Authorization: How to create a mass roles transport request using PFCG

To deploy roles from DEV to QAS server, the administrator could create the transport request in TCODE: PFCG for each role individually or with the mass transport option to combine multiple roles in one transport request.

In this sample we'll show the usage of the mass transport options:

1) Execute TCODE: PFCG

2) Select "Utilities" -> "Mass transport"

3) Insert all the roles that need to create the transport request

4) Select the "tick" button

5) Select the "tick" button

6) Select the "tick" button by using the default selection

7) Enter the required details for the new transport request

8) Take note on the request created and select the "tick" button

9) The list of the request that contains all the roles including any master or derived roles that relevant to the roles inserted previously.

Administration: How to unlock & reset SAP* user in Oracle

Under certain circumstances administrator would require to use the user: SAP* to login to the SAP system. Ex: the administrator login has been locked accidentally and require a super user to unlock it.

In this sample we'll reset the user "SAP*"  in an IDES.

Steps:

1) Example of the administrator and the SAP* user failed to login into system.

2) Login with the OS user "<SID>adm" (ex: eccadm) and connect to sqlplus.

3) Search for the SAP schema used.
    SQL command:  select OWNER from DBA_TABLES where TABLE_NAME='T000';

4) List the SAP* table. UFLAG not equal to 0 mean account been locked.
    SQL command: select UFLAG, BNAME, MANDT from SAPSR3.USR02 where BNAME='SAP*';

5) Unlock the SAP* password in relevant client.
    SQL Command: update SAPSR3.USR02 set UFLAG=0 where BNAME='SAP*' and MANDT=000;

6) Reset the SAP* password by deleting the relevant row.
    SQL Command: delete from SAPSR3.USR02 where BNAME='SAP*' and MANDT=000;

7) Change the profile parameter
     Set the parameter "login/no_automatic_user_sapstar=0" either directly in the default.pfl file or with an user      with TCODE: RZ11 permission and reboot the SAP system once the parameter been changed.
     In windows environment: "C:\usr\sap\ECC\SYS\profile\DEFAULT.PFL" add the parameter at the end of      the file.

8) Reboot the SAP system.

9) The system able to access with user: SAP* and password: pass

Notes:

- Default password for sap* is pass / 06071992

- Another built-in user for ides: user: idadmin, password: ides

Administration: Creating a new menu node with SE43

Steps to create a new menu node that attached to a customized TCODE ...

Steps:

1)  Execute TCODE: SE43 and enter the menu name to create a new node

2) Click the "Extend" button.

3) double click on the relevant "Report Menu"

4) Select the sub node to be create and click on the "Add Entry at Same Level' button.

5) Enter the descriptions and the customized TCODE to be shown.

6) Create the new transport request.

7) New Menu item created

8) The new node appear in the menu.

 9) Double click to execute the program / TCODE.

* To delete the node
1) Access the SE43 as shown above and select the node to be delete.

2) Click the "Yes" button.

3) The node been removed.

Further details:

ABAP: Create a program with TCODE: SE38

Administration: Creating a customized TCODE with SE93

Administration: Creating a customized TCODE with SE93

In this example, we'll create a customized TCODE that will be running for a customized program...

Steps:

1) Execute TCODE: SE93 and click the "Create" button

2) Enter a new TCODE and the Description for it. Select "report transaction".

3) Choose or enter the customized program.

4) Select or enter the package (ex: ZHR) and click "Save" button.

5) Generate the transport request. Click the new button.

6) Enter the relevant transport request descriptions.

7) The request created successfully.

8) The new customized TCODE created successfully.

9) Execute the new TCODE: ZTEST1

10) The customized program executed successfully.

Further details:

ABAP: Create a program with TCODE: SE38

Administration: Creating a new menu node with SE43

ABAP: Create a program with TCODE: SE38

Simple steps to create a customized program ...

Steps:

1) Execute TCODE: SE38, enter a program name and click the "Create" button.

2) Enter the source code.

 (Sample Screen1)

  (Sample Screen 2)

  (Sample Screen 3)

3) Click the "Pretty Printer" button to tidy up the source code, click "Check" button to verify the source code and click the "Direct Processing' button to execute the program.

4) The program been executed successfully.

Further configurations with this customized program:

Administration: Creating a customized TCODE with SE93

Administration: Creating a new menu node with SE43

ABAP: How to view the the program authorization checking code

Steps to view the program authorization in ABAP code...

1) Execute any TCODE. Ex: SU01

2) Click "System" -> "Status"

3) Double click the Program (screen) textbox

4) The source code of the program

5) Find "auth_check" and double click on that line

6) All the authorization relevant coding will be shown