tcode PA30

[Former Member]

Is there any method to delimit IT105 for no. of users in one go .

[JPReyes]

This look like a interview question to me... I'm giving you the benefit of the doubt as you just joined, but please give more information regarding your problem and scenario.

Also Read the "Rules of Engagement" in detail

Regards

Juan

[Former Member]

I guess this question should go in SECURITY

Juan,

Actually I had to delimit many users for IT105 , I did it one by one but I just want to know if there is any method to do that, for future .

thanks

kapil

[JPReyes]

I don't think thats possible.

I'll move the thread to Security to see if you get a better answer.

Regards

Juan

[Former Member]

k

[jurjen_heeck]

> Actually I had to delimit many users for IT105 , I did it one by one but I just want to know if there is any method to do that, for future .

Please elaborate a bit more on what it is you're trying to accomplish. User rights are given through roles (and profiles). If you're looking for a way to mass-maintain roles we have to dissapoint you. User mass-maintenance is done via SU10, or if you're trying to take one role away from many users and you're not using central user administration you can go to PFCG and edit the 'users' tab of the role itself.

[Former Member]

It's not a role .

PA30 tcode is used to maintain some HR data , in that I have to delimit a infotype 105 for no. of users.

thanks

kapil

[jurjen_heeck]

> It's not a role .

>

>

> PA30 tcode is used to maintain some HR data , in that I have to delimit a infotype 105 for no. of users.

So you have to amend some roles containg PA30? There's no way to delimit infotypes directly for users.

[Former Member]

Role is not in picture.Actually I have to execute pa30 then put users position(assignd to user) put communication type and click on cng button and put expiry date in past.

this process I had done no. of times for no. of users.

Is there any other way to do this?

thanks

kapil

[jurjen_heeck]

Ah, There's a big misunderstanding here. Since you talked about "delimiting" everybody assumed this is a security question. At least I thought you wanted to limit the number of SAP-users being able to change IT 0105.

It should never have been moved here as this turns out to be a HR functional question. You want to mass-maintain IT 0105.

I'm afraid I can not help you with that.

Sorry about the confusion

Jurjen

[Former Member]

Is this some manual step in a self-registration process?

[former_member74904]

this is not security related, but I think making a recording in LSMW (depending on the amount of PERNRs you need to change) will do nicely for your requirement?

[Former Member]

Kapil,

Your question is greatly appreceiated. Your question is certainly realted to Security. Now infotype 0105 the commucation one is critical and is needed for every user to be attached to.

If you can revist the of the Structural auths on your system, you can perhaps accomplish your question.

I cannot but say --> that on this forum there are great many good points -- for instance no body is bothered of points..but there are very many corrections to be made for example :

" I saw a remark: this is an interview question ...but I give benefit o f doubt !" This is a a public forum focussed on educating folks sharing knowledge irrespective of its an interview question or not ! People can answer if they want to , resist from answering if they want to ( as to many of my questions !! )

The suggestion I have is ' moderators need to be monitored , their association is as modertor needs tobe limited by time .say one year max .."

So kapil Keep posting ..keep writing ..unlearned folks like me learn !

[former_member74904]

george,

I'm curious as to how you came to conclude that this is necessarily related to security? as far as I can tell kapil needs to delimit a number of IT0105 records. this can be either an emailaddress or a user ID (or custom subtypes). in the case of a user ID, you could be right in assuming this has something to do with structural authorizations, but who knows...

let me add some fuel to the fire by saying I don't think much of one sentenced-questions where others should guess what the topic is actually about.

[Former Member]

>

> Kapil,
> Your question is greatly appreceiated. Your question is certainly realted to Security. Now infotype 0105 the commucation one  is  critical and is needed for every user to be attached to.
> 
> If you can revist the  of the Structural auths  on your system, you can perhaps accomplish your question.
> 
> I cannot but say --> that on this forum there are great many good points -- for instance no body is bothered of points..but there are very many corrections to be made for example :
> 
> " I saw a remark: this is an interview question ...but I give benefit o f doubt !" This is a a public forum focussed on educating folks sharing knowledge irrespective of its an interview question or not ! People can answer if they want to , resist from answering if they want to ( as to many of my questions !! ) 
> 
> The suggestion I have is ' moderators need to be  monitored , their association is as modertor needs tobe limited by time .say one year max .."
> 
> So kapil Keep posting ..keep writing ..unlearned folks like me learn !

I say its a grey area, with us security maintains all IT105 and subtypes.

Mass delimiting can only be accomplished by SECATT. Why that many delimitations? I only have to delimit 105s if the person have multiple PERNR due to many jobs and one the positions is termed 99999999.

If you can provide us more info on the purpose of the delimitation, we can give you better answers.

[Former Member]

I highly appreciate all your help.

Actually with us security people only maintain infotype and subtypes.

So what exactly my question is?

To all users some position is assigned .Now by putting this position no. in pa30 screen and infotype which you want to maintain. Click on chng button, now screen moves to another screen where you can put dates til when this infotype ll be valid and save the entry.

So this process I had repeated no. of times.

Is there any short cut method for this?????

Thanks

kapil

[Former Member]

>

> 
> Is there any short cut method for this?????
> 
> Thanks
> kapil

Yes, if you know how to create SECATT scripts.

[Former Member]

To save you a lot of time. We asked our ABAP team to develop a program that will auto-populate infotype 0105 subtype 0001 for every new user and will remove it any time there is a leave action. Our team said this would not be a huge deal for them. This also would assume there is some logic to your user ids, which may or may not be the case.

While, yes, this is technically an HR maintance question, HR does not always know how your ID being tied to your employee record could affect your security. If you are not careful you can have people doing PA maintance on their own records if you, as security, do not enforce 0105 to be accurate.

Edited by: Waldon Smith on Oct 9, 2008 11:01 PM

[Former Member]

Going to have to way in on this one ! Cant beleive people are arguing whether you should have asked it - its a valid question - Kapil all you need to do in future is put as much detail as you can behind it.

Infotype 105 security or hr ? It depends entirely on the individual organisation, our HR department initially had no idea of the impact on security if they changed it. We have non-SAP applications also linked to the 105 infotype so control of who can change it and when is a decision that for us should never be made without security being involved - we just dont do it or fix it per se.

What you need to do in this situation really is to find a business owner for the issue, and determine who in your organisation is responsible for supporting that business owner. Ideally it should be your HR Support team as its really an HR process / functional issue, with input from security support if required.

Cheers

Steve