BAPI to create,get Profiles and roles

[Former Member]

Hi,

I am using the SAP RFC SDK to do the provisioning of entities in the SAP environment.

My SAP system is 6.20 .

I wanted to know if there are BAPI's which exist for the following

a)Profile creation

b)Profile Fetching

c)Role creation

d)Role Fetching

I could not find the same in the SAP IDM document provided for IAM vendors

Best Regards

Manoj

[darren_hague · Accepted solution]

Hi Manoj,

Everything you need to know about this, and more, can be found in the following PDF from SAP: <a href="https://www.sdn.sap.comhttp://www.sdn.sap.comhttp://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/668e6629-0701-0010-7ca0-994cb7dec5a3">SAP Identity Management APIs</a>.

In summary:

To find a user's roles and profiles, use <b>BAPI_USER_GET_DETAIL</b>.

To assign & delete a user's roles, use <b>BAPI_USER_ACTGROUPS_ASSIGN</b> and <b>BAPI_USER_ACTGROUPS_DELETE</b>.

To assign and delete a user's profiles, use <b>BAPI_USER_PROFILES_ASSIGN</b> and <b>BAPI_USER_PROFILES_DELETE</b>.

Hope this helps,

Darren

<a href="http://www.fortybeans.com/">My blog</a>

[Former Member · Accepted solution]

Hi Darren

Thanks for the reply.

I have gone through this links.

IT has given the details with USER as the business object.

I would like to know in terms of ROLES and PROFILES.

Like how to create roles or how to search for a given role in SAP system

Best Regards

Manoj

[darren_hague · Accepted solution]

Hi Manoj,

I've had a quick look in the system, and the best bet seems to be to look for function modules beginning PRGN - i.e. go to txn SE37, enter PRGN* and press F4.

Bear in mind that "Activity Group" is the old name for "Role", so functions with AGR in the name are probably to do with Roles.

All the best,

Darren

[Frank_Buchholz · Accepted solution]

Hi Manoj,

sorry for not having better news:

SAP does not offer a remotly callable API to create, change or delete roles (aka activity groups) or profiles.

You may have a look to the RFC functions of package S_PROFGEN, however, these RFC functions will not solve your request - and the usage is not supported.

Kind Regards

Frank Buchholz