Assign MSS role

Hello Everyone,
I am working on HCM forms and processes. I have following issues. Dont know if this is the right place to ask the following questions.
u2022 Activate backend services: HCM_ASR_CI_1 and HCM_ASR_CI_2
u2022 Assign the MSS role version 14
I have activated the backend services but dont know how to assign MSS role version 14. Can some one please help me how and where do MSS role version 14 is assigned.
Thanks a lot in advance.
Regards,
MA

Hi,
You can assign the MSS portal role in the identity management in the portal (you need to have the user admin role) : [Assigning Roles to Users and Groups|http://help.sap.com/saphelp_nw70ehp1/helpdata/en/ac/e0c1d5828b4e8e903c29a250a611ca/frameset.htm].
Regards,
Pierre

Similar Messages

Assign MSS role directly from position

Hello Experts,
Can anyone please detail how MSS role can be auto assigned by moving a person into a Chief Position in the org structure? Please list the steps that would need to be performed as right now we are using GRC to request Mss roles for managers. Speedy responses would be highly appreciated! Thank you!

through the code, u have all the flexibility assigning the required roles or may be u can set the process with some workflow and upon approvals may be security can do needful or may be u can automate the process. I am not exactly sure how others are doing, may beSiddharth Rajora or Jwala ESS MSS or Andy Goris can guide you

Evaluation path for MSS role

Hi all,
Is there a way to assign MSS role dynamically to an employee if he has employees reporting to him?
We have got to know that this can be achieved by configuring some evaluation path.
Any pointers would be appreciated!
TIA!

Diana,
Where actually do you assign the roles ,is it in the portal or you have a CUA system where all the role maintenance is done over there.if second one is true you can write a custom program and assign the role by checking the direct reportees
Thanks
Bala Duvvuri

ESS and MSS role assigned to position

Hi,
I have to find out that wheter the ESS Role is assigned to a position .I have to display (Y/N) (Details 'Y' if ESS Role Assigned, 'N' if no ESS role is assigned) To have a 'Y' it must be an active role
Is MSS Role assigned to a position .I have to display (Y/N) (Details 'Y' if MSS Role Assigned, 'N' if no MSS role is assigned) To have a 'Y' it must be an active role.
Kindly let me know how to do it.I am a abap developer and new to HR module.
Thanks !
Sachin Sharma

hi
you can check the user id assigned to the position ,
the correct procedure would be to use Logical database and HR function modules to retrive the poistion code and user id
position code can be taken from infotype 1 and user id can be taken from infotype 105 , once u get the user id , then you can check the roles that are there , in your case it might be custom roles , you can hard code the role name for that matter to query the same.
Hope this gives you a clear idea.
Regards
sameer

Automation of assignment of ESS & MSS roles

We are implementing ESS and MSS as part of our global HR implementation. What i am thinking of is to look for methods to automate the assignment of ESS role once the HR master record is created for an employee and MSS role once the chief relationship is established for the corresponding org unit.
Does anyone out in the field had done anything similar? If so,could you please share your experiences/lessons learned etc??
Thanks
Sarada Ganti

You have not mentioned the method of role assignment, ie direct/indirect so I assume you are using both.
You can automate the role provisioning without any problems for ess roles directly assigned to the ess user in SU01 - this is because the steps involved are easier to script.
Problems arise when automating the role provisioning for mss users that are indirectly assigned to their mss role through the position. The steps for administering indirect role assignments are not so straight forward and involve the running of RHRPROFL0 which needs to be maintained with key parameters to link the mss role to the position that the new manager is assigned to.
In the end we decided not to use indirect assignments because of this reason. The various scenarios was too difficult to script for the provisioning tool Tivoli (ITIM)
Hope this helps.
Regards
Charmaine

Error in Portal when checking MSS role, Help me how to solve?

In portal when I click on MSS I am getting an error like...
Portal Runtime Error
An exception occurred while processing a request for :
iView : pcd:portal_content/com.sap.pct/line_manager/com.sap.pct.erp.mss.bp_folder/com.sap.pct.erp.mss.roles/com.sap.pct.erp.mss.manager_self_service/com.sap.pct.erp.mss.manager/overview/com.sap.pct.erp.mss.work_overview/com.sap.pct.erp.mss.workoverview/com.sap.pct.erp.common.key_figure_monitor
Component Name : com.sap.portal.appintegrator.sap.WebDynpro
Exception in SAP Application Integrator occured: Unknown system alias. System Alias: 'SAP_ECC_Financials', User: 'SAPUSER', Reason: System Alias is not defined or permission denied for this user.
Exception id: 08:49_02/12/09_0001_63287050
See the details for the exception ID in the log file
How can I solve this?
Thanks,
Potru.

hi potru,
does the user 'SAPUSER' has assigned roles which has permission for system 'SAP_ECC_Financials'.
hope this will help resolve your issue.
thanks
arun

Assigned User Role Mirgation from EP 6.0 SP2 to SAP NW2004s (EP 7.00 SP7)

Our users are stored in LDAP and their role assignment is driven by the roles assigned to the groups. For example...
      Manager Group : MSS and other role assigned
      Employee Group : ESS and other role assigned
but some users are assigned additional roles not driven through groups, for example, some manager may have business specific reporting role assigned to them. In this case, the assigned role did not move to EP 7.0 because the role assignment information is stored in the portal database (Oracle) for EP 6.0 SP2 and the new EP 7.0 portal database (Oracle) does not have that information since we did not use migration tools for the upgrade.
Is there any way I can extract the roll assignment information from EP 6.0 SP2 and upload them to EP 7.0 database since both environments have identical roles and we are using the same LDAP for both environments ??

Our users are stored in LDAP and their role assignment is driven by the roles assigned to the groups. For example...
      Manager Group : MSS and other role assigned
      Employee Group : ESS and other role assigned
but some users are assigned additional roles not driven through groups, for example, some manager may have business specific reporting role assigned to them. In this case, the assigned role did not move to EP 7.0 because the role assignment information is stored in the portal database (Oracle) for EP 6.0 SP2 and the new EP 7.0 portal database (Oracle) does not have that information since we did not use migration tools for the upgrade.
Is there any way I can extract the roll assignment information from EP 6.0 SP2 and upload them to EP 7.0 database since both environments have identical roles and we are using the same LDAP for both environments ??

Newly Added Iview now showing in MSS role

Hi Experts,
I have a strange issue which is bugging me since yesterday.
I have a customized MSS role in my portal where i have added one WebDynpro Java Iview to this role. I can see the iview in the MSS role when open the role as object. But ! when i see the same role by assigning to me, i couldn't see the newly added iview in the same role.
I have added the same iview in several places (worksets) but still couldn't see that iview in the role. I don't understand why it behaves all of the sudden.
Is it cache problem? if so, i have waited 10 hours and couldn't see the iview still. Should i do something else to show that newly added iview ?
Thanks in advance.
Regards,
Suresh

Hi JYOTHI,
As it is custom role , check with your Hr Team for dependency of portal display on backend .
Gneerally for standard business packages, home page framewokr configuration in backend provides navigation in portal.For your custom role , there might be siimilar configuration whcih hr consultants in your organization knows.
Regards,
Koti Reddy

MSS Role

Hi,
I wanted to the hide some of MSS features in Portal. So, I copy standard MSS Role from Content Provided by SAP to Content Provided by Other Vendors because I do not want to touch standard MSS Role.
I made cople of changes so that user can only see Report tab under MSS tab. However, if the user wanted to see one of reports, say Birthday, from LaunchPad for Report, by clicking Report Result, , he gets "Page not found or not available".
From default trace, I see below:
Error looking up url: portal_content/com.sap.pct/line_manager/com.sap.pct.erp.mss.bp_folder/com.sap.pct.erp.mss.roles/com.sap.pct.erp.mss.manager_self_service/com.sap.pct.mss.hcm.rpt.iac
[EXCEPTION]
com.sapportals.portal.pcd.gl.PermissionControlException: Access denied (Object(s): portal_content... [see details]
If ESS, we can change the PCD path from SPRO. But for MSS, I'm not sure. Any idea?
BTW, I have no problem if I use standard MSS Role. The problem only arises if I assign customized MSS role to users.
Rgds,
Hapizorr

Hi,
If you do that user may get 2 mss roles also.
mss page path also lies in SPRO same resources and services like ESS.
check the resources you will see MSS also in home page area frame work.
One more thing transport the original MSS ROLE to epa and save the package with you and modify the original MSS ROLE.
If you want to do changes only in custom one then copy MSS ROLE in the SAME folder i.e line manager....where the original mss role exists.
and change original MSS ROLE id to custom ROLE and vice versa.
Then you will not get this problem.
Thanks,
gopal

ES HOME PAGE ERRORafter assigning default roles

hi all,
we are getting error in home page after assiging default ess mss roles with everyone user role also but its not getting the services on home page ...assigned backend in su01 roles also HAVNG SAP_ALL for them

Hi,
There is something wrong with the user id.
Check all these properties and make sure these all are in correct place
1) Check availability of user in R/3 system.
2) the validity period in both R/3 system and portal.
3) either the user is locked in R/3 system
4) there should be something wrong in roles of R/3 system.check all the roles and parameters
conform whether these all are in correct place or not and let me know

Assign Portal Roles from R/3

Hi all,
We've here an EP6 SP14 SR1 with R/3 as data source, this R/3 is used to ESS and MSS implementation on portal. The users are created at R/3 using SU01 and then Logon portal with this same user. But we've to assign portal roles with portal administrator to have access to menus in portal. There's a way to, when create user in backend we can assign automatically portal roles to the user ?
We do not have CUA neither LDAP.
Thanks a lot for help.
Best Regards,
Pedro Rodrigues.

Jörg,
Thanks a lot, that's very helpfull, now I can see the roles in portal groups. But, we need to use dataSourceConfiguration_r3_rw.xml because when user have to change his own password first time they enter in portal.
How could we got this authorization ?
Could we assign to pfcg roles that we pretend to use this authorization ?? What authorization is it ??
Thanks,
Best Regards,
Pedro Rodrigues.

Assigning database roles on SQL Server db

I am trying to set up a SQL Server adapter (not a database table adapter for SQL tables) to manage role assignment on a database 'test1' on my sql server ( 2000) 'sqlserver1' using IdM 7.1. I am trying to assign role1 to user tuser1 on test1. I am using 'sa' account so permissions should not be an issue.
Per resource reference document, I mapped:
userNametest1 <-> userNametest1
rolestest1 <-> rolestest1
My login for user 'tuser1' gets created on the SQL server. However the database and role assignment is not happening. I do not get any errors in the IdM admin pages from where I am testing this. Hence I am assuming I am not setting something right in the resource schema. I have tried different ways such as
userNametest1 <->userName
rolestest1 <-> roles
and some more combination but none seem to work. How can i find out what my resource attribute mapping should be? If anyone has done this, can you please share how you got it work?
Thanks in advance.

Some more info.
I have set up the out of the box MS SQL server adapter to connect to MSDE version of SQL server running on my local machine. I used the MSSQLServer Form provided in the samples folder and assigned it to an admin user and turned on the trace.
I am able to create logins by assigning the resource to a user. Using the admin user I am able to see in the trace that the server Roles are also being retrieved fine. What I am not able to get is assigning a database to the user and then assigning db roles.
Following the documentation (Resource Reference guide for IdM 7.1) I have created following attributes on the left hand side of schema.
defaultDB,serverRoles,domain, userNameMyTestDb,rolesMyTestDb.
No matter what I map the last two attribute I am not able to assign a db and dbroles to a user. I turned on sql profiler and then again used the admin user to view a test user using MSSqlServer form and it appears that the procedure sp_databases is not being called at all. I have decompiled the sql server class file and it appears there might be an issue with the way list of databases is being retrieved.
Has any one seen this before? If you were able to get it to work, can you please give me information on the resource schema and any other settings you had to make to get it to work?
Thanks in advance.

Portal Runtime error in assigning a role to a user by UME

Hi ALL,
I am assigning a role to a user through UME using this piece of code:
String uids = userFactory.getUserByUniqueName("Shilpa").getUniqueID();
String roleid = roleFact.getRoleByUniqueName("pcd:portal_content/administrator/content_admin/content_admin_role").getUniqueID();
roleFact.addUserToRole(uids,roleid);
The userid and role is beinf fetched successfully but at the assignment of the role to the user , I am gettign Portal runtime error.
The error log is following.
<b> java.lang.NoClassDefFoundError: com/sap/abc/network/util/InfEPLog
     at UserListeners.userAssigned(UserListeners.java:27)</b>
     at com.sap.security.core.imp.RoleFactory.assignUserPerformed(RoleFactory.java:1466)
     at com.sap.security.core.persistence.imp.DistributedTransaction.doCacheUpdateAndNotificationForMembers(DistributedTransaction.java:565)
     at com.sap.security.core.persistence.imp.DistributedTransaction.doCacheUpdateAndNotificationForMembers(DistributedTransaction.java:815)
     at com.sap.security.core.persistence.imp.DistributedTransaction.doCacheUpdateAndNotification(DistributedTransaction.java:465)
     at com.sap.security.core.persistence.imp.DistributedTransaction.afterCompletion(DistributedTransaction.java:252)
     at com.sap.engine.services.ts.jta.impl.TransactionImpl.commit(TransactionImpl.java:414)
     at com.sap.engine.services.ts.jta.impl.TransactionManagerImpl.commit(TransactionManagerImpl.java:316)
     at com.sap.engine.services.ts.transaction.TxManager.commitLevel(TxManager.java:581)
     at com.sap.engine.services.ts.transaction.TxManagerImpl.commitLevel(TxManagerImpl.java:63)
     at com.sap.transaction.TxManager.commitLevel(TxManager.java:237)
     at com.sap.security.core.persistence.imp.DistributedTransaction.commit(DistributedTransaction.java:2742)
     at com.sap.security.core.imp.Role.commit(Role.java:337)
     at com.sap.security.core.imp.RoleFactory.addUserToRole(RoleFactory.java:1338)
     at com.sap.user.UserAdded.doContent(UserAdded.java:63)
     at com.sapportals.portal.prt.component.AbstractPortalComponent.doPreview(AbstractPortalComponent.java:240)
     at com.sapportals.portal.prt.component.AbstractPortalComponent.serviceDeprecated(AbstractPortalComponent.java:168)
     at com.sapportals.portal.prt.component.AbstractPortalComponent.service(AbstractPortalComponent.java:114)
     at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)
     at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)
     at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)
     at com.sapportals.portal.prt.component.PortalComponentResponse.include(PortalComponentResponse.java:215)
     at com.sapportals.portal.prt.pom.PortalNode.service(PortalNode.java:645)
     at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)
     at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)
     at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)
     at com.sapportals.portal.prt.core.PortalRequestManager.runRequestCycle(PortalRequestManager.java:753)
     at com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:240)
     at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:524)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:407)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.servlet.InvokerServlet.service(InvokerServlet.java:156)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
Please tell me where I am wrong.
Regards,
Shilpa.

Hi Shilpa,
The error "java.lang.NoClassDefFoundError" means that your classpath is not set correctly. This is likely due to a missing reference. The class file may be in the jar, but at runtime the component (your component) needs to have access to the jar file which contains the class.
Try adding the servlet.jar, activation.jar file in your project and also through your ADd external libraries at 'java build path'. also please ensure tht WAS and NWDS at the same SP level.
Hope this might help you.
Regards,
Shaila

Error while trying to assign a role via CUP in Portal

Hello Experts,
I am trying to create a request to assign a role in EP via CUP ( 5.3)
EP Connector is working fine as I have imported Portal roles etc
SPML service is working fine
I have done the mapping in the Provisioning tab for Portal system
logonname in portal is email address of an employee
So the I have done the following mapping
AC Field Application field
email addres-Stndard logonname
And I have the following error while trying to create a request which I grabbed form the log
ERROR Exception during EJB call, Ignoring and trying Webservice Call
LinkageError: loader constraints violated when linking com/virsa/cc/xsys/webservices/dto/WSRAInputParamDTO class
ERROR com.virsa.ae.core.BOException: Exception from the service : Invalid System
com.virsa.ae.core.BOException: Exception from the service : Invalid System
ERROR : BO Exception in Save request
Any suggestions would be really appreciated
Regards
Kev

Kevin,
I was able to replicate your issue and there is a setting in the CUP that you have to disable, Goto the config tab in the CUP and select NO for the "Risk Analysis On Request Submission " under risk analysis.
Issue here is you did not create a connector for your EP in the RAR, I believe you have the above mentioned parameter to yes and so when you are submitting a request CUP is trying to do the risk analysis but RAR was not able to find any System, so it is thowing an error.
You can resolve this issue in two ways, one is to create a connector in RAR or the other is to disable the setting in the CUP.
Hope this helps.
Naveen

Assign a role automatically based on resources assigned to the user?OIM 11g

Hi,!
i have a request and this is:
in my scenario i have roles associated with access policies that assign resources .
i have resources assigned by a target reconciliation ... what i need is assign a role based on resources that the user has..
if the user has 4 resources added by a target reconciliation and these 4 resources make a role then the role has to be assigned automatically...
any idea?? this is possible?? thnx..

any idea?? ... this is possible??

Assign MSS role

Similar Messages

Maybe you are looking for