02-22-2007 10:17 AM
02-22-2007 10:37 AM
Hi Gopal,
<b>PFCG</b> is a tool used to Create Roles/Activity Groups.
Where as <b>PFUD</b> is for User Master Data reconciliation:
To ensure that only authorization profiles which are valid are contained in the user master record each day, you must execute a daily profile comparison.
So that changes in the user master record are effective, you should execute the comparison before the user logs on.
There are two ways to execute the comparison.
As a background job before the start of each day.
If report PFCG_TIME_DEPENDENCY is run every night, the authorization profiles in the user master will be current each morning (assuming that the job has run correctly). The best procedure is to schedule this as a periodic background job.
Report PFCG_TIME_DEPENDENCY must also have run after each import of roles from other systems.
Using Transaction PFUD, Compare User Master
As an administrator, it is recommended that you use this transaction regularly to check that no errors have occurred in the background job. Any such errors can then be corrected manually.
To ensure that the authorization profiles in the user master records are always current, you should always execute a complete comparison of all roles (by choosing Complete comparison).
Following the comparison the system displays a log which includes any errors that occurred (background processing log for background report).
Please award points if it is useful.
Thanks & Regards,
santosh
02-23-2007 10:52 AM
02-23-2007 6:39 AM
hi...
PFUD stads :
During updating of IDOCs, the user master comparison is started automatically. Nevertheless, the PFUD should run at night because this is when the static profile assignments are determined from the time-dependent role assignments.Enhanced consistency checks and corrections are also carried out (Remove the profile assignments of deleted roles, delete generated profiles and authorizations that are no longer used).
You can search for the message "No authorization profiles for activity group.......available" in the job log. These roles must be checked.
PFCG stands:
Generally we use it for creating a transport number to transport it to our production client.
I think this will solve your problem.