Track new roles / change in existing roles

Hi,
I have a requirement to track the creation of new role OR changes to existing role in the system. In either case I have to send an email to the group of people.
I tried to find the enhancements but found nothing useful.
Basically, I need to find how can I track the even for creation / change of a role...
Please help me out to find the solution for this...
Thanks,
Gagan Chodhry

Hi Atish,
Thanks for the reply...
No, I tried to find the enhancements, but could not get the one I need...
I found couple of things more like transaction PFAC_CHG / PFAC_INS for change or create role, but not sure how exactly to use these... if these are the correct one to be used....
Thanks,
Gagan Chodhry

Similar Messages

Creation of a new Role in Content 10.0.1

Hi everyone,
I would like to create a new standard role in my domain.
To do this I noticed the SecurityManager and its method createRole. I tried to create a new role with it using the default domain as target. I always get the error ORACLE.FDK.AccessDenied even if I use user orcladmin.
If I use a library as target I get error ORACLE.FDK.UnexpectedError:ORACLE.FDK.ServerError
Moreover in the javadoc I did not notice any attribute that associate permissions to a newly create role.
Could anyone have an idea on these points?
Thanks for any help.
Emmanuel

Hi,
1) Is the CUST_BI database user in the right place ?Yes, though you should add the language code to the user name, e.g. CUST_BI_US. This will be the EUL owner, the schema that holds all the EUL tables. The temporary tablespace you specify in the create_eul command is only used when you connect as the EUL owner, so is not important.
When you connect as an apps user the connection will be made using the APPS database user, and therefore the temporary tablespace used (and location of MVs) will be the temporary and default tablespaces associated with the APPS user. You can change the temporary tablespace just for the Discoverer users by issuing a ALTER SESSION SET CURRENT_SCHEMA command in a PL/SQL procedure called during the initialisation of the Discoverer sessions.
2) As you can see, I need to separate the BI administration from EBS administration... and DISCOADMIN is a new Apps user... any checklist/recommendation for this new Apps. user? The disco administration user can be any apps user who has EUL administration privileges in the EUL. This user should then be used to create all business areas, etc.
Rod West

How to create a new ROLE in BW

Hi All,
I would like to create a new ROLE in BI 7.0.
How to remove a query from a ROLE.
Thanks in advance

Roles are created in Tcode PFCG . Here you can restrict the objects ( Info areas , infoproviders , queries , etc ) and actions ( execute , change , display ) for which you want to give authorisation.
If authorisation is based on some info object eg company code , we create analysis authorisation in RSECADMIN ( restrict it to auth variable created in Bex ). This auth variable code may refer to a DSO which defines the user and company code relationship ie reads the current user and returns the company codes maintained against that user in DSO .In PFCG , we assign this analysis authorisation to authorisation object while creating role .
Role can be assigned to a user using PFCG or SU01 tcode.
Roles can be modified( removing query as in your case ) in PFCG ---> Give role name ---> Change .

Navigation through a new role and persistence of user properties

Hi there,
I have a question related to roles and user-experience in the SAP Enterprise Portal.
Depending on the preference of the portal user I would like to offer a different navigation by assiging a new role to the user.
For example initially a role offers the navigation show below:
Role 1:
Toplevel navigation: Entry A Entry B Entry C
After a user request for a different navigation the order of the toplevel navigation changes.
Role 2:
Toplevel navigation: Entry B Entry C Entry A
In order to realize this, I created two worksets for Entry A. By using merge-ids and a difference in sorting I managed to move the Entry A to the end of the toplevel navigation bar after assiging role 2.
However I noticed that iView properties set by the portal users under role1 are lost after assigning the role2. Is there any way a user can keep the properties set under a previous role when getting assigned to a new role that has the same page?
Thanks in advance,
Arko

FacesContext context = FacesContext.getCurrentInstance();
context.getApplication().getNavigationHandler().handleNavigation(context,
null,
"<<NAVIGATION STRING>>");
Thanks,
Navaneeth

Unable to see new role in environment

An end user said that a role that was working last week is no longer available in the portal. No changes have been made to the system in the past week.
A co-worker successfully imported this new role into the portal a week ago, but the change did not synchronize to all the servers in the environment. We have one Central Instance and two Web Application Servers in our Java environment. The import was successfully completed on WAS1. I verified this by checking the PCD import log files on WAS1. When I log into the portal running on WAS1 the new role is available. When I log into the portal running on the Central Instance the role is NOT available.
To resolve the issue a logged into the portal running on the Central Instance and used System Administration >Transport Packages> IMPORT to import the *.epa file containing this role.
Is there something else I should have done to resolve this use? How does a the system synchronize changes to objects in the java environment?

Hi,
when doing a depoly of an application (PAR) or EPA, you basically just copy the file to a (shared) folder on your java instance. This change get's recognized by your instance.
If it's a PAR, the instance informs all the other instances in your cluster of the change. They all access the application and do a local deploy / installation of the change.
If it's an EPA (PCD objects), the instance reads the content and writes it to the DB and informs the other instances that a DB change has occured and they should read the DB again to sync their content.
Normally, the deploy;import works without problems in a server, but can produce from time to time some errors / sync issues. Depending on the cache, an instance simply won't read the DB. You can use a tool from SAP that checks the instance and DB for sync issues (the tool is called something like: PCDcheckDB.sh).
Generally, you should clear the cache of your portal after every deploy/transport to ensure that the user is getting the latest version:
- Navigation cache
- portal DB cache
- PCD cache
- (HTTP provider cache, web dispatcher cache)
Depending on you configuration (cluster with many servers and nodes), you see this issue several times, you can do the following:
- Shut your DI down and do the deploy on your CI.
- Restart your DI with the sync option. This way, they will sync the content of the DB and disregard the local cache.
br,
Tobias

New Role in PFCG only for customizing (display mode)

Hi,
Some users asked me to have a specific role to display all customizing settings (form transaction SPRO). This new role should allow users only to display customizing settings without changing them.
I tried to copy and manipoulate standard role S_BC_CUS_CUSTOMIZER. In my new role Z_S_BC_CUS_CUSTOMIZER (copy of the standard) I have setted as "display" entries with field "ACTVT".
However it doesn't work as I like because user with that role can still modify customizing.
Can any of you help me please? thanks.

Hi
Those role doesn't exit in my system, anyway you should create a new role where all authorization groups have the value 3 for the activity.
So you should assign to the object S_TABU_DIS only 3 as action allowed.
Anyway you should check all roles assigned to your user, because perhaps if a user has two roles where it can changed the data for the first role and it can't do it for the second one, the result will be the user can change the data.
Max

Replace Role 13200137 (finding 'support team') with a new role

Hi,
I copied the role 'CRM_DNO_1' to 'z_crm_dno_1'. All Datas was copied exept the datas in the section 'responsibitity' - is this ok?
the new role 'z_crm_dno_1' has now the number 90100005. where can I change the role number form the standard-role CRM_DNO_1 13200137 to 90100005?
and where in the new role can I modify the name of the FB CRM_DNO_READ_PARTNER_WFRULE to my new FB Z_CRM_DNO_READ_PARTNER_WFRULE ?
thx in advance,
kind regards
Franz

Hi, Stéphane!
I copied the Role CRM_DNO_1 by doing this:
o     Call Transaction PFAC_RESPO
o     Type in u201A13200137u2018 into Field u201ARuleu2018
o     Click on Icon u201ACopyu2018
o     Type in u201AZ_CRM_DNO_1u2018 in Block u201ATou2018 Field u201AObject abbreviationu2018 and Text
o     Complete the u201ACopyu2018-prcess with a click on Icon u201ACopyu2018 > the System created the new RuleNo u201A90100005u2018 (and added some u201AResponsibilitiesu2018 and new fields in the u201AContaineru2018)
I copied the FB CRM_DNO_READ_PARTNER_WFRULE to Z_ CRM_DNO_READ_PARTNER_WFRULE (and the required definitions and form-routine into a new Functiongroup Z_ CRM_DNO_TOOLS)
for prepareing the new fields in the Container)
Then
transaction code SPPFCADM --> select CRM_ORDER --> Define actions and action profile
selection of u201A SLFN0001_STANDARD     Support Desk Message Action Profileu2018 and click u201AAction Definitonu2018
click u201Anew entriesu2018
Setu2018 Z_ Z_SLFN0001_STANDARD_FIND_PARTu2018 (similar to u201ASLFN0001_STANDARD_FIND_PARTu2018)
Set all values on this screen in tab u201Aaction definitonu2018 similar to u201ASLFN0001_STANDARD_FIND_PARTu2018
Click to u201Aprocessing typesu2018
Click to u201Anew entriesu2018
Select u201AMethod Callu2018 for u201APermitted Processing Types of Actionu2018
Click to u201Achange definitionu2018
Click to u201Acreateu2018
Similar to u201ASLFN0001_STANDARD_FIND_PARTu2018 create two u201AExpressionsu2018, one with u201ARuleu2018 but with u201Ainitial valueu2018 u201A90100005u2018 instaed of u201A13200137,
and the second with u201APartner_FCTu2018
now my questions:
Is this what I mentioned above ok?
But which Method in on the screen u201Aprocessing types -> setting method callu2018 do I need?
And where is the linkage betweet the role and my new FB?
Hope I didu2019t annoy you to much!
Thanks in advande,
Franz

Delegating "Portal Display" to a new role

Hi all,
I would like to create a role that I can assign to selected people that would allow them to manage the themes/desktops/framesworks/rules. These people will already have content administrator's role.
So, I created new folders for the new role and new role and workset. My next step was to add the "Portal Display" workset to the new workset, as used in the System Administration role. However, when I went to look for the "Portal Display" workset I could not find the object in the PCD.
Is there a way to create a role for just the "Portal Display" management? Where is that object?
I am able to do a delta link on the "System Administration" workset, but then I have to remove lots of stuff. Seems a waste and not at all an elegant way to go.
Thanks for your help,
--Amy Smith
--Haworth
Points always rewarded.

HI
u r right
i thought i could copy the role from role editor to pcc. But it is not possible.
so the simple solution is to copy the role of system administrator as such in pcc and paste it as delta link in ur folder of pcc. delete all the unwanted page , iview and workset from that role.
Since u r pasting as delta link any future changes to system administrator by SAP will reflect in ur role too
Regards,
Vijay.

Create a new role in SRM 7.0 and Portal

Dear All,
We are using SRM 7.0 with Portal. We created a maintenance table in SRM. This table must be maintained from time to time by the key users. But they want to maintain in from Portal, not from SRM.
When i was using SRM 4.0, it was simple, i was creating a new role from PFCG and assigning the table to the role. Then i was be able to see and maintain it from web. But it is not that simple now in Portal side. Because i created a new role and assigned the table to that role in SRM, but nothing happened in Portal side.
Can anyone advise me the steps ? How am i going to show and maintain this table in portal ?
Thanks in advance,
Best regards,

Hi,can you share your solution with me. I have the same question but not smart as you.
Thanks in advance.
WuLin
SRM

HT204053 i want to change an existing icloud account to a new icloud account?

I want to change an existing icloud account to a new icloud account

If you want to create a new iCloud account and migrate your data to the new account, you'll have to delete the existing account, create the new account with a new ID, and then migrate your data to the new account.
Before doing this, if you have any photos in photo stream that are not in your camera roll or backed up somewhere else save these to your camera roll or you will lose them. To do this, open the my photo stream album, tap Edit, tap all the photos you want to save, tap Share, then tap Save to Camera Roll.
Once this is done, go to Settings>iCloud, scroll to the bottom and tap Delete Account. When prompted about what to do with the iCloud data, be sure to select Keep On iPhone. Next, set up a new iCloud account using a different Apple ID (if you don't have one, tap Get a Free Apple ID at the bottom). Then turn iCloud data syncing for contacts, etc. back to On, and when prompted about merging with iCloud, choose Merge. This will upload the data to the new account.

How Can I Create a new Role in an PCD address?

Hello EveryBody,
I need to develop a new class that it can manage SAP Portal roles. I got how to recover all the roles of a user or how to recover all the roles in a PCD path. Now I have the problem when I try to create a new role in a PCD path.
The code that I have to do that it is this:
try {
*     IRoleFactory iRoleF = UMFactory.getRoleFactory();*
*     IRole nuevorol=iRoleF.newRole(pcdPath+nameRol);*
*     nuevorol.setDisplayName(nameRol);*
*     nuevorol.setDescription(descripcionRol);*
*     nuevorol.commit();*
*     return true;*
catch (Exception e)
*     return false;*
This code it works and it makes a new Role but I donu2019t know how to create this role in a PCD path. Could you help me with this?
This it is a urgent task that I have to develop, please I need help. Thanks in advance.

Hi,
     Now I understood your question. As of now, I think there is no api which creates workset and roles in pcd. API are available for iView, page, system and layout only.
For creation of iView, page etc, check this blog.
PCD II: Creating Portal Objects
For role and workset creation, there is another tool used. Check these blogs.
SP15: XML Content and Actions
Mass Creation of Portal Content - Generic Creator
If you want to use this tool functionality in code, then check this blog.
Using the XML upload content and actions dynamically
If you are on NW7.1, then check this article.
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/40c72897-c7e6-2a10-e98a-af81b89084f4
Hope these will help. Good luck.
Regards,
Harini S

Creation of new roles in OES using BLM API

I'm currently using policymgtapi examples for creating new roles. Its gets created but doesn't visible in OES Entitlement application console even though the entry is present in OES DB. But if you create a new User, its available immediately in OES Entitlement application. Pls let me know why Role is not available in Entitlement application after creating using policymgtapi. Thanks

Is there any org scope to the role?
There's some conversion process that happens when you load roles via policyloader, I suspect you would need to do the same with Policy Mgt API. There are some groups you need to add to have it show up in the EUI.

Sending an email after creation of new role

Whenever new role is created in Transaction PFCG I need to email to all the users.
There is no User-Exit in PFCG and we can't create any new Program for this.
So how it will be done?
If anyone worked on it please reply to this as soon as possible.

hi Zahid Khan,
as said i tried the same.
i have created a button "send" action :submit.
and also have created a process"send mail" with the folloing code
DECLARE
l_body CLOB;
BEGIN
l_body := 'Thank you for your interest in the APEX_MAIL package.'||utl_tcp.crlf||utl_tcp.crlf;
l_body := l_body ||' Sincerely,'||utl_tcp.crlf;
l_body := l_body ||' The APEX Dev Team'||utl_tcp.crlf;
apex_mail.send(
p_to => '[email protected]',
p_from => '[email protected]',
p_body => l_body,
p_subj => 'APEX_MAIL Package - Plain Text message');
APEX_MAIL.push_queue;
END;
and , Process Success Message as "done" and When Button Pressed (Process After Submit When this Button is Pressed): "SEND" WITH Process Point : "ON SUBMIT AFTER COMPUTATIONS AND VALIDATION"
The process is running.., getting the """success message""" but unable to""" get the mail""".(tried different combinations of mail ids)
any help !!!

In Yosemite Mail, there is an issue where the signatures no longer toggle as in the past. If you change the existing signature, it just adds the new one vs replacing it within the body of the message. Thoughts?

In Yosemite Mail, there is an issue where the signatures no longer toggle as in the past. If you change the existing signature, it just adds the new one vs replacing it within the body of the message. Thoughts?

Hi howe.sc,
When I checked for how signatures in Yosemite work, I found this.
Mail (Yosemite): Include signatures in messages
Delete a signature from a message: Select the signature, then press the Delete key.
Replace a signature in a message: Delete the existing signature, then add a different signature.
That sounds similar to what you are describing.
Take care,
Nubz

How to set new role for new custom entity only

I created a new custom entity, I want to create new role for it only. So I created new role and set custom entity User role. But When I login the user with created role, it show now right to access CRM.
Awen

Are you trying to grant access so that users can use this custom entity but no other data at all?
You will still have to include access to all sorts of bits of CRM just to make the user interface work - especially the things on the Business Management and Customization tabs of your security role. You also need to check these 6 settings:
Special privileges in CRM Security Roles
If this is the only security role you plan to give to your users, I would suggest you start from a standard role and remove access to other entities, rather than start from blank and work upwards.
Hope this helps.
Adam Vero, Microsoft Certified Trainer | Microsoft Community Contributor 2011
UK CRM Guru Blog

Track new roles / change in existing roles

Similar Messages

Maybe you are looking for