Roles for the System user

Hi All,
Currently, I am working on AII 5.1 Slap and Ship Outbound scenario and got the document from the service marketplace under http://service.sap.com/rfid -> SAP AII 2007.
Under Activating HTTP Services(Page no: 9 - 9th step) section , we have to provide the System user. May I know what all roles we have to assign for that user?
Regards
Sara

Hi Sara,
We need to use a System/Communications User in there. Though there is no clear thought on what authorizations are required for the same.
You can ask your basis guys to give a Systems user for restrictive access. This might be based on the policy of the basis team of what auths are generally given for a System user for a restricted use. You can use the same.
If this causes problems you can assign the user, the AIN related admin roles mentioned in the same document. This will work.
I have created a user called ALEREMOTE which is of the type Communications data with profile assigned SAP_ALL. This works for me perfectly.Though if you want you can give in a restricted access to as i have already mentioned.

Similar Messages

Question About Roles for the viewonly user

Hi I am trying to configure user with viewonly permissions to WLI 10.3 worklistconsole (worklist console-> view tasks). i did add the following groups to the user.
Monitors
Operators
Integration Monitors
Integration Operators
Integration users
i am able to start/stop servers (Admin Server,ms1 and ms2) but unable to view worklist console tasks.
Any help will be appriciate
Thanks
Ksr
Edited by: ksr11 on May 24, 2010 3:01 PM

Recycle domain fix the problem

Extract the userID that set a role for a specific user

Hi all @SAP Forums,
I'm going to write a simple report to extract some information about users and role assignments in the system I'm working on.
The requirements is quite simple; for every user in the USR02 table, I have to extract some info about the roles the user has.
In order to do so, it's quite straightforward to find roles for a particular user looking into the AGR_USERS table, but ... I'd like to know if there's a way to find the user who set the role assignment for that specific user; the problem is that I cannot find that information in any AGR* tables, so I start to think it's not a stored information I can retrieve in any way.
Any hints/suggests you can give me? Thanks in advance.

Hello muthu,
useful link to refer to when I'll need to extract a full username (first and surname) for a userId. But the question, forgive me if I've been not-so clear, was different.
A (key) user, say A123456, sets a role for another user (A00000) in SRM... let's suppose now A00000 becomes a buyer. I'd like to know if there's a way, starting from the user A00000, to understand WHO had given him his role (in this case, A123456) and WHEN... I can see the CHANGE_DAT field in AGR_USERS about the "when"... where can I (if I can, obviously) find WHO set the role for A00000 ?
Thanks again, sorry if I've been not that clear in explaining

Windows cannot load the user's profile but has logged you on with the default profile for the system.

My Windows 7 crashed a couple days ago after a windows update, I got this message.
Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.
I restarted the machine and got this message
Windows was unable to load the registry. This problem is often caused by insufficient memory or insufficient security rights.
DETAIL - The process cannot access the file because it is being used by another process. for C:\Users\TEMP\ntuser.dat
I checked the event Log I found these .
Windows cannot load the user's profile but has logged you on with the default profile for the system.
DETAIL - Only part of a ReadProcessMemory or WriteProcessMemory request was completed.
Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on.
Windows cannot load the locally stored profile. Possible causes of this error include insufficient security rights or a corrupt local profile.
DETAIL - The process cannot access the file because it is being used by another process.
This is the first error in the event viewer after a successful logon
The description for Event ID 34 from source ccSvcHst cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
ccSetMgr
Windows cannot load the user's profile but has logged you on with the default profile for the system.
DETAIL - Access is denied.
Looking at the Logs all I can tell is that after the Desktop Window Manager started if caused this error.
The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.
then this one
The Desktop Window Manager has exited with code (0x40010004)
Then this before it shutdown.
The User Profile Service has stopped.
I started up the PC and the first message I got was
How can I get access to my user profile? do I need to createa new Administrator account? Please help
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.

hi do the following
1. In Search programs and files (Windows 7) area, type in regedit, and press Enter.
2. If prompted click yes,
3. expand the following HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
4. click the sid that related to your admin profile (if you not sure, click each sid and in turn look to the right hand side of registry editor it will show who that sid is related to one of the registry files should hae in description localhost\admin or
something similair)
5. right click the sid and press delete.
6. restart your machine and log back on with the admin account, this will then rebuild the admin profile... dont worry when it loads and none of your personal settings are saved or files or folders... go to c:\users
in here you will see two folders for the admin account, one will be just admin and the other most likely admin.localhost
i cant remember which one is which but just check both, one will still have all your files and folders in it.
i suggest making a backup of your data before doing this incase something does go wrong, but ive had this happen many times in a domain enviorment and has worked for me everytime.

IProcurement is not a valid responsibility for the current user. Please contact your System Administrator.

Hi All,
When I am trying to click on the 'iprocurement Home page' menu in the iprocurement responsibility getting the below error message in R12;
"iProcurement is not a valid responsibility for the current user. Please contact your System Administrator."
Can any one let me know how to resolve this?
Regards
Joseph

Hi Joseph,
I am assuming that the user actually has the iProcurement responsibility assigned to them. If so, try the following solution from note 1560400.1:
1) Logon with System Administrator responsibility
2) Navigate to Profile > System, click on User and enter the user name
3) Search for profile 'Applications Start Page'. Delete the value set at user level and save
4) Retry
Regards,
Cheryl

How to find out whether the system user is a vendor or a purchaser

Hi,
I am working in SRM 5.0. I have a requirement that some fields of Bid invitation can be visible by purchaser but not to bidder.
How to find out whether the system user (user id though which system logged in) is a vendor or a purchaser. Kindly help me to resolve this issue.
Sushmita Singh

check his role.
is surrogate bidding available for that bidder.
via surrogate bid , purchaser can submit bid on behalf of the bidder.
masa is correct
pposa_bbp - search via user . so he might be a purchaser.
maintain business partner -supply your bidder bp number -edit
go to bidder data .Under bidder data you must flag "PERMIT PROXY BIDDING"
regards
Muthu
br
muthu

Multiple sessions for the same user

Hi,
The scenario is like this. The user is logged into the system using JAAS and
has a session object created. I want to create a new session for the same user
with the already available credentials. This is to provide the same user the access
to the application in another window with different session object. How can do
that in Weblogic 8.1 server ?
thanks in advance,
Krishna.

Hi
I think it would be easier to enable session time out settings using GPO considering you work in a domain environment..
Having session timeouts settings you could say... hey after 15 min of inactivity disconnect the user and then after 15 min of disconnected session log him off
Take a look at this URL: http://technet.microsoft.com/en-us/library/cc754272.aspx
Hope this helps
Best regards
Joaquin Camarero Muñoz

There is already a transaction for the systems of this product version(MOPZ)

Hello All,
I am trying to configure maintenance optimizer in Solution Manager 7.0
on Windows 2003 server and SQL 2005 server.
I am configuring this for SAP CRM 2007 server.
Created the server, database and system in SMSY
Created Logical Component in TA code SMSY
SM59 connection for SAP-OSS is OK.
S-User is assigned to a User.
Created a solution using TA code solution_manager.
Defined the product version for the solution created in the TA code
solution_manager.
When creating a Maintenance Optimizer transaction, I select the
product version and its logical component in the Plan Maintenance
(Phase) and click on Continue to go to Select Files Phase, I get below
warning:
Information Procedure 8000000130 Saved
Warning: Status was reset by system
Warning: There is already a transaction for the systems of this
product version
I cannot get pass this phase.
I have deleted and recreated the solution, carried out the same
activity again but its giving the same Warning
Warning: Status was reset by system
Warning: There is already a transaction for the systems of this
product version
Any help will be appreciated???
Regards,
Satish.

Hello Ragu,
Thanks for your response.
As of now, we do not have ChaRM in place. Secondly, we use a single customer number.
I would like to let you know that in our landscape we have two CRM server, one ECC sever, one SOLMAN7.0 server.
I tried to configure MOPZ for CRM, ECC, SOLMAN server to download the respective STACKS.
I was successful in configuring CRM and SOLMAN.
But when I tried to configure in ECC, it failed due to RFC erros.
So I deleted the transaction for the ECC system and deleted the system itself in Solution Manager.
Reconfigured the Systems in "SMSY", RFC connections are correctly defined to configure MOPZ between SOLMAN7.0 and ECC6.0.
When I start configuring the MOPZ, I cannot get pass the first phase and this is when I get an error: There is already a transaction for the systems of this product version.
Please let me know if you need further information.
Regards,
Satish.

Microsoft Word Has Not Been Installed for the Current User

Hi, everybody
I'm just starting our attempt to put together ZfD app packages for MS Office 2007. I've tried 2 different route with poor results for each. I'm looking for guidance and suggestions and, hey really, the simple final solution. :)
Objectives: Each app package will install locally one of the Office apps (e.g., Word) if it is not installed and then launch it, otherwise it will launch it. It gets installed locally to the C: drive using all the MS default choices, but runs from the desktop ZEN/NAL shortcut. All desktops are XP, not Vista or W7.
Routes tried and failed...
1) Simple app, uses distribution and run scripts to figure out if already installed, then installs using network shared drive and config.xml file for just the one app. The result ought to work -- no particular error in the package, those are fixed -- but what happens is something different each time with the MS setup.exe, and it never does complete without its own error (various and different each time). So, this appears to be completely unreliable because launching MS's setup.exe from a simple app is unpredictable and incomplete.
2) Snapshot of a successful setup.exe and config.xml install. This ALMOST works... well it does in fact work but the snapshotted app gives an error once it finishes launching -- "Microsoft Word Has Not Been Installed for the Current User" -- and exits. From the research I've done on this message, the MS program sees the "wrong" Windows profile on the destination environment, compared to that in the snapshot, and figures it's now been installed from a bootleg copy of Office 2007.
At this stage all I can think of is expletives. We've paid for everything, I've followed all the usual and customary steps, played by the rules, been polite (and also used the necessary computer swear words), and now I just want to insult everyone in Microsoft's marketing department for ruining everyone's life yet again. Can't we just do this, is it too much to ask!?!
Please help me. What is really going to work for distributing and maintaining Office 2007 apps using our ZfD environment? ALL USEFUL SUGGESTIONS WELCOME. Thank you. Bless you.
-Kent S.
Be strong as a ship and wise as a whale

These questions are really best in the Microsoft Office Forums.
These are MS Office Questions not ZEN Questions.
Novell did not design Microsoft's Office Install.
I have nothing against snapshots, but it does not work great with the Office
installs, which you yourself know since you are posting here with problems
based on that.
And your other method you are trying with the break out is not working well.
We also know that from experience.
We can tell you that the way most people install it and the way most people
succeed doing it, is by doing it the way recommended and designed by
Microsoft.
ZEN does that just fine.
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.
"KentFSmith" <[email protected]> wrote in message
news:[email protected]...
>
> Thank you, Grimlock (-Grimlock?-)
>
> Through a google search I encountered a very close suggestion, and the
> poster said they couldn't remember the name of a MS utility but that
> there was one that would break out the individual MSIs from the Office
> 2007 setup.exe bundle. The dependent app appears to be a simple and
> possibly elegant solution, but without a good way to break out the MSIs
> I don't see how to do anything other than with a config.xml ('Config.xml
> file in the 2007 Office system'
> (http://technet.microsoft.com/en-us/l.../cc179195.aspx)).
>
> Do you know of that utility and where I can find it?
>
> There is a lot of history here now of just doing the individual
> applications. Everyone gets Word and Excel, but much fewer get
> PowerPoint and Access. All other reasons aside, a compelling one is the
> reduced number of help calls to the Help Desk here. Occasionally we
> also just run the whole Office install for someone who needs some of the
> odd utilities, but that is easily cost-justifiable for us to break them
> out as exceptions. Otherwise, we focus 90% of our support on just Word
> and Excel and it pays off nicely.
>
> If we switch to putting full Office 2007 on all PCs then there may be a
> better approach that include other tools than ZfD, such as the fact that
> we replace 1/3 of all PCs in the organization each year (so that no
> hardware is more than 3 years "behind"). We could put 1/3 of all Office
> 2007 installs into the new PC image. But we still need to support all
> the use of the apps after the install, so ZfD MUST work well, it simply
> MUST work well or we're screwed, to use the vernacular. Also, just
> switching from what we've been doing for years -- single app orientation
> -- means introducing new-ish issues that have to discover and explain to
> our comrades, and to adjust our orientation with unknown future costs.
>
> But that may end up being the simplest adequate solution. And that's
> what I want.
>
> -K
>
> grimlock;1883526 Wrote:
>> Craig Wilson wrote:
>> > You should really focus on #1.
>> > Snapshot is not the way to go.
>> >
>> > Details about what is Not working or what random behavior may help
>> folks.
>> > Ask in the MS forums may help too. dont' mention zenworks.
>> > Just say you are installing as Administrator from a share and getting
>> these
>> > errors.
>> >
>> > While not 100% accurate, it should be good enough to get some good
>> feedback.
>> >
>>
>> Nor is installing 1 app at a time. Install the whole suite, have an
>> icon for each app that runs the exe for that app with a dependency on
>> the another app that points to the installer msi.
>>
>> If any user runs any app, it will run if the executable is there
>> (meaning it's been installed). If the executable is not there then it
>> calls the dependent application (the installer app) and installs it,
>> and
>> then runs it.
>
>
> --
> KentFSmith
> ------------------------------------------------------------------------
> KentFSmith's Profile: http://forums.novell.com/member.php?userid=2927
> View this thread: http://forums.novell.com/showthread.php?t=391573
>
>

How to use the SYSTEM user in hana cloud

Hello guys, I started with HANA cloud trial, but I havent been able to activate any projects due to an error with permissions,
Repository operation failed
Repository request failed. Cause: Repository: User is not authorized to execute specified operation;User 'DEV_7UKVVFEAC54C2E59OZZQSHXEN' has no authorization, privilege: 'REPO.EDIT_IMPORTED_OBJECTS', package: 'hello'!, code: 40,156, argument:
Now I believe the problem is obvious is that I dont have enough privileges, I went to the Users view and tried to add permissions to my user but I found out other error:
SAP DBTech JDBC: [7]: feature not supported: grantor and grantee are identical
Now I saw in several threads that if we want to add more privileges we should add them using SYSTEM user, but I just dont know how to log in with the SYSTEM user or how to switch to that user.
Any ideas or steps on how to do it?
Greetings!

I just tried performing the exact same steps as described in the tutorial and I can confirm that I get the same error. I get the same error from the Web IDE when trying to activate folders created via the sharing wizard of the Studio.
The problem would seem to be with the Studio version that is currently available from the HANA Tools update site. When packages are created from the project explorer (either directly or through project sharing), they are marked incorrectly as foreign projects (the little blue arrow on the icon).
However if you create the packages via the Content folder of the Systems view (as I did above for the hello package) or via the Web IDE; they are created correctly. I was able to setup a project in the Studio by pre-creating the package in such a way and then creating/sharing the project into the existing package. I still got an error on the .settings sub-folder, but I could ignore it and still activate the other objects.
Therefore I would suggest this approach or using the Web IDE.

Standard WebClient UI business role for the CRM 7.0

Hello Gurus
where can we get the below mentioned thing....i tried in service market place but i did not get
The predefined authorization roles are provided as attachment BP_CRM_ROLES.ZIP to the collective note of this SAP Best Practices version. Download and unzip the roles to your local directory
after dowloading we need to uplaod in to PFCG roles
(The purpose of this activity is to copy a standard WebClient UI business role and to assign a new authorization role to it. The WebClient UI business role is designed to centralize the authorizations, navigations, and content of the CRM WebClient UI.
The business roles will be adapted to the Best Practices scenario scope)
i am struck of ove here
regards
Sreeram

Hi Sreeram,
The roles you want to assign to the user you have to select for your scenario. The best practice role assigned to an user to navigate to the webclient. The other roles you assign to the user to give authoraization for your scenario. If you will go to C04 document you can get the standard roles which will be assigned to one particular user. For the standard user let sal SALES_MAN we assign the standard roles as peer the best practice as SAP_CRM_UIU_FRAMEWORK ,SAP_CRM_OR_ADMIN, SAP_CRM_OR_USER and BP_SLS_MANAGER. If you need other authorization for the user then copy the standard role and assign the authorization manually in transaction PFCG.
Hope this will help you.
Thanx
Chinmaya

Aperture (3.4.1) no longer opens and the following message appears: There was an error opening the database for the library "/ Users / Andrea / Pictures / Aperture 3 Library.aplibrary." How can I solve this problem? Thanks

I was using Aperture (3.4.1), when he appeared a notice that asked me to stop the Mac with the power button. When I restart Aperture no longer opens and the following message appears: There was an error opening the database for the library "/ Users / Andrea / Pictures / Aperture 3 Library.aplibrary."
How can I solve this problem?
Thanks

After a system crash your Aperture Library may be corrupted, because Aperture may not have been able to finish the ongoing database transactions.
Have you tried the Aperture Library First Aid Tools?
Aperture 3 User Manual: Repairing and Rebuilding Your Aperture Library
Try "Repair Database", and if this does not help: "Rebuild Database"
Regards
Léonie

Mandatory Authorization object for the BO user

Dear All
I am facing some problem for the BO user.
can you let me know what are mandatory Authorization object for BO user to run the dashboard without error.
Fast reply appreciate.
Thanks
Haji

Dear All
i am working for Analysis Authorization.
i included Analysis Authorisation object to the user.
S_RS_AUTH BI Analysis Authorizations in Role.
when i checked in the BW side its working fine.
when i checked the user in the BO side.
filter values are coming correct, but the values in the column are not showing.
its throwing an error.
kindly help me to solve this issue.
Thanks
Haji

Changed Ulimits values for the Oracle user and getting error -bash: ulimit: max user processes: cannot modify limit: Operation not permitted when logging in.

I'm trying to increate the ulimits for max user processes and open files for the oracle user. I've set the values in limits.conf, /etc/profile and in oracle's environment scripts. Now when I log in as oracle I get the below errors. If I change the ulimits back to the original values errors go away but ulimits aren't changed.
login as: oracle
[email protected]'s password:
Last login: Fri Mar 6 09:56:02 2015 from mtkadmin12
You are logging onto an Oracle system.
Kickstarted on: 2014-06-05
-bash: ulimit: max user processes: cannot modify limit: Operation not permitted
-bash: ulimit: max user processes: cannot modify limit: Operation not permitted
[oracle@servername ~]$

Thanks for the update.
I modified the /etc/security/limits.d/90-nproc.conf and added a line for oracle and also modifed the oracle.sh file. The ulimits are setting correctly when I su - oracle but they are still wrong when sshing in as oracle.
[root@mtkdevorap11d-1 ~]# su - oracle
[oracle@mtkdevorap11d-1 ~]$ ulimit -Ha
core file size          (blocks, -c) unlimited
data seg size           (kbytes, -d) unlimited
scheduling priority             (-e) 0
file size               (blocks, -f) unlimited
pending signals                 (-i) 1030982
max locked memory       (kbytes, -l) 94371840
max memory size         (kbytes, -m) unlimited
open files                      (-n) 65536
pipe size            (512 bytes, -p) 8
POSIX message queues     (bytes, -q) 819200
real-time priority              (-r) 0
stack size              (kbytes, -s) unlimited
cpu time               (seconds, -t) unlimited
max user processes              (-u) 16384
virtual memory          (kbytes, -v) unlimited
file locks                      (-x) unlimited
[oracle@mtkdevorap11d-1 ~]$
[oracle@mtkdevorap11d-2 ~]$ ssh mtkdevorap11d-1
Last login: Mon Mar 16 13:04:16 2015 from mtkdevorap11d-2.conveydev.com
You are logging onto an Oracle system.
Kickstarted on: 2014-06-05
[oracle@mtkdevorap11d-1 ~]$ ulimit -Ha
core file size          (blocks, -c) unlimited
data seg size           (kbytes, -d) unlimited
scheduling priority             (-e) 0
file size               (blocks, -f) unlimited
pending signals                 (-i) 1030982
max locked memory       (kbytes, -l) 64
max memory size         (kbytes, -m) unlimited
open files                      (-n) 4096
pipe size            (512 bytes, -p) 8
POSIX message queues     (bytes, -q) 819200
real-time priority              (-r) 0
stack size              (kbytes, -s) unlimited
cpu time               (seconds, -t) unlimited
max user processes              (-u) 16384
virtual memory          (kbytes, -v) unlimited
file locks                      (-x) unlimited
[oracle@mtkdevorap11d-1 ~]$

Role for business system defined in SXMS_CONF_ITEMS'

hi
in RWB integration engine status is red in detail it is showing.
'No role for business system defined in SXMS_CONF_ITEMS'.
how can i fix this.
regards,
krushi

HI
Runtime Workbench - Integration Engine
Are the Roles in SXMS_CONF_ITEMS and the SLD Consistent?
//***The role of a business system is defined centrally in the SLD. However, you can overwrite this setting locally in the table SXMS_CONF_ITEMS.
This test checks whether the role descriptions are consistent. If not, the locally defined role is used at runtime.
extract taken from this thread
http://help.sap.com/saphelp_nw04s/helpdata/en/a5/1b5342d8a7be30e10000000a155106/frameset.htm
Message was edited by:
Anusha Ramsiva

Roles for the System user

Similar Messages

Maybe you are looking for