This website is not affiliated with, sponsored by, or approved by SAP AG.

Finding Profiles with a certain value

SAP Security

Moderators: thx4allthefish, Snowy, jurjen

Finding Profiles with a certain value

Postby sapnov05 » Sat Jul 24, 2010 5:29 pm

Hi,

Some of our profiles have gotten messed up as one of the objects (plant) got an incorrect value set in it for authorization - a distortion of the actual plant code. Now, when the users try to do any transaction from that plant, the authorization fails. I need to fix all these profiles...what is the best way to find all the profiles which have this incorrect value in them (by doing a search for that incorrect value)? I tries SUIM but that is not giving me the results...I am able to get the roles which have this incorrect value by doing a search by Field Name in Roles > Roles by Complex Selection Criteria but the same utility is not available in searching for the Profiles by Complex Selection Criteria. I have to fix these profiles and thereby the roles by replacing this incorrect value with the correct one. So how can i go about finding these profiles?

Appreciate any directions?

Many thanks in advance!

sapnov05
 
Posts: 274
Joined: Sun Feb 06, 2005 8:35 am

Re: Finding Profiles with a certain value

Postby Snowy » Mon Jul 26, 2010 6:01 am

I am moving this out of the BASIS forum.
SapFans Moderator

Search: http://www.sapfans.com/forums/search.php
Notes: http://service.sap.com/notes
Help: http://help.sap.com
Rules: http://www.sapfans.com/forums/viewtopic.php?t=344127
Snowy
 
Posts: 29369
Joined: Mon Oct 21, 2002 2:33 pm
Location: 3.1415926535

Re: Finding Profiles with a certain value

Postby sapnov05 » Mon Jul 26, 2010 6:56 am

Snowy wrote:I am moving this out of the BASIS forum.


Hi Snowy - where else should I be putting this? It is a BASIS issue relating to user profiles and roles.
sapnov05
 
Posts: 274
Joined: Sun Feb 06, 2005 8:35 am

Re: Finding Profiles with a certain value

Postby berryd » Mon Jul 26, 2010 8:27 am

Hi

Please could I ask why you are trying to update the profiles directly instead of using PFCG? All the work shoould be done in the profile generator and then generate (PFUD say) to update the profiles otherwise (as far as I understand) you will end up in a mess having roles and profiles out of sync after transporting. Been a while since I accessed SAP so I may be missing the plot unfortunately :-(

The 'moving from BASIS' question I leave to the moderator.
Real Daleks don't use the stairs. They just level the building.
Well - okay - so now they can fly - that's not fair!
berryd
 
Posts: 179
Joined: Fri Feb 27, 2004 6:30 am
Location: here.. I think

Re: Finding Profiles with a certain value

Postby jurjen » Tue Jul 27, 2010 6:09 am

sapnov05 wrote:It is a BASIS issue relating to user profiles and roles.

Which makes it a security issue ;-)
jurjen
 
Posts: 316
Joined: Wed May 17, 2006 8:17 am
Location: The Netherlands

Re: Finding Profiles with a certain value

Postby henrik » Tue Jul 27, 2010 2:58 pm

Answer depends on if it's roles or profiles we are talking about...
For roles, use AGR_1252 to identify any roles with plant ($WERKS) and filter on what you can for naming convention or values.

If purely profiles - which I highly doubt - use UST12

Hope that helps
www.turnkeyconsulting.com.au
henrik
 
Posts: 485
Joined: Wed Oct 23, 2002 6:38 am
Location: Sydney, Australia

Re: Finding Profiles with a certain value

Postby TattooDave » Tue Jul 27, 2010 7:15 pm

Either way you can use SUIM and search using the multiple report options there.
TattooDave
 
Posts: 202
Joined: Mon Aug 23, 2004 12:26 am
Location: Brisbane, Australia


Return to SAP Security

Who is online

Users browsing this forum: No registered users and 3 guests




This website is not affiliated with, sponsored by, or approved by SAP AG.