CRM 7.0 - PFCG Role build query
Hi Team, We have recently upgraded from CRM 4.0 to CRM 7.0 and we are in the process of role redesign. We have been advised by our CRM functional consultants that there will be one business role (same...
View ArticleNo credentials were supplied - Unable to establish the security context
Hi Experts I have got the task to enable encryption between SAP GUI and SAP Server. Here is a brief description, what I have done so far: 1) installed SAPCRYPTOLIB2) Configured STRTUST - like:System...
View ArticleMicrosoft Kerberos SSP setup for ABAP and SAPGUI
Hello, I'm trying to configure SSO from SAPGUI to SAP ABAP using Microsoft SSP and I'm running into issues. My information is as follows. SAP Server: Windows 2008 R2AD Domain Server: Windows 2008...
View Articlemanagement of autorizacions from the module organization
Hi, I need your help, I'm creating the roles for the users, I have 3 diferent roles which are almost equal, these have the same objects, the only difference is the value of certain fields like...
View ArticleDerived roles - Issues returning to standard concept
Hi All, I tried unsuccessfully to convince the client to stay away form derived roles, actually based on one of Julius comments Best practice is actually to avoid the pestilence of derived roles......
View ArticleSecurity parameters
Hi All, In SAP 4.7 version we have below security parameters but in SAP Netweaver 7.3 we do not have. Kindly suggest what are the alternate parameters for these. 1. Login/password_max_new_valid 2....
View ArticleUser ID Issue
Hi, A user (Psmith) is having an issue running a query in portal. If we copy his/her account (Psmith) to another name (P1smith), he/she has no issue. We tried to deleted and recreated the account...
View ArticleNewbie question: securing SAPJCo-based connection with JGSS
Hello there, I hope this's the correct forum for this... I handle security with a large multi-user server implemented in Java that implements SSO via Java's GSS API (called, imaginatively enough,...
View ArticleAuthorization field input values changed during upgrade
Hi All, Recently we did upgrade from 4.6C to ECC 6 EHP5.... We found changes happened in Tcodes, Auth. Object proposal... we found it & changed accordingly... But, We found some of the Auth. Object...
View ArticleProtection level when using SNC Client Encryption
Hello,I have a two questions.When using SNC Client Encryption to secure communication between SAP GUI and SAP Server, is it still possible to choose between one of the three SNC protection levels...
View ArticleSCUM fields are disabled
Hi All, Actually we are facing an issue like, Our landscape has almost 12 systems in CUA. all the roles and user admin we do through Central system. But the issue is, after system refresh all the CUA...
View ArticleAuthorization Object for ML83 tx (by Plant)
Hi everybody, I need to create an authorization object by plant (just for visualization) in ML83 tcode. Do you know any ? Thanks, Luis G.
View ArticleNo credentials were supplied - Unable to establish the security context
Hi Experts I have got the task to enable encryption between SAP GUI and SAP Server. Here is a brief description, what I have done so far: 1) installed SAPCRYPTOLIB2) Configured STRTUST - like:System...
View ArticleRestricting Purchasing Organization in SRM 7.02
Hello,We have created Z roles for the users which are copied from the standard SAP roles. We need to restrict the users based on purchasing organization. As per the functional team Input the the...
View ArticleDelete roles from a certain system : BAPI_USER_LOCACTGROUPS_ASSIGN
Hi All, I have written a code which determines which users' roles should be deleted from which systems. The code is using BAPI_USER_LOCACTGROUPS_ASSIGN to delete the roles. Now here is what happens...
View ArticleMass deletion of roles from users
I want to delete all roles from locked users. Is there a specific transaction for this instead of SU10? In SU10 one has to enter the roles to remove.
View ArticleUnable to Create 'Lock' Records
Dear Experts, We have implemented (1) Structural Authorization, (2) Personnel Number Check plus (3) lock/unlock authorization for monetary infotypes in HR module. Current issue: users are able to...
View ArticleCanonical name - mass update
Dear community I am searching for a mass update possibility for canonical names (SU01 - SNC tab).Transaction SNC1 is not sufficient as it cannot handle small letters, only capitol letters. I thought...
View ArticleHow to only synchronize one specific LDAP user group with SAP?
Hi, Hopefully this is the correct forum to post this in. I want to have continuous one-way synchronization of users from my LDAP server to my SAP central system. I've started configure in SAP using...
View ArticleSAP Auth. default values of transactions inconsistent at the time of running...
Dear SAP gurus, Need an urgent help. After upgrade of the system from ECC6.0 EHP4 to EHP6, when I am running SSUA tool to find the security impact , I am getting the message Auth. default values of...
View Article