Sourcing Security profiles through table/query/report etc..

In order to quickly validate the security profiles, that we create or upload, Is there a way to get the export of profile(s)along with all the associated access rights.
Example: Under Documents Management: RFx Type has Create, View, Edit, Setup, Import types of permissions available. similarly across all.
If accessing through database is the only way, please help me with navigation to database and respective table, where I can find this info.

There is a OOB report called Security Profile Usage summary which can be accessed form Setup  System Administration, but it doesnu2019t look like the information you are looking for is on that report. Your best bet would be to develop a custom report to get this information.
Regards,
Vikram

Similar Messages

Reading Archived Data Through SAP Query Report

Dear SAP Gurus,
My client archived their SAP data in a particular year range and all the Z reports have to modified to read these archive data. Normal ABAP reports can be modified to read the archive data without no problem.
But there are two Z SAP query reports which should be modified the same way so it will be able to read archive data.
What is the best method for this? Does SAP Query tool provide facility to read archive data? or do I have to append the code?
Thank you in advance for your help
Regards,
Isuru Fernando

>
Isuru U Fernando wrote:
> hi Manthan,
>
> Yes I used these FMs and read the data without any problem for normal ABAP reports.
>
> But SAP query report is the problem. Is it advisobale to modify the SAP query generated report source code? since it is a system generated report.
>
> Regards,
> Isuru
No, do not adapt the SAP generated report source. The reason is: every time someone re-generates the query from tx. SQ01 your changes will be lost.
You could add the functionality Manathan gave you to add to the infoset of said query - but to be honest: in my opinion that is shooting nuclear rockets at flies. Also you run the risk that every change of the infoset (add a join/delete a join) requires adjustment of said coding you applied ... and where will you be then? Fancy repairing the same query over and over again? Try talk sense to your client - go for a Z-report here ...

Importing custom created security profiles from a .csv or .xls document

Hi Experts,
We have a prerequisite where we need to create custome security profiles as per the requirement.
These security profiles I have created in an excel sheet and wish to import it in the server.
The reason behind creating the security profiles through excel sheet is that in the future we will be working on a new server. So instead of doing any rework we can directly import from this excel sheet.
For creating a security profiles through an excel sheet, I have mentioned the following things in the excel sheet.
1. In a "eso_security_profiles" i have mentioned the profile name,description,internal ID, etc..
DISPLAY_NAME       DOCUMENT_DESCRIPTION    INTERNAL_NAME     CATEGORY COLLAB_PROFILE    INTERNAL_TYPE     RESTRICTED
DISPLAY_NAME:Category Manager
DOCUMENT_DESCRIPTION   : This profile is for the user who has full rights only at project business document but cannot approve and have no access rights to the master data
INTERNAL_NAME : fci.profile.doc.category_manager
CATEGORY :   BUYSIDE
COLLAB_PROFILE    :   TRUE
INTERNAL_TYPE     :
RESTRICTED   :
2. And in the "eso_security_rights" I have mentioned the access rights as per requirement.
RESOURCE        SECURITY_PROFILE                               ALLOW_PERMISSIONS      DENY_PERMISSIONS
rfx.RFXDoc        fci.profile.doc.wft_category_manager     ODP_READ
Please give some inputs on this. Am not sure if what I have done is the right way.
Thanks.
Vaishali.

Hi Vaishali,
I understand that you need these security profiles in another server going forward. I would suggest another way around rather.
Please create the Security profiles in SAP Sourcing itself, then export the OMA file. When you move into another server please import this OMA file. This will serve the purpose of having the new security profiles in the new server.
If you are modifing something in the workbook, then you should carefully review field details. As I am not sure which version of SAP Sourcing and details of workbook, so I would suggest the above way to try out.
Hope this helps
Thanks
Jagamohan

Export - custom queries and reports, and security profiles

We would like to keep a copy of our customizations to the application.
There are ways to import queries, reports and profiles into the app. Is there any way to export the following to something like a CSV file for the following:
- custom queries (all tabs)
- custom reports (all tabs)
- security profiles (custom and out of box u2013 all access rights)
Thanks,
Jerry

Jerry,
There are no standard queries that extract security profiles, Query Groups, Reports or Query Defintiions from the system.
However you can build custom queries that support this functionality. During an implementation project I created some custom queries which allowed you to extract these objects for documenting purposes We likely could supply these to you through SAP Consulting. Please reach out to your SAP rep and have them Contact Me. I have created some instruction that explain how to create these.
Regards,
James

Crystal Reports - ECC Tables - Row level security on Multiple tables

Hi Experts,
We are implementing Crystal Reports directly reporting on ECC Tables. Lot of information on row-level security has been provided by experts Ingo Hilgefort, Don Williamsand Mike Seblani, but not related to multiple tables or Wild cards
Requirement:
Crystal Users should have access to ALL the tables in ECC, but restricted by Company code, plant, Sales Organization, Purchasing Organization fields to what ever table it applies to. Example: MARC table should be restricted by Plant, BSEG table should be restricted by Plant and company code, GLT0 table should be restricted by Company code..etc
Users should ONLY see their Organization related data.
Solution Developed:
1. We created custom authorization object with BUKRS and WERKS
2. In /CRYSTAL/RLS we used Wild Cards *, + rather than specific table and referenced the custom authorization object with =BUKRS and =WERKS in the Field Value
3. Enabled global lock
4. Custom Authorization object was added to user-profiles with corresponding restrictions
*Observation:*
1. This security works when a crystal report was developed on a ECC table which has both BUKRS and WERKS
2. This setup DOES NOT work when a crystal report developed on a table with either one of BUKRS or WERKS
Example: Does not work on MARC table - error message "Database connection error: /CRYSTAL/OSQL_EXECUTE_QUERY Message: field T0~BUKRS" unknown"
Does not work on GLT0 table - error message "Database connection error: /CRYSTAL/OSQL_EXECUTE_QUERY Message: field T0~WERKS unknown"
Trouble Shooting:
In the "where clause" of the internal ABAP code generated for MARC, system is checking for BUKRS - which should not be the expected result
ANYTHING WRONG IN THE SECURITY SETUP ? PLEASE ADVICE
Note: Document "BusinessObjects XI Release 2, Integration Kit for SAP, Installation Guide" does not talk much about this multiple table restriction. Any other document to be referred to ?

I'm not sure how that would help; by using the Faculty_ID Session Variable I can identify the CRN and Term of all courses a faculty member is teaching. But I don't think that has to do with the problem I am having?

Help needed in Exporting tables data through SQL query

Hi All,
I need to write a shell script(ksh) to take some of the tables data backup.
The tables list is not static, and those are selecting through dynamic sql
query.
Can any body tell help me how to write the export command to export tables
which are selected dynamically through SQL query.
I tried like this
exp ------ tables = query \" select empno from emp where ename\= \'SSS\' \"
but its throws the following error
EXP-00035: QUERY parameter valid only for table mode exports
Thanks in advance,

Hi,
You can dynamically generate parameter file for export utility using shell script. This export parameter file can contain any table list you want every time. Then simply run the command
$ exp parfile=myfile.txt

SQL Query in Custom Security when creating Security Profile

Hello all,
I've created a security profile with Custom security and provided a simple query in Custom Security tab-
PERSON.PERSON_ID = FND_GLOBAL.EMPLOYEE_ID
Custom security option is "Restrict the people visible to each user using this profile"
I am not able to see the record as expected.
If I Hardcode the person ID "PERSON.PERSON_ID = 13449" with "Restrict the people visible to each user using this profile", I am able to see the record.
If I Hardcode the person ID "PERSON.PERSON_ID = 13449" with "Restrict the people visible to this profile", I am able to see the record after running PERSLM and same is in PER_PERSON_LISTS.
Am I correct in checking with FND_GLOBAL.EMPLOYEE_ID?
(This was mentioned in system administrator guide :
"+Oracle HRMS assesses the custom security when the user signs on. In addition, the custom security code can include references to user specific variables, for example, fnd_profile.value() and fnd_global.employee_id.+"
docs.oracle.com/cd/E18727_01/doc.121/e13509/T2096T2098.htm).
I have tried with FND_GLOBAL.USER_ID / FND_PROFILE.VALUE('USER_ID') / :ASG_ID (seeded query has a join with this bind variable) - not happening.
I've given options as below :
Employees = None
Contingent Worker = Restricted
Applicant = None
Contacts = All
Candidates = All
All other options - Defaulted
Thanks,
Sumanth

Resolved this - One cannot see self's employee record in the form for which this is setup.
Hence the below query though correct in syntax did not show any data.
PERSON.PERSON_ID = FND_GLOBAL.EMPLOYEE_ID
My original requirement was that all employees belonging to one's Organization should be displayed, and this is working fine with an updated query for the same.
Thanks,
Sumanth

List of Employees through custom security profile - SSHR

Hi,
A coordinator sitting in a region required access to all those employees who are coming in his region. This thing has been done and tested in PUI using custom security profile but can we give the same access to coordinator at Self service level, so that it can view employee detail and take necessary actions against employee.
Thanks
Ayaz

You can indeed use the same Security Profile to control access through Self Service. In Self Service, you will need to use the Simple or Advanced Search to find these people because the default hierarchy that is displayed won't render.
Often it is useful to add a personalization message to the Search region so that the users know to find people this way, eg:
"To find employees in your region, please enter their Last Name in the Search box and hit Enter."

How to create report from SDK without clicking through ther Query manager ?

Hello,
I need to create an on-screen report with selection criteria. (Something similar to Reports/Inventory/Items list)
I could create a query and save it but
- how to start the query by SDK then - without clicking through the Query manager ?
- how to pass the selection criteria to the query ?
Please suggest me ?
Regards,

As the helpcenter(2005 helpcenter) has missed this bit of documentation (on UserQueries) could someone please provide an example of using this object
thanks
Message was edited by: George Savery
hmm I thought it had timed out .... Woops

Good source for tables and reports

Hello!
Does any one know a good source for tables and reports in SRM (EBP) I really
looking to report on the Org Structure.
But any information you can give me would be really helpful.
Regards
sas

Hi,
See these threads :
SRM Tables
SRM Tables
Re: Availability of Standard Reports in SRM
SRM standard reports?
SRM Reports
For developing custom reports,you can use the stanadard tables and Function modules.
BR,
Disha.

Uploading Security profiles & Security rights using sourcing Workbook

I am trying to use workbook to upload Security profiles & Security rights, and finding it difficult to get the "Resource" field mapping attributes in "eso_security_profiles" tab of the workbook. Is there a reference sheet for this, or a place from where I can map the display names with resource.
Example: If I want update the security rights for Currency attribute with in Master Data under Security Rights tab, we need to use "masterdata.Currency" in "Resource" field of "eso_security_profiles" tab in the workbook. similarly from where can we get the entire list of attributes and thier Resource.

Hi,
When I take the download from localized resources (*.class_name), inorder to map the display security attributes to "Resource" in workbook, I am still unable to find the Resource for few attributes like..below..
Queued Messages
User Impersonation For Buyer
User Impersonation For Seller
Cache Configuration
Cluster Configuration
Daemon Alerts.....
and there are many more for which I dont have a match. Please suggest if there are any tips or considerations that we can help while trying to achieve this.
Thanks in advance.
Vinod.

Query to find all users under specific MO: Security Profile (per_security_profiles)

Hi Folks,
Could you please help me out to get list of users under the selected MO: Secuirty Profile.
Requirement:
I have a parameter in which i can select MO: Security profiles those are under responsibility level. So based upon this parameter i need to populate all organizations under selected MO Security Profile and in third parameter i need to fetch all users which are under selected MO: Security Profile.
So please help me to sort out this problem.

Pl do not post duplicates - How to Fetch organizations under specific MO: Security Profile
Pl continue the discussion in your original thread

Query Report to Include manually Reconciled Documents

Hi All,
I have a query report and its showing the right data.
What changes can be made so that it displays the invoices which were reconciled and the payments/credit notes with which these were reconciled?
Declare @datefrom as datetime DECLARE @dateto as datetime
Select @datefrom = T0.DocDate FROM OINV T0 Where T0.DocDate = '[%0]' Select @datefrom = '[%0]'
Select @dateto = T0.DocDate FROM OINV T0 Where T0.DocDate = '[%1]' Select @dateto = '[%1]'
SELECT distinct T0.CardName,T4.U_Location,T4.U_Distance,T5.CreditLine as 'Credit Limit',
(T5.[CreditLine]-(T5.[Balance]+
isnull((Select TOP 1 Doctotal from ORIn where cardcode = T5.Cardcode and NumAtCard like 'Security%'),0)+
isnull((Select TOP 1 Doctotal from ORCT inner join NNM1 on ORCT.Series = NNM1.Series
where cardcode = T5.Cardcode and NNM1.SeriesName like 'Deposit%'),0))
) as 'Available Credit Limit',
(T5.[Balance]+ isnull((Select TOP 1 Doctotal from ORCT inner join NNM1 on ORCT.Series = NNM1.Series
where cardcode = T5.Cardcode and NNM1.SeriesName like 'Deposit%'),0)+
isnull((Select TOP 1 Doctotal from ORIn where cardcode = T5.Cardcode and NumAtCard like 'Security%'),0))as 'Account Balance',
T1.DocNum as 'Incoming Payment Number ', T1.DocDate as 'Payment date', T1.DocDueDate as 'Payment Due Date',t6.SeriesName,
T6.Beginstr as 'Prefix',
RIGHT(T0.DocNum, 6) as 'AR Invoice Number',T0.NumAtCard as 'Reference', T0.DocDate as 'Posting Date',
T0.DocTotal as 'AR Invoice Total', DATEDIFF(dd,T0.DocDate,T1.DocDate) as 'Payment Days from the date of Invoice',
T1.TrsfrSum as 'Payment By Transfer',
T1.CashSum as 'Payment by Cash',
T1.CheckSum as 'Payment by Check',
T2.CheckNum as 'Cheque Number'
FROM OINV T0
LEFT JOIN ORCT T1 ON T0.ReceiptNum = T1.DocEntry
LEFT JOIN RCT1 T2 ON T1.DocNum = T2.DocNum
Left Join OSLP T3 ON T3.SlpCode= T0.SlpCode
LEFT JOIN CRD1 T4 on T0.CardCode= T4.CardCode
LEFT JOIN OCRD T5 on T4.CardCode = T5.CardCode
LEFT JOIN NNM1 T6 on T0.Series = T6.Series
where T1.Docnum is not null and T4.U_Location is not null
and (T0.Doctotal- T0.PaidToDate) = '0.00'
Thanks,
Joseph

Hi Tom
You can just write the processes yourself. Although trickier this can give you a lot more control over row processing.
APEX_APPLICATION.G_F01, F02 etc are global variables in the apex_application package that are defined as arrays.
These are regularly used in tabular forms to reference values within them. The normal ordering would be column 1 = G_F01, column 2 = G_F02 etc etc. Although you can change these and even assign more than one column to an array.
The example
FOR i IN 1..APEX_APPLICATION.G_F01.COUNT LOOP
INSERT INTO my_table VALUES(:P1_EMPID , APEX_APPLICATION.G_F01(i));
END LOOP;Is saying - for the number of values in the array G_F01 (probably column 1) loop insert into the table the value of the associated value in the array. So first time through i=1 - so the first value in the array (probably row 1 in column 1), next time i=2 so the second value in the array is used (probably row 2 in column 1) and so on...
When you've created a manual tabular form (what I would call what you've done) you have created the items using the APEX_ITEM package in your query. The first parameter for this is p_idx which defines which global array to hold it in.
Cheers
Ben

Automating ADHOC query reports to generate Emails

Hi Experts
Hope you guys are doing fine.
I have a requirement where we need to automate the ADHOC query reports to trigger emails with the Excel attachment of the report to a set of users.
To explain in detail,we have some adhoc queries which are run manually on monthly basis(by our functional guys).Once the output report is generated,they used to download them into Excel document and send that to a set of users as an email attachment.
Now we are planning to automate the entire process,so that these query reports once set to run on monthly basis should trigger emails to set of users with the excel attachment.
Now,i am looking for solution on how to proceed on this.Since the program behind the query(which starts with AQ*) is not be a modifiable program,i can write any custom code here.Alternately,i planned to set a background job which runs the query and then use a custom pgm which reads the spool no for the pgm and then to read the data from the spool into an internal table and then use a FM to send the internal table data as an email attachment.But wasn't sure of what FM's to use to read the spool no. and data from the spool.
Is there any alternate way to work on this or any suggestions on my assumed process would be really appreciated.
Thanks

Ok, here's what you do:
- Go to T/C: SQ01 and find your query
- From the menu at the top select Query>More functions>Display Report Name (copy the report name)
- Go to Transaction SO23 and create a new shared distribution list - give it a name and title, click the dropdown on folder and click the create folder button, give the folder a name and save/green tick.
- Click on the Dist. list content tab and enter all the external email addresses that the report should go to ( the recipient type should be internet address or via internet or something like that)
- Go to Transaction SM36 and click on the Job wizard button, go through the wizard entering the program name we copied earlier. In the print parameters section make sure it is set to print immediately, then on the spool list recipients button select the dropdown box, select distributions lists and find the one you created earlier. Define the variants, periods, time etc etc
- When the job runs it will process the output via SAPConnect (transaction SCOT) you will be able to see the status of the emails by going to transaction SCOT and selecting the menu option Utilities>Overview send requests.
Job Done, Chillax
PS: remember the output type of the query in SQ01 needs to be set to excel or whatever you require otherwise a PDF/html attachment will be created in the email.
PPS: If SAPConnect is not set up in your system speak to your basis guy to set it up - If you don't have any basis resource, it is really easy to set up, plenty of guides around.

Report Not apperaing in User's Query Report Viewer Menu

Hello There!
Continuing with below thread
Report Category not Appearing in Report Definition
When i search for a report i created, i'm(as a normal user) not able to find any report after searching.(assigned to me or to my role.)
The view PSXPRPTSRCH_VW has two tables PSXPRPTDEFN and PSXPDATASRC .Both have oprid column which is blank and the above view's first where clause is asking for oprid.
I don't understand how then all the doc./papers on internet i read, to create Report using XML Publisher says/shows the report appears in user menu(query report viewer). May be they still using PS login to show the output?
Anybody have any idea where am going wrong?
The category,datasource,Definition,query tree all set properly. Do user need any special role/permission assigned?
BTW user can see the query report viewer menu.
Regards!
Edited by: user10569054 on Sep 27, 2012 2:32 PM
Peoplesoft Version 9.00
Database Oracle 10.2

Thanks for the Reply.
from the doc. you gave, this is what i found.
Home > PeopleBooks > PeopleTools 8.52: BI Publisher for PeopleSoft > Running, Locating, and Viewing BI Publisher Reports
The Query Report Viewer allows selection and online viewing of those reports that have a data source type of PeopleSoft Query. Existing Query security applies so that each user has access to run only the reports to which he or she has qualified Query access to the data source.
The PS query and the data source is created by user PS then how can a normal user will have access to that?
I'm bit confused here.
Regards!

Sourcing Security profiles through table/query/report etc..

Similar Messages

Maybe you are looking for