SAP-ByD User Roles
hi everyone,
Any One could explain the user roles in SAP-ByD?
Best Regards,
Harish.Y
Hi,
currently there are 5 different user roles:
- Self-Service User
User can only use self-services (e.g. Time Recording or Leave Requests)
- Projektmanagement Self-Service User
Self-Service User + Project functionality - The user can see all own project tasks (work packages + responsibilities), he can corfim tasks and reassign tasks for which he is responsible
- SCM Self-Service User
Self-Service User + SCM functionality - The user can can see/confirm production and warehouse tasks
- ERP User
Full access to all workcenters without SCM area (warehouse/production)
- SCM ERP User
ERP User + including SCM
Regards,
Andreas
Similar Messages
-
Restiction on SAP Lumira user with BI_DATA_ANALYST role
Hi,
Is there an option to disable the SAP Lumira user with BI_DATA_ANALYST role from loading the Excel data into SAP Hana? We would like the user to be able to create story boards and publish it on SAP LUMIRA server using HANA views but not allow him to load any flat file data.
Thanks,
LakshmiManish - if you are on BI4 there is no need for the SAP Integration Kit with Web Intelligence
You can connect using the BEx Query
For Lumira right now you can connect using the BEx query but only in the Visualize room - more enhancements are planned in 1.27 - see SAP Lumira Webcast including H1 Plans with BW Updates
I don't think Gateway is needed in these scenarios
Tammy -
Can some one tell me the SAP USERS ROLE TABLE
I Will assign point to any input.
Balance Roll forward
Change Vendor Line Items
Change Parked Vendor Document
Change/ Reverse Vendor Invoice
Check Processing
Clear Accounts Payable Items
Display A/P Balance & Items
Display Checks
Display Vendor Documents
Display A/P Master Data
Display Parked Vendor Documents
Account Payable Interest Calculation
A/P Invoice Entry
A/P Accounting Key Reports
Manual Payment
Payments Using Bill of Exchange Display
Payment Run Parameters
Create and Process Payment Run Proposal
Accounts payable period closing
Post Parked Vendor Document
Maintenance of Accounts Payable Master Data
Process Withholding Taxgo to t code PFCG
Search for roles with SAP_FI_AP*
You could always create your own role.
In the Menu tab add the t codes you have specified.
You will then need to add the authorization objects in the authorization tabs.
For the t codes you have I guess it would take an hour max. -
Workflow Administrator SAP user Role
I have a question from the customer regarding which SAP User Role should be assigned to and Workflow Administrator?
From my point of view, basically there are 2 questions here:
1. Is there any standard SAP user Role for this? (which one?)
2. If not, then a custom Role need to be configured (from PFCG t-code i think). Can anyone tell me to which workflow transactions should be ground authority for such a Role?Hi
These are the tcode for workflow developer. Use the SW* and pfac_dis,PFTC_DIS for wflow admin.
SWL1
SWLV
SWNNOTIFDEL_DISPLAY
SWPC
SWPR
SWU0
SWU1
SWU2
SWU3
SWU4
SWU5
SWU7
SWU8
SWU9
SWUD
SWUG
SWUI_BENCHMARK
SWUI_VERIFY
SWUI_WFUNIT
SWUS
SWUS_WITH_REFERENCE
SWU_EWBTE
SWU_EWCD
SWU_EWLIS
SWU_OBUF
SWWDHEX_DEBUG
SWWERRE_DEBUG
SWW_ARCHIV
SWW_DISPSWWCLEAR
SWW_DISPSWWCOND
SWXML
S_ALR_87000710
S_ALR_87000878
S_ALR_87000881
WF_EXTSRV
RSWWERRE
SBWP
SCDO
SLG1
SWB_COND
SWDA
SWDB
SWDC_DEFINITION
SWDD
SWDD_CONFIG
SWDM
SWDS
SWE2
SWE5
SWEAD
SWEC
SWEINST
SWEL
SWELS
SWEQADM
SWEQBROWSER
SWETYPV
SWFVISU
SWF_ADM_SUSPEND
SWF_ADM_SWWWIDH
SWF_APPL_DISPLAY
SWH_EXIT_DISPLAY
SWI1
SWI11
SWI13
SWI14
SWI1_COND
SWI1_RULE
SWI2_ADM1
SWI2_ADM2
SWI2_DEAD
SWI2_DIAG
SWI2_DURA
SWI2_FREQ
SWI30
SWI5
SWI6
SWIA
MCAP
MCAQ
MCAR
MCAT
MCAU
MCAV
MCAW
MCAX
MCAY
MCAZ
MCKY
MCKZ
MCM+
MCM-
MCM/
MCM?
MCSW
MCSX
MCYY
PFAC_DIS
PFTC
PFTC_DEL
PFTC_DIS
PFWF
PFWS
PGOM
PPMS
PPO4
PPOS
PPSS
PPST
PSO3
RE_RHCHECK1
RE_RHCHECKV
RE_RHDESC10
RE_RHEXIST0
RE_RHNAVIG0
RE_RHRHAZ00
RSWEWWDHMSHOW
RSWEWWDHSHOW
RSWWCLEAR
RSWWCOND
RSWWDHEX
BSVW
MC01
MC02
MC03
MC04
MC05
MC06
MC07
MC08
MC09
MC18
MC19
MC20
MC21
MC22
MC23
MC24
MC25
MC26
MC93
MC94
MC95
MC?0
MC?1
MC?2
MC?3
MC?4
MC?5
MC?6
MC?7
MC?8
MC?9
MCAF
MCAH
MCAI
MCAJ
MCAK
MCAL
MCAM
MCAN
MCAO -
User, Role, Profile Synchronization Job Fails
Hi Gurus,
When I am scheduling a job the User, Role, and Profile Sync. job fails giving an error
"Cannot assign a java.lang.String object of length 53 to host variable 5 which has JDBC type VARCHAR(40)."
This happens when the synchronization happens with a portal system. We dont have a ruleset for the portal system, So if I put in a "*", it includes this system and results in the error, If I manually select all other system, it works fine. Is there any way to remove this error so that I can schedule the jobs without having to select every system manually.
Regards,
ChinmayaHi,
As per my knowledge, in the Portal system, you should perform only user sync. Roles/profile sync will not work since portal will have workset roles.
Please refer SAP Note 1168120, which may help you to understand the limitations
Hope this helps!!
Rgds,
Raghu
Edited by: Raghu Boddu on Nov 4, 2010 7:39 PM -
User roles in Integration Repository
Hi everybody,
does anybody have experience with user roles in XI 3.0? We want to limit access to various namespaces in the Integration Repository with use of these roles that can be created in the IR. That way, various XI developers working on the same XI-Repository should not be able to work in the namespaces of other developers.
We created the role in the IR and assigned it to a user in the J2EE Engine. But so far, it doesn't seem to work.
Am I missing something??
Thanks a lot,
Francis WolfHi,
it looks like the integration to the "abap" backend (=IS-Server) is missing.
J2EE-R3 integration regards user management maps R3 roles onto J2EE user groups. Thus, if the term "role" is used in R3 context, it has to be translated to "user group" in J2EE.
Next steps:
1. Create user in "R3", with transaction SU01.
2. In "R3", create a role with transaction PFCG
3. UME Admin WebApp: assign role to user group
4. XI Exchange Profile WebApp: activate data-dependent authorization checks. Put: com.sap.aii.util.server.auth.activation" in section "IntegrationBuilder.Repository" to true
Please check the documentation on Netweaver security and Integration of UME Roles with SAP Roles
Hope that gives an idea!
Good luck
Holger -
Trying to understand "User/Role/Profile Synchronization" and Batch Analysis
Hello,
Im trying to understand what exactly and from which tables these jobs are copying to which tables in CC. I have a understanding that these jobs are moving also deleted roles from backend. This is causing unnecessary delay to long lasting job.
I would appreasite if some one could explain the logic behind these jobs. What the fullsync and incremental is reading ? What kind of changes are causing a role/user/profile to be included to the full and incremental jobs?
How the incremental analysis logic is built ?
br JanneJanne,
In my current implementation we are going for an offline risk analysis due to the heteregoneus system landscape of our client (several SAP and non SAP systems and several SAP systems under 4.6C). Eventhough within our approach we don't perfrom the backend synchronization (we use CC data extractor to pull data from backend into CC) hope the following info could hel you:
The tables such jobs you mention access to, are all the SAP backend system tables related with users, roles, profiles, action and permissions. If you check the data mapping appendix of the "user and configuration guide for 5.2" you will see all the data that CC retrieves. For instance, in order to extract user info (UserID, FName, LName, Email, Phone, Email, Department) tables USR21, USR02, ADRP, ADR6 and ADCP must be accessed.
In terms of CC tables:
VIRSA_CC_SYSUSR >> UserIDs and Systems ID relationship
VIRSA_CC_GENOBJ >> User, Role and Profile master data
VIRSA_CC_GENACT >> User-action, role-action and profile-action data
VIRSA_CC_GENPRM >> User-permission, role-permission and profile-permission
VIRSA_CC_SAPOBJ >> Action-permission
VIRSA_CC_OBJTEXT >> Objects descripcions (ACT, PRM, FLD, VAL, ORG)
Hope this helps.
Regards,
Imanol -
User Role with All MM Transaction codes
Hi SAP Gurus,
I need to create a User role with all MM transactions. Can anyone please let me know whether Standard User role is available which has authorisations for all MM transaction codes ? If yes, what is the User role name. If not, what is the easiest way to get a list of all MM transaction codes.
Regards,
Janagiraman.Hi,
sap_mm_all role name is not available in client sap system version 5.0. The role might have been deleted by someone.
Regards,
Janagi -
End User Roles Tab: Link to security roles on ECC?
Hi-
There is a configurable value in the End User Roles tab where you can populate Roles. However when you select the values they only pull in roles loaded on the SolMan system. How can I access roles in target systems, so they can be mapped to my process hierarchy?Hi
what do u mean by target systems... satellites systems.......i think you are confused somehow
this tab is used for learning map user roles
check this out and read it completely
http://help.sap.com/saphelp_sm32/helpdata/en/ee/4344ed87a24d8da937c565bf572408/frameset.htm
Learning map use
You want to send the learning map to a group of users with the same business role, e.g. to all accountants in your company, or to the purchasing department. You copy existing business roles in the Solution Manager, or create new ones.
Hpoe it clarifies ur doubt
regards
prakhar -
ABAP User Roles and Query for accessing particular T- codes and Reports
dear Gurus
I have one problem, i want to know about ABAP User Query ,i have one requirement my user wants to Lock all the HR Std versus Customized reports in T- code SQ01,other department peoples also see the Payslips and Hr personal reports which is harmfull to the dept so i want to Lock all the reports in Std T- code in SQ01 and i have created one Customized User Roles or Query in which the T-codes and Reports are assigned only those particular user can access the T-codes and Std reports .how can it be possible i dont have any idea about user roles and Queries .
kindly help me out or send me some documents related to user roles and queries
regards ritesh sharmaHi Ritesh,
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/103cafc2-7a64-2b10-14b3-eddb7d324561
Regards,
Flavya -
Inconsistent behavior of user-role assignment
Hi, all.
i'm using EP 6.0 SP9 patch1.
i logged on as an Administrator user.
In the menu User Administration --> Roles --> Roles, i got the inconsistent behavior of user-role assignment.
1. Normal behavior(from user --> edit)
i searched and selected one user and click the "Edit" link
--> i can assign all the roles that i want.
2. Abnormal behavior(from role --> edit)
i searched and selected one role first and click the "Edit" link
--> some roles CANNOT be editted(even though i clicked the "Edit" link, it doesn't go to the edit screen). The roles that i couldn't edit are the SAP original roles like Administrator, content_admin_role, user_admin_role...
Could someone please give me any advice on this problem?
Thanks.Hi Sejoon,
please open an OSS message.
Best regards
Detlev -
Hi all:
Is there a standard role called end user role which can not be found in our system ? if yes, can you please tell me what actions should be assigned to the role?
thank you very much
Edited by: jingying Sony on May 11, 2010 4:01 AMHi,
You can assign Standard User (eu_role) or Every User Core (eu_core_role).
Check the documentation here.
http://help.sap.com/saphelp_nw70/helpdata/EN/47/f0f7415e639c39e10000000a155106/content.htm
Regards,
Sandeep Tudumu -
Integration Builder - Repository - Users - Roles
Is it possible to come up with ABAP role with the help of which he can login to Integration Repository but can not change any of the objects but for the one in a specific component.
I could make it work where the user is given SAP_XI_DEVELOPER role and I can restrict him to access some objects using another Role that I built in IR. I know about excluding him full edit access etc. This is like giving him full access with modify permissions with SAP_XI_Developer and excluding him permission on some of the objects.
I tried to give a test user SAP_XI_DIPLAY_USER and then giving him include-fulledit on a specific Software component. But this did not work.
If anybody worked on this please let me know.
Regards
MikeHi Michael,
Yes it is possible, this is what i found on help.sap.com,
To make changes to authorizations on the ABAP side, proceed as follows for each dialog user role:
1. Call transaction PFCG.
2. Copy the single role SAP_XI_<role>_ABAP into the customer namespace (replace the prefix SAP).
3. Create a new composite role in the customer namespace (for example, *_XI_<role>).
4. Assign the new single role (suffix _ABAP) to the new composite role.
5. Assign the new SAP single role (suffix _J2EE) to the new composite role.
6. Make changes to the new single role (suffix _ABAP).
7. Generate an authorization profile for the new single role (suffix _ABAP).
Basically what is important is that the single roles with a J2EE suffix are still assigned to the current composite role. These J2EE single roles are known to the J2EE applications and are required for automatic authorization assignments during deployment.
I hope it helps,
Thanks,
Varun -
User role to access configuration management in NWA
Hi,
What USER role is required to create the destination information in configuration management in NWA. When I access NWA, I only have access to SOA management which has only Monitoring tools with role SOA technical ADmin.
I need this to convert IDOC XML to flat file.
thanks
PrashanthHi Prasanth,
I am not sure about the exact role but, the ABAP role "SAP_NWA_FULL" & Java role "NWA_SUPERADMIN" will certainly help. This is the role that i had when i was trying a similar scenario.
Please take a look at the following link which might be helpful:
http://help.sap.com/saphelp_nwpi71/helpdata/en/45/c7ca8e89e45592e10000000a1553f7/content.htm
You can infact ask your Basis team to help you out with this.
I hope this helps.
Regards, Gaurav.
Edited by: Kumar Gaurav on Nov 9, 2010 5:57 AM -
Hello!
Has anyone configured the e-learning functionlity in SM40. How do we configure the end user role type ? or how to distribute from a central HR system as mentioned in help.sap? Appreciate any input.
Thanks.Hello Mike,
To create and assign roles, please refer to the following documentation
http://help.sap.
com/saphelp_sm40/helpdata/en/9f/7898408f3db753e10000000a114b1d/frameset.
htm
Just to answer your question, after you have assigned the End User Roles
to the user, the learning map is sent to the E-Mail address in the
address data (txn SU3).
FYI, e-Learning Management with the SAP Solution Manager
https://websmp103.sap-ag.de/~sapidb/011000358700000325712005E.sim
Hope the above information helps.
Dolores
Maybe you are looking for
-
Risk category field is missing in dso for 0fiar_o09 credit management.
Hi BI Experts, I am using the standard extractor for the credit management dso 0fiar_o09. The field for risk category originates from our R3 system in table knkk-ctplc. It displays correctly in the psa. The transformation rsds 0fi_ar_9 maps it to
-
HT3702 Itune charges and Mac charges
I've been charged on 1/3/14 over $90 for playing Candy Crush and i didn not play on that day. I have also been receiving daily charges to my debit account, when i have not played. Can you please tell me who i can speak to in order to discuss this?
-
looking at the 'help' to work out how to authorise new computer so can play songs, the instructions say - open itunes - go to store tab -locate 'authorise computer'- I cannot find the 'authorise computer' part !
-
Cannot Download Bootcamp drivers on iMac, will MacBook Pro work?
I have to install Win 7 x32 and x64 on iMacs with bad (almost ZERO) internet access. I tried downloading the Windows Support files for Bootcamp drivers, but it wouldn't download. I have a MacBook Pro and a MacPro (2007) i can use (both running Lion)
-
Mail crash when trying to import inbox from thunderbird
hey, i am trying to convert all my operations to native programs, i am currently using ThunderBird as my mail client but want to move over to mail. when i go to import my inbox i manage to find it and when it starts to import it crashes! i am assumin