SAP-ByD User Roles

hi everyone,
Any One could explain the user roles in SAP-ByD?
Best Regards,
Harish.Y

Hi,
currently there are 5 different user roles:
- Self-Service User
User can only use self-services (e.g. Time Recording or Leave Requests)
- Projektmanagement Self-Service User
Self-Service User + Project functionality - The user can see all own project tasks (work packages + responsibilities), he can corfim tasks and reassign tasks for which he is responsible
- SCM Self-Service User
Self-Service User + SCM functionality - The user can can see/confirm production and warehouse tasks
- ERP User
Full access to all workcenters without SCM area (warehouse/production)
- SCM ERP User
ERP User + including SCM
Regards,
Andreas

Similar Messages

  • Restiction on SAP Lumira user with BI_DATA_ANALYST role

    Hi,
    Is there an option to disable the SAP Lumira user with BI_DATA_ANALYST role from loading the Excel data into SAP Hana?   We would like the user to be able to create story boards and publish it on SAP LUMIRA server using HANA views but not allow him to load any flat file data.
    Thanks,
    Lakshmi

    Manish - if you are on BI4 there is no need for the SAP Integration Kit with Web Intelligence
    You can connect using the BEx Query
    For Lumira right now you can connect using the BEx query but only in the Visualize room - more enhancements are planned in 1.27 - see SAP Lumira Webcast including H1 Plans with BW Updates
    I don't think Gateway is needed in these scenarios
    Tammy

  • SAP USERS ROLE TABLE

    Can some one tell me the SAP USERS ROLE TABLE
    I Will assign point to any input.
    Balance Roll forward     
    Change Vendor Line Items
    Change Parked Vendor Document
    Change/ Reverse Vendor Invoice     
    Check Processing
    Clear Accounts Payable Items
    Display A/P  Balance & Items
    Display Checks     
    Display Vendor Documents     
    Display A/P Master Data     
    Display Parked Vendor Documents     
    Account Payable Interest Calculation     
    A/P Invoice Entry     
    A/P Accounting Key Reports     
    Manual Payment     
    Payments Using Bill of Exchange     Display
    Payment Run Parameters     
    Create and Process Payment Run Proposal     
    Accounts payable period closing     
    Post Parked Vendor Document     
    Maintenance of Accounts Payable Master Data     
    Process Withholding Tax

    go to t code PFCG
    Search for roles with SAP_FI_AP*
    You could always create your own role.
    In the Menu tab add the t codes you have specified.
    You will then need to add the authorization objects in the authorization tabs.
    For the t codes you have I guess it would take an hour max.

  • Workflow Administrator SAP user Role

    I have a question from the customer regarding which SAP User Role should be assigned to and Workflow Administrator?
    From my point of view, basically there are 2 questions here:
    1. Is there any standard SAP user Role for this? (which one?)
    2. If not, then a custom Role need to be configured (from PFCG t-code i think). Can anyone tell me to which workflow transactions should be ground authority for such a Role?

    Hi
    These are the tcode for workflow developer.  Use the SW* and pfac_dis,PFTC_DIS for wflow admin.
    SWL1
    SWLV
    SWNNOTIFDEL_DISPLAY
    SWPC
    SWPR
    SWU0
    SWU1
    SWU2
    SWU3
    SWU4
    SWU5
    SWU7
    SWU8
    SWU9
    SWUD
    SWUG
    SWUI_BENCHMARK
    SWUI_VERIFY
    SWUI_WFUNIT
    SWUS
    SWUS_WITH_REFERENCE
    SWU_EWBTE
    SWU_EWCD
    SWU_EWLIS
    SWU_OBUF
    SWWDHEX_DEBUG
    SWWERRE_DEBUG
    SWW_ARCHIV
    SWW_DISPSWWCLEAR
    SWW_DISPSWWCOND
    SWXML
    S_ALR_87000710
    S_ALR_87000878
    S_ALR_87000881
    WF_EXTSRV
    RSWWERRE
    SBWP
    SCDO
    SLG1
    SWB_COND
    SWDA
    SWDB
    SWDC_DEFINITION
    SWDD
    SWDD_CONFIG
    SWDM
    SWDS
    SWE2
    SWE5
    SWEAD
    SWEC
    SWEINST
    SWEL
    SWELS
    SWEQADM
    SWEQBROWSER
    SWETYPV
    SWFVISU
    SWF_ADM_SUSPEND
    SWF_ADM_SWWWIDH
    SWF_APPL_DISPLAY
    SWH_EXIT_DISPLAY
    SWI1
    SWI11
    SWI13
    SWI14
    SWI1_COND
    SWI1_RULE
    SWI2_ADM1
    SWI2_ADM2
    SWI2_DEAD
    SWI2_DIAG
    SWI2_DURA
    SWI2_FREQ
    SWI30
    SWI5
    SWI6
    SWIA
    MCAP
    MCAQ
    MCAR
    MCAT
    MCAU
    MCAV
    MCAW
    MCAX
    MCAY
    MCAZ
    MCKY
    MCKZ
    MCM+
    MCM-
    MCM/
    MCM?
    MCSW
    MCSX
    MCYY
    PFAC_DIS
    PFTC
    PFTC_DEL
    PFTC_DIS
    PFWF
    PFWS
    PGOM
    PPMS
    PPO4
    PPOS
    PPSS
    PPST
    PSO3
    RE_RHCHECK1
    RE_RHCHECKV
    RE_RHDESC10
    RE_RHEXIST0
    RE_RHNAVIG0
    RE_RHRHAZ00
    RSWEWWDHMSHOW
    RSWEWWDHSHOW
    RSWWCLEAR
    RSWWCOND
    RSWWDHEX
    BSVW
    MC01
    MC02
    MC03
    MC04
    MC05
    MC06
    MC07
    MC08
    MC09
    MC18
    MC19
    MC20
    MC21
    MC22
    MC23
    MC24
    MC25
    MC26
    MC93
    MC94
    MC95
    MC?0
    MC?1
    MC?2
    MC?3
    MC?4
    MC?5
    MC?6
    MC?7
    MC?8
    MC?9
    MCAF
    MCAH
    MCAI
    MCAJ
    MCAK
    MCAL
    MCAM
    MCAN
    MCAO

  • User, Role, Profile Synchronization Job Fails

    Hi Gurus,
    When I am scheduling a job the User, Role, and Profile Sync. job fails giving an error
    "Cannot assign a java.lang.String object of length 53 to host variable 5 which has JDBC type VARCHAR(40)."
    This happens when the synchronization happens with a portal system. We dont have a ruleset for the portal system, So if I put in a "*", it includes this system and results in the error, If I manually select all other system, it works fine. Is there any way to remove this error so that I can schedule the jobs without having to select every system manually.
    Regards,
    Chinmaya

    Hi,
    As per my knowledge, in the Portal system, you should perform only user sync. Roles/profile sync will not work since portal will have workset roles.
    Please refer SAP Note 1168120, which may help you to understand the limitations
    Hope this helps!!
    Rgds,
    Raghu
    Edited by: Raghu Boddu on Nov 4, 2010 7:39 PM

  • User roles in Integration Repository

    Hi everybody,
    does anybody have experience with user roles in XI 3.0? We want to limit access to various namespaces in the Integration Repository with use of these roles that can be created in the IR. That way, various XI developers working on the same XI-Repository should not be able to work in the namespaces of other developers.
    We created the role in the IR and assigned it to a user in the J2EE Engine. But so far, it doesn't seem to work.
    Am I missing something??
    Thanks a lot,
    Francis Wolf

    Hi,
    it looks like the integration to the "abap" backend (=IS-Server) is missing.
    J2EE-R3 integration regards user management maps R3 roles onto J2EE user groups. Thus, if the term "role" is used in R3 context, it has to be translated to "user group" in J2EE.
    Next steps:
    1. Create user in "R3", with transaction SU01.
    2. In "R3", create a role with transaction PFCG
    3. UME Admin WebApp: assign role to user group
    4. XI Exchange Profile WebApp: activate data-dependent authorization checks. Put: com.sap.aii.util.server.auth.activation" in section "IntegrationBuilder.Repository" to true
    Please check the documentation on Netweaver security and Integration of UME Roles with SAP Roles
    Hope that gives an idea!
    Good luck
    Holger

  • Trying to understand "User/Role/Profile Synchronization" and Batch Analysis

    Hello,
    Im trying to understand what exactly and from which tables these jobs are copying to which tables in CC. I have a understanding that these jobs are moving also deleted roles from backend. This is causing unnecessary delay to long lasting job. 
    I would appreasite if some one could explain the logic behind these jobs. What the fullsync and incremental is reading ? What kind of changes are causing a role/user/profile  to be included to the full and incremental jobs?
    How the incremental analysis logic is built ?
    br Janne

    Janne,
    In my current implementation we are going for an offline risk analysis due to the heteregoneus system landscape of our client (several SAP and non SAP systems and several SAP systems under 4.6C). Eventhough within our approach we don't perfrom the backend synchronization (we use CC data extractor to pull data from backend into CC) hope the following info could hel you:
    The tables such jobs you mention access to, are all the SAP backend system tables related with users, roles, profiles, action and permissions. If you check the data mapping appendix of the "user and configuration guide for 5.2" you will see all the data that CC retrieves. For instance, in order to extract user info (UserID, FName, LName, Email, Phone, Email, Department) tables USR21, USR02, ADRP, ADR6 and ADCP must be accessed.
    In terms of CC tables:
    VIRSA_CC_SYSUSR >> UserIDs and Systems ID relationship
    VIRSA_CC_GENOBJ >> User, Role and Profile master data
    VIRSA_CC_GENACT >> User-action, role-action and profile-action data
    VIRSA_CC_GENPRM >> User-permission, role-permission and profile-permission
    VIRSA_CC_SAPOBJ >> Action-permission
    VIRSA_CC_OBJTEXT >> Objects descripcions (ACT, PRM, FLD, VAL, ORG)
    Hope this helps.
    Regards,
       Imanol

  • User Role with All MM Transaction codes

    Hi SAP Gurus,
    I need to create a User role with all MM transactions.  Can anyone please let me know whether Standard User role is available which has authorisations for all MM transaction codes ?  If yes, what is the User role name.  If not, what is the easiest way to get a list of all MM transaction codes.
    Regards,
    Janagiraman.

    Hi,
    sap_mm_all role name is not available in client sap system version 5.0.  The role might have been deleted by someone.
    Regards,
    Janagi

  • End User Roles Tab: Link to security roles on ECC?

    Hi-
    There is a configurable value in the End User Roles tab where you can populate Roles. However when you select the values they only pull in roles loaded on the SolMan system. How can I access roles in target systems, so they can be mapped to my process hierarchy?

    Hi
    what do u mean by target systems... satellites systems.......i think you are confused somehow
    this tab is used for learning map user roles
    check this out and read it completely
    http://help.sap.com/saphelp_sm32/helpdata/en/ee/4344ed87a24d8da937c565bf572408/frameset.htm
    Learning map use
    You want to send the learning map to a group of users with the same business role, e.g. to all accountants in your company, or to the purchasing department. You copy existing business roles in the Solution Manager, or create new ones.
    Hpoe it clarifies ur doubt
    regards
    prakhar

  • ABAP User Roles and Query for accessing particular T- codes and Reports

    dear Gurus
    I have one problem, i want to know about ABAP User Query ,i have one requirement my user wants to Lock all the HR Std versus Customized reports in T- code SQ01,other department peoples also see the Payslips and Hr personal reports which is harmfull to the dept so i want to Lock all the reports in Std T- code in SQ01 and i have created one Customized User Roles or Query in which the T-codes and Reports are assigned only those particular user can access the T-codes and Std reports .how can it be possible i dont have any idea about user roles and Queries .
    kindly help me out or send me some documents related to user roles and queries
    regards ritesh sharma

    Hi Ritesh,
    https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/103cafc2-7a64-2b10-14b3-eddb7d324561
    Regards,
    Flavya

  • Inconsistent behavior of user-role assignment

    Hi, all.
      i'm using EP 6.0 SP9 patch1.
      i logged on as an Administrator user.
      In the menu User Administration --> Roles --> Roles, i got the inconsistent behavior of user-role assignment.
      1. Normal behavior(from user --> edit)
       i searched and selected one user and click the "Edit" link
       --> i can assign all the roles that i want.
      2. Abnormal behavior(from role --> edit)
       i searched and selected one role first and click the "Edit" link
       --> some roles CANNOT be editted(even though i clicked the "Edit" link, it doesn't go to the edit screen). The roles that i couldn't edit are the SAP original roles like Administrator, content_admin_role, user_admin_role...
      Could someone please give me any advice on this problem?
      Thanks.

    Hi Sejoon,
    please open an OSS message.
    Best regards
    Detlev

  • Regarding end user role

    Hi all:
          Is there a standard role called end user role which can not be found in our system ? if yes, can you please tell me what actions should be assigned to the role?
    thank you very much
    Edited by: jingying Sony on May 11, 2010 4:01 AM

    Hi,
    You can assign Standard User (eu_role) or Every User Core (eu_core_role).
    Check the documentation here.
    http://help.sap.com/saphelp_nw70/helpdata/EN/47/f0f7415e639c39e10000000a155106/content.htm
    Regards,
    Sandeep Tudumu

  • Integration Builder - Repository - Users - Roles

    Is it possible to come up with ABAP role with the help of which he can login to Integration Repository but can not change any of the objects but for the one in a specific component.
    I could make it work where the user is given SAP_XI_DEVELOPER role and  I can restrict him to access some objects using another Role that I built in IR. I know about excluding him full edit access etc. This is like giving him full access with modify permissions with SAP_XI_Developer and excluding him permission on some of the objects.
    I tried to give a test user SAP_XI_DIPLAY_USER and then giving him include-fulledit on a specific Software component. But this did not work.
    If anybody worked on this please let me know.
    Regards
    Mike

    Hi Michael,
    Yes it is possible, this is what i found on help.sap.com,
    To make changes to authorizations on the ABAP side, proceed as follows for each dialog user role:
           1.      Call transaction PFCG.
           2.      Copy the single role SAP_XI_<role>_ABAP into the customer namespace (replace the prefix SAP).
           3.      Create a new composite role in the customer namespace (for example, *_XI_<role>).
           4.      Assign the new single role (suffix _ABAP) to the new composite role.
           5.      Assign the new SAP single role (suffix _J2EE) to the new composite role.
           6.      Make changes to the new single role (suffix _ABAP).
           7.      Generate an authorization profile for the new single role (suffix _ABAP).
    Basically what is important is that the single roles with a J2EE suffix are still assigned to the current composite role. These J2EE single roles are known to the J2EE applications and are required for automatic authorization assignments during deployment.
    I hope it helps,
    Thanks,
    Varun

  • User role to access configuration management in NWA

    Hi,
    What USER role is required to create the destination information in configuration management in NWA. When I access NWA, I only have access to SOA management which has only Monitoring tools with role SOA technical ADmin.
    I need this to convert IDOC XML to flat file.
    thanks
    Prashanth

    Hi Prasanth,
    I am not sure about the exact role but, the ABAP role "SAP_NWA_FULL" & Java role "NWA_SUPERADMIN" will certainly help. This is the role that i had when i was trying a similar scenario.
    Please take a look at the following link which might be helpful:
    http://help.sap.com/saphelp_nwpi71/helpdata/en/45/c7ca8e89e45592e10000000a1553f7/content.htm
    You can infact ask your Basis team to help you out with this.
    I hope this helps.
    Regards, Gaurav.
    Edited by: Kumar Gaurav on Nov 9, 2010 5:57 AM

  • End user roles

    Hello!
    Has anyone configured the e-learning functionlity in SM40.  How do we configure the end user role type ? or how to distribute from a central HR system as mentioned in help.sap? Appreciate any input.
    Thanks.

    Hello Mike,
    To create and assign roles, please refer to the following documentation
    http://help.sap.
    com/saphelp_sm40/helpdata/en/9f/7898408f3db753e10000000a114b1d/frameset.
    htm
    Just to answer your question, after you have assigned the End User Roles
    to the user, the learning map is sent to the E-Mail address in the
    address data (txn SU3).
    FYI, e-Learning Management with the SAP Solution Manager
    https://websmp103.sap-ag.de/~sapidb/011000358700000325712005E.sim
    Hope the above information helps.
    Dolores

Maybe you are looking for