SAP_ALL & SAP_NEW profile

Dear Freinds,
What is difference betn SAP_ALL & SAP_NEW profile.
is sap_new has all content of sap_all and new one or not.
and also plz provide other standerd SAP profile.
Thanks.
sachin

Hello Sachin,
SAP_ALL:- Which is a composite profile, normally assigned to administrators.
To assign all authorizations that exist in the SAP system to users, assign the profile SAP_ALL.(Normally all authorizations in the above sentence means,for SAP standard objects).
SAP_NEW: - Composite profile to bridge the differences in releases in the case of new or changed authorization checks for existing functions, so that your users can continue to work as normal. This composite profile contains very extensive authorizations, as, for example, organizational levels are assigned with the full authorization asterisk (*).
Let me say wat are the few things that i know which SAP_NEW authorzation object dont have the authorization to
1. Create a user ,Changer a user's record
2. Cant create a role and cant generate a profile.
Let me say wat are the few things tat SAP_NEW authorization object have,
like access to newly created customized objects
If u have any more queries regarding the difference between these two, refer this link: -
http://help.sap.com/saphelp_erp2005vp/helpdata/en/52/6711b8439b11d1896f0000e8322d00/frameset.htm
Regards,
Kanthi. D

Similar Messages

SAP_ALL & SAP_NEW profiles not available in new client after client copy

I am setting up a BI Client and have been following some documentation to do this downloaded from SDN. In the process, i created my client 'client 200' assigned to a logical system then doing client copy from 'client 000' using transaction SCCL. There is a step when i now have to create a user in the new client (client 200 ) where i am supposed to assign the user to profiles SAP_ALL and SAP_NEW. Unfortunately these are not available in my newly set client but in 'client 000' they are available.
Did i make some error in the client copy process or i still need to do something to have the profiles in 'client 200'. Please assist.

There is no issue in rerunning the Client Copy.
But please check what mistake you made in the first one.
Here are the steps.
Create an entry in SCC4.
RZ10 modify parameter login/no_automatic_user_sapstar=0
Check that you have enouf background and dialog processes.
Restart the sap system
then login with SAP* in the Client you made.
Run Sccl and give the Profile SAP_All
Select the source Client as 000
and Source Client user Master as 001
Check tthat you dont select the check box of TEST MODE.
and schedule in backgreond.
Thanks Rishi Abrol

Missing SAP_ALL & SAP_NEW

Hello,
Newly installed SAP ECC 6.0,on a UNIX/ORACLE. The SAP_ALL&SAP_NEW profiles are missing, any suggestion?
Thanks

Hi Khalifa,
I guess you are tring to assign SAP_ALL to some user just after fresh installation and you are getting this error. It happens sometimes.I guess you may not have done SGEN.
To be sure that SAP_ALL exists go to Su02 input SAP_ALL and press enter. if you get an output then you can be assured SAP_ALL exists which in any case it will.
Now the solution of the issue.
To solve this try this thing out. Go to transaction SU21 and use regenerate SAP_ALL option.
You can also execute the report AGR_REGENERATE_SAP_ALL for this. Check OSS note 82390 before doing it.
Please award points if issue got solved.
Regards.
Ruchit.

Query on new Authorization Objects after Upgrade&SAP_NEW profile

Dear Experts,
We have upgraded our system from 4.5 to 7.0 version, i was checking what are the new authorization Objects introduced after upgrade comparing older system ojects. I got few objects which are new in upgraded system,
But when i check SAP_NEW profile, and in the latest profile SAP_NEW_7000 profile i can not see all those new Ojects which are new.
generally SAP_NEW should contain all new objects which come after upgrade? i can see those in SAP_ALL but not in SAP_NEW
is there any issue in system? how should I know and where should i check what are the new Objects come in upgrade,
Please advise.
Thanks#Regards,
Vijay

Hi Jurjen Heeck ,
see my previous post
I did 'nt get this.
SAP_NEW is your friend here
does the SAP_NEW profile contains all the new authorization Objects.
Regards,
Anthony

Restrict Authorization in SAP_ALL & SAP_NEW for SCC4 T-CODE only display

hi,
I want to restrict 'Change' mode for SCC4 T-CODE to devuser having complete authorization with profiles SAP_ALL and SAP_NEW. Only 'Display' should be allowed for SCC4. For devuser no roles are assigned.
For Other Users Roles are assigned with restriction in Authorization at "Basis: Administration-> Table Maintenance (via standard tools such as SM30)> Activity" for authorization object S_TABU_DIS only 'Display' is allowed.
Abhijit.

Jurjen Heeck wrote:>
>... something else to make a part of SAP_ALL not work?
2 ideas:
- If the regeneration of SAP_ALL could check that the user running it does not have any SAP_ALL authorizations? Meaning, they would need to know exactly which non-SAP role authorizations (their technical names) have that authority in it. Many folks who only work with SAP_ALL don't know how to do that
- If there were some way to isolate the program parts which are required to change SCC4 such that they can only be run with root priveleges, then you do not need to give your SAP system (with SAP_ALL) root access...?
Disclaimer: Just ideas! Complete overkill!!
=> Does restricting the user's access sound like a much easier idea now?
Cheers,
Julius

Transaction to list userswith SAP_ALL&SAP_NEW Authorisation

Hi,
Can some one please tell me if there is a transaction by which we can find out the list of users that has the SAP_ALL and SAP_NEW authorisation profile assigned to it.
Thanks
Priya

Hi Frank,
There are ways of automating some of it if the assumption that change documents
are created holds true (meaning that the preventative measures of bypassing the
creation of change documents are implemented) and even better if an (ab)user
does not know about the control...
Here are some of them which I have seen: (actually one of them did see me first
One of the better solutions involved both an interrogation of user to profile
assignments (USR04) AND the change documents (USH04) => because the
profile might have been removed before the "current" detective control is
performed. For that (profiles or roles) there is a standard report called RSUSR100
to read the change documents.
Once identified, the available profiles of SAP_ALL and equivalents can be
automatically sent to you if you can get the system to create a job on an
hourly basis which submits report RSUSR100 for a "from -> to" period (like
from '31.12.9999' to 'sy-datum minus n days'). If it finds such a change document
or new existing entry in UST04, it fires an alert with details within the hour.
There are several different ways of doing this with very low effort, and in all
existent clients.... also without making the job visible in SM37, with a bit more
effort.
This would however be unlikely to detect that which you are refering to: What if
SAP_ALL is copied or the authorization is manually imported into a role which
the user already has? For that you would need to go looking in UST10 (the
assignment of authorizations to profiles) or ideally USR10; or USH10 for the
change documents. If you find &_SAP_ALL or equivalent authorizations in the
change documents or they do not match the profile names... then fire the same
alert as before. I cannot remember how this was done done (which report etc)
and do not have access to the system anymore.
That would however not pass all requirements for automated detective controls,
because someone may have changed the authorization values of those auths
which are already assigned via profiles which the user has... For that you would
need to go prying in USH12 to see whether anything changed. For the current
authorization, looking in UST12 is easier to understand than USR12; but they
should be the same. Note that this access would be instant so there is no
necessity (nor sense) in searching for change documents relating to the user,
only change documents for object <-> field <-> values which you know to be
equivalent to SAP_ALL.
Another approach is to use the SAP standard rules in tables USK* (search SAP
notes on it, and the report RSUSR008_009_NEW) to define critical authorizations
which cannot be assigned, or critical authorizations which cannot be combined
together. I have seen one solution which used it to prevent the assignment of the
authorizations from tcode SU01 etc. I also suspect that it is (more...) sustainable
and less maintenance work in the long run, than programming an own report or
buying an external tool (someone else's own report).
Cheers,
Julius

RSSM and Profile sap_all

Hi guys,
we have an abnormal behaviour of Custom Authorization Objects and sap_all in BW 3.5.
We created a new custom authorization object with RSSM (let's say ZGG_BUKRS) in order to design new Roles for End Users and it works.
The problem we have is with those users that have sap_all / sap_new profiles: it seems they need to be authorized with ZGG_BUKRS (new Custom AUthorization Object) in order to work properly. In fact they receive BRAIN 805 "No Authorization".
Did anybody of you experience such a problem?
Any idea about solutions?
Thanks in advance
GFV

Gianfranco Vallese ,
Okay, then check the role where you used this authorization object... are the values for this object defined properly...
if you know the role name...take one user from this role...
go to RSSM1 give the user name and execute that perticular query... F3, you can see the logs where exactly it's strucked.
Cheer's
HVR.

Hot to restrict sap_all and sap_new

hot to restrict sap_all and sap_new

Hi,
SAP_ALL & SAP_NEW profiles will not be assigned to any users in production environment (Not even to the OSS Users). However, there will be derivatives to these profiles. i.e, these two profiles will be copied and restricted.
Secondly, profile addition will not be done to any user until and unless it is critical. Instead of SAP_ALL, SAP_NEW, other profiles will be assigned like A_ALL etc.,
Have a look at the following link, which may help you:
http://www.learnbasis.com/knowledgebase/index.php?view=ViewArticle&id=29&set=all
Rgds,
Raghu
<b><removed by moderator></b>

Issue Management scenario Troubleshooting dump CX_WDR_ADAPTER_EXCEPTION

Hi,
I'm customizing img transaction to configure service desk scenario in a
Solution Manager SPS15 7.0(SID=SMG), on windows 2003 server/SQl Server
2005.
The problem is customizing Issue Management scenario at step "Troubleshooting".
When I execute this action, I go to smsy transaction->Settings -> Self-Diagnosis
and an error with this tittle appears:
Error when processing your request
What has happened?
The URL http://solution.grupotec.local:8002/sap/bc/webdynpro/sap/dswp_sd_settings/ was not called due to an error.
Note
The following error text was processed in the system SMG : Adapter error in &VIEW_ELEMENT_TYPE& "_08" of view "DSWP_SD_SETTINGS.START": Context binding of property ? cannot be resolved: The Mapping to Node COMPONENTCONTROLLER.1.LAYOUT Has Not Been Completed.
The error occurred on the application server solution_SMG_02 and in the work process 0 .
The termination type was: RABAX_STATE
The ABAP call stack was:
Method: RAISE_FOR of program CX_WDR_ADAPTER_EXCEPTION======CP
Method: RAISE_BINDING_EXCEPTION of program CL_WDR_VIEW_ELEMENT_ADAPTER===CP
Method: GET_BOUND_ELEMENT of program CL_WDR_VIEW_ELEMENT_ADAPTER===CP
Method: GET_ATTRIBUTE_INTERNAL of program CL_WDR_VIEW_ELEMENT_ADAPTER===CP
Method: IF_WDR_VIEW_ELEMENT_ADAPTER~SET_CONTENT of program /1WDA/L8STANDARD==============CP
Method: IF_WDR_VIEW_ELEMENT_ADAPTER~SET_CONTENT of program /1WDA/L7STANDARD==============CP
Method: CONV_VIEW_INTO_VE_ADAPTER_TREE of program CL_WDR_INTERNAL_WINDOW_ADAPTERCP
Method: SET_CONTENT_BY_WINDOW of program CL_WDR_INTERNAL_WINDOW_ADAPTERCP
Method: RENDER_WINDOWS of program CL_WDR_CLIENT_SSR=============CP
Method: IF_WDR_RESPONSE_RENDERER~RENDER_USER_INTERFACE_UPDATES of program CL_WDR_CLIENT_SSR=============CP
What can I do?
If the termination type was RABAX_STATE, then you can find more information on the cause of the termination in the system SMG in transaction ST22.
If the termination type was ABORT_MESSAGE_STATE, then you can find more information on the cause of the termination on the application server solution_SMG_02 in transaction SM21.
If the termination type was ERROR_MESSAGE_STATE, then you can search for more information in the trace file for the work process 0 in transaction ST11 on the application server solution_SMG_02 . In some situations, you may also need to analyze the trace files of other work processes.
If you do not yet have a user ID, contact your system administrator.
Error code: ICF-IE-http -c: 010 -u: SOLMANADM -l: E -s: SMG -i: solution_SMG_02 -w: 0 -d: 20080618 -t: 115252 -v: RABAX_STATE -e: UNCAUGHT_EXCEPTION
HTTP 500 - Internal Server Error
Your SAP Internet Communication Framework Team
This error creates a dump:
Runtime Errors         UNCAUGHT_EXCEPTION
Exception              CX_WDR_ADAPTER_EXCEPTION
Short text
    An exception occurred that was not caught.
What happened?
    The exception 'CX_WDR_ADAPTER_EXCEPTION' was raised, but it was not caught
     anywhere along
    the call hierarchy.
    Since exceptions represent error situations and this error was not
    adequately responded to, the running ABAP program
     'CX_WDR_ADAPTER_EXCEPTION======CP' has to be
    terminated.
Error analysis
    An exception occurred which is explained in detail below.
    The exception, which is assigned to class 'CX_WDR_ADAPTER_EXCEPTION', was not
     caught and
    therefore caused a runtime error.
    The reason for the exception is:
    Adapter error in &VIEW_ELEMENT_TYPE& "_08" of view "DSWP_SD_SETTINGS.START":
    Context binding of property ? cannot be resolved: The Mapping to Node
    COMPONENTCONTROLLER.1.LAYOUT Has Not Been Completed.
    The occurrence of the exception is closely related to the occurrence of
    a previous exception "CX_WD_CONTEXT", which was raised in the program
     "CL_WDR_CONTEXT_NODE_MAP=======CP",
    specifically in line 25 of the (include) program
     "CL_WDR_CONTEXT_NODE_MAP=======CM001".
    The cause of the exception was:
    The Mapping to Node COMPONENTCONTROLLER.1.LAYOUT Has Not Been Completed.
Information on where terminated
    Termination occurred in the ABAP program "CX_WDR_ADAPTER_EXCEPTION======CP" -
     in "RAISE_FOR".
    The main program was "SAPMHTTP ".
    In the source code you have the termination point in line 45
    of the (Include) program "CX_WDR_ADAPTER_EXCEPTION======CM004".
I've tested in sicf transaction that /sap/bc/webdynpro/sap/dswp_sd_settings/ service (right click->test service), appears a log-on popup I type usr j2ee_admin and pwd, and the same error appears.
I'm logged with user to configure Solution Manager
which was SAP_ALL, SAP_NEW profile and a Z_RFC rol with( S_RFC,
S_RFCACL authorizations object).
Please could you help me??
Thanks and Regards
Raul

I've resolved this problem with SAP Note:
1157740 - Self Diagnosis dumps when Settings is accessed from Menu
Thanks and Regards
Raul

Service Desk: Error in local message system: You do not have authorization

Hello experts,
i'm configuring support desk scenario. I think all is fine, but, when i try to create a message from satellite (R3 46C) to my SOLMAN the following error appears:
Error in local message system: You do not have authorization to create a notifica Message was not created. (Message no. B~ 088)
The user i use to create the message has the following roles:
SAP_SV_FDB_SUPPORT_LINE_ADMIN
SAP_SV_FDB_SUPPORT_LINE_LEVEL1
SAP_SV_FDB_SUPPORT_LINE_LEVEL2
Z_RFC
and SAP_ALL SAP_NEW profiles.
Anyone knows where is the problem?
Regards
Carlos Calle

Hi Carlos,
Role that allows processing messages is SAP_SUPPDESK_PROCESS. However from what I have understand, once End User enters and submits the message, he/she cannot edit the message anymore. Probably an email will be generated to him/her to notified of the message creation and for futher updates. I think end user should not be required to logon to Solution Manager. Key User i.e. helpdesk or SAP support staff will process(edit/change) the message instead.
If you want something else, I think you need to create a customise role maybe from SAP_SUPPDESK_DISPLAY or PROCESS and change the authorization values.
The below note contains latest authorization info.
Note 834534 - SAP Solution Manager roles in Release 4.0
Experts,
Correct me if I am wrong.
Regards,
Annie

Problem in Logon to Shop Admin in CRM 5.0

Dear All,
Need some urgent help.
We are on CRM ISA MSA 5.0 & on HP-UX 11.11.
We are facing a problem in our CRM box due to which we are unable to proceed further. We have our CRM IST box (CRI) in which we need to configure the shop admin.
In our CRM dev box (CRD), the link works, opens fine and we are able to login with the username and password with the shop admin rights.
But when we are accessing our CRI boxs shop admin, (our CRM IST box is a copy of CRM Production system), with the same and even more admin rights$ ( the user has all the java admin and sap_all & sap_new profiles/roles), it says "Logon is invalid; check your entries" even though are user details are absolutely correct as we are able to login with the same username and password in the SAPGUI.
My question is what could be the issue?
1. Do we need to do anysettings in XCM? The jco connection is set properly. I am able to see the first page of the webhop but not able to log in. I have switched on the authorization trace on the CRM system as well, but there no authorization issues.
2. Even in visual admin, the application is up and running. Is there any setting to be done here?
Please help me out of this issue.
Thanks & wil lsurely reward points for any hints.
Thanks a lot in advance for your help.
Warm Regards,
Rajeet
+41 79 328 8454 (cell)

Hi All,
If the J2EE used to run before it can not be a cse of wrong parameters in SMICM,
Are you aware if during satrt up there were some bulky data getting processed??
Some time this happens.., probably cheking the start up log can be a good idea.
Another restart will do the trick it the Log does not give any thing specific.
You can open a Customer message as well for SAP
Regards
Piyush

Workflow - runtime error

Hi all,
I am creating workflow for material master. When i save and excute in SWDD system shows the following error.
Runtime Errors         MESSAGE_TYPE_X
Date and Time          01.10.2009 13:20:51
Short text
     The current application triggered a termination with a short dump.
What happened?
     The current application program detected a situation which really
     should not occur. Therefore, a termination with a short dump was
     triggered on purpose by the key word MESSAGE (type X).
Error analysis
     Short text of error message:
     Unable to read RFC destination WORKFLOW_LOCAL_300
     Long text of error message:
     Technical information about the message:
     Message class....... "SWF_RUN"
     Number.............. 617
     Variable 1.......... "WORKFLOW_LOCAL_300"
     Variable 2.......... "RFC_READ_DESTINATION_TYPE"
     Variable 3.......... "DESTINATION_NOT_EXIST"
     Variable 4.......... " "
Trigger Location of Runtime Error
     Program                                 CL_SWF_RUN_WIM_LOCAL==========CP
     Include                                 CL_SWF_RUN_WIM_LOCAL==========CM088
     Row                                     10
     Module type                             (METHOD)
     Module Name                             IF_SWF_RUN_WIM_UTL_INTERNAL~GET_SYSTEM_USER
Source Code Extract
Line SourceCde
     1 METHOD if_swf_run_wim_utl_internal~get_system_user .
     2   DATA: l_excp TYPE REF TO cx_swf_run_wim.
     3
     4   TRY.
     5       IF me->m_int_state-system_user IS INITIAL.
     6         me->m_int_state-system_user = cl_swf_run_workflow_properties=>get_rfc_destination_us
     7       ENDIF.
     8       re_user = me->m_int_state-system_user.
Can any one please give me solution for this issue.
Thanks in advance,
Babu

I thought correctly
The RFC destination is the most important one for using workflows in any system.
Ask someone with SAP_ALL SAP_NEW profiles to execute that action automatically. Or do it yourself if you have it.
And you have to check the Sapna Modi Blog, because every action is explained in detail.
Kind regards, Rob Dielemans

Exception condition "OBJECT_ID_NOT_FOUND" raised

Hi
I get the following error when trying to transfer requisitions into SRM from ECC. I have done all the neccesary config. maintained the Ext_Channel on the org structure and integrated the rfc user.
I can create the shopping cart manually in SRM
Thanks
Lebo

Hi
it means all pr have the same issue. initial set up right?
waht about the rfc user . hope this rfc user has sap_all , sap_new profile. what user type of rfc_user ?
paste the dump. some one can point easilt where the problem is.
hope you done channel and assigned rfc user and for that channel responsible is a local purchase group in srm.
br
muthu

Bex Analyser-Unable to login

Hi,I am able to login to the AWB but I when I try to log into the Bex Analyser I get "not authorized client,session terminated".Is there anything I could do in AWB to log into Bex Analyser.
Thank You,
Regards,
Salma.

Looks like you are not authorized to use BEx. Check your User Authorizations in SU01.
If you are a BW Developer you need to have SAP_ALL & SAP_NEW profiles assigned to your user profile.
If you are authorized to use BEx, request Access from your security team.

EWA config

Hi Gurus
I am new to Solution manager.
i have solman 4.0   SP12,    ST_PI 2005_1_700
ST-SER     700_2007_1 0001 SAPKITLOM1      Service Tools,
   SAPKITLQI5
I want to setup EWA for R/3 production system from my solution manager system 4.0 which i installed recently..
unfortunately my R/3 system is nonunicode, is there any restrictions for unicode to non unicode systems. and what are the configs do i need to do in R/3 system to work with EWA.
just i got to know that from 03march 08, there is some new concept in EWA. i am struggling with basic doubts:
1. how many RFC's do i need to create at solman system and
    at R/3 system ( because i want   Only EWA config     (but
    not changereuest maangent,sys monitoring etc.......).
2. I have alreay generated with the wizard. but it is showing four
    RFC's ,
3. While configuing is it necesary to active conenction to OSS
Please Guide me
Thanks in advance.

I have created RFc's manually in my solman system and in satelitte system with sap_all, sap_new profiles. when entered a tcode SDCCN in satellite system it is showing: Transaction SDCCN does notexist.
Q1: y i dont have SDCCN tcode?
When i enter SDCC.in satelitte system, it is showing:
service definition Refresh in progress....
Then after
Remote refresh of Service Definitions (through RFC to SAPOSS) failed...
And in solman system if i click EWA report with RED FLAG.
it showing:
The RFC connection for the SAP Solution Manager system is not working.
The 'Task Processor' background job, which collects the session data, has been changed.
Problems arose while data was being collected (see the detail log for the task that collects the session data).
A periodic 'SDCC Maintenance Package' task has not been scheduled to check whether your SAP Solution Manager system requests session data.
Session number: 3000000000108
here when i click "Call Service Data Controller"
the message it displayng is:
Unable to reach remote system. No authorization to logon as trusted system (Trust
What is this trust...i have already created same named users in both systems and same password and assgned through sm59.(manually). What was wrong with me....
Thanks in advance..

SAP_ALL & SAP_NEW profile

Similar Messages

Maybe you are looking for