cancel
Showing results for 
Search instead for 
Did you mean: 

BAPI to create,get Profiles and roles

Former Member
0 Kudos
1,438

Hi,

I am using the SAP RFC SDK to do the provisioning of entities in the SAP environment.

My SAP system is 6.20 .

I wanted to know if there are BAPI's which exist for the following

a)Profile creation

b)Profile Fetching

c)Role creation

d)Role Fetching

I could not find the same in the SAP IDM document provided for IAM vendors

Best Regards

Manoj

Accepted Solutions (1)

Accepted Solutions (1)

darren_hague
Contributor
0 Kudos

Hi Manoj,

Everything you need to know about this, and more, can be found in the following PDF from SAP: <a href="https://www.sdn.sap.comhttp://www.sdn.sap.comhttp://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/668e6629-0701-0010-7ca0-994cb7dec5a3">SAP Identity Management APIs</a>.

In summary:

To find a user's roles and profiles, use <b>BAPI_USER_GET_DETAIL</b>.

To assign & delete a user's roles, use <b>BAPI_USER_ACTGROUPS_ASSIGN</b> and <b>BAPI_USER_ACTGROUPS_DELETE</b>.

To assign and delete a user's profiles, use <b>BAPI_USER_PROFILES_ASSIGN</b> and <b>BAPI_USER_PROFILES_DELETE</b>.

Hope this helps,

Darren

<a href="http://www.fortybeans.com/">My blog</a>

Former Member
0 Kudos

Hi Darren

Thanks for the reply.

I have gone through this links.

IT has given the details with USER as the business object.

I would like to know in terms of ROLES and PROFILES.

Like how to create roles or how to search for a given role in SAP system

Best Regards

Manoj

darren_hague
Contributor
0 Kudos

Hi Manoj,

I've had a quick look in the system, and the best bet seems to be to look for function modules beginning PRGN - i.e. go to txn SE37, enter PRGN* and press F4.

Bear in mind that "Activity Group" is the old name for "Role", so functions with AGR in the name are probably to do with Roles.

All the best,

Darren

Frank_Buchholz
Product and Topic Expert
Product and Topic Expert
0 Kudos

Hi Manoj,

sorry for not having better news:

SAP does not offer a remotly callable API to create, change or delete roles (aka activity groups) or profiles.

You may have a look to the RFC functions of package S_PROFGEN, however, these RFC functions will not solve your request - and the usage is not supported.

Kind Regards

Frank Buchholz

Answers (0)