Re: User can not change the Account Assignment in Header and Item for Sales...
Moved from SAP ERP Sales and Distribution (SAP SD) to Security
View ArticleRe: Disable X.509 Certificate Selection when opening a SSO enabled Solman...
Hello Patrick. of course :-) C:\OpenSSL-Win32\bin>openssl s_client -connect pfa.sap.jenoptik.corp:9443 -prexit CONNECTED(000001E4)---Certificate chain 0 s:/CN=cipfa08.sap.jenoptik.corp...
View ArticleSecurity Certification
C_TADMSEC_04Is it still the current exam code for SAP Security certification ?
View ArticleRe: Security Certification
visit Training and Certification Shop for more details and training and certification provided in your country.
View ArticleRe: How to switch a whole SAP system to be Display ONLY
Julius,It has been a while since I worked there, but my recollection is that when in doubt, they locked it. Since the intention was to have a reporting instance with production data of <24 hours old...
View ArticleRe: How to switch a whole SAP system to be Display ONLY
Nancy,My recollection is that the job run by Basis locked them all, then unlocked the specified display/ reporting transactions. You had to go through a review and approval process to have another...
View ArticleRe: How to switch a whole SAP system to be Display ONLY
And don't forget transactions line ME23N that start as display transactions but can switch to change mode without needing access to transaction ME22N. You do still need change authorisation, but you...
View ArticleClik here to view.
Re: HRAUTH: Structural authorizations and SAP BW
Hello Krishna Here you can see the values in the PSA of 0HR_PA_2: |O | 102001|01.01.1800|31.12.9999|MANAGER X |O |...
View ArticleRe: How to switch a whole SAP system to be Display ONLY
Locking all tcodes and then unlocking only some reporting. Yes, that would probably work to create a reporting only daily copy of a SAP system. Nice idea actually! Whether that fits the shoe of a...
View ArticleRe: How to switch a whole SAP system to be Display ONLY
What do you mean by if you were paranoid? ;-) Yes, good point about navigation and switching modes... But for pure reporting only, I think Gretchen's solution wpukd work for the usual reporting...
View ArticleRe: How to switch a whole SAP system to be Display ONLY
What you could additionally do is close the FI and CO periods in OB52 and OKP1. That will bring quite a lot to a stand still... Cheers,Julius
View ArticleRe: How to switch a whole SAP system to be Display ONLY
We want to keep the system for reference only, also for auditor., We are in Canada and they tranfer all SAP systems oversea.
View ArticleRe: How to switch a whole SAP system to be Display ONLY
Auditors like certainties. In general "we think it is read only, but we can't be sure" doesn't cut it. Especially if external accounts are at stake. For internal reference I'd go for the "change all...
View ArticleRe: CUA Security - How to remove expired roles from users
Hi Frank. Our security team need build one document where describe Step by step how remove roles from CUA to users in child systems. You know any site where i cand find this information? Thanks Best...
View ArticleRe: How to switch a whole SAP system to be Display ONLY
okay, that's good to know... I only raised this as I was on a customer site during an upgrade and we had issues with PFUD/logging on. Quite a large number of users had a "all users role assigned",...
View ArticleRe: How to switch a whole SAP system to be Display ONLY
No, that sounds like an old lock problem on role assignments in CUA. It was fixed a few years ago to only lock the user locally. GRC noise might also get in the way in future, but currently it does not...
View ArticleRestricting access to profit center / cost center reports based on user...
We need to give access to cost center and profit center reports only for ones own cost/profit center.like if I own 2 cost center and 3 profit center (can be identified by transaction code KS03 / KE53,...
View ArticleRe: Restricting User Status in CRM
Good afternoon Some quick thoughts: - The current status can be seen by any user no matter the availble authorisation. - A combination of authorizations as Neha has suggested + settings in the status...
View Article