SAP_ALL and non SAP_ALL

Hello Experts,
I faced an issue here about the authorization:
When the user who have the SAP_ALL in their authorization, the workflow can find the next approval agent.
When the user does not have the SAP_ALL in their authorization, the workflow cant find the approval agents (throws out an error states cannot find agent).
Is there anyone know what is the exact cause of the authorization? There cant be all approval agents within the company to have SAP_ALL authorizations due to security reasons.
Note: I've tried to test out the rule and the bindings as well and they seems fine.
Thankyou in advance.

Hello Mike,
The 'advance with dialog is checked'.
But the workflow is built in such a way that after the generic 'decision step', there will be a container to update the workflow container (that determine the next approval level).
Then the workflow will loop back that generic 'decision step' to find the next agent based on the matching of 'approval level' container with the customised agent rule. The task of the generic 'decision step' is already been set to default 'general task'.
Thanks,
Han Yean

Similar Messages

Hot to restrict sap_all and sap_new

hot to restrict sap_all and sap_new

Hi,
SAP_ALL & SAP_NEW profiles will not be assigned to any users in production environment (Not even to the OSS Users). However, there will be derivatives to these profiles. i.e, these two profiles will be copied and restricted.
Secondly, profile addition will not be done to any user until and unless it is critical. Instead of SAP_ALL, SAP_NEW, other profiles will be assigned like A_ALL etc.,
Have a look at the following link, which may help you:
http://www.learnbasis.com/knowledgebase/index.php?view=ViewArticle&id=29&set=all
Rgds,
Raghu
<removed by moderator>

How to maintain Employee photo in ESS who's who without sap_all and sap_new

Hi ALL,
Displaying Employee photo in ESS Who's who. it is working but with SAP_ALL and SAP_NEW user profiles.
My requirment is without SAP_ALL and SAP_NEW user profiles. how it is working where can i maintain authorizations for this issue.
The parameter i used are as follows:
Business obj: PREL
Doc type: HRICOLFOTO
Personal num: 00000094
Infotype: 0002
Photo type: .JPG
please help me.
Regaards
Satya.

Dear satya .
Please check the following
1. Trace with the t.code ST01 and check that object require.
2. The portal require the following obect:
S_SERVICE
S_RFC
P_PERNR
PLOG
P_ORGIN/ P_ORGINCON
P_HAP_DOC, if you work with Appraisal Document.
3. Check the table T77S0
P_PERNR, P_ORGIN, y P_ORGINGCON
4. Check that you have the roles need for ESS.
SAP_ESSUSER
SAP_ESSUSER_ERP05
SAP_EMPLOYEE_ERP05
SAP_EMPLOYEE_ERP_13
SAP_EMPLOYEE_ERP05_xx
SAP_EMPLOYEE_ERP_13_xx
5. Check the following notes:
SAP Note 857431 - ESS: Authorizations and roles for WD services in ERP 2005
SAP Note 844639 - MSS: Authorizations and roles for WD services in ERP 2005
SAP Note 1373177 - Back end authorization roles missing in EHP4
SAP Note 824757.
[ESS Quick Start|http://www.cogentibs.com/pdf/cogsap08/ESS.pdf]
Hope is help you.
Regards
consultor_ess_mss

Spro full authorization without sap_all and sap_new

Hi Friends,
Can u suggest me how to give spro full authorization without sap_all and sap_new profile.
Thanks & Regards,
Tarun

Hi Gowrinadh,
This is an interesting discussion. I don't mean to take shots at your concept, but I have some concerns about it as a solution.
> I have prepared a role 8 months back, we passed 2 patch upgrade cycles and I can confirm that this role will work even after the next version of ECC upgrade.
Sometimes the symptoms only make themselves visible later, and we don't know what is coming in the next version of ECC. Of course it should be largely compatable, but there will be new stuff. You can be sure of that.
> If there are any modules or new functionalities required, then customer has to request for it in addition.
My understand is that the customer requests a full and working SPRO role for each release. They will not find the tcodes for you and do not want to play ping-pong via support tickets either with it.
So each time you bill your customer for the 20 or 40 hours work for maintaining these tcodes manually in ranges? Appart from being error-prone, this solution is not scalable for when SAP might introduce another 20000 tcodes into the SPRO. Or someone convinces SAP to introduce an S_TCODE check for every line of code the whole system... (this is something which some people seem to believe in...), which would introduce several billion new tcodes for you...
> For which we can build separate role.
That is different. The question here (and certainly your solution) is to have them in the same role without duplicates but still including all SPRO access.
If you build them as seperate roles, then you can merge them as projects into one composite and live with the duplicates while checking for any known objects which should not be included.
I would agree with you. That is in my opinion a better solution, but it is not what you have been describing earlier.
> We can plan for authorizations and build roles based on the inputs for today and tomorrow received from customer.
That is the whole point in having maintainable roles and scalable processes. Manually maintaining 20k tcodes is incompatable with such requirements.
> By the way, the max no of consultants and business process owners having this role is not more than 40.
I don't think that assigning the role to less people will make it more usefull, nor that assigning it to more people will bring down it's per user cost of maintenance.
There is some old code posted here already which does what you have described in less than 1 minute. You can find it via the tables I have mentioned above, and will recognize it (and it's age) by the header lines it uses for internal tables. But it still works, since about release 3 point something...
Cheers,
Julius

ALEREMOTE profile to run chain:do SAP_ALL and SAP_NEW contain S_BI-WHM_RFC?

In order to run process chain, we know that the RFC user ALEREMOTE has to have the profile S_BI-WHM_RFC assigned to it.
Now our we run process chain on BW PROD, find the first few variants fail and the whole chain stops in the beginning. We check the profiles assigned to ALEREMOTE and find our BASIS gives it two profiles SAP_ALL and SAP_NEW. Not sure if SAP_ALL and SAP_NEW contains S_BI-WHM_RFC.
Any answer?
Thanks

Kevin,
Yes, sap_all have that profile.
Sap_all and sap_new gives every authorizations of the system (you can say is a "super user").
This may be a little risky, but you won't have any problems with process chains.
Which error gives you de chain?
Hope it helps,
Regards,
Diego.

Differences between client copy with sap_all and database copy

What's the difference between client copy with sap_all and doing a database copy.
I know if I do a database copy from Production to our Quality system.
I need to install the license key
restore the production library to the quality library
Initialize TMS and so on.
I know if I want to copy to our Development system. I would need to run either a remote client copy or and export/import since I cannot do a database copy because I would loose all my other clients in Development.
My question is, if the quality systems and the production systems are on the same support packs, same kernel.
What does a database copy give you (besides being faser) that a remote client copy or export/import of a client copy does.
Any differences
Thanks
Joe

Hello Joe,
If there is inconsistent Z tables between QAS and PRD, remote client copy could fail, especially when the table on PRD has longer length or more fields than the one on QAS.
Also the source client should has no-activity during the client copy, otherwise the application data could be inconsistent. For example, some material documents are copied, but not the corresponding financial documents. (For PRD client, it could be hours between the times those tables are copied.) For database restore, it is rarely an issue.
Best regards,
Victor

SSO for SAP and Non-SAP applications without Enterprise Portal

Dear all,
Is it possible to implement SSO for both SAP and non-SAP applications without involvement of EP at all?
I have gone through this link.
<a href="http://help.sap.com/saphelp_nw04s/helpdata/en/e5/4344b6d24a05408ca4faa94554e851/frameset.htm">http://help.sap.com/saphelp_nw04s/helpdata/en/e5/4344b6d24a05408ca4faa94554e851/frameset.htm</a>
But I still i am not able to get the precise answer on how to enable SSO for both SAP and non-SAP applications without EP.
We have decided not to implement EP in first phase of SAP implementation. But we need to enable SSO for other SAP and Non-SAP applications.
A detailed description on how to deal this kind of scenarios will be helpful.
Thanks.

A client of our's uses SAP Enterprise Portal, and is using the SAP SSO, which is implemented with tickets, and requires the use of SAPSECULIB. My company provides an application for this client, and our application in hosted in our data center for the client, as a Software as a Service application, obviously across the internet. Our client, which owns a SAP license, has asked that we support the SAP SSO as a non-SAP SSO application. The client user's SSO ticket will be created from SAP EP, and then passed across the internet to our application, and we are to use that SSO ticket as an authentication ticket to our application. I beleive I know how to do this work technically, having reviewed the SAP document named: "Dynamic Library for Verifying SSO Tickets in Third-Party Software" Specification Version 2.00 December 2005.
My question is, does my company have the right to use the SAPSECULIB? Where is the official download and license download, that indicates we can download this library, and use it to support a SAP customer? We do not own a SAP license. Thank you for your help. I have searched many places in SAP support.

OWSM 10.1.3.4 and Non-SOAP XML-based web service

Hi all,
According to the OWSM 10.1.3.4 Administrator's Guide, "all Web services registered with an Oracle WSM Gateway are virtualized as both a SOAP and non-SOAP Web service." To access the non-SOAP (XML-only) web service, the documentation states "The non-SOAP virtualized URL can be determined from the virtualized SOAP URL by replacing the services keyword in the URL with the xml keyword."
For example, if the SOAP virtualized endpoint is:
http://host:port/gateway/services/SID0003001
then, the non-SOAP XML service endpoint is:
http://host:port/gateway/xml/SID0003001
I have several web services registered with an OWSM gateway, running on SOA Suite 10.1.3.4, and can access those without any problem. However, when I attempt to access the "/gateway/xml" version of these services, I simply get an HTTP 200 response header with a null body.
Does anyone have any ideas what could be causing this or what the secret is to get the non-SOAP XML service feature of OWSM to work?
Thanks!
--Gary

Hi all,
According to the OWSM 10.1.3.4 Administrator's Guide, "all Web services registered with an Oracle WSM Gateway are virtualized as both a SOAP and non-SOAP Web service." To access the non-SOAP (XML-only) web service, the documentation states "The non-SOAP virtualized URL can be determined from the virtualized SOAP URL by replacing the services keyword in the URL with the xml keyword."
For example, if the SOAP virtualized endpoint is:
http://host:port/gateway/services/SID0003001
then, the non-SOAP XML service endpoint is:
http://host:port/gateway/xml/SID0003001
I have several web services registered with an OWSM gateway, running on SOA Suite 10.1.3.4, and can access those without any problem. However, when I attempt to access the "/gateway/xml" version of these services, I simply get an HTTP 200 response header with a null body.
Does anyone have any ideas what could be causing this or what the secret is to get the non-SOAP XML service feature of OWSM to work?
Thanks!
--Gary

Key fields and non-key field of condition table

Hello Gurus,
what is key fields and non-key field of condition table?
thanks very much!

Key field
Each condition table contains keys that can be used for creating dependent condition records.
for example let take condition type PR00.
PR00 uses access sequence PR02 .
Access sequence PR02 has following tables associated with it namely 304, 305 & 306
When you create a conditon record for PR00 with transaction VK11 or VK31, you have a button 'key combination' which is nothing but fields associated with tables 304, 305 & 306.
In brief, Condition records are always created using specific keys. Condition tables are used to define the structure of the keys of a condition record.
Non key field
For example take condition table 144 - sales deal basic data.
Table 144 is associated with access sequence PBUD.
If you check the fields associated with this table (click technical view button), there are three fields at bottom which do not have 'key' check mark -KDATU, PLTYP, KSTAF
So, when you create a condition record for PBUD, system does not propose these 3 fields in 'key combination' and hence are non key fields.
Please reward points for good answers as this would help increase the total donation that SAP will make to the United Nations World Food Programme.

When playing games on my iPod touch. Some are stutters and non responsive

Trying to play games on my iPod touch and they are slow, stuttery and non responsive. iPod software is up to date

Do the games require an internet connection? If so then maybe slow connection.
otherwise:
Try:
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Reset all settings
Go to Settings > General > Reset and tap Reset All Settings.
All your preferences and settings are reset. Information (such as contacts and calendars) and media (such as songs and videos) aren’t affected.
- Restore from backup. See:
iOS: How to back up
- Restore to factory settings/new iOS device.

My yahoo e-mail not pushing to iPhone4, again. Had this same problem in October for several weeks. My kids and husband have 3 other types of smart phones, and none of them are experiencing this problems. This has been going on for 2 weeks so far.

My yahoo e-mail is not pushing to my iPhone4, again. Had this same problem for several weeks in October/November 2011. It's been a problem again for two weeks now. My kids and husband have three other types of smart phones, and none of them have had this problem. I'm NOT impressed. I've seen that others in the iPhone community have also been having this problem. Is Apple doing anything about it?

Read this: https://discussions.apple.com/message/17333604#17333604
It's a yahoo issue. Nothing you can do on your phone to fix it.

Report for Excisable and Non Excisable vendor

Hello
Is there any Std report is there....it can give us the list of Excisable and Non excisable Vendors based on the Perticular Purchase Orgnisation.
Regards
sapman man

Hi
I do not think in SAP this kind of report is available.
what you can do , if your vendor master has different accounting group for Excisable and Non excisable vendor then you can check in standard table of vendor master like LFA1 and LFM1 or create Z report or Query.
Awaiting your feedback.
Kishor Rudani

Connect b/w SAP and Non SAP -system

Hi All,
I have a requirement where i need to connect between a SAP system and Non-Sap System.
the front end is an E-Build tool (for construction Industry) from where the user will pick the data and the data should get store at the backend i.e in the SAP system.
E-build is a tool for construction industry with lots of flexible options for the user to check for their house, along with their prices.
These all data needs to be captured and store at the backend.
Can any one suggest me which method shall i go for this in ABAP(and How) or need to go for the XI-Netweaver or EP technology.
Thanks & Regards
Mona

you better to go for middleware tools . keep files( whichs contains data to be stored in SAP) in one folder at 3p systems and middleware adapters will pick that filles automatically and sent it to Application server or then process the data into SAP.
tks.. venkat

Difference between Valuated and Non valuated Sale order stock

Hi All,
Can anybody tell me the difference between the above said subject with the steps involved in each scenario.
That is valuated sale order stock and Non valuated sale order stock in Product cost by Sale Order.
With Journal entries at each step and whether any WIP or variances at Production order level and sale order level and all the financial entries related to them
Thanks in Advance,
Ravi Kumar

Hi Shail,
Thans for your inputs,
But I wanted to know it in more detail. In what scenarios they are used with financial entries in both the cases.
I will give you my scenario. It goes like this,
My client is in pipe coating business, who receives pipes from customers and does only coating work(which is considered as service) and despatches it to the customer. this process is carried on the basis of work order(Sale order).
Now Production order is created and work is done on that with reference to Sale order for that particular customer.
So the pipe which my client receives should be non valuated stock as it will not be a raw material to them and the cost incurred on it is booked on production order like chemicals as raw material consumption, activity cost etc.
now in this scenario just tell me how and at which stage FI entries get generated at Production order and Sale order level, and also at wat level Standard cost estimate should be created i,e at production order level or sale order level(sale order cost estimate).
Will there be any entries at goods isssue and GR against production order. If no then how the COGM account will get hit.
Please tell me this scenario in both cases Valuated sale order stock and Non valuated sale order stock with financial entries in Sale order costing.
Thanks & Regards,
Ravi Kumar

My Firefox crashes every time I open it and none of the steps in the database solve the problem. My crash signature is PaintFrame(nsIRenderingContext*, nsIFrame*, nsRegion const&, unsigned int, unsigned int)

I tried opening it in safe mode and none of the other help tips in the database on firefox crashes when I open it apply to me. I also ran a couple of virus programs to check for any infections and found nothing. I had been having issues with java previous to firefox beginning to crash. So I attempted to uninstall java from my computer but it did not help.
My crash signature is PaintFrame(nsIRenderingContext*, nsIFrame*, nsRegion const&, unsigned int, unsigned int) and a search of this term on Mozilla Support pulled up no results.
I'm not terribly knowledgeable with programming so any suggestions would help!

I read online about a "clean reinstall" of firefox which seems to have worked! They should include direction on this on their page: https://support.mozilla.com/en-US/kb/Firefox+crashes+when+you+open+it

SAP_ALL and non SAP_ALL

Similar Messages

Maybe you are looking for