Role Usage Synchronization job
When I run the ERM Role Usage Synchronization job (step in UAR) I get the error "Error in backend/Web service; Field USER_NAME_TYPE not a member of TABLES".....we are on GRC 5.3 SP 15.
Hi Jack,
Is your backend runnung VIRSANH SP16 and VIRSAHR SP14? That's is the minimum requirement. Please check SAP Note 1352498 (there is an attachment to the note).
Regards,
Luis
Similar Messages
-
Error when running "role usage synchronization" job in ERM
I get an error in my job log when I run "role usage synchronization". Has anyone seen this before:
179 12/8/09 5:02:47 PM Ready Job created
179 12/8/09 5:03:31 PM Running Include users for user access review: A,L
179 12/8/09 5:03:31 PM Running Exclude locked users with lock codes: 32,64
179 12/8/09 5:03:31 PM Running Exclude Expired Users : Yes"
179 12/8/09 5:03:31 PM Running Job running
179 12/8/09 5:03:31 PM Running Role usage synchronzation for connector WBS is started
179 12/8/09 5:03:33 PM Running Updated records for 21 users in database
179 12/8/09 5:03:34 PM Running For 5 users there was no role assignment
179 12/8/09 5:03:34 PM Running WBS : Total number of users 21, Total number of role assignments: 71
179 12/8/09 5:03:34 PM Running Error in backend system/Web service; Input data length not a multiple of blocksize.
179 12/8/09 5:03:34 PM Completed Job completed
Thanks,
PeggyPeggy,
I have seen this kind of error more than a year back. May be the role name contains special character or somewhere in the role table there is a space or something. I will recommend you to open a message with SAP.
Alpesh -
UAR and Role usage synchronzation job
Hi,
we would like to implement UAR. Executing the Role usage synchronzation-job we get the information that the job is completed. But when we go in job history we get the following error message:
Error in backend system/Web service; Exception from the service : Service call exception; nested exception is: com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (401) Unauthorized. The requested URL was:"http://<server>:<port>/VirsaCCActionUsageService/Config1?wsdl&style=document"
The system log says:
[[email protected]4464[jobId=24,lastModifiedDate=Tue Aug 03 08:30:13 CEST 2010,statusId=0,statusDesc=Ready,message=0301], [email protected]1fc2[jobId=24,lastModifiedDate=Tue Aug 03 08:30:54 CEST 2010,statusId=1,statusDesc=Running,message=0302], [email protected]0d8e[jobId=24,lastModifiedDate=Tue Aug 03 08:30:55 CEST 2010,statusId=1,statusDesc=Running,message=23106#_!CONNECTOR#_!LS_DI6_300], [email protected]0218[jobId=24,lastModifiedDate=Tue Aug 03 08:30:55 CEST 2010,statusId=1,statusDesc=Running,message=4771#_!UAR#_!A,L], [email protected]0ac[jobId=24,lastModifiedDate=Tue Aug 03 08:30:55 CEST 2010,statusId=1,statusDesc=Running,message=4772#_!Locked#_!32,64], [email protected]10af[jobId=24,lastModifiedDate=Tue Aug 03 08:30:55 CEST 2010,statusId=1,statusDesc=Running,message=4773#_!Expired#_!Yes], [email protected]7cf5[jobId=24,lastModifiedDate=Tue Aug 03 08:30:59 CEST 2010,statusId=1,statusDesc=Running,message=23112#_!CONNECTOR#_!LS_DI6_300#_!NOS#_!32], [email protected]e91f[jobId=24,lastModifiedDate=Tue Aug 03 08:31:01 CEST 2010,statusId=1,statusDesc=Running,message=4774#_!CONNECTOR#_!LS_DI6_300#_!NOS#_!32#_!NOSOFROLES#_!40], [email protected]0ea9[jobId=24,lastModifiedDate=Tue Aug 03 08:31:01 CEST 2010,statusId=1,statusDesc=Running,message=4780#_!CONNECTOR#_!LS_DI6_300#_!NOS#_!13], [email protected]854c[jobId=24,lastModifiedDate=Tue Aug 03 08:31:01 CEST 2010,statusId=1,statusDesc=Running,message=23114#_!ERRMSG#_!Exception from the service : Service call exception; nested exception is:
com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (401) Unauthorized. The requested URL was:"http://<server>:<port>/VirsaCCActionUsageService/Config1?wsdl&style=document"], [email protected]6dd8[jobId=24,lastModifiedDate=Tue Aug 03 08:31:02 CEST 2010,statusId=3,statusDesc=Completed,message=0304]]
Any ideas?
Regards,
BjoernHi,
username and password should be correct. The user has profile sap_all.
The webservice URL is: http://<server>:<port>/VirsaCCActionUsageService/Config1?wsdl&style=document
Regards,
Bjoern -
User, Role, Profile Synchronization Job Fails
Hi Gurus,
When I am scheduling a job the User, Role, and Profile Sync. job fails giving an error
"Cannot assign a java.lang.String object of length 53 to host variable 5 which has JDBC type VARCHAR(40)."
This happens when the synchronization happens with a portal system. We dont have a ruleset for the portal system, So if I put in a "*", it includes this system and results in the error, If I manually select all other system, it works fine. Is there any way to remove this error so that I can schedule the jobs without having to select every system manually.
Regards,
ChinmayaHi,
As per my knowledge, in the Portal system, you should perform only user sync. Roles/profile sync will not work since portal will have workset roles.
Please refer SAP Note 1168120, which may help you to understand the limitations
Hope this helps!!
Rgds,
Raghu
Edited by: Raghu Boddu on Nov 4, 2010 7:39 PM -
While running synchronization jobs I am getting an error with program terminated
Dear All,
While running the synchronization jobs I am getting an ABAP dump error in GRC system SAPMSSY1 and CL_GRAC_USER_REP.
Do somebody had any of such problem?
Regards,
AbhisshekDear Colleen,
That was correct! I was running multiple jobs at the same time and they might were trying to accesss the same table.
I am surprise SAP ST22 dumps also stating that I must send SAP message.
Regards,
Abhishek -
Catalog Synchronization Job - 11g r2
Hi everyone,
I installed 11g r2.
I want to execute Catalog Synchronization Job.
But there is not Catalog Synchronization Job in Scheduler job list.
How can I find or execute this job ?
Thanks.I did this.
When I execute my new job, an error occurs.
[2012-09-12T15:17:57.748+03:00] [oim_server1] [WARNING] [] [oracle.iam.scheduler.vo] [tid: OIMQuartzScheduler_Worker-3] [userId: oiminternal] [ecid: 5dfa381033deb099:-2199247a:139b9b6dab7:-8000-0000000000000003,0] [APP: oim#11.1.2.0.0] IAM-1020021 Unable to execute job : OID Catalog with Job History Id:3582[[
java.lang.NullPointerException
at oracle.iam.catalog.util.Utility.updateJobWithDate(Utility.java:596)
at oracle.iam.catalog.scheduledTask.CatalogSynchronization.execute(CatalogSynchronization.java:96)
at oracle.iam.scheduler.vo.TaskSupport$1.processWithoutResult(TaskSupport.java:135)
at oracle.iam.platform.tx.OIMTransactionCallbackWithoutResult.process(OIMTransactionCallbackWithoutResult.java:9)
at oracle.iam.platform.tx.OIMTransactionCallback.doInTransaction(OIMTransactionCallback.java:13)
at oracle.iam.platform.tx.OIMTransactionCallback.doInTransaction(OIMTransactionCallback.java:6)
at org.springframework.transaction.support.TransactionTemplate.execute(TransactionTemplate.java:128)
at oracle.iam.platform.tx.OIMTransactionManager.execute(OIMTransactionManager.java:22)
at oracle.iam.scheduler.vo.TaskSupport.executeJob(TaskSupport.java:116)
at sun.reflect.GeneratedMethodAccessor1077.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.iam.scheduler.impl.quartz.QuartzJob$TaskExecutionAction.run(QuartzJob.java:266)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
at weblogic.security.Security.runAs(Security.java:41)
at Thor.API.Security.LoginHandler.weblogicLoginSession.runAs(weblogicLoginSession.java:52)
at oracle.iam.scheduler.impl.quartz.QuartzJob.execute(QuartzJob.java:75)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)
Note : I created a new application instance and I created and published a new sandbox. But I didn't create any catalog.
Where is the fault ?
Thanks. -
This was fixed in SP15.3 (so says SAP). We are on SP 16.0 on ERM and this issue is still a problem. When I use the upload role usage function, using the downloaded template, only 18 of 800+ rows in the xls file get loaded into the VT_RE_ROLE_USG table. I did not notice this until SP16.0, will I be forced to go to 17? or is there a work-around?
more info: the VT_RE_USR table is being populated correctly (325 users) however the VT_RE_USG table stops at 30 rows. Does not seem to matter the sort order in the xls, still stops at 30 rows. the VT_RE_USG table entries are the bottom 30 rows of the xls....ignoring the remaining 900 rows (930 rows of data total). The xls template is an actual xls (excel 2003 format, all cells formated GENERAL, so the dates are excel dates. The other oddity in the VT_RE_USG usage table is the LASTEXEC column is null, but if you leave it blank in the xls, it does import at all.
-
Error while scheduling Background Job for User/Role Full Synchronization
Hi all,
We have installed RAR 5.3 Component and uploaded the authorization data & established the connectors to the backend system.
We have performed all the post installation activities and everything is complete.
When we have scheduled User -Full Synchronization with the Back End system as a part of Post Installation Activity we are receiving the below error message
"Error while executing the Job:Cannot assign an empty string to host variable 2."
Also the VIEW LOG/ Terminate Job buttons are disabled in this screen.
Can somebody please help us in resolving the above issue
Thanks and Best Regards,
Srihari.KHi,
We are copy pasting the error log (Part as it is huge) below here. We could able to do Full Synch for Roles and also for Profiles. Only for User Synch we are getting this error and none of the users are sychronized to RAR
Jan 13, 2009 12:34:27 AM com.virsa.cscext.dao.CSCDAO populateGenObjUser
INFO: Update user WILSONA of HL2-QAHR
Jan 13, 2009 12:34:27 AM com.virsa.cscext.dao.CSCDAO populateGenObjUser
INFO: Update user WINDC of HL2-QAHR
Jan 13, 2009 12:34:27 AM com.virsa.cscext.dao.CSCDAO populateGenObjUser
INFO: Update user WLADICHJ of HL2-QAHR
Jan 13, 2009 12:34:27 AM com.virsa.cscext.dao.CSCDAO populateGenObjUser
INFO: Update user WUK of HL2-QAHR
Jan 13, 2009 12:34:27 AM com.virsa.cscext.dao.CSCDAO populateGenObjUser
INFO: Update user ZENGS of HL2-QAHR
Jan 13, 2009 12:34:27 AM com.virsa.cscext.dao.CSCDAO populateGenObjUser
INFO: Update user ZHENGL of HL2-QAHR
Jan 13, 2009 12:34:27 AM com.virsa.cscext.dao.CSCDAO populateGenObjUser
INFO: All System Flag:false=====Last Batch Flag:true
Jan 13, 2009 12:34:27 AM com.virsa.cc.xsys.bg.BatchRiskAnalysis loadUserData
INFO: @@@ User sync completed for params true: Syskey List is [HL2-QAHR]
Jan 13, 2009 12:34:27 AM com.virsa.cc.xsys.bg.BgJob run
WARNING: *** Job Exception: Cannot assign an empty string to host variable 2.
com.sap.sql.log.OpenSQLException: Cannot assign an empty string to host variable 2.
at com.sap.sql.log.Syslog.createAndLogOpenSQLException(Syslog.java:85)
at com.sap.sql.log.Syslog.createAndLogOpenSQLException(Syslog.java:124)
at com.sap.sql.types.VarcharResultColumn.setString(VarcharResultColumn.java:57)
at com.sap.sql.jdbc.common.CommonPreparedStatement.setString(CommonPreparedStatement.java:511)
at com.sap.engine.services.dbpool.wrappers.PreparedStatementWrapper.setString(PreparedStatementWrapper.java:355)
at com.virsa.cscext.dao.CSCDAO.updateIgnoredUserData(CSCDAO.java:1388)
at com.virsa.cscext.dao.CSCDAO.populateGenObjUser(CSCDAO.java:1169)
at com.virsa.cc.xsys.bg.BatchRiskAnalysis.populateGenObj(BatchRiskAnalysis.java:868)
at com.virsa.cc.xsys.bg.BatchRiskAnalysis.insertBAPIUserData(BatchRiskAnalysis.java:142)
at com.virsa.cc.xsys.bg.BatchRiskAnalysis.loadUserData(BatchRiskAnalysis.java:390)
at com.virsa.cc.xsys.bg.BatchRiskAnalysis.performBatchSyncAndAnalysis(BatchRiskAnalysis.java:1275)
at com.virsa.cc.xsys.bg.BgJob.runJob(BgJob.java:402)
at com.virsa.cc.xsys.bg.BgJob.run(BgJob.java:264)
at com.virsa.cc.xsys.riskanalysis.AnalysisDaemonBgJob.scheduleJob(AnalysisDaemonBgJob.java:240)
at com.virsa.cc.xsys.riskanalysis.AnalysisDaemonBgJob.start(AnalysisDaemonBgJob.java:80)
at com.virsa.cc.comp.BgJobInvokerView.wdDoModifyView(BgJobInvokerView.java:436)
at com.virsa.cc.comp.wdp.InternalBgJobInvokerView.wdDoModifyView(InternalBgJobInvokerView.java:1225)
at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.doModifyView(DelegatingView.java:78)
at com.sap.tc.webdynpro.progmodel.view.View.modifyView(View.java:337)
at com.sap.tc.webdynpro.clientserver.cal.ClientComponent.doModifyView(ClientComponent.java:481)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doModifyView(WindowPhaseModel.java:551)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:148)
at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:335)
at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:143)
at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:319)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:713)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:666)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:250)
at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doGet(DispatcherServlet.java:46)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
Jan 13, 2009 12:34:27 AM com.virsa.cc.xsys.bg.BgJob setStatus
INFO: Job ID: 13 Status: Error
Jan 13, 2009 12:34:27 AM com.virsa.cc.xsys.bg.BgJob updateJobHistory
FINEST: --- @@@@@@@@@@@ Updating the Job History -
2@@Msg is Error while executing the Job:Cannot assign an empty string to host variable 2.
Jan 13, 2009 12:34:27 AM com.virsa.cc.xsys.bg.dao.BgJobHistoryDAO insert
INFO: -
Background Job History: job id=13, status=2, message=Error while executing the Job:Cannot assign an empty string to host variable 2.
Jan 13, 2009 12:34:27 AM com.virsa.cc.xsys.riskanalysis.AnalysisDaemonBgJob scheduleJob
INFO: -
Complted Job =>13----
Please let us know how to resolve this error
Thanks and Best Regards,
Srihari.K -
User, Role, Profile Synchronization - Full sync job
I've scheduled this job and it's been running since feb 2. I understand that this job brings only the header data into CC tables. When I look at the CC log file.- It says Delete user XXXX from all tables. I checked the userid in the backend system it actually does not exist.
Hi Partha,
GRC RIG has created an accelerator "How to Performance Optimize SAP GRC Access Control 5.3" which provides step by step instructions to increase performance of AC 5.3.
Please find the document at the following link on SDN.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/90aa3190-8386-2b10-c4ba-ced67322ea6d?quicklink=index&overridelayout=true
Hope this helps.
Best Regards,
Sirish Gullapalli. -
Trying to understand "User/Role/Profile Synchronization" and Batch Analysis
Hello,
Im trying to understand what exactly and from which tables these jobs are copying to which tables in CC. I have a understanding that these jobs are moving also deleted roles from backend. This is causing unnecessary delay to long lasting job.
I would appreasite if some one could explain the logic behind these jobs. What the fullsync and incremental is reading ? What kind of changes are causing a role/user/profile to be included to the full and incremental jobs?
How the incremental analysis logic is built ?
br JanneJanne,
In my current implementation we are going for an offline risk analysis due to the heteregoneus system landscape of our client (several SAP and non SAP systems and several SAP systems under 4.6C). Eventhough within our approach we don't perfrom the backend synchronization (we use CC data extractor to pull data from backend into CC) hope the following info could hel you:
The tables such jobs you mention access to, are all the SAP backend system tables related with users, roles, profiles, action and permissions. If you check the data mapping appendix of the "user and configuration guide for 5.2" you will see all the data that CC retrieves. For instance, in order to extract user info (UserID, FName, LName, Email, Phone, Email, Department) tables USR21, USR02, ADRP, ADR6 and ADCP must be accessed.
In terms of CC tables:
VIRSA_CC_SYSUSR >> UserIDs and Systems ID relationship
VIRSA_CC_GENOBJ >> User, Role and Profile master data
VIRSA_CC_GENACT >> User-action, role-action and profile-action data
VIRSA_CC_GENPRM >> User-permission, role-permission and profile-permission
VIRSA_CC_SAPOBJ >> Action-permission
VIRSA_CC_OBJTEXT >> Objects descripcions (ACT, PRM, FLD, VAL, ORG)
Hope this helps.
Regards,
Imanol -
RAR: Best strategy for users/roles/profiles synchronization
Hi all,
Assuming that:
1) we will be never interested about profiles risk analysis (just users and roles)
2) roles risk analysis will be run first and after sometime (threee weeks) we will run it for users.
and we will run batch risks analysis:
Question 1) Is it possible to synchronize just roles and do it for users just when we want to execute risk analysis for them? Or is a best practice to synchronize always for users/roles and profiles eventhough risk analysis will not be done for all three?
Question 2) If we execute just full sync and full risk analysis, users/roles or profiles deleted in backend between executions are also deleted from DB? or removal takes place only when executing incremental sync?
Many thanks in advance. Best regards,
ImanolHi Imanol,
Answer Q1: Yes, you can just select user and roles for the snych and risk analysis. Go to configuration-background jobs - shedule job. If you don't run risk analysis for profiles, you shouldn't sync and select them.
Answer Q2: Both, the Full risk analysis will alwaly update your DB. I will recommend you, to do this job in some periodic times. The incremental sync job will as well update your DB, if anything changed in the backend system. Normally your are going to run your daily or weekly jobs with this selection.
Thanks,
Martin -
Critical Roles & RAR Background Jobs Question
Hello,
I have the following queries, related to GRC AC 5.3 RAR.
1- I would like to include all roles starting with S* into critical roles.
My question is can I say S* in critical roles, OR do I have to manually enter each & every role starting with S* (Please note that currently we have around hundreds of roles starting with S and entering each of them manually is a tedious task).
2- We have several background jobs scheduled in RAR and when I click search button, I get a list of around 600 jobs executed in the past few months.
My question is can I purge the background jobs history in such a way that, when I click "SEARCH" button, I get only those background jobs, which have been executed in the past 1 week?
Thanks,
HaleemHi Varun,
I created message with SAP in the component GRC-SAC-SCC and below is the response.
Dear Customer,
You have to manually enter each & every role in critical roles section and the exclude objects in management report section.
SAP GRC AC 5.3 SP11 does not support wildcard operations in critical roles/ profiles and exclude objects of management reports. We will support the wildcard in future SAP Versions of GRC.
Thanks
Based on the above message, I understand that I will have to enter all the roles manually for critical roles in critical roles section of RAR -> rule architect and exclude objects of management report section.
Thanks,
Haleem -
Critical Action and Role/Profile Analysis job in not running in GRC 5.3
Hi Team,
I am working for a client where GRC 5.3 is installed( support pack 4 and patch 1).
The installation is complete and also the post processing is done.
We have scheduled a periodic ( weekly ) incremental background job for Critical Action and Role/Profile.
Following are the parameter setting used:
Task: Risk Analysis -Batch
Batch Mode : Incremental
First time it run successfully on 28th June'09 and it is completed with spool also. But next time it is supposed to run on 4th of July'09 . But it does not. And since then it is in same state.
I am not able to find any reason that why it is behaving this way where other incremental jobs are running successfully.
It will be helpfull if any one can guide me providing the solution.
Regards,
KakaliHi Varun,
I go to the Job History Button. It shows the following data only :
2009-06-28 00:00:59 Done Job Completed successfully
2009-06-27 23:45:00 Started RAR_PE1CLNT100_Critical Action and Role/Profile Analysis started :threadid: 0
Under the Last Run Colomn it shows 28th June ( Status -completed)
Under Next Run Date it is showing 4th July
Follwoing are the list of Updates available From SP05
When executing the critical roles/profile jobs in background, a message
"error while executing the Job: null" comes up. ---( this one is for which come under Informer Tab)
Background job spools are not available after upgrade from 5.2 to 5.3.
Critical action and critical role/profile analysis cannot be run in
background by system. --- ( But in my case It ran for once )
Selection parameters (System, User and User Group) have been provided for
"Critical Action and Role/Profile Analysis" in Configuration->Background
Job->Schedule Job. --- ( it means it run usually)
Critical Actions report in detail view shows no results after executing the
Risk Analysis Job in the background. The same report shows data when
executed in the foreground. ( this one is for which come under Informer Tab )
When there is only one periodic job configured in RAR, this job fails to
start after the first time in the specified time. ( this is not true, becoz there other periodic jobs running successfuly)
Unable to run Informer - audit reports - critical role and profiles with
logical systems. ( this is again under Informer Tab )
I had gone through this earlier also, but not able to match any update with my problem. If if have any other suggestion you can provide me the same.
Is there any way to check for job log so that I can check what is the problem. View Log option is also greyed out as we have sap logger set up as a default logger Parameter. I have made it enable just to check but there is nothing.
Please Guide.
Regards,
Kakali -
What is the spool, what is its role in background job scheduling
Hi,
I want to know what is meant by Spool request and spool number generated.
Tell about transaction SP01.
How it is linked to Background job scheduling.
thanks.
sam.Hi,
Refer this link.
https://www.sdn.sap.com/irj/sdn/inf?rid=/library/uuid/7a5f4061-0a01-0010-c9bc-a4e4cb100438
About SP01.
Printing does not work in SAP. There is a printer definition for your local printer, but it does not work. Presuming that you use the program SAPLPD on your computer.
Boot your computer and start only the SAPLogon and the SAPLpd program.
Delete all of your old print jobs in the SAP system (Transaction SP01).Generate only one new print job.
Check that there is enough resource in your computer. Check the free memory (Win 3.1x) and the free disk space (The lists are temporarily saved on your disk).
Open the SAPLPD and read the print log in the window. The printer definition must correspond with the parameters shown here.
Check that the standard printer is on the same lpt (Win 3.1: Control panel, Printer) as defined for the printer (usually lpt1).
In Transaction SP01 read the protocol of your print job. Do not generate new print jobs! Wait till the SAP system changes the status of the print job.
If you can not find the print job in SP01 anymore, then the print job was successfully printed out. If it didn't come out on your printer and the SAPLpd didn't indicate an incoming print job, then the connection was realised with another PC. Then SAP printer definition you used, does not correspond with your computer.
Scheduling Background Jobs:
1. Background jobs are scheduled by Basis administrators using transaction SM36.
2. To run a report in a background, a job needs to be created with a step using the report name
and a variant for selection parameters. It is recommended to create a separate variant for each
scheduled job to produce results for specific dates (e.g. previous month) or organizational units (e.g.
company codes).
3. While defining the step, the spool parameters needs to be specified
(Step-> Print Specifications->Properties) to secure the output of the report and help authorized users
to find the spool request. The following parameters needs to be maintained:
a. Time of printing: set to u201CSend to SAP spooler Only for nowu201D
b. Name u2013 abbreviated name to identify the job output
c. Title u2013 free form description for the report output
d. Authorization u2013 a value defined by Security in user profiles to allow those users to access
this spool request (authorization object S_SPO_ACT, value SPOAUTH). Only users with matching
authorization value in their profiles will be able to see the output.
e. Department u2013 set to appropriate department/functional area name. This field can be used in
a search later.
f. Retention period u2013 set to u201CDo not deleteu201D if the report output needs to be retained for more
than 8 days. Once the archiving/document repository solution is in place the spool requests could
be automatically moved to the archive/repository. Storage Mode parameter on the same screen
could be used to immediately send the output to archive instead of creating a spool request.
Configuring user access:
1. To access a report output created by a background job, a user must have at
least access to SP01 (Spool requests) transaction without restriction on the user
name (however by itself it will not let the user to see all spool requests). To have
that access the user must have S_ADMI_FCD authorization object in the profile with
SPOR (or SP01) value of S_ADMI_FCD parameter (maintained by Security).
2. To access a particular jobu2019s output in the spool, the user must have
S_SPO_ACT object in the profile with SPOAUTH parameter matching the value used
in the Print Specifications of the job (see p. 3.d above).
3. Levels of access to the spool (display, print once, reprint, download, etc) are
controlled by SPOACTION parameter of S_SPO_ACT. The user must have at least
BASE access (display).
On-line reports:
1. Exactly the same configuration can be maintained for any output produced
from R/3. If a user clicks u201CParametersu201D button on a SAP Printer selection dialog, it
allows to specify all the parameters as described in p. 3 of
u201CScheduling background jobsu201D section. Thus any output created by an online report
can be saved and accessed by any user authorized to access that spool request
(access restriction provided by the Authorization field of the spool request
attributes, see p. 3.d of u201CScheduling background jobsu201D section).
Access to reportu2019s output:
1. A user that had proper access (see Configuring user access above) can
retrieve a job/report output through transaction SP01.
2. The selection screen can be configured by clicking u201CFurther selection
criteriau2026u201D button (e.g. to bring u201CSpool request name (suffix 2)u201D field or hide other
fields).
3. The following fields can be used to search for a specific output (Note that
Created By must be blank when searching for scheduled jobu2019s outputs)
a. Spool request name (suffix 2) u2013 corresponds to a spool name in p. 3.b in
u201CScheduling background jobsu201D section above).
b. Date created u2013 to find an output of a job that ran within a certain date range.
c. Title u2013 corresponds to spool Title in p. 3.c in u201CScheduling background jobsu201D
section above).
d. Department - corresponds to spool Department in p. 3.e in u201CScheduling
background jobsu201D section above).
4. Upon entering selection criteria, the user clicks the Execute button to
retrieve the list of matching spool requests.
5. From the spool list the user can use several function such as view the
content of a spool request, print the spool request, view attributed of the spool
request, etc. (some functions may need special authorization, see p.3 in
Configuring user access)
a. Click the Print button to print the spool request with the default attributes
(usually defined with the job definition). It will print it on a printer that was
specified when a job was created.
b. Click the u201CPrint with changed attributedu201D button to print the spool request
with the different attributes (e.g. changing the printer name).
c. Click the u201CDisplay contentsu201D button to preview the spool request contents. A
Print and Download functions are available from the preview mode.
Exporting the Contents of a Spool Request
Use
You want to export the contents of a spool request as a text file to the SAP GUI working directory or to a directory of your choice. The content of the spool request is downloaded as plain text without, for example, graphics, images, or specific fonts.
The following procedures are irrelevant for the PDF-based form printing integrated as of SAP Web Application Server 6.40, since the print data can be opened and stored as a PDF. See also Displaying and Printing PDF-Based Forms.
Procedure
Exporting to the SAP GUI Working Directory:
Choose Spool Request ® Forward® Export as Text.
The entire text is stored in your SAP GUI working directory in ASCII format.
A file of this type is named using the following pattern:
.txt
Example: ABC0000004327.txt
You require appropriate authorization for this function.
Exporting to a Directory of Your Choice:
With this method of exporting a spool request, the content of the spool request is first displayed and you then download the screen list as a text file to the directory of your choice.
1. Select the spool request to be exported and choose Display Contents.
2. In the case of SAPScript/Smart Forms documents, activate list display by choosing Goto.
3. Choose System ® List ® Save ® Local File.
4. Choose one of the available formats and confirm your choice.
5. Choose a directory and save the spool request.
By default, only the first 10 pages of a spool request are saved in a file. You can increase the number of pages to be saved by choosing Goto ® Display Requests ® Settings and making the desired entries in the Display Area group box. -
Dear experts,
I have a BASIS query.
I have created a role "ABC_XYZ" which has authorization for company code - "1000" and has been assigned user "SMK001".
My query is,Can I use the same role "ABC_XYZ" assigned user "SMK002" but having authorization for different company code - "2000" only.
Can we restrict the legal entities and other business objects at user level instead of role level?
Any input appreciated.
Thanks in advance.Hi,
You can't use the same role for accessing other company code.
SInce this role is authorised for company code 1000, you can assign to any number of users, but all of them have access to 1000 only, not for 2000 compnay code. so the role concept is nothing but restricting the access to the orgn entities like CC, Plant, Pur orgn, sales Orgn etc.
all are restricted only with authorizations and roles only.
reward if useful
regards,
ANJI
Maybe you are looking for
-
I have a iMac where I have a music library set up. My friend has ipod touch, 32 GB. How do I select only certain songs from my library to go on his ipod (there are approximately 3000 songs in the library) without having to go through all of the son
-
Web Apps using Item Description in Google Maps Mouseover
Does anyone know if there is a way to use alternative fields from the web app to display in the pop up on the google map when you are plotting web app items on a google map from the list view? I seem to be only getting the option to display the addre
-
Adding Smilies in a web page.
How can i add smilies in a JSP dynamically such that used in a chatting applications during chatting?
-
Can I remove Adobe 9 after I installed 11.2?
Can I remove Adobe Reader 9 after I installed XI?
-
Hi Folks, Do we have any differences in the updatye modes in LO- Cockpit between the versions 3.0 and 3.5... What are the update modes in 3.5? Any inputs will be rewarded..