Examples of Different Scenarios
This section explains the different scenarios of the control levels.
Scenario 1: Group Block
| Module | Sub-Module | Setting | Configuration | Comments |
|---|---|---|---|---|
Global Controls |
Control Settings |
User Control |
√ |
Enabled |
Process Control |
√ |
Enabled |
||
SAP System Control |
√ |
Enabled |
||
Master Controls |
User Groups |
Group Name |
Other |
User 'JSmith' is allocated to group 'Other' and as Access type is set as " Block", user can not access Process Runner. > |
Access Type |
Block |
|||
Master Controls |
Users |
User name |
JSmith |
User is defined in Innowera Control Panel. |
Access Type |
Allow |
In the preceding example, it is clear that if any listed user belongs to a group that is blocked, then Process Runner will deny access request from that user and will display an error message as follows.
To resolve this issue, move the user to a different group if you want that user to be allowed to work with Process Runner.
Scenario 2: User Block
| Module | Sub-Module | Setting | Configuration | Comments |
|---|---|---|---|---|
Global Controls |
Control Settings |
User Control |
√ |
Enabled |
Process Control |
√ |
Enabled |
||
SAP System Control |
√ |
Enabled |
||
Master Controls |
User Groups |
Group Name |
Other |
User 'JSmith' is allocated to group 'Other'. This group is allowed to access Process Runner. All members of this group will be allowed access to Process Runner based on the user access type.
|
Access Type |
Allow |
|||
Master Controls |
Users |
User name |
JSmith |
User 'JSmith' is defined in Innowera Control Panel and is disallowed access to Process Runner |
Access Type |
Block |
In the preceding example, it is clear that if any listed user is blocked, then Process Runner will deny access request from such a user and will display an error message as follows.
Scenario 3: Technology Blocked Globally
| Module | Sub-Module | Setting | Configuration | Comments |
|---|---|---|---|---|
Global Controls |
Control Settings |
Process Control |
√ |
Enabled |
SAP System Control |
√ |
Enabled |
||
Allow Transaction |
X |
Disabled |
||
Allow BAPI |
X |
Disabled |
||
Allow GUI |
X |
Disabled |
||
Allow Data Extractor |
X |
Disabled |
||
Master Controls |
User Groups |
Group Name |
Other |
User 'JSmith' is allocated to group 'Other'. This group is allowed to access Process Runner. All members of this group will be allowed access to Process Runner based on the user access type. |
Access Type |
Allow |
|||
Master Controls |
Users |
User name |
JSmith |
User 'JSmith' is defined in Innowera Control Panel. |
Access Type |
Allow |
|||
Auto assign all processes to this user |
√ |
|||
Auto assign all SAP systems to this user |
√ |
|||
Allow Transaction |
√ |
|||
Allow BAPI |
√ |
|||
Allow GUI |
√ |
|||
Allow Data Extractor |
√ |
|||
Master Controls |
Processes |
Process Name |
MM02 AS02 |
Processes listed in Innowera Control Panel |
Access Type |
Allow |
|||
Master Controls |
SAP System |
SAP System Name |
DM0 |
SAP system listed in Innowera Control Panel |
Access Type |
Allow |
|||
Allow Transaction |
√ |
|||
Allow BAPI |
√ |
|||
Allow GUI |
√ |
|||
Allow Data Extractor |
√ |
Error
This error is encountered when JSmith tries to run MM02 process file in Process Runner.
Explanation
In above case, it is clear that none of the technology are allowed at global level, hence Process Runner will deny access request from user trying to access any technology and will prompt above error message. Settings done at Master Controls will be ignored. To allow access of any technology, enable the respective technology globally under Control Settings.
- To work with any technology, please ensure that the setting for that technology is enabled at following levels:
- Control Settings (Global Level)
- Group/User level
- SAP System Level
- If setting is restricted/disabled at any level, user will not be allowed to execute process files of that technology. Select here to know more on this.
- Even when 'Allow BAPI/RFM' is allowed at all levels, users will be able to work with RFM based on Allow Remote Function Module (RFCs) option settings done at User Groups/Users and SAP Systems. BAPI is allowed to user all time.
Scenario 4: Process/SAP System not found
| Module | Sub-Module | Setting | Configuration | Comments |
|---|---|---|---|---|
Global Controls |
Control Settings |
User Control |
√ |
Enabled |
Process Control |
√ |
Enabled |
||
SAP System Control |
√ |
Enabled |
||
Master Controls |
User Groups |
Group Name |
Other |
User 'JSmith' is allocated to group 'Other' |
Access Type |
Allow |
|||
Master Controls |
Users |
User name |
JSmith |
User is defined in Innowera Control Panel and has access to Process Runner |
Access Type |
Allow |
|||
Master Controls |
Processes |
Process Name |
|
No processes listed in Innowera Control Panel |
Access Type |
|
|||
Master Controls |
SAP System |
SAP System Name |
DM0 |
SAP system listed in Innowera Control Panel |
Access Type |
Allow |
Error
Explanation
In above case, the process we are trying to run in this example is not listed in Innowera Control Panel and also Allow other Processes option is not enabled. Hence above error message is displayed. Similarly if SAP system is not listed and "Allow Other SAP System " option is not enabled, then user will be displayed the below error message.
Scenario 5: User missing authorization for defined process/SAP System
| Module | Sub-Module | Setting | Configuration | Comments |
|---|---|---|---|---|
Global Controls |
Control Settings |
User Control |
√ |
Enabled |
Process Control |
√ |
Enabled |
||
SAP System Control |
√ |
Enabled |
||
Master Controls |
User Groups |
Group Name |
Other |
User 'JSmith' is allocated to group 'Other' |
Access Type |
Allow |
|||
Master Controls |
Users |
User name |
JSmith |
User is defined in Innowera Control Panel and has access to Process Runner |
Access Type |
Allow |
|||
|
Auto assign all processes to this user
|
× |
|||
|
Auto assign all SAP systems to this user
|
× |
|||
Master Controls |
Processes |
Process Name |
MM02 AS02 MARA |
Processes listed in Innowera Control Panel |
Access Type |
Allow |
|||
Master Controls |
SAP System |
SAP System Name |
DM0 |
SAP system listed in Innowera Control Panel |
Access Type |
Allow |
|||
Assigned Controls |
Assigned Processes |
Process + User |
× |
Listed processes not assigned to user |
Assigned Controls |
Assigned SAP Systems |
SAP System + User |
× |
User is not assigned the defined SAP System |
Assigned Controls |
Assigned SAP Systems for Processes |
Process + SAP System |
×> |
Listed processes is not assigned to listed SAP system |
Error
Explanation
In above scenario, no Process is assigned to user JSmith. Hence the above error message is displayed. Similarly if no SAP System is assigned to user who is assigned processes, the below error message will be displayed. To resolve this issue, enable "Auto assign all processes to this user" and "Auto assign all SAP system to this user" setting at the User level or assign the process/ SAP system to user under Assigned Controls -> Assigned Processes / Assigned SAP Systems.
When auto assign all Processes/ SAP Systems to this user option is enabled in Users module:
| Module | Sub-Module | Setting | Configuration | Comments |
|---|---|---|---|---|
Global Controls |
Control Settings |
User Control |
√ |
Enabled |
Process Control |
√ |
Enabled |
||
SAP System Control |
√ |
Enabled |
||
Master Controls |
User Groups |
Group Name |
Other |
User 'JSmith' is allocated to group 'Other'. |
Access Type |
Allow |
|||
Master Controls |
Users |
User name |
JSmith |
User is defined in Innowera Control Panel and has access to Process Runner |
Access Type |
Allow |
|||
|
Auto assign all processes to this user
|
√ |
|||
|
Auto assign all SAP systems to this user
|
√ |
|||
Master Controls |
Processes |
Process Name |
MM02 AS02 MARA |
Processes listed in Innowera Control Panel |
Access Type |
Allow |
|||
Master Controls |
SAP System |
SAP System Name |
DM0 |
SAP system listed in Innowera Control Panel |
Access Type |
Allow |
|||
Assigned Controls |
Assigned Processes |
Process + User |
× |
Listed processes not assigned to user |
Assigned Controls |
Assigned SAP Systems |
SAP System + User |
× |
User is not assigned the defined SAP System |
Assigned Controls |
Assigned SAP Systems for Processes |
Process + SAP System |
× |
Listed processes is not assigned to listed SAP system |
Explanation
When the two options in Users module is enabled, for above scenario, Process and SAP system is auto assigned to user JSmith. Hence the above error messages will not be displayed to user "JSmith" when trying to access listed process and SAP systems.
Scenario 6: Process missing authorization for SAP System
| Module | Sub-Module | Setting | Configuration | Comments |
|---|---|---|---|---|
Global Controls |
Control Settings |
User Control |
√ |
Enabled |
Process Control |
√ |
Enabled |
||
SAP System Control |
√ |
Enabled |
||
Master Controls |
User Groups |
Group Name |
Other |
User 'JSmith' is allocated to group 'Other'. |
Access Type |
Allow |
|||
Master Controls |
Users |
User name |
JSmith |
User is defined in Innowera Control Panel and has access to Process Runner |
Access Type |
Allow |
|||
Master Controls |
Processes |
Process Name |
MM02 AS02 MARA |
Processes listed in Innowera Control Panel |
Access Type |
Allow |
|||
Master Controls |
SAP System |
SAP System Name |
DM0 |
SAP system listed in Innowera Control Panel and is assigned to user 'JSmith'. None of the defined processes are assigned to SAP system under Assigned Controls -> "Assigned SAP Systems for Processes". |
Access Type |
Allow |
|||
Auto assign all processes to this SAP system |
× |
|||
Assigned Controls |
Assigned Processes |
Process + User |
√ |
Listed processes are assigned to user |
Assigned Controls |
Assigned SAP Systems |
SAP System + User |
√ |
User is assigned all the defined SAP System |
Assigned Controls |
Assigned SAP Systems for Processes |
Process + SAP System |
× |
Listed processes is not assigned to listed SAP system |
Error
Explanation
In above scenario, defined processes are not assigned to SAP system 'DM0'. Hence the above error message is displayed. To resolve this issue, enable "Auto assign all processes to this SAP system" setting at the SAP System level or assign the process to SAP system under Assigned Controls -> "Assigned SAP Systems for Processes".
Scenario 7: Defined user access to defined Process and SAP System
| Module | Sub-Module | Setting | Configuration | Comments |
|---|---|---|---|---|
Global Controls |
Control Settings |
User Control |
√ |
Enabled |
Process Control |
√ |
Enabled |
||
SAP System Control |
√ |
Enabled |
||
Master Controls |
User Groups |
Group Name |
Other |
User 'JSmith' is allocated to group 'Other'. |
Access Type |
Allow |
|||
Master Controls |
Users |
User name |
JSmith |
User is defined in Innowera Control Panel and has access to Process Runner |
Access Type |
Allow |
|||
Master Controls |
Processes |
Process Name |
MM02 AS02 MARA |
Processes listed in Innowera Control Panel |
Access Type |
Allow |
|||
Master Controls |
SAP System |
SAP System Name |
DM0 |
SAP system listed in Innowera Control Panel and is assigned to user 'JSmith'. |
Access Type |
Allow |
|||
Assigned Controls |
Assigned Processes |
Process + User |
√ |
Listed processes are assigned to user |
Assigned Controls |
Assigned SAP Systems |
SAP System + Use |
√ |
User is assigned all the defined SAP System |
Assigned Controls |
Assigned SAP Systems for Processes |
Process + SAP system |
√ |
Listed processes are assigned to listed SAP system |
Error
No Error!
Explanation
Here, JSmith is a user allocated in group Other in Innowera Control Panel. Process and SAP System other than listed have been disabled for this example. As Allow other Process and Allow other SAP System options are disabled, all users listed in Innowera Control Panel will be able to access all listed SAP System and listed Processes if they are assigned appropriate SAP Systems and Processes.
Scenario 8: Undefined user access to undefined Process and undefined SAP System
| Module | Sub-Module | Setting | Configuration | Comments |
|---|---|---|---|---|
Global Controls |
Control Settings |
User Control |
√ |
Enabled |
Process Control |
√ |
Enabled |
||
SAP System Control |
√ |
Enabled |
||
Master Controls |
User Groups |
Group Name |
Other |
User "Mayra" is allocated to group "Other". |
Access Type |
Allow |
|||
Master Controls |
Users |
User name |
Mayra |
User name listed in Control Panel. |
Access Type |
Allow |
|||
Master Controls |
Processes |
Process Name |
MM02 AS02 MARA |
Processes listed in Innowera Control Panel |
Access Type |
Allow |
|||
Master Controls |
SAP System |
SAP System Name |
DM0 |
SAP system listed in Innowera Control Panel and is assigned to user 'Mayra'. |
Access Type |
Allow |
|||
Auto assign all processes to this SAP system |
√ |
|||
Assigned Controls |
Assigned Processes |
Process + User |
√ |
Listed processes are assigned to user. |
Assigned Controls |
Assigned SAP Systems |
SAP System + User |
√ |
User is assigned all the defined SAP System |
Admin Settings |
Options - Other User Settings |
Allow all users other than defined in Innowera Control Panel |
√ |
Enabled |
Admin Settings |
Options - Other Process Settings |
Allow all processes other than defined in Innowera Control Panel for undefined user. |
√ |
Enabled |
Admin Settings |
Options - Other SAP System Settings. |
Allow all systems other than defined in Innowera Control Panel for undefined user. |
√ |
Enabled |
Error
No Error!
Explanation
In above scenario, it is assumed that other user Michael is accessing Process Runner, process and SAP System other than listed in this example. As Allow other User, Allow other Processes and Allow other SAP System options are enabled, non-listed users can access any Processes and SAP System without any restrictions. Hence non listed user will not experience any error message in above scenario.
Scenario 9: Group/User control disabled in Control Setting
| Module | Sub-Module | Setting | Configuration | Comments |
|---|---|---|---|---|
Global Controls |
Control Settings |
User Control |
× |
Disabled |
Process Control |
√ |
Enabled |
||
SAP System Control |
√ |
Enabled |
||
Master Controls |
User Groups |
Group Name |
Other |
User 'JSmith' is allocated to group 'Other'. This group is allowed to access Process Runner. All members of this group will be allowed access to Process Runner based on the user access type.
|
Access Type |
Allow |
|||
Master Controls |
Users |
User name |
JSmith |
User 'JSmith' is defined in Innowera Control Panel. User 'Jane' is not listed in Control Panel. |
Access Type |
Block |
|||
Master Controls |
Processes |
Process Name |
MM02 AS02 MARA |
Processes listed in Innowera Control Panel |
Access Type |
Allow |
|||
Master Controls |
SAP System |
SAP System Name |
DM0 |
SAP system listed in Innowera Control Panel. |
Access Type |
Allow |
|||
Assigned Controls |
Assigned Processes |
Process + User |
√ |
Listed processes are assigned to user |
Assigned Controls |
Assigned SAP Systems |
SAP System + User |
√ |
Listed processes are assigned to user |
Assigned Controls |
Assigned SAP Systems for Processes |
Process + SAP system |
√ |
Listed processes are assigned to listed SAP system |
Error
No Error!
Explanation
In above scenario, when group/user control settings is disabled, all group/user level restrictions are disabled and all user group level validation in Process Runner are stopped. Hence user "JSmith" will be allowed to access Process Runner and no user block message will be displayed.
User 'Jane' who is not defined in Master Controls will be able to execute only those processes/SAP systems that are defined in Control Panel
User 'Jane' who is not defined in Master Controls will be able to execute all defined and undefined processes/SAP systems if 'Allow all processes other than defined in Innowera Control Panel' and 'Allow all SAP systems other than defined in Innowera Control Panel' are enabled under Admin Settings -> Options.
Scenario 10: Process Control disabled in Control Settings
| Module | Sub-Module | Setting | Configuration | Comments |
|---|---|---|---|---|
Global Controls |
Control Settings |
User Control |
√ |
Enabled |
Process Control |
× |
Disabled |
||
SAP System Control |
√ |
Enabled |
||
Master Controls |
User Groups |
Group Name |
Other |
User 'JSmith' is allocated to group 'Other'. This group is allowed to access Process Runner. All members of this group will be allowed access to Process Runner based on the user access type.
|
Access Type |
Allow |
|||
Master Controls |
Users |
User name |
JSmith |
'JSmith' is defined in Innowera Control Panel. |
Access Type |
Allow |
|||
Master Controls |
Processes |
Process Name |
MM02 AS02 MARA |
Processes listed in Innowera Control Panel |
Access Type |
Allow |
|||
Master Controls |
SAP System |
SAP System Name |
DM0 |
SAP system listed in Innowera Control Panel. |
Access Type |
Allow |
|||
Assigned Controls |
Assigned Processes |
Process + User |
√ |
Listed processes are assigned to user. |
Assigned Controls |
Assigned SAP Systems |
SAP System + User |
√ |
Listed processes are assigned to user |
Assigned Controls |
Assigned SAP Systems for Processes |
Process + SAP system |
√ |
Listed processes are assigned to listed SAP system |
Error
No Error!
Explanation
In above scenario, when process control is disabled, all process level restrictions are deactivated and all process level validation in Process Runner are stopped. Hence user "JSmith" will be allowed to access all processes (defined + undefined). Any settings set as "Settings as per Process " in Control Panel will not be considered. In below figure we can see that settings done for user is considered instead of Process.
Scenario 11: User/Process/SAP System Access Time expired
Error
Explanation
In above scenario, it is assumed that user JSmith is accessing Process Runner and define process MM02. The process MM02 has scheduler set which does not allow execution of the process at the specified time. Similarly if user or SAP system have scheduler assigned which does not allow the user or SAP system access at specified time, message similar to above appears.