Trace role changes
How can I track changes made to my role using tables. I added a transaction to my role and I can see that in the SUIM under change documents for my role that the transaction was added but the transactions is no longer in the role menu or in S_TCODE. I needed to figure out what happened
Any Ideas
There are two options that come to my mind:
1 the role was downloaded before the tcode was added and uploaded again afterwards.
2 Same thing, but with transports.
These may not show up in suim as changes for the role. Have you looked at changes to the profile as well?
Similar Messages
-
Which all TABLES are afftected when we CANCEL a ROLE change in PCFG
Hi,
When we try to change any ROLE using PCFG transaction,which all Function Modules are called and what all tables are affected.
Also please let me know , while cancelling the changes made on that ROLE which all Function Modules and Tables are affectedHello Avinash,
The Tables that get affected by changes can be traced in ST05.
Go to ST05. Activate Trace.
Perfrom the changes in PFCG, Save the changes.
Now got to ST05, Deactivate the trace and Display the Trace.
You can check all the efected tables and so on in the log.
Genearlly all Role changes are saved in AGR* tables...
Hopefully this info shd help.
br,
Sri
Award points for helpful answers -
Portal favorites doesn't work after role change
Dear all,
we encounter the following problem in our EP:
We have an WAD-Template stored in a folder. If a user is assigned to a specific portal role, he can see and execute the report. While executing he is allowed to store the report in his personal portal favorites.
Last week we joined three old portal roles (names: OLD_A, OLD_B and OLD_C) to a new one NEW_A containing all reports of OLD_A, OLD_B and OLD_C. After that we assigned the new role NEW_A to all users formerly assigned to at least one of OLD_A, OLD_B or OLD_C. In addition we unassigned the users from the old roles.
As a consequence the users now see all the reports of the old roles in their portal menu (as they are stored now in NEW_A) BUT the old favorites saved before the role change could not be opened anymore. The following error message appears:
"Page not found or not available"
We found out so far, that the favorite stores the combination of role and iview (in this case OLD_A and the iview-name). If the role changes the pcd-link is different.
Does anyone know this behaviour? How can we change the access pcd-link in the content management manually or by script/program?
Any help is appreciated.
Best regards,
Volker SchmittYes I saw this thread too. However, I think viveknidhi solution is pointless for us since we can not perform this operation manualy for each favorite...
For the moment, based on what I red on forums and sap documentations, there is no workaround. Portal favorites are hardcoded pcd urls to the navigation node. If we modify our roles we will loose related favorites since the navigation node will change.
I hope you will find a solution to move forward.
Regards,
Alexis M. -
SUIM - Track Role Changes Please Help
Dear Friends,
I want to know is there anyway or any report that track the changes done to a role for last 3 months - addition/deletion of tcode and Auth. Object Values Changes and when it was changed. I used SUIM (All Change Documents (Technical View). All I want to know is Any report or Program that tells me Role changes happened in last 2 months (for examples 3 tcodes were added and activity values have changed in some objects).
It gave the info like Role Name, Date, Time, Changes by, TCode, Change ID, Table, Short Text, Table Key. I Think Table key is having some information. I am not able to understand table key 500xxxx.L325P TYREEWL 2006011899991231
This information is not useful as it does not give any track changes. SUIM is good to find out what changes were made to a User, BUT when it comes to Track Role Changes, it does NOT give much information. We can also do some table search on AGR and UST* tables to get this information, but it is tedious to go to so Many tables and find out.
Your help is greatly appreciated. If this is not a right forum, it would of great help if you can forward this to the right forum.
Thanks
Kumar
Below is what i found out.
xxxx.L325P 03/06/2006 18:00:18 FF_SECURITY SU01 D AGR_USERS Assignment of roles to users 500xxxx.L325P TYREEWL 2006011899991231
xxxx.L325P 03/06/2006 18:00:18 FF_SECURITY SU01 D AGR_USERS Assignment of roles to users 500xxxx.L325P TYREEWL 2006012499991231
xxxx.L325P 03/06/2006 18:00:18 FF_SECURITY SU01 I AGR_USERS Assignment of roles to users 500xxxx.L325P TYREEWL 2006030699991231
xxxx.L325P 03/06/2006 18:00:19 FF_SECURITY SU01 D AGR_USERS Assignment of roles to users 500xxxx.L325P MASTERD 2006011899991231
xxxx.L325P 03/06/2006 18:00:19 FF_SECURITY SU01 D AGR_USERS Assignment of roles to users 500xxxx.L325P MASTERD 2006012499991231
xxxx.L325P 03/06/2006 18:00:19 FF_SECURITY SU01 I AGR_USERS Assignment of roles to users 500xxxx.L325P MASTERD 2006030699991231No it does not give any valuable information. for example, if the role was changed 17 times in last 2 months - added 4 new tcodes and deleted 7 tcodes and changes some activity values. when i did search on SUIM change documents, it gives me Table Key and some fields. I appreciate if you take a look at this issue. it gives me when it was changed, by whom and and also thru which tcode it was changed. But Never gave what Actually happened to the role in the last 1 month.
SUIM is good for user maintenance and tells us the basic role information. any ideas are suggested.
thanks
kumar -
Report to view composite and master role changes
Dear All,
i would like to know list of master role and composite role changes, i searched in SUIM for change document for roles,which gives all role changes, which is not solving the pupose.my requirement is past perticular period any composite role got changed and new tcode got added to master roleramesh,
try SUIM-change document -> For roles / or reports
Role: RSSCD100_PFCG
for User (RSUSR100)
A profile ( RSUSR101)
An authorization (RSUSR102)
A role assignment (RSSCD100_PFCG)
just wanted to let you know that SAP meanwhile developed a new report RSUSR100N. I think it's only available with a certain SP level (at least in ECC 5.0).
Thanks
sri -
We have several groups making changes to roles in our portal. Is there a way to track roles changes and where can I find this information.
We have several plants and portal admins at each site making changes to "shared roles". I need to track these changes.
Thanks
MikieHow do you transport the roles and groups?
You should have a development and a test portal.
You should also look into the Netweaver Developer Infrastructure.
This should give you some help on tracking the changes!
You should also set up your authorizations for your admins so that they cannot change the "shared roles".
Check the portal security guide at:
http://help.sap.com/saphelp_nw04/helpdata/en/5c/429f00a14aa54195b1c63ae1512d10/frameset.htm
Regards
Fredrik -
Advice needed: what does your company log for SAP security role changes?
My client has a situation where for many years, they never logged changes to SAP security roles. By that I mean, they never logged even basic details, like who requested a change, tested it, approved it, and what changed!! Sadly their ticketing system is terrible, completely free-form text and not even searchable.
Does anyone here use Word docs, Excel sheets, or some other way to capture security role change details? What details do you capture? What about Projects, that involve dozens of changes and testing over several months?
I plan to recommend, at least, they need to use a unique# (a ticket#, or whatever) for every change and update the same in PFCG role desc tab, plus in CTS description of transports... but what about other details, since they have a bad ticketing system? I spoke with internal audit and change Mgmnt "manager" about it, and they are clueless and will not make recommendations. It's really weird but they will get into big trouble eventually without any logs for security changes!Does anyone here use Word docs, Excel sheets, or some other way to capture security role change details? What details do you capture? What about Projects, that involve dozens of changes and testing over several months?
I have questions:
a) Do you want to make things straight
b) Do you want to implement a versioning mechanism
c) You cannot implement anything technical, but you`re asking about best "paper" practise?
The mentioned scenarios can be well maintained if you use SAP GRC Solutions 10 (Business Role Management)
Task Based, Approvals, Risk Analysis, SOD and role generation and maintenance in a structured way (Business Role Management). Workflow based, staged process with approvals.
PFCG transaction usage will be curtailed to minimum if implemented fully.
Do we really want to do things "outside" PFCG?
@all:
a) do you guys use custom approval workflows for roles?
b) how tight your processes are? how much paperwork, workflow, tickets, requests and incidents you have to go through to change a role?
c) who is a friend of GRC here, raise your hand
Cheers Otto
p.s.: very interesting discussion, I would like to learn something here about how it works out there in the wild -
Dear Experts,
I have an RFC function which contains a submit report to execute in background. Normally our system has trace level = '0' in SM50, but everytime when this job runs, the trace level changes to '2', which saved too many logs in our system.
can anybody tell me how to prevent this situation? Can I force trace level = '0'?
Thanks!
Joanne WuHi Joanne,
We just came across this trace level change. Did you find a reason and/or solution as to why this happened. We are researching as I write this and just came across Note 987134 which may offer insite. However, this note talks of Kernel 4.6D, 6.0 and 7.0. We are running on 4.6D_EXT for another month and this note says nothing about this kernel. Hope you have an anwser. Thanks.
Paul G -
How to trace the changes done through transaction R3AC3
Hello SAPheads
Is there any table are any transaction through which i can trace the changes done through r3ac1, r3ac3 , r3ac5 ?
Thank you
Somasundaram Ganeshdid u find anything on this. If yes, plz share d same.
-
Hello friends,
I am developing a report in Sending system, based on role change information for user id. We configued CUA correctly and everything is working fine.
Is there any table or funciton module or report which shows Role modification history with timestamp for a user in Sending system.
Lets say if i change a user's role in SU01 roles tab in sending sytem, i can only find role modified date but i am unable to find time when was modified.
thanks.
MacsHi,
Tables USL04, USLA04, USZBVSYS gives changed date information only. But i am looking at time information.
Table USZBVSYS contains all information for whatever you change in SU01. So i dont know whether role has been changed or user data has been changed.
Table AGR_USERS gives date and time but it is only for local systems. In CUA sender system, user can have roles for different systems. So, i need to get information from the sender system about what roles has been changed with Date Time.
It would be too good for me to share any ideas if you have.
thanks,
Macs -
Advise on Role Change of Functional Consultant to IS U Consultant
Hi,
I'm currently working as SD/MM Consultant with cross functional modules as team lead. I want an advise from the experts that can i change my current role to IS U consultant. What will be the pros and conss. Suggest me for which part of IS U will be suitable for me.
Request you post your suggestions.
Regards
SashikanthHi Siva,
Thanks for your reply. Can you give me some more inputs like a)current opportunities across the globe, b)certification details, c) future assumptions about IS U market, d) any trainings institutes etc.
I'm currently working for CMMI Level5 company in India.
I hope this will give more insight about the decision for role change.
Thanks
Sashikanth -
To trace the changes made in std. qty in COR1/CO01
dear Friends ,
If i m making any changes (manually) in Std Requirement qty or changing Material code (after clicking on Material/component details) while creating the process (COR1) or production order (CO01),
what is the method to detect or trace the changes made in those line items after saving my order.
thnx-regards
Amitabh .Hy Amitabh,
To check such kind of changes you have to follow below path,
Go to Status tab (Blue Ikon) --- >Extra -> Change Documents-> All- --- > Choose All Changes -
>
System status Action Date Time User Transaction
BCRQ Order to be handled in batches Active 07.08.2008 12:36:19 70278 Create Process Order
CRTD Created Active 07.08.2008 12:36:19 70278 Create Process Order
MANC Mat.availability not checked Inactive 07.08.2008 12:36:19 70278 Create Process Order
Active 07.08.2008 12:36:19 70278 Create Process Order
MSPT Material shortage Active 07.08.2008 12:36:19 70278 Create Process Order
NTUP Dates are not updated Inactive 07.08.2008 12:36:19 70278 Create Process Order
Active 07.08.2008 12:36:19 70278 Create Process Order
PRC Pre-costed Active 07.08.2008 12:36:19 70278 Create Process Order
SETC Settlement rule created Active 07.08.2008 12:36:19 70278 Create Process Order
Above is the initail Status ,
Now after Changing Comopnent qty you can find below Change Documents,
System status Action Date Time User Transaction
BCRQ Order to be handled in batches Active 07.08.2008 12:36:19 70278 Create Process Order
CRTD Created Active 07.08.2008 12:36:19 70278 Create Process Order
MANC Mat.availability not checked Active 07.08.2008 12:37:48 70278 Change Process Order
Inactive 07.08.2008 12:36:19 70278 Create Process Order
Active 07.08.2008 12:36:19 70278 Create Process Order
MSPT Material shortage Active 07.08.2008 12:36:19 70278 Create Process Order
NTUP Dates are not updated Inactive 07.08.2008 12:36:19 70278 Create Process Order
Active 07.08.2008 12:36:19 70278 Create Process Order
PRC Pre-costed Active 07.08.2008 12:36:19 70278 Create Process Order
SETC Settlement rule created Active 07.08.2008 12:36:19 70278 Create Process Order
In both the screen shot you can notice change in MANC - Material Avaibility field.
Regards,
Dhaval -
Hi All,
Is there any way for gettting information on changes to user association with roles. I would like to build trail on these changes.Jeremy,
I know V12 will user NW UME.
But this is the requirement currently i have.
I could find xml file which will store list of users associated with particular role, but I need to configure an event for role changes so that I could read these xml file for changes.
Also, when I look in to xml file I could see last modified date in the encoded form.
Is it possible to get these info programmatically??? -
Hi
We are looking for following solution using ORM(Oracle Role Manager)
Can anybody help us on how to achieve the following requirement,
Role change re-authorisation
Ability to add additional authorisation or authentication requirements to specific roles
e.g. if a user wish to change role within an application which is of higher privilege then prompt for authorisation.
Any help will be highly apprecaited.
RegardsHi,
Using T-Code SUIM you can find the information regarding roles.
Change Documents
->For Roles
Role Name *
From date Enter the date from which you want to see the changes
In change Documents
Choose
. Create and Delete Roles
I hope you are looking for this.
Regards,
Archna -
Bug: Role changes show up as blank messages
When anyone in a call (at least P2P calls), change roles, including role changes that normally don't show up publically on Desktop Skype, the android version shows an empty chat message from the user that is changing roles. I have several people reproducing this.
Well its back to using Outlook for professional and Mac mail for leisure purposes untill this problem is resolved.
I would still appreciate a response if and when there is a solution to this problem as I still want to revert to Mac mail.
Regards.
Maybe you are looking for
-
How do I get my music from one authorized computer (pc) to my other authorized computer (laptop)
-
Hello, I was moving JPEG files from iPhoto to a folder on the desk top to be imported to Final Cut Express. The Mouse slipped and I ended up copying the files to the desk top. I stopped them but over a 100 got sent to the Desk top. Now I cannot delet
-
Download trial version Acrobat Pro 9
Hi Tryng to download trial version Acrobat Pro 9 with no success - download manager instantly registers an error with no further information. How hard can it be? Yes, I've been through the download help link... Cheers...
-
How can I download an earlier version of Firefox?
I am using an iMac computer. Some banking institutions will not recognize Firefox 5.0 and instead need to see Firefox 4.0. How can I download Version 4?
-
ICloud Match - is it account specific
Hi, we've seen that you can now sign up for iCloud Match, so that you can access your iTunes account - music, film, books etc from anywhere as it stores your whole account on iCloud. However, it asks you for a user id when you sign up for it. Both