Role Maintenance Transaction PFCG

Hi.
I have a question (as many others in here) regarding transaction PFCG functionallity from an ABAP program.
I would like to generate derived roles from the master role, and I have made a recording of PFCG and used it as Call Transaction, without any luck, as it is an Enjoy transaction.
I have searched for BAPI's, function modules, even tried to build my own program (based on ) and I am stucked - no further ideas.
Can you supply me with a BAPI, Function module etc. which does the same as PFCG Generate derived roles?
Thank you in advance,
Best Regards.
Søren Holmen, March IT

Hi again - I found the solution myself - and wants to share it with you.
    SUBMIT suprn_regenerate_dependent
      WITH top_agr = gw_agr_time-agr_name
      WITH gen      = 'X'
      AND   RETURN.
Standard program "suprn_regenerate_dependent" is perfect for this issue!
Best regards.

Similar Messages

User role maintenance (TX PFCG) : S_TCODE cannot be changed

Hello,
We have the following problem in the transaction code PFCG, when trying to edit the authorizations of a role:
the tree "S_TCODE" appears as "Standard" and can only be changed, if you set the authorization fields to "*" (full authorization) ,
please see the printscreen attached.
Is there a way to modify parts of "S_TCODE" ?
Thank you in advance.
Kind regards,
Noémi Pocsai

Hi Raymond,
Thank you for your reply.
My problem is that, I'd like to change the subtree "Transaction codes" , but it's not possible to edit this... or am I wrong?
Thank you in advance for an answer.
Kind regards,
Noémi

Need a FM to add report to a role in the transaction PFCG

Hi ,
I need to find a FM which would add a BW REPORT to a role in the transaction PFCG.
Regards ,
Harshit Rungta

There is no such FM exists in BI...only can be done manually

How do we create role maintenance

hi gurus
How do we create user role maintenance could any one give me step by step procedure. It will be helpful for me
Thanks in advance

Hello,
The roles for the users normally created by BASIS by transaction PFCG. If you want ore details about the stepwise procedure, please post the thread in the BASIS forum.
Prase

RFC- Bapi - For Role Maintenance (Single and Composite)

We are in the process of developing an ASP.NET web application which will be used to raise requests for user and role creations in SAP.
We will be making use of Sonic ESB to update SAP through IWAY SAP adapter.
IWAY SAP adapter supports RFCs, Bapis & IDocs.
We are aware of RFCs that could be used for user creation, updating and deletion.
We have NOT come across any RFCs or Bapis for role maintenance
1) We would need RFCs for the following requirements:
1) To create a new role (single or composite role ).Creating a new role would include adding transactions to a role, deriving from an existing role or assigning more than one role to another role.
2) To update a role
3) To delete a role.
4) To get the details of an existing role
If there are no RFCs for the above requirement, will we need to create a custom RFC?
If we need to create a custom RFC, are there any transactions already available for the above requirements so that we could write a RFC wrapper?
2) Are there any RFCs that would give us the complete list of roles (single or composite) in an SAP system?
3) Are there any RFCs that would give us the complete list of transactions in an SAP system?
Presently for 2) & 3) , we are making use of RFC_READ_TABLE to read SAP tables to get the list of roles and transactions.
Thanks for your answers

Hi,
check these FM , i dont know it will work for u or not.
BAPI_USER_ACTGROUPS_ASSIGN     User: Change entire activity group assignment
BAPI_USER_ACTGROUPS_DELETE     User: Delete entire activity group assignment
BAPI_USER_CHANGE               Change User
BAPI_USER_CLONE                Create User with Template in Another System
BAPI_USER_CREATE
BAPI_USER_CREATE1              Create a User
BAPI_USER_DELETE               BAPI to Delete a User
BAPI_USER_DISPLAY              Display Users
BAPI_USER_EXISTENCE_CHECK      Check a user exists
BAPI_USER_GETLIST              Search for Users
BAPI_USER_GET_DETAIL           Read User Details
BAPI_USER_INTERNET_CREATE      Create a user in the Internet
BAPI_USER_LOCACTGROUPS_ASSIGN Change Activity Group Assignment for Dependent Systems from Central Sy
BAPI_USER_LOCACTGROUPS_DELETE Delete Activity Group Assignments in the Dependent Systems
BAPI_USER_LOCACTGROUPS_READ    Change Activity Group Assignment for Dependent Systems from Central Sy
BAPI_USER_LOCK                 Lock User
BAPI_USER_LOCPROFILES_ASSIGN   Change Profile Assignment for Dependent Systems from Central System
BAPI_USER_LOCPROFILES_DELETE   Delete Profile Assignments for Dependent Systems
BAPI_USER_LOCPROFILES_READ     Change Activity Group Assignment for Dependent Systems from Central Sy
BAPI_USER_PROFILES_ASSIGN      User: Assign profiles
BAPI_USER_PROFILES_DELETE      User: Delete All Profile Assignments
BAPI_USER_UNLOCK               Unlock user
Reward points if useful..
Regards
Nilesh

RFC for role maintenance

We are in the process of developing an ASP.NET web application which will be used to raise requests for user and role creations in SAP.
We will be making use of Sonic ESB to update SAP through IWAY SAP adapter.
IWAY SAP adapter supports RFCs, Bapis & IDocs.
We are aware of RFCs that could be used for user creation, updating and deletion.
We have NOT come across any RFCs or Bapis for role maintenance
1) We would need RFCs for the following requirements:
1)       To create a new role (single or composite role ).Creating a new role would include adding transactions to a role, deriving from an existing role or assigning more than one role to another role.
2)       To update a role
3)       To delete a role.
4)       To get the details of an existing role
If there are no RFCs for the above requirement, will we need to create a custom RFC?
If we need to create a custom RFC, are there any transactions already available for the above requirements so that we could write a RFC wrapper?
2) Are there any RFCs that would give us the complete list of roles (single or composite) in an SAP system?
3) Are there any RFCs that would give us the complete list of transactions in an SAP system?
Presently for 2) & 3) , we are making use of RFC_READ_TABLE to read SAP tables to get the list of roles and transactions.
Thanks for your answers

Hi Nicole,
I think you are in the wrong forum.... For Guided Procedures, this is only about process roles and not roles used in the ABAP Stack.
Best regards,
David

Role to access PFCG in "read-only mode"

Hi,
I've created a role to access transaction PFCG in "read-only mode", because some functional consultants asked for it.
However, it still gives them access to perform the "User Comparison" and I would like to remove that as well.
The role has the following authorization objects and values:
S_TCODE-TCD = PFCG
S_USER_AGR-ACTVT = 03
S_USER_AGR-ACT_GROUP = Y-, Z- (these are the allowed role names)
I really don't know what to do... any ideas?
thanks

Hello Gary,
Yes, I also noticed that. The restriction of a user compare in PFCG in the F4 help in PRGN_CUST, is the same SAP note as that for activity 22 (assigning the user to the role)...
You could have posted this on Sunday evening, that way Monday morning is closer to test it
Cheers,
Julius
PS: We now have at least two "Gary Morris" at SDN and have for some time been trying to contact the "real one(s)" to determine who-is-who. Another "name sake" is: https://forums.sdn.sap.com/profile.jspa?userID=3618541&start=0 for example.
If you have any concerns, feel free to email me (see my business card) or SDN (at) SAP (dot) COM.

Help on transaction PFCG please

Hello, does anyone know how to copy a role from another role in the transaction PFCG?

Hi,
Just refer the theard
https://forums.sdn.sap.com/click.jspa?searchID=12941882&messageID=3644755
Refer the help
http://help.sap.com/saphelp_46c/helpdata/en/52/6714b6439b11d1896f0000e8322d00/content.htm
Regards
Kiran Sure

Job role design - transaction role and auth object role

Hi all, please kindly comment following job role design:
(1) transaction role:
Keep transactions in single job role to represent business processes in different application areas, e.g.MM: maintain PR, PO, OA. CO: maintain cost center, internal order HR: maintain org structure, personnel management.
The single job role will only keep role menu, object S_TCODE and inactivated all other application related authorization objects.
(2) authorization role
Keep application component related authorzation objects except S_TCODE in single job role by different application area, e.g. Objects of MM_B, MM_E, MM_G in MM role. Objects of K_CCA, K_CSKS_SET in CO role. Objects of HR in HR role.
Then maintain org level of MM, CO, HR roles for different companies, e.g. Company A MM role, company A CO role, company A HR role, company B MM role.;....
User will be assigned transaction role + auth object role. For example, user of company A to perform MM and CO functions will be assigned
with MM transaction role + company A MM role + company A CO role.
Please let me know the pros and cons of above design. Thanks.
Regards,
Donald
* I can see the disadvantage of this design is during SAP upgrade (SU25), revised of authorization object will not reflect in authorization role

Brent Van Dyck wrote:
Keep in mind the project was for an HCM implementation where there's already hardly any connection between tcodes and authorization values so it may have made more sense in that context than it would in a classic SD/MM.
That is correct - but it still exceeds "horrible" beyond imaginable boundaries if you try to split the fields of the objects into different roles and expect it to work or that there will be less roles.
In the case of HCM and also BW the auths admin needs to know more about the data and organization than what classic ERP auths admins can get away with. That is why they take longer to migrate away from manual profiles and have a greater tendency to have manual authorizations inserted into roles - which could however also be achieved by maintaining fields proposed without values and at least proposing those (such as activity type fields) which are known.
But splitting cube / characteristics / key figures or infotype / personel group / auth code into different roles can only go wrong.
Another mistake some "value role experts" sometimes make is that they don't want Su24 proposals in PFCG because they don't understand them. So what they do is that they clean out the SU24 tables completely... Well... the side affect of that is that all SU24 check indicators flagged as "no check" suddenly become alive in their system although there are mostly good reasons not to have the checks active.
Cheers,
Julius

Restrict access to transaction PFCG

hi, i want to give only display access to transaction PFCG,can u please give me the steps for that????wat are the transactions i have to use.SAP_ALL role is not added to the user.
regards
renjy

Hi Renjy,
For any transaction code check for the objects in SU24 then check the same in the role and change the activity as per your requirement.
Check for object and activity in the role
for example
Object S_USER_AGR, ACTVT 03 (Display)
If you need further information let me know.
Cheers
Soma
Message was edited by:
soma pradeep

Transaction 'PFCG'

Hi,
I have some requirement with the transaction PFCG. We need some standard function module for ADD or DELETE transaction to a Role. I tried with Batch Input but i believe its not happening as required.
Please suggest some other option if you have.
Somebody now someone FM standar?
Thanks,
Nohemi

try PRGN_RFC_DELETE_TRANSACTION & PRGN_RFC_ADD_TRANSACTION
~Suresh

Call transaction PFCG

HI
I am folowing this help
http://help.sap.com/saphelp_nw04/helpdata/en/c4/51104159ecef23e10000000a155106/content.htm
In the Note (tip)
its given that
call transaction PFCG on your SAP Web AS host
my question is
How I can call transaction PFCG on your SAP Web AS host
what is SAP Web host here, how can I log on to that
any TC or any URL ?
thanks
manian
Edited by: manian on May 5, 2008 11:29 AM

Hi
/people/michael.nicholls/blog/2008/03/03/assign-portal-role-while-editting-it
Please go through the above blog
Regards
Abhishek Mahajan
This might help
**Please reward points if helpful**

How to remove a maintenance transaction in dswp?

Hi All
We have had a problem with one of our maintenance transactions in DSWP and I want to remove it completely.
Does anyone know how to do this?
Thanks
Phil

Phil,
a "maintenance transaction" is a change document with transaction type SLMO. You can search for these change documents using transaction CRM_DNO_MONITOR. Just enter SLMO in the field transaction type.
You will get a list if all maintenance procedures. Double click on the change document you want to delete.
You are now in the detail view of this change document (CRMD_ORDER). In menu "business transaction" => "Delete" you can remove the document.
BUT: I am sure this is not supported. It can cause inconsistencies, because of change documents are often linked to other change documents and follow a process. So, I recommend to cancel the procedure (by using the action button in CRMD_ORDER or follow the process in DSWP) instead of deleting the document.
Regards,
Holger

Getting error while creating maintenance transaction in tcode DSWP

I am getting below error when I am creating new maintenance transaction in solution manager tcode DSWP and selecting option automatically select files
Transaction must be assigned to a Standalone Product Version
When I am choosing the option select manually ,it is working fine.
please guide me from here
Thanks,
Kunal Gahlot

Hi Sri,
          The product version is maintianed correctly under SCM 7.0 EHP1.
          We are getting EWA reports regularly for the system SCM 7.0 EHP1 which we have installed.
          The only problem we are facing is in automatic selection of files in the maintenance transaction.
Regards,
Kunal Gahlot

Use visual composer for maintenance transaction of R/3

Hi:
Can I use the visual composer as a tool to connect to maintenance transaction of R/3.
Can I use it to build a sales order or a porches order in the R/3.

Does anyone know if you can use an IDOC interface with VC? Also, does anyone have suggestions for a BAPI for creating and displaying notifications?
Any help is appreciated.
Pete

Role Maintenance Transaction PFCG

Similar Messages

Maybe you are looking for