Assign Portal Roles from R/3

Hi all,
We've here an EP6 SP14 SR1 with R/3 as data source, this R/3 is used to ESS and MSS implementation on portal. The users are created at R/3 using SU01 and then Logon portal with  this same user. But we've to assign portal roles with portal administrator to have access to menus in portal. There's a way to, when create user in backend we can assign automatically portal roles to the user ?
We do not have CUA neither LDAP.
Thanks a lot for help.
Best Regards,
Pedro Rodrigues.

Jörg,
Thanks a lot, that's very helpfull, now I can see the roles in portal groups. But, we need to use dataSourceConfiguration_r3_rw.xml because when user have to change his own password first time they enter in portal.
How could we got this authorization ?
Could we assign to pfcg roles that we pretend to use this authorization ?? What authorization is it ??
Thanks,
Best Regards,
Pedro Rodrigues.

Similar Messages

  • Assigning Portal Roles

    Hi All,
    We have installed EP 7.0. The problem we are facing is : The "Portal Content" folder is not displayed under the "Browse Category" of content administration & system administration.
    Why is it so? Do we need to add some other portal Roles to the user? If so.., which role we should add?
    Also we are trying to add the portal role ID
    " com.sap.pct.pdk.JavaDeveloper". But when we search for this role , we could not found this role. Whether the role has been renamed?
    Kindly provide your suggestion on the above queries.
    Regards,
    Eben.

    Hi,
    Re: How to create and assign role
    Portal:How to assign a Folder to a Role in Protal
    I hope the above links will help you,
    Regards,
    Harish

  • How to remove default "Home" portal role from every portal user

    Hi
    My Portal system is configured on our BW UME.
    When ever I create a Used ID in BW,A portal account is created for the same user id.
    With out any portal roles (navigational) assigned to the user.
    Ex:
    Lets say I created a user u201CTesteru201D in BW and assigned him the relevant BW Roles (ABAP).
    When I logon to Portal using u201CTesteru201D, I can see a TAB u201Chomeu201D under which worksets Company,Work,Teams,Documents and Portal Information
    I checked the user account in Portal for tester there are no portal roles assigned to himu2026u2026.
    My requirement is not to display Home (tab)u2026.how can is that Home is assigned to all portal users and how can I remove it so that the users will be displayed with only navigational role that I assigned.
    Thanks

    Hi,
    In User Admin of Portal  search for eu_role and see check assigned users and assigned groups tab and see if this is added to the users or group.
    If you find it assigned to any users or any group delete the assignment and it should be gone.
    Hope this helps.
    Cheers-
    Pramod

  • Assign SAP Portal Role from R3

    Hello Expert,
    How can I assign Roles or Groups created in SAP Portal from R3?
    Is possible?
    I want mantain SAP Portal 's Roles/Groups without use "Identity Management", but I don't know if is possible assign it from R3 (transaction SU01 or others)
    Thanks!
    Regard.
    Mariano

    Hi,
    You can do this if UME of your portal is R/3 system else you have to do it from portal system only.
    Thanks
    Sunny

  • SAP user assigned with roles from HR-ORG incorrectly

    Hi All
    I have an issue where a SAP user appears to be receiving role assignments from some HR-ORG object erroneously.
    I have checked the user's HR positions and organisational assignments and they do not have any roles assigned.
    I also checked the job and no roles are assigned there as well.
    Where could these roles be coming from if they are not coming from the position or org unit?
    User currently has direct role assignments in SU01 except for 3 roles which appear as indirect assignments (HR assignments) in SU01.
    Is this is a bug and is there a note to fix it?
    Please could someone let me know why this is happening.
    Thanks
    Ran

    Hi Colleen.... Thanks for your email.
    Please see below screenshot, it is an Org assignment but single roles also belong to composite roles.
    PBS is not meant to be active and PFUD is scheduled as a daily job. CUA is not active here.
    User is assigned to a position and org unit but roles are not provisioned via the Org/position. So there is a 0105 mapping, I have checked those positions and org units but no roles are assigned there.
    Basis release 731 and level 0005, SP - SAPKB73105.

  • Ordering of assigned Portal Roles

    Hi All,
    I have some roles which I am assigning to users in different combinations. I have to set one page under one role as the default page coming for each user when the portal is opened. How can I fix this ordering? Suppose I have RoleA, RoleB and RoleC. How can I specify that PageB1 or RoleB should be the default page of the portal? I am not seeing any move updown key when the roles are assigned to the users. Whats the way out? please suggest.
    Thanks in advance.
    Shubhadip

    hi,
    Check this
    http://help.sap.com/saphelp_nw04/helpdata/en/92/3e703e632c7937e10000000a114084/frameset.htm
    n do not forget the reward points if it helps
    Cheers!!
    Message was edited by: rao_2005
    Message was edited by: rao_2005

  • Assign biz role through CRM -SU01 and display page at portal

    HI, SDN Fellows.
    I am creating some custom portal roles at portal and mapped it to the custom business roles for some PCUI screens at crmc_blueprint_c --> "Assign Portal Role to Single Role" ("Assignment of CRM Role to Portal Role").
    Currently, our portal UME data source is mapped to CRM system.
    Right now, I have to assign both the CRM Role through SU01(to have access the CRM Object Method at CRM-PCUI application) and Portal Role through User Admin of WAS/portal (to access/display the PCUI iView in the portal).
    My goal is to just assign role through CRM-SU01 and achieve the same output as I described above. Meaning can I just do the role assignment for the CRM role (through SU01) and able to access to the CRM-PCUI application through portal (able to see the pcui screen)?
    Thanks,
    Kent

    What I want is when I assign a role (Sales Manager) said user A in CRM system, userA should able to see the related workset/page/iviews in the portal (without the need to assign the same: Sales Manager role in portal).
    Now, what I have to do is assign the related objects into a single/composite roles in CRM (for backend data access), then I have to assign a portal role (through User Admin of Portal, so that they can see the portal content),
    is that a way we can do it in one step?
    Thanks,
    Kent

  • J2EE roles vs Portal roles vs ABAP roles

    (I also posted this on portal implementation, but i hope i receive more reactions here )
    Dear all,
    I have a question about the information on the following link:
    http://help.sap.com/saphelp_nw2004s/helpdata/en/4c/6c0f40763f1e07e10000000a1550b0/content.htm
    It says the following:
    "These functions are intended to assign users and their assigned portal roles a corresponding role in the SAP System. This corresponding role (authorization role) contains the authorizations needed to execute certain functions from the portal."
    1. These "...certain functions..." they talk about, can someome give an example of these functions?
    2. Is it possible for example to create a role in the portal that gives a user authorisation for starting transaction SE80 in the backend system? Without making the role in the backend first and uploading it to the portal.
    3. It's also possible to upload ABAP roles to the portal. Is the main reason for this that users can see their SAP menu (or part of it) in the portal? Or does this have other advantages too?
    4. I'm very confused about the relation between J2EE roles, portal roles and ABAP roles. Is it possible to manage the roles for a user in one place, without having to do certain actions in the portal AND the backend system?
    From what I've read on help.sap.com, you always need to do certain actions in both places.
    A possible approach is the following (from what i know): Creation of roles in the R/3 system, without assigning to users. From a webdynpro application, a user can then be created and roles can be assigned: portal roles (via some API) and R/3 roles (via BAPIs).
    I hope someone can give a bit information on this issue. I've done alot of reading on help.sap.com, but it's still an abstract issue for me.
    Kind regards,
    Joren

    Hi Jorem
    Re: point 3. I don't build portal roles through this mechanism as I don't believe in replicating the SAP easy access menu inside the portal. If there are some specific functions (transactions) that I want to run inside the portal, then I might use this mechanism to build the iViews once. I would rather start an iView that runs transaction SMEN and let the user see their regular easy access menu.
    Please note that the speed of executing transactions in the portal isn't a function of the portal, but the fact that you are using ITS, for example, to web enable the transaction...
    Re: point 4. Groups are a UME concept. They have nothign to do with ABAP groups. They can be created directly in UME through user administration functions, or they can be created in the LDAP and then they are visible in the portal. If the UME points to an ABAP system, then the ABAP roles are autoamtcially visible as UME groups. Groups created in the UME need to have the members assigned through user admin functions of the Java engine. Groups stored in LDAP are maintained using LDAP admin tools. There are upload utilities that allow you to maintain LDAP users and groups through text files. Google LDIF for more details.
    Roles on the portal need to be built in the portal contetn directory. As Michael mentioned, this can be automated by the use of the role upload function built into the portal.

  • Customizing availability of Portal Roles/TABs (ESS)

    Hello Portal Knowledgeable ones,
    I am running EP 6.0 SP13.
    We will be implementing many of the Standard HR ESS functions.  We desire to purposefully limit the hours of the day when these capabilities are available to users--EVEN THOUGH THE PORTAL IS UP.  As an example, viewing paystubs is available 24x7, whereas other update-type ESS functions (update absences) will not be available from 1am to 5am each day.  We want to limit this access because our payroll processing occurs during this window, and we do not want updates to occur during it.
    Here is my question:
    For the standard ESS web dynpro portal functions, how do we implement a time-of-day switch such that access to certain iViews is prohibited. 
    The end user experience needs to be as follows: 
    If time is between 1am - 5am and user clicks on updating ESS item in the portal, the system displays an alternative iView indicating that the system is down for maintenance.
    General advice would be welcome as well.  It seems that the portal displays tabs/content solely based on your pre-assigned roles.  How do you turn-off assigned portal roles dynamically?
    Thank you for any insights!
    Kevin

    Found a solution.  All users are assigned to groups.  Groups are then linked to roles.  To change content for user, update the group to role link using UMFactory inside a portal application.

  • Portal Roles Intial load and Provisioning through IDM UI

    Dear All,
    I am trying to assign portal roles to Users in IDM 7.1 SP5.
    For this two activities needs to be performed:
    1) Portal roles Initial load in IDM Identity store
    2) Provisioning of Portal roles to Users through IDM UI
    Please suggest about the configuration guide or steps required for both points mentioned above.
    Thanks
    Honey

    Dear Christoph,
    Thanks for the reply.
    Now I am able to assign Role / Privileges to Users from IDM to UME.
    Require one clarification on  User / Identity creation:
    Where can I can set initial password for all the new user created from IDM UI ?
    I am able to create new User and assign roles as well from IDM UI and all is available in EP UME also.
    But when I am logging in with new user it is not taking the default password mentioned in Global Constant in IS.
    Do I need to mention the password somewhere else.
    Pls suggest.
    Thanks
    Honey
    Edited by: Honey Gyanani on Oct 6, 2010 9:10 AM

  • How to get the obiee dashboard secuirity in adf to assign the roles in adf for users

    how to get the obiee dashboard secuirity in adf to assign the roles in adf for users

    thanks Benjamin...
    my present requirement is pull Role to Dashboard mapping from OBIEE Catalog
    in my project we are going to restrict the users and assigning the roles from adf.
    Pls Help me..

  • Portal Roles (ABAP & JAVA)

    Hi,
    We are planning to go for a portal implementation for our BW reports..
    I had a few questions with regards to the roles (BW & Portal) or (ABAP & JAVA)
    Question 1:
    I want a single place (BW) where I can assign all the roles (BI & Portal) to users, so when ever a user account has to be createu2026the support team will create it BW System and assign all the relevant roles in BI system
    If YESu2026then how can I move the Navigational Role in portal (Role in which we publish iviews) that I created in portal to BW.
    And also
    How can I create a JAVA role in BW so that that role can be assigned to user and his portal options will be updated..
    Thanks

    Hi
    Thanks for all the updates.
    Few questions
    How can i know Which user repository is my portal system connected to ? (LDAP or ABAP datasource)
    and
    If you have configured your BW system as the ume datasource for your portal - then your backend roles in BW will show up in portal as Groups. You may choose to assign your portal roles to these groups.
    In BW if i assigned a Composite role to a user ...will it show as a group in portal and
    As my requirment is to single place to create user either in portal or BW....if BW user roles are avaliable in portal as groups...
    Can i insted of create a user account in BW and come to portal and assign portal roles to the user or user group to get portal previliges
    Can i create user account in portal and assing the user to the corresponding groups in portal....will this action will create a user account in BW as well
    Thanks

  • Error while trying to assign a role via CUP in Portal

    Hello Experts,
    I am trying to  create a request to assign a role in EP via CUP ( 5.3)
    EP Connector is working fine as I have imported Portal roles etc
    SPML service is working fine
    I have done the  mapping in the Provisioning tab for Portal system
    logonname in portal is email address of an employee
    So the I have done the following mapping
    AC Field                             Application field
    email addres-Stndard       logonname
    And I have the following error while trying to create a request which I grabbed form the log
    ERROR Exception during EJB call, Ignoring and trying Webservice Call
    LinkageError: loader constraints violated when linking com/virsa/cc/xsys/webservices/dto/WSRAInputParamDTO class
    ERROR com.virsa.ae.core.BOException: Exception from the service : Invalid System
    com.virsa.ae.core.BOException: Exception from the service : Invalid System
    ERROR : BO Exception in Save request
    Any suggestions would be really appreciated
    Regards
    Kev

    Kevin,
    I was able to replicate your issue and there is a setting in the CUP that you have to disable, Goto the config tab in the CUP and select NO for the "Risk Analysis On Request Submission " under risk analysis.
    Issue here is you did not create a connector for your EP in the RAR, I believe you have the above mentioned parameter to yes and so when you are submitting a request CUP is trying to do the risk analysis but RAR was not able to find any System, so it is thowing an error.
    You can resolve this issue in two ways, one is to create a connector in RAR or the other is to disable the setting in the CUP.
    Hope this helps.
    Naveen

  • Automatic upload of roles from ECC to portal (UME with LDAP)

    Hi experts,
    This thread reopen the question asked on the following message : automatic upload of roles from BI to portal
    However, it concerns this time "UME with LDAP".
    Problematic :
    SAP Library 04s tells us that is not yet possible to automate role replication (or role assigment replication) from ABAP Based back-end to Netweaver Portal. Only manual process for initial upload is possible.
    Source = http://help.sap.com/saphelp_nw04s/helpdata/en/41/5e4d40ecf00272e10000000a155106/frameset.htm
    Questions :
    1 - Did anyone ever try to implement such an automatic tool ?
    2 - What if I'm not able to write on the Active Directory ? I am still able, at least, to automate role assignment replication from ABAP Based back-end to Netweaver Portal (ie. UME with LDAP) ? Directly from SAP R/3 to EP through UME, without passing through Active Directory since the group field is not maintained in AD.
    Many thanks for your inputs
    Alexis MARTIN

    Hello,
    As I did not read the previous thread I don't know what exactly you are trying to achieve, but I can tell you about what we have done - as far as it is not too late yet.
    We use the portal with integration to a BI system. In the ABAP stack we have lots of roles with menu items for hundreds of reports. We want the users to see these roles in the portal.
    First we have used the role migration tool of the portal to upload these roles. There is a Java API for executing role uploads from code. You need to create a webservice in the java stack to call this api, and can call the webservice from ABAP.
    However it is just a question of time and role size until this will not work at all. Standard role migration is more or less crap, stability is a problem. It also creates a lot of logs in the PCD and thus fills the database with trash. (After a few OSS messages there is now a program for deleting logs + you can turn of logging.) Also upload of larger roles takes up to an hour, and you alwasy have the problem that your portal roles are not up to date during the day.
    When I got completely fed up, I have implemented an own navigation connector. When you log on to the portal it will connect to the ABAP stack via RFC, load the role, and generate the portal menu from it. It uses caching, but on every logon it checks whether the role has been updated in ABAP since the last time it was loaded. It is up to date, faster then PCD navigation, and you need absoluetely no periodical synching at all. I cant even understand why this is not offered by SAP per standard!
    Drawback is that it will of course only work for the menu items, and only menu items with an "URL-type" are supported. I'm prettry sure however that it would be possible to implement a few other types as well.
    Let me know if you are interested in the solution, I can give you a few additional details: oliverDOTsvisztATwienerbergerDOTcom
    Oliver

  • Assigned User Role Mirgation from EP 6.0 SP2 to SAP NW2004s (EP 7.00 SP7)

    Our users are stored in LDAP and their role assignment is driven by the roles assigned to the groups. For example...
          Manager Group : MSS and other role assigned
          Employee Group : ESS and other role assigned
    but some users are assigned additional roles not driven through groups, for example, some manager may have business specific reporting role assigned to them. In this case, the assigned role did not move to EP 7.0 because the role assignment information is stored in the portal database (Oracle)  for EP 6.0 SP2 and the new EP 7.0 portal database (Oracle) does not have that information since we did not use migration tools for the upgrade.
    Is there any way I can extract the roll assignment information from EP 6.0 SP2 and upload them to EP 7.0 database since both environments have identical roles and we are using the same LDAP for both environments ??

    Our users are stored in LDAP and their role assignment is driven by the roles assigned to the groups. For example...
          Manager Group : MSS and other role assigned
          Employee Group : ESS and other role assigned
    but some users are assigned additional roles not driven through groups, for example, some manager may have business specific reporting role assigned to them. In this case, the assigned role did not move to EP 7.0 because the role assignment information is stored in the portal database (Oracle)  for EP 6.0 SP2 and the new EP 7.0 portal database (Oracle) does not have that information since we did not use migration tools for the upgrade.
    Is there any way I can extract the roll assignment information from EP 6.0 SP2 and upload them to EP 7.0 database since both environments have identical roles and we are using the same LDAP for both environments ??

Maybe you are looking for