10-08-2012 12:37 PM
Dear All,
We have recently patched our system for SAP_BASIS 700 18 to 700 23 and
PI_BASIS 700 18 to 700 23.
After which we are not able to mass generate roles from transaction
SUPC program SAPPROFC_NEW. We select Roles with Non-current profiles
and tick the check box Generate automatically. Though we are able to
generate roles individually.
We get the below mentioned error during mass generation
No roles found in the selected area
Message no. S#244.
Please suggest
Regards,
Sohrab Kapoor
10-09-2012 7:49 PM
Dear Sohrab Kapoor,
Thank you for providing the screenshots in the message.
Please be aware that SAP Note #547621 describes precisely the behavior
you are facing to this profile. Therefore, kindly have a look at the
'Solution' section, which states:
[...
o red: Profile generation not possible
You cannot select these roles before maintaining the
authorization data in the Profile Generator. This is because of
one of the following reasons:
- "For comparison"
After the last profile generation, transactions were added or
deleted in the role menu - merging of the authorization data
is therefore necessary. You can only generate the profile
after this merging process.
- "No authorization data" <<< YOUR CASE >>>
The role must be filled with authorization data before
profile generation.
In both cases, you can jump to the profile generator by
selecting the "Maintain role" or "Maintain authorization data"
buttons to perform the necessary rework tasks. When you return
to the SUPC, the updated role status is immediately displayed.
...]
So, you have to use PFCG. Save the profile (if no changes are required,
enter authorizations with 'expert mode' -> 'edit old status') and save
it. The profile will show up in yellow in SUPC and can be generated
there afterwards.
I hope I've helped with this reply. Do not hesitate on contact me again
if you have any more questions.
Thank you so much and best regards,
Felipe Fonseca.
10-08-2012 6:05 PM
Dear Sohrab Kapoor,
Kindly provide some screenshots illustrating the issue for further
investigation. We need you to confirm which is the Status Text of the
profiles you are trying to generate massively as well.
It would be great if you exemplified with a set of roles which have the
same statuses, trying to re-generate the profile thru SUPC and also
individually.
I'm looking forward to your feedback. Thank you,
Kind regards,
Felipe Fonseca
10-09-2012 7:49 PM
Dear Sohrab Kapoor,
Thank you for providing the screenshots in the message.
Please be aware that SAP Note #547621 describes precisely the behavior
you are facing to this profile. Therefore, kindly have a look at the
'Solution' section, which states:
[...
o red: Profile generation not possible
You cannot select these roles before maintaining the
authorization data in the Profile Generator. This is because of
one of the following reasons:
- "For comparison"
After the last profile generation, transactions were added or
deleted in the role menu - merging of the authorization data
is therefore necessary. You can only generate the profile
after this merging process.
- "No authorization data" <<< YOUR CASE >>>
The role must be filled with authorization data before
profile generation.
In both cases, you can jump to the profile generator by
selecting the "Maintain role" or "Maintain authorization data"
buttons to perform the necessary rework tasks. When you return
to the SUPC, the updated role status is immediately displayed.
...]
So, you have to use PFCG. Save the profile (if no changes are required,
enter authorizations with 'expert mode' -> 'edit old status') and save
it. The profile will show up in yellow in SUPC and can be generated
there afterwards.
I hope I've helped with this reply. Do not hesitate on contact me again
if you have any more questions.
Thank you so much and best regards,
Felipe Fonseca.
10-11-2012 9:39 PM
Dear Felipe Fonseca,
That was exactly what i was looking for.
Thanks a lot.
Regards,
Sohrab Kapoor