User Wise Authorization/profile report needed

Hi Gurus,
I need a Report where in Input screen user name is provided & in the output I required User wise
Profile , Authorization & transaaction code assigned to this user .
can i get similar type of Report developed by some of the gurus .
Is there any BAPI is availavle for this .
Thanks & regards.
Kiro

Hello Kiro,
You can trace down table for any SAP object by pressing F1 (help) and selecting technical information.
you will either get value table in data element --> data domian or it will directly give you transparent table name.
For example:
For table objects we can locate them in table DD02L and DD03L.
In same way you can try for other object like reports, function modules etc.
Hope this helps!
Thanks,
Augustin.

Similar Messages

Restrict user group authorization on reporting

Hi all;
I've problem restriction of user groups on monitoring reports.
By using RSSM transaction I gave only one user group to reach the reports but I still see the other groups on report.
Thanks.
Korel.

Hi Chris,
There is no standard report available for this purpose. However all this information is stored in table UME_STRINGS.
You can write your own SQL queries to generate such reports. However please note that this table is not normalized, and it's a master UME table. You should use it strictly for READ ONLY purpose.
For a sample code you which i wrote some time back, you might refer:
http://forums.sdn.sap.com/thread.jspa?threadID=2088099&messageID=10859334#10859334
Thanks
Prashant

User wise Authorization on Z-screen

Hi friends,
I have developed some customized screens which contain multiple table controls and corresponding input/output fields.
Its working properly.
Now my requirement is that depending upon user specific table control and its corresponding fields need to get in active mode and other in deactive mode.
e.g. one table control is for sales invoice and other is for import invoice.
so when SD user login only sales invoice table control need to active and when MM user login only import invoice Table control need to get activated.
How to do this?
Do i go for Authorization object ?
please reply.

Hi,
First ask your Functional Consultant or Baisis Team that any Convention followed in User ids of Sales Team or any other way recognise the Sales Team or Other Team.
1.If you can distinguish between users then, in your program.
If sy-uname = 'SALES1'.
Then you can Grey out the Fields of the Required Table Control by LOOP AT SCREEN.
Endif.
2.Or What you can Do is, go to SU03 and Look at the ID's Created and try to find out any common charaterisitc between the Sales Users.If any do that way.
Thanks & Regards,
Vamsi.

Report on user wise application wise page views

How to get the application and user wise page view report in apex?
Sanjay

>
Please update your forum profile with a real handle instead of "user12957777".
How to get the application and user wise page view report in apex?What do you mean by "the application and user wise page view report"? If this refers to the built-in activity logs, this information is available through APEX views. See:
<li>APEX views: Home > Application Builder > Application > Utilities > Application Express Views
<li>Monitoring Activity Within a Workspace
<li>Creating Custom Activity Reports Using APEX_ACTIVITY_LOG
Note that the underlying logs are purged on a regular basis, so for the long term you need to copy the data to your own tables, as Martin handily suggests here.

To read an authorization profile.

Hi,
I am trying to provide authorization in a HR report. An administrative person can execute the report. At this momet, a user can see the information of all employees. Instead, the users should be restricted for a group of employees whos organizational key has been assigned in his authorization profile. I am trying this with P_ORGIN authorization object. I can use P_orgin with single static organizational key. But, in this report, I have different sets of organization key for different administrative users. Fot this reason, I will need to read the users authorization profile to get the set of organizational key. Can anyone tell me how can I read the authorization profile for a particular user who is using the sytem so that the program can check the set of organizational key.   I am using R/3 version 4.6C.

Or more generally (for multiple users:
REPORT ztest NO STANDARD PAGE HEADING LINE-SIZE 255.
TABLES: usref,
        usr11.
DATA: BEGIN OF itab OCCURS 0.
        INCLUDE STRUCTURE usref.
DATA: END OF   itab.
DATA: BEGIN OF itab1 OCCURS 0.
        INCLUDE STRUCTURE usref.
DATA: END OF   itab1.
DATA: BEGIN OF itab2 OCCURS 0,
        user    LIKE usref-user,
        profile LIKE usref-profile,
        ptext   LIKE usr11-ptext,
      END   OF itab2.
DATA: old_prof LIKE usref-profile,
      prof_desc LIKE usr11-ptext.
itab-user = sy-uname.
APPEND itab.
itab-user = 'USERNAME'.
APPEND itab.
CALL FUNCTION 'SUSR_GET_PROFILES_OF_USER'
     TABLES
          users    = itab
          profiles = itab1.
SORT itab1 BY profile.
LOOP AT itab1.
IF itab1-profile <> old_prof.
    SELECT SINGLE ptext INTO prof_desc
      FROM usr11
      WHERE langu = sy-langu
      AND   profn = itab1-profile
      AND   aktps = 'A'.
    old_prof = itab1-profile.
ENDIF.
itab2-user    = itab1-user.
itab2-profile = itab1-profile.
itab2-ptext   = prof_desc.
APPEND itab2.
ENDLOOP.
SORT itab2 BY user profile.
LOOP AT itab2.
WRITE: /001 itab2-user, itab2-profile, itab2-ptext.
ENDLOOP.
Rob

VIRSA tables for users, roles and profiles sync?

Hello,
I am in a customer, implementing CC 5.2. At the first time, we tried CC 5.2 in DEV environment, and when everything was OK, we redirect RFC connectors to QA environment.
After doing user, roles and profiles sync in DEV and in QA environment too, I have 4.500 user (1.100 from DEV + 3.400 from QA) when I recover all users "*" with "user level - risk analysis" from the "Informer" tab.
It seems that "users, roles, profiles, sync" works like and "APPEND", but I did a COMPLETE syncronization not an INCREMENTAL.
If I start an analysis for QA environment, CC works properly and only analyse QA users (3.400). But I would like to clean CC tables (users, roles and profiles) in order to have a clean copy of QA in CC.
Which VIRSA tables (users, roles and profiles) I need to clean?
It is necessary to do the same with authorization and text objects? Which would be these tables?
Thanks in advance,
Victor

Hi all,
SAP GRC Support provides a script which allows you to remove a connector since it does delete all data link to it. Anyway, I would recommend a deep analysis of it and find out if it does what you really want to do.
Víctor, if what you want to do it is just to remove all user, role and profile master data (stored in tables VIRSA_CC_SYSUSR and VIRSA_CC_GENOBJ) you could upload a text file using data extractor functionality with the delete field set to X. Doing so user, role and profile master data will be removed from CC database.
In order to use data extraction functionlaity you connector must be of type "File Local".
Be careful about removing data directly from DB since, as Prem states, you might loose the DB consistency.
Hope it helps. Best regards,
Imanol

Generate authorization profile with RSSM

Hi,
I have a problem with the central User Management.
We have the Central User Management in a CRM-System.
1) In BW we generate an authorization profile with the transaction RSSM. Automatically the system assign the profile to an user.
2)When we additionally assign a BW-role from Central User Management (CRM-System) to the same user, the authorization profile which is generated in BW (Transaction RSSM) is deleted.
Unfortunately we can not forego to the functionalty in rssm.
Thanks for any ideas in advance

THX for your answers,
I have twist and turn this problem and I see no way around it. It seems like it going to be a lot of configuration in ACS but it is only for one time. It better to do that job with the installation rather than troubleshoot every time the PC administrators type the wrong vlan name.
As Bastien wrote in his answer:
"so basically create an internal group, add user to this group, and create an access-policy that match this group and apply an authorization profile with the vlan you want"
Thx again for your input.
///A.hed

Rename users and transfer Discoverer reports

I hope someone can help. We are running Discoverer 10g with a database EUL. The reports have been operational for several years and users have edited and saved their own versions of standard reports. However it has been decided that a large number of these users (~100) should have their accounts renamed to bring them in line with other corporate usernames. User access to their reports needs to be preserved so that their new accounts look like their old (other than account name / password). These users are Viewer only users so they cannot share reports.
Does any one know of an alternative way of doing this other than the labour intensive way of: creating a new set of Discoverer users (in the new format), logging into each old account in Desktop and sharing all the reports to the equivalent new user. Then repeating this for all 100 users? Please help save my sanity.
I don't suppose that there is a simple solution of renaming Discoverer users.
But I am hoping that maybe the Desktop admin command line (which I am not very familar with) may be of some help.
Or possibly the more scary option of tinkering with the EUL tables on the EUL owning schema.
Any advise welcome.
Duncan

Hi,
There is no way to rename database users created with a CREATE USER command. You would have to use a database import and export and remap the schema. However, if you have if you have two database users, USERA and USERB where USERA is a Discoverer user who as saved Discoverer reports in the database, then you can move the reports from USERA to USERB by updating the EUL.
Assuming that USERB has not used Discoverer then only USERA will have a record in the EUL5_EUL_USERS table. You can update the table change EU_USERNAME from USERA to USERB so that USERB has a user record in the EUL. USERB will then have access to USERA's workbooks. The workbooks are all held in the EUL5_DOCUMENTS table, the owner of the workbook is found using a lookup in EUL5_EUL_USERS table.
Rod West

Need steps to create: Users, and then allocate authorization profiles.

Hello,
I have set up release procedures using a how to doc which was posted an sap123.com. It doesnt go through how to do this, only gives a screen shot. The SAP environment is a test environment for training. We have maybe 4 users existing in system. I would like to know how to first create a user, then go through PFCG and create and allocate authorization profiles. They need to be able to approve PR's/ PO's using the two release codes and release groups I have set up. The steps I followed are posted here: http://www.sap123.com/showthread.php?t=59.
Thanks for any help.

Thanks. I do have authorization to create users/ roles & such. I have created 3 specifically to test the workflow I am trying to set up that contains release procedures.
In PFCG - I created a new role MATMGT. On the Menu tab, Assign Transactions screen, could someone please tell me what the Transaction Code would be so that, when I goto the Authorizations tab and click on the Change Authorization Data button, I get a "Materials Management: Purchasing" row displayed in the Change Role: Authorizations screen. I am following http://www.sap123.com/showthread.php?t=59 - and am stuck at the "Create and allocate authorisation profiles" section, as there are no steps detailing the usage of PFCG.

Report to view user nm, authorization objects, activity, transaction code.

Hi All,
I want to view a user-wise report that displays the transaction code, authorization objects and activities for which the user has authorization.
Is there any standard report to view all this at a glance?
Can anybody help me on this?
Thanks.

u can try SUIM tcode
its really helps u
regards,
Abhilash

Check user role/authorization during Web report run-time?

Hello again,
I ran into a problem. I need to check <b>user's authorization during webtemplate execution (run-time)</b>. I want to have a possibility to allow in one web template extra functionality (through template menu) to key users. Normal users, who are running same report, should not have this extra menu visible.
Is it possible to check user authorizations or roles during web-template run-time?
Thank you!
Vitaliy

Hi Harinam,
From my logic your are right.
The restriction is in two new roles (Requestor and Approver role).
But ->
If I assign my approver role the selection possiblities of the request types during the AR creation is restricted and the AR search function does not work.
If I assign my requestor role the restriction of the request type is not there, but the AR search function works again. :-(
If I assign the original approver role of sap I have the same behavoiur for the AR search.
Both new roles are a 1:1 copy of the SAP standard roles - > Exception, ristriction on request type 'Execption Approval' is not displ.
I have execute ST01 now. If I try to open the log, the system syst "No records that correspond to these search criteria".
But I have found something else.
The problem appears only if I search for Process ID "Access Request Approval Workflow".
If I select other Process ID such as "Control Assignment Approval Workflow" or "Fire Fighter Log Report Review Workflow", everything works fine.
Very strange!
BR
Melanie

Need to call user defined table in Report

Hi there,
In my report, need to call user defined database table. This table contains 2 columns one for checkbox. After calling this table, user has to check required rows and save changes. can we create transaction code for this table and call from within report? anybody pls suggest how to implement this requirement.
Regards,
Zakir.

Zakir,
U can do it in both the ways (TXN or rept).
If rept, use an itab to check and insert rows to the DB tab.
If mod pol, use a table control and update db tab...
Reward if helpful,
Karthik

Authorization profile for partner user account

Can anyone please tell me which authorization profile should be assigned to the user account that a partner of ours will use when they use basic authentication to sign on to our PI box when they consume a web service?
Regards
Philip
Edited by: Philip Koch on Mar 16, 2009 3:38 PM

Can anyone please tell me which authorization profile should be assigned to the user account that a partner of ours will use when they use basic authentication to sign on to our PI box when they consume a web service?
Regards
Philip
Edited by: Philip Koch on Mar 16, 2009 3:38 PM

Need to print Current user Name in crystal report in B1

Hi all,
In Crystal reports there are 2 current user fields
CurrentCEUserName
and CurrentCEUserID
I have tried to add these fields to the footer of my reports, but no information comes out.
Is there any way to find out the current user and print their user name on the report?
Users have 2 id's. Where can I find this info and add it to the report.
A) the windows user id if possible
B) the SAP user id
Thanks
Chris

HI,
If you want SAP user id ,add OUSR table and pick user id from that table.
or check http://www.crystalreportsbook.com/forum/forum_posts.asp?TID=14295
Thanks,
Neetu

Query related to Authorization profile.

Hi Professionals,
Please help me out as I'm not a BASIS consultant but PP.....
We've created Users profile and assigned them profiles that contain a particular bunch of Transaction codes module wise.
Now we want to to create and assign such a Authorization profile to Users which will contain all Display transaction codes either related to all modules OR that particular module only say PP, MM, FI, CO etc.....
For example
MM03- Display material master
CS03- Display material BOM
CR03- Display work center
ME53N- Display Purchase requisition etc.
Is there any standard profile for that that are already provided by SAP? If it's there, how do we know that are related to what module?
Suppose if we assign such profiles, what will be implications related to future and user discipline?
Thanks & Regards,
Abu Arbab

Hi Abu, don't worry about being a PP consultant, most of us here are not Basis either, rather we focus on security.
There are no standard roles delivered by SAP which give this. There are standard SAP display roles but none will include all the display transactions for a module.
What you should do is get each functional team to list the dispay transactions which are used by the business processes which they have configured. There is no point in creating a display role with 500 transactions if the business processes only requires 30 transactions. Access is more usually required for business processes rather than module so you would often need to combine your modular display roles to cover a single process.
By building the roles to include the transactions you use rather than are available, you also avoid one of the mistakes often seen with using standard SAP roles - users having wider authorisations than they require to perform their job.

User Wise Authorization/profile report needed

Similar Messages

Maybe you are looking for