Re: Using eCATT and removing roles in SU01 screen
Hi Amit you need to extract the AGR_USER table and have your input to be the user, role and valid from and to dates. You then record SU10 doing a removal of one entry. It will loop through each...
View ArticleAuthorization object B_BUPA_FDG
Hi, We are working on tightening our authorizations on business partners.We have introduced the B_BUPA_FDG, so on field group.Also field groups have been added to customizing (define field group for...
View ArticleClik here to view.
Re: Deactivate password for users (mass) with SSO
Hi Patrick, I followed the steps as mentioned but I was able to login with my user name and password second time. I created a new user and assigned the policy. My first login asked me to change the...
View ArticleRe: Deactivate password for users (mass) with SSO
did you log on using SSO in between? The password will only be deleted when you access the system using SSO and the password being expired.If you want to completly block this group from using...
View ArticleRe: SSF in ABAP
Hello Willi, There are documents about SSF API: Secure Store & Forward (SSF) API SpecificationsSecure Store and Forward (SSF) Programmers' Guide STR_PAB is the "Private Address Book" value in SSFA....
View ArticleRe: can we lock the Transaction codes at Plant level or at company code level ?
Hi Vikas One of the way can be to create a separate role with the intended transaction posting access /plant access and assign that role to users for time they are supposed to perform posting. ThanksAnika
View ArticleUser Group org unit
Hi guys, I have an issue with user group (S_USER_GRP) when I create role in my dev system with SU01 or any other security T-codes that brings authorization object S_USER_GRP but some reason it doesn't...
View ArticleRe: User Group org unit
hi mukhtar,Please Check table USVAR regarding org level.Regards,Ankit Patel
View ArticleRe: can we lock the Transaction codes at Plant level or at company code level ?
Hi Vikas can we lock the Transaction codes at Plant level or at company code level ? This part of your question is too generic for an answer to be given. IT implies you do not have the basic SAP...
View ArticleRe: Issue with HR Security
Why you would you run $SYNC for this scenario? How to Reset different SAP buffers - Basis Corner - SCN Wiki Resetting buffers will not fix this issue, is typically restricted to Basis team only and is...
View ArticleRe: User Group org unit
USGRP is not an org value by default. It sounds like someone ran PFCG_ORG_FIELD_CREATE (or PROMOTE) via SE38 directly in QA system Your options are to either promote it in DEV and then fix the roles...
View ArticleRe: Issue with HR Security
This sounds a bit like strucht auth not properly switched off. If it's switched on, but no profiles assigned in T77UA and ALL assigned to SAP* in T77PR, then you won't see any effect as long as people...
View ArticleRe: Issue with HR Security
Yep, $SYNC will not help here. If the buffer is corrupt, then in SU53 via the menu you can reset the buffer. This is the same as report RSUSR405 or SU01 command RSET which sets the flag to rebuild the...
View ArticleClik here to view.
Re: Issue with HR Security
Hey Julius As soon as Sven wrote his reply I it made sense (pity a few off us all asked the question at the beginning regarding status of structural). But yes, actual screen shots of the configuration...
View ArticleRe: User Group org unit
Thanks for the response, I know my manager runs this program very often to bring some fields into the org level but I already tried to promote this field (CLASS) to org level in DEV but it gives me...
View ArticleRe: User Group org unit
Colleen, I also checked my another instance and it shows up there as an org level, it makes more sense for SAP to have this as an org level because if you have more than 20 company code and each...
View ArticleRe: User Group org unit
In a better world you would not have any org. levels, but rather application tools to cascade authorization values with a link to role variables. That is also what org. levels set out to do, but had...
View ArticleRe: User Group org unit
See SAP Note 1739055 for the solution to this specific problem. Cheers,Julius
View ArticleRe: User Group org unit
Julius thanks for the details but as I'm thinking and researching more about this I found out that user group is promoted as an org unit in EHP 7 by SAP and We went live with SAP HANA plus with EHP 7...
View Articleldapmodify Department Head/Manager
Hi, I have done a program in which i am changing the attributes of Active directory through SAP/ABAP FM 'SPLDAP_RECEIVE_ATTRIBUTES'.By using this FM i am able to change active directory fields e.g;...
View Article