Assigning Portal Roles

Hi All,
We have installed EP 7.0. The problem we are facing is : The "Portal Content" folder is not displayed under the "Browse Category" of content administration & system administration.
Why is it so? Do we need to add some other portal Roles to the user? If so.., which role we should add?
Also we are trying to add the portal role ID
" com.sap.pct.pdk.JavaDeveloper". But when we search for this role , we could not found this role. Whether the role has been renamed?
Kindly provide your suggestion on the above queries.
Regards,
Eben.

Hi,
Re: How to create and assign role
Portal:How to assign a Folder to a Role in Protal
I hope the above links will help you,
Regards,
Harish

Similar Messages

Assign Portal Roles from R/3

Hi all,
We've here an EP6 SP14 SR1 with R/3 as data source, this R/3 is used to ESS and MSS implementation on portal. The users are created at R/3 using SU01 and then Logon portal with this same user. But we've to assign portal roles with portal administrator to have access to menus in portal. There's a way to, when create user in backend we can assign automatically portal roles to the user ?
We do not have CUA neither LDAP.
Thanks a lot for help.
Best Regards,
Pedro Rodrigues.

Jörg,
Thanks a lot, that's very helpfull, now I can see the roles in portal groups. But, we need to use dataSourceConfiguration_r3_rw.xml because when user have to change his own password first time they enter in portal.
How could we got this authorization ?
Could we assign to pfcg roles that we pretend to use this authorization ?? What authorization is it ??
Thanks,
Best Regards,
Pedro Rodrigues.

Ordering of assigned Portal Roles

Hi All,
I have some roles which I am assigning to users in different combinations. I have to set one page under one role as the default page coming for each user when the portal is opened. How can I fix this ordering? Suppose I have RoleA, RoleB and RoleC. How can I specify that PageB1 or RoleB should be the default page of the portal? I am not seeing any move updown key when the roles are assigned to the users. Whats the way out? please suggest.
Thanks in advance.
Shubhadip

hi,
Check this
http://help.sap.com/saphelp_nw04/helpdata/en/92/3e703e632c7937e10000000a114084/frameset.htm
n do not forget the reward points if it helps
Cheers!!
Message was edited by: rao_2005
Message was edited by: rao_2005

Assign biz role through CRM -SU01 and display page at portal

HI, SDN Fellows.
I am creating some custom portal roles at portal and mapped it to the custom business roles for some PCUI screens at crmc_blueprint_c --> "Assign Portal Role to Single Role" ("Assignment of CRM Role to Portal Role").
Currently, our portal UME data source is mapped to CRM system.
Right now, I have to assign both the CRM Role through SU01(to have access the CRM Object Method at CRM-PCUI application) and Portal Role through User Admin of WAS/portal (to access/display the PCUI iView in the portal).
My goal is to just assign role through CRM-SU01 and achieve the same output as I described above. Meaning can I just do the role assignment for the CRM role (through SU01) and able to access to the CRM-PCUI application through portal (able to see the pcui screen)?
Thanks,
Kent

What I want is when I assign a role (Sales Manager) said user A in CRM system, userA should able to see the related workset/page/iviews in the portal (without the need to assign the same: Sales Manager role in portal).
Now, what I have to do is assign the related objects into a single/composite roles in CRM (for backend data access), then I have to assign a portal role (through User Admin of Portal, so that they can see the portal content),
is that a way we can do it in one step?
Thanks,
Kent

J2EE roles vs Portal roles vs ABAP roles

(I also posted this on portal implementation, but i hope i receive more reactions here )
Dear all,
I have a question about the information on the following link:
http://help.sap.com/saphelp_nw2004s/helpdata/en/4c/6c0f40763f1e07e10000000a1550b0/content.htm
It says the following:
"These functions are intended to assign users and their assigned portal roles a corresponding role in the SAP System. This corresponding role (authorization role) contains the authorizations needed to execute certain functions from the portal."
1. These "...certain functions..." they talk about, can someome give an example of these functions?
2. Is it possible for example to create a role in the portal that gives a user authorisation for starting transaction SE80 in the backend system? Without making the role in the backend first and uploading it to the portal.
3. It's also possible to upload ABAP roles to the portal. Is the main reason for this that users can see their SAP menu (or part of it) in the portal? Or does this have other advantages too?
4. I'm very confused about the relation between J2EE roles, portal roles and ABAP roles. Is it possible to manage the roles for a user in one place, without having to do certain actions in the portal AND the backend system?
From what I've read on help.sap.com, you always need to do certain actions in both places.
A possible approach is the following (from what i know): Creation of roles in the R/3 system, without assigning to users. From a webdynpro application, a user can then be created and roles can be assigned: portal roles (via some API) and R/3 roles (via BAPIs).
I hope someone can give a bit information on this issue. I've done alot of reading on help.sap.com, but it's still an abstract issue for me.
Kind regards,
Joren

Hi Jorem
Re: point 3. I don't build portal roles through this mechanism as I don't believe in replicating the SAP easy access menu inside the portal. If there are some specific functions (transactions) that I want to run inside the portal, then I might use this mechanism to build the iViews once. I would rather start an iView that runs transaction SMEN and let the user see their regular easy access menu.
Please note that the speed of executing transactions in the portal isn't a function of the portal, but the fact that you are using ITS, for example, to web enable the transaction...
Re: point 4. Groups are a UME concept. They have nothign to do with ABAP groups. They can be created directly in UME through user administration functions, or they can be created in the LDAP and then they are visible in the portal. If the UME points to an ABAP system, then the ABAP roles are autoamtcially visible as UME groups. Groups created in the UME need to have the members assigned through user admin functions of the Java engine. Groups stored in LDAP are maintained using LDAP admin tools. There are upload utilities that allow you to maintain LDAP users and groups through text files. Google LDIF for more details.
Roles on the portal need to be built in the portal contetn directory. As Michael mentioned, this can be automated by the use of the role upload function built into the portal.

Customizing availability of Portal Roles/TABs (ESS)

Hello Portal Knowledgeable ones,
I am running EP 6.0 SP13.
We will be implementing many of the Standard HR ESS functions. We desire to purposefully limit the hours of the day when these capabilities are available to users--EVEN THOUGH THE PORTAL IS UP. As an example, viewing paystubs is available 24x7, whereas other update-type ESS functions (update absences) will not be available from 1am to 5am each day. We want to limit this access because our payroll processing occurs during this window, and we do not want updates to occur during it.
Here is my question:
For the standard ESS web dynpro portal functions, how do we implement a time-of-day switch such that access to certain iViews is prohibited.
The end user experience needs to be as follows:
If time is between 1am - 5am and user clicks on updating ESS item in the portal, the system displays an alternative iView indicating that the system is down for maintenance.
General advice would be welcome as well. It seems that the portal displays tabs/content solely based on your pre-assigned roles. How do you turn-off assigned portal roles dynamically?
Thank you for any insights!
Kevin

Found a solution. All users are assigned to groups. Groups are then linked to roles. To change content for user, update the group to role link using UMFactory inside a portal application.

Portal Roles (ABAP & JAVA)

Hi,
We are planning to go for a portal implementation for our BW reports..
I had a few questions with regards to the roles (BW & Portal) or (ABAP & JAVA)
Question 1:
I want a single place (BW) where I can assign all the roles (BI & Portal) to users, so when ever a user account has to be createu2026the support team will create it BW System and assign all the relevant roles in BI system
If YESu2026then how can I move the Navigational Role in portal (Role in which we publish iviews) that I created in portal to BW.
And also
How can I create a JAVA role in BW so that that role can be assigned to user and his portal options will be updated..
Thanks

Hi
Thanks for all the updates.
Few questions
How can i know Which user repository is my portal system connected to ? (LDAP or ABAP datasource)
and
If you have configured your BW system as the ume datasource for your portal - then your backend roles in BW will show up in portal as Groups. You may choose to assign your portal roles to these groups.
In BW if i assigned a Composite role to a user ...will it show as a group in portal and
As my requirment is to single place to create user either in portal or BW....if BW user roles are avaliable in portal as groups...
Can i insted of create a user account in BW and come to portal and assign portal roles to the user or user group to get portal previliges
Can i create user account in portal and assing the user to the corresponding groups in portal....will this action will create a user account in BW as well
Thanks

Portal Roles Intial load and Provisioning through IDM UI

Dear All,
I am trying to assign portal roles to Users in IDM 7.1 SP5.
For this two activities needs to be performed:
1) Portal roles Initial load in IDM Identity store
2) Provisioning of Portal roles to Users through IDM UI
Please suggest about the configuration guide or steps required for both points mentioned above.
Thanks
Honey

Dear Christoph,
Thanks for the reply.
Now I am able to assign Role / Privileges to Users from IDM to UME.
Require one clarification on User / Identity creation:
Where can I can set initial password for all the new user created from IDM UI ?
I am able to create new User and assign roles as well from IDM UI and all is available in EP UME also.
But when I am logging in with new user it is not taking the default password mentioned in Global Constant in IS.
Do I need to mention the password somewhere else.
Pls suggest.
Thanks
Honey
Edited by: Honey Gyanani on Oct 6, 2010 9:10 AM

Error while assigning portal custom role

Hi All,
We have a custom role which we use to assign to the users. till now we are able to assign it without any problem. But now as i need to assign it to someone, i got an error stating that "An error occured while adding user assignments; to see the correct status, perform a new assigned user search".
Can anybody help us in finding out the reason of the error and in rectifying the error.
Thanks & Regards,
Ravi

Hi Raghu,
Thanks for your reply..
This role is existing in the PCD, and this error is coming, while assinging this role any users... it is working fine with the existing users, who are having this role before. This is happening only when we are assigning this role to some new user.
I dont think this has some relation with the backend, as the role assignment is part of the Portal itself.
And also here we dont have seperate UME, and we are using r3 users only with single sign on.....
Hi Jithendar,
Thanks fo your reply.....I will do that backend roles check also for those users and see whether any backend role variations happened for these users.
Thanks & Regards,
Ravi

No portal roles are assigned for this user.If this problem persists, contac

I am trying to access portal first time using j2ee_admin user. It is saying "No portal roles are assigned for this user.If this problem persists, contact your system administrator."
iam using abap+java enginee how config in abap enginne ,iwant which role to assign j2ee_admin user
i already asiigned sap_j2ee_admin,SAP_BC_JSF_COMMUNICATION,SAP_BC_JSF_COMMUNICATION_RO but it show same problem
please help me..
Edited by: Mugala Balu on Aug 7, 2010 5:53 PM
Edited by: Mugala Balu on Aug 8, 2010 7:48 AM

Balu,
Well this issue has been discussed many a times in forums. You would have to point your data source to ABAP system.
Check this thread in [here|J2EE Failed to start , after changing UME datasource;.
Good Luck!
Sandeep Tudumu

Portal Runtime error in assigning a role to a user by UME

Hi ALL,
I am assigning a role to a user through UME using this piece of code:
String uids = userFactory.getUserByUniqueName("Shilpa").getUniqueID();
String roleid = roleFact.getRoleByUniqueName("pcd:portal_content/administrator/content_admin/content_admin_role").getUniqueID();
roleFact.addUserToRole(uids,roleid);
The userid and role is beinf fetched successfully but at the assignment of the role to the user , I am gettign Portal runtime error.
The error log is following.
 java.lang.NoClassDefFoundError: com/sap/abc/network/util/InfEPLog
 at UserListeners.userAssigned(UserListeners.java:27)
 at com.sap.security.core.imp.RoleFactory.assignUserPerformed(RoleFactory.java:1466)
 at com.sap.security.core.persistence.imp.DistributedTransaction.doCacheUpdateAndNotificationForMembers(DistributedTransaction.java:565)
 at com.sap.security.core.persistence.imp.DistributedTransaction.doCacheUpdateAndNotificationForMembers(DistributedTransaction.java:815)
 at com.sap.security.core.persistence.imp.DistributedTransaction.doCacheUpdateAndNotification(DistributedTransaction.java:465)
 at com.sap.security.core.persistence.imp.DistributedTransaction.afterCompletion(DistributedTransaction.java:252)
 at com.sap.engine.services.ts.jta.impl.TransactionImpl.commit(TransactionImpl.java:414)
 at com.sap.engine.services.ts.jta.impl.TransactionManagerImpl.commit(TransactionManagerImpl.java:316)
 at com.sap.engine.services.ts.transaction.TxManager.commitLevel(TxManager.java:581)
 at com.sap.engine.services.ts.transaction.TxManagerImpl.commitLevel(TxManagerImpl.java:63)
 at com.sap.transaction.TxManager.commitLevel(TxManager.java:237)
 at com.sap.security.core.persistence.imp.DistributedTransaction.commit(DistributedTransaction.java:2742)
 at com.sap.security.core.imp.Role.commit(Role.java:337)
 at com.sap.security.core.imp.RoleFactory.addUserToRole(RoleFactory.java:1338)
 at com.sap.user.UserAdded.doContent(UserAdded.java:63)
 at com.sapportals.portal.prt.component.AbstractPortalComponent.doPreview(AbstractPortalComponent.java:240)
 at com.sapportals.portal.prt.component.AbstractPortalComponent.serviceDeprecated(AbstractPortalComponent.java:168)
 at com.sapportals.portal.prt.component.AbstractPortalComponent.service(AbstractPortalComponent.java:114)
 at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)
 at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)
 at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)
 at com.sapportals.portal.prt.component.PortalComponentResponse.include(PortalComponentResponse.java:215)
 at com.sapportals.portal.prt.pom.PortalNode.service(PortalNode.java:645)
 at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)
 at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)
 at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)
 at com.sapportals.portal.prt.core.PortalRequestManager.runRequestCycle(PortalRequestManager.java:753)
 at com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:240)
 at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:524)
 at java.security.AccessController.doPrivileged(Native Method)
 at com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:407)
 at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
 at com.sap.engine.services.servlets_jsp.server.servlet.InvokerServlet.service(InvokerServlet.java:156)
 at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
 at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
 at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
 at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
 at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
 at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
 at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
 at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
 at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
 at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
 at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
 at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
 at java.security.AccessController.doPrivileged(Native Method)
 at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
 at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
Please tell me where I am wrong.
Regards,
Shilpa.

Hi Shilpa,
The error "java.lang.NoClassDefFoundError" means that your classpath is not set correctly. This is likely due to a missing reference. The class file may be in the jar, but at runtime the component (your component) needs to have access to the jar file which contains the class.
Try adding the servlet.jar, activation.jar file in your project and also through your ADd external libraries at 'java build path'. also please ensure tht WAS and NWDS at the same SP level.
Hope this might help you.
Regards,
Shaila

Error while trying to assign a role via CUP in Portal

Hello Experts,
I am trying to create a request to assign a role in EP via CUP ( 5.3)
EP Connector is working fine as I have imported Portal roles etc
SPML service is working fine
I have done the mapping in the Provisioning tab for Portal system
logonname in portal is email address of an employee
So the I have done the following mapping
AC Field Application field
email addres-Stndard logonname
And I have the following error while trying to create a request which I grabbed form the log
ERROR Exception during EJB call, Ignoring and trying Webservice Call
LinkageError: loader constraints violated when linking com/virsa/cc/xsys/webservices/dto/WSRAInputParamDTO class
ERROR com.virsa.ae.core.BOException: Exception from the service : Invalid System
com.virsa.ae.core.BOException: Exception from the service : Invalid System
ERROR : BO Exception in Save request
Any suggestions would be really appreciated
Regards
Kev

Kevin,
I was able to replicate your issue and there is a setting in the CUP that you have to disable, Goto the config tab in the CUP and select NO for the "Risk Analysis On Request Submission " under risk analysis.
Issue here is you did not create a connector for your EP in the RAR, I believe you have the above mentioned parameter to yes and so when you are submitting a request CUP is trying to do the risk analysis but RAR was not able to find any System, so it is thowing an error.
You can resolve this issue in two ways, one is to create a connector in RAR or the other is to disable the setting in the CUP.
Hope this helps.
Naveen

Automating Portal Role Assignment

Hi Everyone,
At my project we are looking to automate the process of Portal Role assignment.
With our current design, a user initially logs into the ISA and ICSS Portal as an anonymous Portal user. To view all content the user will be required to register himself on the portal. Once the user registers himself, a user record is created on the backend CRM system. Now when he tries to log into the portal with his new username and password he gets a blank screen because he has no Portal Roles assigned to him.
We need need to create Portal Roles for each CRM user. The new Portal Role will be based on user type in the CRM system. Since we have several users logging in and creating new accounts, we need to automate this process of mapping a CRM user to an appropriate Portal Role and then actually creating the Portal Role on the Portal.
Has some one does this before or has an idea how to do this?
Any help will be really appreciated...
Thanks!
Muhammad Osman Yousuf

Hi Michael,
Thanks for the help so far. Do you think the following mappings would work with the solution you recommended?
On the CRM side we have CRM_ROLE_A, CRM_ROLE_B, and CRM_ROLE_C and on the Portal sider we have PORTAL_ROLE_A and PORTAL_ROLE_B.
All mappings given are possible...
CRM_ROLE_A = PORTAL_ROLE_A
CRM_ROLE_B = PORTAL_ROLE_A and PORTAL_ROLE_B
CRM_ROLE_C = PORTAL_ROLE_B
Thanks!
Muhammad Osman Yousuf

Assign remote roles with Federated portals

Hello all,
We're trying to implement a federated Portal network using the "Implementing a Federated Portal Network" in Detail document.
The steps that we have follow successfully are:
1. Connect to the user repository (Producer and Consumer).
2. Configure system settings (Producer and Consumer).
3. Define and Configure producers (consumer).
4. Set permisions (producer).
Now we want to assign remote roles to local users in User Administration -> Proxy-to-remote Roles option. But Proxy-to-remote Roles tab doesn't appear in the second level navigation...
We are working with EP7 SP10.
Any idea?
Thanks in advance

Maybe a clue: According to the Remote Role assigment question, We have a similar problem using the Remote content copy option.
In the consumer EP, Content Administration -> Portal Content, the Netweaver Content Producers contains the producer connection icon but it's empty. So, the content share can't be done...
Now... Any idea?
Thanks!
Message was edited by:
Marta Sánchez

Modify the default "No portal roles are assigned..." message iView

Hi,
When a user with no roles assigned is trying to access the EP6 SP9 portal, he/she is facing a warning message:
"No portal roles are assigned for this user.If this problem persists, contact your system administrator."
accompanied by a 'log off' link.
Is it somehow possible to change the look and feel and/or behaviour of this message?
For instance, we would like the message appearance to be more 'friendly' and with a link where they can find further assistance, etc.
With best regards,
Robin

The window for logoff is part of the masterhead. So i think you can modify the masterhead pasr file for that.
Its location is at...
usr/sap/<instance>/JC00/J2EE/cluster/server0/apps/sap.com/irj/servlet_jsp/root/web-inf/deployment/pcd.
In this folder you can find the com.sap.portal.masterhead.par.bak
this file can be imported to your developer studio and can be editted and uploaded.
hope this helps
Cheers
gEorgE

Assigning Portal Roles

Similar Messages

Maybe you are looking for