Assigning Attributes to Roles

Hi SDNers,
I need to assign Attributes (related to Finance, warehousing, etc..) to Roles which are related to these domain. I have observed that only fields can be assigned to Roles.
Can you please help me in this regard?
Points will be awarded.
Regards,
Gautam

Gautum,
Please also refer to this thread which appears to be on the same topic.
Attributes authorization
Regards,
Tim

Similar Messages

Assign Access Manager roles to end users?

Hello,
I am looking for information on how to assign an AM role to an end-user that is provisioned from IDM 7 to AM 7.1 using the AM resource adapter.
We are modeling our IDM to AM provisioning based on this BigAdmin guide:
http://www.sun.com/bigadmin/features/articles/id_access_integration.pdf
However, in that document, it appears that the end user role is manually assigned to the user after provisioning to AM. We wish to do this role assignment in IDM, and have IDM push the assignment to AM (and by extension, the LDAP directory).
Is this possible when using the AM resource adapter?
Regards,
Dillon

Certainly.
My role definitions look like this in the RoleAttributes section (you can configure this through the GUI in Roles > [rolename] > Set Attribute Values)
<RoleAttribute name='RoleName:#ID#SunAccessManagerResource:roleMemberships'>
<AttributeName>roleMemberships</AttributeName>
<AttributeValueString>
<List>
<String>AMRoleName</String>
</List>
</AttributeValueString>
<Requirement>Authoritative merge with value, clear existing</Requirement>
<ResourceRef>
<ObjectRef type='Resource' id='#ID#SunAccessManagerResource' name='SunAccessManagerRealm'/>
</ResourceRef>
</RoleAttribute>
What this will do is set the nsRoleDN attribute (renamed as 'roleMemberships' by the adapter) in the assigned resource account for the user; the requirement field I've set to auth-merge-with-value, but you may want to play about with other settings.

Assigning iViews to Roles without Pages

I have created several "SAP Transaction" iViews that rely on HTML GUI and would like to add these to my Portal. When I assign them to a page, and then add that page to a role, the iView height does not display automatically. The iView is only about 80 pixels high.
I have also tried assigning the iView directly to the role, and in this case it displays correctly.
Is there any purpose to using "Portal Pages" if an iView is the only content being displayed for that Top Level or Second Level navigation choice?
Are there any problems with assigning iViews directly to roles?
Thanks for any answers you provide.
Best regards,
Bryan

Bryan
You are correct, this concept didn't exist in EP5. In EP6 a Page and an iView are basically the same object, which is why it doesn't matter which one you assign to a role. The other thing is that if you do use a page, then the pagebuilder tends to include a lot more resources into the output, which increases the size (and potentially time) of the page downloaded to the client. If you only have transactional iviews, then I would forget about the page. If you decided to try and use the pages, then the things that can cause this problem are: -
1) Domain of the iView is different to the domain of the portal and when the portal tries to re-size the page it can't access the size of the content and therefore can't resize it
2) I would check things like the maximum and minimum page size attributes on the page. They may have default values in an iView but not a page
I hope this helps
D

Error while Assigning database level role (db_datareader) to SQL login (Domain Account)

Team,
I got an error while creating a User for Domain Account. Below is the screen shot of the error (error : 15401)
Database instance is on SQL 2000 SP3. ( I know it is out of support, But the customer is relutanct to upgrade)
On Google search, i found below article which is best matching for this error
http://support.microsoft.com/kb/324321
I have follows each step of troubleshooting. But still the issue persists.
Step 1. The login does not exist == The login is very much exist in the domain as i am able to add the same domain id to other database instances
Step 2. Duplicate security identifiers == i have used this query to find duplicate SID
/* SELECT name FROM syslogins WHERE sid = SUSER_SID ('YourDomain\YourLogin') */
But there was only one row returned with create date of today's.
Error while Assigning database level role (db_datareader) to SQL login (Domain Account)
Step 3. Authentication failure == Domain is available. User is able to login on other servers via RDP connection.
Step 4. Case sensitivity == Database collation is set to Case insensitivity. (CI)
Other two 5. Local Accounts & 6. Name resolution == is not applicable to me.
I tried other ways also.
A. Creating login and providing permission in one go only = User account is not created
B. Instead of GUI, use query to create login and provide required permission = Same error.
Does anybody has faced any such situation
Chetan

See the below output
srvid
sid
xstatus
xdate1
xdate2
name
password
dbid
language
isrpcinmap
ishqoutmap
selfoutmap
NULL
0x010500000000000515000000A1F66E1BFC1DC75D26E72530A2B80400
14
20:25.9
57:33.4
UKBAA\LHRAPPMuttavarapuS
NULL
1
us_english
0
0
0
Chetan

Need procedure for creation of BW Roles, Assigning Queries,Publishing Roles

Hi Experts,
Could you please let me know the procedure for creation of BW Roles, Assigning Queries,Publishing Roles in Business Explorer (BEx - BW 3.5)
Thanks in advance,
Andy

Hi,
Creating BW Roles
http://help.sap.com/saphelp_nw04/helpdata/en/52/6714b6439b11d1896f0000e8322d00/frameset.htm
Assigning Queries
After creating the query, save the query to a role from the query designer.
Publishing Roles in Business Explorer
https://websmp101.sap-ag.de/~sapdownload/011000358700002894802003E/HowToBIPortal1.pdf
Hope this helps you..!
-Pradnya

ERROR MESSAGE AMT : CANNOT DELETE TOKEN AFTER IT WAS ASSIGNED TO A ROLE

We are working on the setup in our sandbox environment and we have noticed that we are unable to delete tokens and remove the protection on BO's.
the following message appears : "CANNOT DELETE TOKEN AFTER IT WAS ASSIGNED TO A ROLE"
There is no Token assigned to any role anymore and we have also removed all rules and so on, Still it remains impossioble to remove the token on a protected BO or to remove the protection of a BO.
Thanks for your help

Hi Wim,
Ive replied to your support message, requesting a remote connection so I can
investigate further.
Regards,
Gervase

Error while assigning the fallowing role to the user

Hi,
ERROR 2007-01-18 14:13:25
CJS-30196 Role SAP_BC_JSF_COMMUNICATION_RO is not assigned to user SAPJSF
i am getting the fallowing error while trying to assigning the fallowing role to the user any body through some light in to it.
Thanks
kiran.B

Hi,
Standard roles are not assigned to users directly.Make sure that copy the role from standard roles then change naming convention like your company specification.
Ex: standard role : SAP_BC_JSF_COMMUNICATION_RO
Step:1: go to t-code: PFCG and give the role name in role tab SAP_BC_JSF_COMMUNICATION_RO
Step:2: press copy button and change the naming convention.
Step:3: Assign to the user.
I hope it will help you.
kiran kumar.v

Getting dump while assigning resource to role

Hi,
We are using BAPI_BUS2177_STAFFING_ADD to assign resource to role.
It is assigning first resource to first role in first project. And giving dump for next resource to role assignment for the same project.
Short dump description is like as follows:
The exception 'CX_DPR_FATAL_ERROR' was raised, but it was not caught anywhere
along
the call hierarchy.
Since exceptions represent error situations and this error was not
adequately responded to, the running ABAP program
'CL_DPR_AUTHORIZATION_SERVICES=CP' has to be
terminated.
The problem is of "COMMIT". I ma not understanding where to write exact commit. Even if we are commiting at project level it is giving dump.
Could you please give any suggestion on it.
Thanks & Regards,
Anil Salekar

Hello Kaixiang,
When you add staffing to project then commit after each resource assignment. That will avoid the dump.
Use:
CALL FUNCTION 'BAPI_CPROJECTS_COMMIT_WORK'
TABLES
return = it_return.
Note: Re award if useful
Thanks,
Appasaheb..

Unable to assign all security roles to a user with a new custom security role

Dear All,
Happy New Year.!
I have a query regarding the assignment of Security Roles to new users in CRM. Normally we assign the security roles to new users via an Admin user who has 'System Administrator' security role assigned to him/her. This works perfectly fine, and we can assign
any desired security role to the new user.
However, in our case, we need to delegate the user creation rights to some of the client partners. We do not want to give them access to all the Administration functions; hence we created a new Security Role, lets say 'Support User Role'. We have provided
'Create', 'Append', 'Append To', and 'Assign' rights on 'User' entity for this new security role. With this security role, we are able to create new users now, but we are only able to assign 'Agent' security role, not any other security roles.
For example, if user 'x' has Security Role defined as 'Support User Role'. If 'x' tries to add a new user 'y', then 'x' is only able to assign 'Agent' security role to 'y', but not any other security role. As per business requirement, 'x' should be able
to assign some other security roles, including 'Support User Role', to new user 'y'.
I believe that there is something missing in Security Role configuration, which is causing the above problem. We compared both 'Support User Role' and 'System Administrator' security roles, but not able to figure out which minimum rights we can provide to
'Support User Role' so that users with this security role can only add new users (with any security role), and that they are not having access on any other Administration features as well.
Appreciate any help that you can provide on the above issue.
Thanks in anticipation.

Hi,
Can you check if you have organization level Read access for Securitity Role and Organization level Assign access for Security role.
Refer:-
http://www.magnetismsolutions.com/blog/paulnieuwelaar/2013/04/22/permissions-required-to-manage-roles-in-dynamics-crm-2011
Hope this helps!!!
Thanks,
Prasad
Make sure to "Vote as Helpful" and "Mark As Answer",if you get answer of your question

Portal: Tab displayed but not assigned to any roles of user

HI Experts,
I have a problem need your great help.
When I logon portal as a specific user, there are 5 tab in home page. When I check the role list, 3 tabs doesn't assigned to any roles this user owned.
Then I try to copy current user into a new user, and logon in . There are only 2 tabs left, which belonged to assigned role.
How those 3 tab assigned into this user? Can we assign iView/Page/Workset directly to user without role?
Any suggestion appreciate. Thanks so much!
Edited by: Jalyn Liang on Nov 13, 2009 9:29 AM
Edited by: Jalyn Liang on Nov 13, 2009 9:30 AM

Jalyn Liang ,
You can find if the user id belong to a particular group with the following ways,
Log in as an admin and go to User Admin -> Users- > Seach -> Enter the user Id and serach for the user -> Select the 5th icon with the tool tip ->Assigned Groups"
or
User Admin -> Group -> Search for the group.
or
You can use UME API to find out whether the is belowng to a group though coding.
Ram

How to create new user and How can i assign end user roles

Hi,
I am new to SAP, please explain how to create end users and their roles
Thanks
ravi

Hi,
Roles are decided by IT managers. Suppose if Persons who are working in shopfloor or production side
give authorization to Production order create , change and Confirm like that etc
1. In role maintenance (transaction PFCG), choose the Authorizations tab page.
2. To change the authorization data for the transactions assigned to the role, choose Change Authorization Data or Expert Mode for Profile Generation. Otherwise, a dialog box appears in expert mode (see Regenerating an Authorization Profile After Changes).
Please take telp from Basis person also refer this link,
http://help.sap.com/saphelp_46c/helpdata/EN/52/6714a9439b11d1896f0000e8322d00/frameset.htm
Thanks

ERROR: "You are not assigned to a role" in BEx

Hi,
I have a user BEXUSER. In PFCG, I have assigned this user to a role ZR_USER_ROLE.
However, when I tried to open a query in BEx Anlyzer through Open > Workbooks > Roles toolbar, I could not find any workbooks assigned to this user.
Next, I tried to open a query using Open > Queries toolbar, I chose a query and tried to click Enter in Role icon. However, I am prompted with a message saying "You are not assigned to a role".
How is this possible when I have already assigned this user to a role. I have checked PFCG and confirmed that the particular role contains this user. Can someone explain about this?
Thanks

I am getting this exact same error, and the values that I have set in my query developer's job role are the following :
S_USER_AGR
ACTIVITY = 01, 02, 06, 22
ROLE NAME = {list of roles that the user should be able to save queries to}
S_USER_TCD
TRANSACTION CODE = RRMX
The user still receives the "you are not assigned to a role" error message when pressing the "save to role" button for a workbook.
In the ST01 authorizations trace, I see that the user is FAILING the authorization check for S_USER_AGR, but is failing the check for role names that he / she not supposed to modify.
So those failures are good, but they seem to prevent from saving the workbook to any role ...
How can it be setup so that the user can save workbooks to roles that were inteded to be saved to, without getting the "your are not assigned to a role" error when trying ?

Dignostic Error-Failed to assign UME support Roles : Server returned: 503

Hi All,
We are trying to implement diagnostics on one of our EPortal Server. We have already completed all the pre-requisites of diagnostics on EP .
When we try for diagnostics System >Managed System> it gives us following error
User existence check failed : Server returned: 503 Service Unavailable
The following J2EE roles were granted to user SAPSUPPORT : SAP-J2EE-Engine/SAP_JAVA_SUPPORT
Failed to get User ID for user with logonname SAPSUPPORT
!! Exception : Server returned: 503 Service Unavailable
Failed to assign UME support Roles : Server returned: 503 Service Unavailable
Failed to assign UME support Roles for XI : Server returned: 503 Service Unavailable
We have checked UME Page on Eportal , where the error is
Application cannot be started.
Details: com.sap.engine.services.deploy.container.ExceptionInfo: JMS error.
Please suggest.
Regards,
Swati

Hi,
Please try to re-start the JAVA instance and then try again.
Regards,
Thulasi

How to assign attribute values to a range of BPs ????

Hi All,
     While assigning attribute values to business partners we can specify at the most one business partner at a time.
My requirement is to assign attribute values to a range of business partners at a time.
Is there any customization setting where I can do this OR
do I write a report for this ?
Regards,
Ashish

Hi Ravi,
      Thanks for replying !!!!
But, CRMD_MKT_TOOLS doesnt seem to solve my problem.
I have a range of BPs (e.g 8000101 to 8000199).
And I have a list of attribute sets with values as follows:-
Attribute Set            Values
Age group                1 - 10, 11 - 20, ....
Reading habits          Business, sports, news.....
Profession                Doctor , Engineer .......
and so on..
Now in transaction CRMD_PROF_BP, I can choose a single BP (e.g. 8000101) and assign it an attribute set(e.g. Profession) and value (Doctor).
But, my requirement is to specify an entire range of BPs(8000101 to 8000150) and assign attribute set and values to that entire range.
Now how do I achieve this ???????
(target groups would be created only after attributes have been assigned)
Regards,
Ashish

Assign some Business roles in the CRm 7.0 i n the UI frame work.

Hi,
I need to assign some Business roles in the CRm 7.0 in the UI frame work.
& how we need to assign the org to the business roles.
Please provide any doc or any link is more appreciable.
Thanks & Regards
Prajith P

Hi,
When in the Org Structure, DOUBLE CLICK on the position so that it opens up the details screen.
From the menu options, Select Goto>>Detail Object>>Enhanced Object Description>>Under the Info Type, Scroll down to business role, select and click on change mode. The business role assigned to that position will be displayed. Here you can assign the required role, save and go back to the org strucutre. Save again. It should be done.
Regards
Varun Taneja

Assigning Attributes to Roles

Similar Messages

Maybe you are looking for