Assign programmatically a BPM role to a user

Hello everybody,
I want extend the security administration of the workspace.
I have investigated tha you can manage the users programatically, with a jmx connection.
But i don't kow how assign progrmatically a BPM role to a user.
Thanks,
Regards!

hi,
try this one.
assign this role to the user.(this user will not be abe to access that transaction).
in s_tcode, we have to define the "from and to" excluding vao1!.
hope this might help you.

Similar Messages

Unable to assign all security roles to a user with a new custom security role

Dear All,
Happy New Year.!
I have a query regarding the assignment of Security Roles to new users in CRM. Normally we assign the security roles to new users via an Admin user who has 'System Administrator' security role assigned to him/her. This works perfectly fine, and we can assign
any desired security role to the new user.
However, in our case, we need to delegate the user creation rights to some of the client partners. We do not want to give them access to all the Administration functions; hence we created a new Security Role, lets say 'Support User Role'. We have provided
'Create', 'Append', 'Append To', and 'Assign' rights on 'User' entity for this new security role. With this security role, we are able to create new users now, but we are only able to assign 'Agent' security role, not any other security roles.
For example, if user 'x' has Security Role defined as 'Support User Role'. If 'x' tries to add a new user 'y', then 'x' is only able to assign 'Agent' security role to 'y', but not any other security role. As per business requirement, 'x' should be able
to assign some other security roles, including 'Support User Role', to new user 'y'.
I believe that there is something missing in Security Role configuration, which is causing the above problem. We compared both 'Support User Role' and 'System Administrator' security roles, but not able to figure out which minimum rights we can provide to
'Support User Role' so that users with this security role can only add new users (with any security role), and that they are not having access on any other Administration features as well.
Appreciate any help that you can provide on the above issue.
Thanks in anticipation.

Hi,
Can you check if you have organization level Read access for Securitity Role and Organization level Assign access for Security role.
Refer:-
http://www.magnetismsolutions.com/blog/paulnieuwelaar/2013/04/22/permissions-required-to-manage-roles-in-dynamics-crm-2011
Hope this helps!!!
Thanks,
Prasad
Make sure to "Vote as Helpful" and "Mark As Answer",if you get answer of your question

Error while assigning the role to the user

Hi,
error : CJS-30196. SAPBC JSF Communication role is not assigned to the user SAPJSF.
i am getting the fallowing error in installation with NW04S. while trying to assign the above role to the user.any body help me with the solution.
Thanks & Regards
kiran.B

Duplicate Post

Assigning roles to 10000 users

Hi Guru's,
I need your solution regarding role assignment to 10000 users.My client is having 10000 users.
My perception for this is
[Role]
Roleid = Path;
user = user1;user2;user3;...............user10000;
Writing above code in text document and importing then exporting in user administration.....
Is there any approach to assign a role to 10000 users in one go.
Please share the solution for this issue.
Regard's,
Prashanth

You can use the Import functionality of User Administration.
Use Groups as principal.
Example
[group]
gid=Z_GRP_HR_ESS
gdesc=HR Group for Employee Self-Service
user=DHANZ1;DHANZ2;.......
Import utility times out for huge user base....so split 10000 in 2 batches...eg first load with 7000 users and second with 3000 users.
Second run do it in overwrite mode
Once the loads are complete you can manually assign the corresponding Roles to the Group. It is best practise to assign
Users -> Group -> Role.
Also you get a detailed log after import with errors -> You can fix that in your import file and run the utlity again.
Good luck ~ Dhanz

Assigning roles to LDAP users through BIP API

Hi.
My customer has BIP 11g and OIM 9.1.0.2 running on the same weblogic server (11g). Both authenticate against the same LDAP server.
One of our desired next steps is to provision from OIM the BIP roles to each LDAP user so every user gets the correct roles (and access to the correct reports) according to the groups he has on OIM.
I've been searching for info regarding this without success. The BIP API doc does not show any info about assigning roles to users.
We don't need to manage LDAP users, BIP roles, etc... through OIM. We only need to assign BIP roles to LDAP users.
Is it possible to make that assignments through BIP API?
If not, any other ideas? New ideas or different approaches are welcome.
Thanks in advance.

In OBIEE 11g which includes BIP the application roles are applied to LDAP users and groups using the Enterprise Manager Fusion Control.
During the upgrade process from OBIEE 10g to OBIEE 11g the groups do get assigned to these roles transparently so there must be some API to leverage this functionality.
I would start there, http://download.oracle.com/docs/cd/E14571_01/bi.1111/e10541/admin_api.htm
There are no specific instructions on accomplishing what you seek but if you have some WLST or Java Skills you should be able to get something prototyped.
Let me know if that helps.

Error while assigning the fallowing role to the user

Hi,
ERROR 2007-01-18 14:13:25
CJS-30196 Role SAP_BC_JSF_COMMUNICATION_RO is not assigned to user SAPJSF
i am getting the fallowing error while trying to assigning the fallowing role to the user any body through some light in to it.
Thanks
kiran.B

Hi,
Standard roles are not assigned to users directly.Make sure that copy the role from standard roles then change naming convention like your company specification.
Ex: standard role : SAP_BC_JSF_COMMUNICATION_RO
Step:1: go to t-code: PFCG and give the role name in role tab SAP_BC_JSF_COMMUNICATION_RO
Step:2: press copy button and change the naming convention.
Step:3: Assign to the user.
I hope it will help you.
kiran kumar.v

Assigning roles to different users in GP

Hello,
We have developed a small application using CAF.The UI part is done using Webdynpro module which is a part of CAF project. Now we have to apply Guided procedures to this application .
I have followed steps in this link to create a process (My First Process), and got result.
http://help.sap.com/saphelp_nw04s/helpdata/en/4a/d78041a17e060de10000000a1550b0/content.htm.
Now I have to do the same for our application.For eg: In "My First Process" , the role of Applicant is assigned to one user, and the role of HR Manager is assigned to another user.
In our application, many people has done modules.I want to create different roles (like applicant ,HR Manager in My Process) and assign each role to the user who has developed that module.
Actually we are not using NWDI . But we integrated all modules into one application manually.Is it possible to achieve the above mentioned goals ?
Please any one give me a suggestion or link.
With Thanks,
Vivek
With Thanks,
Vivek

Hi Ashutosh,
Thanks for response and providing link.
I have followed the documents provided by you.
Now I have to do the same for our application as in "My First Process" , the role of Applicant is assigned to one user, and the role of HR Manager is assigned to another user.
Do I require to follow the steps,
step1 :In GP design time and choose Create Callable Object Type Process Control, and select Visual Approval.
step2 :For the purposes of the process that you create, define the same input parameters as the output parameters that you have defined for the data input form.
In our application already created views(webdynpro views) are there.Still we need to create data input form and define input and output parameters ?.
In our application, many people has done modules.I want to create different roles (like applicant ,HR Manager in My Process) and assign each role to the user who has developed that module.
Please any one give me a suggestion or link.
With Thanks,
Vivek

Portal Runtime error in assigning a role to a user by UME

Hi ALL,
I am assigning a role to a user through UME using this piece of code:
String uids = userFactory.getUserByUniqueName("Shilpa").getUniqueID();
String roleid = roleFact.getRoleByUniqueName("pcd:portal_content/administrator/content_admin/content_admin_role").getUniqueID();
roleFact.addUserToRole(uids,roleid);
The userid and role is beinf fetched successfully but at the assignment of the role to the user , I am gettign Portal runtime error.
The error log is following.
 java.lang.NoClassDefFoundError: com/sap/abc/network/util/InfEPLog
 at UserListeners.userAssigned(UserListeners.java:27)
 at com.sap.security.core.imp.RoleFactory.assignUserPerformed(RoleFactory.java:1466)
 at com.sap.security.core.persistence.imp.DistributedTransaction.doCacheUpdateAndNotificationForMembers(DistributedTransaction.java:565)
 at com.sap.security.core.persistence.imp.DistributedTransaction.doCacheUpdateAndNotificationForMembers(DistributedTransaction.java:815)
 at com.sap.security.core.persistence.imp.DistributedTransaction.doCacheUpdateAndNotification(DistributedTransaction.java:465)
 at com.sap.security.core.persistence.imp.DistributedTransaction.afterCompletion(DistributedTransaction.java:252)
 at com.sap.engine.services.ts.jta.impl.TransactionImpl.commit(TransactionImpl.java:414)
 at com.sap.engine.services.ts.jta.impl.TransactionManagerImpl.commit(TransactionManagerImpl.java:316)
 at com.sap.engine.services.ts.transaction.TxManager.commitLevel(TxManager.java:581)
 at com.sap.engine.services.ts.transaction.TxManagerImpl.commitLevel(TxManagerImpl.java:63)
 at com.sap.transaction.TxManager.commitLevel(TxManager.java:237)
 at com.sap.security.core.persistence.imp.DistributedTransaction.commit(DistributedTransaction.java:2742)
 at com.sap.security.core.imp.Role.commit(Role.java:337)
 at com.sap.security.core.imp.RoleFactory.addUserToRole(RoleFactory.java:1338)
 at com.sap.user.UserAdded.doContent(UserAdded.java:63)
 at com.sapportals.portal.prt.component.AbstractPortalComponent.doPreview(AbstractPortalComponent.java:240)
 at com.sapportals.portal.prt.component.AbstractPortalComponent.serviceDeprecated(AbstractPortalComponent.java:168)
 at com.sapportals.portal.prt.component.AbstractPortalComponent.service(AbstractPortalComponent.java:114)
 at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)
 at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)
 at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)
 at com.sapportals.portal.prt.component.PortalComponentResponse.include(PortalComponentResponse.java:215)
 at com.sapportals.portal.prt.pom.PortalNode.service(PortalNode.java:645)
 at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)
 at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)
 at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)
 at com.sapportals.portal.prt.core.PortalRequestManager.runRequestCycle(PortalRequestManager.java:753)
 at com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:240)
 at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:524)
 at java.security.AccessController.doPrivileged(Native Method)
 at com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:407)
 at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
 at com.sap.engine.services.servlets_jsp.server.servlet.InvokerServlet.service(InvokerServlet.java:156)
 at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
 at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
 at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
 at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
 at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
 at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
 at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
 at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
 at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
 at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
 at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
 at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
 at java.security.AccessController.doPrivileged(Native Method)
 at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
 at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
Please tell me where I am wrong.
Regards,
Shilpa.

Hi Shilpa,
The error "java.lang.NoClassDefFoundError" means that your classpath is not set correctly. This is likely due to a missing reference. The class file may be in the jar, but at runtime the component (your component) needs to have access to the jar file which contains the class.
Try adding the servlet.jar, activation.jar file in your project and also through your ADd external libraries at 'java build path'. also please ensure tht WAS and NWDS at the same SP level.
Hope this might help you.
Regards,
Shaila

Problem in assigning custom role to a user

Hi everyone,
Can anyone tell me how to assign a custom role to a user?
I have created a set of IViews which are assigned to a workset and the workset is assigned to a new role.
I assign this new role to my user account.
But, I am not getting the role which I have assigned to my user account.
What am I missing???

Hi Daya,
Check the below links:
[Setting up Portal Roles|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/e0ba66fd-3c4e-2a10-1090-e1217a92c147?QuickLink=index&overridelayout=true]
Step by step guide to create roles and worksets. [Wiki blog|http://wiki.sdn.sap.com/wiki/display/EP/Makeiview,workset,pageandassignrole]
Check the [help.sap|http://help.sap.com/saphelp_nw70/helpdata/en/1e/89570091620b428807f5bce4b45e7f/frameset.htm] document to get idea about Portal Content Objects.
Regards,
Anand G

Report to see list of roles with no user assignment

Hi Gurus,
I need to know the transaction/Report where i can see list of roles which doesnt have any user assignment.
Pls help me

HII,
To search for roles with no users assignment u can run a report RSUSR070 AFTER EXECUTING TCODE SA38 in the progran field enter the name of the report and click execute button u get roles by complex selection criteria then scroll down and in the selection according to user assignments select without user assignment then cli ck execute button u will get the roles with no user assigments............
Thanks and regards

One CUP request for assigning role to multiple users

Hi,
We assign roles to users in production only through CUP requests.. We use GRC 5.3
Here we have a case where we need to assign one role to 60 users in production(each user may have different roles assigned in the back end) . I can raise one CUP request for all users using " multi-user" option in Copy request . But when we want to make a risk analysis , it will not show risks at user level as each user had different roles and may get different risks by adding new role.
Instead it will give risks if any for only that new role which want to assign. Our manager is not accepting as this is not giving complete picture of risks for each user when we add new role.
Please suggest me if there is any other way where I can make a risk analysis for each user when I created a CUP request for multiple users.
Or the only solution is to create 60 CUP requests ?? this would be too manual
Regards ,
jaags

Raghu,
thanks for the reply, you are right as per the audit .But suppose if it is for 200 users ,creating 200 CUP requests will be impractical right.
there should be some solution for this , because there will be many situations practically where we have to assign roles to N number of users.
Is this possible in GRC 10 ? any idea ?
Regards,
Jaags

Extraction of roles content and user assignment

Dear all,
we want to transfer some CCA-rights to BI into a table, which will be referenced in a role in BI.
Purpose is to tranfer the authorization concept from ERP to BI.
I have to write for this some function module, which might be a bit complex but not impossible.
Has anyone experience with this?
Regards
Harald.

HII,
To search for roles with no users assignment u can run a report RSUSR070 AFTER EXECUTING TCODE SA38 in the progran field enter the name of the report and click execute button u get roles by complex selection criteria then scroll down and in the selection according to user assignments select without user assignment then cli ck execute button u will get the roles with no user assigments............
Thanks and regards

Assign roles automatically when user gets created

Hello,
I want to know if there is a way to assign basic roles to all the users in the system when they get created in the back end as well in the portal.
Thanks in advance.

Hi Rahul,
There is no such way to assign automatically basic role to all users. You can go for tool sugested by Alex.
And also you can check one solution if this works for you that we have used in Past and proposed by business. In that if the Basic role is like end user role and needed for all portal users. Then you can create on Template users (Type dialog) . Then you can create the new users by copying the template user.

Table to find the assigned Roles with my User ID

Hello Experts,
1.Is there any specific table to find out the assigned roles to my User ID?
If there is no table, let me know is there any transaction to find out the assigned roles to my User ID?
2. When I assigned Marketing Pro role to my user id in Organization Unit, I am not able to see in webui screen.
when I click on webui transaction, it is displaying some selection screen, there it is not displaying the role I have assigned?
Could you help me to sort out these two queries?
Thanks and Regards
Madhu

Hi Madhu,
1.Is there any specific table to find out the assigned roles to my User ID?
If there is no table, let me know is there any transaction to find out the assigned roles to my User ID?
Sol'n : You have so many Class Methods for finding your requirement else FM aslo.
Go to SE84 there u will find search ClassMethods. There u type getuserRole or userRole* and press F8. Pick the one which you feel it may give you the result
ie you have to execute the class...if it showing instance on the tool bar click on that then press execute the method which you feel relevant to you, and give input parameters.
Sol'n for 1 point is: CL_CRM_UI_ROLE_ASSIGN->GET_BUSINESSROLES_FOR_USER.
2. When I assigned Marketing Pro role to my user id in Organization Unit, I am not able to see in webui screen.
Sol'n: Go and check in T-code : BP. Dispay Ur BP and check for Employee Meantaied -- Identification Tab..Did u maintained ur Userid over there or not
when I click on webui transaction, it is displaying some selection screen, there it is not displaying the role I have assigned?
Sol'n: Need clarification on this point.
Regards,
Lokesh
Edited by: Lokesh on Mar 8, 2010 7:37 AM

Assigning different authorizations inside a role to different users

Hello,
Could someone please guide me to how can we assign different authorizations (authorizations field values) for an authorization object inside a role to different users; i.e. in the role maintenance transaction (pfcg) after we create a new role and add an authorization object to it, if this authorization object has several authorizations (authorization field values), and if I need to add two users to that role, how can I assign to one user an authorization different from that assigned to the other user ?
Thank you in advance.
Best regards.
Reda Khalifa
IT Department - Almansour Automotive Group - Egypt

Hi Reda,
That documentation complicates the subject slightly as it is talking about principles that are at a lower level than the usual role level.
We have 1 authorisation object - S_TRVL_BKS
Authorisations have been created for this object, called S_TRVL_CUS1 and S_TRVL_CUS2
In this context, an authorisation is an instance of an authorisation object that has been populated with data.
Before the profile generator you used to create authorisations (auth objects populated with data) and assign them to profiles which are then assigned to users.
In this example 2 profiles would be needed
Profile1: S_TRVL_CUS1 and S_TRVL_CUS2
Profile2: S_TRVL_CUS2
Miller would be assigned profile1, Meyers would be assigned profile2
The profile generator allows us to easily build authorisations and profiles and packages them up in a role. This way, we can assign transactions and authorisation objects into a role, populate the authorisations (which is what we do in the authorisations tab in the role) and automatically create the profile.
The example in the documentation is still valid because it requires 2 seperate authorisations (and therefore profiles and roles) to be assigned to different people. Unfortunately this is not explained very well in the documentation.
I hope that makes sense, roles are static and the permissions that they give do not vary dynamically. In BW we can use variables to do something similar and to some extent structural authorisations in HR work dynamically however this doesn't apply to R/3 or ECC. (it can be done in come cases but costs many, many £££/$$$'s)
Please let me know if you want me to elaborate further on this
Cheers
Alex

Assign programmatically a BPM role to a user

Similar Messages

Maybe you are looking for