View Authorisation of trxn SM04

How to give only vire authorisation for SM04. I want the user to only SM04 and display the users. User should not be able to log off other user ...
thanks
amit

Hello,
Goto PFCG then create a Role for Particular User,, then assign what are the T-codes that want,, then assign and generate..to particular user.
regards,
Balaram

Similar Messages

Which trxn for Support staff to terminate users in a Load Balance system

We have trxn sm04, but it will only provide users that are logged into the system that you have been sent to in a load balance environment.
I was also considering al08, but that does not allow support staff to terminate users.
Is there another trxn?
Please advise, we want to determine a strategy for the support staff before we roll out load balancing to all SAP users
B.Regards,
Maria

>
nirmal konchada wrote:
> Hi,
>
> In ST03 ransaction you have something called as transaction list, there you can find your transaction and after double clicking it you can find the list of users working on that transaction.
>
> Once the list is clear you can disconnect the user through SM51.
>
>
> Regards,
> Nirmal.K
Thank you for the advise. However I cannot locate in transaction ST03 the information you indicated. Also, your directions are confusing to me.
Maria

Change material description in MM02

Hi,
System is allowing to change the material description in MM02 from any views.
Requirement is once the material code save, system should allow to change the description of product to user who have authorisation for Basic data 1 and 2 not other views.
Like I am giving Accounting view authorisation to one person, he should not able to change the product description.
Is it possibel and how?
Thanks,
Samir Bhatt

Hi,
Description is part of MARA table. If you give full authorization for General data fields to the persons that maintain basic 1 & 2 and does not give this authorization to the persons that are not allowed to change the description, you will achieve what you want. This will allow the financial people to see the general data fields but they will not be able to change them.
Regards,
MdZ

Content server for Document attachment through "services for object" Icon.

Guys,
I have typical problem in installation of Content server for storing external documents.
We all know that we can attach the document in SAP using the icon SERVICES FOR OBJECT. By this we can attach the document to the specific object we want.
-Since my client wants only document attachment method not to completely implement SAP DMS, I proposed this method of attaching documents through services for object method.
-If documents are stored though services for object ,The attached document will directly get stored in sap database(correct me if I am wrong) while in DMS it ask you to select the storage location while u check in for any document
-By storing the doc thru "services for object " For long run when we store the documents in sap database our system will drastically get slow down.
-In this regard I have a plan to incorporate external storage server.
-Now I should know that how I should customize content server configuration so that the attachment through services for object will store into this content server I need to know how to define Client, Content Category, Content Repository, Document Area, Physical Machine, IP Address, Port. (OACT & OAC0)
I appreciate for immediate solution and Points will be rewarded for sure.
Regards,
Murali.S

Hi Murali,
Don't Worry, its possible,
All attachments can be stored in SAP Content Server also, but through archiving process.
Set up a database storage system.
Preparation
Make sure that the HTTP plugin is active.
Transaction SMICM, "Display Services" function key (shift F1)). The list of services must contain a port other than 0 for HTTP.If not, you must adjust the relevant profile parameter.
Typical entry:
icm/server_port_0 PROT=HTTP, PORT=1080, TIMEOUT=900
Make sure that the /sap/bc/contentserver service is active.
If no user is defined, then use transaction SU01 to create a new user. Use the "System" user type.Assign
the SAP_ALL and SAP_NEW profiles to the user. (Eg: HRUSER/PLMUSER/PPUSER etc)
Transaction SICF, select: default_host - sap - bc -contentserver. Select the function to display/change the service. Make sure that a user is defined.
Using the relevant data from the newly created user, maintain the anonymous logon data for the
/default_host/sap/bc/ service and save & activate the changes in transaction SICF. Double click on content server and give the user name which has been created (HRUSER/PLMUSER/PPUSER/MMUSER etc)
Check the system PSE.
Start transaction STRUST. Expand the system PSE. The system PSE must be "green" for each application
server.
Determine a suitable exchange directory.
The exchange directory must be accessible from each application server. If all application servers are running on the same platform (for example, Windows), one network directory that is accessible on all application server (for example,
server\share) is sufficient. You can generally use the global directory
(profile parameter DIR_GLOBAL).You can use the RSPARAM report to determine the profile parameters.
Setting up the storage
Create a table for storing the data. Using transaction SE11, create a copy of the SDOKCONT1
table. If you want to create the repository database, you can name the table ZCONT_DB, for example. Save the
table as a local object. Activate the table.
Create a repository.
Use transaction OAC0 to create a new repository.
Use the following parameters:
Repository Max. two characters, for example, Z1
DocArea: ARCHLINK
Storage type: R/3 database
Storage subtype: normal
Version no. : 0046
Contents table <table name> for example: ZCONT_DB
Exchange directory <directory name> for example:
server\share\
Make sure that the exchange list ends with a \ (or /on Unix).If you are using a variety of platforms, you must use transaction FILE to define a suitable logical file name and use this name. Save the settings.
1. Maintain view table TOAAR_C, via SM31
 Cross client table displayed as information, forget it
2. In field 'StSytm' you must entered 'Z1' as your system need, or anything that you need but you must configure HR Archive link too.
3. In field 'Arch.path' (direct above Spoolpath), entered path in your system, this real path in your operating system. May be you should confirm to your Basis consultant where exactly you could store picture files. So if you enter '/', your file exists at root directory at your UNIX system.
4. Choose 'File store' radio button
5. Save.
First
1. You have to create a number range for SAP ArchiveLink.
 IMG: Basis Components-> Basis Services -> SAP ArchiveLink -> Basic Settings-> Maintain number ranges
 (Trxn OANR). Create number range 01 from 0000000001 to 9999999999 without the external number flag.
2. Document type HRICOLFOTO must exist with document class JPG.
 IMG: Basis Components->Basis Services->SAP ArchiveLink->System Settings->Maintain document types
 (Table TOAVE, Trxn OAC2).
3. Document type HRICOLFOTO must be linked to object type PREL and Infotype PA0002.
 IMG: Personnel Management->Personnel Administration->Tools->Optical archiving->Set up Optical Archiving
 in HR. (View V_T585O, no Trxn). In the first two columns there are minuses, the third (Date) has
 a plus - don't put a flag in the check box.
4. Check which content repository (Archive) is linked to document type HRICOLFOTO and object type
 PREL. IMG: Basis Components->Basis Services->SAP ArchiveLink->Basic Settings->Maintain Links (Table
 TOAOM_C, Trxn).
Test
Test the repository.
Use transaction SE38 to start the RSCMSTH0 report. Specify your repository (i.e. Z1) and start the test.
The report must run without errors. If no problems occurred, you can use the new repository with Archive Link after you carry out the Archive Link Customizing. If problems do occur, check whether one of the related
notes helps.
For More Details :
http://service.sap.com/archivelink.

NOTE:- Screen Shots are missing, i was not able to paste here, One more thing is we did this for uploading a PHOTOS into Content Server, Similarly you have to create a REPOSITORY and Z-TABLE to bring all the Attachments from all the selected Objects and then route them to the CONTENT REPOSITORY.
Your Senior ABAP guy would help you in this, if not i may try to help you more by monday.
Regards
Rehman
Reward Your Points if Satisfied.

Photos of relatives HR

We now see the employee photos but I want to see in infotype 21 subtypes 1 and 2 the photos of children and spouse.
I have already created a new server content to keep this new photos.
Is that possible?

hi Maria,
here is the answer....please follow the instruction.....
First you have to create a number range for SAP ArchiveLink. > > IMG: Basis Components-> Basis Services -> SAP ArchiveLink -Basic Settings-> Maintain number ranges (Trxn OANR). Create number range 01 from 0000000001 to 9999999999 without the external number flag.
Document type HRICOLFOTO must exist with document class JPG. IMG: Basis Components->Basis Services->SAP ArchiveLink->System Settings->Maintain document types (Table TOAVE, Trxn OAC2).
Document type HRICOLFOTO must be linked to object type PREL and Infotype PA0002.
IMG: Personnel Management->Personnel Administration->Tools-optical archiving->Set up Optical Archiving in HR. (View V_T585O, no Trxn).
In the first two columns there are minuses, the third (Date) has a plus - don't put a flag in the check box.
Check which content repository (Archive) is linked to document type HRICOLFOTO and object type PREL.
IMG: Basis Components->Basis Services->SAP ArchiveLink->Basic Settings->Maintain Links (Table TOAOM_C, Trxn OAC3).
Create this content repository with storage type FILE archive. IMG: Basis Components->Basis Services->SAP ArchiveLink->Basic Settings->Maintain content repositories (Trxn OAC0).
Storage type FILE archive can be attained by clicking on the field Storage type and clicking somewhere else on the screen with the right mouse button.
Choose Possible entries and only then you get a list of all possible entries. FILE archive is entry number 08.
Choose Version no. 0031 and Arch. path for example > X:\.
Link photo to personnel number.
Menu: Tools->Business Documents->Miscellaneous->Stored documents (Trxn OAAD). Click on the Create button (Trxn: OAOH). Business object PREL and Document type HRICOLFOTO.
Click on create (F8). Fill in the right Personnel Number in the pop up and click on Continue. Choose the photo (as a JPG file) from the place where it is saved (on the hard disk for instance). SAP will notify that the Stored document is created successfully.
In T77s0 we use this setting: ADMIN PHOTO HRICOLFOTO
Plus in T588j (IT header definition) something like:
Now one can see the employee picture in trxn PA10/20/30/40/51/61, PPOME, PPOSE (double-click on the picture to zoom in).
Hint
We noticed that the trxn are slower after we added the pictures. Some users are willing to sacrifice, some do not want to see the pictures. There is a parameter ID (trxn su3) that allows turning the pictures off.
Remove photo link to personnel number.
Go to Tools->Dusiness Documents->Miscellaneous -> Stored Documents (Trxn OAAD).Choose 'find' and enter 'PREL' as the business object and click 'Execute'.
In the pop-up window 'Key field entry' enter the personnel number and click on 'OK'.
In the next screen one selects the entry that should be deleted and clicks on the trash can icon.
A pop-up window with the question 'Delete all selected documents?'appears - click on 'Yes'.
A pop-up window with the question 'Delete link?'appears - click on'Yes'. A window with the picture file will appear - one can close that. A pop-up window with the question 'Delete archived document?' appears - click on 'Yes'.
This deletes the link and the file.
From Karim EL HAOUET : Also check the following :
Make sure that the HTTP plugin is active.
Transaction SMICM, "Display Services" function key (shift F1). F1). The list of services must contain a port other than 0 for HTTP.If not, you must adjust the relevant profile parameter.
Typical entry:
icm/server_port_0 PROT=HTTP, PORT=1080,
TIMEOUT=900
Make sure that the /sap/bc/contentserver service is active.
Transaction SICF, select: default_host - sap - bc - contentserver.Select the function to display/change the service.Make sure that a user is defined.
If no user is defined, then use transaction SU01 to create a new user.Use the "System" user type.Assign the SAP_ALL and SAP_NEW profiles to the user.
Using the relevant data from the newly created user, maintain the anonymous logon data for the /default_host/sap/bc/ service and save the changes.
Check the system PSE.
Start transaction STRUST. Expand the system PSE.The system PSE must be "green" for each application server.
Determine a suitable exchange directory. The exchange directory must be accessible from each application server.If all application servers are running on the same platform (for example, Windows), one network directory that is accessible on all application server (for example,
server\share) is sufficient.You can generally use the global directory (profile parameter DIR_GLOBAL).You can use the RSPARAM report to determine the profile parameters. Setting up the storage
Create a table for storing the data. Using transaction SE11, create a copy of the SDOKCONT1 table.If you want to create the repository database, you can name the table ZCONT_DB, for example. Save the table as a local object.Activate the table.
Create a repository.
Use transaction OAC0 to create a new repository.
Use the following parameters:
Repository Max. two characters, for example, DB
DocArea ARCHLINK
Storage type R/3 database
Storage subtype normal
Version no. 0046 0046
Contents table
for example: ZCONT_DB
Exchange directory <directory name> for example:
server\shareMake sure that the exchange list ends with a \ (or / on Unix). If you are using a variety of platforms, you must use transaction FILE to define a suitable logical file name and use this name.
Save the settings.
Test
Test the repository.
Use transaction SE38 to start the RSCMSTH0
report.Specify your repository and start the test.
The report must run without errors.
If no problems occurred, you can use the new repository with ArchiveLink after you carry out the ArchiveLink Customizing.
If problems do occur, check whether one of the related
notes helps.
regards,
sachin

Error messages when clicking on items in manager's inbox--URGENT

Hi,
When the manager goes to his inbox & when he clicks ont he item to approve Leave Request, the following error messages are displaying
1) Unable to perform the request. Try again and if the problem persists, inform your system administrator.
2) Cannot find the navigation ID specified Default View.
we checked using SM04 for locked sessions. There were no sessions remained for the user.
Thanks,
vv.

Please check the Note 779075
this should be available in your transaction SWFVISU
   Using transaction SWFVISU, check the following entries and correct these
   where required:
   TS12300097 Java WebDynpro
                    APPLICATION LeaveRequestApprover
                    PACKAGE sap.com/ess~lea
   TS12300116 Java WebDynpro
                    APPLICATION LeaveRequest
                    PACKAGE sap.com/ess~lea

Error messages when clicking on items in Manager's inbox--its urgent

Hi,
When the manager goes to his inbox & when he clicks ont he item to approve Leave Request, the following error messages are displaying
1) Unable to perform the request. Try again and if the problem persists, inform your system administrator.
2) Cannot find the navigation ID specified Default View.
we checked using SM04 for locked sessions. There were no sessions remained for the user.
Thanks,
vv.

Please check the Note 779075
this should be available in your transaction SWFVISU
   Using transaction SWFVISU, check the following entries and correct these
   where required:
   TS12300097 Java WebDynpro
                    APPLICATION LeaveRequestApprover
                    PACKAGE sap.com/ess~lea
   TS12300116 Java WebDynpro
                    APPLICATION LeaveRequest
                    PACKAGE sap.com/ess~lea

My iMac is authorised to play iTunes content, but my Apple TV keeps asking for me to authorise. I am unable to view content from my iTunes Library. How can I convince my Apple TV that I am authorised?

My iMac is authorised to play iTunes content, but my Apple TV keeps asking for me to authorise and I am unable to view content from my iTunes Library. How can I convince my Apple TV that I am authorised?

I am not exactly sure what you mean by "authorised", but I am experiencing a similar problem...or the same, in that Apple TV keeps telling me to enable home sharing in my MacBook Pro. It does not seem to recognize that home sharing is already enabled on my Laptop.
Is home sharing and "authorised" one in the same? It used to work just fine before these recent Apple TV updates.
Apple TV, Mac OS X (10.7.2)

Authorised to User Fro MODIFY,VIEW and INSERT

Hi,
i want to authenticate my application .How can i give RIGHTS to User ,How can i authorised to User for MODIFY,VIEW and INSERT.
How can i implement this.
Thanks
Edited by: 805629 on Jan 26, 2011 11:10 PM

Hi,
Create authorization scheme for MODIFY, VIEW and INSERT.
For MODIFY and INSERT edit button and select Authorization Scheme.
For VIEW on Edit Application properties go to security tab and select Authorization Scheme for VIEW.
Sample PL/SQL code for authorization(It will return boolen):
Scheme Type: PL/SQL Function Returning Boolean
Code:
Declare
v_ret number;
Begin
v_ret := AUTH_PKG.can_update(:APP_USER,:APP_PAGE_ID);
IF V_RET =1 THEN
RETURN true;
ELSE
RETURN false;
END IF;
End;
Regards,
Kartik Patel
http://patelkartik.blogspot.com/
http://apex.oracle.com/pls/apex/f?p=9904351712:1

Authorisation for Different Material Views

Hi,
As I understand, in material master (MM01), we have different views (basic, SD, MM, FI, CO, QM, PP etc). Is it possible to control authorisation such that staffs from each department can only modify the basic data and their own view data?
If authorisation is not possible, how can we exercise control? Have one centralised party to create all data under every views?
Advice would be appreciated. Thanks.
Regards.

can achieve by way of authorization control. In t.code PFCG, select your role for creating / changing the material master. Select option Maintenance statuses. Then at change status option select views that you want to give the authorization to the users. Create profile & save the role. Now assign the role to the users. They will get only those views you have selected. You have to select those views in all the roles related to material master (create, change, display).Consultant Basis Consultant

How to authorise users by Cost Ceter Groups for viewing KSB1

We have created Cost Center Groups. We want only specific users to view the KSB1 report by Cost Center Group. Can anyone tell us what is the authorisation object for the same ?
Or, is it possible to restrict KSB1 thru authorisation on CC groups ?
- JND

hi Joyti,
goto to t.code su24 and give tranaction KSB1 it will display the object which are checked when this tcode is executed.
u can restrict user with following object:
K_CSKS_SET CO-CCA: Cost Center Groups Check YS
also u can define activity accordinly per that object
hope this helps.
Pls assign points as way to say thanks

HT1918 I would like to view which 2 computers are authorised to play content purchased with my apple id?

I would like to view which 2 computers are authorised to play content purchased with my apple id?

There is no list available from your end; aside from using the Deauthorize All function, you need to access a computer individually, either physically or through Virtual Network Computing, to authorize or deauthorize it.
(83075)

Authorisation for SM04

Hi,
The user of SAP system is able to execute the transaction code SM04.
Please let me know which authorisation should i remove to make him not execute the SM04 transaction Code
Regards
Balaji

Hi Balaji,
Also you can try TC SU24.
There you see all Authorizations that SAP looks for the Transactions.
br,
Carsten

How to set Authorisation to view and maintain employee data.

Hi,
     I have a requirement to restrict the user to view and maintain all employee data except some manager position for some company codes. How can I do this .
Cheers
Senthil

Hi,
(This is what we had done....)
Check the composite role : SAP_EMPLOYEE_ERP
Create a Z role for SAP_EMPLOYEE_ERP;
Will prompt you to copy the corresponding roles in it to z roles.
The z-composite role is then assigned to the user.
While creating an ESS user, to to restrict access to personnel master data, changes in the authorization P_ORGIN needs to be done.
In our case, check the z-role created ; zSAP_ESSUSER_ERP.
In Authorizations tab=>Display authorization data option => ;
Expand Human Resources;
In HR : Master data, you can find the various authorization assignments to P_ORIGIN;
Authorization level (AUTHC)
Infotype (INFTY)
Personnel Area (PERSA)
Employee Group   (PERSG)
Employee Subgroup (PERSK)
Subtype (SUBTY)
Organizational Key (VDSK1)
Authorization level (AUTHC) takes the values :
R (Read)          : for Read access
M (Matchcode) : for Read access to Input helps (F4)
W (Write)         : for Write access
S (Symmetric) : for Write access using the Symmetric Double Verification Principle
*                      : always includes all other authorization levels simultaneously
E and D (Enqueue and Dequeue) :
for Write access using the Asymmetrical Double Verification Principle. E allows the user to create and change locked data records and D allows the user to change lock indicators.
In your case probably you need to consider for :
Employee Group   (PERSG) / Employee Subgroup (PERSK)
the Authorization level set to R for the defined infotypes.
This is again, Basis work....
Please Check the links to get more clue :
http://www.*********************/hr_security/hr_security.htm
http://help.sap.com/erp2005_ehp_02/helpdata/en/70/b7b83b5b831f3be10000000a114084/frameset.htm
Hope this helps you!!
Cheers and Good Luck!!
Remi

BSP Authorisation error when trying to view BSP page from workitem

Hi All,
I developed a bsp application that initiates a workflow.
The application generated successfully and the workflow was activated and no errors appear in the workflow log.
When I try to view the bsp from the workitem, I get an error message
u2018You are not authorized to view this pageu2019
If I was to view the page from bsp application, I would have to login again to the bsp application.
Is this what is stopping me viewing the bsp page directly from the workitem?
How can I create this login to the bsp server from my workflow?
Can I remove this login to the bsp server?
thanks

Hi Brendan Gibbons,
The authorization for viewing the bsp application through se80 is different from viewing the bsp application from the workitem.
For example
I am abap developer, i have authorization for se38 and i have authorization to view/change the program what i have created, but i can view the program what some one has created but i dont have authorization for changing it. The same apply's here too.
Kindly check with the basic consultant.
Thanks and Regards
Balaji E.

View Authorisation of trxn SM04

Similar Messages

Maybe you are looking for