Role Validity date

Hi Guys,
I have a role assigned to a user with a validity date (say 01/20/10 to 04/20/10). However after the expiry date the user is able to perform actions related to that role. I do have PFUD scheduled which runs every day. I understand that prgn_compress_time removes the expired roles but ideally the validity date should serve in restricting the access after the expired date.
Please advise if something needs to be corrected in our system
System SAP BW 3.5

Hi Sindu,
The automatic adjustments of roles validity can be done through running the report PFCG_TIME_DEPENDENCY.
This report can be run on a daily basis in background.
This compares the user master records for all roles and updates the authorizations for the user master records.
You can run this report via SA38 if you want to use it on a daily basis or through SE38 if you wanna execute it once .
For more details on this ,
Goto Tcode PFCG
click on Tab "user"
Next to user comparison button you will have the "i" information button. Click on it ...
Hope it will he helpful,
Cheers!
Veena BJ

Similar Messages

BP Role validity Date

Hi,
May I know how do I change the role validity date in business partner?
What is the validity date for?
Thanks.

In transaction BP, you will see a magnifying glass button next to Change in BP role in edit mode. Click on that and you can change the role validity dates. There is no way of deleting the roles , hence if you want to say that this business partner no more valid , you can specify validity dates.

Issue while changing validity date for assigned roles: SAP IDM 7.2 SP8

Hello Experts
I assigned the Task on repository for validity modification for Roles as in below screenshot:
When I modify the role validity, Task defined for Validity modification doesnt get triggered and IDM executes the tasks defined as Modify Task and fails with below errors:
1. Could not obtain repository name from Pending object.
2. Error ! Audit id , Variable doesnt exist in MXPT_GET_ENTRYTYPE.
I tried checking provisioning audit logs but could'nt find any Audit ID created for validity modification and I guess due to this tasks are getting cancelled.
Why the task defined in Modify Valdity tasks doesnt get triggered when I modify the Role assignment validity ?
Am I doing anything wrong with the SAP Standard way of working ?
Regards
Deepak Gupta

Hi Deepak/Chris,
We are also facing a similar issue in our project where modifying validity of the role does not trigger any task. We then changed the Modify attribute(in task tab) on the priveleges to "inhereted".
The modify task is now triggered and completes successfully. However, no changes occur in backend.
We need unedrstand where do we maintain the setting to define which attributes(if changed) will trigger an event task in the provisioning framework. the "check attributes modification" task within the provisioning framework executes the below query:
select COUNT(VarName) from mxpv_audit_variables where AuditID=%AUDITID% and VarValue='%MSKEY%' and VarName='MARK_EXEC_MODIFY_ATTR%MSKEY%'
The query gives the result as "False" in case we only modify the validity of the role assigned to user. Thus no event tasks are executed for the same.
Can anyone please share where do we define the attributes for this query to give "True" as result for role validity modification.
regards,
Nits

Firefighter Validity Date Expiration Notice

All,
Is it possible for firefighters to receive (other than manually) automatically an expiration notice of their firefighter access once the validity date nears or ends?
Greg

Greg,
Not too sure that AE 5.2 would help here since you are more concerned on the USERID rather than the role
Here is a thought; I have all of our FF ids defined with the leading characters FF followed by the user id of the person it is assigned to; I also assign the role,Z_VFAT_FIREFIGHTER to the user to allow them access to FF; this role can have expiration dates which will allow AE to get involved; even if it did not, the reaffirm would help in reviewing who has FF access; normally you would probably assign an epxiration date to the FF id; I do this for those that require temporary access
In transaction SUIM, you can run a report for User>Users by Complex Selection Criteria and select the FF ids and add a date to the "valid until" field under Additional Selection Criteria; this report will show all ids that are valid through that date, including those already expired
I know this relates to a manual process done at a regualr time but perhaps you can have someone program this process and schedule the job to run lets say weekly (Sunday) and identify "valid through" the next Sunday; this report can then be sent to the person that would review it and take appropriate action
I'm not a programmer so I don't know what would be involved but it sounds like it may be an option for you
Jerry Synoga
Ryerson,Inc.

User validity date is not refelcting in Childsystem

Hi Experts,
I have changed the validity of a user in CuA system . But the validity is not reflecting in child system. on checking SCUL I found the error as " User type 75 is not actiive". I didnot find any issues in distributing roles and profiles for this user in CUA.only for user valdity I am reciving this error. Please advice how this error can be rectified. In SCUM the distribution parameter is global for user valdity. I need to know the root cause for this error.
Thanks,
Sanjeev.S

Hi Sanjeev,
Why dont you identify user master data that has not been changed from the central system and distribute it again where necessary.
You can do all this from SCUL
Look at the following SAP notes :
632486
First of all check if that user is existing in the child system and is active or expired:
Some times the user might have been deleted in the backend system and you are tyring to change the validity date of the user only on the CUA system because he exists only in the CUA box.
I strongly think that the user record is manually deleted in the child system
Please try to perform this action for another user who exists and see if its happening the same way.
if it does not.
Go to the child system and delete the user completely and recreate the user one more time in CUA and see what happens.
Edited by: Franklin Jayasim on Jun 29, 2010 7:04 PM

CUP assignment - Role Validity

Hi,
I have a question about role validity periods in CUP when the request gets approved. Currently valid from period is selected based on request creation date and end date is always set to 12/31/9999. Is there any way the 'from date' can be set to the date the request gets its final approval with out asking the approves to change the dates as the request can have multiple approvers.
Request approval is set at role level and auto provisioning is in place.
Thank you.
R R

Srinivasan, Frank
Thanks for the replies. A custom program that looks at these periods and send emails, among other actions, to users with role information. This program can not send emails if the validity period is beyond certain days.
Is this FM /VIRSA/ROLE_ASSIGN_CUA can be customized to accomplish this?
As an option we can ask approvers to change the from date to current day.
Thanks
R R

Role Validity Query in CUA environment

Hi Guys,
Need your kind assistance here.
We have CUA in our environment.
Our requirement is that we need to change "Valid to" date for some roles (approx 10) for some users (approx 200)in a particular child system.Now the problem is that role and user combinations are not unique.
Please suggest a solution for the issue.
Peeyush
Edited by: PEEYUSH SHARMA on Nov 1, 2011 1:32 PM

Hi Peeyush,
I have gone through the same requirment but for largers numbers of users - 500 +
The best approach would be,
Pull out the details of assignment of roles to user from SUIM,
Users By Complex Selection Criteria -->Giv the users details --> execute -->when the users are displyed click on the Roles icon,here you can find out the roles assignment to the users.
Now copy them to an excel,FILTER on the roles column...
Select a role and you can find the users assigned to the role... Go to su10 ,give the user details for the first role, and delete the assignment of the role from the users.Now again give the same users list in su10 and add the deleted role with new VALID date.

Upload and Download Errror " File does not contain valid data"

We are on the ECC 6.0 Unicode system.
I dowloaded the Role from QA server and tried to upload into DEV box.
I am getting the Error " File does not contain valid data".
However, when I downloaded the Role, it was done successfully.
Please let me know if anyone has that problem.
Thanks,
From
PRANAV

This is what I see here.
DATE 20090716 131756RELEASE 700LOADED_AGRS Z_BI_HR_REPORTING_FUNCTIONALAGR_DEFINE 210Z_BI_HR_REPORTING_FUNCTIONAL PTHAKER 20080523131557000000000000000PTHAKER 20090709142400000000000000000AGR_TCODES 210Z_BI_HR_REPORTING_FUNCTIONAL TRRRMX X 00000AGR_1250 210Z_BI_HR_REPORTING_FUNCTIONAL 000001S_RFC T-BD90003500 U O000004Authorization Check for RFC AccessAGR_1250 210Z_BI_HR_REPORTING_FUNCTIONAL 000002S_RS_AUTH T-BD90003500 U O000013BI Analysis Authorizations in RoleAGR_1250 210Z_BI_HR_REPORTING_FUNCTIONAL 000003S_RS_COMP T-BD90003500 U O000016Business Explorer - ComponentsAGR_1250 210Z_BI_HR_REPORTING_FUNCTIONAL 000004S_RS_COMP1T-BD90003500 U O000023Business Explorer - Components: Enhancements to the OwnerAGR_1250 210Z_BI_HR_REPORTING_FUNCTIONAL 000005S_RS_FOLD T-BD90003500 U O000029Business Explorer - Folder View On/OffAGR_1250 210Z_BI_HR_REPORTING_FUNCTIONAL 000006S_RS_HIER T-BD90003500 U O000032Data Warehousing Workbench - HierarchyAGR_1250 210Z_BI_HR_REPORTING_FUNCTIONAL 000007S_RS_ODSO T-BD90003500 U O000038Data Warehousing Workbench - DataStore ObjectAGR_1250 210Z_BI_HR_REPORTING_FUNCTIONAL 000008S_RS_PARAMT-BD90003500 U O000045Business Explorer - Variants in Variable ScreenAGR_1250 210Z_BI_HR_REPORTING_FUNCTIONAL 000009S_TCODE T-BD90003500 S O000009Transaction Code Check at Transaction StartAGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000001S_RS_COMP T-BD90003500 RSZCOMPTP CKF U O000021AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000002S_RS_COMP T-BD90003500 RSZCOMPID * U O000020AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000003S_RS_COMP1T-BD90003500 RSZCOMPID ZHCM* U O000025AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000004S_TCODE T-BD90003500 TCD RRMX S O000010AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000005S_RS_HIER T-BD90003500 ACTVT 71 U O000033AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000006S_RS_HIER T-BD90003500 RSHIENM * U O000034AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000007S_RS_HIER T-BD90003500 RSIOBJNM * U O000035AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000008S_RS_HIER T-BD90003500 RSVERSION * U O000036AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000009S_RS_PARAMT-BD90003500 PARAMNM * U O000047AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000010S_RS_COMP T-BD90003500 RSINFOAREAZPA_ECM* U O000018AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000011S_RS_ODSO T-BD90003500 RSINFOAREAZPA_ECM* U O000040AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000012S_RS_COMP1T-BD90003500 RSZCOMPID ZPAOS* U O000025AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000013S_RS_ODSO T-BD90003500 ACTVT 03 U O000039AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000014S_RS_COMP1T-BD90003500 RSZCOMPID ZPAPA* U O000025AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000015S_RS_ODSO T-BD90003500 RSODSOBJ * U O000041AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000016S_RS_ODSO T-BD90003500 RSODSPART DATA U O000042AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000017S_RS_ODSO T-BD90003500 RSODSPART DEFINITION U O000042AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000018S_RS_ODSO T-BD90003500 RSODSPART EXPORTISRC U O000042AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000019S_RS_ODSO T-BD90003500 RSODSPART UPDATERULE U O000042AGR_1251 210Z_BI_HR_REPORTING_FUNCTIONAL 000020S_RS_COMP T-BD90003500 ACTVT 03 U O000017AGR_1251

Error messege- Please enter a valid date in Background Job

Hi all,
background job which is scheduled in sm37 is giving error for dated 01.01.2009 to 30.01.2009.
But before 31.12.2008 it was working fine
error messege-
This is happening in Production and developement client.
While running the report it showing the error messege- Please enter a valid date
One function module is used in the report for geting fiscal year from date.
it is showing the following error messege for perticular date range- 01.01.2009 to 30.01.2009.
GM_GET_FISCAL_YEAR
Error
Fiscal year variant V3 not defined or maintained for date 01.01.2009
Thanks
Susanta

Hi,
Did you put the date fields to be dynamic in your variant? i.e if in your variant you specified date range of last year, this will not work for this year and eventually give you an error message that the date is not valid...
Dev.

Error messege in Background Job(SM37) - Please enter a valid date

Hi all,
background job which is scheduled in sm37 is giving error for dated 01.01.2009 to 30.01.2009.
But before 31.12.2008 it was working fine
error messege-
This is happening in Production and developement client.
While running the report it showing the error messege- Please enter a valid date
One function module is used in the report for geting fiscal year from date.
it is showing the following error messege for perticular date range- 01.01.2009 to 30.01.2009.
GM_GET_FISCAL_YEAR
Error
Fiscal year variant V3 not defined or maintained for date 01.01.2009
Thanks
Susanta

Hi,Because this datein the past

BOM Valid Date

Hi,
While creating BOM due to some human error we took wrong valid date.Now i want to change it.
Please suggest me the T-code or any customization to change the same.
"I am online"

Dear Pawar
This are the basic IMG settings in order to used the engineering change management
features.
x refers to a tick.
First setup the control data in OS54.
Revision sections
Fields :-
Revision level active            x
Ext. revision level              x
Higher revision level            x
Object Management Record sections
Fields :-
Object maintenance               x
Assign alternative date          x
Overide value/assignment date sections
Fields :-
Only with leading change mst.    x
Setting the Revision level active is to activate the engineering change management for
material master. If you do not want the engineering change management for materials,
remove the tick.
With a tick in "Higher revision level", the new revision level has to be always higher
than the old revision.
Secondly, setup the external number range in OS53.
If you use the internal number range, then remove the external number range.
Third, define the status for the change master records in transaction SM30 - V_T419S.
Change No.     Chg        Date Chg     Dist. Lock      Description
Status         Poss
1             x            x             ' '         Active
2            ' '          ' '            ' '         Inactive
3            ' '          ' '             x          Locked
Fourth, define modification parameters for the BOM in OS27.
Fields :-
BOM Validty Maint.               x
EC Management Active             x
History Requirement             ' '
Unit Piece                      PC
The rest of the fields are blank.
If the History Requirement is tick, every time during creation of the BOM, SAP will
prompt your for an ECN number as is compulsory.
Lastly, define fields selection for routing in OP5A.
PP task lists: initial screen -> Change number -> Transaction code -> Tick Req.
Setting the Transaction code fields Required indicate that you have make the ECN number ........
Hope this will help you one of our friends gave me this
Pavan

Regd : How to find Validity date for a user in central user system

Hi Experts;
I want to get the list of users with profile SAP_ALL with following details like validity ,user type ,user name ,user id..
I can get through SUIM for each individual systems.Its very difficult to login to each system ,generate the report.So I prefered to go for Central system
But if I use central user system I have no option to find validity and user type for the system ( SUIM - > Cross system application )
I have also tried to the table USRO2 ( which gives only the list of users in the central system )
So is there any possible ways to find the Users with profile SAP _ALL with validity date in the central user system. So that I can easily generate it as one report instead of logging to each and every system
Regards
Sanjeev.S

Hi Ruchit
Thanks for your reply. I want to find the validity date of all users having SAP_ALL
profile of all child system connected through central user system .So it is possible
to do that in Centrals System by executing the report?
If I execute that report in Central user system will it give the details of all child
system connected to central system
I think it will give only the result of Central system and not the child system connected to Central system.Please clarify me.
I can execute the report by logging to each child system ,but it takes very long hours for me since there are many system in my landscape.
Awaiting for your reply.'
Thanks
Sanjeev.S

IPhoto says it cannot import my photos b/c they may be an unrecognized file or the file may not contain valid data. The operation could not be completed. Error code is: ImageCaptureCoreError-9905.

Unable to download photos from my camera. iPhoto returns an error message that states: The following files could not be imported (they may be an unrecognized file or the files may not contain valid data). FILE NAME: 100_0490.JPG REASON: com.apple.ImageCaptureCoreError- 9905. WHAT'S UP WITH THAT? Did not have a problem importing photos under the LEOPARD OS, however, now that I have upgraded to Yosemite 10.10.3 the iPHOTO app is not performing the imports.

Are you using Photos, or iPhoto? Maybe you've got a corrupt file on your camera. I would try using the image capture application to import the bad picture to my desktop. If it works and the picture looks ok, then delete that pic from the camera, then try to import into iphoto again. You can then import the pic it was saying was bad from your desktop.
Or, try downloading all the pics using image capture and then import from the download folder.

Validity date in RFQ

Hi all,
Can anyone explain me what is the correct definition of the Validity start date and end date in the RFQ.
The reason I am asking this question is , If you eneter the start date and end date in the RFQ and create the PO with reference to RFQ, these dates gets copied on to the PO. if the document type of PO is NB then these fields are not visible on PO screen bu in the background the table EKPO is updated with these two filed. And the if you try to eneter the SES after these dates sysetm is not allowing and giving the message as SES date is beyond the valididty date.
Has any one come across any such issue. Can any one suggest any solution to this.

Hi Don,
RFQ means...requesting quotation from a vendor. Validity date start and validity end means the quotation should be send before the validity end date from the vendor. Before getting the quotation and before knowing the rate, how could you make purchase order to that vendor. Before you rise PO, you should maintain the quotation in ME47. As per standard SAP, you should rise po w.r.to quotation.
Regards,
Prasath

Mass extention of service entry sheet condition record validity date

Hi all,
I have immediate requirement. i need to extend the validity date for condition record related to the Service entry sheet. This has to done mass sheet changes.
I am looking for Any bapi or Standard function module or any config changes.
I am looking forward for your valuable inputs.
Regards,
Sreenivasa Sarma K

Arun,
This doesn't suprise me...
I'm not sure if there is a standard solution, but you could do this via user-exit/BADI (see [here|http://www.sapfans.com/forums/viewtopic.php?p=648307] under maintenance plans )
PeteA
[www.pjas.com]

Role Validity date

Similar Messages

Maybe you are looking for