Role Validity Query in CUA environment

Hi Guys,
Need your kind assistance here.
We have CUA in our environment.
Our requirement is that we need to change "Valid to" date for some roles (approx 10) for some users (approx 200)in a particular child system.Now the problem is that role and user combinations are not unique.
Please suggest a solution for the issue.
Peeyush
Edited by: PEEYUSH SHARMA on Nov 1, 2011 1:32 PM

Hi Peeyush,
I have gone through the same requirment but for largers numbers of users - 500 +
The best approach would be,
Pull out the details of assignment of roles to user from SUIM,
      Users By Complex Selection Criteria -->Giv the users details --> execute -->when the users are displyed click on the Roles icon,here you can find out the roles assignment to the users.
Now copy them to an excel,FILTER on the roles column...
Select a role and you can find the users assigned to the role... Go to su10 ,give the user details for the first role, and delete the assignment of the role from the users.Now again give the same users list in su10 and add the deleted role with new VALID date.

Similar Messages

  • User roles un-assigned in CUA but acces in child system is ok

    hi
    i am have a really weird issue. a user who has access in roles in child clients, suddenly his roles disappeared from CUA. it did not effect access in child systems. any suggestions how to investigate this.
    thanks

    Did you click the Naughty Button in SCUL? Check OSS Note 1074552...
    Could also be a cause of failing idocs.
    Regards,
    Trond
    PS: The above note is for cases where users loose their visible role assignments in CUA, although roles remain assigned in the child system(s), not for cases where role assignments from CUA never trickles through to the child systems. The mentioned OSS note is a direct result of a case worked on by yours truly in 2007. I include below a warning I posted on sapfans about the issue:
    Word of warning: RSUSR_CUA_CLEANUP_USZBVSYS is faulty!!!
    The program RSUSR_CUA_CLEANUP_USZBVSYS is available as a standard SAP program from at least version 6.20. It can be run from SE38/SA38 or launched from a pushbutton (far right) on the "results" screen of transaction SCUL.
    The program is intended to delete "obsolete" entries from table USZBVSYS, which contains log entries for assigned child systems in a CUA environment. The program is run in the main CUA system, and supposedly deletes entries for systems where users no longer have access.
    There is a serious problem with the program, as acknowledged and confirmed by SAP in an OSS note I opened a few days ago. Under certain circumstances (more than 500 entries for any child system in the CUA landscape), the program wipes clean the whole table, instead of just the obsolete entries.
    The consequences are dire. Table USZBVSYS is used for several fundamental CUA functions, such as remote password reset from the CUA master system. After the wipe, executing SU01 and attempting to reset a users password in a child system will no longer work. The assigned child systems are no longer visible in the reset password pop-up (nor anywhere else in SU01, including the Roles tab). You'll have to edit the user via SU01, and click on the annoying pop-up showing "new system assigned to user" for each system where the user has access...
    The only way to fix the issue is to re-run SCUG for all systems in the CUA landscape. We had to do this across 6 CUA's, each containing 30+ child systems/clients and 10000+ users, which was very time-consuming and annoying. Also, there seems to be cases where roles have been wiped out from users on the CUA master systems, possibly due to consequences of the empty USZBVSYS table.
    SAP has conceeded the program is faulty, and have proposed a new version (note 1074551). Without applying this correction, the program should NOT be run.
    Note that users can still log in to and work in the child systems, it's just the "visibility" from the CUA master system which is missing. Tables USLA04/USL04 are still intact.
    Just wanted to warn the community; we've spent some considerable time discussing with SAP and rectifying the mess created by RSUSR_CUA_CLEANUP_USZBVSYS...
    Edited by: Trond Stroemme on Aug 5, 2008 3:03 PM

  • BPC in CUA environment

    Dear colleagues,
    Could you pls share your experience with BPC in CUA environment. I know that OSS note http://service.sap.com/sap/support/notes/1757825 provides the workaround. My questions are:
    is handling high number of BPC teams with workaround feasible (more then 50 / up to 300)
    transporting roles to QA and PROD: as far as I understand technical names of the BPC roles may change when they are transported. There is a document which describes this - but I am not sure if it is relevant in our case http://scn.sap.com/docs/DOC-29197
    Thank you
    Ivan

    Hi Carlton,
    I have implemented BPC on CUA environment with approx 300 users previous year. I was involved as a external consultant so I don't have insight into daily operations. There are couple of admin settings for the environment to work and here I cannot give you details as it was done by BC team. After this is ready then daily operations are the following:
    So everything is same except user's maintenanance (assign DAP, TP, team). This cannot be done in BPC. Instead you have to find technical names of the roles created during DAP, TP, team creation and assign these roles to users in BW user administration. The technical names of the roles are in tables which you can see in the note 1757825.
    Regars
    Ivan

  • QAAWS error message "not a valid query"

    Hi,
    When I'm trying to connect to QAAWS I get this error message: "not a valid query. FWB 00025".
    Does anyone know how to solve this problem?
    The server where the BOE is installed on has been restarted a couple of times but it doesn't help.
    Universe Designer and WebI work fine.
    Thanks!

    Is QaaWs running properly on your system?
    To validate the installation, open a browser and type the following URL
    http://[server]:[port]/dswsbobje, where [server] corresponds to
    your web server address and [port] corresponds to the port where you
    set up in your web server. The default used by Tomcat is 8080. dswsbobje
    is the default name of the Web Service provider web application. Then Validate.

  • Problem executing a sql query in 10g environment

    Hi,
    I am having problem executing the following sql query in 10g environment. It works fine in 8i environment.
    I tried to_number(to_char) and it did not work.
    **A.APPL_ACTION_DT >= TO_CHAR("&v_strBeginStatusDate&", 'DD-MON-YYYY') AND A.APPL_ACTION_DT <= TO_CHAR("&v_strEndStatusDate&", 'DD-MON-YYYY')))**
    Any suggestions..
    --Pavan                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   

    I would be surprised if that worked in 8i as posted, although I no longer have 8i to test. You do not tell us the error message you are getting, but there are several things wrong with what you posted.
    First, the substitution variable requires only the & at the beginning, you have one on each end of your string, the one at the end will remain in the string that is passed to the database.
    Second, you cannot TO_CHAR a string with a date format as you are trying to do. The TO_CHAR function is overloaded and has two basic forms TO_CHAR(date, format_model) and TO_CHAR(number, format_model). Note that neither takes a string. It would appear that at least current versions of Oracle choose the second signature unless specifically passed a date datatype.
    SQL> select to_char('&h', 'dd-mon-yyyy') from dual;
    Enter value for h: 12
    old   1: select to_char('&h', 'dd-mon-yyyy') from dual
    new   1: select to_char('12', 'dd-mon-yyyy') from dual
    select to_char('12', 'dd-mon-yyyy') from dual
    ERROR at line 1:
    ORA-01481: invalid number format modelalthough I suspect that the error you are getting with your posted code is more likely to be ORA-01722: invalid number.
    Depending on the data type of appl_action_date, you are probably lokoing for TO_DATE instead of TO_CHAR.
    John

  • How to search roles by Query in SAP BW?

    how to search roles by Query in SAP BW?

    Use SUIM with option roles with Auth object and put S_RS_COMP or S_RS_COMP1 here u can put the query for which u want role.

  • Data validation query change

    hi experts
    I got request to change one data validation query.
    In the existing query,I see three parts...in top(first part) part,we have one query view from One cube.....when we come to middle part(second)..it has one query view from second cube.....finally,the third and bottom part contains some excel formulas which substract middle part(second) total from top part(first) total and shows the result....
    so when I run the query it automatically populates top part(first) from one cube and second part(middle) from other cube and shows result in third and bottom part...
    my change request is:
    I donot need to change the top part(first)...I need to change middle part(second view from top)....but I donot know how to change this one....if I search on technical name of this whole Datavalidation query ...it just shows query corresponding the top part of this data validation query....
    Please advise how to do this  if any of you have idea
    Regards,
    SChand
    Edited by: SChandx200 on Aug 10, 2010 8:10 AM

    Hi,
    There can be one of the two erason,
    Either source data got corrupt. In your case the data in fltfile was not appropriate yesterday,, May be..
    Or someone has change the Info package/Process chain for load the data and change that again today. (Check if is there any Info Package routine is written and got changed recently.
    I hope it will help.
    Thanks,
    S

  • ABAP User Roles and Query for accessing particular T- codes and Reports

    dear Gurus
    I have one problem, i want to know about ABAP User Query ,i have one requirement my user wants to Lock all the HR Std versus Customized reports in T- code SQ01,other department peoples also see the Payslips and Hr personal reports which is harmfull to the dept so i want to Lock all the reports in Std T- code in SQ01 and i have created one Customized User Roles or Query in which the T-codes and Reports are assigned only those particular user can access the T-codes and Std reports .how can it be possible i dont have any idea about user roles and Queries .
    kindly help me out or send me some documents related to user roles and queries
    regards ritesh sharma

    Hi Ritesh,
    https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/103cafc2-7a64-2b10-14b3-eddb7d324561
    Regards,
    Flavya

  • MDM-Validations Query Examaples , Tutorial , Material

    Hi Experts,
    Please, provide me with some Examples for MDM-Validations Query or some material with some detailed Example of Queries
    written .... for example Query for Compulsary field .... etc...
    regards,
    Jay.

    Hi Jay,
    As you seem to be clear with alternatives, i would be sharing about Masterdata management (i.e. MDM) from my perspective.
    In general,benefits of keeping Master data in 1 place is
    Conformance/Auditing
    Single view of customer
    Global data synchronization efforts
    Accurate reporting
    Consolidation after mergers and acquisitions
    Reduced effort to consolidate information
    Reduced cleansing/mapping of information
    Increased efficiency
    Reduced costs overall.
    with this much details you can refer to the URLs which have detailed infomation about every aspects of MDM:
    For detailed overview
    http://help.sap.com/saphelp_mdm550/helpdata/en/47/1c5928cd0412b8e10000000a1553f7/content.htm
    To know about Key capabilities:
    http://help.sap.com/saphelp_mdm550/helpdata/en/46/b8065a4df01517e10000000a114a6b/content.htm
    Read reference Guide of various modules of MDM:
    http://help.sap.com/saphelp_mdm550/helpdata/en/88/9f9c427055c66ae10000000a155106/content.htm
    Kindly go through these threads which will give you additional info:
    https://www.sdn.sap.com/irj/sdn/wiki?path=/display/profile/new%2bto%2bmdm%2b~%2bhow%2bis%2bcareer%2bin%2bsap-mdm
    Before you, many XI consultants have showed their eagerness to learn MDM. Kindly go through htese links to know more about the same:
    Newbie to MDM
    /thread/683426 [original link is broken]
    These links will also lead you to additional links which will guide you how to learn MDM.
    https://www.sdn.sap.com/irj/sdn/wiki?path=/display/profile/new%2bto%2bmdm%2b~%2bhow%2bto%2blearn%2bsap-mdm
    Learning MDM -- A short guide for rookies

  • Role Validity date

    Hi Guys,
    I have a role assigned to a user with a validity date (say 01/20/10 to 04/20/10). However after the expiry date the user is able to perform actions related to that role. I do have PFUD scheduled which runs every day. I understand that prgn_compress_time removes the expired roles but ideally the validity date should serve in restricting the access after the expired date.
    Please advise if something needs to be corrected in our system
    System SAP BW 3.5

    Hi Sindu,
    The automatic adjustments of roles validity can be done through running the report PFCG_TIME_DEPENDENCY.
    This report can be run on a daily basis in background.
    This compares the user master records for all roles and updates the authorizations for the user master records.
    You can run this report via SA38 if you want to use it on a daily basis or through SE38 if you wanna execute it once .
    For more details on this ,
    Goto Tcode PFCG
    click on Tab  "user"
    Next to user comparison button you will have the "i" information button. Click on it ...
    Hope it will he helpful,
    Cheers!
    Veena BJ

  • BP Role validity Date

    Hi,
    May I know how do I change the role validity date in business partner?
    What is the validity date for?
    Thanks.

    In transaction BP, you will see a magnifying glass button next to Change in BP role in edit mode. Click on that and you can change the role validity dates. There is no way of deleting the roles , hence if you want to say that this business partner no more valid , you can specify validity dates.

  • Form Based Role Validation

    I am trying to use the form based security role validation. I am using JDeveloper's built in OC4J. I am getting to my login form but when I try to submit I get the following:
    java.lang.IllegalArgumentException: Resource /j_security_check?j_username=myuserhere&j_password=mypasswordhere not found
    I have the user defined in the principals.xml file I am specifying the location of the principals.xml file in the WEBAPPNAMEHERE-oc4j-app.xml file which seems to be where JDeveloper wants it.
    Any ideas?

    See section 12.5.3.1 of the Servlet 2.3 specification for details. You need to be sure your HTML file uses the j_security_check, j_username, and j_password names like this:
    <form method=POST action=j_security_check>
    <input type=text name=j_username>
    <input type=password name=j_password>
    </form>
    The method must be POST, not GET. This means that the user/pass information will not be visible in the URL that is set back to the server; it will instead be in the HTTP request body.

  • CUP assignment - Role Validity

    Hi,
    I have a question about role validity periods in CUP when the request gets approved. Currently valid from period is selected based on request creation date and end date is always set to 12/31/9999. Is there any way the 'from date' can be set to the date the request gets its final approval with out asking the approves to change the dates as the request can have multiple approvers.
    Request approval is set at role level and auto provisioning is in place.
    Thank you.
    R R

    Srinivasan,  Frank
    Thanks for the replies. A custom program that looks at these periods and send emails, among other actions, to users with role information. This program can not send emails if the validity period is beyond certain days.
    Is this FM /VIRSA/ROLE_ASSIGN_CUA can be customized to accomplish this?
    As an option we can ask approvers to change the from date to current day.
    Thanks
    R R

  • Directory Services User/Role Validation concurrent request impact

    we have the Java WF Mailer active and have users that receive WF notifications via email and the worklist. If we are are constantly running the Workflow Directory Services User/Role Validation concurrent request, what will this do to them?
    Thanks & Regards,
    sree

    There should not be any impact on the notifications.
    Please see (Questions On The "Workflow Directory Services User/Role Validation" Program [ID 369279.1]) for how frequent you should run this concurrent program.
    Thanks,
    Hussein

  • EA2 - 'No Valid Query' message when pressing F4 (describe) on objects

    I am having a problem when pressing F4 on an object. In the SQL window I highlight a table, package etc and press F4 to describe the object. Before the description is displayed a blank message window appears with the title 'No Valid Query'. This can pop up several times before success. I am running this on Windows XP SP2 and oracle database 10.2.0.3.

    We had a bug logged for this issue. It has been fixed in EA3 (under development).
    -Raghu

Maybe you are looking for