SAP Delivered roles in BI

Hi,
   Is there any role (BI Content/SAP Delivered) avaliable in BI 7.0 that can be used for a developer.
   Currently we are using SAP_ALL in BI we want a role that can be assigned to all developers
Thanks

How did you reslove the issue

Similar Messages

  • SAP Delivered Roles

    Can anybody tell me how to find SAP deliver roles for specific Modules (CD,FI) and stuff. Please tell me how can I find SAP Standard roles?
    Thanks in Advance
    Faisal

    Hi Fisal,
                     This you can find from PFCG, go to PFCG-----> in the roles field pull down the menu, then give a search with FI, finance, or accounts yopu will get all the SAP delivered standard roles.
    This way you can search for the other modules/ areas as well.
    Regards,
    Hari.
    PS: Award points if helpful.

  • SAP delivered roles or profiles for FICO developers and configurators

    Hi all,
               Can any one help me in building FICO developer roles and configuration roles. Are there any SAP delivered stuff.
    Thanks
    Bharat

    Hi Bharat,
                      please go thru this document
    <a href="http://help.sap.com/saphelp_erp2005vp/helpdata/en/04/408242160b6255e10000000a155106/frameset.htm">Authorization Objects for Standard Conditions</a>
    i guess, there are no special
    hope this will help you.
    with BR,
    Raj

  • Best practices / preferred usage of SAP standard (delivered) roles

    Dear Experts,
    When going about designing roles for a new system, what is the preferred usage on SAP standard/delivered roles?  I was thinking of using them as a "base", then tweaking auth objects here and there to make the roles work but the more I work with them, I find it may be better to create roles entirely from scratch.  A lot of the time, I find a lot of inactivated auth objects or objects that seem to not really be needed when looking at the t-codes offered in the menu (S_TCODE).
    In that case, I figured it might be cleaner if I started creating roles and adding t-codes via the Menu and maintaining only the auth objects that are proposed in PFCG (and adding a few if necessary).
    Do people typically build their roles around these the standard SAP role set or is it preferred to create your own and only use the SAP standard roles as reference (i.e. the t-codes offered in the menu, etc.)?
    Thanks for any insights!

    > When going about designing roles for a new system, what is the preferred usage on SAP standard/delivered roles?
    Those are provided by SAP as a reference so that you can consult with the Authorization Structure of a Standard Position / Task for which you are going to create your own role. For e.g. what are the TCodes, values of Objects should be given to users for their tasks.
    I was thinking of using them as a "base", then tweaking auth objects here and there to make the roles work but the more I work with them, I find it may be better to create roles entirely from scratch.
    Absolutely! Please do not use SAP delivered roles for you use and also don't try to alter any values.
    A lot of the time, I find a lot of inactivated auth objects or objects that seem to not really be needed when looking at the t-codes offered in the menu (S_TCODE).
    >
    > In that case, I figured it might be cleaner if I started creating roles and adding t-codes via the Menu and maintaining only the auth objects that are proposed in PFCG (and adding a few if necessary).
    >
    > Do people typically build their roles around these the standard SAP role set or is it preferred to create your own and only use the SAP standard roles as reference (i.e. the t-codes offered in the menu, etc.)?
    >
    Yes.. as reference.. as you say..
    Regards,
    Dipanjan

  • SAP ECC 6.0 delivered Roles - SOD compliant?

    Are SAP ECC 6.0 delivered roles SOD compliant as per the GRC ruleset?

    Ivanka,
    the SAP ECC 6.0 roles are not SOD compliant as per the GRC ruleset.  You will actually find a number of violations within the standard roles.

  • SAPJSF user role - does it have to be SAP delivered name ?

    Hi Folks,
    Security question - We are upgrading to EP 7.0 . The SAPJSF user ( in ABAP system) has the role SAP_BC_JSF_COMMUNICATION_RO.
    Does the Portal need this exact named role ? If so ..can it be changed in the
    Portal end ?
    Our policy with roles is not to use the SAP delivered - so we copy and change
    to our standard . Will the portal recognize a different role on the SAPJSF user.
    This note got me thinking on this  908911 
    Thanks for input !   Dan

    Ah, yes. It does read the role. It displays this role in the UME user interfaces as a group to which users are assigned. You can then assign portal roles to this "group."
    See the picture in this document:
    http://help.sap.com/saphelp_nw04s/helpdata/en/ed/18cc38e6df4741a264bddcd4f98ae2/frameset.htm
    -Michael

  • Custom transaction attached to SAP delivered code

    HI
    We have a requirement that all custom program and transactions are secure. Usually we have the developers add an auth check statement to the program and add that check to the custom t-code in SU24.
    today I have the situation that we are using SAP delivered code and attaching a custom transaction. Since we don't want to modify the SAP code, how is it possible to get any check on the transaction? I know that SU24 won't force the check unless the program is changed. So is there any way to have any type of auth object checked? Or is this a situation where no check would be needed and no objects added to the role when the new tcode is added? (SE93?)
    Hope that makes sense!
    Thanks
    Bobbi

    Here is where I run into problems. I am not a developer and have a hard time reading the code. This particular report is to display vendor address data. As far as I can tell I do not see anything that appears to be authority checks.
    This is the top level of the code:
    report AQZZZVEND=======ZVEND_ADDR====.
    include /1BCDWB/IQG000000000055DAT.
    data %dtab type standard table of /1BCDWB/IQG000000000055 with header line.
    data %subrc type sy-subrc.
    include /1BCDWB/IQG000000000055SSCR.
    include /1BCDWB/IQG000000000055SSCRAT.
    start-of-selection.
      if %runmode-extr_on <> space.
        call function '/1BCDWB/IQG000000000055EXTR'
             tables     %selopt = %seloptions
                        %dtab   = %dtab
             changing   %rtmode = %runmode
             exceptions no_data = 1
                        others  = 2.
        %subrc = sy-subrc.
        call function 'RSAQRT_CHECK_EXTR'
             exporting extr_subrc = %subrc
             tables    dtab   = %dtab
             changing  rtmode = %runmode.
      endif.
    end-of-selection.
      if %runmode-show_on <> space.
        call function '/1BCDWB/IQG000000000055SHOW'
             tables   %dtab   = %dtab
             changing %rtmode = %runmode.
      endif.
       special code for old API and BW extractor calls
    form %set_data changing p_lines type i.
      import ldata to %dtab from memory id 'AQLISTDATA'.
      describe table %dtab lines p_lines.
      free memory id 'AQLISTDATA'.
    endform.
    form %get_data tables p_dtab  structure %dtab
                   using  p_first type i
                          p_last  type i.
      append lines of %dtab from p_first to p_last to p_dtab.
    endform.
    form %get_ref_to_table using p_lid   type aql_lid
                                 p_ref   type ref to data
                                 p_subrc type i.
      if p_lid = %iqid-lid.
        create data p_ref like %dtab[].
        p_subrc = 0.
      else.
        p_subrc = 4.
      endif.
    endform.
    ================================================================================================
    The abaper doesn't seem to understand what  I am asking of him so I am stuck. It appears this custom transaction will go in without any checks on it unless you can perhaps advise me on how to proceed. Any help is appreciated.

  • Modifying SAP standard roles - best practice

    Hi,
    Is there a Best practice How-to guide for configuring SAP BPs roles for client use.  I know I shouldn't change the content delivered by SAP but I'm not quite sure what I should delta link copy into client namespace.
    I am implementing MSS.  Do I just delta link copy the Manager role into client namespace or I should make a delta link copy of the My Staff workset then make changes to the workset and assign it to a completely new ClientManager role?
    I have the TransportEP6Content how to guide but it doesn't say explicitly what is best parctice.  This doc references 'HowTo Use Business Packages in Enterprise Portal 6.0' but it isn't where it says it is on service marketplace.
    TIA,
    J

    Hi,
      'How to use Busiess Packages in Enterprise Portal 6.0' is available in this link.
    http://help.sap.com/bp_epv260/EP_EN/documentation/How-to_Guides/misc/Using_Business_Packages.pdf
    Check out for the best practices.
    Regards,
    Harini S

  • Deletion of SAP standard roles

    I have been asked by the client if we could delete all of the SAP standard roles. I think there are many good reasons not to delete them, but does anyone know what SAP's official recommendation would be to that question and could you point me to the documentation or SAP Note where that recommendations is written?
    So far all I have found is the following documentation(http://help.sap.com/saphelp_47x200/helpdata/en/52/67164b439b11d1896f0000e8322d00/frameset.htm) saying that:
    Do not change the delivered standard roles (SAP_), but rather only the copies of these roles (Z_). Otherwise, the standard roles that you have modified will be overwritten by newly delivered standard roles during a later upgrade or release change.
    But it does not say that you should never delete them.
    Br,
    Jon

    Christensen Jon Jagd wrote:>
    > The client want's to "clean up" the authorizations concept by deleting all of the unused roles. And all the SAP_* roles are not assigned to any users (and not generated neither).
    I've seen that before, the urge to clean up...... unused roles aren't the worst thing to happen on a system, as long as they're part of the concept.
    Come to think of it. I'd delete them from my test and prod systems to avoid confusion and/or (mis)use, but not from dev. On dev the majority of roles is not assigned to users anyway........
    > But I would like to know if for example "SAP recommends that you do NOT delete system delivered roles".
    I don't think such advice exists. Try to convince the client they should be kept on dev for future reference. Delete them on the other systems to clean up. Everybody happy.
    Jurjen
    Edited by: Jurjen Heeck on Feb 12, 2008 10:16 AM

  • How do I change the text on a label for a SAP delivered WD view

    Hi,
    I need to change the text that is being displayed for a label in a SAP delivered WD ABAP View. When I look at the properties for this label, the Text property is currently empty, so I assume that the text that is being displayed in the view is coming from the dictionary. I was hoping to change the text of the label via the Enhancement Framework. I created an OTR entry, then went into SE80 for the WD Component, I navigated to the view in question, I pressed the Enhance button and entered $OTR:<package>/<alias name> in the text property for the label. Finally I saved and activated and was prompted to create an Enhancement Implementation, which I did and I selected it. Everything seems to be fine (no errors or warnings). I then ran the WD application. My change was not there. I then went back into SE80 for the WD Component that I created the enhancement. I navigated to the View and looked in the text property of the label and saw that my change was not there. I repeated this process several times and each time when I added the OTR entry to the text property of the label, it saves and activates without issue (in enhancement mode), but when I run the WD App the change does not show up and when I go back to the WD View, my change to the text property is gone. I know that if I really wanted to I could register the object and add the OTR entry to the text attribute of the label, but I am trying to perform this change using a modification free enhancement. Can this be done via an Enhancement, or do I have to register the object and make my change using a modification?

    Hi Gregg,
    excellent question. I had the same problem as well before.
    What I have learned is that you cannot change a UI Element via Enhancements.
    You can add new UI Elements (e.g. new label) or remove existing elements, but you cannot change them (except the layout properties (e.g. colspan) maybe).
    The only possibilities I see is
    1. Remove the existing label, and add a new label with your desired text
    2. Do it as a modification
    3. Do it as a configuration (This means you go to the webdynpro application in SE80, right click and select "Create/Change Configuration)
    4. Do it as customizing (This means you add the URL parameter sap-config-mode=X to the URL, navigate to the label, right click on it, and select "Change Settings for Current Configuration").
    The disadvatages of 3) and 4) are
    - texts in configurations and customizing are not translatable (as far as I know)
    - if you have multiple configurations, you have to change the label multiple times
    Hope this helps a bit,
    Daniel

  • Problem using the delivered roles in BI Publisher

    We are unable to 'see' the delivered roles in order to assign folder and data source permissions.
    We can add users to the delivered roles, but on the ‘Roles and Permissions’ tab, the delivered roles are not available ( the page is blank). Those roles don’t show up anywhere under ‘available roles’ except when assigning the a user.
    Any thoughts?

    How did you reslove the issue

  • Best Practice for enhancing the SAP delivered standard WD ABAP application

    Hi,
    I am new to WebDypro ABAP.
    To enhance the SAP delivered Standard WebDynpro Component (complex component with Business objects & powl).
    Kindly let me know the best practice for enhancing the Standard WD ABAP from the below 1 or 2.
    1) To copy & create a "Z" of the component & make changes in that (or)
    2) to enhance directly on the same standard component without making "Z".
    Regards,
    NS

    Hi NS,
    If it is a standard component its better we go for enhancing the component rather than copying it into Z component.
    If there is any issue with in the standard component , SAP supports it through notes and OSS messages. If it is a Z component, SAP doesn't support it.
    If there is any up gradation of business packages, changes will be done to standard , but not the Z components, wherein we could miss it.
    Further, since it is a standard component it might have been used at many places, changes that has to done to reflect all changes might be difficult in this case if it is a z component.
    Regards,
    Harsha

  • SAP Technical roles and IDM Business roles mapping

    Hi Guys
    Just wondering if there is an easy way to export SAP Positions and create them automatically as Business Roles in IDM and the SAP technical roles that are related to that corresponding position into privledges assigned to that Business Role. Or am I going about this the wrong way? What do you normally do in terms of getting all your sap technical roles from the sap system and assigning them to business roles in IDM. Any help on this is much appreciated?
    Cheers
    Leo

    Thanks Matt,
    I think get I the picture now
    One thing that I am still not sure about is how the sap abap technical roles or profiles are provisioned through workflow
    Here is what Ive done so far
    1. HCM data loaded into productive identity store via vds
    2. Did an initial load of the abap system into the productive identity store (now the technical roles and profiles are loaded as privileges in the idstore)
    3. Through workflow I select a user that already has an abap account and assign that user some additional sap technical roles, for e.g. sap_all and sap_new. The corresponding privileges for these roles are namely PRIV:PROFILE:ECX:SAP_ALL and PRIV:PROFILE:ECX:SAP_NEW .
    4. For the provisioning to occur so that these new privileges are reflected in the ABAP system for this user, I have used the setABAPRole&ProfileForUser task from sap provisioning framework folder and set it as the add/mod/del  event task for the MXREF_MX_PRIVILEGE attribute. That way whenever a privilege is added to a user account the setABAPRole&ProfileForUser task will run and the sap_all and sap_new profiles will be added in the backend. This way I can avoid setting a provisioning task for each abap privilege that gets loaded.
    But it should be obvious now that there is a flaw with this kind of setup, because all non abap privileges that get added or removed will trigger the setABAPRole&ProfileForUser task anyway because the privileges use the same attribute i.e.MXREF_MX_PRIVILEGE. So it brings me to the question how do you provision abap technical roles or profiles through workflow without setting a provisioning task for each abap related privilege.
    Thanks again for all your help!
    Leo

  • Challenge of the day - "beginner" errors in SAP-delivered transactions

    1.  Read this post here:
    Question on SWUI_SINGLE and SWUI_START
    2.  Name another SAP-delivered transaction that exhibits the same incorrect behavior as SWUI_SINGLE and SWUI_START.
    Note: Assume that the behavior of these transactions at this customer site is not due to an error in system config, but rather to insufficient internal SAP QA/QC.
    If the behavior of SWUI_SINGLE and SWUI_START is not due to a config error at this customer site, these are really remarkable transactions.  I've never seen SAP transactions delivered with such gross "beginner" errors.
    Have you?
    djh

    Hi Stephen -
    How could I teach them "/nex" when I had deliberately forgotten it myself ... I'm the guy you love to hate  when you're standing behind him watching him try to get something done "fast" ... I still go up to the menu bar for copy/paste/cut in Office sometimes ...
    It's my way of being old-fashioned - like the engineers who wouldn't give up their rules for calculators ...
    As far as EEWB goes, well I can see why nobody cares about it ... remember the old saying:
    "Real programmers don't program in wussy languages like LISP ... they program right down to the bare metal" ...
    ... same goes for any tool that has "easy" and "workbench" in it ...
    Just kidding, of course ...
    djh

  • Column-clipping behavior of FIND from SAP-delivered ALV toolbar

    I have an ALV display whose rows start with three short columns followed by one pretty long column.
    The customers want to use the FIND button from the standard SAP ALV toolbar to search for substrings in the text that's in the long column.
    The find is working fine, but when the result is displayed, the layout is clipped so that only the long text column shows.  Furthermore, you can't window to see the three leading columns - it's like a different display.
    Is there an SAP-delivered parameter that will successfully tune this behavior so that the result of the FIND uses the original layout?
    If not, has anyone written a custom FIND implementation that will not behave this way ???
    Thanks
    djh

    I've learned that this can be eliminated by right-clicking the ALV container anywhere and selecting "optimize width".
    I've started a separate question about whether this option can be preset.
    Dave

Maybe you are looking for