Table showing Authorization group and Package

Hi
Is there any table where we can see the list of programs using BOTH selection crieteria Authorization group and package together?
Your help and time will be really appreciate.
Thanks,
Niki.

Hi Niki,
Try se84->Other Objects->Authorization Objects->choose one->Process->Complete list button on aplication toolbar.
Regards
Marcin

Similar Messages

Crm tables for sales group and sales office

Hello CRM Experts,
Can any one plz. help me to find Tables for Sales Group and Sales office.
It will be really helpful if the above fields have relation to the Business Partner.
Thanks in Advance,
Regards,
Bharat.

Hi Radek,
I feel the table which you have given is the right table but in my scenario we have created sales office and sales group(in org structure) independently in CRM, so now we need to find these values from the table independently as well as with relation to BP the table which you have provided can be used for second scenario but if we want to fetch the values of all sales office and sales group which table i have to use.
One more problem for second scenario is in BP we cant able to see the sales ofice & group values which we defined in CRM, if we can save BP with sales office and group values then only we can use the table which you have given
Highly appreciable for your replies.
Thanks,
Bharat.

Update showing up in "Compliance 5 - Specific Computer" Report even after removing the update from the Software Update before creating Group and Package

So I've created a Software Update Group and I did NOT want anything in there dealing with Internet Explorer 11 since the organization is currently stuck at using 10 as the highest. So I made sure that Internet Explorer was NOT in the list and then I deployed
the package.
After running my Overall Compliance report it shows that the systems are compliant, but when I view the "Compliance 5 - Specific Computer" I see that "Internet Explorer 11 for Windows 7 for x64-based Systems" is listed in the report.
This is just a testing phase right now and I have not created a WSUS like Domain level GPO. I understand that the SCCM client creates a local policy on the clients for the location of the Software Update Point (Specify
Intranet Microsoft update service location), but the "Configure Automatic Updates" policy is set to Not Configured, which it looks like when this
is set, the "Install updates automatically (recommended)" at 3AM is the default.
Is the reason why the "Internet Explorer 11 for Windows 7 for x64-based Systems" update is showing up in the list due to the fact that the "Configure
Automatic Updates" policy is set to Not Configured
and therefore it is still reaching out to check Windows Update online?
So, if I do create a Domain level GPO to Disable the "Configure
Automatic Updates" policy, then the "Internet Explorer 11 for Windows 7 for x64-based Systems" update would not show up in the "Compliance 5 - Specific Computer" report?
By the way, I have a Software Update Maintenance Window configured for the hours of 1AM-4AM so the 3AM default time falls within this time frame, therefore, I am assuming the SCCM 2012 client will not allow the Windows Update Agent to install the "Internet
Explorer 11 for Windows 7 for x64-based Systems" update, even though it has detected it is "Required".
Thanks

But, don't you need a Deployment Package in order to deploy the Software Update Group? The Software Update Group uses the downloaded updates contained in the Deployment Package located in, wherever the Package Source is, right?
One more quick question that you will know right off hand, because, well, you just will I'm sure.
No. The software update group really has nothing to do with any update packages. The update group assigns updates to clients and in turn clients use update packages to download assign and applicable updates from. There is no connection between the two though
as the client can download an update from any available update package. Thus, it's more than possible to updates in an update package that are not in any update groups and it is also possible for an update to be in an update group without being in any update
package.
If the "Configure Automatic Updates" policy is set to "Not Configured" and since this keeps the 3AM Automatic Updates default, if I was to remove the Software Update Maintenance Window from being between 1AM-4AM, will the WUA agent install updates
at 3AM, or no because the SCCM 2012 client still manages and oversees it and basically blocks that from occurring?
No, ConfigMgr does not in any way block the WUA; however, the WUA can only autonomously install updates it downloads directly from WSUS. Thus, since there are no updates approved or downloaded in your WSUS instance, there's nothing for it to download and
install. If you happen to actually be going into WSUS and approving updates (which you should not be doing as its unsupported), then yes, it actually would install updates -- this is outside of ConfigMgr's control though. Generally, disabling the WUA via a
GPO is the recommended to prevent any accidental installations or reboots (as the WUA wil also check for initiate pending reboots outside of ConfigMgr).
Lots more info in these two blog posts:
- http://blog.configmgrftw.com/software-update-management-and-group-policy-for-configmgr-what-else/
- http://blog.configmgrftw.com/software-updates-management-and-group-policy-for-configmgr-cont/
Jason | http://blog.configmgrftw.com

Authorization Groups and table TBRG

In our system we have tables which are using custom authorization group ZEXC. I am looking at this via SE11 Table Maintenance Generator or SE54 Assign Authorization Group.
I can also see that it is assigned to roles by using SUIM -->Roles-->By Authorization values -->entry auth object (S_TABU_DIS) and click on entry values.
What I am not seeing is that the authorization group is defined in table TBRG.
So my question is.... An authorization group does not need to be defined in order to attach it to a table or assign it to a role? If the authorization group was created then deleted is it still valid to have it attached to tables and roles?

Hi Sharon,
Assign the authorization to user and make it inactive mode.Then authorization will be deactived to tat particular user's.

Table showing authorization checks for programs

Can anyone tell me which table shows the list of all programs and the authorizations they are currently checking? Thanks for your help.

link:[http://www.tamboly.com/SAPSecurityTable.html]

Report showing purchasing group and product responsibility

Hi,
Is there a report that will show all purchasing groups and which product categories that they are responsible for?
Or
Is there a report that will give me each product category and which purchasing groups that are responsible for that product category?
Sincerely
Anders

not clear as to what you want...
PP forum would be best for it... Or if you specify your req more clearly as to what input you give and what output you want, may be we can help
Ajay

I have created an interaction to show 7 groups and 7 clickable objects. Once all are click the Next Button is show. How can you make that work if you want to embeded the SWF just created but show a button in a master Captivate?

In flash you can have a shell that has the navigation and some button in the shell are not activated until all clickable objects are clicked. I am not a flash programmer but it was related to using the path of shell and the sub-project.
Can anybody help me on that.
I would like to create Captivate interaction that you can just embedded in a Shell captivate project.
Do I need to set variables at both levels (Global variable.

Hello Lieve, That is the screen shot of my custom interactivity, when all labels are clicked the Continue button will be shown because there is a conditional validating if all Labels have now a value of 1. What I am trying to achieve is to create an interaction where where the continue button (an the back button would reside in another Captivate project. This way there is no reprograming required or use of share-actions. Everytime we use a similar advanced action or a shared action we have to make sure the object name in the advanced actions or conditional actions are not the same. I trying to make it a bit dump proof for somebody that does not know any thing about advanced action and just reuse the label interaction in may projects. (The only thing they would change would be the image and the content of the label.
Do you thing I going in the right direction. (As I said before I have custom javacript in Captivate 5.5) to unlock un button that was part of the LCMS ForceTen). I belive the word .this was part of the object path in the JavaScript. Can we hide and show a Captivate button.
I have embedded other Captivate animation in a Master Captivate but the objets were not talking to each other. (You can see a sample http://www.youtube.com/watch?v=Erm4_qdybiA&feature=youtube_gdata). In that sample the continue is always there and can be click anytime. The 3 steps animation has been done as another project and embedded in my main captivate. I would like to implement a solution where a my 7 labels have to be clicked in the subproject before showing and enabling the Continue button.
I hope my explanation is clear enough.

Accounting entry not posted but MBEW table shows total stock and value

Hi
My R/3 version 4.7
I have a material which is stockable and valuated of material type ERSA(Spare parts)
This material was created in may 2007 and material ledger activated,i dont see master records in accounting view in material price analysis tab for the month may 07 till aug 07,and i see master recordsfor the month sep 07 till jan 08
For this particular material in the report MB51 for all the 3 material documents posted,there are no accounting entries in accounting document.
Also in the report output the field amount in local currency is zero for all the 3 material documents.
1.1st material document with mvt 202 for qty 1 posted in the month of may 07,no entries in acc.doc
In this case,MSEG-DMBTR(amount in local currency) was not updated
Also i dont see master records for this period in accounting view in material price analysis tab,in material master.
2.2nd material document with mvt 261 posted for qty 1 in the month of nov,no entries in acc.doc
In this case,MSEG-DMBTR(amount in local currency)was not updated.
I see master records for this period in accounting view in material price analysis tab with stock 1 qty and value zero
3.3rd material document with mvt 101 posted qty 1 in the month of dec,in this case once GR is done MSEG-DMBTR(amount in local currency) was not updated,but mbew has the entries for stock and value.
Can any one let me know why the system is not updating the mseg-dmbtr and as well affecting MB51 report
Regards
Ratha

The settings in Customizing which define that no negative stocks are allowed for the storage type, have only an effect on the transfer orders. In addition, you must also set message L9040 as an error message. For this, call up the Customizing and branch to: 'Logistics Execution -> Warehouse Management -> Interfaces -> Inventory Management -> Allow negative Stocks in Interim Storage Types'. There, execute point 'Control of System Messages in Warehouse Management' and enter message type 'E' for message number L9040

Groups and users are not showing up in Hyperion workspace

Hi There
I am having problem with the workspace when trying to give access to reports.Problem is its not showing up groups and users in workspace.But when i tried logging to shared services its showing up all the groups and users.Its trying to communicate with native directory but not with the openldap.
Please help me.
Thanks
Harsha.

Hi,
Have you provisioned the users/groups in shared services with the correct Reporting & Analysis roles?
Cheers
John
http://john-goodwin.blogspot.com/

Authorization Group in Campaign and Marketing plan

Hi,
I have a requirement as campaigns assigned with "X" authorization group, should be viewed/changed by certain set of users. How can I do this? I have created 3 authorization group and assigned to user's PFCG role and also in 3 different campaigns viz but system allowing user to make changes in all of them. Am I missing something?
Please suggest.
Regards,
Nikhil

Hi PP,
I have campaign type lets say "Brand Promotion". User should be able to change/view/delet/create it. But if the authorization group say XXXX assigned to this campaign and if user is not give authorization for this auth group in role under object CRM_CPGAGR ,then user should not be allowed to make changes in the campaign. How can I achieve both of these functionality together? which are all auth objects involved in this?
I want to restict user from changing campaign if not allowed for XXXX authorization group. Even if he is allowed for campaign type "Brand Promotion".
Regards,
Nikhil

How to find tables changed from one table authorization group to other.

Hi Experts,
We have a issue where certain tables have been moved from one Authorizaiton group to the othe table authorization group.
We want to find all tables previous authorization group.
Is there any wayt we could find the old authorization group.
(for example)
Consider a scenario where a table agr_1251 was moved to the new auth group ZAUTH.
I wanted to find which auth group was holding the table agr_1251 previously.
Can you please help me on this request?
Thanks.

One more way is to check TR (Table E070, E071). But you need to find the details for table (Like for role it is R3TR, ACGR).
Regards,
Arpan Paik

Authorization Group & TBRG

Hello. I wonder what case should I create records into TBRG for.
Generally, authorization group works when I set it to master record (e.g.vendor, customer,account code) and role (from PFCG).
But, in some case, It is required to insert authorization group and its text to TBRG.
Please tell me weather TBRG setting is essencial or not .
Edited by: Julius Bussche on Dec 28, 2009 6:13 PM
Table name corrected.

Hi Yugo,
Table TBRG - Contains all authorization groups and gives information about relation between authorization object and authorization group. Hence its very much necessary you maintain the authgroups in this table.
Also if you want it to appear as a pick list when you click F4 in the DICBERCLES field in object S_TABU_DIS then you should have those valuse maintained in table:TBRG.
There are several threads based on your query which are already answered. just search by "TBRG Auth Groups" in the same forum.
Hope it helps.Let us know if you need any more information from our side.

Check available authorization groups

Hi ,
if a custom table needs to be assigned to an authorization group in SAP.
Which is the transaction to check users assigned to an authorization group?
Currently i have an idea that Assigning and Creating authorization groups are dealt in SE54 but i cannot find a way to check
whether users are assigned to an authorization group...!!!
thanks
kritika

Checking Assignment of Authorization Groups to Tables:
You can also assign authorization groups to tables to avoid users accessing tables using general access tools (such as transaction SE16). A user requires not only authorization to execute the tool, but must also have authorization to be permitted to access tables with the relevant group assignments. For this case, we deliver tables with predefined assignments to authorization groups. The assignments are defined in table TDDAT; the checked authorization object is S_TABU_DIS.
You can assign a table to authorization group Z000. (Use transaction SM30 for table TDDAT) A user that wants to access this table must have authorization object S_TABU_DIS in his or her profile with the value Z000 in the field DICBERCLS (authorization group for ABAP Dictionary objects).
See also:
· SAP Notes 7642, 20534, 23342, 33154, and 67766
· Documentation for RSCSAUTH
Hope this helps.... if not check the following link
If you still don't find, search google 'table authorization groups in sap' - There are good info on web.
You can assign the authorization group to any custom table via SE11 - table - display - utilities - assign authorization group and rest follow the sap help (where to maintain and how to assign) .This is a developer and security persons work.

Authorization Group in se38

Hi everybody,
what is the use of Authorization group in se38 attribute? can we create and assign our own one?
The actual scenerio which i am facing here is My report should not be viewed by some grop of users. My friend is saying i can do that through the above said one. But i know i can do that using AUTHORITY-CHEK. What i am asking here is can i accomplish this task by the above said attributes.
Points will be awarded.
Thanx in advance.
Gladiator

Hi,
Authorization Checks
To ensure that a user has the appropriate authorizations when he or she performs an action, users are subject to authorization checks.
The following actions are subject to authorization checks that are performed before the start of a program or table maintenance and which the SAP applications cannot avoid:
·Starting SAP transactions (authorization object S_TCODE)
Starting reports (authorization object S_PROGRAM)
Calling RFC function modules (authorization object S_RFC)
Table maintenance with generic tools (S_TABU_DIS)
Checking at Program Level with AUTHORITY-CHECK
Applications use the ABAP statement AUTHORITY-CHECK, which is inserted in the source code of the program, to check whether users have the appropriate authorization and whether these authorizations are suitably defined; that is, whether the user administrator has assigned the values required for the fields by the programmer. In this way, you can also protect transactions that are called indirectly by other programs.
AUTHORITY-CHECK searches profiles specified in the user master record to see whether the user has authorization for the authorization object specified in the AUTHORITY-CHECK. If one of the authorizations found matches the required values, the check is successful.
The access protection system must ensure that only authorized individuals have access to the system and to particular data. For achieving precise application security concerning authorization and to protect confidential data against unauthorized access it is very important to focus on the use of authorization groups.
The authorization group allows extended authorization protection for particular objects. The authorization groups are freely definable. They usually occur in authorization objects together with an activity.
The table that contains all authorization objects is TOBJ.
The table that contains all activities is TACT.
The table that contains definition of all authorization groups is TBRG.
TBRG -- Contains all authorization groups and gives information about relation between authorization object and authorization group. The description of the authorization groups is defined in table TBRGT.
The field name for authorization group -- BRGRU -- is used to make additional restrictions on authorizations /e.g. for document maintenance/. In authorization objects and authorization checks, there are fields which are checked to verify user authorizations. Customizing objects are combined in authorization groups, and the authorization group is one of the two authorization fields, for example, in authorization object S_TABU_DIS which is in the object class BC_A (Basis - Administration). This object is for displaying or maintaining tables. It controls access using the standard table maintenance tool (transaction SM31), enhanced table maintenance (SM30) or the Data Browser (SE16), including access in Customizing.
Authorization object S_TABU_DIS has the following fields: DICBERCLS - Authorization group, maximum field length is four characters; and ACTVT - Activity (02: Add, change or delete table entries, 03: Only display table contents).
Generally, SAP standard tables are assigned to authorization groups. These assignments can be changed. You can then assign tables manually to a suitable authorization group. To do this, start Transaction SM30 for maintenance view V_DDAT, and create an entry for each of these tables. In V_DDAT is stored the assignment of Tables/Views to Authorization Groups. V_DDAT is cross-client; therefore, it can be viewed and used in all clients.
Note: If you don't make a selection, all tables maintained in Customizing transactions are assigned to authorization groups.
Reward If Helpfull,
Naresh.

Authorization group,function group

friends while creating a table maintenance view it's asking authorization group
and function group ,what are those things and what to provide there.plesae tell me
in detail.

Hi,
You can assign authorization groups to tables to avoid users accessing tables using general access tools (such as transaction SE16). A user requires not only authorization to execute the tool, but must also have authorization to be permitted to access tables with the relevant group assignments. For this case, we deliver tables with predefined assignments to authorization groups. The assignments are defined in table TDDAT; the checked authorization object is S_TABU_DIS.
You can assign a table to authorization group Z000. (Use transaction SM30 for table TDDAT) A user that wants to access this table must have authorization object S_TABU_DIS in his or her profile with the value Z000 in the field DICBERCLS (authorization group for ABAP Dictionary objects).
Function group to which the maintenance modules are to belong. One function group can contain maintenance modules for several tables or views.
Authorization group
Maintenance type (one or two-step)
Maintenance screen(s) (one or two-step maintenance type, resp.) numbers
Regards,
Ferry Lianto

Table showing Authorization group and Package

Similar Messages

Maybe you are looking for