Service Desk User access

Hi Experts,
I want my service desk users login on Solman and they can update Msg status and ther remarks.
so what are auth. object needs on there profile, please suggest.
Can we block users access in such a way , they are not able to do add change on other users issue msg.
bcoz , if i give access on crm_dno_monitor to any user, he may access and process all issue tickets.
Thanks
Andrew

Andree,
Actually we provide variants for crm_dno_monitor.
so they have option of seeing only tickets belonging to themselves only
For e.g create a variant of crm_dno_monitor by choosing mine and then save it and create a ztcode in se93 for the same.
assign this tcode for the user menu to the respective role of the user.
So whn this user logs in and click on the link he sees only mine tickets or tickets belonging to him..he doesnt hav access to crm_dno_monitor.
Pls assign pts.

Similar Messages

Any way to give Help Desk Users access to tickets by Category?

As far as I know, there's just no way to do this. The user roles are not very flexible and really don't provide any middle ground by design. You can either see all tickets or you can see only tickets assigned to you.

So we have our first level Help Desk people that get ALL the tickets that come in. They are Help Desk Admins as they route things around and manage the system.
We also have our Database team that we sometimes have to assign tickets to. We don't want them to see all the tickets so I think I have to set them as Help Desk Users.
Based on the documentation, this means they won't see anything except what's already assigned to them personally.
What we'd like to be able to do is create a Category called Database and set the Database users up so they can see their own tickets and any ticket that's assigned to the Database Category. Is there any way to do this or an alternative way that we can accomplish the same end result?
Thanks.
This topic first appeared in the Spiceworks Community

Generic Object Services restrict user access

Hi
I have the following scenario, could anyone offer any pointers as to how to achieve a solution.
I have two groups of people, A and B, my requirement is to only allow group A to access/delete documents that have been created by users in group A, and for Group B to only have access to attachments created by users in group B.
An in addition to Ideally have two content repositories one for A and one for B
Thanks
John

Hi John,
            Please adjust role with S_OC_ROLE and S_GOS_ATT.
          1) If a user has a role with S_OC_ROLE with *, then he will be able to delete the attachements made by any othe user, then in this case S_GOS_ATT will not be checked.
           2) If a user has a role with S_OC_ROLE with " ", then he will be NOT able to delete the attachements made by any othe user, unless S_GOS_ATT is assigned.
Thanks,
CB

Service Desk end user not able to see messages

Hi
Im configuring service desk.Iam facing following issues.
1. In solution manager service desk user could not able to see his submitted messages.He could able to submit his message and they are appearing in crm_dno_monitor. Is there any way he can see his submitted messages and message status.
2. I have assigned following roles to user, but he couldnot able to send message and getting 513 error. If i assign sap_all to him, he is able to submit message. Just i wanted to know how can i avoid sap_all to him.
ZSAP_SOL_SERVTRANS_CREATE
ZSAP_SUPPDESK_CREATE
ZSAP_SV_FDB_NOTIF_BC_CREATE
Your help is highly appreciated
Thanks
Regards
Mahi

Hi Mahi,
Please check about Workcenter:
1160651: Work Centers: How to Customize (Solution Manager)
http://help.sap.com/saphelp_smehp1/helpdata/en/6a/4b4713fc2e45ad921a20b0831d07a5/content.htm
Make sure the user has the following roles:
SAP_SUPPDESK_CREATE
SAP_SUPPCF_CREATE
SAP_SMWORK_BASIC
SAP_SMWORK_INCIDENT_MAN
Message processor:
SAP_SMWORK_BASIC
SAP_SUPPDESK_CREATE
SAP_SUPPDESK_PROCESS
SAP_SUPPDESK_DISPLAY
SAP_SMWORK_INCIDENT_MAN
Concerning this please pay attention of the note:
834534 - SAP Solution Manager roles in Release 7.0
Error message 513 is probably caused by incorrect or incomplete
customizing. Please review attached note 864195 for more details.
Please also ensure note 1356510 has been applied in your system,
you may find more explanation in note 1522809.
Please check the authorizations for your key users. The key user
shouldn't have the following value on authorization object CRM_TXT_ID:
TEXTID SU15
ACTVT 02
FM AI_SDK_KEY_USER_CHECK can be used to check a user is a key user or
not. The key user should have limited authorizations on authorization
object CRM_TXT_ID.
Please check security guide for the message processor roles and
other roles. You can download the security guide from below link which
will be available to download after half an hour or so or you can also
find security guide from below link:
http://service.sap.com/instguides -> SAP Components -> SAP Solution
Manager
Thanks
Regards,
Vikram Jain

Accessing the service desk message from satellite system

gurus ,
after creating a creating a service desk message to solution manager system via HELP->CREATE SUPPORT MESSAGE ,
how does the message creator from satellite system will view/change the message created by them at late point of time ?

Susin,
the problem is a commonly asked one that I get when I present the Solution Manager to customers. There is always the question: How can the user see the status of the ticket?
From my point of view you can give them access to the worklist but I guess it is really a pain for the user to log on to SolMan and to access the information from there through a complex transaction.
Alternatively to provide the user with access to the ticket system, you could consider sending out an email on (all or only critical) status changes from the system bei assigning an activity to the status change. That might be much easier for the user (and for you).
After looking at and working with work centres I think it would be worth to install the neccesary patch level. It is really beneficial, for the user reporting a problem, as well as for your help desk monitoring their issues.
Since it is a very common question, and Ruediger seems to be close to the source, can you (Ruediger) maybe provide some information how SAP is going to handle that in the future? Is SAP purely focussing on the work centers in Solution Manager, or is SAP planning on a track & trace possibility within the satellite system for the users?
I guess there is no easy solution to your problem, but maybe I was able to provide some ideas how to provide more funtionality.
Cheers
Markus

End User Role for Service Desk in Solution Manager

Hey,
I am launching the Service Desk functionality for my End Users. One thing that i want to know of is the role that I should assign my user in Solution Manager to access his message. E.g.
I have a user 'A' who creates a message from any system in my landscape:Test, QA, Dev or Production. Now this message reaches in Solution Manager and is assigned to a certain Support Team according to the rules I defined. Now the personnel of Support Team needs some feedback from the end user who created the message. For that the user 'A' has to log into Solution Manager, access his message and enter the details which the Support Team requested.
I want to know that what Role should i give to this user 'A' so that he is able to access ONLY the messages that he created i.e. "Reported by" field showing user 'A'; and is able to view and edit them.
If I give him the role SAP_SUPPDESK_CREATE and SAP_SUPPDESK_DISPLAY, he is just able to see the messages, all of them, but is not authorized to edit any. Please help me out in this matter as i need a solution asap.
Regards,
Bilal Nazir

Hi Nazir,
Create a role and add this t-code manually.
CRM_DNO_MONITOR - Transaction Monitor
This is will definitely solve your problem.
Feel free to revert back.
Thanks and Regards,
Ragu
ERP,
Suzlon Energy Limted, Pune
Extn: 2638
+919370675797
I have no limits for others sky is only a reason

Service Desk: Support Team Assignment from User not in a Support Team

I am working on configuring the Service Desk and all has been going pretty well until now.
The issue surrounds automatic assignment of Support Teams when a ticket is submitted.
In cases where people assigned to the org structure (PPOMA_CRM) submits a ticket, the support team is assigned correctly (via Rule 13200137 in PFAC_RESPO), but when an end user submits a ticket, it doesn't assign a Support Team.
I have not assigned end users to the org structure because they are not part of the support team and have been using PPOMA_CRM to only establish the support org structure.
So the question is what am I missing to configure SolMan 7.0 so tickets from general users are assigned to the appropriate support team?
Thank you,
Brian

Brian,
It sounds like you did not maintain the identification tab with the ibase for the end users. You have to list every system a user can create tickets for on their identification tab in the General Partner role.
It should look something like:
<system ID> <identification number> <client> <userid>
DEV 1234567890 100 BSMITH
QAS 1234567890 100 BSMITH
PRD 1234567890 300 BSMITH
the very left field's value should be CRM001 for all three.
You do not have to fill out the employee role for end users for the functionality you desire.
regards,
Jason

Update User Status at Service Desk Solution Manager SP17

Hi, my name is Tomas Piqueres and I'm working with Solution Manager SP 17.
Service Desk scenario is working but I have an issue that I explain below:
I have a message that I'm not able to solve, so I send it to SAP. When SAP returns it to me, I have two status for the same message:
-User status
-Status SAP
The job "refresh message status" is working, so Status SAP is refreshed successfully. The problem is that when Status SAP changes, the User Status doesn't change automatically.
Please, could you help me?
Thanks and regards,
Tomas.

Hey Rohit,
I believe your first issue has been answered correctly. As far as your second issue is concerned.
The SAP Status field only gets filled up when the message is forwarded to SAP Support. This field is set by SAP Support itself. You dont need to manage it.
As far as Reported by is concerned, thats what you have to configure. For that to be working you first need to create business partners of your users in the satellite system. Eg. If you are raising a message from userA from your production system. You need to create a business partner of that user in Solution Manager. A unique ID is maintained related to the user and system. Also you will have to maintain his "employee data" , specifically his SAP user id.
Hope this helps.
Regards,
Bilal Nazir

User Uploading documents in Service desk

Hello,
We are in process of configuring SAP service desk at a client site. The client requirement is if the support team requires some information from the user, we send the ticket back to the user with status eg. Request for information (We have done this.)
Now, if the user wants to attach a document to the ticket, how can he do this?
We do not want user to see the ticket overview in the transaction data, he should only be able to attach the document to the ticket and send it back to the support team.
Anyone has already done this? or knows a way on how this can be achieved.
We are using SOLMAN 7.0 Ehp1
Rohit

Hello Rohit,
You can control the text in ticket by roles. Use differenet text procedure when sending msg to customer. eg. internal note for any internal communication and reply while sending to customer.
Regards,
Shyam

No users are shown for Service Desk functionality in SOLMAN 4.0

Hello!
I would like to set up the business partners for Service Desk in SAP Solution Manager.
If I choose the solution and execute "Edit --> Create Business partner" for the SAP R/3 4.7 then I get the warning no users are shown under the system.
For the SAP SRM 5.0 I get only one user (SOLMAN<SID><CLNT>), meanwhile I set the data selection to blank.
I also copied the user account of SOLMAN<SID><CLNT> to the user test with no success.
I have assigned the Object S_RFC_ and S_USER_GRP.
The users have also the profile SAP_ALL.
How can this problem be solved?
Thank you very much!
regards
Thom

Thank you very much!
The problem is solved!
Im my case was necessary to apply SAP Note 1055630.
I have assigned the role "SAP_SM_S_USER_GRP" to the user with RFC_READ connection, refreshed the last alert in DSWP and tha is.
regards!
Thom

No users are shown for Service Desk functionality in SOLMAN

Hello!
I would like to set up the business partners for Service Desk in SAP Solution Manager.
If I choose the solution and execute "Edit --> Create Business partner"
no users are shown under the system.
Especially for the SAP R/3 4.7 system it is the case.
If I change the data selection for an earlier time or leave blank, the situation does not change, meanwhile I have enough users in the satellitesystems.
<b>How can this problem be solved? </b>
Thank you very much!
regards
Thom

Hi,
Answering your question!
Ans. 1. Either user should have SAP_ALL + S_RFC.. it is very important to have S_RFC object. SAP excluded S_RFC from SAP_ALL for the security reason.
or , any user should have authority to create and delete users + S_RFC, S_RFCACL & S_T-CODE.. I just did my setup, so I remember after searching for long long....
Ans. 2. you need the following RFC's for sattelite system;
>>> SM_<SID>CLNT(CLIENT#)_READ
>>> SM_<SID>CLNT(CLIENT#)_TRUSTED
>>> SM_<SID>CLNT(CLIENT#)_TMW
you should see them in solman sm59.... make sure you use proper user with proper OBJECT. other wise, u'll see bunch of dumps every hour.. Let me know if you need any other help!!
Thanks,
I hope this will fix your problem

Grant access to help desk users to add members to distribution and security groups

Hello,
I am trying to create a set of help desk users that has full access to add or remove members from distribution and security groups as well as update users. We want it to bypass owner approval and essentially allow this group to add or remove members
in the FIM Portal and flow it down to ADS.
This obviously works fine if one is a member of the Administrators set, but we want a second tier of power users with limitied rights compared to FIM Admins. We have added the help desk team to the Security Group Users and Group Users set as
well as MPR "Security group management: Users can read selected attributes of group resources".
The help desk users can update users in the Portal with no issue. The can search groups with no issue but when they try to add members to a group they get the error "Access Denied".
Any help is greatly appreciated.
Thanks!

I'm having very similar problem - I have users with delegated right to modify group membership only. User can add someone to group and it works fine, but when the same user is trying to remove and user from a group (even if this is the same user
which was added a minute ago) he gets Access Denied:
The
request included members which the requestor is not authorized
to add and/or remove from this group."
It is caused by default MPR:
Group management workflow: Validate requestor on remove member
Question is how this activity validates this request - any insight?

Allow a user access to start and stop a particular service in Solaris 11 using RBAC controls

So, using svcbundle I created a service called "oracle" that starts and shutdown a db. I'm aware of how to grant RBAC access to be a "service operator" to be able to control start/stop ALL services. But I'd like to grant a user access to start and stop JUST this service.
in this document on page 15, it states that it's possible to do this kind of granularity but doesn't explain how to do it step by step.
how does one achieve this?
thanks.

You need to add a property group such as
<property_group name='general' type='framework'>

<propval name='action_authorization' type='astring'
value='solaris.smf.manage.oracle' />
</property_group>
Then add the solaris.smf.manage.oracle authorization to the user profile.
As an example, see Less known Solaris features: RBAC and Privileges - Part 2: Role based access control - c0t0d0s0.org

No users are shown for Service Desk in SOLMAN for satellite systems

Hello!
I would like to set up the business partners for Service Desk in SAP Solution Manager.
If I choose the solution and execute "Edit --> Create Business partner" for the SAP R/3 4.7 then I get the warning no users are shown under the system.
If I log onto the satellite system and make some changes in su01 or pfcg the situation does not change.
<b>How can this problem be solved?</b>
Thank you very much!
regards
Thom

Thank you very much!
The problem is solved!
Im my case was necessary to apply SAP Note 1055630.
I have assigned the role "SAP_SM_S_USER_GRP" to the user with RFC_READ connection, refreshed the last alert in DSWP and tha is.
regards!
Thom

Simplify the url to access Service Desk

Hello,
I want to simplify my Url to connect to Service DESK.
Currently I have a url that looks like:
http://<Server name>:<port>/sap/bc/bsp/sap/crm_ui_start/default.htm
I wish I could have a url like this:
http://<Server name>:<port>/ServiceDesk for example
how can I do?
I'm SOLMAN 7.1 SP8
thank you very much

Hi,
You can create an external alias via tcode SICF to achieve this.
Thanks.
Jim

Service Desk User access

Similar Messages

Maybe you are looking for