Users have more than one profile for the same role

Hello,
As I said in my earlier post I'm rather new to SAP.
I'm doing now the security audit of my SAP system. In particular, I'm checking whether business users have access to DEBUG functionality.
I have run report 'Users by complex selection criteria' and found certain number of such users. Then I looked further and discover that all these users have role X assigned to them. The profile P2 of the role X displayed in PFCG has DEBUG functionality deactivated. After second look I discovered that all these users have earlier profile P1 for the same role X assigned to these users. This profile P1 contains the functionality in question.
I solved the issue by revoking the role X from the users and assigning it again. Both P1 and P2 profiles were removed from the users and only P2 was reassigned again.
I used to think that role may have only the profile that is displayed in PFCG? Also, I used to think that if the role profie is regenerated the newly generated profile automatically replace the old one assigned to users. Am I wrong?

Hi Pavel
In simple and short ..
Role contains authorization objects..
Maximum limit of authorization objects for a role is 150 .
So a role can accommodate 150 authorization objects.
New Profile ABC is created , when ever you create a new role. 1-1 relation.
But if a role has more than 150 authorization objects .. then automatically a new profile ABC01 will be created and it will also be aligned to that role .
if role has 400 auth objects, then profiles will be ABC ,ABC01 ,and ABC02
i hope this helps you
Cheers
Pavan M

Similar Messages

Can I have more than one library for the same ipod nano?

I have a desktop pc that I have originally setup my nano on. I have about 400 songs on that computer. I have about 500 other songs on my laptop, can I put itunes on to both computers and have them add the songs from each one respectively without erasing the other? and if so, how?

Type 61675 into the search bar under the support tab on this website. "How to use ipod with multiple computers"
Basically, you have to change your preferences to manually manage instead of automatically update.

I have more than one copy of the same song in my iTunes. Some have the icloud symbol next to them and some do not. I need to clean this up but I am afraid to delete the songs for fear I will lose them.

I have more than one copy of the same song in my iTunes. Some have the icloud symbol next to them and some do not. I need to clean this up but I am afraid to delete the songs for fear I will lose them. Please help! On top of that my Mac keeps telling me my start up disc is full and I am deleting stuff like crazy!

Welcome to the  Discussion Forums
It won't be a problem if you delete your extra copies.
I don't download very much to my tv, I do sometimes if I'm in bed but usually I do it from itunes. However if you have not fully downloaded something to the tv it is possible to start the download from itunes as well, you have likely activated 'check for downloads fin itunes in some way, could be by opening itunes, selecting 'check or downloads' from the advanced menu or that you simply have automatically check for downloads set in your prefs and it has checked coincidentally.

Can we have more than One DC for the sales organization and Plant combo?

Can we have more than One DC for the sales organization and Plant combination?
If yes can you please site a practical example to clear the picture

Hi
First of all in SAP sales orgs are assigned to distribution channels and the combination of sales org and distribution channel which is called distribution chain is assigned to plant
There is no direct link between sales org and plant or distribution channel and plant
So sales org and plant combination doesnot exists and
it is only sales org and dist channel combination which is called as distribution chain only exists
Nowhere in SAP we are assigning sales org to plant
It is because sales org alone doesnot make sense and its combination with dist channel only makes sense
because sales org is a selling org and the distribution channel is the route to sell and this combination has only to pick the material from plant to process sales to customers
The relation between sales org and distribution channels is many to many and also vice versa
Multiple sales orgs can be assigned to one distribution channel and
Multiple distribution channels can be assigned to one sales org
Similarly the relation ship between Distribution chain (sales org+dist channel) to plant is also many to many and vice versa
Similarly plants from other company codes can also be assigned to Distribution chain to facilitate intercompany processes
In whatever way look at it the multiple distribution channels can be fit anywhere
Regards
Raja

Can there be more than one port for the same logical system

Can we have more than one TRFC port for tranferring data from one logical system to another?
The requirement is to transfer same basic idoc type from one logical system to another through two different ports. Is it possible?
For eg. some specific data (country specific) for the same basic idoc type can be sent through a separate port and the other data through a different port inorder to distinguish between the two.

Hi Shital,
I don't think so. Because of that what i told you. There would be a dirty trick (back routing) to solve your issue. But its quite difficult and not standard. You create two http receiver services and two http sender services. You route your message depending on payload to the one or the other http receiver channel. The receiver is in both cases: THE XI! Now you have a second message, which you can route to IDoc adapter. But in this case you have different sender and in the receiver determination you can put the sender, so you will be able to use different communication channnels and so different ports / destinations.
Advantage: Your task would run, no performance problem (http: very good, asynchron)
Handicap: You see every message double in the monitoring, the scenario is not easy to understand and it is a big task 4 other people to change it.
Regards,
Udo

Can you have more than one ipod on the same computer?

me and my sister live together and we would like to be able to have two seperate libraries on the same computer. one library is already there and when the second ipod is plugged in, it comes up as a sub-library that is unacessable.

There are basically two ways of using multiple iPods on a computer and these involve:
a) Sharing a single iTunes library and or user account or
b) Creating multiple user accounts.
Note: When you are sharing an iTunes library, you don't have to set each iPod to update in the same manner, you can mix and match from the options below as each iPod has it's own update settings
Sharing a Library and/or User Account
If you want to share the one library, you can set either or all of the iPods so that they only get updated with only certain playlists (you can update from more than one if you wish):
Loading songs onto iPod automatically - Windows
Choosing the update option "Sync Music - Selected playlists" allows you to create a playlist specifically for the iPod and drag the tracks you want into it. If you tire of the list and want to change it, you just add or remove the songs you don't want. The ones you take out out remain in the library to be used some other time if you choose. You can read more about playlists at these links:
iTunes: Creating playlists of your favorite songs
How to create a Smart Playlist with iTunes
Or you can choose to update any or all of the iPods manually and just drag whatever content you want to them: Managing content manually on iPod
Loading the iPod shuffle differs slightly but it can still be used with the others, for details have a look at this page: Loading songs onto iPod shuffle - Windows
It's also possible to have multiple libraries in a single account. To create or access a second (or more) library, hold down the Option key (or Shift key in Windows) when launching iTunes 7. In the resulting dialogue you will get the option to create a new library or navigate to the other Library.
Note: You can only have one Library open at a time and iTunes will default to the last library opened if you don't use the keyboard command to choose one. This can prove tricky when using multiple iPods, if you don't use the keyboard command you can risk syncing to the wrong library:
Using multiple iTunes libraries -Windows
Separate User Accounts
Another option is to create a separate User account for each person on your PC or Mac. Different accounts by definition would give you completely separate libraries. Each account has it's own iTunes folder, Library and iTunes Music folder and you load it with CDs etc just as you did with your original one. The iPod can be set to update however the owner chooses, sync all, manual or sync specific playlists
I don't use Windows so I can't give you a step by step on that one, however I can point you to another web page which should help you out. You can read about Windows user accounts here:
Using Windows XP User Accounts

More than one contract for the same contract account

Hello experts,
As you know, the same contract account could has more than one utility contract.
I want - by customizing - prevent users from creating new move in ( new utility contract ) for a contract account that has a contract.
I don't want to do this functionality by user exits. Do you know how can I do this by customizing ( spro )?
I am appreciating any help.
Thanks...
Hussam.

This depends on which transaction you are using for move-in. The only control you can have on this is by configuring your Master Data Template to always use a New Contract Account being created during move-in. If you are using CRM front end for doing move-in, you could by default check the option for create new contract account and lock that field from being edited.

Sourcing: Creating more than one PO for the same BID

Hello,
We are using the sourcing functionality in SRM 5.0 (classic escenario).
On the basis of an acepted bid, we generate a Purchase Order in the R/3 Backend system.
We noticed that in the standard, SRM lets us create for the same position of the bid, another Backend PO, without warning or error.
We would like to manipulate this escenario in such a way that this PO repitition of the same Bid position is not possible.
Anyone already found a way around this problem? May be we need to activate an error message?
Thanks for any reply.
Aart

I agree that
SRM lets us create for the same position of the bid, another Backend PO
but it does give warning that I have seen.
would recommed to work with yr ABAP team to see whether you can convert this message to type "Error".
one more suggestion is for ..... PO_NEW badi
hope you would have implementation of this exit.
then you can check whether for current BO BUS2200 whether ECC PO is already created
if yes
then do not create again
BR
Dinesh

More than one location for the same library?

My library is on an external drive which is almost full. Is it possible to just extend and continue the same library to additional drives? How do I specify multiple locations for the same library?

To add to Roddy's post I use iWebSites to manage multiple sites.. It lets me create multiple sites and multiple domain files.
If you have multiple sites in one domain file here's the workflow I used to split them into individual site files with iWebSites. Be sure to make a backup copy of your original Domain.sites files before starting the splitting process and move it to another location on your HD until you're satisfied the separation process is completed and what you want.
This lets me edit several sites and only republish the one I want.
OT

Time Machine Backups.backupdb folder more than one directory for the same machine

Hi I am trouble shooting a Time Machine issue for somebody. They have multiple backup directories for the same machince in the Backups.backupdb folder. This causing the directory that is being used to have a restricted amount of space to use, therefore the backup timeline is only lasting for one month where oldest backups are being deleted. On top of this I notice that the options to delete individual backups or all of them is not available. I read that this can happen where there is duplication in backups.
Any suggestions in how to remove backups that are redundant and select the correct one to keep appreciated. And...suggestions on why this may have happpened. One reason could be that when the Mac was originaly bought, two portable iomega drive were purchaed one to use at a main residence and the other at a country home. Each disk may have been used at different times for Time Machine.

Start with Pondini's TM FAQs.

Can you have more than one iphone on the same itunes account

My friends wife has just brought an iphone 5 and given his old one to her husband. They both use the same itunes account because they only have one computer. The husband has gone onto the new phone with his sim card started deleting stuff and it is deleting it from the iphone 5. They are on the same icloud account im guessing. Can they have the same itunes login in so they can have the music on both phones but a different icloud login to stop deleting stuff from each others phones?

iCloud, iTunes & Apps Stores can be assigned different AppleID's from the Settings app. I have my phone and my wife's set up this way for the very reasons you are describing. Works well.

How to prevent more than one login for the same username

I am trying to create a centralized login/logout for my J2EE application, i.e application level security in order to keep track of the users that login and logout to/from application. I need that in order to know which users have logged out before their sessions expire. Is there an easier way (possibly on the server level) to accomplish this.

How is your centralized authentication service hooked up, through a custom realm?
Unfortunately there is no notification mechanism of logout events currently. Partly due to the fact that while the a logout is sometimes explicit (session invalidated or expired) it is also at times implicit (if there is no session, the logged in user silently disappears at the end of a request).
P.S. If you're only looking to keep track of login and access events (and not modify the behavior), the audit logging provides this information directly.

Is there a way I can have more than one tab of the same website open?

It seems kind of silly that I'm not allowed to turn off the feature where it switches to the tab that is already open of that site, even if it is in a different window. Sometimes I need to have duplicates of a site open, like alarm clocks, or certain info sites.

There's no reason why you shouldn't have multiple tabs of the same site open if you want to.
Can you do the following first of all. Go to http://get.adobe.com/flashplayer/ and update Flash.
If the problem persists in spite of the above, try running Firefox in [[Safe Mode]]. If it functions properly in that configuration, then one of your add-ons is the culprit.

More than one shuttle in the same page

Is it possible to have more than one shuttle in the same page. I've tried to create to regions with one shuttle in each. I have choosen the shuttle item from Apex
Is it a way to unique reference/rename the shuttles. Now it seems like both the shuttles have the same reference when I try to select values.

Is it a way to unique reference/rename the shuttles
Well, each shuttle item will have its own item name, right? P1_SHUTTLE1, P1_SHUTTLE2, etc. Not sure I understand what you mean.

Can anyone give me simple instructions on how to use more than one ipod on the same computer with itunes? Both my daughters have ipods, my wife has one

Dear All
Can anyone give me simple instructions on how to use more than one ipod on the same computer with itunes. My daughters have a different generation 'nano' each & my wife a 'shuffle'?
Many thanks

Click here for options.
(69081)

Users have more than one profile for the same role

Similar Messages

Maybe you are looking for