Roles for Power & End User

Hi Guys,
I have two roles like Power User & End User, i would like to know what i need
to add in the "Menu" tab of the PFCG for each user.
Thanks a lot.

Karunakar -
Few things you have to keep in mind when you are giving access to the reports and queries.
S_RS_COMP only will not do.
have you assigned S_RS_COMP1 and S_RS_MPRO for info areas and multi/info providers.
and one more auth object S_RS_ICUBE for info cubes. you have to assign what ever the info cubes that you need to give access to the users.
Then only user will get full access.
precisely in order you can say,
S_RS_COMP
S_RS_COMP1
S_RS_ICUBE
and S_RS_MPRO.
These are main auth objects which are related to info cube, info area access and BEx access.
Hope this would give you clear pic.

Similar Messages

How do you hide Excluded Roles from the End User (8.1) ?

We have 2 Buisness Roles: Employee and Contractor. They are excluded from each other, meaning if you have one of the roles, you cannot be assigned the other role.
When a user logs into 8.1 to the OOTB "Update My Roles" WF, they see their Available Roles for selection.
These available roles listing includes the excluded roles.
So when a user with the Contractor role logs in, they see the Employee role as an available role.
If the Contractor user tries to add the Employee role, they will get an error due to the role exclusion.
I know it is possible to hide the excluded roles from the end user, but don't know how.
Does anyone know how to hide the excluded roles from users?
Thanks.

Hi
I may have misread your first comment but I totally agree with your response.
If the user has capabilities over multiple organizations it will show all roles, whether exclusion or not. (Been confirmed that this is how it is designed to work)
What could be done is when selecting a user is a specific organization, you could have a rule that only shows up the Business roles that are associated with that organization. So although you have the capabilities over all organizations you only see the roles that are available to the organization where the user is your are updating.
An idea anyway
Ian

Extract the userID that set a role for a specific user

Hi all @SAP Forums,
I'm going to write a simple report to extract some information about users and role assignments in the system I'm working on.
The requirements is quite simple; for every user in the USR02 table, I have to extract some info about the roles the user has.
In order to do so, it's quite straightforward to find roles for a particular user looking into the AGR_USERS table, but ... I'd like to know if there's a way to find the user who set the role assignment for that specific user; the problem is that I cannot find that information in any AGR* tables, so I start to think it's not a stored information I can retrieve in any way.
Any hints/suggests you can give me? Thanks in advance.

Hello muthu,
useful link to refer to when I'll need to extract a full username (first and surname) for a userId. But the question, forgive me if I've been not-so clear, was different.
A (key) user, say A123456, sets a role for another user (A00000) in SRM... let's suppose now A00000 becomes a buyer. I'd like to know if there's a way, starting from the user A00000, to understand WHO had given him his role (in this case, A123456) and WHEN... I can see the CHANGE_DAT field in AGR_USERS about the "when"... where can I (if I can, obviously) find WHO set the role for A00000 ?
Thanks again, sorry if I've been not that clear in explaining

Questions for the end users in Building an application.

Questions for the end users in Building an application.
Hello,
I am assigned a project in building a CF application. As far
as the business requirements, I have an idea from the MIS people.
However, I have a meeting with direct users and I have to ask
questions to add to my requirements. I am still a beginner in this
but I need to ask questions.
Can anyone give me tips? what basic / important questions?

For starters,
DO:
Ask them to discuss what they want to do with the application
Try to understand their level of computer literacy
Keep your conversation non-technical
Continue to interact with the users during the design and
development process
Try to identify a "champion" with whom you can interface as the
project progresses
DON'T:
Use technical terms or discuss technical issues
Talk down to them
Promise delivery dates until you have documented their
requirements and they have approved them

Is it possible for an end user to change application Theme?

Hi
Is it possible for an End user to change the theme or Font of the application.
We have a requirement where End user should able to change color or font of application (like we do theme change in some social networking websites)
Please provide some suggestions.
Many Thanks
--Vijay

You could:
1. export your current theme
2. change the exported file using a good editor and change the path
#IMAGE_PREFIX#themes/theme_10/
to
#IMAGE_PREFIX#themes/theme_&THEME_NUMBER./
and do that also with all strings related to that theme number.
3. crete an application item THEME_NUMBER
4. create an application computation for THEME_NUMBER to set it to a value (10) in case the value is null
5. import the theme and make it the current theme
6. create a link in your application which will set the value of THEME_NUMBER to whatever - 1 to 20 for the standard themes - and submit the change
This will change the template as you specify.
This explanation is of course simplified. Depending on the design of your application it may require considering some other details that need to be adjusted.
Something like in this example:
http://apex.oracle.com/pls/otn/f?p=25882:1
The assumption is that all of your referenced classes in all css files have the same name for the same class with a leading theme number (which istn't the case in standart themes). However, this can at least give you an idea on how to proceed. I have done that with some custom themes I created and it works very well.
Denes Kubicek
http://deneskubicek.blogspot.com/
http://www.opal-consulting.de/training
http://apex.oracle.com/pls/otn/f?p=31517:1
-------------------------------------------------------------------

Auth objects required for creating super,power,end user roles

Hi ,
I need to create 3 roles according to the below requirement. can you tell me what auth objects req inorder to fulfill customer requirement.
1.     Super User:
     Have the access to Create/Modify/Delete own queries
     Can create Variables, CKF, Structures, Formulas & RKF at the cube level (global)
2.     Power User :
     Have the access to Create/Modify/Delete own queries
     Can create Structures, Formulas at the query level
3.     End User
     Have the access to run and navigate reports at the local level
Hope I will get reply soon
Thanks

Karunakar -
Few things you have to keep in mind when you are giving access to the reports and queries.
S_RS_COMP only will not do.
have you assigned S_RS_COMP1 and S_RS_MPRO for info areas and multi/info providers.
and one more auth object S_RS_ICUBE for info cubes. you have to assign what ever the info cubes that you need to give access to the users.
Then only user will get full access.
precisely in order you can say,
S_RS_COMP
S_RS_COMP1
S_RS_ICUBE
and S_RS_MPRO.
These are main auth objects which are related to info cube, info area access and BEx access.
Hope this would give you clear pic.

Role of an end user

hai
everyone
can any body tell me wht is the roll of the end user and what he will do as an enduser wht r the authorisations given to the end user
as i was told to train end user
thanks
theja

Hi Theja,
The other end user role could be of a payroll manager who would be responsible for the payroll process. For this, you will need to give them authorizations to PA03, PC00_MXX_CALC, Posting to Finance program, Drill Down reporting, Wage type reporter for reconciliation, Pre-DME and DME program etc.
You will need to provide them with manuals for releasing the payroll, running the payroll, releasing the payroll for correction, Posting process, Exiting Payroll, Creating DME file etc.
You may also include a spreadsheet with the commom errors during a payroll run like employee being locked, no bank details, no work schedule rule so that they can correct the error immediately.
Hope this helps.
-Akshay

Is there a way for an end user to see who has membership in a security group

Windows Server 2008 R2
Active Directory Domain
Windows 7 workstations
I am looking for a way that my end users can look at a folder security tab and then discover who has membership in the security groups listed.
Is that possible? Any drawbacks or concerns?

Hi Tod,
Based on my research, other than viewing group membership in ADUC, we can use this PowerShell cmdlet
Get-ADGroupMember GroupName and Net Group GroupName to view members in a group:
However, these commands can only be used on Domain Controllers or when connecting to DCs remotely. That’s because accounts and account membership are stored on Domain Controllers, therefore we can only view group membership on DCs.
More information for you:
Viewing the Direct Members of a Group
http://technet.microsoft.com/en-us/library/dd391915(v=WS.10).aspx
Net group
http://technet.microsoft.com/en-us/library/cc754051.aspx
Best Regards,
Amy

Jabber for Mac - End User unable to Cut & Paste Images in IM

Full discloure: I am an END USER, not an IT admin or anything like that. Not sure if this is the proper forum to ask this question but figured it was worth a shot...
Running OSX 10.9.1 and Jabber 9.2.1.
I am unable to copy-and-paste images into IM conversations with co-workers.
My "cachedPresenceConfigStore.xml" file shows:
"<im_cutandpaste_enabled>TRUE</im_cutandpaste_enabled>"
and
"<screen_capture_enabled>TRUE</screen_capture_enabled>"
...yet these functions seem to be missing from the IM client. As far as I know our organization's service-side policy allows for sending images over IM (confirmed this using the jabber client on a windows machine).
Am I just "doing it wrong" somehow? Is there some special method I need to use to be able to paste images into an IM conversation?
Any help or direction is appreciated.
Thank you,
Jason

It appears they disabled it server-side as the button (a paperclip) normaly appears to the right of the emoticon button. While the jabber-config.xml file can block specific file extensions, it cannot disable the feature entirely. This is done within the Service Parameters of the server, which only an admin can see.
ProcedureStep 1 Choose Cisco Unified CM IM and Presence Administration > System > Service Parameters.Step 2 From the Server menu, choose an IM and Presence node .Step 3 In the Service Parameter Configuration window, choose Cisco XCP Router as the service.Step 4 From the Enable file transfer drop-down list, click On or Off.Step 5 Click Save.Step 6 Restart the Cisco XCP Router Service on every node in the cluster. For more information, see Restart CiscoXCP Router service, on page 43.
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/im_presence/deployment/9_1_1/CUP0_BK_D5B4C107_00_deployment-guide-for-imp-91.html
Please remember to rate helpful responses and identify helpful or correct answers.

Is there a way to have an AppleID for an end-user without credit card info attached to it?

I am in charge of managing the Macs in our department. We have purchased a volume license for Mountain Lion (can't jump to Mavericks yet until we upgrade other software). I have a code to redeem, but the end-user is supposed to have an AppleID. I went ahead and started creating one for her, but it asks for credit card information, and corporate does not wish to have this information attached to an end-user's ID - they just want to supply it at the time of purchase for any future purchases (fear of identity theft and/or unauthorized purchases, I guess).
Our Mountain Lion software is already purchased, so Apple shouldn't need the credit card info for us to be able to install it. I can't install Adobe's Creative Cloud software until she's at least up to Mountain Lion … I feel I am hitting a major roadblock here! Any suggestions? Is this a new requirement? My own AppleID (for work) that I've had for awhile has no credit card currently attached to it … must not have been required at the time.

Try this on that Apple ID to get the None payment method option;
This user, mountaingoatgirl, explains how to get a None option in your account details in the iTunes app on a Mac or PC. -
https://discussions.apple.com/message/24907941
Then in the future use Apple's suggested method to create Apple IDs that don't require a credit card.
Creating a new Apple ID for an iTunes Store, App Store, iBookstore, and Mac App Store account without a credit card -
http://support.apple.com/kb/HT2534

Activating a Windows 7 installation (for an end user) as a MS Registered Refurbisher.

I have applied to join the MRR program and have passed the test and am awaiting approval.
I was reading in the MRR manual that MS prefers that a refurbished PC is set up with sysprep so that the end user has to accept the license agreements and activate before using Windows.
However, the manual went on to say that the Refurbisher can choose to activate windows as a courtesy for his customers as long as he configures the PC to display the license agreements when the end user uses the PC for the first time.
This is probably a stupid question, but how is this achieved? Can Sysprep be somehow set to retain the activation information?
Or is this achieved using one of the tools on the OEM Preinstallation Disk or with the RPK tools described in the MRR manual?
Thank you for your patience with me :)

Hi,
Regarding to sysprep, the activation information will be removed or I mean it doesn't work (even the reference PC is activated) when you deploy the image to other computers.
This is the exact sentence from TechNet website
You cannot make an image of an activated Windows installation and duplicate that image to another computer. If you do, Windows fails to recognize the activation and forces the end user to reactivate the installation manually.
http://technet.microsoft.com/en-us/library/cc766514(v=ws.10).aspx
Add:
For a Refurbished PC, the PC has two labels; either the original Certificate of Authenticity (COA) label the PC manufacturer installed or the Genuine Microsoft Label AND a COA from the PC refurbisher. for manually activation, the end user can only use
COA from the PC refurbisher.
Yolanda Zhu
TechNet Community Support

Minimal access for the end users to access a page sharepoint.

I have a list Projects which i have put in a different aspx page by the name ProjectPage.
I have end users accesing that page where i have applied certian styles for dsplaying in a customized way.
However, i need to configure their permissions in such a way that they should be able to access any page other than the project page.
They should not even see the site actions bar and should not be able to access the _layouts/viewlsts.aspx page as well as settings page form the address bar.

Hello,
To restrict application page, either you can hide them from UI (but still be accessible by putting direct url) OR create a custom permission and uncheck "view application page" option. Refer this link for more info:
https://social.technet.microsoft.com/Forums/office/en-US/bc3e9e2e-e606-47a1-ace3-94aadd860e44/is-there-any-way-i-can-disable-site-actions-menu-for-readonly-users?forum=sharepointgeneralprevious
Hemendra:Yesterday is just a memory,Tomorrow we may never see
Please remember to mark the replies as answers if they help and unmark them if they provide no help
(On vacation from 16th Oct to 28th Oct 2014)

Adding a custom field for the end user in ecommerce

I'm working with a client that is selling a product that requires the end user to enter custom information before adding the product to the cart.
Its something like entering the name they want to engrave on the gift. How can i add this functionality within BC?

Depending on your requirements for a "signature", some people will just use a checkbox that indicates that you are "signing" the form, maybe some text for the agreement and a checkbox to agree. I don't know if your work flow requires an actual signature, but wanted to give you that bit of information.
Thanks,
Josh

Roles for the System user

Hi All,
Currently, I am working on AII 5.1 Slap and Ship Outbound scenario and got the document from the service marketplace under http://service.sap.com/rfid -> SAP AII 2007.
Under Activating HTTP Services(Page no: 9 - 9th step) section , we have to provide the System user. May I know what all roles we have to assign for that user?
Regards
Sara

Hi Sara,
We need to use a System/Communications User in there. Though there is no clear thought on what authorizations are required for the same.
You can ask your basis guys to give a Systems user for restrictive access. This might be based on the policy of the basis team of what auths are generally given for a System user for a restricted use. You can use the same.
If this causes problems you can assign the user, the AIN related admin roles mentioned in the same document. This will work.
I have created a user called ALEREMOTE which is of the type Communications data with profile assigned SAP_ALL. This works for me perfectly.Though if you want you can give in a restricted access to as i have already mentioned.

Role for a key user in BW

Hi gurus,
I want to build a role for my BW key users - they should be able to build queries in BEx Query Designer on all available InfoProviders and display the results.
Which authorization objects should they get?
Is there any standard role good for that?
Regards,
Dorota

hi,
below are some of the roles:
S_RS_RREDE: Reporting Developer on Development System
S_RS_COMP & S_RS_COMP1: Authorizations for using different components for the query definition. This authorization object is very important for reporting
regards,
Arvind.

Roles for Power & End User

Similar Messages

Maybe you are looking for