What roles should be assigned to HR and SD peoples.

Hi all,
I have a doubt in security. what roles should be assigned to HR and SD,MM people instead of assigning SAP_ALL and SAP_NEW. I want to restrict all the people giving SAP_ALL and SAP_NEW. How to assign the roles to them and how to authorize them. Plz can anybody tell me clearly the steps for this.
Thanks & Regards
Karunakar Reddy

Basically what you're asking is a step by step guide to role design and implementation. This is an often asked and seldom answered question on this forum (and other forums) because it is not a simple question and not a light task.
Best start by asking your functional teams' members which transactions they need and start from there.
You can also have a look at the standard roles delivered by SAP. Maybe some could suit your needs.Try to find out which ones do, copy those and work from there.
If you want more information from us please tell us:
1 What have you done so far to acquire knowledge on the SAP authorization concept?
2 For who do you want to build roles? Developers, functional consultants, key-users, endusers?
3 Is this on a development environment or a complete landscape?
4 What is your job role in the project/company?
Jurjen

Similar Messages

Contact Role should be assigned as 'Self Service User'

Dear All,
I have requirement while creating contacts for a particular customer, contact Role should be assigned as ‘Self Service User’ Role, so that they are created as user for iReceivables access. Which column in ra_contact_phones_int_all should be populated with what value ??? Is there any API to update the same .
Any help on this is appreciated.
TIA.

Hi All,
Anyone has an answer for my query ???

Last week, I had no problems streaming my MacBook Pro to my sony Bravia with a logix hdmi cable. I came back from holidays and now it doesn't work anymore. What settings should my computer be on and what settings should my tv be on?

Last week, I had no problems streaming my MacBook Pro to my sony Bravia with a logix hdmi cable. I came back from holidays and now it doesn't work anymore. What settings should my computer be on and what settings should my tv be on?

TarahCurrie Sep 10, 2014 3:48 PM
Restore From Time Machine Backup
Reinstall OS X
Get Help Online
Disk Utility
MacBook Pro, Mac OS X (10.5.8)
You are running 10.5.8
Did you try booting off your Install disk holding the c key down. From here you can get to the drop down menu just a few clicks in (you are not going to install) and run the Disk Utility>Repair Disk. See if it will let you do this.

After reinstallation of Outlook 2010 on my Laptop, Contacts and Calendar did not appeared while they are exist in my iphone 5 by using icloud. What I should do to get Contacts and Calendars in sync with iphone 5? Thank you.

After reinstallation of Outlook 2010 on my Laptop, Contacts and Calendar did not appeared while they are exist in my iphone 5 by using icloud. What I should do to get Contacts and Calendars in sync with iphone 5?
Thank you.

So you have business contacts that were lost... do you not have these on a Database in some shape or form? Sounds like you need to invest in a RAID1 backup setup for your computer so you dont have this issue in the future.
As for repairing your problem, sounds like you are going to need to start from scratch at this point or if the data is still on your phone look into a program that can take the information from the phone onto iTunes.

What role should a user have to access 'ALRTCATDEF'

Hi all,
I am getting unauthorized eeror
When I am trying to access Tcode "ALRTCATDEF" in XI ,
When I am trying to access alertinbox, alertconfiguration in runtime workbench in XI ,
so what role should I have to access this?
I appreciate your reply
KK

Hi KK
You need following roles ::
SAP_ALM_ADMINISTRATOR         --> Alert Management Administrator
SAP_ALM_CUSTOMIZER              --> Alert Management: Role for Customizing
SAP_BC_ALM_ADMIN                       -->
SAP_BC_ALM_ALERT_USER           --> ALM: Role for the alert user
SAP_BC_ALM_CUST
Some of them might be extra, what you asked for .
- Lalit -

What Roles should the gwconnector user have in CRM

Hi Guys,
I have setup GWConnector etc and have assigned GWConnector user with full admin rights on the CRM system.
I cannot find any document that tells me what roles this user must have etc?
Could one of you guys either tell me what they should be - or point me to the right documentation as itu2019s not in the groupware setup guide only the AD stuff?
Thanks

Honeslty, that is up to you. I have customers that start off WLC and AP all in the same subnet, but it is not necessary. I also have customers that put the WLC mgmt in the 'server' VLAN, and the AP in their own.
IMHO, I like the WLC to be in 'server' or 'secured' VLAN, then I put the AP in their own VLAN that is locked down to only getting DHCP and talking to the WLC. that way if someone unplugs an AP and connects something they can't get anywhere.
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered

Mapping of source message to IDOC.. What values should be assigned?

Hi guys, again
I have SOAP->XI->IDoc scenario, but my IDocs arrive only with 1 segment... The IDoc is not standard, and has a lot of fields, but I want to fill only a few of them in some segments. Lets say, that I have 4 segments, with occurence 0..999999, each value has occurence 0..1 like following..
seg1-val1
 -val2
 -val3
seg2-val1
 -val2
 -val3
seg3-val1
 -val2
 -val3
seg4-val1
 -val2
 -val3
and I have source message like
<seg1>
<val1>..</val1
</seg1>
<seg1>
<val1>..</val1>
</seg1>
I think, I have to map seg1 tag to seg1 segment, and val1 tag to val1 field..
But! DO I HAVE TO MAP also seg1 tag to seg2, seg and seg4 segment? (to create logical "table"), or it is not necessary...
Next question: what value should be assignet to @SEGMENT attribute of segments? also (IDOC segment?) Should it be some constant?
Thank you guys!

All you need to map is seg1 source to seg1 target and val1 source to val1 target . But remember that, if your source has seg2,seg3,seg4 and you want to use them then map them accordingly otherwise no need to map.
@SEGMENT is counter for the number segments you are passing for each type of record. Use a java function to populate or just populate a constant 1.
regards
Shravan

What printer should I use for pc and iPad iPhone use

What printer(s) should I use on a wireless network that has pc, iPad and iPhone as devices?

How to Print from Your iPad: Summary of Printer and Printing Options
http://ipadacademy.com/2012/03/how-to-print-from-your-ipad-summary-of-printer-an d-printing-options
 Cheers, Tom

SCCM 2012 R2 ,which are the roles should be installed on CAS and which are the roles should be installed on Primary

Hi All
Which are the roles in SCCM 2012 R2 ,which cannot be installed on CAS and which are the roles which can only be installed on CAS . and which are the roles which should be installed on both CAS and Primary.

Here is the official list that describes where you can install the different roles:
http://technet.microsoft.com/en-us/library/gg712282.aspx#Plan_Where_to_Install_Sites
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

What roles should NW developer get?

Dear all,
I just wonder usually what SAP standard roles the developer get so they can use NW developer studio or Visual composurer to create java programs for dashboard. I only run the portal for BI.
Thanks.

please check the below link
http://santy.wdfiles.com/local--files/web-dynpro/NWDI%20Roles%20and%20Permissions.pdf
Regards,
Pavan

What speakers should I get for iMac and video editing

Need a reasonably priced external speaker system to add to new iMac 27. Something close to $200. Or less is even better.
I shoot edit social, corporate events all non broadcast..
Thanks for the help and suggestions..

These would be my personal choice:
http://store.apple.com/us/product/H6251VC/A/bose-companion-20-multimedia-speaker -system?fnode=4f
Otherwise, have a look here and pick your favourite:
http://store.apple.com/us/mac/mac-accessories/audio-speakers#!

What role is required to open and execute query in BE query designer

Hi,
Am new to BE, need to know what role should i be assigned with to open and execute a query in query designer.
OPEN dialobox displays "NO role availabe".
Is this a problem of role assignment or am i missing some steps
thanks
srikanth

IN Enterprise portal plz check whether these roles are present or not.
pcd:portal_content/com.sap.pct/platform_add_ons/com.sap.ip.bi/Roles/com.sap.ip.bi.business_explorer_showcase
pcd:portal_content/com.sap.gm.cnt/core/VCRole
pcd:portal_content/com.sap.pct/platform_add_ons/com.sap.ip.bi/Roles/com.sap.ip.bi.bi_showcase
pcd:portal_content/administrator/content_admin/content_admin_role
pcd:portal_content/com.sap.pct/platform_add_ons/com.sap.ip.bi/Roles/com.sap.ip.bi.business_planning_showcase
pcd:portal_content/every_user/general/eu_role
in BW front end , you have to create role with the auth objects S_RS_COMP, S_RS_COMP1, S_RS_MPRO, S_RS_ICUBE auth objects.
include the t-codes if necessary. RSRT you can include.
Hope this would help you.

How do I know what Roles are assigned to specific position number?

All,
We are on the Position based security right now.
I would like to know what roles have been assigned to Position number?
Is there a table that I can check for the list of Roles that are assigned to position?
Please advise.
From
Pranav

You can view it in a different way as well...
The other way is to run PFCG on one role, click Org Management , then it lists all position that have the role assigned.
or
You run program RHSTRU00 or transaction S_AHR_61016538u2026
Enter the evaluation path B007 , object type = S (Position ). Current planu2026
sapsecHB
Edited by: Henry Binning on Jul 6, 2009 8:32 PM
Edited by: Henry Binning on Jul 6, 2009 8:33 PM

SRM RFC users for ERP , what are the profile/roles should be used?

Hi All,
I have integrated SRM and ERP systems using config wizard. Multiple rfc accounts were created automatically by the wizard but what i did was i skipped on the profile and role field because i don't know what to put. Now, I am battling on what profiles and roles should i put there since the wizard didn't do the automatic placing of authorizations and roles for me.
here are the users that have been created automatically by the config wizard.
ERP System:
SRM2ERP
SRM2ERPD
ERPLOCAL
SRM System:
ERP2SRM
ERP2SRMD
SRMLOCAL
Please help on what ABAP Roles and Profiles should i place to it.
Regards,
Tony
Edited by: Tony on Jun 9, 2011 12:34 PM

Hi ,
The user should have profile SAP_ALL assigned automatically when you run the CTC script.
Else please assign manually.
Regards
Sam

What roles to assign for managing comments?

Hi,
I am setting up a separate user role for managing comments, orders, and product inquiries. I am not sure what roles to assign in the user role area. There are areas for approving, deleting and editing comments, but I need them to be able to reply to comments, work on orders, etc. I don't need to give them full Admin access, but there are so many choices, I'm not sure which ones are needed for these tasks...
TIA,
Jeff

Thank you Annett.
It seems, that in SM4 SAP has provided list of authorization objects (in the Excel 'Delta_Information_Customers_EN.xls' and customers should gather a new composite roles of their own.
I consider SAP should have provided a template composite role in standard for Test and test coordinator users.
SAP knows very well the needs of a tester and test coordinator, and STWB_WORK is surely not the only authorziation object needed.
Here are some topics that I consider typical needs for a TESTER in project implementation (in parenthesis a proposal from SAP's Excel):
No authorization for project admin nor SOLAR01, nor SMSY
Display authorization for SOLAR02 (sap_solar02_dis)
Display authorization for SOLAR02 documentation (?derives from sap_solar02_dis?)
Not able to switch to other projects in SOLAR02 (?invidual rights to auth.object S_Project?)
Execute transactions from SOLAR02 (?derives from sap_solar02_dis?)
all rights to STWB_WORK (sap_stwb_work_all) and everything inside it: create message, execute test cases, enter test results
If there are any SDN members having already defined tester and test coordinator composite roles in SM4, I am interested to hear which roles you used.
br: Kimmo

What roles should be assigned to HR and SD peoples.

Similar Messages

Maybe you are looking for