Proxy access to MSS

[Former Member]

Hello,

I would really appreciate some help with the following issue.

Here at Gloucestershire County Council (UK) we have implemented Manager Self Service. My problem is that I have a team of advisors who do not have MSS access as they are not in "chief" positions. They are often asked to advise MSS users on how to do certain tasks but can't reproduce what the client is seeing.

My question is:- Is there a way in which an advisor can proxy as the MSS user and run the MSS tools as that manager without logging on as that manager?

The advisors all have high level access so they can see the data in back end clients so data access is not an issue.

I appreciate that this is probably a "novice" question, but we just don't seem to be able to work out how to do this.

Many thanks

Nick Bowling

[Former Member]

Hi Nick,

We're getting to grips with support roles for MSS as well at the moment, Im sure one of the MSS Security specialists on SDN will come up with a good answer, but there is another option here that you may not have considered - some kind of shadowing / remote connection support tool; to allow support teams to either take over a user's pc and / or SAP session remotely or to simply bring the end users SAP session up on their own screen to watch what the user is doing, in both cases all the support team needs on top is a phone.

There are loads on the market that change in scale in terms of number of features against cost, but they certainly will assist support teams in understanding a User's problem, and being able to talk them through what to click on etc; this can also get around the problem of not being able to recreate a user error in a test or dev system; another benefit is you do not then need to give support users update / end user roles in your production systems - which invariably they ask for !

Cheers

Steve

[Former Member]

I agree with Steve.

A long long time ago in the earlier days of SAPGUI there was a way of doing this, but it did not work very well and SAP soon hid it and later removed it from the system.

Your best option is something like NetMeeting where the user can Accept or Decline that you can see (or even control) a specific application on their PC.

Cheers,

Julius

[Former Member]

Did you Try the Option of using Delegated Administration? Search for "Delegated Administration' Documents in this website and hep.sap.com.

Gp.

[Former Member]

Hi,

Thank you all for your suggestions.

The idea of using remote access tools hadn't occurred to us and is one I think we should look at.

The suggestion about delegation is interesting. Currently we allow MSS "chiefs" to delegate when they are "out of the office" so that annual leave, sickness and mileage claims can continue to be updated and authorised. The suggestion implies that access can be delegated to one of our advisors. I guess my concern then would be would the original 2chief" still be able to use their access. I will certainly spend some time trawling the help site for this.

I still wonder though whether there is a simpler solution, role or profile which allows the advisor to proxy as the MSS user - I appreciate the potential security concerns - but it must be an issue for all SAP/MSS support teams.

Many thanks

Nick Bowling