<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2800.1400" name=GENERATOR></HEAD>
<BODY>
<DIV>
<P><SPAN class=656582915-21042005><FONT face=Arial
size=2>Mark:</FONT></SPAN></P>
<P><SPAN class=656582915-21042005><FONT face=Arial size=2>We have similar issues
here, as Claude's. Our WF admin authorization is a cloned version of
the SAP delivered role.</FONT></SPAN></P>
<P><SPAN class=656582915-21042005><FONT face=Arial size=2>So, if you have a
workflow that is stuck, and needs to be nudged manually, by executing background
item, for example.</FONT></SPAN></P>
<P><SPAN class=656582915-21042005><FONT face=Arial size=2>If the WF
administrator does not have the authorization for the back ground task, how can
one push it forward.</FONT></SPAN></P>
<P><SPAN class=656582915-21042005><FONT face=Arial size=2>We have many ISU
related tasks that run as background processes. As administrator I can not
push these forward, as I have no access.</FONT></SPAN></P>
<P><SPAN class=656582915-21042005><FONT face=Arial size=2>Any
ideas?</FONT></SPAN></P>
<P><SPAN class=656582915-21042005><FONT face=Arial
size=2></FONT></SPAN> </P>
<P><SPAN class=656582915-21042005><FONT face=Arial
size=2>Thanks</FONT></SPAN></P><SPAN class=656582915-21042005>
<P align=left><FONT size=2><FONT face="Arial monospaced for SAP"><EM><FONT
face=Elephant>Jim Hall</FONT> </EM></FONT></FONT><FONT size=2><FONT
face="Arial monospaced for SAP"><EM><BR></EM></FONT><FONT
face=Arial></FONT><FONT face=Arial>Systems Analyst<BR></FONT></FONT><FONT
size=2><FONT face=Arial>Fortis Alberta Inc.</FONT></FONT><BR><FONT face=Arial
size=2>Information Technology</FONT> <BR><SPAN
class=656582915-21042005></SPAN><FONT face=Arial size=2> </FONT><BR><FONT
face=Arial color=#000000 size=2><A
href="mailto:Jim.Hall@fortisalberta.com">Jim.Hall@fortisalberta.com</A></FONT>
</P></SPAN>
<P><FONT face=Arial size=2></FONT> </P>
<P><FONT face=Arial size=2></FONT> </P>
<P><FONT face=Arial size=2>G'day Claude,</FONT></P>
<P><FONT face=Arial size=2>I can't give you the specifics you're after but I can
tell you that I wouldn't encourage SAP_ALL or anything close for a WF
admin.</FONT></P>
<P><FONT face=Arial size=2>WF-BATCH should have SAP_ALL but that's an entirely
seperate matter since it's a batch user that no-one can log on as.</FONT></P>
<P><FONT face=Arial size=2>WF Admin really only needs access to WF Admin
transactions (SWI1, SWI2.., SWIA, SWU_OBUF, etc.) plus SM58 which is one that
gets forgotten often. But the WF Admin should not need any functional
transactions. Just because you've got a WF that deals with FI Docs it doesn't
mean that the WF Admin needs FB01 or FB02.</FONT></P>
<P><FONT face=Arial size=2>The WF Admin in my opinion should never do other
peoples work for them. They are there to assist the process. Sometimes they need
to give the process a good kick (so you do need all authorization for
manipulating work items) but you don't need access to the underlying Functional
Transactions.</FONT></P>
<P><FONT face=Arial size=2>That's my 2p.</FONT></P>
<P><FONT face=Arial size=2>Have fun,</FONT></P>
<P><FONT face=Arial size=2>Mark</FONT></P>
<P><FONT face=Arial size=2>On 4/21/05, Claude Bourque
<claude_bourque@hc-sc.gc.ca> wrote:</FONT></P>
<P><FONT face=Arial size=2>> Greetings,</FONT></P>
<P><FONT face=Arial size=2>> </FONT></P>
<P><FONT face=Arial size=2>> We've run across a few roadblocks recently were
security wants to </FONT></P>
<P><FONT face=Arial size=2>> severely limit the Workflow Administrator's user
id.</FONT></P>
<P><FONT face=Arial size=2>> </FONT></P>
<P><FONT face=Arial size=2>> Although we've pointed out the SAP-delivered
roles/profiles, nothing </FONT></P>
<P><FONT face=Arial size=2>> seems to be moving.</FONT></P>
<P><FONT face=Arial size=2>> </FONT></P>
<P><FONT face=Arial size=2>> Can anyone share with me what kind of
authorizations your </FONT></P>
<P><FONT face=Arial size=2>> administrators have been given? I'm assuming
some kind of modified SAP_ALL.</FONT></P>
<P><FONT face=Arial size=2>> </FONT></P>
<P><FONT face=Arial size=2>> PS: We had the same problem a while back with
WF-BATCH.</FONT></P>
<P><FONT face=Arial size=2>> </FONT></P>
<P><FONT face=Arial size=2>> Any suggestions would be greatly
appreciated.</FONT></P>
<P><FONT face=Arial size=2>> </FONT></P>
<P><FONT face=Arial size=2>> We're on 4.7 Basis 6.2.</FONT></P>
<P><FONT face=Arial size=2>> </FONT></P>
<P><FONT face=Arial size=2>> Thanks and have a great day.</FONT></P>
<P><FONT face=Arial size=2>> </FONT></P>
<P><FONT face=Arial size=2>> Claude Bourque</FONT></P>
<P><FONT face=Arial size=2>> HR/Workflow Consultant</FONT></P>
<P><FONT face=Arial size=2>> Health Canada</FONT></P>
<P><FONT face=Arial size=2>> </FONT></P>
<P><FONT face=Arial size=2>>
_______________________________________________</FONT></P>
<P><FONT face=Arial size=2>> SAP-WUG mailing list</FONT></P>
<P><FONT face=Arial size=2>> SAP-WUG@mit.edu</FONT></P>
<P><FONT face=Arial size=2>> </FONT><A
href="http://mailman.mit.edu/mailman/listinfo/sap-wug"><U><FONT
color=#0000ff><FONT face=Arial
size=2>http://mailman.mit.edu/mailman/listinfo/sap-wug</FONT></U></FONT></A></P>
<P><FONT face=Arial size=2>></FONT></P>
<P><FONT face=Arial
size=2>_______________________________________________</FONT></P>
<P><FONT face=Arial size=2>SAP-WUG mailing list</FONT></P>
<P><FONT face=Arial size=2>SAP-WUG@mit.edu</FONT></P>
<P><A href="http://mailman.mit.edu/mailman/listinfo/sap-wug"><U><FONT
color=#0000ff><FONT face=Arial
size=2>http://mailman.mit.edu/mailman/listinfo/sap-wug</FONT></U></FONT></A></P></DIV></BODY></HTML>