‎2006 Sep 25 10:04 PM
I have a role with lots of t_code and i would like to give them full authorization, but change all ACTIVITY to 03. is there a way to change them all at once.
thank you
‎2006 Sep 26 12:04 PM
Hi Naimesh,
I don't see any other way than to expand the authorizations in PFCG and modify each authorization manually.
Sorry about that
Frank Buchholz
‎2006 Sep 26 12:04 PM
Hi Naimesh,
I don't see any other way than to expand the authorizations in PFCG and modify each authorization manually.
Sorry about that
Frank Buchholz
‎2006 Sep 26 12:38 PM
Hi,
As frank sugested thats the way even i had it worked out.
But i can save a few secs by opening only those branches where there is ACTVT field.
CTRL+F --> In field name put ACTVT and then only those branches open where the filked ACTVT is available.
This saves only a few secs of your time but the other hard work remains.
Br,
Sri
‎2006 Sep 26 6:36 PM
pfcg-> Authorization tab -> Expert Mode for Profile Generation -> select SAP_ALL template
and adopt reference. Now i have a role with SAP_ALL and i want to change all the activity
to display. this could take me days, can you please help me with how i can do this fast.
or if someone is using >4.6 can you send me SAP_ALL_DISPLAY
thank you
‎2006 Sep 27 2:30 PM
hello Naimesh,
Do one thing. Download the role on your desktop. Open the file with MS excel using open with option(do right click on the role download file). Then go to first entry for table AGR_1251. Select the row. Look for the value ACTVT *.
Copy it and do CTRL+F on the excelfile. Now use replace all option to replace ACTVT * with ACTVT 03. Save the file in .sap (original download format) and now upload the role. Check for any authorization object with field activity. See if 03 is properly positioned in the field. If not then alter the postion of 03 in the excel file and redo the upload. The main effort would come in adjusting the position of 03 in the excel file )
basically I would suggest to have download files of the role one for editing one as a simple backup.
i did it for a same role like yours and it worked.
Please award points if this worked for you.
regards.
Ruchit.
Message was edited by: Ruchit Khushu
‎2006 Sep 27 6:10 PM
THANK YOU VERY VERY MUCH RUCHIT
i did what u said and it looks like it worked, but some of the authorization object were inactive, and i can't make them active. could you please help me with that?
thank you very much
Message was edited by: naimesh patel
‎2006 Sep 27 9:45 PM
hello Naimesh,
I´m affraig you will not get a view only /do nothing activity group by copying SAP_ALL and changeing only the field actvt to value 03.
Regards
Joerg
‎2006 Sep 27 11:52 PM
Hello Joerg,
i downloaded SAP_ALL and changed it to .xls format and replace activity to 03. now when i go to change authorization i can see all activity has been changed to 03, but lots of authorization objects are inactive. also when i did a role test its not working right.
it seems like it has no authorization.
do you know what i can do??
thank you
‎2006 Sep 28 8:36 AM
Dear Naimesh,
you can go to PFCG and activate the inactive objects. If you like, you can also continue with your creative role downloading / change offline / uploading. You will find a flag "X" in lines starting with AGR_1251 for every object that is inactive. I do NOT encurage you to do so! This approach can get you into a mess.
Furthermore, Joerg ment that changing all ACTVT fields to 03 does not give you a display role. Example: SM59 is controlled by object S_ADMI_FCD (no ACTVT field). Consequently, your "display" role has administration privileges for destinations.
Cheers,
Christian
‎2006 Sep 28 10:35 AM
hello Naimesh,
The points made by Christian are very much valid and correct. Changing all activities to 03 doesnot mean that everything will have display all authorizations.
For example as pointed by Chrisitian SM59 has no activity related authorization object. It is controlled only through s_tcode (value SM59) and s_admi_fcd (value NADM). Similarily for SM04 it is PADM in S_ADMI_FCD.
Coming back to the inactive objects i am a bit surprised you are getting this error. I didnot get this error for my role. This error can come if the basic structure of the file has been tampered. If you would notice the file has just one column. I hope you have not used any formulas or text to column options. Please dont tamper with basic structure of the file. Please check that.
let me know.
Regards.
Ruchit.
Message was edited by: Ruchit Khushu