User analysis at Action level and Permission level

Hi Gurus,
I am totally confused by the way our CC is working while using it for User Analysis. I understand that during Risk Analysis for a user with Report Type "Action Level" will give the conflicts at the transaction level for the user and with Report Type "Permission Level" will give the conflicts at the Object level for the user. Also the permission level report includes the results of the action level report as well and hence Permission level report is more detailed & reliable.
But now when I run the analysis report for a particular user both at Action & Permission level...the user is not getting any conflicts at Action level but it is showing conflicts at the Permission level. For another user the vice versa is happening. Could anyone help me in understanding the above 2 scenarios?
Regards,
Lakshmi.

Hi
A user to be need to have a action level conflict should have that transansaction code access only ie object s-tcode = xyz transaction code.
Similarly for a user to be reported in permission level conflict the user should have access to
S_tcode = xyz transaction code Plus all other authorisation objects...Or in other words if the user is missing any authorisation object it wont be reported there...
So just check what authorisation object level check is enabled for that transaction code in the rule architect tab.. Thereafter see whether user have access to all those authorisation object with the values specified...
Parveen

Similar Messages

Schema level and table level supplemental logging

Hello,
I'm setting up bi- directional DML replication between two oracle databases. I have enabled supplemental logging database level by running this command-
SQL>alter database add supplemental log data (primary key) columns;
Database altered.
SQL> select SUPPLEMENTAL_LOG_DATA_MIN, SUPPLEMENTAL_LOG_DATA_PK, SUPPLEMENTAL_LOG_DATA_UI from v$database;
SUPPLEME SUP SUP
IMPLICIT YES NO
-My question is should I enable supplemental logging table level also(for DML replication only)? should I run the below command also?
GGSCI (db1) 1> DBLOGIN USERID ggs_admin, PASSWORD ggs_admin
Successfully logged into database.
GGSCI (db1) 2> ADD TRANDATA schema.<table-name>
what is the deference between schema level and table level supplemental logging?

For Oracle, ADD TRANDATA by default enables table-level supplemental logging. The supplemental log group includes one of the following sets of columns, in the listed order of priority, depending on what is defined on the table:
1. Primary key
2. First unique key alphanumerically with no virtual columns, no UDTs, no functionbased
columns, and no nullable columns
3. First unique key alphanumerically with no virtual columns, no UDTs, or no functionbased
columns, but can include nullable columns
4. If none of the preceding key types exist (even though there might be other types of keys
defined on the table) Oracle GoldenGate constructs a pseudo key of all columns that
the database allows to be used in a unique key, excluding virtual columns, UDTs,
function-based columns, and any columns that are explicitly excluded from the Oracle
GoldenGate configuration.
The command issues an ALTER TABLE command with an ADD SUPPLEMENTAL LOG DATA clause that
is appropriate for the type of unique constraint (or lack of one) that is defined for the table.
When to use ADD TRANDATA for an Oracle source database
Use ADD TRANDATA only if you are not using the Oracle GoldenGate DDL replication feature.
If you are using the Oracle GoldenGate DDL replication feature, use the ADD SCHEMATRANDATA command to log the required supplemental data. It is possible to use ADD
TRANDATA when DDL support is enabled, but only if you can guarantee one of the following:
● You can stop DML activity on any and all tables before users or applications perform DDL on them.
● You cannot stop DML activity before the DDL occurs, but you can guarantee that:
❍ There is no possibility that users or applications will issue DDL that adds new tables whose names satisfy an explicit or wildcarded specification in a TABLE or MAP
statement.
❍ There is no possibility that users or applications will issue DDL that changes the key definitions of any tables that are already in the Oracle GoldenGate configuration.
ADD SCHEMATRANDATA ensures replication continuity should DML ever occur on an object for which DDL has just been performed.
You can use ADD TRANDATA even when using ADD SCHEMATRANDATA if you need to use the COLS option to log any non-key columns, such as those needed for FILTER statements and KEYCOLS clauses in the TABLE and MAP parameters.
Additional requirements when using ADD TRANDATA
Besides table-level logging, minimal supplemental logging must be enabled at the database level in order for Oracle GoldenGate to process updates to primary keys and
chained rows. This must be done through the database interface, not through Oracle GoldenGate. You can enable minimal supplemental logging by issuing the following DDL
statement:
SQL> alter database add supplemental log data;
To verify that supplemental logging is enabled at the database level, issue the following statement:
SELECT SUPPLEMENTAL_LOG_DATA_MIN FROM V$DATABASE;
The output of the query must be YES or IMPLICIT. LOG_DATA_MIN must be explicitly set, because it is not enabled automatically when other LOG_DATA options are set.
If you required more details refer Oracle® GoldenGate Windows and UNIX Reference Guide 11g Release 2 (11.2.1.0.0)

How to improve the query performance in to report level and designer level

How to improve the query performance in to report level and designer level......?
Plz let me know the detail view......

first its all based on the design of the database, universe and the report.
at the universe Level, you have to check your Contexts very well to get the optimal performance of the universe and also your joins, keep your joins with key fields, will give you the best performance.
at the report level, try to make the reports dynamic as much as you can, (Parameters) and so on.
and when you create a paremeter try to get it match with the key fields in the database.
good luck
Amr

Dunning Old dinning level and dunning level

Hi experts,
I have one issue in dunning. the issue is where the dunning history for particular customer shows as old dunning level as 3 and dunning level as 2.
i have checked the customer master there is change in the dunning procdure. But the document and master data shows the correct dunning level with the new procdure.
so i didnt understand what is the OLD dunning level and dunning level for the same cusomer. the issue is only with one customer.
I have also checked with old procdure with same customer in table MHNK. there are some notices done. but how come the current invoice shows the old dunning level for the same invoice.
can any once explain me how to proceed.
Regards
Ashok

Hi
Thnks for the reply so we need to apply this note for making the old dunning level and dunning level makes equal after you run the program.
Also one more doubt, since i have observed that the dunning after the parameters entered. looks like this
Parameters were maintained
Dunning selection executed, job deleted
Dunning notice printed, job deleted.
the above doesnt means that they will update the old dunning level right.
Regards
Ashok

How to load item level and location level member in demantra

This is in context where we are not using any integration of demantra with either Ebiz or E1 system.
Data is present in flat file.
As per i know, integration interface can only export the data for item level and location level but can not import data for these level.
the second thing i know is that when we create data model then load_data.bat file should have been created in Demand Planner/Desktop directory. But this didn't got created. So i am not able to use load_data.bat file for uploading data.
The third place ,i think is from worksheet thru edit method ( i am not sure about this).
But i want to upload the data in bulk for item level and location level. Can it be done without any customization i.e without creating any sql loader file etc ??

Hi Abhishek,
The standard practice to load data for items/ locations and sales is through the DATA MODEL definition only. One should use LOAD_DATA.BAT file in normal scenario for loading data into Demantra staging tables from tEXT files.
In case you are having trouble with loading data using LOAD_DATA.BAT file, then do the following:
- modify your DM definition to Data tables instead of flat files
- use SQL loader to upload data in correct format into Demantra's staging tables "T_SRC_XXX"
- Run EBS Full Download workflow to download data into demantra's main tables.
Integration interfaces should not be used to load basic sales data into Demantra.
Hope this helps.
Thanks
Raj
(http://oracledemantra.blogspot.com)

What are Header Level, Item Level and Schedule Level data?

Hi ,
Can anyone plz explain me what are Header Level, Item Level and Schedule Level Data in the R/3 system , means what actually is the data structure they contain. If is there any document or links available plz do send. Urgent.
Thanks
Prashant singhal

Hi Prashant,
check this link.
[Extractors;
Regards,
Harold.

[svn] 696: Added package level and class level javadoc, where is was missing.

Revision: 696
Author: [email protected]
Date: 2008-02-29 11:49:08 -0800 (Fri, 29 Feb 2008)
Log Message:
Added package level and class level javadoc, where is was missing.
Modified Paths:
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/mxml/rep/AnonymousObjectGraph.jav a
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/mxml/rep/Array.java
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/mxml/rep/AtEmbed.java
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/mxml/rep/AtResource.java
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/mxml/rep/LineNumberMapped.java
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/mxml/rep/Model.java
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/mxml/rep/MovieClip.java
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/mxml/rep/MxmlDocument.java
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/mxml/rep/Primitive.java
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/mxml/rep/Script.java
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/mxml/rep/XML.java
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/mxml/rep/XMLList.java
Added Paths:
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/mxml/rep/package.html

Hi,
The javadoc is generated to directory /home/usr/doc and I have added a package.html as mentioned. But no change found.
There is also no package directory in the /doc.
My original problem is that in the index.html, there are three frames, the right hand side frame showing the overwiew. In the overview page, there is the table of packages with two columns, the left columns showing the package name, while the right column showing blank.
How to generate comments to the right column in the table in the right hand side frame in the index.html?
Thanks,
Wing

Capture Excise on Purchase through 1st Level and 2nd Level

Dear all,
Please clear about the Functionality to Capture Excise on Purchase through 1st Level and 2nd Level Dealer Invices in details please.
Regards,
Vishal

hi,
for dealer invoice we first do j1iex here we capture the excise duties
then we do migo &
again we do j1iex to post the excise invoice.

DIFFERENCE BETWEEN SINGLE LEVEL AND MULTI LEVEL COSTING

Sir,'
Please explain the difference between Single Level and Multi Level Costing in Detail
thanking You

While using material ledger, we can use the single level or multi-level price determination for valuation of inventory.
Procurement processes are used in Product Cost Controlling to determine procurement costs and to present those costs. Purchase Order, for example, is single-level procurement and Production is multilevel procurement.
Single-level material price determination calculates the periodic unit price for a material. The standard price and the cumulative single-level differences of the period are taken into account. Single-level material price determination takes into account the differences that arise directly when a material is procured.
Multilevel price determination calculates the periodic unit price for a material. The standard price, the single-level differences cumulated in the period, the differences between planned and actual prices, as well as input material differences (multilevel differences) are all taken into account.
Single-level material price determination is a prerequisite for Multi-level price determination.

Count at bin level and quant level?

what is the difference between cycle count at bin level and quant level?
Thx

If you use cycle counting inventory at quant level, the system does not set the inventory block for the entire storage bin. It sets the block instead for the quant to be inventoried.
You count only the selected materials, not all materials in the storage bin. If you manage storage bins with mixed storage, these storage bins are accessible for stock movements with other quants.
There can be open transfer orders for all materials that were not flagged for cycle counting in the inventory document. You can also create transfer orders for these materials during the inventory.
The system saves the inventory data at quant level.
In a stock movement, if you move a quant from one storage bin to another, the system deletes the quant in the source storage bin and creates a new quant in the destination storage bin.
Because the system stores the inventory data for the cycle counting inventory at quant level in the quant data, any inventory data that you previously entered is lost in this type of stock transfer.

Difference b/w mat level and Sku level in AFS

hi
in AFS terminology what does the term material level and SKU level mean? and what does SKU valve mean?

Hi
AFS materials are attached with Grids in which using characteristics ,dimensional values are entered.
Ex Shirt is manufactured in different sizes say L,XL,S,M and colours say blue,green and white.
Size and colour as used as dimensions(characters)and l,xl,blue... used as dimensional values.
If stock of shirt is say 25 pcs.out of which L Blue is 10 and XL green is 15 pcs.
When we note stock at material level ,we say as 25
at Grid level we say L BLUE shirt is 10 pcs which SKU level.
Hope I am clear.
Regards,
Raj.K

Infoobject for technical level and professionel level

Now, we want to create infoobject for technical level (e.g. high, middle, primary) and professionel level(e.g. high, middle, primary), should we create these kind of infoobject with time dependent, e.g. let's say, last year person A has technical level with middle, but this year start person A was promoted to high level.
1) should we consider about this kind of infoobjects with time dependent?
2) should we make 0datefrom and 0dateto as attr. of infoobject technical level and professionel level?
which idea is correct? Pls share your experience. Thanks!
Edited by: hi ni on Apr 19, 2008 5:37 AM

Hi Nilesh,
For overall release, please tick the overall release indicator for the PR document type.
Path > MM>PUR>PR>Define Document Types. For the particular document type tick the overall release indicator.
This can be done to the particular release group as well
Path->MM>PUR>PR>Release Procedure>Procedure with Classification>Set Up Procedure with Classification. For the particular release group tick the Overall release indicator.
Regards,
Raj

Undersanding RBAC vs. Class Level and Instance Level Permissions

I am finding situations where the Administrative User can perform actions (permissions) on objects that fall outside the assigned scope for those objects. For example, I create Public Task Sequences for our Departmental Admins and assign those Task Sequences
to the Public scope. I also create a Public Role that only gives the user the ability to view (Read Only) those publically scoped Task Sequences. I also assign those same Administrative Users to another Role which gives them all of the permissions for the
Task Sequences Package Class but those role permissions are scoped to their specific departmental scope therefore should not apply to any of the objects (Instances) under the publically scoped objects. Unfortunately, I am finding that users can perform actions
on those publically scoped objects, like moving them, even though they don't have the Move Object permission for the Public Role. There are other cases like this so I am trying to find the documentation that explains which permissions affect all objects (instances)
under a specific Class and ignores scope?

Yes, I know this is an old post, but I’m trying to clean them up. Did you solve this problem, if so what was the solution?
Within the CM12 R2 Toolkit, look at RBAviewer, this will help you understand what each user can or can’t do.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

Deletion of the Purchase order at the item level and header level

Hi Gurus,
We are using SRM 7.0 system.
In standard SRM 7.0, the PO can be deleted at header level and at line item level. I need to know the differnce between these deletions. I found that if the PO is deleted at the line item level the deletion indicator (DEL_IND) field in BBP_PDIGP table is 'X'.
But i could not find any clue to find the PO which is deleted at the header level. I need to code this logic in a report .
Kindly provide your valuable inputs.
Thanks,
RK

There are two ways:
1. From the Header by clicking the DELETE button. And this is only possible when the PO is not yet output to Vendor.
2. The second way is to delete all the items in the PO. This is possible any time irrespective of the output sent to the vendor. But provided if there are no follow-on documents for this.
Some times we could see the Deletion icon active in Header , it is because there is change version existing.
When a PO is created and ordered, this is the first version of the PO. And this PO is sent to the backend and output is sent to
the vendor.
Now when you make a change and hold it, SRM creates the 2ndversion of this PO. Then when you delete this PO, SRM marks this 2nd
version of PO to closed. Also you receive the pop-op confirmation that PO was deleted at this point. However, this PO deletion is never sent to the backend and output is not sent to the vendor since this PO has never been ordered. This version is the Change Version. This is shown after the PO number field if you pay attention on the screen.
When you search for the PO, it will show you the ordered PO (No change version shown after the PO number). The system does not show you the deleted version which is version 2. That is why you see status is 'ordered'.

How to split presentation level and business level using two ATG instances

Hello All!
We are investigating possibility of splitting ATG presentation (web store with jsp pages and other presentation components) and business (ATG components such as Pricing, Catalog, etc.) levels. The first idea that we have is simply start two instances of ATG. One instance will serve client requests (presentation level) and communicates with another ATG instance (business level) where all ATG components are situated.
The main problem is a Nucleus container which is used for accessing all ATG components. And we don't know right solution how to point to a Nucleus container that is situated on a remote ATG instance. Right now we have two ideas how to establish communication between two ATG instances:
- try to replace local Nucleus container by remote one using RMI;
- do not replace Nucleus container by implementing some custom filter that can redirect all servlet requests to another ATG instance. In that case we will have two Nucleus containers.
What do you think about all this? Do you have any other solutions how to solve the task? Maybe we lost something? Can we deploy a cluster of ATG instances that will communicate between each other?
Thanks in advance.
Andrey.
Edited by: 945758 on Jul 11, 2012 7:00 AM

Yes ATG system can have multiple nodes grouped in one or more clusters managed by load balencer
If the services you are talking about are inherently ATG services like login, add to cart, checkout then its better to implement it with ATG.
ATG provides and support both REST and SOAP based Webservice and allows you to expose any ATG component as service thus making it available outside ATG space.
To be able to manage load better you can split your servers to page serving servers and services oriented servers and place them into multiple clusters.
Though I haven't seen anyone using this kind of topology so not sure whether it's there is any challenge in setting up this topology.

User analysis at Action level and Permission level

Similar Messages

Maybe you are looking for