at BW.
2. Data Security from BO
Let's assume that, if nothing is set at BW and every thing to be take care from BO.
Then you could create one multiple provider for each plant / country. Create one connection for each multiprovider
Create restrictions (Tools--> Manage Access Restrictions) for each plant/country. There you can change connection names.
So you would need to create many restrictions for different permutations and combinations.
I never tries this option with Multiprovider. But It worked well with NON-SAP data.
Hope this helps!
Regards
Gowtham

Help Required in Authorization Roles for Workbooks

Hi All,
In our project, we have a requirement of creating a role for users with below authorizations.
1.     Can display and execute the workbooks in the role menu.
2.     Can create copy workbooks ( Save as) in the role menu.
3.     Can not delete the original and the copy workbooks from role menu.
We are using an authorization object S_RS_FOLD with u2018FALSEu2019 for restricting the user from deleting workbooks.
We also need to add one more object S_USER_AGR (without u2018Deleteu2019 property) to give the authorization of creating copy workbooks in the role menu.
Object S_RS_FOLD this is working fine without S_USER_AGR. But after adding S_USER_AGR (without delete property), user is again able to delete the workbooks.
So how can we achieve both the functionalities where user can not delete the workbook but can create copy workbooks in the role menu.
Thanks,
Sachin

Re: Adding report (query & workbook, templates) in roles
Go through this thread.
And in our Project we have created one role for accessing workbooks. in that end user can access the work book but saved one and user cannot resave or delete the work book.
we have added Auth objects S_TCODE and S_GUI.
in S_TCODE we have added RRMX and in S_GUI we have given 60(IMPORT) access to the users.
So that they can just share the workbook. nothing else can be done.
Try like this. Hope this would help you.

Hi I need help in creating role for DEVELOPERS and HCM GUYS in ERP DEV. sys

Hi Experts
I am working as a Support Security Consultant. Now I have assigned to another implemenation Project.
My client asks to create 2 roles in DEV. system the requirement is:
1) He asks to create a role for develpoers in dev system fro devepment activities ( report creation, screen creation..etc..) and these people don't modify the HR related tables
2) He asks to create role for HCM guys in development system to work on HCM Configuration and to work on HCM areas but these people should not involve into develpometn activites
My questions is what are the tcodes we have to maintain in the roles to reach his requirement.
I asked the same thing to my Client he doesn' t provide any information
Please anyone help me on this
Thanks
Naresh

Hi,
for the first query please check auth object -Authorization Object S_TABU_DIS (Table Maintenance)
http://help.sap.com/saphelp_nw04s/helpdata/en/1e/e867408cd59b0ae10000000a155106/content.htm
No Worries
KG

Cannot modify an authorization object in pfcg role for a business role

Hi Experts,
I have created two z pfcg roles from the standard business role CRM_UIU_SRV_PROFESSIONAL lets say by names zagent and zmanager. My requirement is actually to map these two pfcg roles two a service professional agent and service professional manager custom business roles respectively( I have created these custome business roles from standard business role servicepro) . I have identified an authorization object by name CRM_CO_SE which is basically used to check whether the user is authorized to create service contract transactions. So, in the agent pfcg role, I need to de activate or deselect this particular authorization object so that the agent will not be able to create service contract. (This is not a real time requirement, but an internal assignment). When I change this object in the pfcg by deselecting 'Allow' check box and try to generate, it is not getting generated. I have selected all the options from the 'Expert mode for the profile generation' and still the traffic indicator for that authorization object is yellow. Am I doing anything wrong?
Please help me.
Thanks
Ajith C

Hi Leon,
Thanks for helping me, I have restricted the unauthorized user from creating a new order by disabling the 'New' button by checking the business role in the code. The pfcg configuration, I am skipping it for now. I have one mnore requirement. When one clicks on any items in the search result for the Service Contracts, it opens the details of that service contract with an 'edit' button. I can disable this button using do_output_preparation method for the some business roles. However, I want to disable this after checking a condition. The condition is that, edit button should be active, only if that service order was created by the employee who has currently logged on. I am relatively new to CRM and I could not figure how I can check it during run time. Could any one please help me with this?
Thanks,
Ajith

How add Authorization check for user with assigened role for t.code-MIR4

Hi All,
Regarding authorization how to check authorizations check for user whith assigned roles for the t.code MIR4 using ABAP.
In Detail:2) All users are allowed to go to MIR4(invoice number), But ONLY for users with role: MM_RELEASE_INVOICE can proceed to do the posting.
suggest me...
Thanks,
srii..

Hi Sri ,
first u need to find out in which user rules u are using this object , after that if u want to restrict users then remove create/change values from that object values .
make use of Tcode SUIM to find out all roles which are using this Object.
or
ask ur basis guy to remove authorizations to create/change....
regards
Prabhu

Authorization to create PO for certain specific materials

Hello Experts,
Is it technically possible to give authorization to create PO,change PO and display PO in a Purchasing Organization based on Material? The user should be authorized to create, display or change PO in a Purchasing organization XXXX only for certain materials. How to achieve this?
Thanks & Regards
Yoga

The object concerned is M_MATE_MAR Material Master: Material Types. Although this object is only checked you may have to manually insert it in the role with the required values.Also, a pre requisite is that you may have to maintain the authorization groups for the material in the material master inorder to restrict such a change.
Baiscally you can try doing this for one material first. If it works then you can go for a mass change in all materials and maintain user roles with this object.
--- Discard my above suggestion.
It is not possible to impose such an restriction based on material type. The above object is used for master data only.
Edited by: Subramaniam Iyer on Dec 1, 2008 8:38 AM

Authorizations & Business roles for ITSM

Dears,
i would like to ask whoever implemented an ITSM as a service desk for an IT organization, after setup the Organizational Structure (Organizational Model) and setup the Organizational Unit (Sold To Part) and Org. Object (Support team).
what is the best approach to give Authorizations & Business roles for :
1) new employee joined the company as an End User (Requester).
2) new employee joined the company as one of the IT Help desk (Dispatcher, Processor....etc.)
Regards,
Yazeed

HI Shikha,
i hope you are assigning the Role to the Position cretaed in your org model.
That is by navigating thru
GO TO-DETAIL OBJECT-ENHANCED DETIAL DESCRIPTION-By creating new infotype for Business Role
here one can assign the Business Role with the position.
In case you are not assigning by above mentioned way. Try to do so. Hope this will help.
Vijayata

Maintaining sub element Costs for the Service Activity

Dear Experts & MM Gurus,
Requirement is to maintain the Sub Cost Elements for the activity and to maintain different unit & Rate for the sub cost elements .
Scenario is explained below.
1. while making Purchase Requisition for Services
in Services Tab at item level i maintained Service Activity and for that activity i had maintained sub cost elements (Such as cost estimate for the activity) like labour cost,material & consumables cost,Transportation cost with the help of Pricing MS0000.
2. My Concern is i need to maintain different unit and rate for the sub cost elements ,but system is not allowing to maintain different unit from unit available with activity unit.How can i maintain different unit for the Sub cost (pricing elements like PRSO,PRS1,PRS2) .
EXAMPLE :1. Activity is Laying of Road where unit is AU and price will be combination of all Sub cost elements .
2. Sub Cost Elements like labour cost where unit is man days,system doesnt allow to maintain this unit.
pl comment /suggest on the above scenario.
Thanks in Advance ,
Regds,
Injeti

Hi
For services, U create activity group in AC03.
U can have upto four levels.
And Model service specifications u maintain in ML10.
Then mainatin service conditions in ML33 / ML 39 based on with or with out plant.
Then create the document, the price will pick it from the conditios u maintained.
Please check and revert back
Regards,
Raman

Role for authorization to create sub element

Similar Messages

Maybe you are looking for