Re: Restricting access to profit center / cost center reports based on user...
Hi,Have you checked and followed the Note 1331317 - EhP3: Authorization check for profit center? Please mention some examples of reports that would be used. BREwa
View ArticleRe: How to switch a whole SAP system to be Display ONLY
Thanks All for sharing your knowledge. I am really amaized Many THANKS !!
View ArticleRe: HRAUTH: Structural authorizations and SAP BW
Org units 107732,108661,108662 are belong to 108053 head node where he is the manager. He should have access to them. As per the current date he is the manager of orgunit 108053 and its sub nodes .you...
View ArticleSystem Upgrade to EHP6
I would like to know when SAP system get upgraded to EHP6 (or any system upgrade), does the custom SAP roles get automatically updated? I know SU25 need to be run after the system upgrade, but prior to...
View ArticleRe: CUA Security - How to remove expired roles from users
You can remove User roles with SU10. You have to make sure the validity date cover all the range. I usually put valid from (01/01/1000) valid to (12/31/9999) and make sure to select the "remove" radio...
View ArticleRe: Not able to generate profile in PFCG
Hi Stefan, When the system upgraded, the custom SAP role does not get affect until SU25 Step 1 & 2A is executed, right? Our Basis team said once the system is upgraded all of the custom SAP roles...
View ArticleRe: Restricting access to profit center / cost center reports based on user...
Hi Ewa, Many thanks for your time. We already have the restriction on standard hierarchy of cost centre and profit centre.we need one more level of authorization checking which will be done on the...
View ArticleRe: SAP User tables
just use SE16 or SE16N to look at tablename USER_ADDR. If you're certain that the names that you have match the names in the SAP accounts, you can use the various fields to filter the data using the...
View ArticleRe: HRAUTH: Structural authorizations and SAP BW
Hi Krishna In HRAUTH we see these values for the user:MANAGER 1 01 O O 107732 108053 PERSON 12 0 X F 01.03.2014 31.12.9999 RH_GET_MANAGER_ASSIGNMENTMANAGER 1 01 O O 107850 108053 PERSON 12 0 X F...
View ArticleRe: HRAUTH: Structural authorizations and SAP BW
Thomas,If I assume MANAGER structural profile should give access to Org unit, Poisition, Job , person etc in the head org unit where he/she isholding manager position.I see better option to use...
View ArticleRe: HRAUTH: Structural authorizations and SAP BW
Thanks Krishna We use report RHBAUS.Is this report sufficient or do we need to run the other reports as well? RegardsThomas
View ArticleAdd Blart Validation to TCODE FPE1
Hi community. While creating all the roles and set all the authorization objects, I wasn't able to accomplish one of the clients' requirements. I have to check if the user is authorized to post...
View ArticleRe: Add Blart Validation to TCODE FPE1
Hi Mike, The link you referred to was missing a critical step which was to update the ABAP code to check for the custom object. I'm no developer but it looks like user exit FKYA001X could be used to...
View ArticleRe: HRAUTH: Structural authorizations and SAP BW
This is sufficient . INDX table content is moving to BI extractor as i understood , if INDX contenent is perfect then would not be any issue in BI side To correct the issues of 1)dupllication of...
View ArticleRe: Not able to generate profile in PFCG
Hi Dan, when the system gets upgraded SAP standard roles will be replaced and that is the reason why no customer should use these standard roles from SAP productively. These roles are meant to be...
View ArticleRe: Not able to generate profile in PFCG
Hi Stefan, Thank you so much for the clarification. Thanks,Dan
View ArticleRe: Not able to generate profile in PFCG
Stefan, On your response, should Step 1 be run only on a new system setup? Or it should be run everytime when the system is upgraded to a newer verison? Thanks once again. Dan
View ArticleRe: How to switch a whole SAP system to be Display ONLY
Hi, You can create a sap_all display role. How? You create a role on PFCG like Z:Sap_all_display. Then import standart sap_all role in to it.. And save and execute it. Then download the role to...
View ArticleRe: How to switch a whole SAP system to be Display ONLY
I have lost count of how often this has been suggested and then flamed... Try going to CS01 and you can create a cost center. You can. Try going to MM03 and displaying change documents. You cannot. Try...
View ArticleRe: How to switch a whole SAP system to be Display ONLY
Hi Julius, You are right but you can change some authorizations while saving the new role. You can export some t-code authorization from s_tcode object. Am I wrong? Regards, O.K.
View Article