Transaction to a role

Hi Guys,
I want to find the list of tocdes assigned to a role.
I checked it in table agr_1251 it gave 194tcodes.
But when checking through suim->transaction->excutable fora role it shows 202 tcodes.
COuld you please suggest me which procedure is correct or which can be employed to collect the tcodes assigned to a role.
Regards,
Adithya G

suim->transaction->excutable fora role
Have you read what this report is actually checking? It is not just about S_TCODE but whether the role has the authorisations to start the transaction (SE93 definition of transaction may have additional check)
also, it looks like it's evaluated the generated profile of the code (i.e UST10s/UST12) for S_TCODE access. If you have maintained PFCG but not generated your profile what appears in the AGR_1251will not match the UST* entries.
Suggest you read the help information for that transaction
COuld you please suggest me which procedure is correct or which can be employed to collect the tcodes assigned to a role.
the procedure depends on whether you want to know:
all transactions in the role menu (AGR_TCODES)
all S_TCODE authorisation access AGR_1251 or UST12
all executable transactions in role (SUIM report you ran)
If you read the help information and look at your role build you will probably be able to figure out that procedure yourself.
Regards
Colleen

Similar Messages

Add 1 transaction to multiple roles

Hi There,
I am responsible for the authorization of the sap customers for my company.
We have multiple roles for multiple company's within our own company.
Butt when i must add one transaction to the role admin, i must ad the transaction for al the roles of the different company's. admin company 1, admin company 2, and so on.
Is there an transaction i can do mass change's for multiple role's.

Hi,
There is a another way also, it could be done.
Create One common Role - zrole_common
This should be added to all admins of all companies
Create seperate Role for each company ( excluding auth in common role).
zrole_company1
zrole_company2 etc.
Now assign zrole_common and zrole_company1 to company-1 admin.
Now whenever, you wanted to add any common auth obj, add it to zrole_common and regenerate it, This will be effected to all admins.
I am not sure, how your Roles are maintained now. But if possible, go for this proven way.
Thanks,
Raj Sam

Add a transaction to a role

Hi,
can someone send me the procedure to add a transaction to a role for a user?
much appreciate ur help
help would be rewarded.
swaroop.

Hi,
There is a SAP delivered report that you can copy, remove the system type check and run. To do a landscape with delete, enter the roles to be deleted in a transport, run the delete program or manually delete and then relase the transport and import them into all clients and systems.
It is called: AGR_DELETE_ALL_ACTIVITY_GROUPS.
Regards,
Sowmya

Attaching Transaction to a Role

Hello All,
I have created a transaction. I need to assign to a Role
This transaction should be executed by Users having a particular Role. Can ayone tell me how to attach the transaction to a role.
Regards,
Hazam

Hi Hazam,
You can do it via PFCG-> Role-> Change Authorisation Data-> Add the needed transaction .
Reward points if this Helps.
Manish

Listing transactions for ranged roles

Good afternoon,
I'm attempting to "clean up" a role which was previously created and used many ranges. I want to remove sensitive transactions.
I am able to use SUIM to search transactions by role, and by complex, but this does not list the transactions if they are contained in a range, only if they are
listed explicitly in the menu or S_TCODE.
Is there a transaction or tool that will give me a complete list of transactions in a role, including those that are contained in a range?
Thanks!

In table AGR_1251, input S_TCODE for a role and see the values in Columns Low and High to see the range.
AB.

How to Add a single Transaction to Base role of a User in GRC AC 10

Hello Gurus,
I would like to know if it is possible to assign a single transaction to a user in his default roles.
e.g) We have some Users who have been assigned some default roles, and in some case if a user requires authorization only for a one transaction e.g.) FB08 or for the matter any transaction , instead of adding a role containing many other transactions , we would like to assign only this transaction to the user.
OR
In other example , if a user sends a missing authorization request i.e. SU53 screenshot , and that only one transaction needs to be assigned , how can it be provisioned to that specific user ?
Is it possible in GRC AC 10 , by using CUP or BRM ?
Looking forward for your opnion.
Regards,
Victor

Hello Victor,
In this case, why don't you create a role including only FB08? You cannot assign a user a transaction, you have to assign a role. This is the authorization concept in SAP.
Cheers,
Diego.

"Error on page" while adding a transaction iview to Role

Hi,
I am getting javascript error "Error on page" when I am trying to add a transaction iview to a Role.
when i click on the error it shows
                 error : Expected ')'
The error is coming only for few iviews while for others it if working fine.
Does anyone know the reason for this error?
Thanks,
Kanchan

/* Formatted on 2012/04/25 14:22 (Formatter Plus v4.8.8) */
CREATE OR REPLACE TRIGGER issue_book_tri
BEFORE INSERT
ON issue_book
FOR EACH ROW
DECLARE
CURSOR a
IS
    SELECT join_date
      FROM member_book;
p_join_date   DATE;
BEGIN
OPEN a;
FETCH a
   INTO p_join_date;
IF p_join_date > :NEW.issue_date
THEN
    raise_application_error (-20322, 'You may Issue book only after joining');
ELSIF 1 = 1 -- uuuuuu miss the condition here
THEN
    :NEW.return_date := :NEW.issue_date + 15;
END IF;
CLOSE a;
END;

Report to fetch assigned transactions for multiple role.

Hi,
I am looking for some report or the way, i can get the list of transaction assigned to multiple roles in one go.
Actually i tried SUIM, but here i have to specify one role at a time and have the list of transactions assigned to it.
My scenario is, i have around 100 composite roles. Now there is a requirment for a report, which gives information of transactions assigned to each role. If i do it one by one, i have to do it for 100 times.
Please suggest the best and quickest way.
Thanks & Regards,
Pravin

> Another way could be to look into the AGR_1251 table for object S_TCODE values. But, this will populate transactions that could possibly not have included intentionally (in the menu). For eg there are many transactions which need authroization for another tcode in the background which have to be inserted as an authroization value.
Which is good, because those are the actual tcode rights, not only the intended ones......
To do this for composites I disagree with Julius on using Excel or Acces
Try the SAP query tools, they're there for you. If you go to the quickviewer (SQVI) you can easily join tables AGR_AGRS and AGR_1251 by AGRNAME. Now if you look for object S_TCODE you can see the relation between a tcode assignment and a composite role.

Transactions missing in Role After Upgrade from 4.6c to ECC 6.0

Hello Friends,
I did multiple searches on this question but it was unsuccessful. We are upgrading from 4.6c to ECC 6.0. We are testing roles to make sure the migrate properly.
Irrespective of su25. There are transactions that are not obsolete and are missing in ECC 6.0
For example if I have a role called FIROLE. Which has 20 tcodes in 4.6c. When we upgrade to ECC 6.0 8 tcodes will be missing. This is not because the tcodes become obsolete.
What is the best way to approach this. Should we be testing each role?
Thanks!

Hello Imran,
transactions can be 'obsolete' also if they still exist.....
If the application developers create new functionality, new look,.... in new transactions but still let the 'old' ones in the system.
Just think about the ME2*-transactions..... The developer can decide, that such new transactions should replace the old ones after upgrade in the roles or let the old ones as they are.
You can get an overview about replaced/obsolete transactions by reviewing table PRGN_CORR2 (make sure, that you have the latest version, according to [SAP Note 991377|https://service.sap.com/sap/support/notes/991377] !!!). SU25 gets its information from that table.
b.rgds, Bernhard

Display buttons by Transaction type and Roles

Hi Experts,
I have created a button in the BT115IT_SLSO/items view, using the DO_PREPARE_OUTPUT method. now I want to display this button only to a specific transaction type and business role, how can I achieve this. Tool bar related methods are not present for this view.
Thanks,
S Reddy

Hi,
This has been discussed in the forum already...
https://forums.sdn.sap.com/click.jspa?searchID=27175485&messageID=7619188
Re: Business Role of logged in user
Always search first and check if there is anything already discussed, this will save a lot of your time.
Regards,
Masood Imrani S.

Transactions in Specific Role

Hi all,
How can we see transaction codes in a specific role? Is it using SUIM or anything else? How?Waiting for answer.
Thanks.

Hi,
You can also use Table AGR_TCODES or AGR_1251.
Thanks & Regards,
Santosh

Report for transaction - Maintain Object - Roles - user Id ( Authorisation)

Hi
I want to generate a report for the following:
for a transaction
for a check/ maintain object name ( Ist column)
what are the roles ( iind column)
and
what are the user id for each roles.. (iiird column)
and
start up (yes / No) (ivth column)
Please advise.
Since, I need to do this report generation for more than 30 transactions, any immediate reply would be of great help.
Thanks in advance.
Partha

Hi
Try SUIM T-code and see if any of the report works
Thanks

Customizing PFAC Transaction in Production (Role to Postion Mapping)

All,
We have added email recipients in PFAC. Our recipents are based on 'Roles to Position Mapping'.
We often get a request to add or delet a recipient in production.
We can transport our changes from Dev as the roles to position mapping is different in Dev QA and Prod.
I know SAP makes some transaction maintenable in Production. So that we can directly make the changes in Production environment. or is there any other way that you must be following at your work place to overcome this issue.
I have also opened a OSS note for this, thought will get some insight from the gurus here.
Are you aware if PFAC is one of them.
Regards,
XIer

SAP Note 534029, provide thesolution I was looking for.

Transaction BP : hiding Role

Dear Colleagues,
In trx BP, there are many SAP standard role in "Create in Role" dropdown, like sold to, ship to, payer, vendor, bidder and so on...
Out of those, we do not use Vendor and Bidder. I do not want to delete this in customizing (trx SPRO) since this is standard roles and we might need this in future. So is there any way to hide those so that role dropdown can have only needed roles?
Please respond.
Regards
Yatin

Yatin,
Actually to build the role you will need to use the area menu BUPT if you haven't already.
In there you will find a menu:
Business Partner->Control->Divisibility->BP Roles
(TxCode BUSD)
You should then copy the CRM001 role to your Z-role in this area. This should then allow you to perform the higher level configuration on the role, in the previous area you described.
Good luck,
Stephen

BP Transaction : Assign values to fields upon selection of BP role ?

Hi All,
I want to assign values to Grouping and Account Group fields in BP transaction in CRM.
Is there any BADI or Userexit to achive the same. If possible kindly explain the steps to be implemented to use the BADI.
Thanks & Regards,
Navneeth K.

Hi Navneeth,
There are 2 ways to approach this :
1. You can create an application transaction for the standard transaction BP. This will open the transaction in whichever role you require, default a groupng, and allow you to control some other initializaittion parameters. This is very similar the transaction variant mentioned above by Adil.
You can explore 'Application Transactions' through SPRO->Cross Application>SAP Business Partner-> Business Partner> BAsic Settings>Business Partner Roles>Define Application Transactions.
2. To default grouping , you can use BADI BUPA_NUMBER_GROUP. THe BADI will receive the list of groupings that will be shown in the dropdown .Write the implementation so as to remove unwanted groupins and keep only the number groupig you wish to default.
Hope this helps.
Cheers,
Rishu.

Transaction to a role

Similar Messages

Maybe you are looking for