SAP Delivered roles in BI
Hi,
Is there any role (BI Content/SAP Delivered) avaliable in BI 7.0 that can be used for a developer.
Currently we are using SAP_ALL in BI we want a role that can be assigned to all developers
Thanks
How did you reslove the issue
Similar Messages
-
Can anybody tell me how to find SAP deliver roles for specific Modules (CD,FI) and stuff. Please tell me how can I find SAP Standard roles?
Thanks in Advance
FaisalHi Fisal,
This you can find from PFCG, go to PFCG-----> in the roles field pull down the menu, then give a search with FI, finance, or accounts yopu will get all the SAP delivered standard roles.
This way you can search for the other modules/ areas as well.
Regards,
Hari.
PS: Award points if helpful. -
SAP delivered roles or profiles for FICO developers and configurators
Hi all,
Can any one help me in building FICO developer roles and configuration roles. Are there any SAP delivered stuff.
Thanks
BharatHi Bharat,
please go thru this document
<a href="http://help.sap.com/saphelp_erp2005vp/helpdata/en/04/408242160b6255e10000000a155106/frameset.htm">Authorization Objects for Standard Conditions</a>
i guess, there are no special
hope this will help you.
with BR,
Raj -
Best practices / preferred usage of SAP standard (delivered) roles
Dear Experts,
When going about designing roles for a new system, what is the preferred usage on SAP standard/delivered roles? I was thinking of using them as a "base", then tweaking auth objects here and there to make the roles work but the more I work with them, I find it may be better to create roles entirely from scratch. A lot of the time, I find a lot of inactivated auth objects or objects that seem to not really be needed when looking at the t-codes offered in the menu (S_TCODE).
In that case, I figured it might be cleaner if I started creating roles and adding t-codes via the Menu and maintaining only the auth objects that are proposed in PFCG (and adding a few if necessary).
Do people typically build their roles around these the standard SAP role set or is it preferred to create your own and only use the SAP standard roles as reference (i.e. the t-codes offered in the menu, etc.)?
Thanks for any insights!> When going about designing roles for a new system, what is the preferred usage on SAP standard/delivered roles?
Those are provided by SAP as a reference so that you can consult with the Authorization Structure of a Standard Position / Task for which you are going to create your own role. For e.g. what are the TCodes, values of Objects should be given to users for their tasks.
I was thinking of using them as a "base", then tweaking auth objects here and there to make the roles work but the more I work with them, I find it may be better to create roles entirely from scratch.
Absolutely! Please do not use SAP delivered roles for you use and also don't try to alter any values.
A lot of the time, I find a lot of inactivated auth objects or objects that seem to not really be needed when looking at the t-codes offered in the menu (S_TCODE).
>
> In that case, I figured it might be cleaner if I started creating roles and adding t-codes via the Menu and maintaining only the auth objects that are proposed in PFCG (and adding a few if necessary).
>
> Do people typically build their roles around these the standard SAP role set or is it preferred to create your own and only use the SAP standard roles as reference (i.e. the t-codes offered in the menu, etc.)?
>
Yes.. as reference.. as you say..
Regards,
Dipanjan -
SAP ECC 6.0 delivered Roles - SOD compliant?
Are SAP ECC 6.0 delivered roles SOD compliant as per the GRC ruleset?
Ivanka,
the SAP ECC 6.0 roles are not SOD compliant as per the GRC ruleset. You will actually find a number of violations within the standard roles. -
SAPJSF user role - does it have to be SAP delivered name ?
Hi Folks,
Security question - We are upgrading to EP 7.0 . The SAPJSF user ( in ABAP system) has the role SAP_BC_JSF_COMMUNICATION_RO.
Does the Portal need this exact named role ? If so ..can it be changed in the
Portal end ?
Our policy with roles is not to use the SAP delivered - so we copy and change
to our standard . Will the portal recognize a different role on the SAPJSF user.
This note got me thinking on this 908911
Thanks for input ! DanAh, yes. It does read the role. It displays this role in the UME user interfaces as a group to which users are assigned. You can then assign portal roles to this "group."
See the picture in this document:
http://help.sap.com/saphelp_nw04s/helpdata/en/ed/18cc38e6df4741a264bddcd4f98ae2/frameset.htm
-Michael -
Custom transaction attached to SAP delivered code
HI
We have a requirement that all custom program and transactions are secure. Usually we have the developers add an auth check statement to the program and add that check to the custom t-code in SU24.
today I have the situation that we are using SAP delivered code and attaching a custom transaction. Since we don't want to modify the SAP code, how is it possible to get any check on the transaction? I know that SU24 won't force the check unless the program is changed. So is there any way to have any type of auth object checked? Or is this a situation where no check would be needed and no objects added to the role when the new tcode is added? (SE93?)
Hope that makes sense!
Thanks
BobbiHere is where I run into problems. I am not a developer and have a hard time reading the code. This particular report is to display vendor address data. As far as I can tell I do not see anything that appears to be authority checks.
This is the top level of the code:
report AQZZZVEND=======ZVEND_ADDR====.
include /1BCDWB/IQG000000000055DAT.
data %dtab type standard table of /1BCDWB/IQG000000000055 with header line.
data %subrc type sy-subrc.
include /1BCDWB/IQG000000000055SSCR.
include /1BCDWB/IQG000000000055SSCRAT.
start-of-selection.
if %runmode-extr_on <> space.
call function '/1BCDWB/IQG000000000055EXTR'
tables %selopt = %seloptions
%dtab = %dtab
changing %rtmode = %runmode
exceptions no_data = 1
others = 2.
%subrc = sy-subrc.
call function 'RSAQRT_CHECK_EXTR'
exporting extr_subrc = %subrc
tables dtab = %dtab
changing rtmode = %runmode.
endif.
end-of-selection.
if %runmode-show_on <> space.
call function '/1BCDWB/IQG000000000055SHOW'
tables %dtab = %dtab
changing %rtmode = %runmode.
endif.
special code for old API and BW extractor calls
form %set_data changing p_lines type i.
import ldata to %dtab from memory id 'AQLISTDATA'.
describe table %dtab lines p_lines.
free memory id 'AQLISTDATA'.
endform.
form %get_data tables p_dtab structure %dtab
using p_first type i
p_last type i.
append lines of %dtab from p_first to p_last to p_dtab.
endform.
form %get_ref_to_table using p_lid type aql_lid
p_ref type ref to data
p_subrc type i.
if p_lid = %iqid-lid.
create data p_ref like %dtab[].
p_subrc = 0.
else.
p_subrc = 4.
endif.
endform.
================================================================================================
The abaper doesn't seem to understand what I am asking of him so I am stuck. It appears this custom transaction will go in without any checks on it unless you can perhaps advise me on how to proceed. Any help is appreciated. -
Modifying SAP standard roles - best practice
Hi,
Is there a Best practice How-to guide for configuring SAP BPs roles for client use. I know I shouldn't change the content delivered by SAP but I'm not quite sure what I should delta link copy into client namespace.
I am implementing MSS. Do I just delta link copy the Manager role into client namespace or I should make a delta link copy of the My Staff workset then make changes to the workset and assign it to a completely new ClientManager role?
I have the TransportEP6Content how to guide but it doesn't say explicitly what is best parctice. This doc references 'HowTo Use Business Packages in Enterprise Portal 6.0' but it isn't where it says it is on service marketplace.
TIA,
JHi,
'How to use Busiess Packages in Enterprise Portal 6.0' is available in this link.
http://help.sap.com/bp_epv260/EP_EN/documentation/How-to_Guides/misc/Using_Business_Packages.pdf
Check out for the best practices.
Regards,
Harini S -
Deletion of SAP standard roles
I have been asked by the client if we could delete all of the SAP standard roles. I think there are many good reasons not to delete them, but does anyone know what SAP's official recommendation would be to that question and could you point me to the documentation or SAP Note where that recommendations is written?
So far all I have found is the following documentation(http://help.sap.com/saphelp_47x200/helpdata/en/52/67164b439b11d1896f0000e8322d00/frameset.htm) saying that:
Do not change the delivered standard roles (SAP_), but rather only the copies of these roles (Z_). Otherwise, the standard roles that you have modified will be overwritten by newly delivered standard roles during a later upgrade or release change.
But it does not say that you should never delete them.
Br,
JonChristensen Jon Jagd wrote:>
> The client want's to "clean up" the authorizations concept by deleting all of the unused roles. And all the SAP_* roles are not assigned to any users (and not generated neither).
I've seen that before, the urge to clean up...... unused roles aren't the worst thing to happen on a system, as long as they're part of the concept.
Come to think of it. I'd delete them from my test and prod systems to avoid confusion and/or (mis)use, but not from dev. On dev the majority of roles is not assigned to users anyway........
> But I would like to know if for example "SAP recommends that you do NOT delete system delivered roles".
I don't think such advice exists. Try to convince the client they should be kept on dev for future reference. Delete them on the other systems to clean up. Everybody happy.
Jurjen
Edited by: Jurjen Heeck on Feb 12, 2008 10:16 AM -
How do I change the text on a label for a SAP delivered WD view
Hi,
I need to change the text that is being displayed for a label in a SAP delivered WD ABAP View. When I look at the properties for this label, the Text property is currently empty, so I assume that the text that is being displayed in the view is coming from the dictionary. I was hoping to change the text of the label via the Enhancement Framework. I created an OTR entry, then went into SE80 for the WD Component, I navigated to the view in question, I pressed the Enhance button and entered $OTR:<package>/<alias name> in the text property for the label. Finally I saved and activated and was prompted to create an Enhancement Implementation, which I did and I selected it. Everything seems to be fine (no errors or warnings). I then ran the WD application. My change was not there. I then went back into SE80 for the WD Component that I created the enhancement. I navigated to the View and looked in the text property of the label and saw that my change was not there. I repeated this process several times and each time when I added the OTR entry to the text property of the label, it saves and activates without issue (in enhancement mode), but when I run the WD App the change does not show up and when I go back to the WD View, my change to the text property is gone. I know that if I really wanted to I could register the object and add the OTR entry to the text attribute of the label, but I am trying to perform this change using a modification free enhancement. Can this be done via an Enhancement, or do I have to register the object and make my change using a modification?Hi Gregg,
excellent question. I had the same problem as well before.
What I have learned is that you cannot change a UI Element via Enhancements.
You can add new UI Elements (e.g. new label) or remove existing elements, but you cannot change them (except the layout properties (e.g. colspan) maybe).
The only possibilities I see is
1. Remove the existing label, and add a new label with your desired text
2. Do it as a modification
3. Do it as a configuration (This means you go to the webdynpro application in SE80, right click and select "Create/Change Configuration)
4. Do it as customizing (This means you add the URL parameter sap-config-mode=X to the URL, navigate to the label, right click on it, and select "Change Settings for Current Configuration").
The disadvatages of 3) and 4) are
- texts in configurations and customizing are not translatable (as far as I know)
- if you have multiple configurations, you have to change the label multiple times
Hope this helps a bit,
Daniel -
Problem using the delivered roles in BI Publisher
We are unable to 'see' the delivered roles in order to assign folder and data source permissions.
We can add users to the delivered roles, but on the ‘Roles and Permissions’ tab, the delivered roles are not available ( the page is blank). Those roles don’t show up anywhere under ‘available roles’ except when assigning the a user.
Any thoughts?How did you reslove the issue
-
Best Practice for enhancing the SAP delivered standard WD ABAP application
Hi,
I am new to WebDypro ABAP.
To enhance the SAP delivered Standard WebDynpro Component (complex component with Business objects & powl).
Kindly let me know the best practice for enhancing the Standard WD ABAP from the below 1 or 2.
1) To copy & create a "Z" of the component & make changes in that (or)
2) to enhance directly on the same standard component without making "Z".
Regards,
NSHi NS,
If it is a standard component its better we go for enhancing the component rather than copying it into Z component.
If there is any issue with in the standard component , SAP supports it through notes and OSS messages. If it is a Z component, SAP doesn't support it.
If there is any up gradation of business packages, changes will be done to standard , but not the Z components, wherein we could miss it.
Further, since it is a standard component it might have been used at many places, changes that has to done to reflect all changes might be difficult in this case if it is a z component.
Regards,
Harsha -
SAP Technical roles and IDM Business roles mapping
Hi Guys
Just wondering if there is an easy way to export SAP Positions and create them automatically as Business Roles in IDM and the SAP technical roles that are related to that corresponding position into privledges assigned to that Business Role. Or am I going about this the wrong way? What do you normally do in terms of getting all your sap technical roles from the sap system and assigning them to business roles in IDM. Any help on this is much appreciated?
Cheers
LeoThanks Matt,
I think get I the picture now
One thing that I am still not sure about is how the sap abap technical roles or profiles are provisioned through workflow
Here is what Ive done so far
1. HCM data loaded into productive identity store via vds
2. Did an initial load of the abap system into the productive identity store (now the technical roles and profiles are loaded as privileges in the idstore)
3. Through workflow I select a user that already has an abap account and assign that user some additional sap technical roles, for e.g. sap_all and sap_new. The corresponding privileges for these roles are namely PRIV:PROFILE:ECX:SAP_ALL and PRIV:PROFILE:ECX:SAP_NEW .
4. For the provisioning to occur so that these new privileges are reflected in the ABAP system for this user, I have used the setABAPRole&ProfileForUser task from sap provisioning framework folder and set it as the add/mod/del event task for the MXREF_MX_PRIVILEGE attribute. That way whenever a privilege is added to a user account the setABAPRole&ProfileForUser task will run and the sap_all and sap_new profiles will be added in the backend. This way I can avoid setting a provisioning task for each abap privilege that gets loaded.
But it should be obvious now that there is a flaw with this kind of setup, because all non abap privileges that get added or removed will trigger the setABAPRole&ProfileForUser task anyway because the privileges use the same attribute i.e.MXREF_MX_PRIVILEGE. So it brings me to the question how do you provision abap technical roles or profiles through workflow without setting a provisioning task for each abap related privilege.
Thanks again for all your help!
Leo -
Challenge of the day - "beginner" errors in SAP-delivered transactions
1. Read this post here:
Question on SWUI_SINGLE and SWUI_START
2. Name another SAP-delivered transaction that exhibits the same incorrect behavior as SWUI_SINGLE and SWUI_START.
Note: Assume that the behavior of these transactions at this customer site is not due to an error in system config, but rather to insufficient internal SAP QA/QC.
If the behavior of SWUI_SINGLE and SWUI_START is not due to a config error at this customer site, these are really remarkable transactions. I've never seen SAP transactions delivered with such gross "beginner" errors.
Have you?
djhHi Stephen -
How could I teach them "/nex" when I had deliberately forgotten it myself ... I'm the guy you love to hate when you're standing behind him watching him try to get something done "fast" ... I still go up to the menu bar for copy/paste/cut in Office sometimes ...
It's my way of being old-fashioned - like the engineers who wouldn't give up their rules for calculators ...
As far as EEWB goes, well I can see why nobody cares about it ... remember the old saying:
"Real programmers don't program in wussy languages like LISP ... they program right down to the bare metal" ...
... same goes for any tool that has "easy" and "workbench" in it ...
Just kidding, of course ...
djh -
Column-clipping behavior of FIND from SAP-delivered ALV toolbar
I have an ALV display whose rows start with three short columns followed by one pretty long column.
The customers want to use the FIND button from the standard SAP ALV toolbar to search for substrings in the text that's in the long column.
The find is working fine, but when the result is displayed, the layout is clipped so that only the long text column shows. Furthermore, you can't window to see the three leading columns - it's like a different display.
Is there an SAP-delivered parameter that will successfully tune this behavior so that the result of the FIND uses the original layout?
If not, has anyone written a custom FIND implementation that will not behave this way ???
Thanks
djhI've learned that this can be eliminated by right-clicking the ALV container anywhere and selecting "optimize width".
I've started a separate question about whether this option can be preset.
Dave
Maybe you are looking for
-
Conditional If-THEN statement in PL/SQL
Hi, I've got a question here. I looked through some other threads, but didn't really see any discussing what I'm trying to achieve. I've got a statement: SELECT DISTINCT AID, ACTIVE, REQUESTOR_NAME, REQUESTOR_EMAIL,BUS_CONTACT ,DEPT,LOCATION,DATE_REQ
-
Stop duplicate entry of item in Order management sales order
Dear, i have a requirment to stop duplicate entry (while making sales order) in Order management Sales order. When user enter any new line on the sales order then it is validate that same item has already been selected before in the same order. If us
-
Can't access Raw files in Bridge CS3
I have recently had to purchase a new computer (Acer) and have re installed CS3. When I open Bridge none of RAW files are showing and bridge doesn't say I can open any images in RAW. I use windows XP I have dowloaded the ACR4.6 from the Adobe and b
-
Cansomeone help me with my problem, if you have any clue please. I am starting to be ressourceless and my Iphone is my primary phone, so... Thanks for any help
-
After update, Safari will not launch
The Safari menu appears, but I have nothing else -- no directional buttons, address bar, etc. I tried re-installing to no avail. Any assistance would be very much appreciated!!