Suspend/UnSuspend Released ABAP Jobs

BTCTRNS1 - Suspend all Released Jobs
Released Jobs will have the status Released/Susp. in transaction SM37.

BTCTRNS2 - Reverse Suspend for all Released Jobs

What Is The Job Name EU_REORG Meant

OSS is your friend - see note 18023:

1. When starting Transaction SE80 for the first time, the three EU jobs are scheduled automatically: EU_INIT (single start), EU_REORG (periodically each night), and EU_PUT (periodically each night).

Alternatively,those three EU jobs can also be scheduled by manually executing program SAPRSEUJ.

Shortdescription of the individual jobs:

EU_INIT:

EU_INIT serves for completely rebuilding the indices and therefore has a correspondingly long runtime. It starts program SAPRSEUI. All customer-defined programs (selection according to the name ranges) are analyzed, and an index is created that is used in the DW for the where-used lists for function modules, error messages, reports, etc.

Starting in Release 2.1, this index is automatically updated online. The job can be repeated at any time. After a termination, the job is automatically scheduled for the next day; it then starts at the point oftermination. (EU_INIT can therefore be terminated deliberately, if it disturbsother activities in the system.)

EU_REORG:

As mentioned above, the indices are automatically updated online by the tools. To keep the effort for updating these indices as low as possible, only the changes are logged, which means a reorganization of the complete index for each program is required from time to time. To avoid having this reorganization interfere with online work, job EU_REORG runs every night and performs this task. If job EU_REORG did not run one night, this simply means that thereorganization takes place more often online.

SAP Courses & Certifications for SAP Basis Admins

My goal is the SAP Basis Certification!
Of course experience is valued higher than (theoretical) knowledge, but especially in the SAP world the certification is your must-have entrance ticket to verify your skills.

I know what you're thinking about... Braindumps.
From my previous exam as Microsoft Certified Professional I know the value of brain dumps, but in the matter of an SAP exam you can forget cheating:

• even in the deepest and darkest corners of top insider discussion forums, there are no secret guides for SAP Certifications available
  
  
• the level of relevant certification knowledge is so broad, that without a very deep understanding of the theme you'll just waste money for the exam
  
  
• and finally you can't cheat at work - every SAP Basis job requires comprehensive knowledge, without you'll be fired after your first day. Promised!
  

--

Have a look at this certifcation path to become a SAP Certified Technology Consultant (SAP Basis Admin):


TADM10 (description here) is mandatory not only for the Basis Administrator, but also i.e. for the education path to XI/PI consultants.
Together with TADM12 (description here), both courses covers following separate available courses:

• ADM100: SAP Web AS Administration I
  
• ADM102: SAP Web AS Administration II
• ADM200: SAP Web AS Java Administration
• ADM110: Installation SAP ECC 6.0
• ADM325: Software Logistics
• ADM315: Workload Analysis
  

After TADM10&12, you have to decide which DBMS you'll work with.
I will take the path to Oracle = TADM51 (description here)

Again, TADM51 covers some separate available courses:

• ADM505: Database Administration Oracle I
  
• ADM506: Database Administration Oracle II
  

TADM51 also includes the final certification examination (for TADM10, TADM12, TADM51).

Interview Questions for SAP Basis

Interview Questions for SAP Basis

What is private mode? When does user switch to user mode?

Private mode is a mode where the heap data is getting exclusively allocated by the user and is no more shared across the system. This happens when your extended memory is exhausted.

What is osp$ mean? What if user is given with this authorisation?

OPS$ is the mechanism the adm users uses to connect to the database .

Why do you use DDIC user not SAP* for Support Packs and SPam?

Do _NOT_ use neither DDIC nor SAP* for applying support packages. Copy DDIC to a separate user and use that user to apply them.

Can you kill a Job?

Yes - SM37 - select - kill

If you have a long running Job, how do you analyse?

Use transaction SE30.

How to uncar car/sar files in a single shot?

on Unix:
$ for i in *.SAR; do SAPCAR -xvf $i; done

When we should use Transactional RFC ?

A "transactional RFC" means, that either both parties agree that the data was correctly transfered - or not. There is no "half data transfer".

What is the use of Trusted system. I know that there is no need of UID and PWD to communicate with partner system. In what situation it is good to go for Trusted system ?

E. g. if you have an R/3 system and a BW system and don't want to maintain passwords. Same goes for CRM and a lot of other systems/applications.

Let me know if my understanding below is correct:
1) By default the RFC destination is synchronous
2) Asynchronous RFC is used incase if the system initiated the RFC call no need to wait for the response before it proceeds to something else.

Yes - that's right.

But keep in mind, that it's not only a technical issue whether to switch to asynchronous. The application must also be able to handle that correctly.

Which table contains the details related to Q defined in SPAM? Is there a way to revert back the Q defined? If yes, How?

There is a "delete" button when you define the queue. If you already started the import it's no more possible since the system will become inconsistent.

What is a developer key? and how to generate a developer key?

The developer key is a combination of you installation number, your license key (that you get from http://service.sap.com/licensekey) and the user name. You need this for each person that will make changes (Dictionary or programs) in the system.

What is XI3.0 ? EXPLAIN XI = Exchange Infrastructure - Part of Netweaver 2004.

SAP Exchange Infrastructure (SAP XI) is SAP's enterprise application integration (EAI) software, a component of the NetWeaver product group used to facilitate the exchange of information among a company's internal software and systems and those of external parties. Like other NetWeaver components, SAP XI is compatible with software products of other
companies.

SAP calls XI an integration broker because it mediates between entities with varying requirements in terms of connectivity, format, and protocols. According to SAP, XI reduces integration costs by providing a common repository for interfaces. The central component of SAP XI is the SAP Integration Server, which facilitates interaction between diverse operating systems and applications across internal and external networked computer systems.

How to see when were the optimizer stats last time run? We are using win2k, oracle 9, sapr346c.

Assumed DB=Oracle

Select any table lets take MARA here but you should do the same for MSEG and few others to see whether the dates match or not.Run the following command on the command prompt:-

select last_analyzed from dba_tables where table_name like '%MARA%';

This gives you a straight answer .Else you can always fish around in DB14 for seeing when the optimzer stats were updated.

SAP Administration Questions Answers

SAP Administration Questions Answers

What is the use of profile paramater ztta/roll_area?

The value specifies the size of the roll area in bytes. The roll area is one of several memory areas, which satisfies the user requests of user programs. For technical reasons, however, the first 250 KB or so of a user context are always stored in the roll area, further data
- up to the roll area limit ztta/roll_first,
- in the extended memory, up to the limit ztta/roll_extension or if extended memory is exhausted, then
- again in the roll area, until the roll area is full, then
- in the local process area, up to the limit abap/heap_area_dia or abap/heap_area_total or until the address space or the
swap space is exhausted.

Followed by termination with errors like STORAGE_PARAMETERS_WRONG_SET an error code, that points to memory bottleneck Minimum data transfer with context change; however, the increase helps to avoid problems (address space, swap space, operating system paging). *-- Anupam Sharma

What is R/3? and what is basis version?

SAP Basis:
- Provides the runtime environment for all SAP applications
- Optimally embeds the application in the system environment
- Defines a stable architecture framework for system enhancements
- Contains the tools for administering the entire system
- Allows the distribution of resources and system components
- Provides interfaces for decentralized system parts and external products.

An R/3 instance is a group of R/3 services that are started and stopped as a unit (by an R/3 dispatcher) and have a common instance profile. The name of an R/3 instance is composed of letters standing for the relevant services, and an instance number which is unique for each computer. The services may be D, V, E, B, M, G, or S, which respectively stand for dialogue, update, enqueue, background, message, gateway, and spool services.

Tips by : Suresh Babu

I would like to know the version or name of SAP that is implemented in real time?

This is a very generic question and really depends on what you are implementing (modules).

The history of the "R/3" is

3.0D Basis 300
3.0E Basis 300
3.0F Basis 300
3.1H Basis 310
3.1I Basis 310
4.0B Basis 400
4.5B Basis 450
4.6C Basis 460
4.71 Basis 6.20
4.72 Basis 6.20
5.00 Basis 6.40 (ECC 5.0 - Enterprise Core components)
6.00 Basis 7.00 (ECC 6.0) - actually in RampUp

All of those have increased business functionality and interfaces to other systems (CRM, BW etc.)

What is mysap?

It's a term for all the systems that in a contract (e. g. a MySAP business suite consist of ERP2005, CRM2005, SRM2005).

What is the systems configuration required to implement SAP.. i.e for production,development and QAS servers the hard disk space, RAM, Processor

This also depends on what your are implementing, how many users will work on the system, how many records in what area are created etc.

We need a BIG database system and an even bigger application server for ~ 900 users and 12 languages.

What is ASAP?

It's an old term for an implementation strategy. Blueprint -> prototype -> goLive (if you want to say it in one sentence).

How should I set priority for Printing say like user, teamlead, project manager?

There's nothing like "priority" settings for spool processes. Just define more (profile parameter rdisp/wp_no_spool) processes so people don't need to wait.

Using Tc SGEN I have generated 74% job and later I have terminated the job. I wish to start generating from where it stopped I have refreshed but to no chance nothing was done. How should I further proceed so as to complete the remaining job..

Start SGEN again and select the same you have selected before. It will popup and ask if you want to start from scratch or generate the just the remaining.

SAP Basis FAQ

SAP Basis FAQ

Automatic CTS

Even though SAP does not recommend automatic imports, it is the most practical way of moving transports from a development system to a QA environment or to a special development system (although I wouldn't recommend auto imports to a production system for obvious reasons).

There are various methods for doing this. The most effective and simple method is using an OS script (shell/perl etc.) scheduled using cron for user sidadm. There are a couple of steps you need to take before setting up automatic imports.

1. Your entire project team should agree upon the overall strategy, frequency of imports etc.
2. Resolve any issues with transport approvals (many shops don't care about traffic between DEV and QA)
3. Who is responsible for watching for errors and corrective actions (an email to the developer works in this case)

Configuring outbound SAP to Internet mail Gateway (R/3 4.0 and above)

Step 1 (UNIX SETUP)
Logon to your as sidadm
Change directory to /sapmnt/SID/global (or any directory globally available across all application servers)
Create the following entries in file SAP_EMAIL_GATEWAY.sh and save the file

#!/bin/sh
GWCONFIG=/sapmnt/SID/global/SAP_EMAIL_GATEWAY.cfg
export GWCONFIG
/sapmnt/SID/exe/mlunxsnd $*

Execute the command: mlosmadm SAP_EMAIL_GATEWAY.cfg (enter the following information)

System name : SID
Client : 200
Username : MAILADM
Password : initpass
Language : E
Loadbalancing : Y
Message Server :
Group name : LOGON GROUP1
Using SAPROUTER : N
Trace Level (inBoound) : 0
Sendmail Command :
Codepage :
Trace Level (Outbound) : 0
Update file : Y

Step 2 (SAP SETUP)

Logon to SAPSYSTEM (SID) via SAPGUI
Transaction SU01, create user MAILADM and password initpass, usertype CPIC
Transaction SM59, Click Create

RFC Destination : SAP 4.5 INTERNET MAIL GATEWAY
Connection Type : T
Description : INTERNET EMAIL GATEWAY
Hit RETURN
Click EXPLICIT HOST
Enter /sapmnt/P21/global/ SAP_EMAIL_GATEWAY.sh
Save your entries

Transaction SCOT, click Edit--> CREATE NODES

Node : EMAIL
Description : SAP CONNECT NODE FOR EMAIL (continue)
RFC DESTINATION: (choose SAP 4.5 INTERNET MAIL GATEWAY from the pull down menu)
Choose radio button Internet
Address area : *DOMAIN (your intranet domain)
Ccontinue
Format : DOC, DAT, R3F, TXT, RAW,PPT,XLS (continue)
Continue
Set further address types : N
Minimum waiting : 5 minutes
Check both Node is in use', Node can resolve path references
Continue
Choose Goto--> Schedule Background Job
Enter name for the job & save

Configuring outbound SAP to Internet mail Gateway (Upto R/3 3.1I)

SAP can be configured to send and receive emails from different sources. This section explains how to integrate SAPOffice with an external email system. This is in no way supplementing the online documentation available on the online documentation CD supplied by SAP but simplyfies the process to the bare Internet email must be configured and running prior to this. Email from SAP is forwarded to the users external email client such as Eudora, Outlook etc.

You can configure inbound and outbound forwarding. Outbound flow forwards a SAP message (eg:update termination) via UNIX sendmail to the intended recepient. Inbound accepts a message from sendmail and places it in the users SAPOffice inbox. Many SAP shops prefer to configure outbound only.

Configuring outbound forwarding

SAP configuration

1. Create your RFC destination for outbound email using transaction SM59

RFC Destination         :  SAP_INTERNET_GATEWAY

Connection Type         : T

Description             : SAP internet mail gateway

Click on 'Explicit Host' if you want on demand gateway dameon invocation.

Program                 : /sapmnt/SID/exe/mlunxsnd

Target Host             : Enter hostname that runs your central instance.

Click 'Test Connection' and you should see a successfull message.

2. Choose menu Tools-->Administration-->Management-->Process Technology-->Office-->Office Settings
3. Click Internet Gateway

Gateway Destination             : SAP_INTERNET_GATEWAY

Path for configuration file     : /sapmnt/SID/exe/sap_mailSID.cfg

Return Address                  : .com

5. Click Internet Settings and fill in the following fields
6. Save the settings
7. Click Back
8. Choose menu Office-->Addresses-->Communication Types
9. Type in INT over the Comm. type and Internet Mail over description.
10. . Check Maintain and Send checkboxes and Save your entries.

UNIX configuration

11. . cd /sapmnt/SID/exe
12. 
    

.mlosadm sap_mailSID.cfg

Client 000

Username : MAILADM

Password  : MAILADM

Language : E

System name : SID

System number : 

Hostname  : 

Gateway hostname: 

Gateway server sapgw

Sendmail Command : 

Update file : Y   

Testing

1. Logon to SAP
2. Execute transaction SO01
3. Write a message and send it to

If you don't see the mail in your internet mailbox, go back and review steps 1-12

FTP from ABAP

There are 2 ways of executing FTP from an ABAP (online or batch mode),

	Initiated from the operating system. A script is available in the utility repository that explains how to do this very easily.
	Initiated from the ABAP itself An example is given below.

1. Create a logical OS command 'zftp' using transaction SM69. Make sure that you enable 'comand line parameter allowed' checkbox
2. Create a shell script called 'zftp' with the following lines

RMTHOST=`echo $2 | tr '[A-Z]' '[a-z]'`

ftp -v $RMTHOST <<> /out/zftp.$$ 2>&1

lcd /out

put $1

bye

EOF

3. Use the SXPG_COMMAND_EXECUTE function module to call this script (zftp) with the filename you want to transfer as the parameter. Eg:

call function 'SXPG_COMMAND_EXECUTE'

exporting

commandname =

tables

exec_protocol =

exceptions

no_permission = 1

command_not_found = 2

parameters_too_long = 3

...

Enable web based online documentaion (R/3 4.0 or above)

1. Install Netscape webserver or use an existing web server (requires administrators privelege)
2. Create a directory called SAPDOCS4 under your web server document root.
3. Mount the CDROM containing online documentation on your PC or your UNIX server.
4. Recursively copy all files under /cdrom/docs/ to the SAPDOC4 directory under the web server root.
5. Create the following entries in your /usr/sap/SID/SYS/profile/DEFAULT.PFL

eu/iwb/installed_languages = EN
eu/iwb/help_type=2
eu/iwb/server_win32=webserver.domain.com
eu/iwb/path_win32=saphelp/helpdata

6. Restart your SAP system

How to access an external database from ABAP via DBLINK (ORACLE)

1. Using transaction SE11, create a table (ZTABLE) with the same fields as the table in the external database, make sure that the type and lengths of the fields are identical.
2. Using transaction SE11, create a view (ZTABLE_VIEW, projection view) using BASIS table ZTABLE
3. Using SVRMGRL>

create dblink REMOTE_DB as connect to remote_user identified by password; (database link created)
drop table ZTABLE; (table dropped)
create synonym ZTABLE for ZTABLE@REMOTE_DB; (synonym created)

4. Using transaction SE16 , type in ZTABLE_VIEW and hit RETURN
5. Enter value in key fields and hit execute. (displays rows from the remote table)

Tips and Tricks

1. To see the complete text of an error/warning message on the SAPGUI status bar, right click on the message and drag left.
2. To prevent your spool requests getting deleted from the BASIS cleanup jobs, you need to uncheck the Delete after print checkbox in the print control screen, execute transaction SP01, find your spool#, click on Attributes and change the Delete After date
3. Short cuts using the OK-code box.

4. Use transaction AL11 to browse the application servers directory structure.

Basis Administration Questions Answers

Basis Administration Questions Answers

What is th difference between Sap lock and database lock?

A "SAP lock" is named "enqueue lock", the enqueue is on a much higher level, e. g. a complete sales document is locked there whereas in the datbase usually only row locks exist. Since SAP runs on more database than Oracle (thanx god) one needed to have a mechanism, that is database independent and on a higher level.

What is the diff between clients 000 and 001?

Client 000 is the SAP source client, client 001 exists only on certain installations (e. g. solution Manager). *-- Markus

I would like to know is there anyway to transport roles from Production to Development or Sandbox.

Goto PFCG and enter the role which you want to transfer to other system. goto utilities->Mass download it will ask the path where to download/save that role on local desktop give the location and save it. Next logon to the system where you want that particular role.
PFCG-> Role -> upload.
Give the path where the role is saved. it accepts and generates successfully. *-- Mahesh

What is the need of having Development system?

To develop and custamize SAP to companies requirement. say if you dont have DEV, after go-live(started using SAP (PRD}) if you want to do some changes to application, you cannot do changes directly to PRD server, which may cause problem the PRD server live data. so you do the required changes on DEV first and test them on QAS, if it works fine
them transport the same to PRD.

Difference between Application server and Central Instance?

AS: Is just a dialog instance.
CI: Is Dialog instance + Database Instance.

What is Transport domain and Domain controller?

TD: is the collection of transport controller, trans directory and all other systems in the group.

TC: A system which will have trans directory, and in which the total landscape is designed and maintained. in stms you can see all these. *-- Suneel

What are SNOTES ? How to apply them in SAP ?

The name of the transaction is SNOTE. A "note" in general is a hint, documentation, error/bug description and may contain code corrections, that are applied with the transaction SNOTE.

What is OSS ?

OSS is the old name of the nowadays "sapnet" which contains everything you need to run SAP a program, patches, installation/upgrade documentation etc.

What are different modules used like EP, XI, CRM ,BW, etc?

Those are not different modules but different products.

EP = Enterprise Portal
XI = Exchange Infrastructure
CRM = Customer Relationship Management
BW = Business Warehouse (that is the old term), it's now call BI (Business Intelligence)

What is the correct use of SPAM, SAINT, SPAD and SPDD transactions. When should we use each?

SPAM is for installing support packages, SAINT is used to install new addons. SPAD is for creating printers (I assume you meant SPAU) and SPDD is for adjusting modification to dictionary objects.

Is it possible to update Support Release packages from OS level?

No - you can import them but the full process will require additional steps the tools "tp" and "R3trans" are not aware of. The way is to use SPAM - but SPAM has the possibility to schedule those imports in the background.

After doing any Support Package update in SPAM, are there any further steps to carry out for this update to take effect?

No, they are active immediately

How can I create multiple User Id at Random

We usually created Id though SU01, it only one by one. Can I create multiple user id having same profile at once.

Yes you can, use tcode SCAT. First, make sure your client setting (SCC4) is enabled with ' X eCATT and CATT allowed'. Just in case your Production disabled this.

- Then, you need to create a simulation (test case) of creating new user id by calling tcode
SU01 later.
- Test case must start with Z, example ZCREATE_NEW_USER. Create this case, put title and
choose component as BC (basis components).
- Save and choose Local if you dont want to transport it or choose a dev. class (example ZDEV)
if you want to transport it later.
- Go back and click Change button. Then key -in Object as example SU01, and choose Record
button on top. When it prompts to enter Transaction code, key in SU01 (if for roles,
key-in PFCG) and begin recording. As usual in SU01 create 1 user id, dept field, password,
roles, group and so on.
- Make sure you press Enter on each field because we want to capture the value/object and
SCAT is a bit stupid if you become familiar later....but still useful...indeed.
- You will see a clock on the bottom which means the recording process is on going.
Once done, click Back button and press End button to end the recording.

Note - I noticed you said the profiles are all the same. Then this is much easier...no need to enter the roles/profiles, just duplicate this ID and change the name, dept and password only.

Okay..first stage has finished. Then double click the Object to begin inserting parameters. Then you will see an object for each fields that you run from SU01. Choose the right field example user id (BNAME) and choose button 'Insert Import Parameter (F6)' and you may click Next Screen to 'watch' what have been recorded and proceed to choose several other objects like password field (PASSWORD1, PASSWORD2), roles field (AGR_NAME), group field etc. If you happen to choose the wrong object, then you can reset back (Edit -> Reset Parameterization). You may see so many junk fields captured and this is because SCAT records every steps/dialogs.

Once done, choose Back and save this case. Then you need to click 'Goto -> Variant -> Export' and save it. After that use Ms Excel to open it and begin inserting all other user ids. Save and close. Remember to close this file because SCAT will use it.

Then last one, get back to SCAT and click button execute, processing mode chose Background, choose external file 'the one you created with Excel' and execute. At this moment don't use tcode SU01 bcoz you may interrupt the simulation. Wait for the logs. If you see reds then error was
happening.

Hoping this will help you. I have done (Sap 4.6C) this to create thousands of user ids and also thousands of roles/profiles (pfcg). I heard with Sap 4.7, the SCAT has so many extra features.....

How to Check Missing Authorisation for User

How to Check Missing Authorisation for User

How to check the missing authorisation for the user not having the option "/nsu53 ?"

You can use the following procedures to determine which authorizations a user requires to carry out a transaction:

You can use Trace function, ST01, you can trace the user activity and from the log you can see the authorization missing.

Start an authorization trace using the ST01 transaction and carry out the transaction with a user who has full authorizations. On the basis of the trace, you can see which authorizations were checked.

This procedure generally works well. However, sometimes the result is very surprising because certain programs can and do ignore some authorization checks by using preliminary checks and buffered results. In such cases, these methods are not very effective. You can recognize these cases because certain fields of the corresponding programs are specified with * or DUMMY at some point of the authorization check.

Analyzing authorization problems in an unknown program

The most frequently used method to analyze authorization problems in an unknown program involves you setting the Debugger breakpoints to the AUTHORITY-CHECK and MESSAGE commands. Then execute the program and analyze its behavior.

Determining all the authorizations a user has for an authorization object

When troubleshooting, it is often helpful to find out all the authorizations a specified user has for a specific authorization object. A simple method of reading these authorizations as raw data from the user master record is to execute the GET_AUTH_VALUES function module in the SUSR function group. Use the SE37 transaction or SE80 in test mode to do so. The result table is not formatted for output, but is very compact and easy to understand for authorization experts.

Analyzing an authorization problem that occurs for only one user

It is often the case that a certain authorization problem occurs for only one specific user. This kind of authorization problem generally affects users with no Debugging authorization. If you want to assign a user Debugging authorization without changing the HR authorizations, you can add the S_A.DEVELOP authorization profile (if available) to the user’s authorization profiles. In production systems, note that changes such as these to authorizations enable users (with relevant knowledge of the development environment) to access any system data easily (especially in other clients).

SAP Profile Generator tables

SAP Profile Generator tables

-----Original Message-----
Subject: Profile Generator tables?
From: Paul Ellis

We maintain profiles in a Development system using Profile Generator, but only transport the authorisation profile and not the activity group to Staging/Production.

We are about to refresh the Development system with a copy of Production. What tables do I need to export from Development prior to the refresh, and later re-import, to ensure that Profile Generator is able to maintain the activity groups created in Development?

Thanks in advance.

Paul Ellis

-----Reply Message-----
Subject: Re: Profile Generator tables? - more
From: Mike O'Carroll

oh, and maybe these tables for profile genrator stuff......
(from top include for PFCG)
000010 function-pool rhum.
000020
000030 tables: hrv1220, hrp1001, hrp1000.
000040 tables: pchdy, pphdx, p1000,
000050 pt1220, t77fc, t77fd.
000060 tables: *objec, objec, *p1000.
000070 tables: pdrhum, t77aw, t777o.
000080 tables: xu213.
000090 tables: t777e, usr05, tprprof.

and you may need to do the same with menu tables - I'm not sure which ones
-
(from top include from SSM1)
000010 function-pool smnu. "MESSAGE-ID ...
000020 *
000030 tables: indx, tstct, dsyax,
000040 smenca_new, smen_obnew, smen_conew,
000050 smenusenew, smenentnew,
000060 smen_dates, ssm_stat, ssm_start, ssm_langu,
000070 smensapt, smencust, smenentt,
000080 smensapnew, smencusnew,
000090 smenselect, t002t,
000100 ssm_rele, smenintnew, smenintt.

--------------------------------------------------------------------------------

Regards,
Mike O'Carroll

-----Reply Message-----
Subject: Re: Profile Generator tables? (Document link: Michael O'Carroll)
From: Michael O'Carroll/UK

user masters: USR01 to 09, UST04,
profiles: USR10, USR11, UST10S, UST10C,
authorisations: USR12, USR13, UST12.
password exceptions USR40.
History tables(may not be applicable but FYI): users: USH02, USH04,
profiles: USH10, auths USH12.

activity groups are stored in table PLOGI along with loads of other object types. the activity groups are object type T.
You could export the table data with a manual transport request via SE01, using R3TR TABU and specify the keys to use for all objects of type T(ie all activity groups). Remember to include all clients in the selection.

OR, if you are using the client copy functions to refresh you DEV from PROD, then you could use the RSCCEXCT (see OSS note 70290) to list all these tables and exclude them from the copy, hence the corresponding original DEV tables should not be overwritten in DEV.
I suggest you export a transport request with with all these tables from DEV just in case, so you can re-import them again if it goes pear shaped.
In 3.x I don't think the activity group names involve client number or SID, but I've heard some differences in 4.6 - Guy Holchester has sent many notes to the list about it - have a look at the archives, but I think as long as you aren't copying between different versions (eg from Prod 4.6 to Dev 3.x, or vice versa) then it should be OK.

If you choose to re-import the tables from transport requests, you might want to run the sync tool in the target client (DEV) afterwards - ie run function module SUSR_SYNC_USER_TABLES, or run SU30, just to check for any dodgy links or inconsistencies.

Also, if you are re-importing user masters too, run RSSODELT and RSSOUSER to recreate all SAPOffice mailboxes and link them to the new user IDs in the target client.

hope this helps.
cheers,
Mike

-----Reply Message-----
Subject: Re: Profile Generator tables?
From: Kenneth Marquardt

I would use RHMOVE30 and create a transport of your activity groups. To be safe test import the activity groups to QAS prior to refreshing DEV with PRD. Then once you have completed the refresh import the transport you created. For more info on this look at the Authorization is made easy guide available online on page 11-6 release 4.0b.

Remember to run SUPC after you import to regenerate the profiles.

-----End of Reply Message-----

Frequently Asked Questions on Authorization

Frequently Asked Questions on Authorization

Role & Profile

What is the difference between role and a profile?

Role and profile go hand in hand. Profile is bought in by a role. Role is used as a template, where you can add T-codes, reports..... Profile is one which gives the user authorization. When you create a role, a profile is automatically created.

What is the use of role templates?

User role templates are predefined avtivity groups in SAP consisting of tyransactions, reports and web addresses.

What is the different between single role & composite role?

A role is a container that collects the transaction and generates the associated profile. A composite reole is a container which can collect several different roles

What profile versions?

Profile versions are nothing but when u modify a profile paarameter through a RZ10 and generate a new profile is created with a different version and it is stored in the database.

Is it possible to change role template? How?

Yes, we can change a user role template. There are exactly three ways in which we can work with user role templates
- we can use it as they are delivered in sap
- we can modify them as per our needs through pfcg
- we can create them from scratch.
For all the above specified we have to use pfcg transaction to maintain them.

Personalization Tab Within PFCG

Please expalin the personalization tab within a role.

Personalization is a way to save information that could be common to users, I meant to a user role... E.g. you can create SAP queries and manage authorizations by user groups. Now this information can be stored in the personalization tab of the role. (I supposed that it is a way for SAP to address his ambiguity of its concept of user group and roles: is "usergroup" a grouping of people sharing the same access or is it the role who is the grouping of people sharing the same access?)

How to insert missing authorization? Ways?

su53 is the best transaction with which we can find the missing authorizations.and we can insert those missing authorization through pfcg.

Table of authorisation field settings

Is there a table for authorisations where I can quickly see the values entered in a group of fields?
In particular I am looking to find the field values for P_ORGIN across a number of authorisation profiles, without having to drill down on each profile and authorisation.

AGR_1251 will give you some reasonable info.

Table with deleted users

Someone has deleted users in our system, and I am eager to find out who. Is there a table where this is logged?

Debug or use RSUSR100 to find the infos.

Run transaction SUIM and down its Change documents.

How can I make T_Code SPRO Read Only

I have a requirement to make SPRO read only. As you know it has a tree like structure and to make it read only seems like impossible.

You cannot make SPRO 100% display only by ANY setting. The SCC4 option only turns configuration tables to not-modifyable but still allows the non-config delivery class tables (or those configured to be changeable) to be modifed. It does nothing for the tcodes that are NOT table maintenance and not controlled by S_TABU_DIS. These will still allow configuration. All the tcodes in the SPRO are in several tables CUST_ACTOBJ (spelling?) is one.

You only real option is to create a role with all the tcodes in them that are in the SPRO , remove the create and change to display ( generally by changing the last nunmer on the 4 digit tcodes to 3) and removing all the Create and change access in all the activities and allow only the display.

PFCG allows you to create a role from a SPRO project so the usermenu will come close to the SPRO menu, which your changes it will be display.

Mass Delete of Old Roles

How can i do a mass delete of the roles without deleing the new roles.

There is a SAP delivered report that you can copy, remove the system type check and run. To do a landscape with delete, enter the roles to be deleted in a transport, run the delete program or manually delete and then relase the transport and import them into all clients and systems.

It is called: AGR_DELETE_ALL_ACTIVITY_GROUPS.

To used it, you need to tweak/debug & replace the code as it has a check that ensure it is deleting SAP delivered roles only. Once you get past that little bit, it works well.

Query About Tcode PFCG

Query About Tcode PFCG

1. How to check the name of all users who has been authorised to use a particular transaction? I am trying to find through SUIM, but failing to find the name or total number of users of a particular t-code say SPRO.

2. I know that a particular transaction say SPRO is available in a particular role and I want to remove that t-code from that role. But I am unable to find that node through PFCG. If I am using the search for a t-code inside menu tab after putting the edit mode it is not coming in PFCG, but through SUIM its existence is coming in that role. That particular role contains a lot of t-code and reports, say about 2000.

1. Goto SUIM and select USER node, then select USERS BY COMPLEX SELECTION CRITERIA node then execute BY TRANSACTION AUTHORIZATION report then give the Tran. code and it will return you the number of users having that trans with relevatn details.

Follows these steps :-

- Go to SUIM .
- Choose Roles --> By Transaction assignment.
- Enter Transaction : "SPRO"
- Choose execute.
- Double click on a role in which you want to remove "SPRO" authorisation.
- Click on pen mark to change into change mode.
- Go to tab "Authorization"
- Choose change authorization data.
- Choose Utilities --> Technical names on .
- Choose --> cross application authorization objects-->
- Expand the selection for Object "s_tcode" , under the corresponding profile look the values maintained for "TCD" and remove value "SPRO" from the list to eliminate the authorization.
- Don't forget to regenerate profiles.

2. You should able to find this via menu tab otherwise try to do this in authorization tab --> change authorization data by search.

How To Compare The Roles

How To Compare The Roles

How to compare the roles where created or defined in two different systems?

For role comparision both the roles must be in the same system, in same client

Transaction code SUIM -> Comparision-> Roles

If the roles are in different system, then tranport the role into one of the system and do comparision. If no transport connection defined then, you can use the upload and download option in the PFCG

Steps for Role Comparing:

1. Run the t-code SUIM

2. Go To Comparison and select the option of roles

3. Click on Across systems option it will give option to select the sys name under Remote Comparison there enter the SYS ID between which system you want to do comparison and put the role name in compare role section then execute it will give you the result.

4. If there is any difference b/wn the t-codes it will b in red colour otherwisein yellow

Creating New User With Authorizations

Creating New User With Authorizations

I want to create new user for SAP module. I am having user id as sap* (someone has said that this is super user id); when I login with this id and go to IMG for configurations. A message is displayed that I am not authorised to change the details with sap* user.

What is the procedure for creating new user which have all features define under SAP* user and which could allow me to make the configruations.

Creating new user with superuser authorizations.

1. Goto SU01 --
username : sapuser
|-->Create.

2. In default settings, give
:Mr
first name : sap
lastname : user

3. Goto next tab,
give initial password :1234
repeat password : 1234

4. Goto profiles.
type- sap_all (say enter)
sap_new (say enter)
Then save....
See the message in status bar, (user created successfully)
5. Login with the new user. change the password. now this user contains all superuser authorizations

How To Provide All Rights To The User

How To Provide All Rights To The User

I have created user id & password by SU01 and menu, roles,authorization. I gave tcode se38 to the user in menu (by PFCG). Now when I tested by giving newly created user id password and when I enter the tcode : se38
and gave the program name and clicked display, it show "no display authorization", how to provide all rights to the user.

By: Sangy

Following are the solutions for your queries:

1.) Transaction code SE38 is to created program in SAP, the programs are created or customized only by Developers/Abapers who have Developer Key and an Object key which are called as Acces key,without which no one can write a program in SAP,there is a option to write a program, i.e by login with the user SAPUSER which is default user of SAP which can create a program, because this reason you are not able to display the things with the Tcode-SE38.

2.) All rights to the user can be given by assigning SAP_ALL to the user in the profiles while creating the user.

3.) To assign SAP_ALL to the user, hit tcode SU01 to create a user.

a.) Give the name for the user and select create tab.

b.) First tab Address the Lat name only is mandatory else fill all the details.

c.) Select Logon tab in which Password is important, hence give the password.

d.) Select the Profile Tab-->Give SAP_ALL & SAP_NEW,and save the user.Now the user can access all the tcodes with SAP_ALL profile.

Archiving and Reorganization are totally different issues

Archiving and Reorganization are totally different issues

Archiving is a process when you archive old master/transactional records which are not in use any more from long time. You archive those records keep on some backup device. These records can be displayed, and only Display, can never be reloaded in tables again physically.
This will free up the space in tables from those records which are not in use any more but exist in tables physically.

Reorganization basically removes deleted data from tables. During different transactions you delete some records, which are deleted virtually but not physically. Even Archive process delete those records virtually.
So you run Reorganization to free up the space consumed by deleted records.

This make the difference between the two clear.

Now about reorganization.

It depends on which OS and DB you are using.

If Oracle, SAPDBA is best tool to reorganise.

In addition to above, you can reorganise the whole database, but it takes time depending upon your database. Some times it can be more than a day or you can reorganise a table suggested in Early Watch system.

It all depends on you.

Reasons For Archiving Financial Accounting Data

Reasons For Archiving Financial Accounting Data

What is financial archiving? Where it is used? Why? Where is it configured in IMG?

There are both technical and legal reasons for archiving Financial Accounting data.

Archiving:
1) Reduces storage and runtime problems caused by the constant growth of transaction data.
2) Makes master data easier to manage and to keep up to date.
3) Enables data to be accessed at a later date.

You can archive data no longer required in the online system using certain standard functions. This data is then stored in archive files and deleted from the online system. For legal and commercial reasons, it is important that you are able to access archived data files online again, and the reloading function allows you to do this.

Data must meet certain conditions before it can be archived. Some of these controls are already defined in the system, for instance the fact that you cannot archive documents that contain open items. Certain other controls are user-defined.
Every archiving function can be accessed from archive management (SARA).

To reach archive management, choose:
Tools --> Administration --> Archiving or from the Accounting --> Financial Accounting --> General Ledger, Accounts
Receivable, Accounts Payable or Banks menus --> Periodic processing Archiving .

When you access archive management from these menus, the archiving object is defaulted by the system in the field Object name. Otherwise you must enter the name of the archiving object manually.

SAP Administrator Daily Activities

SAP Administrator Daily Activities

SAP DAILY ACTIVITIES

1] Check that all the application servers are up:
sm51 SAP Servers
sm04/al08 Logon Users

2] Check that daily backup are executed without errors
db12 Backup logs: overview

3] SAP standard background jobs are running successfully. Review for cancelled and critical jobs.
sm37 Background jobs--- Check for successful completion of jobs. Enter * in user-id field and verify that all critical successful jobs and review any cancelled jobs.

4] Operating system Monitoring
st06

5] Extents monitoring
db02 Database monitoring--Check for max-extents reached

6] Check work-processes(started from sm51)
sm50 Process overview-- All work processes with a running or waiting status.

7] Check system log
sm21 System log-- Set date and time to before the last log review. Check for errors ,warning, security, message-bends, database events.

8] Review workload statistics
st03 Workload analysis of
sto2 tune summary instance

9] Look for any failed updates
sm13 update records

10] check for old locks
sm12 lock entry list

11] Check for spool problems
sp01 spool request screen-- check for spool that are in request for over an hour.

12] Review and resolve dumps
st22 ABAP Dump analysis

13] Checking .trc file in SAP trace directory for block corruption on daily basis.
C:\ORacle\sid\saptrace

14] Archive backup
brarchive -f force -cds -c
Insert the archive backup tape

15] Review NT system logs for problem
-> NT system log- look 4 errors or failures
-> NT security log- failed logon 2 sap servers
-> NT Application log -look 4 errors or failures

Tcodes used for Daily System Monitoring

Tcodes used for Daily System Monitoring

After running daily system monitoring transaction, what should we check for:

In st22 look for the core dumps if any and report to the respective consultants and try to know why it happened.

In sm21 try to check for errors.

In sp01 try to see if any spool jobs have failed.

In st02 look if any swaps are happening, swaps are not good for performance.

In st04 look for Database alert logs and Performance.

In st03 look for ratio hits.

In sm59 look for connectivety tesing if there are other systems also connected to your SAP R/3 system

In db13 look if the jobs have run successfully.

In sm37 look for any cancelled scheduled job and take action appropriately.

In sm12 look for any pending locks from the previous days.

In sm13 look for any hanged updates, or updates pending for long or updates in PRIV mode.

Monitor and Administrate 4 SAP Systems

Monitor and Administrate 4 SAP Systems

If there are 4 systems installed SAP, how should I connect all of them in one network so that I can administrate the 4 systems with one among them as main server.

This should help you:

After installing an R/3 System, you can use transaction RZ20 to monitor the system. To monitor all systems of your system landscape centrally from one system, first customize the alert monitor by choosing Tools > CCMS > Configuration > Alert monitor or calling transaction RZ21.

Then, to specify the remote systems by System ID and RFC destination (which must have been created beforehand), choose Technical infrastructure > Create remote monitoring entry.

Next, to change your monitor definitions (you can only change your own monitors), choose Tools > CCMS > Control/Monitoring > Alert monitor or call transaction RZ20.

Activate the maintenance function by choosing Extras > Activate maintenance function.
Then, double click on the monitor and choose Monitoring change.
Parameter R3system defines which systems can be monitored by an alert monitor. Change parameter R3system from (only the current R/3 System can be monitored) to (all R/3 Systems defined in RZ21 can be monitored). Save the changes.

It will help you monitor & use spome other activities centrally.

Brief Description About SAP Basis Implementation

Brief Description About SAP Basis Implementation

Please give a brief description about implementation process carried out.

There is no standard Implementation process, it purely depends on which methodology person have adopted for implementation. I will give you broad view of implementation project... I am just starting from sizing of the servers ...

1. Identify the no of users and type of users

2. Design the technical system landscape of servers

3. Do the sizing based on users, documents created.

4. Convert your sizing requirement in to Hardware requiremnet

5. Consider the backup procedure also

6. Then start with the setup of development landscape

7. Define client strategy, transport strategy, User management.

8. Fix the support package levels.

9. Tune the system for performence

10. set up the QA systems

11. Define client copy strategy

12. Setup the PROD systems

13. Apply for Pre Golive report

14. Monitor system of db load

15. Apply post golive report