Role in PFCG : Restriction at MFBF

Hi,
I want to have a restriction for the transaction MFBF at the production storage location.
1. When i creat a role for the T-code MFBF, i found only the receiving storage location of repetitive manufacturing but not the production storage location. The production storage location is the storage location of component modified in Post with correction.
It's possible to restruct this role and limitate the Mvt if the storage location is different of the storage location autorized.
2. How can we block the modification of the production storage location in "Post with correction".
Thanks.

make the transaction varinant for that scree,
use trx code SHD0, put tx code COGI , in screen varient put programm . and screen SAPLCOWB and 130.
and then create trx variant also.
and then assgin, this to to variant.
and use that.
if u want to restrict at MFBF also. then also use the same thing.
REgards,
Pravin Mukkawar

Similar Messages

Mass roles deletetion (PFCG ?)

Hy,
I'd like to do a mass roles deletetion as : "all client roles begining with ZFI* ".
I did nt see anything with : PFCG, SE16 on TSTCT, SE38 (abaps like "PFCG*"),...
Have you an idea ?.
Thank's a lot.
Etienne

you use sap standard authorization object and not reporting authorization object that we create.
using PFCG create a role and assign with authorization object s_rs_comp twice, one combination of with display(02) and query = * and the other change and az*.
you may need s_rs_comp1 also, take a look this how to doc
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/fda2a990-0201-0010-5497-b81b1556df24
hope this helps
RSUSR002_ADDRESS - Users by address data
In 4.6x you used Role for each users and SAP will generate the necessary profiles and authorizations.
PFCG - Basic Maintenance
Type in a meaningful ZXXX role name and click Create
Menu -> Transaction (insert all the transaction code for this role)
Authorization -> Change authorization data -> Generate
You can create a customizing role in PFCG:
in the menu tab utilities/customizing auth; you can use a project IMG (maintainable in SPRO) to restrict the authorizations for example to FI or CO.
regards
vinod

Business Role and PFCG Role

Hi all,
I am new to CRM 7.0 Can someone explain What is a Business Role in CRM 7.0 and what is the relationship between Business role and PFCG role. What is the transaction Code to create a Business role.
And also I heard that there is no PCUI in CRM 7.0. Is it true and if so what is used in place of the PCUI
Thanks.
Neha.

Neha,
Next time please do a search in this forum on business roles, and you would find many topics discussing this information more completely. I'm locking this thread due to it fact that this question has been asked many times before by many different people.
These threads explain the topic in more detail:
Re: Reg: Business Role
Assignment pfcg-role to user and assignment pfcg-role to business role
Thank you,
Stephen

Runtime error while creating role in pfcg.

hello friends,
Runtime error occurs while i creating the role in pfcg. when i click the option under the menu tab in PFCG the following Runtime error occurs.
Runtime Errors *CALL_FUNCTION_PARM_UNKNOWN*
Except. CX_SY_DYN_CALL_PARAM_NOT_FOUND
Please help me to solve this issue.
thanks&Regards,
Farkath.C
Edited by: farkath ulla on Jul 4, 2011 1:33 PM

Hi,
Check SAP Note 980625 - PFCG: Runtime error during menu transfer
Thanks
Sunny

Regarding publishing query inside a role in pfcg

Hello All..
I currenlty created a role in pfcg in BW system,.
In role I have assigned object S_RS_COMP,S_RS_COMP1...
In BEX Analyzer,i then published a query to that role.
After publishing the same , i was able to see query in the role.
I assigned this role to the user.
When user tries to execute the query,the web browser opens up.
Can u pls let me know why this is happening...
Regards
Ajit

Ajit,
The Internet Graphics Server (IGS) is a Server-based engine for generating graphical and non-graphical content
Without this properly installed, the web content will can not be displayed.
BW_IGS_CHART_TEST is a program which tells if IGS is installed properly or not.
Please check the path of the query.
Also note that using this link you can only access the web query and not BEx query.
For BEx query you'll have to type RRMX and proceed. Double clicking on the link would only open the web page and not BEx.
Hope that helped.
Saurabh.
Edited by: Saurabh parashar on Jan 25, 2010 11:52 AM

SAP Standard Menu Text missing while Creating Role in PFCG

All:
I am having a weird issue to where the "SAP Standard Menu Text" is missing when creating a role in PFCG and using the "Copy Menu > From SAP Menu" function.
When I click the button I get the following:
1) Popup of the SAP standard menu tree
2) The area for the folders where there should be text is missing
- appears as the " [ ] " symbols
3) "[ ]" symbols appears through entire menu tree for folders and transactions.
Any ideas?
- Thanks Matt

Yes this is a bug....Please see note 1421375 for the solution

Assign queries to authorization role via PFCG maintenace

Hi,
I would like to assign several queries to existing authorization roles.
Therefore I am using the transaction PFCG > maintain the menu > add "other" SAP BW Query URL and fill in the name as well as object description.
However, the new query will not be shown in the BEx Analyzer in the role folder.
What do I have to administrate that the query will be shown in the role menu (BEx Analyzer)?
Thanks!

Dear Arvind,
thanks for your reply.
As an authorization administrator for SAP BI I do have the authorization for S_USER_AGR already.
I am just testing in our development system.
However, the query will not appear in the BEx Analyzer while selecting "Open Query" and search in "Roles".
As far as I know queries could provided to authorization roles via BEx Analyzer.
But does no possibility exists to maintain the authorization role via PFCG?
Regards, Christian

Display Links on welcome screen of SC as per the role in PFCG

Hi All,
We have created a Z ITS service from a Z transcation and want to give the link of this ITS service on welcome screen of EBP only to some specific users.
We created a Z role in PFCG and attached the link of this ITS service using the option 'Generic Web Address (URL Template)' from the popup that we get on clicking Other button in PFCG .
How to check the role to display this link on the welcome screen?
We can not hardcode the link in ITS template because then it will be displayed for all users.
We can not use the Z transcation directly instead of calling the corresponding ITS service because then it also shows menu options on screen using which the user can access SAP EASY ACCESS menu from screen.
In PFCG it display under the Go Shopping folder:
BW_GENERIC_TYPE-Report
So how to check the role in ITS template and show the link only to specific users?
Thanks,
Anubhav

Hi Deepti,
Sorry for the confusing description.Let me explain in detail.
We have a Z report which should be accessible from a link on welcome screen of EBP.
For this we created a Z transcation of this Z report and selected Easy Web Transcation radio button and SAP GUI for HTML checkbox while creating this transcation.
Added this Z transcation in a role in PFCG .But the problem here is , when the link on screen is clicked and transcation is opened in IE it shows Menu , Save as variant , Back , Cancel and System options in header, using these user can access all transcations as if he is loged in to SAP from SAP GUI.
To avoid this we created an ITS service using this Z transcation and created corresponding service node in SICF .
So we either have to remove the menu options from header when this Z transcation is displayed in WEB GUI ie. when we attach this Z transcation in PFCG OR instead of calling the Z transcation , this ITS service should be called so how to attach this ITS service to PFCG ?
Further if it is a transcation we can check in the ITS Service BBPSTART Template BBPGLOBAL_650_EMP as follows...

repeat with idx from 1 to MENU_NODE_TAB-TEXT.dim;
if(MENU_NODE_TAB-S_IDENT[idx] == "ZBUSRP"); <--Here we check if the ZRole has ZBUSRP transcation attached to it in PFCG if yes then only display the link.
 A_S_IDENT = MENU_NODE_TAB-S_IDENT[idx];
 A_GEN_URL = MENU_NODE_TAB-GEN_URL[idx];
 A_OBJECT_ID = "parent.launchpad.menu.M" & MENU_NODE_TAB-OBJECT_ID[idx] & ".root.name + parent.launchpad.menu.M" & MENU_NODE_TAB-OBJECT_ID[idx] & ".path";
 A_TEXT = "Vendor Report";
 A_INTRODUCTION = "Business Card Report For Administrator";
 found = 1;
end;
end;
if(found==1);i=i+1;found=0;end;
How to apply this check when calling an ITS service that is in a role in PFCG?
I hope it is a bit clearer now.
Thanks,
Anubhav

Transfer of profiles to Roles in PFCG

Hello,
yes i know that it is possible to transfer profiles to roles in pfcg.
This is possible over
EDIT>Insert Authorization->from Profile
But we need to transfer over 500 Profiles to new roles. Do we have a change to automating this process? Or do we need to do this manuell for any profile?
Gruß
A. Steinhäuser

Hi Julius,
thank you for the tip with SU25. Did not remember that there was a point 6
This will perhaps an option to import all our mauell profiles to roles.
After this, i think we can use ECATT to rename the new roles to the naming conventions.
Gruß
Toni

1 Business Role = 1 PFCG role

Hi,
We can assign 1 PFCG role to BR. But If user has 3-4 PFCG roles assigned to it in SU01 and only 1 of them is assigned to BR then will it affect the functioning of user in Web UI?
How does 1 PFCG role take care of all functions which user need to be done? Do we need too add all required authorization objects in single PFCG role?
Regards,
Nikhil

Nikhil,
The functioning of user in Web UI is guided by SU01's 'Parameters' tab. The 'parameter value' for the 'Parameter ID' dictates the role and subsequent authorizations of the logged in user.
Ideally speaking, each business role should have a corresponding PFCG role containing only those authorization objects needed to fulfill the task being part of the Business Role. However, we may even skip this assignment. So a business role may not be assigned a PFCG role. Instead if the user is attached to multiple PFCG roles, all those authorizations would hold for the user.
Hope this helps.
Amar.

Maintaining WebUI Business Roles in PFCG/Infotype 1263

Hello there,
we are migrating from CRM 4.0 to CRM 7.0 and have to maintain the Business Roles for our users in the organization modell (PPOMA_CRM). Usually we have to assign the business role to the position. All users under this position will get the Business Role assigned.
As we have a complicated organization modell, I was wondering if there is a way assigning the Business Role directly to the PFCG-Role in the PLOG/INFOTYPE (1263) authorization object.
Does anyone have an idea? Or have tried this before?
Thanks and regards,
Jodi
Edited by: Ghayss Tarraf on May 3, 2010 4:24 PM

Hi Jodi / Ghayss,
I think you should be interested in the business role determination logic:
The system finds the business role in the following sequence:
1. check if there is any business role assignment in SU3
2. check if there is any business role assigned in the organizational hierarchy
3. check whether the pfcg role assigned to the user is asscociated to any business role
So basically what you need to do is:
1. assign the PFCG role to the business role
2. assign the PFCG role to user in su01
Then the system will find the business role accordingly.
Cheers,
David Wang

Restriction on MFBF Transaction Screen

Hi All..
I would like to know how to restict some of the push buttons in MFBF screen..?
The push buttons required to be restricted are, "post with correction", and remaining push buttons on this row... user shud not be able to use these buttons.
And above restrictions should be made for users and for some semifinished / finished materials..( not for all materials)
please guide me at the earliest...
with regards,
LN

Hello,
Create a screen variant for this transaction thro shdo' by hiding the not req/not modifiable and all.
for this you can get the help of your ABAP resources available.
or you can use auth. object also to activate this. for this you need to get in touch with the Basis/Auth. team.
This can be done.
Regards,
<Manick>

Queries added to role in PFCG don't show up under role folder in BEX

Hello Guruu2019s
Currently I am experiencing a very strange problem regarding the visibility of queries in the role menu of BEX. Please find below some investigation already done:
Just to avoid any authorization questions/assumptions, I have a user with SAP_NEW and SAP_ALL. He also has 2 roles (R1 and R2, no other roles) in which reports are entered using: PFCG -> +OTHER -> SAP BW Query URL.
In his SAP user menu all reports from both roles show up and are executable.
When this user open BEX Analyzer and goes to u2018Openu2019 -> u2018Open Queryu2019 and then go to u2018Rolesu2019 only R1 and its contents is visible.
The roles however are identical and contain only the following authorization objects (apart from menu entries):
S_USER_TCD: RRMX
S_TCODE: RRMX
The only difference between them is that the R1 has been created some time ago while the R2 is new.
I expect that people will tell me that S_USR_AGR is required but this isnu2019t the case since he is able to see one of the two mentioned roles (R1) and its contents in SAP BI due to SAP_ALL and SAP_NEW.
When I copy R1 to R3 and add it to the user he is also able to see this R3 in the Bex analyzer. However, when I remove all reports from R3 and add some myself in PFCG these new entries do not show up in Bex analyzer, even though I re-added the report(s) I removed earlier in the exact same way.
The same for the original R1, when I add new entries they arenu2019t visible although the u2018oldu2019 ones are.
When I check the only table I know that holds SAP menu entries all links show up, this also explains why in his SAP user menu he sees all links. Does anyone know how (which tables) the BEX Analyzer gets the appropriate roles and role entries when a user wants to open a query?
What can be the issue here; to me it feels like something has changed in the system that prevents BEX to read all roles properly?

Hi Casper,
there is a known issue at the moment whereby workbooks/queries and roles are no longer
visable due to the following.....
The settings in SSM_CUST defines a compress mechanism for the user menu
known as "Redundancy avoidance" and described in notes 357877 and 357693
Redundancy avoidance deletes easy access menu entries for doubled
transaction codes whenever SSM_CUST contains
1. an entry CONDENSE_MENU with PATH = 'YES' and
2. either an entry DELETE_DOUBLE_TCODE with PATH = 'YES' or no entry
DELETE_DOUBLE_TCODES, at all.
If you don't want doubled transaction codes to be deleted, then simply
add an entry DELETE_DOUBLE_TCODES with PATH = 'NO' into table SSM_CUST.
Please enter
DELETE_DOUBLE_TCODES with PATH = 'NO' into table SSM_CUST
and retest this issue...
I hope this helps
best regards
Orla.

Function to display a role ( like PFCG )

Hi,
is there a functin to display a role ( like the transaction PFCG ) ? Thanks.
ISIS

I think you can use the following statement.
CALL TRANSACTION 'PFCG' USING bdcdata_tab OPTIONS FROM opt.
For further info press F1 on the word TRANSACTION.
Regards,
Shailaja

New Role in PFCG only for customizing (display mode)

Hi,
Some users asked me to have a specific role to display all customizing settings (form transaction SPRO). This new role should allow users only to display customizing settings without changing them.
I tried to copy and manipoulate standard role S_BC_CUS_CUSTOMIZER. In my new role Z_S_BC_CUS_CUSTOMIZER (copy of the standard) I have setted as "display" entries with field "ACTVT".
However it doesn't work as I like because user with that role can still modify customizing.
Can any of you help me please? thanks.

Hi
Those role doesn't exit in my system, anyway you should create a new role where all authorization groups have the value 3 for the activity.
So you should assign to the object S_TABU_DIS only 3 as action allowed.
Anyway you should check all roles assigned to your user, because perhaps if a user has two roles where it can changed the data for the first role and it can't do it for the second one, the result will be the user can change the data.
Max

Role in PFCG : Restriction at MFBF

Similar Messages

Maybe you are looking for