VIRSA mass creation of roles

Hi All:
        Can anyone tell me how to perform mass creation of roles using VIRSA role expert,also if you could point me to some documentation it will be very helpful.
        Thanks,
          J D

Hi Olivier,
I am afraid, my help is limited to this forum.
However, I can help you with some ABAP logic :
Table AGR_1252 is used to store the ORG values of derived roles.
You can start working with an ABAP'er to get his coding magic started. Though I am not familiar with ABAP, I believe our ABAP'er debugged PFCG and  knew what needed to be done. I have no clue what he did
the logic:
Start of Selection
Load information into internal tables for use in creating report
Upload the Organsational Changes Spreadsheet
Ensure Roles exist and there are no duplicates
Ensure Organistional levels exist and there are no duplicates
*Checks if the file exists
Role must exist
Ignore duplicate roles
Authority Check Role for user
IMP Logic checks-
For Add High range of Role must be greater than low range
*...if adding specific ranges - remove existing * or space entry if it
  exists
*...if adding * access remove other accesses if they exist
*Process All Org Levels for each role
...submit report to generate profiles
You can start working with your ABAP'er with this logic.
*Disclaimer* - this may need enhancements to meet your requirements. Also, I have just put the logic what I could remember at the top of my head. I may have missed something.
Hope it helps
Abhishek

Similar Messages

  • SECATT - Mass creation of users with different assigned roles

    Hello! I've been tasked with creating an eCATT to do a mass creation of users and each user will have a different role assigned (besides the general roles). We're doing this to test out the different roles we have created. I've done some searching through the forums and found some different ideas but I'm not sure they are exactly what I need. One suggestion was to use SU10 to make the role assignement but I'm guessing I would still need to setup a parameter for each role so I would initially need to know how many roles would be entered. I would like for the eCATT to be able to handle assigning multiple roles to a user with each user possibly getting a different number of roles. Would anyone be able to suggest a way to assign different roles to different users through an eCATT?
    Thank you!

    Hi Wendy,
    To create users, maybe SU01 or SU10 can be used.  To assign users to a role, maybe you can try with PFCG.
    SU01 and SU10 have the view from the user - for each user, different roles can be selected and assigned to that user. 
    PFCG has the view of roles - for each role, different users can be selected and assigned to that role. 
    Hence if you know which roles should be assigned to which users, PFCG might be easier.
    Hope such information is helpful for you.
    Kind Regards, Qian

  • MASS CREATION OF INFOOBJECTS IN BI 7.0

    Hello Gurus,
    Here is my scenario:
    we have more than 100 new Z fields in R/3 (Tables: KONV, KONP, VBRP) and we are populating those. We maintained the Datasources with that fields. Now we need to develop new infoobjects in BW for those Z fields. Is there any possible way for mass creation of infoobjects.
    I searched about this, but most of them were used only for 3.5 data source.(eg: CTBW_META  - transaction for mass creation of infoobjects in bw 3.5)
    Please anyone help me in solving this !
    Thanks in advance .

    Hi,
    One option I thought of, but never applied in practice. Create an excel with all the field related information in the structure of table,
    RSDIOBJ Directory of all InfoObjects
    RSDCHABAS Basic Characteristics (for Characteristics,Time Characteristics, and Units)
    *RSKYF Key Figures
    RSDTIM Time Characteristics
    RSDUNI Units*
    And upload this table with the flat using function module etc.
    But then you would need to update below tables to with relevant details.
    RSDIOBJT Texts of InfoObjects
    RSDIOBJ Directory of all InfoObjects
    RSDIOBJT Texts of InfoObjects
    RSDATRNAV Navigation Attributes
    RSDATRNAVT Navigation Attributes
    RSDBCHATR Master Data Attributes
    RSDCHABAS Basic Characteristics (for Characteristics,Time Characteristics, and Units)
    RSDCHA Characteristics Catalog
    RSDDPA Data Package Characteristic
    RSDIOBJCMP Dependencies of InfoObjects
    RSKYF Key Figures
    RSDTIM Time Characteristics
    RSDUNI Units
    Edited by: Parth Kulkarni on Jun 22, 2011 4:56 PM

  • Background job fails for BDC profile creation and role assignment

    Hi Experts,
    I have created a BDC Function module for Tcode 'PFCG' for profile creation and role assignment, and called this FM in my zprogram. the problem is that when i run this program in foreground it executes succesfully, but if i schedule it in background it fails throwing error in job log 'Role 'Z...' does not contain any active authorizations'. But i have created one more program to create authorization objects which runs before this zprogram.I have also checked the authorization object in 'RSECADMIN', it reflects active. I dont understand whats happening exactly when it runs background.
    Below is the process of job
       1. ZMIS_AUTH_OBJECT_CREATE
           Variant : auth-create
       2. ZMIS_AUTH_ASSIGN_TO_ROLE
           Variant : auth-assign
    The problem is in second program, runs in foreground but fails in background.
    Code which i have written in my second program
    ***BDC for Profile creation and assignment to Roles
        CALL FUNCTION 'ZROLE'
          EXPORTING
           ctu                     = 'X'
           mode                    = p_mode
           UPDATE                  = 'L'
    *   GROUP                   =
    *   USER                    =
    *   KEEP                    =
    *   HOLDDATE                =
           nodata                  = '/'
            agr_name_neu_001        = wa_role-role_name
            text_002                = wa_role-desc
            text_003                = wa_role-desc
            text_004                = wa_role-desc
           value_01_005            = 'T-ML330881'
            h_fval_low_01_006       = wa_role-auth
            profn_007               = lv_profile
            ptext_008               = lv_text1
    * IMPORTING
    *   SUBRC                   =
         TABLES
           messtab                 = temp_message.
    ***Generation of Profile created
    CALL FUNCTION 'PRGN_AUTO_GENERATE_PROFILE_NEW'
         EXPORTING
           activity_group                      = wa_role-role_name
    *     PROFILE_NAME                        =
    *     PROFILE_TEXT                        =
          no_dialog                           = ' '
          rebuild_auth_data                   = ''
          org_levels_with_star                = ' '
          fill_empty_fields_with_star         = 'X'
          template                            = ' '
          check_profgen_tables                = 'X'
          generate_profile                    = 'X'
          authority_check_pfcg                = 'X'
       EXCEPTIONS
         activity_group_does_not_exist       = 1
         activity_group_enqueued             = 2
         profile_name_exists                 = 3
         profile_not_in_namespace            = 4
         no_auth_for_prof_creation           = 5
         no_auth_for_role_change             = 6
         no_auth_for_auth_maint              = 7
         no_auth_for_gen                     = 8
         no_auths                            = 9
         open_auths                          = 10
         too_many_auths                      = 11
         profgen_tables_not_updated          = 12
         error_when_generating_profile       = 13
         OTHERS                              = 14  .
    Experts please help me out its very urgent. your help is appreciated and rewarded. Thanking you in advance.
    Regards,
    Chetan

    Hi Praveen,
    Yeah definately, my requirement is that I have to access of some BI reports to certain users, so contract data will be downlaoded from ECC on application server, need to read that file from application server and for the each contract i ahould create a authorization object, role creation and assigning of role to the user and profile generation and activation.
    To achieve this i have written two programs
    1) ZMIS_AUTH_OBJECT_CREATE- This program will create the Authorization Object using BDC and Role creation Using the BAPI
    "" Creation of Authorization Object
    CALL FUNCTION 'ZAUTHOBJ'
            EXPORTING
             ctu                    = 'X'
             mode                   = p_mode
             UPDATE                 = 'L'
    *   GROUP                  =
    *   USER                   =
    *   KEEP                   =
    *   HOLDDATE               =
             nodata                 = '/'
             g_authname_001         = 'ZDUMMY_MIS'
              g_targetauth_002       = wa_tab-auth
              g_authtxt_003          = wa_tab-short_desc
              g_authtxtmd_004        = wa_tab-med_desc
             marked_04_005          = 'X'
              g_authtxt_006          = wa_tab-short_desc
              g_authtxtmd_007        = wa_tab-med_desc
             tctiobjnm_04_008       = 'ZBUS_UNIT'
              g_authtxt_009          = wa_tab-short_desc
              g_authtxtmd_010        = wa_tab-med_desc
             marked_05_011          = ''
             opt_01_012             = 'EQ'
              low_01_013             = wa_tab-bu
              g_authtxt_014          = wa_tab-short_desc
              g_authtxtmd_015        = wa_tab-med_desc
             marked_04_016          = 'X'
              g_authtxt_017          = wa_tab-short_desc
              g_authtxtmd_018        = wa_tab-med_desc
             tctiobjnm_04_019       = 'ZCONTRCT'
              g_authtxt_020          = wa_tab-short_desc
              g_authtxtmd_021        = wa_tab-med_desc
             marked_05_022          = ''
             opt_01_023             = 'EQ'
              low_01_024             = lv_contract
              g_authtxt_025          = wa_tab-short_desc
              g_authtxtmd_026        = wa_tab-med_desc
              g_authtxt_027          = wa_tab-short_desc
              g_authtxtmd_028        = wa_tab-med_desc
              g_authname_029         = wa_tab-auth
    * IMPORTING
    *   SUBRC                  =
           TABLES
             messtab                = temp_message.
    "" Creation of role
    LOOP AT it_role INTO wa_role.
          CLEAR wa_text.
          wa_text-text = wa_role-desc.
          wa_text-langu = 'E'.
          APPEND wa_text TO it_text.
          wa_jobrole-agr_name = wa_role-role_name.
          wa_parentrole-agr_name = 'ZM_CT_DUMMY_MIS'.
          wa_method-usmethod = 'CHANGE'.
          CALL FUNCTION 'ZBAPI_JOBROLE_CLONE'
            EXPORTING
              jobrole          = wa_jobrole
             parent           = wa_parentrole
             method           = wa_method
           TABLES
    *   RETURN           =
             shorttext     = it_text
    *   LONGTEXT         =
    *   MENU_NODES       =
    *   MENU_TEXTS       =.
        ENDLOOP.
    2) ZMIS_AUTH_ASSIGN_TO_ROLE - This program will generate the profile created assign it to the role.
      ""*BDC for Profile creation and assignment to Roles
        CALL FUNCTION 'ZROLE'
          EXPORTING
           ctu                     = 'X'
           mode                    = p_mode
           UPDATE                  = 'L'
    *   GROUP                   =
    *   USER                    =
    *   KEEP                    =
    *   HOLDDATE                =
           nodata                  = '/'
            agr_name_neu_001        = wa_role-role_name
            text_002                = wa_role-desc
            text_003                = wa_role-desc
            text_004                = wa_role-desc
           value_01_005            = 'T-ML330881'
            h_fval_low_01_006       = wa_role-auth
            profn_007               = lv_profile
            ptext_008               = lv_text1
    * IMPORTING
    *   SUBRC                   =
         TABLES
           messtab                 = temp_message .
       COMMIT WORK AND WAIT.
    ""*Generation of Profile created
      LOOP AT it_role INTO wa_role.
        CALL FUNCTION 'PRGN_AUTO_GENERATE_PROFILE_NEW'
         EXPORTING
           activity_group                      = wa_role-role_name
    *     PROFILE_NAME                        =
    *     PROFILE_TEXT                        =
          no_dialog                           = ' '
          rebuild_auth_data                   = ''
          org_levels_with_star                = ' '
          fill_empty_fields_with_star         = 'X'
          template                            = ' '
          check_profgen_tables                = 'X'
          generate_profile                    = 'X'
          authority_check_pfcg                = 'X'
       EXCEPTIONS
         activity_group_does_not_exist       = 1
         activity_group_enqueued             = 2
         profile_name_exists                 = 3
         profile_not_in_namespace            = 4
         no_auth_for_prof_creation           = 5
         no_auth_for_role_change             = 6
         no_auth_for_auth_maint              = 7
         no_auth_for_gen                     = 8
         no_auths                            = 9
         open_auths                          = 10
         too_many_auths                      = 11
         profgen_tables_not_updated          = 12
         error_when_generating_profile       = 13
         OTHERS                              = 14
        IF sy-subrc <> 0.
          MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
                  WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
        ENDIF.
      ENDLOOP.
    For creating authorization objects, role & profile i have created one dummy auth, dummy role & dummy profile respectively.
    i have created dummy objects to copy the roles from dummy object and assign the same to new Auth obj, role & profile.
    Let me know what needs to be done. because these both the programs run perfectly in foreground, but fails in background.
    Regards,
    Chetan

  • Mass creation of PO from excel sheet

    Dear all
           Kindly let me know the method for Mass creation of PO from excel sheet
    Regards
    Chandra mohan

    Hi, check these links....
    /people/hema.rao/blog/2006/09/14/lsmw--step-by-step
    http://www.sap-img.com/sap-data-migration.htm
    get more from first thread.........

  • Creation of role using T-code PFCG in R/3

    Hi Experts,
    I have created a Role using PFCG inorder to give acess only to three T-codes(PZ09. PZ80,PZ88).
    so i have created a role intially using PFCG and incorporated PZ09 tcode in it and assigend the Role to users in R/3. it is displaying the TCode(PZ09) in Portal.
    Now again i have added PZ80 & PZ88 to the same Role in R/3, but now i am getting an error:
    Infotype 0000 does not exist.
    but whereas when i assign SAP_ALL they(PZ88 & PZ 80) are working fine.
    Is they anything i can do so that i can avoid assigning SAP_ALL Profile to the users and eliminate the Error "Infotype 0000 does not exist.
    Thanks Inadvance,
    Regards,
    Siva

    Hi,
    Thanks for your reply,
    Creation of role using T-code PFCG in R/3
    The above link has solved my issue, Thank you!
    Regards,
    Siva

  • Mass creation of common folders for different user groups

    Hello Experts,
    We are using Portal 7.0 SP12 and we have 10 different user groups created in Portal.
    Based on this group structure, we need to create two common folders in each of the user's personnel documents in KM.
    Is there is any way to achieve this kind of requirement ?
    Can we do mass creation of these two common folders which will be assigned to all of the groups. This needs to be done in user's personnel documents and not in Public documents.
    Any help in this context would be highly appreciated. points assured.
    Thanks in advance,
    Anil Kumar.

    For every user a folder is created in userhome. One approach is to capture this folder creation event and create the folder structure you need. You need to develop a portal service which will listen to events from userhome repository.
    1. Capture folder creation event for user home
    2. Create the folder structure you want in this event handler
    Check this documentation on how to do this.
    https://media.sdn.sap.com/html/submitted_docs/nw_kmc/howto/rf/client_api/rf_client_api.html
    Regards,
    Prasanna Krishnamurthy

  • Reg:Bapi for mass creation of production order/confirmation

    Dear Experts,
    I wanted to know with the following BAPI is it possible to create Multiple production orders for different semifinshed Materials along with material availability check and other functions similar to CO01 transaction.
    I knew there are standard transactions for mass confirmation for production orders. But i need a confirmation on this BAPI . As i am planning to go-ahed with ,mass creation of production order creation / Order confirmation in single custom transaction.Need back flush activity even supported.
    BAPI_PRODORD_CREATE to create the orders.
    BAPI_PRODORD_RELEASE to release the orders.
    BAPI_PRODORDCONF_GET_TT_PROP to get the default data for the confirmation.
    BAPI_PRODORDCONF_CREATE_TT to ost the confirmation of production order.
    Along with this BAPI do i need to commit any other BAPI to carry out back flush for components.
    Need your suggestions to take it further.
    Regards,
    Daya.

    Dear SAP Daya
    If the issue has been solved, please close this thread.
    You have already mentioned that the issue has been resolved, thefore, you should not ask for help on another thread before closing this one, as it looks like you are trying to force people to answer your threads.
    Users are always trying to answer as many threads as possible on good will we don't need this kind of "incentive".
    Please read carefully the The SCN Rules of Engagement, especially point 8:
    Be responsive. If an SCN member has answered your question, please mark the answer as "helpful” or “correct”. Mark the discussion as “answered,” so that other members can find the answers more easily
    Also, I checked your old threads and I could observe that there is only one closed. Please review your old threads and close those already solved.
    BR
    Caetano

  • Issue in BAPI_PS_PRECOMMIT in mass creation of WBS Elements

    Hi,
    I am facing a issue with BAPI_PS_PRECOMMIT.
    we have the following WBS Hierarchy:
    S - Proj, (level1)
    S-XXX WBS Element (level2)
    S-XXX-001 WBS Element (level3)
    I have created a program for mass creation of WBS elements creation
    which uses the following BAPI's
    BAPI_PS_INITIALIZATION
    BAPI_BUS2054_CREATE_MULTI
    BAPI_PS_PRECOMMIT
    BAPI_TRANSACTION_COMMIT
    The proj: 'S' and the level2 WBS element: 'S-XXX' already exist in the system.
    When I run the program for delta load, so as to create the following level3 WBS elements:
    S-XXX-001
    S-XXX-002
    S-XXX-003
    The system is throwing the following errors at the BAPI_PS_PRECOMMIT:
    1. Final Check of the project definition and WBS elements: Error
    2. Validation unsuccessful
    Pls help me on this.
    Thanks,
    Deepak

    Check the WBS elements doesn't exist already in your system.
    Here is what I coded some days back for deletion of Network Activities, most of the things are same.
    You are doing for WBS element.
    * Call to initialization BAPI Before Delete
          CALL FUNCTION 'BAPI_PS_INITIALIZATION'.
    * Call to Network Activity Deletion BAPI
          CALL FUNCTION 'BAPI_BUS2002_ACT_DELETE_MULTI'
            EXPORTING
              i_number           = t_bapi_activity-network
            TABLES
              it_delete_activity = l_t_del_vornr
              et_return = l_t_bapiret2.
          DELETE l_t_bapiret2 WHERE type <> 'E'.
          READ TABLE l_t_bapiret2 INDEX 1.
          IF sy-subrc EQ 0.                                      "If error in Deletion
            MOVE: f_idoc_contrl-docnum TO t_idoc_status-docnum,
                  l_t_bapiret2-type TO t_idoc_status-msgty,
                  'CNIF_PI' TO t_idoc_status-msgid,
                  l_t_bapiret2-number TO t_idoc_status-msgno,
                  l_t_bapiret2-message TO t_idoc_status-msgv1.
                  MOVE c_idoc_status_error TO t_idoc_status-status.
                  APPEND t_idoc_status.
                  ROLLBACK WORK.
                  EXIT.
          ELSE.                                                  "If Delete is successful COMMIT
    * Call to PreCOMMIT BAPI
            CALL FUNCTION 'BAPI_PS_PRECOMMIT'
             TABLES
               ET_RETURN       = l_t_bapiret3.
    * Call COMMIT BAPI
    *        CALL FUNCTION 'BAPI_TRANSACTION_COMMIT'.
          ENDIF.
    The other solution is use BAPI_PROJECT_MAINTAIN.

  • MASS CREATION of new inforecords and loading it in mass

    Iam new to SAP MM .can anyone please let me know
    1. what MASS CREATION OF NEW INFO RECORDS MEANS. Is it somethnig other than creating the info record using the TCODE ME11?
    2. what LOAD INFO RECORD IN MASS means?

    Hi
    Mass creation of info records means, if you have more than 50+ records needs to be created, in that case you can use any bdc or CATT or LSMW program.
    regards
    Srinivas

  • Mass creation of Material

    Any transaction that can help with masscreation of materials, I have to create around 20 000 new materials and need a mass creation function.

    Hi
    [http://www.saptechnical .com/Tutorials/LSMW/Longtext/Material.htm]
    [http://www.sap-img.com/general/lsmw-steps-for-data-migration.htm]
    Best way LSMW  or BDC.
    SAM
    Edited by: Saminathan Gopalan on Jun 8, 2010 5:24 PM

  • Mass creation of gl-accounts

    Hi,
    Is there any way to do a mass creation of gl-accounts in the chart of accounts? I have to create more than 300 accounts.
    Thanks
    Moderator: Please, search SDN

    Hi,
    LSMW is an easier option. 
    If these GL accounts are already available in one system, then you can extract using FS15 and update using FS16.
    Best Regards,
    Madhu

  • APO-MD - Mass Creation of Product Masters in APO.

    I have need to create about 100,000 product masters in APO. The product master general data does exist as it has been CIFed over from R/3. However these need to be mass extended to several customer locations.
    I am looking for any advice on tools/programs that will allow mass creation of Product masters in APO.

    The Functiona Loader did mass create products but the product model assignment did not work even though the model number was mapped in the loader.
    Did I miss something in the process.
    Is there another way to mass assign products and model.

  • Mass creation of planned order

    Hello,
    is there a way to mass creat a planned order for a finished product? having same FG mat, plant and prod version.
    Thanks

    Dear
    1.Goto MD61 with User parameters like Plant , Requirement type , Version and Planning Date .Then Select the Material Radio Buttion with FG item code .
    2.Enter the FG qty as required in each month as demand
    3.GotO MD02-Single Item ,Multi Level with indicator : NETCH , 2,1,3,3,2   and Execute the MRP to create the Planned order  for FG
    4.Check the result in MD04
    There is no SAP Standard Traction to Mass creation of  Planned Order .That is possible in Demand Creation and MRP run .
    Regards
    JH

  • Mass creation of Marketing attributes under attribute set

    Hi All,
    Please let me know if there is a possibility for mass creation of Marketing attributes and marketing attribute sets in SAP CRM Standard functionality.
    I am not talking about below " creation & assignment to BPs using the expert tools. "
    CRMD_PROF_CHAR  Create/Change Marketing attribute/set
    CRMD_MKTDS           Create datasource/attributre list
    Create marketing attribute and maintain in Business Partner.
    CRMD_MKT_TOOLS  you can use this to delete/assign mass marketing attributes to BP.
    we can go for a BDC program, But I want to keep that as a last option.
    Please help and suggest me if there is any standard way of creating or uploading the Mass Marketings attributes in CRM system.
    Regards,
    karthik J

    This functionality can be achieved through ELM (External list management)

Maybe you are looking for

  • Passing 2 or more Items values in an APEX URL

    Hi all- I found many threads with a similar title but no one was exactly what I am looking to do. so here is the deal : I have two items on page 3 called P2_X , P2_Y . In page 2 I want to click on a button that will go to page 3 and set the values of

  • Apple mail doesn't send letters.

    No connection or server problems. I can receive mail, read it, even edit answers, but the button "send" is not active all the time. It starts without any reason, mail worked good before. Please help! thx!

  • Drill down in Second grid of planning book

    Dear Team I have created a planning book with two grids. I want to enable drill down in second grid aswell. How can I get it done? Also if I want different chars to be used in drill down for first grid and different for second, will it be possible. I

  • Date Filter in 11g

    Hi All I Just upgraded my catalog and repository from 10g to 11g Many of my answers where using a date filter CURRENT_DATE -1 In 11g this doesn't appear to work. Formula syntax is invalid. [nQSError: 10058] A general error has occurred. [nQSError: 43

  • af:Image action

    Hi, I am using <af:image> in my jspx. There's a requirement that, on click of this image the elements of one list box should shift to the adjacent list box To acheive this I am using the following code ( I had seen an example in forum for the button