Re: How to switch a whole SAP system to be Display ONLY
Yes, your could exclude some tcodes and also add other values and fields which have an activity type of control but are not ACTVT. Which ones do your suggest? ;-) Cheers,Julius
View ArticleRe: Not able to generate profile in PFCG
Actually in higher releases, once you have run step 1 the option is greyed out - for this very reason. Cheers,Julius
View ArticleRe: How to switch a whole SAP system to be Display ONLY
I choose creating new role from sap_all. Because of there aren't more time to change all roles (+1000). And no more people to test new roles. Also if you can not change some tcodes authorizations you...
View ArticleRe: How to switch a whole SAP system to be Display ONLY
Hi O.K I had mentioned do not create a SAP All display up in my comments. Julius is correct - you will have a bunch of people either roll their eyes and dismiss your comment or jump in with examples...
View ArticleRe: How to switch a whole SAP system to be Display ONLY
the other bit to consider here - back to the business requirement and this being a production system If you create a display all role based on SAP_ALL and assign to end users then you risk providing...
View ArticleRe: How to switch a whole SAP system to be Display ONLY
Hi Colleen, I totally agree that buidling a display role as equivalent for SAP_ALL does not work. I know this, because I tried and completely failed (see your linked post). But in my opinion it also...
View ArticleRe: Not able to generate profile in PFCG
Hi Dan, Yes, step 1 should only be executed once after system setup. Otherwise all your customer specific SU24 data, that you maintained over the past years, will be lost. As I described, step 1 copies...
View ArticleRe: How to switch a whole SAP system to be Display ONLY
Hi Stefan I saw Bernand reply to you and my attempts at putting the case forward for Non-Prod wasn't successful either For production, I agree role should be built and driven via the role menu with...
View ArticleLocation of Security Logs
Hello, We are unable to login with Administrator user to http://Hostname:50000/irj and http://Hostname:50000/nwa. The issue is "We are not getting any error message".After the administrator's passwd is...
View ArticleRe: Location of Security Logs
check the logs under \usr\sap\<SID>\J<instance_no>\j2ee\cluster\server0\log\ you can find default traces and under system there are security logs.
View ArticleRe: Add Blart Validation to TCODE FPE1
Thanks Alex. Instead of using User Exit's, I used event 0060, which we were already using for some validation's. Thanks anyway Mike
View ArticleRe: Location of Security Logs
First look at the default traces which are at this location: usr/sap/<SID>/<Instance_ID>/j2ee/cluster/server/log/defaultTrace.x.trc reproduce the issue and look at the latest modified...
View ArticleRe: Not able to generate profile in PFCG
Thanks again for your claification! Everything in regard to SU25 make a lot more sense now. Thanks,Dan
View ArticleRe: Protecting user accounts - Reducing user account sharing
Hello Dionisio, have you alread activet the parameter "login/disable_multi_gui_login" to disable multi logon from users? the other thing with your idea about the e-mail notification is, that you must...
View ArticleRe: Protecting user accounts - Reducing user account sharing
Thanks Bernhard, Yes, we have multilogin disabled and sure, we will need an internal table to control the user's terminal (probably more than one, and through and authorization process) Regards,Dionisio
View ArticleRe: Protecting user accounts - Reducing user account sharing
Hi, Bernhard has pointed out the most obvious method of reducing this. If you do need to put in additional validation after logon then you can use exit SUSR001 to insert new code (caveat, this will...
View ArticleAdvance warning for SAP user id validity expiration on SAP Enterprise Portal
Dear Guru'sI have a doubt and would need your help to help me out...Can we show users a notification warning message if their SAP account (not password) validity is about to expire when they logon SAP...
View ArticleRe: Protecting user accounts - Reducing user account sharing
Dear Alex, I have the same experience about sharing their "only" password, and I believe, it will best address the sharing issue. Unfortunately that solution is out of our reach for now... About the...
View ArticleRe: Protecting user accounts - Reducing user account sharing
Hi Dionisio, I used the term "validation" inappropriately. SUSR001 is the exit that happens immediately after logon so if you want something to happen such as sending an email, recording something,...
View ArticleLSMW Batch processing issue
While fetching report from S_BCE_68001425 transaction using LSMW batch process i got an error.It wasn't able to fetch report. What I am trying to do is to automate the process of fetching role report...
View Article