Roles from queries

Hi all,
I am able to get the name of queries included in a role.
But how to get the name of roles in which my query is published.
Is there any table which can give this information?
Can any body help me on this.
//Pradeep.

Hi,
1)Go to tansaction SE16 and give the table name RSRREPDIR.Give the query name in the field COMPID.
2)copy the GENUNIID from this table and give as input to table AGR_HIER in the field SAP_GUID.
3)we will get the role name in the column "AGR_NAME" of the above table AGR_HIER.
Hope this helps.
Cheers,
Srinath.

Similar Messages

Need procedure for creation of BW Roles, Assigning Queries,Publishing Roles

Hi Experts,
Could you please let me know the procedure for creation of BW Roles, Assigning Queries,Publishing Roles in Business Explorer (BEx - BW 3.5)
Thanks in advance,
Andy

Hi,
Creating BW Roles
http://help.sap.com/saphelp_nw04/helpdata/en/52/6714b6439b11d1896f0000e8322d00/frameset.htm
Assigning Queries
After creating the query, save the query to a role from the query designer.
Publishing Roles in Business Explorer
https://websmp101.sap-ag.de/~sapdownload/011000358700002894802003E/HowToBIPortal1.pdf
Hope this helps you..!
-Pradnya

Assigning roles to Queries

I have created a query which is a look alike of a similar query. I need to assign it the same roles as the original one.
My questions:
1. How do I see that to what roles the original queries are assigned?
2.How do I assign the same roles to my query now?
3. I have created the query and right now it is in Favorites folder. I want to know whether I need to remove it from there ?
4. Also, I have not placed the query in a workbook. Is it mandatory to place it in a workbook before assigning it the concerned roles ? If yes, then how do I place it in a workbook ?
Please guide me stepwise. I will be very thankful to you all.
Sufficient points will be assigned.
Regards,
Srinivas

Dear Srinivas D Rao ,
1)Go to Metadata Repository and select "Query". Find your query with CTRL+F and click on it. Assigned roles are displayed at the bottom of the page.
if you cannot find with that way or you need to know more than one query in 'one go', you can try
table RSRREPDIR type in queries technical name to field COMPID (use arrow icon 'multiple selection) to get COMPUID, then go to table AGR_HIER SAP_GUID = COMPUID, AGR_NAME is the role name
2)To assign the roles to queries you will have to query designer open query-> select the query which you want to assign and in the top there is option for the roles....it's third or 2nd from left.
once you click it will take you to the roles already existing in your system.
just chose the role to which you want to assign and click OK.
Before that... if you have no roles in your system...then you will have to create through t-code PFCG.
3)Favourite folder is your own place and it will be shown only to your groups.. so i think its not necessary to remove from favourities folder..
4)If you place the query in Workbook,then it will be easy to assign roles and authorization to it...
Note:
Suppose you have to test and validate the queries that are created then , for example you can have a role named test and validation and you can assign the queries to that role and you can add the users who can access these queries in that role.
Broadcast roles
we can broadcast to the roles.When u do like that all the users who are in that role will receive that.In the information broadcasting screen, under receipents u have to select the value for USER IN ROLE.
[Data Protection guide|https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/4b1f472a-0a01-0010-76a3-8f7b81d95c59]

How do get the role from ldap session.

i am using the follwing getting the role from the request in openldap and j_security_check:
f(request.isUserInRole("manager")){
how can i use this in the session:

You might wanna change permissions for that attribute ...
Change it from Admin to OWNER and you should be able to then get it for any user ...
HTH ..

How to get the Role from a process

Hi,
I have a process where I have different role panes with human intervention activities. Each human intervention invokes a screenflow.
Is there any method by which I can get the role pane from which an intance is generated
For e.g. in process P1, I have 3 different role panes i.e. R1, R2, R3. Suppose there is an human intervention activity A3 in R3. It invokes a screenflow in which there are different methods. I want to get the roleId here i.e. R3.
Through creation data I can know the instance creator i.e. participant ID, but a participant can have more than one role. I want to get the role from which the Human Intervention activity is invoked.
Please suggest / help.
Thanks
Jayant

Hey Thanks a tonn
It works fine by the following code
role = Activity.role
logMessage "message"
logMessage "Role: " + role.name
role.id returns an int, so I used role.name
Thanks and Regards
Jayant

Unable to delete Role from User ID in SAP SOLMAN production system but able to from DEV with the same authorization, pls suggest

unable to delete Role from User ID in SAP SOLMAN production system but able to from DEV with the same authorization, pls suggest

Hi,
For SU01 role removal, you do not need S_USER_AGR with 02, and as you mentioned both authorizations available in production, if so trace should not show you the S_USER_AGR with 02 with RC=04.
I would recommend to do role comparison for the user performing the activity. and then check if you have the S_USER_AGR with 02 in user buffer SU56.
But ideally it should not ask you S_USER_AGR for 02 through SU01, so please take help of abaper to debug it.
Also put trace in non-prd to see if S_USER_AGR is getting checked with 02 for removal through SU01.
BR,
Mangesh

Error while uploading roles from quality to production

Dear friends,
I have to upload roles from quality to production.
I have downloaded it from qualtiy but while uploading to production it is giving me an error "File does not contain valid data".
Can anybody tell me what could be the problem and how to resolve it.
Thanks in advance
regards
Nirgun

HI matore,
the best way is to transport the roles from DEV to QA and then to production as julius suggested
are you trying for mass down load are single role
Mass download
go to PFCG >> utilities>> Mass download>> select all the roles which you want to move it to production
and execute save it on desktop
now go to production system>> go to PFCG>>in menu click on roles>>click on upload>>select the file which is saved in desktop and click ok
mass generation of roles
in the menu click on utilities>>mass generation>>give the role names with you have uploaded and click on execute select all click on genetate button
download a single role
go to PFCG>>in the menu click on role>>click on down load and save it on desktop
now go to production system>> go to PFCG>>in menu click on roles>>click on upload>>select the file and click ok
now you needs to manully generate the role
do the user comparison
hope this helps
thanks
kishore

How to copy a role from one client to another in a system using the CUA?

Dear all,
I have a question about transporting roles. We have CUA configured on our SAP system. Our development environment contains several clients. Recently I created a role by using PFCG in the development environment named E1D-100. Later there was a need to affect a user by this role but on another client of the development environment named E1D-200.
How can I transport a role from a client of the development environment to another client of the same environment.
While I use SU01 to assign the role, after clicking on "user comparing", I can see that the new created role exists on E1D-100 (the client of the development environment where the role was created), but I see that the role doesn't exist on the other client E1D-200.
How should I proceed?
Thanks in advance,
Dariyoosh

Hello again,
Thank you very much for all of your answers. I tried both solutions and both worked pretty well. Thanks a lot for your help.
Kind Regards,
Dariyoosh

Replication of roles from cProject to R/3 PS

Hi
I want to know the procedure to replicate the roles from the cProjects to project system. If any one know pl help me.
Regards
Nanthu

Hi Zhenbo
I have received the Conf. guide and i have configured as per the guide.
The project definition,phases and tasks are replicated to R/3 PS but if i assign role in the project it is not replicating to R/3 PS. It is showing the following error
1.R/3 PS Network object could not be created.
2.R/3 PS Error occurred during processing.
Replicated incorrectly
Settings:
Account integration scenario : Replication to R/3 PS using CRM MW
Replication type : From release of project - Automatic
Project Elemt conf: 'Blank'
Please suggest me what should i do to replicate the roles to R/3 PS as activity.
Regards
Nanthu

Upload of BW Roles from BW (2004s)

Hi
I am in the process of uploading my roles from BW into the portal.
I was wondering if we can pre configure the properties that the reports (iviews) inherit as part of the upload.
For example after the role has been uploaded the property "Launch in New Window" is set as " Display in Portal Content Area".
We would like this to always default to "Display in Separate Window".
Can this be be setting be configured to apply to all reports uploaded as part of the role upload procedure. This removes the need to change each iviews properties after the upload.
Thanks in advance.
Ian
Message was edited by:
        Ian Carbonel

Hi
I have made changes to the BEx Web Application Iview however the changes did not appear to transport into my test environment.
I have found the following documentation relating to the protection of objects during transport.
http://help.sap.com/saphelp_nw04s/helpdata/en/70/ccc572a094fb4c9b15af909767b924/content.htm
·        At export: System objects and content objects with the namespace prefixes com.sap.portals* or com.sap.km* are automatically excluded from the export package and therefore not exported. PAR archives are not usually included in the export.
·        At import: If there are content objects with the namespace prefix com.sap.portals* or com.sap.km* in a package, they are automatically excluded from the import.
Is this the reason? Is it not possible to change the properties of objects in the namespace com.sap.portals*?
Thanks in advance

Integrate GRC 10.1 with CUA and how to import roles from CUA & Child systems into GRC for provisioning

Hello,
I am trying to integrate CUA into our GRC 10.1 system through the below steps and so far I have completed the below steps following SAP Notes 1680108 and 1616121:
1. Connected CUABOX to GRCBOX like a plug-in system.
2. Updated CUA Global System and CUA Model Distribution in Maintain CUA settings under User Provisioning.
3. Next I am trying to import the roles from CUA(CUABOX) into GRC(GRCBOX) to be able to provision roles in CUA Child Systems(ECCBOX).
After reading few discussions in SCN, I have figured that we have to download a template in Role Import and populate it accordingly to upload the CUA child system roles into GRC system for provisioning in CUA Child Systems.
Unfortunately, this template has multiple fields and I am unable to determine the fields that should be populated as CUA Global System and CUA Child System to import into GRC. Also, when we upload CUA Child System Roles template what selections should be made in Role Import window.
Any help in this regard is very helpful.
Thank you,
Pawan

Hi Alessandro,
I have "Create user if does not exist" setting checked for both change action and assign role action and also have CUA enabled. Here is the list of steps that I am performing:
1. Create an access request for new account, T-CUA_CHILD and select a role from a child system ECC Z_ECC_ROLE_IN_CHILD_SYSTEM.
2. Approvals provided to assign the ECC role.
3. I see the following in GRFNMW_DBGMONITOR_WD.
           Auto provisioning activity at end of request at Path GRAC_DEFAULT_PATH and Stage              GRAC_SECURITY
               New User:T-CUA_CHILD created in System(s): ECC (created without role assignments)
               T-CUA_CHILD User does not exist in target system CUA
GRC created an account without role assignment in ECC but also throwed me an error that the user does not exist in CUA.
However, if I select roles from both CUA and ECC it creates the account in both systems with the selected role assignments.
So I am wondering if there is way to provide CUA access to users by default for new account requests types. I have tried setting up default roles for CUA but it does not assign the roles by default until I select the CUA system.
Thank you for your help!
Pawan

Automatic upload of roles from ECC to portal (UME with LDAP)

Hi experts,
This thread reopen the question asked on the following message : automatic upload of roles from BI to portal
However, it concerns this time "UME with LDAP".
Problematic :
SAP Library 04s tells us that is not yet possible to automate role replication (or role assigment replication) from ABAP Based back-end to Netweaver Portal. Only manual process for initial upload is possible.
Source = http://help.sap.com/saphelp_nw04s/helpdata/en/41/5e4d40ecf00272e10000000a155106/frameset.htm
Questions :
1 - Did anyone ever try to implement such an automatic tool ?
2 - What if I'm not able to write on the Active Directory ? I am still able, at least, to automate role assignment replication from ABAP Based back-end to Netweaver Portal (ie. UME with LDAP) ? Directly from SAP R/3 to EP through UME, without passing through Active Directory since the group field is not maintained in AD.
Many thanks for your inputs
Alexis MARTIN

Hello,
As I did not read the previous thread I don't know what exactly you are trying to achieve, but I can tell you about what we have done - as far as it is not too late yet.
We use the portal with integration to a BI system. In the ABAP stack we have lots of roles with menu items for hundreds of reports. We want the users to see these roles in the portal.
First we have used the role migration tool of the portal to upload these roles. There is a Java API for executing role uploads from code. You need to create a webservice in the java stack to call this api, and can call the webservice from ABAP.
However it is just a question of time and role size until this will not work at all. Standard role migration is more or less crap, stability is a problem. It also creates a lot of logs in the PCD and thus fills the database with trash. (After a few OSS messages there is now a program for deleting logs + you can turn of logging.) Also upload of larger roles takes up to an hour, and you alwasy have the problem that your portal roles are not up to date during the day.
When I got completely fed up, I have implemented an own navigation connector. When you log on to the portal it will connect to the ABAP stack via RFC, load the role, and generate the portal menu from it. It uses caching, but on every logon it checks whether the role has been updated in ABAP since the last time it was loaded. It is up to date, faster then PCD navigation, and you need absoluetely no periodical synching at all. I cant even understand why this is not offered by SAP per standard!
Drawback is that it will of course only work for the menu items, and only menu items with an "URL-type" are supported. I'm prettry sure however that it would be possible to implement a few other types as well.
Let me know if you are interested in the solution, I can give you a few additional details: oliverDOTsvisztATwienerbergerDOTcom
Oliver

Pull User Role from identity manager in BPM process

Hi,
How can I pull user name, user role from different identity manager in order to configure hierarchy workflow in BPM process? can any one guide me on that??
Regards,
Amik

I'm having the same problem on WebLogic 10.3

Mass deletion of roles from users

I want to delete all roles from locked users. Is there a specific transaction for this instead of SU10? In SU10 one has to enter the roles to remove.

We developed our own application which locks users after a while, then removes their role assignments after a while, and then lists roles which no longer have any assignments or no one is using anything which the role authorizes.
This way you can optimize / automate periodic controls.
There is no standard monitoring cockpit for this, but you can use declaritive system params to destroy password based authentication.
The real trick with periodic controls is to target the sample before you unassign and destroy roles, but the ability to do that depends on how you buikd the roles.
Disclaimer: If you use composite roles then you have no chance. You are doomed.. ;-)
Cheers,
Julius

How to enable Load Roles from database in workflow builder

Hi,
I am new to workflow.
In the wrokflow builder, How to enable file -> Load Roles from database.
I am working on workflow builder2.6.3.5.
Thanks & Regards,
Bharathi.S

You have to connect to database to load roles. File --> Open --> Database, then select the workflow.
Then load roles, then save to database.
The save as to .wft file and work on for customizations.

Roles from queries

Similar Messages

Maybe you are looking for