To create Sap User ID

How to create Sap User ID immediately after creating the Employee number
what i mean is any User Exit in PBA7 so that after creating Employee that user Exit has to be triggered
Pleas help its urgent
Thanks in advence
veeru

As discussed I have to open SAP ID of someone for approving PO's in SAP.
Role of Release strategy 03 needs to be allocated to the ID as below.
Once it is place I need to remove Authorization of release strategy 03 from Manager and Sr Manager Level
po amount is upto 2 crore..

Similar Messages

Creating SAP users using Program RHPROFL0

Hi Experts,
I want to create SAP users and assign authorisation using program RHPROFL0.
Whenever I execute this program Generate new user field is greyed out. I can not select it to create users.
I have already activated switch 'ORGPD' for Structural Authorisation check.
Is there any additional setting/config I am missing.
Pls help

Hi, Syed!
As I can see from the source code in my system, this field is grayed out according to the following rule: "not a central system, no user generation".
Thus, it is likely that your system is a child CUA system, so logins are supposed to be created by CUA.

Auto Script which creates SAP Account when AD gets created.

Hello Experts - Requirement is "Create SAP User account automatically when AD account gets created", can I acheive this through ECATT scripts?
If this is possible, idea is to create an ECATT script and schedule it to run every night to find all new users on AD and create their account on SAP and lock their accounts.
Do you think this can be acheived thru ECATT's?
If not ECATT, is there any way out to acheive my objective. We are planning to reduce overhead for SAP User admins, I was thinking on following steps:
1) New User request for AD
2) After approval create AD account
3) Design a scrip, which will look for all new users on AD and will create & lock them on SAP (Nightly Job or something)
Your thoughts?
Your suggestions are much appreciated.
Thanks.

Hi Martin,
I have a customer with 16 million users in SU01. They don't use IdM and don't need it either at the moment.
I have another customer with 700 users and they are implementing IdM because it makes sense. They need it to reduce complexity.
There are no IdM license costs, unless you provision non-SAP systems.
You can skip GRC by using a well designed concept for report RSUSR008_009_NEW if it meets your requirements - particularly the number of systems. It does however have it's limits (per ABAP client) and is not user friendly at first. Also no nice pie-charts for managers, etc.
Emergency User Access comes in many shapes and sizes... SAP declined a development suggestion from me to improve the "FireFighter" tool so I developed it on my own for my customers using BAPIs and they are happy. The main requiremenent not fullfilled is that the user context changes so that you loose access to HR data, queries, variants, workflow items, purchase orders, etc. The FireFighter users also become obvious targets of attacks and the application users (dialog) need authority to change the FireFighter's passwords to use the application - which means that they can use RFC to do the same without using the FireFighter transactions / logs / etc.
Regarding other IdMs, I have experience with some, but documented here on SDN is only the password syncronization problems which Novell suffers from. These "problems" are intentional - or better said --> their own fault for using "hacks"...
If you search for "Novell" you will find them.
Cheers,
Julius

Issues while creating new user in SAP HANA

Hello Team
When i am trying to create a new user in SAP HANA studio i can see that there has been a new field added of DATA validity where there are two options a) Valid From and b)Valid Unitl . No matter whatever dates i give in this i got this error which creating the user . Status :- inactive
Reason :- outside validity period . PFA screen shot attached below . Please suggest what dates should be given in this field with some sample example .
Regards

Prag,
Try this. Execute the following in a SQL window started by a userid that has been granted the USER ADMIN system privilege:
ALTER USER BODS1 VALID FROM NOW UNTIL FOREVER;
You can use a date instead of FOREVER --- '2016-12-31 23:59'.
Good luck,
Robert

Automatic creation of BP from SAP User (created manually) in PPM 5.0

Hi Gurus;
There are some way to create BP automaticaly from SAP User?
I know that exits some Function Module BP* can do this automatic creation.
Someone did this?
Best regards.
Mariano

Hi Rajadurai,
In the BADI - BUPA_FURTHER_CHECKS implement the method - CHECK_CENTRAL.
The following code could serve your purpose:
IF IV_ACTIVITY eq '01'. "Check if it is for creation
CALL FUNCTION 'BUPR_RELATIONSHIP_CREATE'
   EXPORTING
    IV_PARTNER_1 = IV_PARTNER
    IV_PARTNER_2 = LV_createdby "BP no of the creator
    IV_RELATIONSHIP = 'BUR011' "Code for emp. resp
    IV_DATE_FROM = SY-DATLO
    IV_DATE_TO = '99991231'.
endif.

Create Substitute Users in SAP ECC 6.0

Dear Gurus,
Can someone guide on how to create a temporary user Substitute User) in SAP ECC 6.0. This is a user who will only use the SAP system for a short period while the substantive user is away on leave such that the system should lock the substitute user automatically when the leave preiod expires.
regards,
Chansa

> Very valid points on the PID's etc - hadn't thought of those!.
A lot of things are easily overlooked when designing substitution or emergency user procedures.
> Seems that, if the covering user doesn't have the authorisations in their UMR and has to fall back on the reference user's roles, it shows the reference user ID instead.
This would be very application specific and is not "mainstream". Where you can use it is with WAPIs (Workflow Application Program Interfaces) and BatchInput has been much the same for decades already.
> I'm not really sure if there''s a way around this as it may cause some questions internally but may benefit the business as the supplier/vendor etc think they are still dealing with their original contact.
On the backend you still have the created by and posted by fields for many application documents (all else being the same - which I would not rely on...).
> For small user groups, when one person is covering for another absent user in their user group then there shouldn't be any increased SoD figures (as long as reporting on org levels hasn't been activated in RAR) but we have found many instances where the covering user is either a team leader or similar which tends to increase SoD.
This is often because the user ID is changed (to a service user) when entering the "special mode". So access other user's (namely back to your own) spools, jobs, variants, layouts, work items, queries, office messages, etc etc is needed, and these are generally protected by strong administrator authority-checks. These will in combination provide many SoD conflicts or usually over-riding system admin access which makes the application restriction pretty weak in comparison.
> Pity it (SM20N) doesn't seem to work by user group but not bad at all...
It does via naming conventions, but is backward compatible for those already logging SAP* user and expecting no entries, which would then become all users starting with the name SAP... See Rz11 param rsau/user_selection (default is "off").
> Can't make the Berlin conference unfortunately but thank you for the welcome to SDN.
You can keep an eye out for "SDN Hacker Lunch" in the news streams. After the event, I normally put the infos and discussions together into a blog on SDN.
Cheers,
Julius

How to create external users in SAP EP as authenticated users

I am able to create portal users . I would like to know how to acccess automatically login as external users (stored in Cutomized table in CRM).

Rakesh,
acccess automatically login as external users (stored in Cutomized table in CRM).
Firstly, your question is a little unclear.
Where is your UME pointing to?
Go to http://<FQDN>:<Port>/irj/useradmin/index.jsp, click on configuration and check the datasource.
1. If it is for external users you could use anonymous logon
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/cd/1aad4abcb98c4597f9e395a6b62f43/frameset.htm
2. If you want to use the users exisiting in the CRM system to logon to the portal, then you might have to point your UME to it.
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/7e/a2d475e5384335a2b1b2d80e1a3a20/content.htm
3. If you intend to use the users exisitng in a custom table in the CRM system, then I guess you would have to customize the UME Data Source .
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/b7/14d43f2dd44821e10000000a1550b0/content.htm
Hope this helps.
Cheers!
Sandeep Tudumu

Creating second InfoView entry point for SAP users in XI 3.1

Hi All,
I have BOE XI 3.1 up and running with the Business Objects Integration kit SAP Solutions kit I would like to create a second infoview entry point for SAP users on the same physical box (single server) as regular InfoView.
I am trying to mock this up and have detailed the following steps below. I suspect I am missing a few steps (for example, where do I specify the entry port?). I am sure step 2 is wrong, as I the desktoplaunch no longer exists in Xi 3.1
1. Copy the InfoView.war file to a new directory ( Program Files/Business Objects/ Business Objects Enterprise 12.0/java/applications/sap). I imagine I would need to rename the war file (say SAPInfoview.war)?
2. Create a xml file with the following logic (the part in bold I consider to be wrong...):
<Context docBase="Program Files\Business Objects\Business Objects Enterprise 12.0\java\applications\sap\SAPInfoview.war" path="/
businessobjects/enterprise115/desktoplaunch"
crossContext="false" debug="0" reloadable="false"
trusted="false"/>
3. Save the xml file (what name? does it matter) in Program Files\Business Objects\Tomcat55\conf\Catalina\localhost
4. Restart Tomcat
5. Change the web.xml to make SAP security the default. But this should not be the regular infoview web.xml. I'm not sure where this would reside.
Thanks,
Steve
Edited by: Steve Bickerton on Jan 15, 2009 9:19 PM

Hi Ingo,
You've been working with Duncan and Sartaj on this. The client has two set of users: non HR which has no BW or R/3 authorization restrictions, and HR, which has authorization restrictions.
They have deployed SSO using AD for the non HR users. They also want to leverage InfoView rather than the SAP portal. For the HR users, we therefore need to capture the SAP id and password at login time to enforce security at the BW and R/3 levels. We could use the existing Infoview entry point (SSO will fail and they will be prompted for a SAP login). I do remember that we offered a second InfoView entry point for SAP users in XIR2. I thought this may be more elegant.
Thanks,
Steve

How to create SAP Business Analytics Prof. User in BO XI?

Hi experts,
we've some users of type "SAP Business Analytics Prof. User" in our contract with SAP. How to create this kind of users in CMC? I've created them in our ERP-System, but is there a way to attach them to BO user administration?
Thanks and best regards,
Max

Hi Max,
In terms of users in XI3.1 you have 2 options:
1. You can manually create Enterprise Users in the Users and Groups area of the CMC.
or;
2. You can import the BW users in from your SAP system, done via the Authentication - SAP area of the CMC
I'm assuming the SAP Business Analytics Prof users mentioned in your contract are simply users who are licensed to use the SAP Business Analytics product. If so when your uses are in the XI3.1 system, you can simply add them to a SAP Business Analytics group and give them access to the application. If user access to SAP Business Analytics exceeds the licence count then subsequent logons to SAP Business Analytics will be denied.
I hope this is a very helpful answer to you.
If not please clarify further.
Kind regards,
John

Create new USER status in SAP PM

My Client want to creat new user status as WORK COMPLETE in addition to TECO for Work Orders in SAP PM.
Pls suggest if this is possible & can be done in Standard SAP or as an enhancement.
Appreciate all feedback...
Thanks
Mudassar

Hi Mudassar,
TECO is system status and your client is asking for user status.
Its common requirement and can easily be met using OIBS.
create new status profile in OIBS with diff status and assign the same status profile to your order type.
Thanks
Rohan

How to let SAP user use SSO to access Application in DMZ?

Hi All,
Our J2EE application is running on a system in DMZ which can not be connected with LDAP. So I am wondering if it's possible to let SAP user use SSO to access our application.
After talking with my colleague I think the only way is to import SSO public key to our WebAS and create user in UME and then assign user to the corresponding public key, but anybody know where to download SSP verification file or is it allowed to download and import into another system at all?
Regards,
Bin

Hi,
Take a look at this example, it uses property nodes to select tha
active plot and then changes the color of that plot.
If you want to make the number of plots dynamic you could use a for
loop and an array of color boxes.
I hope this helps.
Regards,
Juan Carlos
N.I.
Attachments:
Changing_plot_color.vi ‏38 KB

The problem is this: In the phase "Create Java Users"

Hello,
I am installing Solution Manager 4.0 Release 2 (with Red Hat Enterprise Linux Server release 5.1 and Oracle 10 and my java version is: j2sdk1.4.2_14) The problem is this: In the phase "Create Java Users" I get the next error
WARNING 2009-02-13 14:53:22
Execution of the command "/usr/sap/PTS/DVEBMGS00/exe/jlaunch UserCheck.jlaunch com.sap.security.tools.UserCheck /tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/install/lib:/tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/install/sharedlib:/tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/install -c sysnr=00 -c ashost=sap-vpmn -c client=001 -c user=DDIC -c XXXXXX -a checkCreate -u SAPJSF -p XXXXXX -r SAP_BC_JSF_COMMUNICATION_RO -message_file UserCheck.message" finished with return code 2. Output:
java.lang.ClassNotFoundException: com.sap.security.tools.UserCheck
at com.sap.engine.offline.FileClassLoader.findClass(FileClassLoader.java:691)
at com.sap.engine.offline.FileClassLoader.loadClass(FileClassLoader.java:600)
at com.sap.engine.offline.FileClassLoader.loadClass(FileClassLoader.java:578)
at com.sap.engine.offline.OfflineToolStart.main(OfflineToolStart.java:79)
INFO 2009-02-13 14:53:22
Removing file /tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/dev_UserCheck.
INFO 2009-02-13 14:53:22
Removing file /tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/dev_UserCheck.clone.
ERROR 2009-02-13 14:53:22
CJS-30196
ERROR 2009-02-13 14:53:22
FCO-00011 The step createJSF with step key |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|1|0|NW_CI_Instance|ind|ind|ind|ind|11|0|NW_CI_Instance_Doublestack|ind|ind|ind|ind|3|0|createJSF was executed with status ERROR .
Thanks & Regards

Hi,
This problem normally arises with the wrong combination of JDK and OS and for the Linux machines, its better to use IBM Java instead of SUN java
I remember that I have solved this type of problem by using lower version of IBMJava2-AMD64-142-SDK-1.4.2-10.0.x86_64.rpm which is SR10. You can download this version from
http://www.ibm.com/developerworks/java/jdk/linux/download.html
go to download _12 and then just change the sr12 to sr10 in the header url....
FCO-00011 The step createJSF with step key |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|1|0|NW_CI_Instance|ind|ind|ind|ind|11|0|NW_CI_Instance_Doublestack|ind|ind|ind|ind|3|0|createJSF was executed with status ERROR .
with the higher versions of java for 64bit systems create serious stack over flow problems.....
what I suggest you is to start reinstallating SolMan after installing IBM java sr10 version...
Regards,
Naveen.

Backup message error -SAP system is running or SAP user is connected to dat

Hello ..
when the backup started i got this message error ..before starting the backup, the shell shutdown the sap system but below message was showed
BR0262I Enter database user name[/password]:
BR0055I Start of database backup: bedvugxg.aff 2010-08-08 05.31.48
BR0484I BRBACKUP log file: /oracle/AAA/sapbackup/bedvugxg.aff
BR0477I Oracle pfile /oracle/AAA/102_64/dbs/initAAA.ora created from spfile /oracle/AAA/102_64/dbs/spfileAAA.ora
BR0068E SAP system is running or SAP user is connected to database AAA - database cannot be shut down
BR1025I Please shut down SAP system first or use the 'offline_force' option
BR0056I End of database backup: bedvugxg.aff 2010-08-08 05.31.48
BR0280I BRBACKUP time stamp: 2010-08-08 05.31.49
BR0054I BRBACKUP terminated with errors
[Major] From: "OMNISAP" Time: 08/08/10 05:31:49
BRBACKUP /usr/sap/AAA/SYS/exe/run/brbackup -t offline -d util_file -c -m all -u hpbkup/******* returned 3
i am new on this, what should i review into the db?
Regards and thanks in advance
Dma.

Hello Daniela,
you try to perform an offline backup (which is a very uncommon way nowadays) and your SAP system is not down.
This is also described in the official documentation:
http://help.sap.com/saphelp_sm32/helpdata/en/0d/d309664a0c11d182b80000e829fbfe/content.htm
offline: Database backup in offline mode, in other words, the database is shut down during backup. When you select this parameter, BRBACKUP checks that no SAP system users are connected to the database. If an SAP System is active, the database is not shut down and BRBACKUP terminates the process with an error message (message number BR0068E).
Regards
Stefan

How to create a user in J2ee UME, if LDAP configured?

Hi SAP Gurus,
I have a question for my J2EE engine. We configured LDAP for user storage, so that our User can use there normal LDAP user ID. Now I want to create an administrative user like J2EE_ADMIN or Administrator, these are standard users and present in the UME of the J2EE engine since the installation of my portal.
But when I go to the user admin and want to create this new admin user, I got an error message, that Im not able to create it.
I also try to create the user via the Visual Admin and the J2EE Useradmin.
So my question is, how can create this new user in the UME and NOT in the LDAP???
Thanks.

Hi Marcel Haberland ,
If your idea is to have single Sign on , I would say the process is to create the user in LDAP itself that will be the single point of entry , Since the UME is configured and connected to LDAP normally with read permission your best bet will be to create the user in LDAP.
SSO with is configured to all your backend syst ( trusts needs to be configured between Java/Portal to all your backend systems by Basis team), also the ids needs to exist in all the backends.
Now to come back to your question:
If you can login to UME of portal/Java , and create the user do not expect it to appear on your LDAP
mainly because LDAP will never be configured in a Enterprise project as bidirectional ( ie Read/Write ), it will be readonly.
Also if the Basis/Portal team allow you the option to create the user in UME , they will have to restart the machine everytime you need to point to a different data source , but I dont know if this is the case in EHP4 versions, because SAP claims with EHP4 downtimes are almost nullified.
Edited by: Franklin Jayasim on Jun 29, 2010 6:59 PM
Edited by: Franklin Jayasim on Jun 29, 2010 7:02 PM

How to create a user in UME Database using web dynpro java custom application

Hi,
Can you please suggest me how to create a user in UME Database using web dynpro java custom application.
My Requirement is user can register his/her user id in SAP Portal 7.3 UME database.
Please suggest me.
Thanks and Regards,
Amit

Hi Amit,
Generated Documentation (Untitled)
This is what you're looking for, there's no real cook-book -- though Amey mentioned there might be some material on SDN, perhaps some tutorials.
You should be looking into com.sap.security.api.IUserFactory, methods newUser(String) which gives you and IUserMaint and commitUser(IUserMaint, IUserAccount) -- IUserAccount can be obtained using com.sap.security.api.IUserAccountFactory, method newUserAccount(String)
Hope it helps,
D.

To create Sap User ID

Similar Messages

Maybe you are looking for