Roles and user (SUIM)

how to find the roles of a transaction and who use(d) the tcode

Hi Rishi,
The role contains the authorizations, users need to access the transactions, reports, web-based applications and so on, contained in the menu.You can assign a role to an unlimited number of users.
Regards,
Satish

Similar Messages

Is it possible to export and import the roles and users tables?

Hi,
is there any possibility to export and import the role and user definitions?
We have a SAP MDM repository with a lot of roles and users and also with a lot of changes.
And now I'm searching for a fast and efficient way of managing the roles and users.
Thanks and Regards, Melanie

Hi Melanie,
There is no export/import functionality for roles and users. The only way to manage these in an automated way would be to write a program that uses the Java or ABAP APIs. Both APIs expose functionality to create, update and delete roles and users.
Hope this helps,
Richard

Table that stores the business role and user id mapping

Hi,
i want to know the table that stores the Business role and the business role and user id mapping in CRM system.
Thanks in Advance.
Regards,
Pricy

Hi Mary,
There is no direct table but there is a way to find it.
HRP1263 is the table where business roles are stored when maintained at org level. These are stored against the Position.
For getting user ID and position linkage refer table HRP1001.
In HRP1001 table use below criteria to get the User and Position.
OTYPE = CP
SCLAS = US
SOBID = User ID
ENDDA = 31.12.9999
Get the OBJID
Query the HRP1001 table again with following
OTYPE = CP
OBJID = OBJID from above Query
ENDDA = 31.12.9999
SCLAS = S
SOBID = Thats Position.
Pass the position to HRP1263 as below.
OTYPE = S
OBJID = POSITION
PROFILE - Thats business role assigned for the given position and user.
Hope this is helpful.
Regards,
Naresh

Configuring roles and users (adf security) application context wise.

Dear All,
I referred this tutorial (http://biemond.blogspot.com/2008/12/using-database-tables-as-authentication.html) which shows how to hook up adf security with database schema but at domain level which will be common to all applications in that domain. I want to make it different to each application. (i.e each application will use differene database schema for storing user credientials i.e enterprise roles,application roles and users.)
Can any one please point me to proper way..
Regards,
Santosh
jdev 11.1.1.2.0

Dear Frank,
<i>
Instead you have a single identity management system and have the application policies being different for the applications.Using ADF Security, users and groups can have different privileges in different applications
</i>
suppose i have 3 applications that use adf security, the users will be common to all applications. right..?Roles and group can be different for applications.
application polices means roles and group..?
So how it(application polices) can be made different for applications? is it inbuilt or some configurations needed ?. Can you point me to some blogs or tutorials for more reference.
Bet: Incase i hook up adf security with database schema.
Regards,
Santosh.

Identify system defained roles and user defained roles

Hi,
I have an issue.
Oracle Version : 9.2.0.1.0
Operating system: Windows 2000 server
How can we identify system defained roles and user defained roles?
Please help me to solve this.
Regards,
Mat.

Check yourself these views
DBA_ROLES
DBA_ROLE_PRIVS
USER_ROLE_PRIVS
ROLE_ROLE_PRIVS
ROLE_SYS_PRIVS
ROLE_TAB_PRIVS
SESSION_ROLES
For default predefined roles in the database, take a look at the below url.
http://youngcow.net/doc/oracle10g/network.102/b14266/admusers.htm#i1008784
Regards,
Sabdar Syed.

Role and User not listed

Previously I had created a role and added a user. The user
waited several weeks to try to login and now is receiving a message
that his role is no longer valid. When I login to administer the
site his role is not listed and when I re-created the role I can't
add him because his name is 'grayed' out and indicates that he is
currently assigned to the previous role.
Has anyone else had this problem? How can I fix it?

When selecting "Database", a Planning Create will create (or recreate) the Planning application in Essbase. This will erase any Planing supporting detail, account annotations, etc. It will also (IIRC) blow away the Essbase database.
A Planning database refresh updates Essbase with metadata changes (if any).
You know, I've never tried doing a Create->Security Filters.
Now if you mean Administration->Manage Security Filters->Create -- that will just update the filters with whatever the latest and greatest dimensional security is. If you selected all of the filters, it is as if you did a Administration->Manage Database->Security Filters. The idea being you might want to target it if you have many users/large filters.
I think the first time that user logs in you will see the username in the Administration->Manage Security Filters list.
Going backwards, re your first question -- provision the username in SS with access to the Planning app (however you do that, groups, individually, etc.), and give him Essbase server access. Have him log in. All should be good to go.
Regards,
Cameron Lackpour

Problem with role and user; user can't see the table

Hello forum,
I've created a role:
CREATE ROLE enr_service;
GRANT CONNECT TO enr_service;
GRANT ALL ON Locataires TO enr_service;
GRANT ALL ON Batiments TO enr_service;
GRANT ALL ON Sportifs TO enr_service;
GRANT SELECT ON Epreuves TO enr_service;
and also a user:
CREATE USER ENR1 IDENTIFIED BY password QUOTA UNLIMITED ON USERS;
GRANT enr_service TO ENR1;
ALTER USER ENR1 DEFAULT ROLE enr_service;
ALTER USER ENR1 DEFAULT TABLESPACE USERS;
I can connect to the database with this user but when I try to query a table he's been granted access to I get an error message:
SELECT * FROM Sportifs;
ORA-00942: table or view does not exists
I can't see what I've done wrong. Any help is appreciated.
Sebastian

user2019788 wrote:
Hello forum,
I've created a role:
CREATE ROLE enr_service;
GRANT CONNECT TO enr_service;
GRANT ALL ON Locataires TO enr_service;
GRANT ALL ON Batiments TO enr_service;
GRANT ALL ON Sportifs TO enr_service;
GRANT SELECT ON Epreuves TO enr_service;
and also a user:
CREATE USER ENR1 IDENTIFIED BY password QUOTA UNLIMITED ON USERS;
GRANT enr_service TO ENR1;
ALTER USER ENR1 DEFAULT ROLE enr_service;
ALTER USER ENR1 DEFAULT TABLESPACE USERS;
I can connect to the database with this user but when I try to query a table he's been granted access to I get an error message:
SELECT * FROM Sportifs;
ORA-00942: table or view does not exists
I can't see what I've done wrong. Any help is appreciated.
SebastianThat's probably because ENR1 doesn't have any table named SPORTIFS and he didn't qualify the table name with the schema name ...

Customised Oracle application and access to roles and users...please advise

Hi Gurus!
We are developing a customised Oracle application where we have users and roles...user - role mapping is done in the system administration module of the application.
Now, we are also developing Oracle discoverer reports based on this. Using 10g (10.1.2.0.2) for that.
When I am creating an EUL, I select 'New EUL for Oracle Applications users only' option, but, I do not have any 'FND schema' to specify. That's where I'm stuck up!
I want to give access to the 'roles' in tha same manner as I would give to the 'responsibilities' in Oracle Apps. But, I don't know how to do it here.
Can someone guide me on this?
Thanks and regards,
Aparna

Hi Aparna
It would appear that you posted the same question on the Discoverer forum. Here is the answer that I posted there:
If your application is not E-Business Suite you cannot install Discoverer into Apps mode. This mode is reserved for applications which are E-Business Suite, which basically tells Discoverer to use authenticate users using the FND tables owned by the APPLSYS user.
In your case, even though you appear to be using Oracle applications, because you want to take advantage of your roles you will have to install Discoverer into standard mode. As you are creating your EUL you need to uncheck the box which says grant access to PUBLIC and make this a private EUL. Then you will not have the headache of worrying about setting up new users. You simply manage what a role can do (Tools | Privileges) and what a role has access to (Tools | Security).
Now, when any any user connects to Discoverer their role will be evaluated and access will be restricted.
You can do the same thing using a PUBLIC EUL, except you need to reduce what that user can do (Tools | Privileges) to an absolute minimum, and then take control of this using roles. For example, you could have a set of functional roles, one each for say AP, AR, GL and so on, but you could further break this down by privilege, thus you could have roles called AP Viewer, AP User, AR Viewer, AR User and so on. The User roles would have full access while the Viewer roles would have a much reduced set of privileges.
You are basically setting up the Library approach that I discuss in my Discoverer 10g Handbook and in my white paper which you will find on my downloads page here: http://learndiscoverer.com/downloads/downloads.htm.
I hope this helps
Best wishes
Michael Armstrong-Smith
URL: http://learndiscoverer.com
Blog: http://learndiscoverer.blogspot.com

Link to Business Role and User Account

How to link an user account with a business role so that the user account can work with the new UI?

Hi,
Go to transaction PPOMA_CRM. Search for your business role say SALESPRO in the Position Search.Double click on the role so that its details are visible on the right hand side.Then search for your user from the user search.When it comes in the left side bottom, drag and drop it to the position on the right side.
Regards,
Rohit

Business role and user defenitions

Hello,
What is the difference between a business role definition and the user definition?

Hi,
User will maintain in SU01 tcode.
Under Owned Users, the Catalog Manager displays the users for which you have owner rights. SQL Studio allows you to view information about these users, and rename and delete users.
·        To display information about a user, select the user name, choose Catalog Manager ® Open Object Definition.
·        To change a user name, select it and choose Catalog Manager ®Rename Object.
·        To delete a user, select the user name, and choose Catalog Manager® Drop Object.
Business roles are any one like vendors, customers , competetors etc.
All the roles will maintain under Businss partner level. If you want to see the roles go to BUT100 table.
Regards
Srinu

Administration Menu Localization of User Permissions and Titles of DataGrids into the Roles and Users screens.

Hey LightSwitch Team,
I have a LightSwitch Web Application, that is already localized (en-EN and de-DE). Now I have the requirement to localize the names of the User Permissions into the Administration Screen (this is built-in functionality). How can I achieved
this?
Another Task is to translate the Titles of the DataGrid into the Users Screen and Roles Screen (Administration Menu), because they are in english language, instead of german (i.e. 'User and Groups', instead of 'Benuter und Gruppen' or 'Users
and Groups in this Role', instead of 'Benutzer und Gruppen dieser Rolle').
In addition of this the User Permissions are in the english language too. How can I translate all of them?
Note: Another texts are already localized (e.g. 'Rolle von Gruppe geerbt').
Many thanks. Any help would be greatly appreciated.

Hi AndySta,
Welcome to lightswitch forum.
According to your description above, if you want to localize your lightswitch application, you need add a localized resource file, add a Resources File, and then name it Client.de-DE.resx, then call a resource from code. Check out
https://msdn.microsoft.com/en-us/library/xx130603.aspx
for further information.
Best regards,
Angie
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Extraction list roles and users for entreprise portal.

Hi Everyone,
I work on Enterprise Portal only java.
I want to extract the list of all these users with their roles
How do I proceed?
Thanks for the help!
Regards Giglio

Giglio,
Its possible to access the list of user and their roles from portal in several ways:-
Approach 1:
User Admin -> Import/Export -> User Data Export -> Press Export Button -> Copy the user content and store in a seperate file -> Done.
Approach 2:-
You can write a custom progrram in Java using UME API to get the portal user information. You can use webdynpro for java or JSP Dynpage/abtract portal component to use UME API.
Ram

Need to retrieve additional attributes for roles and users

Hello
We need to access some attributes for our application. This information is not accessible through the core API. The attributes we need are as follows
User Account
     Password locked
                Date account locked last
          Account locked last by
          Date account last unlocked
          Account last unlocked by
          Reason for last account unlock
Roles
          Created By
          Person Responsible
          Changed By
I know we can access this attributes using the IPCDAttribute. What i want to know are the namespaces and the corresponding attribute names. Could anybody point me in right direction? I have seen that IUserAccount API has a method called isPasswordLocked() which should return me the locked information, but i cannot access that method in the java code.
Any help is very much appreciated.
Regards
Kalpesh
Edited by: Kalpesh Shirodker on Aug 5, 2008 3:10 PM
Edited by: Kalpesh Shirodker on Aug 5, 2008 3:11 PM

Hi Apurva,
This Srini, i need your help for Leave Encashment workflow Approval Process in 3levels of approval.
r u worked on same proceed for that. i can see the your posted on 5 months back in sdn.
i can implement the bidi. how to determine agent 3 levels and how to link to workflow template and which workflow step types are using one by one tell me.
Please i need your help leave encashment approval process. plz give me u r GMAIL ID.
Regards
MSR

Unable to authorize user using AccessControlService and user.roles and user.privileges are not set properly

Hi,
I am trying to enable/disable a feature based on user.roles.
Added a constraint for that feature as below,
    <adfmf:constraints>
      <adfmf:constraint property="user.roles" operator="contains" value="manager" id="c1"/>
    </adfmf:constraints>
In this case, Users have manager role should be able to access this feature.
My AccessControlService response is
{"userId" : "sales_mgr","roles" : [ "manager","MOO_OPPORTUNITY_SALES_MANAGER_DUTY","ZBS_ENT_SALES_MANAGER_DUTY"],"privileges" : [ "managerPriv","ZSF_DEFINE_SALES_FORECAST_PRIV","MOO_MANAGE_OPPORTUNITY_GROUP_SPACE_PRIV"]}
Repsonse has "manager" as one such role.
After adding constraint to the feature, am unable to access it.
I tried many possibilities like operator="contains" or "not" or "equal", but no use.
I don't know what is going wrong. Appreciate you help.
Thanks.

If you are on 11.5.10 or greater or standalone 2.6.4 if you pass the responder value to wf_notification.respond API it should be updated in wf_notifications.responder column. The comments is now updated in wf_comments table against the notification id and not wf_notifications.user_comment column.
Thanks, Vijay

Web login (JSP, Servlet) with roles and users list stored using db4o

Dear all,
I would be grateful if someone of you (the masters out there) could help me with the build of an application where the first page will be a login page.
The users will be devided in 3 categories (user, editor, administrator) and there member information will be saved in db4o database.
If the user has not been registered in the past then a registration page should come up allowing him to be registered and keep his details in a db4o database on the same site.
I am using JSEE8 and the site will be sent to a Tomcat server on the net.
Please please please HELP

I am giving some code for to redirect as the user is, But before that you have to made a extra coloumn "role" in your security table. and put admin, user as respective roles.
doPost(HttpReq...........)
String user = req.getParameter("UserName"):
String pass= req.getParameter("Password");
Then Connect the database with ur code ie class.forName etc
String sql= "Select * from security_table where Username= ' "+user+" ' and Password= ' "+pass+" ' ";
Statement stmt = conn.createStatement();
ResultSet rs= stmt.exequteQuary(sql);
if(rs.next)
String S1=rs.getString("Username");
String S2= rs.getString("Password");
String S3= rs.getString("Role");
if(S1.equals(user) && S2.equals(pass) && S3.equals.(admin)){
req.sendRedirect(http:// full path name of the page)
else if( S1.equals(user) && S2.equals(pass) && S3.equals.(user))
req.sendRedirect(http:// full path name of the page)
}else
req.sendRedirect(http:// full path name of the Error page)
}

Roles and user (SUIM)

Similar Messages

Maybe you are looking for