Application Development and Automation Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 
Read only

Mass Activity Changes

Former Member
0 Likes
2,349

I have a role with lots of t_code and i would like to give them full authorization, but change all ACTIVITY to 03. is there a way to change them all at once.

thank you

1 ACCEPTED SOLUTION
Read only

Frank_Buchholz
Product and Topic Expert
Product and Topic Expert
0 Likes
2,130

Hi Naimesh,

I don't see any other way than to expand the authorizations in PFCG and modify each authorization manually.

Sorry about that

Frank Buchholz

9 REPLIES 9
Read only

Frank_Buchholz
Product and Topic Expert
Product and Topic Expert
0 Likes
2,131

Hi Naimesh,

I don't see any other way than to expand the authorizations in PFCG and modify each authorization manually.

Sorry about that

Frank Buchholz

Read only

0 Likes
2,130

Hi,

As frank sugested thats the way even i had it worked out.

But i can save a few secs by opening only those branches where there is ACTVT field.

CTRL+F --> In field name put ACTVT and then only those branches open where the filked ACTVT is available.

This saves only a few secs of your time but the other hard work remains.

Br,

Sri

Read only

Former Member
0 Likes
2,130

pfcg-> Authorization tab -> Expert Mode for Profile Generation -> select SAP_ALL template

and adopt reference. Now i have a role with SAP_ALL and i want to change all the activity

to display. this could take me days, can you please help me with how i can do this fast.

or if someone is using >4.6 can you send me SAP_ALL_DISPLAY

thank you

Read only

Former Member
0 Likes
2,130

hello Naimesh,

Do one thing. Download the role on your desktop. Open the file with MS excel using open with option(do right click on the role download file). Then go to first entry for table AGR_1251. Select the row. Look for the value ACTVT *.

Copy it and do CTRL+F on the excelfile. Now use replace all option to replace ACTVT * with ACTVT 03. Save the file in .sap (original download format) and now upload the role. Check for any authorization object with field activity. See if 03 is properly positioned in the field. If not then alter the postion of 03 in the excel file and redo the upload. The main effort would come in adjusting the position of 03 in the excel file )

basically I would suggest to have download files of the role one for editing one as a simple backup.

i did it for a same role like yours and it worked.

Please award points if this worked for you.

regards.

Ruchit.

Message was edited by: Ruchit Khushu

Read only

0 Likes
2,130

THANK YOU VERY VERY MUCH RUCHIT

i did what u said and it looks like it worked, but some of the authorization object were inactive, and i can't make them active. could you please help me with that?

thank you very much

Message was edited by: naimesh patel

Read only

jrg_weichert
Explorer
0 Likes
2,130

hello Naimesh,

I´m affraig you will not get a view only /do nothing activity group by copying SAP_ALL and changeing only the field actvt to value 03.

Regards

Joerg

Read only

0 Likes
2,130

Hello Joerg,

i downloaded SAP_ALL and changed it to .xls format and replace activity to 03. now when i go to change authorization i can see all activity has been changed to 03, but lots of authorization objects are inactive. also when i did a role test its not working right.

it seems like it has no authorization.

do you know what i can do??

thank you

Read only

0 Likes
2,130

Dear Naimesh,

you can go to PFCG and activate the inactive objects. If you like, you can also continue with your creative role downloading / change offline / uploading. You will find a flag "X" in lines starting with AGR_1251 for every object that is inactive. I do NOT encurage you to do so! This approach can get you into a mess.

Furthermore, Joerg ment that changing all ACTVT fields to 03 does not give you a display role. Example: SM59 is controlled by object S_ADMI_FCD (no ACTVT field). Consequently, your "display" role has administration privileges for destinations.

Cheers,

Christian

Read only

Former Member
0 Likes
2,130

hello Naimesh,

The points made by Christian are very much valid and correct. Changing all activities to 03 doesnot mean that everything will have display all authorizations.

For example as pointed by Chrisitian SM59 has no activity related authorization object. It is controlled only through s_tcode (value SM59) and s_admi_fcd (value NADM). Similarily for SM04 it is PADM in S_ADMI_FCD.

Coming back to the inactive objects i am a bit surprised you are getting this error. I didnot get this error for my role. This error can come if the basic structure of the file has been tampered. If you would notice the file has just one column. I hope you have not used any formulas or text to column options. Please dont tamper with basic structure of the file. Please check that.

let me know.

Regards.

Ruchit.

Message was edited by: Ruchit Khushu