User able to see activity belongs to High user

Hi experts,
In Webui:
I need to restrict that User, can see only his own documents created by himself.
I have set the following authorization objects but doesn't works: (in role BP_SLS_EMPLOYEE)
CRM_BP_SA
CRM_ORD_OP
CRM_ORD_OE
CRM_ORD_LP
There is another business role, authorization object or badi?
Thank you

Hi ,
Try badi CRM_ORDER_AUTH_CHECK.
Regards,
Ruby.

Similar Messages

Service Desk end user not able to see messages

Hi
Im configuring service desk.Iam facing following issues.
1. In solution manager service desk user could not able to see his submitted messages.He could able to submit his message and they are appearing in crm_dno_monitor. Is there any way he can see his submitted messages and message status.
2. I have assigned following roles to user, but he couldnot able to send message and getting 513 error. If i assign sap_all to him, he is able to submit message. Just i wanted to know how can i avoid sap_all to him.
ZSAP_SOL_SERVTRANS_CREATE
ZSAP_SUPPDESK_CREATE
ZSAP_SV_FDB_NOTIF_BC_CREATE
Your help is highly appreciated
Thanks
Regards
Mahi

Hi Mahi,
Please check about Workcenter:
1160651: Work Centers: How to Customize (Solution Manager)
http://help.sap.com/saphelp_smehp1/helpdata/en/6a/4b4713fc2e45ad921a20b0831d07a5/content.htm
Make sure the user has the following roles:
SAP_SUPPDESK_CREATE
SAP_SUPPCF_CREATE
SAP_SMWORK_BASIC
SAP_SMWORK_INCIDENT_MAN
Message processor:
SAP_SMWORK_BASIC
SAP_SUPPDESK_CREATE
SAP_SUPPDESK_PROCESS
SAP_SUPPDESK_DISPLAY
SAP_SMWORK_INCIDENT_MAN
Concerning this please pay attention of the note:
834534 - SAP Solution Manager roles in Release 7.0
Error message 513 is probably caused by incorrect or incomplete
customizing. Please review attached note 864195 for more details.
Please also ensure note 1356510 has been applied in your system,
you may find more explanation in note 1522809.
Please check the authorizations for your key users. The key user
shouldn't have the following value on authorization object CRM_TXT_ID:
TEXTID SU15
ACTVT 02
FM AI_SDK_KEY_USER_CHECK can be used to check a user is a key user or
not. The key user should have limited authorizations on authorization
object CRM_TXT_ID.
Please check security guide for the message processor roles and
other roles. You can download the security guide from below link which
will be available to download after half an hour or so or you can also
find security guide from below link:
http://service.sap.com/instguides -> SAP Components -> SAP Solution
Manager
Thanks
Regards,
Vikram Jain

Users not able to see remote users on the node network

Users that belong to one node are not able to see users in another calendar
server node. Both calendar servers are pointing to the same directory server.
Some errors that occur in the log files:
DEXOTEK ERRCODE Ox13608 -> SchedBaseOpen: Section name too long
DEXOTEK ERRCODE Ox13608 -> OpenConnection: SchedBaseOpenOnHost
And when uninode -cws nodeID is run, it does not report being able to see all
the users and resources on the remote nodes.
uninode: connected to hostname.net.xxx.com, node 10000
directory of items: 10 (USERS = 10/RESOURCES = 0)
CONNECTION EX AV Q-SIZE IN-PROCESS IMPORT-DIR
(10000)->xxxxxx.xxx.com(10001) 2 2 0 0 370 (U=370/R=0)
Here is the nodes.ini file:
+ H=xxxxxxx.xxx.com/N=10000
+ H=xxxx.xxx.com/N=10001
all=2
There is a reported bug, that 16 chars is max on domain names for the nodes.ini
file, which means that you need to change that file and use:
     a) an alias that can be resolved on the network with either DNS or local
     host files
     b) use the IP address.
As documented in the release notes, here is the procedure on how to modify the
hostname when it is too long. Or how to modify the hostname for any reason.
Fix for long host names problem
If the fully qualified domain name for your network exceeds 16 characters, it
will be necessary to shorten the host name of all the servers in the Calendar
Server network . These instructions must be carefully followed to avoid causing
problems with the network. Ensure that the procedure is applied to ALL nodes in
the Calendar network.
1) The following procedure should be carried out on each server in the
Calendar network:
a) Bring the Calendar services down.
% unistop -y
b) Run the unidbfix command in export mode.
% unidbfix -export -n node-id
This will create a remotenode.ini file for each node on the server. The file is
located in the node's perm directory.
Example:
If you have two nodes on the server ROCK, node 1(in N1) and node (in N2), the
files are:
/users/unison/db/nodes/N1/perm/remotenode.ini
/users/unison/db/nodes/N2/perm/remotenode.ini
The remotenode.ini file will look something like this:
[1]
RN_NUMCONNECT = 2
RN_SURNAME = "unison"
RN_GIVENNAME = "unison"
RN_ORGUNIT1 = "uni2"
RN_ORGUNIT2 = "openmail"
RN_ORGANIZATION = "ABC Corp"
RN_ACCESSMETHOD = 2
RN_SERVICENAME = "unieng"
RN_HOSTNAME = "rock"
[2]
RN_NUMCONNECT = 2
RN_SURNAME = "unison"
RN_GIVENNAME = "unison"
RN_ORGUNIT1 = "uni4"
RN_ORGUNIT2 = "openmail"
RN_ORGANIZATION = "ABC Corp"
RN_ACCESSMETHOD = 2
RN_SERVICENAME = "unieng"
RN_HOSTNAME = "rock"
2) Once you have run unidbfix in export mode on all the servers, proceed as
follows:
a) Compare the remotenode.ini files and verify that the entries are the
same. In each file, you will note that an entry for the local node is not
included.
b) Edit one of the files (on any of the servers). This file will be
referred to as the master file. Add the appropriate entries for the
local node (copy the section from one of the other files). Modify the
RN_HOSTNAME in each of the sections of the master file to shorten the
name.
c) Copy the master file in the perm directories of each node on all the
servers.
3) Once the master file is in the perm directory of all the nodes, proceed as
follows on each server:
a) Run the unidbfix command in the -import mode.
% unidbfix -import -n node-id
b) Edit the nodes.ini file on the hub server and make the same changes to
the host names. You do not need to apply the changes.
c) Edit the [UTL] section of the /users/unison/misc/unison.ini file and
change the host name.
d) Start up the services.
% unistart
4) After all the changes have been made, run the uninode -cws all and
uninode -snc all commands and verify that the results are accurate.

See this:
http://docs.info.apple.com/article.html?path=Mac/10.6/en/8203.html
You should then see your pcs listed in Finder's sidebar under the shared section.
Regards

Position belongs to specific Sales org able to see data from another Sales

Hi experts,
Settings in ppoma_crm done.
Moreover, new infotype for Business role created and asigned to respective org.
SALES_EMPL is able to see any account that doesnu2019t belongs to his sales org.
Roles in user SALES_EMPL ROLES:
BP_SLS_EMPLOYEE, SAP_CRM_BUSINESS_PARTNER, SAP_CRM_OR_USER, SAP_CRM_UIU_FRAMEWORK.
Could you please inform us if we need to add a new Role to this user in SU01?
Thank you!

Hi experts,
Settings in ppoma_crm done.
Moreover, new infotype for Business role created and asigned to respective org.
SALES_EMPL is able to see any account that doesnu2019t belongs to his sales org.
Roles in user SALES_EMPL ROLES:
BP_SLS_EMPLOYEE, SAP_CRM_BUSINESS_PARTNER, SAP_CRM_OR_USER, SAP_CRM_UIU_FRAMEWORK.
Could you please inform us if we need to add a new Role to this user in SU01?
Thank you!

Report exection problem for one user - not able to see the data.

Hello Friends ,
Need some help . I have got the one ticket from bussniess side about the report execution .
Unfortunately , I am also not having authorisation of that report due to sensible data.
Problem - User is executing the report but some how he is not ABLE TO see the data for one company code Hierachy .
I executed the same report through RSSMQ via his user id , and I got the below message.
All value were selected . Hierachy Authorisation cannot be used.
A displayed hierachy requier a hierachy authorisation .
But when i checked his authorisation , I am able to see that he should have authorisation to all the hireachy .
could you please let me know , how can I check more ?
Regards,

after accessing the report , u go to su53 tcode and check the authorization and u can see what is problem in authorization for the that user and u can send the details to secuity team to rectify the issue ,

Except sadmin other users not able to see siebel BI publisher reports

Hi,
we have integrated siebel with BI publisher, except sadmin other users not able to see BI publisher reports, it is throwing error "No file has been attached to this record, please attach a file. SBL-SVC-00155".
when login with sadmin report is generating. we have created user sadmin on BI publisher. if we change that user sadmin on BI publisher to some other name, then sadmin not able to generate reports. is there any specific on user creation on BIP should match with siebel?
Thanks,
Joe

i suggest then dropping user and re-creating and then re-assigning permission (just keep his webcat files) - it'll be faster than looking into individual permissions
another possible option - did you check his browser? sometimes the screen resolution can be too low and they don't see it on the same screen - need to scroll.
is it possible he's not using the same Dashboard page as others? just check the "Report Links" to make sure
i'm not sure what else could be a cause of this

After webcatalog migration from 10.1.3.3 to 10.1.3.4.2 not able to see user

Hi Gurus,
I am facing an issue with web catalog migration.
Currently we are on 10.1.3.3 version and upgrading to 10.1.3.4.2.
As part of migration i have taken the RPD, NQSConfig, Web catalog, instanceconfig.xml files as backup. i followed manual way while taking the web catalog backup i.e zipped(tar) the prod catalog and moved it to some folder.
After 10.1.3.4.2 installation i have moved this zip file to the /OracleBIData/web/catalog and unzipped it. restarted all the servers. when we logged in presentation services we are not able to see the reports which we saved in "My Folder" when it comes to the reports which we saved in "Shared Folder" i am able to see all the reports and dashboards.
to debug this further i opened the web catalog by using web catalog manager and found out that all the reports and .atr files are there under that user ( USER folder, corresponding user folder ), and instead of my presentation server recognizing this folder its creatin new folder for the same user.
Because of this issue our release plans are getting postponed, please advise me.
what could be the problem and if i have done some thing wrong while taking the backup pls let me know the best way of backing up the web catalog.
Thanks,
Seshu

try this:
Archive all folders from 10.1.3.3 using catalog manager.
Update instance config on 10.1.3.4.2 so that it'll create a new webcat, open it and unarchive above folders.
If helps pls mark

Sysadmin/All users are not able to see responsibilities after login in EBSR12

I have followed the all notes from forums/metalinks. but no use.

Hi Hussein,
I came know the issue bcoz of profile change.
on part of iSupport setup on web node, followed metalink DMZ configuration in R12.
After I have changed below profile value, I am not able to see the responsibilities after login as sysadmin on webnode i.e new node B. but I can see responsibilities on node A.
Update Node Trust Level
To change the value of the Node Trust Level profile option value to External for a particular node, perform the following steps:
1.       Login to Oracle E-Bsonapness Suite as sysadmin user sonapng the internal URL
2.       Select the System Administrator Responsibility
3.       Select Profile / System
4.       From the 'Find system profile option Values' window, select the server and get the valie MINE8 into it.
5.       Query for %NODE%TRUST%. You will see a profile option named 'Node Trust Level'. The value for this profile option at the site level will be Normal. Leave this setting unchanged.
6.       Set the value of this profile option to External at the server level. The site level value should remain set to Normal
I need to follow metalink note for configuration DMZ in EBS R12. but I cant see the responsibilities of sysadmin.
fyi...I have cloned web external node by running adcfgclone.pl on node B by enabling web entry and web services only, remaining services are disabled. but as per metalink note, we should enable the Root Services also on node B. is it causing the issue after edit the profile on part of DMZ config in R12.
please let me know how to fix this issue?
I have deadline to finish it....

Users not able to see all the default reports in FDM under analysis

All,
Users in FDM are not able to see all the default reports which will be available under Analysis. I have checked the MenuNavigation and MenuNavigationItems under object maintainence in FDM which have "ALL" as the provisioning level. I am not sure where the issue is as the users still not able to see the reports. Please advise if there is something that can be done in workbench.
Regards

You can set security on Report folders in workbench. You would go to the report tab in workbench, and right click on a Folder (Cannot do it on the individual report, it has to be on the folder), and you can assign security levels to the report folder. There are some in here that default to the admin level but you can override it.
Regards
JTF

OBIEE 11g - Not able to see existing reports which are created by specific owner but I could able to see Admin role user reports.

OBIEE 11g - Not able to see existing reports which are created by specific owner but I could able to see Admin role user reports.
Appreciated if you could able to help as soon as possible as I don' have back up for these disappeared reports.
Pleas let me know if any additional information needed.

Hi
Thank you for the reply.
Here one thing I would need to mention that those are created by me on last week, but when I check those today, I could not able to see or even admin also not able to see those. For sure no migration and updations happend over the week end, really not able to debug whats the issue around. Unfortunately I haven't taken back up as well.
Please could you help and let me know whats the root cause and how I could able to restore.
Best regards,
Kumar

Not able to see other users change list in IR/ID

Hi All,
I need to perform the CTS+ transports in PI 7.1 and when ever i am going to change list tab apart from my user id i am not able to see any other user id to transfer the objects to my id
Is some setting is missing or some role we need to assign.
Appreciate your reponse on this.
Thanks
Ankur

Hi Anku,
Have a look on this doc [Limit Authorization PI Content objects.pdf|http://www.sdn.sap.com/irj/scn/events?rid=/library/uuid/a005629b-c063-2910-0fb8-f57dc68abaca], and/or contact your basis team who manages the user roles...
The same in [e-learning|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/40457bb0-c663-2910-85ad-f5f42edb715a].
just in case of... for ESR authorization, you have this one [How To Setup Profile Based Authorization In ESR Using PI 7.1 EHP1|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/50a3efb4-57a1-2d10-a6b9-fed6d21799f8?QuickLink=index&overridelayout=true]
Else... a stupid question:
in "change list" tab, have you click on the "filter" button to be able to select "User = All" ?
and then to do your transfer...
Regards.
Mickael
Edited by: Mickael Huchet on Feb 14, 2012 9:24 AM

After logging in SSO user is not able to see responsiblities

Our EBS is integrated with SSO. On PRD we have once user whose account was locked while logging into SSO. We unlock his account, after that user is able to login but is not able to see responsiblities list. We did on EBs application tier relink using
FND_TOP/patch/115/sql/fndssouu.sql with userid parameter.
with this user was able to see responsiblities Yesterday.
Today morning again the same user is complaining that he is able to login SSO but can not see responsiblities list.
Please help. This is happening on PRD just for one user.

Our EBS is integrated with SSO. On PRD we have once user whose account was locked while logging into SSO. We unlock his account, after that user is able to login but is not able to see responsiblities list. We did on EBs application tier relink using
FND_TOP/patch/115/sql/fndssouu.sql with userid parameter.
with this user was able to see responsiblities Yesterday.
Today morning again the same user is complaining that he is able to login SSO but can not see responsiblities list.Please see old threads for similar disucssion.
https://forums.oracle.com/forums/search.jspa?threadID=&q=Missing+AND+Responsibilities&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
Please help. This is happening on PRD just for one user.Please log a SR.
Thanks,
Hussein

Why users are not able to see certain printers even though they are in the Airgroup server table

Q: Why users are not able to see only certain printers even though they are in the Airgroup server table ?
A: In certain scenarios we may notice printers come up under the server /cache entries on the controller.
However when an airgroup user does search for printer, they may not see all the printers, certain printers may be not visible .
This is because the service IDs sent by the user in the MDNS query are not broadcast by these printers
In the below capture the Ipad sends query for service id "_universal_sub_ipp_tcplocal" and "_universal_sub_ipps_tcplocal" and hence the controller will
respond with the printers that broadcasts these service ids.
Non–Visible printer :
_printer._tcp.local PTR IN 7200 10.125.30.223 5820.05 Wed Mar 18 13:24:26 2015
_pdl-datastream._tcp.local PTR IN 7200 10.125.30.223 6112.25 Wed Mar 18 13:24:26 2015
_ipp._tcp.local PTR IN 7200 10.125.30.223 5888.15 Wed Mar 18 13:24:26 2015
_http._tcp.local PTR IN 7200 10.125.30.223 6293.88 Wed Mar 18 13:24:26 2015
NPIED487E.local A IN 240 10.125.30.223 194.43 Wed Mar 18 13:24:26 2015
hp LaserJet 4250 [ED487E]._printer._tcp.local SRV/NBSTAT IN 240 10.125.30.223 209.87 Wed Mar 18 13:24:26 2015
hp LaserJet 4250 [ED487E]._printer._tcp.local TXT IN 240 10.125.30.223 205.14 Wed Mar 18 13:24:26 2015
hp LaserJet 4250 [ED487E]._printer._tcp.local TXT IN 240 10.125.30.223 197.18 Wed Mar 18 13:24:26 2015
hp LaserJet 4250 [ED487E]._printer._tcp.local TXT IN 240 10.125.30.223 196.42 Wed Mar 18 13:24:26 2015
hp LaserJet 4250 [ED487E]._printer._tcp.local TXT IN 240 10.125.30.223 208.15 Wed Mar 18 13:24:26 2015
hp LaserJet 4250 [ED487E]._pdl-datastream._tcp.local SRV/NBSTAT IN 240 10.125.30.223 207.35 Wed Mar 18 13:24:26 2015
hp LaserJet 4250 [ED487E]._pdl-datastream._tcp.local TXT IN 240 10.125.30.223 200.64 Wed Mar 18 13:24:26 2015
hp LaserJet 4250 [ED487E]._ipp._tcp.local SRV/NBSTAT IN 240 10.125.30.223 209.44 Wed Mar 18 13:24:26 2015
Visible-printer :
_printer._tcp.local PTR IN 4500 10.125.26.29 3745.82 Wed Mar 18 13:24:51 2015
_universal._sub._ipp._tcp.local PTR IN 4500 10.125.26.29 3694.14 Wed Mar 18 13:24:51 2015
_ipp._tcp.local PTR IN 4500 10.125.26.29 3628.81 Wed Mar 18 13:24:51 2015
_pdl-datastream._tcp.local PTR IN 4500 10.125.26.29 3616.14 Wed Mar 18 13:24:51 2015
_http._tcp.local PTR IN 4500 10.125.26.29 3793.56 Wed Mar 18 13:24:51 2015
XRX9C934E25C52D.local A IN 120 10.125.26.29 355.03 Wed Mar 18 13:24:51 2015
Xerox WorkCentre 3615 (25:C5:2D)._printer._tcp.local SRV/NBSTAT IN 120 10.125.26.29 130.45 Wed Mar 18 13:24:51 2015
Xerox WorkCentre 3615 (25:C5:2D)._printer._tcp.local TXT IN 4500 10.125.26.29 3670.33 Wed Mar 18 13:24:51 2015
Xerox WorkCentre 3615 (25:C5:2D)._ipp._tcp.local SRV/NBSTAT IN 120 10.125.26.29 389.55 Wed Mar 18 13:24:51 2015
Xerox WorkCentre 3615 (25:C5:2D)._ipp._tcp.local TXT IN 4500 10.125.26.29 3640.60 Wed Mar 18 13:24:51 2015
Xerox WorkCentre 3615 (25:C5:2D)._pdl-datastream._tcp.local SRV/NBSTAT IN 120 10.125.26.29 210.97 Wed Mar 18 13:24:51 2015
In order to learn other printers we may need to use specific app provided by printer vendor on the client or configure the printers to send these service IDs.

The net 451 issues made it not work after a while but it affected the entire RWW site not just remote access:
http://blogs.technet.com/b/sbs/archive/2014/01/13/troubleshooting-an-unexpected-error-occurred-message-when-using-remote-web-access-to-connect-to-computers.aspx
Careful if you try and uninstall it, you'll need to put back net 4.0 and reconfigure some stuff.
Did it ever work?
Make sure the users have installed the certificate they need and turn on compatibility mode in IE (also make sure IE isn't locked down and disabling activeX).:
https://technet.microsoft.com/en-us/library/dd701173%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396
-- Al

SQL Authenticator Issue not able to see roles /groups in BPM Worklist

Hi ,
I had configured the SQL Authenticator in Web logic using the SQL Authenticator default scripts and i have inserted few users.
I am able to login to the Workspace using the users available in DB but i am not to able to see his group / role to which he belongs.
Even the user who belongs to Administrator group not able to see Administrator tab in BPM Workspace.
I have already added dbprovider.jar and i have configured jps-config.xml accordingly such that it point to custom SQL Authenticator.
Even set the Control flags to "SUFFICIENT".
Please some one help me on this.
Its a high priority task.
Regards,
Santosh H

As u are talking about the IR ID components, u may have a look here
For IR components
The specified item was not found.
For ID components
Security: Access Control via Assigned Users
Regards,
Prateek

Not able to see the charts in the default SampleAppLite webcat in OBIEE 11g

I have installed OBIEE 11g on my dekstop and it was installed successfully. Then i started the BI Services and login to the dashboard using the weblogic user and Pwd, everything is coming fine but charts are not coming. Do we have to start some Java services also. I restarted all the services also using em and it shows all services started successfully. Can you please help me regarding this.
Regards,
Raj

Hello Siva -
It is historical data that i have uploaded into the infocube for Demand Planning Purpose.
I have recreated everything and uploaded the data again into the infocube, able to see the data in the infocube, created the MPOS, created the CVCs, Created the Planning Area, activated the Planning Area,assigned the infocube to the history key figure while creating the planning area, created the Periodicities, created the Planning Book. but still not able to see history in the keyfigure.
Regards,
Suresh Garg

User able to see activity belongs to High user

Similar Messages

Maybe you are looking for