09-10-2008 8:31 PM
Hi All,
My team decided to assign basic user admin activities like lock/unlock, change password and change validity dates of user account, creation of user to Help Desk.
I was trying to find any role/group which would give access to ONLY this activities on xMII NW UME but no luck.
I did not find any roles with these activites like we have on PI Java NW UME(user admin/security admin/...).
Can you guyz suggest me, is there any way I can give only above authorizations to helpdesk.
Thank you All.
09-11-2008 8:28 AM
>
> I was trying to find any role/group which would give access to ONLY this activities on xMII NW UME but no luck.
> I did not find any roles with these activites like we have on PI Java NW UME(user admin/security admin/...).
Bernard, i guess he is talking in some UME terms and not ABAP. "....like we have on PI Java NW UME..."
Regards,
Zaheer
09-11-2008 6:45 AM
Hi Anil,
pls create your own role for user administration for your helpdesk.
Resetting passwords and unlocking can be covered by authorizations (S_USER_GRP, ACTVT=05), but setting validities requires 02, which 'opens' the complete SU01.
So as ever.....if you want to limit access....:
Create a z-variant in SHD0 for SU01 releasing only the fields the helpdesk may update.
Assign a z-tcode. Allow your helpdesk only to use that z-tcode and not su01.
Thats it.
b.rgds, Bernhard
09-11-2008 8:28 AM
>
> I was trying to find any role/group which would give access to ONLY this activities on xMII NW UME but no luck.
> I did not find any roles with these activites like we have on PI Java NW UME(user admin/security admin/...).
Bernard, i guess he is talking in some UME terms and not ABAP. "....like we have on PI Java NW UME..."
Regards,
Zaheer
09-11-2008 8:49 AM
09-12-2008 9:23 PM
you got it correct Zaheer its on Java stack and not on ABAP side, I see roles on PI NW UME for user admin, but not at xMII UME.
And as we know we have no option on Java side to customize tcodes or roles.
Any thoughts?
Thank you.
09-15-2008 8:57 PM
09-15-2008 9:13 PM
Hi Anil,
You can create a custom role with UME actions for user management.
UME Action Name : UME.Manage_Users
Check out this documentation for further info on standard UME actions:
http://help.sap.com/saphelp_nw04s/helpdata/en/5f/670db7939b8e48999d65f8a05ad611/content.htm
PS : Where there's a Will, there's a way;-)
Regards,
Zaheer
09-16-2008 3:07 PM
Zaheer...! It worked 'You Are The MAN'...I dont know how I missed this route...I am doing this on PI/XI...some times I become dumb......
I really appreciate your help and I will give full marks for your help.
Thanks Much!