Calling BW roles to EP

Hi,
Can any one let me know the step by step procedure for importing BW roles into my Portal. I went through help.sap.com but could not accompolish much.
Thanking You In Advance,
Hema

Hi Hema,
See if this thread proves to be of any help:
roles uploading into portal
Also see:
BW Role Upload
[Upload of Roles from ABAP-Based Systems - help.sap.com|http://help.sap.com/saphelp_nw04s/helpdata/en/41/5e4d40ecf00272e10000000a155106/frameset.htm]
[Integration Using Role Upload - help.sap.com|http://help.sap.com/saphelp_nw04s/helpdata/en/9d/8c174082fe1961e10000000a155106/frameset.htm]
Bye
Ankur

Similar Messages

Asynchr Calls: Partner Role and My Role must be filled in Partner Link dial

Asynchr Calls: Partner Role and My Role must be filled in Partner Link dialog ?
Is the statement true?
Can I leave for synchronous calls one of the role spec vacant?
AFAIK only in asynchronous calls both drop down values must be specified.
Peter

Thanks for fast reply,
Yes, I defined Partner Role and My Role,and also defined a port type for calling back the request.
I just don't know what's the endpoint address which my asynch web service should use to response to my BPEL process.
Is there anyway to find out what's the endpoint address which the BPEL processes receive the callback response from asynchronous services?
Can I get the address which BPEL engine uses to get the responsse from a called web service?
I guess it should be an obvious work but I'm really disappointed with that.

Need to call SET ROLE for Oracle before running report

Hi all,
does anyone know how I can call SET ROLE for Oracle with Crystal Reports, before running report? I'm using Crystal Reports 2008 to design report (with Server Oracle connection) and Java Reporting Component to run report within a J2EE apllication. If anyone has any idea, I'd greatly appreciate as I'm in trouble.
Thanks a lot.

Just a thought...
If your report's datasource was an Oracle stored procedure, you could call a function to set the role from that SP
You would be in the same Oracle session from Report --> SP --> Function, so the role would be retained

How to send a Announcements in CRM WebUI for Call center role.

Hi
In some cases if we are shutdowing the prodcution server we want to send a group message to all the users in call center.
How to do this.
Please suggest.
Regards
Hanu M

Hi,
in the IC_Webclient and in the CMS-Role you could use broadcast messaging for this.
your message is displayed on the bottom of the screen as ticker.
Add in SAPGUI a new favorite
BSP-Application: BSP_BROADCAST
Start-Page: abap_broadcast.htm
Kind regards
Manfred

How to create context sensitive help and call the role based help from my Java Project?

Hello All,
I am new to Robo Help. I have created a Robo help for my Java Web Applicaion. My application is role base i.e some user's will not see some of the pages of the application. So I want to hide those pages in Robo help as well. I tried creating multiple TOC for different Roles.
My Question is
How to call robo Help from my application?(I will be calling using java script. If it is with RoboHelp_CSH.js where can I get that and How to implement it in my project)
How to implement role based help?
Thanks,
Siva.

I answered that. My point in asking whether it matters was that if it does, then you cannot use content categories and point different users to different categories and not allow them to see the others.
The alternative, as I said, would be to produce different outputs for each role.
As it does matter, then using webhelp you will have to use your RoboHelp project to produce a number of outputs, one for each category. Your app would install each webhelp into different folders and when your app determines the user role, you will link to the appropriate help.
There is another thread running where it has been explained by Willam van Weelden that you can achieve what you want using browser based AIR help. If that form of help can be considered, then the thread is at http://forums.adobe.com/message/4914753?tstart=0#4914753
Browser based AIR help must be run from a web server. It cannot be installed locally.
See www.grainge.org for RoboHelp and Authoring tips
@petergrainge

SPRO - What Transactions Does it Call? - Role Building

I am currently wanting to build a Role which has display only capabilities for SPRO and its sub/callable transactions, is there a way of getting a list of all transaction/programs that are called from SPRO?
This is so that i can construct a Display only Role with all these transactions and SPRO consolidated into the same Role.
Thanks in advance for any assistance.
Regards
Ash

Goto SU21, here you can search for the authorizations based on transaction code. Here select 'Tcode assignment'. Type SPRO and then F8. Then select SPRO and select field values. This would give a list of all Authorizatoion objects. I guess S_PROJECT is the one that will help you out.
So you just have to check what are the roles that have this authorization objects and assign them to the users with appropriate authorizations.
Thanks
Vamsi

Calling anonymous role from html

Hi All,
I'm having a problem difficult to find solution.
I have created a role and assigned anonymous user group to it. Then I've created an html and placed it inside KM and gave link - http://<host>:<port>/irj/portal/anonumous into this html.
Now, when i directly copy the url of this html to IE, the html comes and clicking on the anonumous role link, the role opens.
But, i have cretaed an UME user (it has everyone and authenticated user group assigned to it). Now, i'm logging into portal (http://<host>:<port>/irj/portal) with this user and going to the same html page. And, then when I click on the role link - the new window is coming with anonymous portal link but instantly it's forwarding to the html page again.
Can you guys give me any idea why this is happening. Is it like anonymous link cannt be accessed by logging in.
Pls help as i'm stuck into it. Any help would be appreciated....
Best Regards,
Sen

Hello Sen.
It happens because you do not provide a navigation target in your link.
Modify your link as follows:
http://<host>:<port>/irj/portal/anonymous?NavigationTarget=<target iview in your anonymous role>
Where <target iview in your anonymous role> can be either in [ROLES|http://help.sap.com/saphelp_nw04/helpdata/en/2d/91e33edd37de63e10000000a11405a/frameset.htm] format or [Short Urls|http://help.sap.com/saphelp_nw04/helpdata/en/b3/7b8163404448e7aad7899c0b30313e/frameset.htm] format.
Best regards,
Aliaksandr Zhukau

Lync 2013 Server / Roles & Components

Lync
2013 Server / Roles & Components
Front End
User authentication and registration
Presence information and contact card exchange
Address book services and distribution list expansion
IM functionality, including multiparty IM conferences
Web conferencing, PSTN Dial-in conferencing and A/V conferencing (if deployed)
Application hosting, for both applications included with Lync Server (for example, Conferencing Attendant and Response Group application), and third-party applications
Primary store for user and conference data. Information about each user is replicated among Front End Servers in the pool
Optionally, Monitoring, to collect usage information in the form of call detail records (CDRs) and call error records (CERs). This information provides metrics about the quality of the media (audio and video) traversing your network for both Enterprise
Voice calls and A/V conferences.
Web components to supported web-based tasks such as web scheduler and join launcher.
One Front End pool runs the Central Management Server DB, which manages and deploys basic configuration data to all servers running Lync
Optionally, Archiving, to archive IM communications and meeting content for compliance reasons.
Optionally, if Persistent chat is enabled, Persistent Chat Web Services for Chat Room Management and Persistent Chat Web Services for File Upload/Download.
Back End
Database server running Microsoft SQL Server
Provide the DB services for the Front End pool
Acts as backup store for the pool’s user and conference data
Primary stores for other DB’s like Response Group
High Availability for the BE DB is provided via SQL Mirroring
Optional Witness to enable automatic failover for BE
SQL Sever 2008 R2 or higher required for SQL Mirroring
Edge Server
Enable users to communicate and collaborate with users outside the organization’s firewall
Comprises four separate server roles
Access Edge – Acts as a secure proxy for all remote Lync signaling traffic
Remote Access
Federation
Public IM Connectivity (PIC)
Web Conferencing Edge – Enable remote users to participate in Web conferences with internal or remote workers
A/V Edge – Responsible for secure relay of A/V media among internal, external, and federated contacts
XMPP Gateway – Allows IM/P with XMPP federated contacts
Reverse Proxy
Simple URL Publishing – Required for users to join Lync meetings
Web Conferencing Content – Users download meeting content (PowerPoint, Whiteboard, and Poll data) via Lync Web Services when in meeting
Address Book & Distribution List Expansion – Required for users to download Lync Address Book and perform DL expansion
User Certificates – Provides client certificate authentication via Lync Web Services
Device Updates – Provides software updates to Lync IP endpoints
Mobility – Provides connectivity for mobile clients via Lync Web Services
Mediation Server
Translates signaling and media between Lync Server and PSTN, IP-PBX, or SIP Trunk
Can be co-located on Front End or separated as stand-alone Server dependent on call volume
Role facilitates dial-in conferencing
Capacity
Co-located = 150 Concurrent Calls
Standalone = 1100 Concurrent Calls
Persistent Chat
Enable users to participate in multiparty, topic-based conversations that persist over time
Pchat Front End server role runs persistent chat service
Pchat Back End server stores chat content and compliance events
Geographic DR is provided via stretched pool and SQL log shipping to replicate DB info
150k provisioned users / 80k concurrent users
Archiving
Uses SQL Server 2008 R2 or SQL Server 2012 for DB
Capable of archiving the following:
Peer-to-peer IM
Multiparty IM
Web Conferences, including uploaded content and events
A/V for peer-to-peer IM and web conferences
Web conferencing annotations and polls
Monitoring
Agent that runs on each Front End Server that collects and manages information from the Front End and Mediation Servers
Stored on SQL Server DB
Leverages SQL Server Reporting Services for creation of reports related to call quality and metrics
Office Web Apps Server
External server leveraged for rendering PowerPoint slides within the Lync client and Lync Web App
Typically leveraged within SharePoint deployments to deliver browser-based versions of Microsoft Office applications
System Center Ops Mgr
Health configuration in Lync Server 2013 is built around System Center Operations Manager and the use of Lync Server Management Packs. These Management Packs include a number of new features and enhancements, including:
Feature
Description
Synthetic Transactions
Windows PowerShell cmdlets that can be run from various locations to ensure that end user scenarios such as sign-in, presence, IM, and conferencing are readily available to end users.
Call Reliability Alerts
Database queries for Call Detail Records (CDR). These records are written by Front End Servers to reflect whether end users were able to connect to a call or why a call was terminated. These queries result in alerts that indicate when a wide range of end
users are experiencing connectivity issues for peer-to-peer calls or basic conferencing functionality.
Media Quality Alerts
Database queries that look at Quality of Experience (QoE) reports published by clients at the end of each call. These queries result in alerts that pinpoint scenarios where users are likely to be experiencing poor media quality during calls and conferences.
The data is built upon key metrics such as packet latency and loss, metrics that are known to directly contribute to call quality.
Component Health
Individual server components raise alerts by using event logs and performance counters. These alerts indicate failure conditions that can severely impact one or more end user scenarios. These alerts can also indicate a variety of other failure conditions,
including services not running, high failure rates, high message latency, or connectivity issues.
Dependency Health
Failures can occur for a variety of external reasons. The management packs now monitor and collect data for some of the critical external dependencies that might indicate severe issues, including IIS availability, CPU and memory usage of servers and processes,
and disk metrics.
Exchange UM
http://www.contactcenterarchitects.com/lync-2013-server-roles-components/

Hi,
Thank you for sharing the information. It is useful for others who not understand Lync Server Roles and Components. You time and effort are appreciated.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

OIM 11g R1 - Container for Roles

Hi,
is it possible to create container for roles?
For Example:
Container1: RoleA, RoleB, RoleC
Container2: RoleV, RoleY, RoleZ
The reason is, i want to create authorization policies, which allows the user to assign specials roles. The problem is, that a lot of roles will be added during the operation. This means, if a new role will be created, i have to edit the authorization policy
The best way is, i assign a Role-Container to the authorization policy. If i create a new role, i add the role to the special container.
Is this possible in OIM 11g R1?
Edited by: 960944 on Apr 3, 2013 5:18 AM

Yes, you can do that using authorization policy.
Try this:
Create a Role called 'X'
Create a Authorization Policy of Role Management Entity Type called 'X Role Authz Policy' and under the Permission tab:
Grant Modify Role Membership, Search for ROle, View Role Detail and View Role Membership
Under Data Constraints: Add all the roles that a user can self assign except SYS ADMIN role.
Under Assignemnt: Add Role 'X'
Save and apply to test it.
You can have a look at the default Role Management All Users Policy for reference.
Regards,
Sunny

Business roles in GRC AC

Hello,
Is it possible in SAP GRC AC to create so-called business roles like in SAP IdM. This roles are not assigned to any backend system but derive backend system roles. The aim is to create set of roles that consist of roles in different backend systems.
As I understand role mapping can't fully implement this functionality, because main role is assigned to backend system.
Thanks,
Yakov
Edited by: Yakov Silin on Feb 24, 2010 7:00 AM

Hi Yakhov,
I was wondering if this is your dilemma. We want to use this role mapping feature for the purposes of adding an Enterprise Portal role for every ABAP role that gets approved for the user in an ABAP component system (i.e. ECC, BW, CRM etc). We will have a 1:1 mapping of Enterprise Portal role to ABAP role defined in the role mapping section in GRC.
- We want to set up the workflow in such a way that the main role (ABAP role) is the only role that needs to be approved. The dependent role (Enterprise Portal role) should be added or not added based on the approval or denial of the main role (ABAP role). In other words if the role owner for the abap role approves the abap role, then both the abap and EP role will be provisioned by GRC and if the role owner rejects/denies the role, then neither the abap or EP role will be provisioned by GRC.
Is this similar to the challenge you ar facing?

How to use the Oracle's SET ROLE?

Hi all,
does anyone know how I can call SET ROLE (for Oracle) from java before the report is produced with
Crystal Reports API?
I'm using Crystal Reports 2008 for the report design and new crystal report java sdk of JRC (v12.2 with SP1) which know as CRJ in my J2EE application.
I tried to insert a Command (SET ROLE role) into a working fine report.
The report runned into Crystal Reports 2008 works fine.
Since has been made a high number of reports without a SET ROLE, to avoid to modify all the reports already made, I tried to run the SET ROLE from JAVA adding a CommandTable to report.
Below the code inserted into java class:
          ConnectionInfos connInfos = new ConnectionInfos();
          IConnectionInfo iConnInfo = new ConnectionInfo();
          PropertyBag propertyBag = new PropertyBag();
          try {
          String usernameOracle = GestoreContesto.getAttributo("usernameOracleReport");
          String passwordOracle = GestoreContesto.getAttributo("passwordOracleReport");
          String connectString = GestoreContesto.getAttributo("dbUrl");
          String driverName = "oracle.jdbc.OracleDriver";
          //String driverName = "oracle.jdbc.OracleConnectionCacheImpl";
          //String JNDIName = "jdbc/nsisrdatasource";
          String userName = usernameOracle;
          String password = passwordOracle;
          String TRUSTED_CONNECTION = "false";
          String SERVER_TYPE = "JDBC (JNDI)";
          String USE_JDBC = "true";
          String DATABASE_DLL = "crdb_jdbc.dll";
          //String JNDI_OPTIONAL_NAME = JNDIName;
          String CONNECTION_URL = connectString;
          String DATABASE_CLASS_NAME = driverName;
          propertyBag.put("Trusted_Connection", TRUSTED_CONNECTION);
          propertyBag.put("Server Type", SERVER_TYPE);
          propertyBag.put("Use JDBC", USE_JDBC);
          propertyBag.put("Database DLL",DATABASE_DLL );
          //propertyBag.put("JNDIOptionalName",JNDI_OPTIONAL_NAME );
          propertyBag.put("Connection URL", CONNECTION_URL);
          propertyBag.put("Database Class Name", DATABASE_CLASS_NAME);
          iConnInfo.setAttributes(propertyBag);
          iConnInfo.setUserName(userName);
          iConnInfo.setPassword(password);
          connInfos.add(iConnInfo);
          String TableName = "Custom_Query";
          String TableAlias= "Custom_Query";
          CommandTable table = new CommandTable ();
          table.setAlias (TableAlias);
          table.setName (TableName);
          table.setConnectionInfo(iConnInfo);
          table.setCommandText("SET ROLE role");
          databaseController.addTable(table, null);
          catch (ReportSDKException e) {
               System.out.println("......");
When I tries to render a report from Java I received this ERROR:
15:32:52,935 INFO [STDOUT] 15:32:52,935 FATAL [JRCCommunicationAdapter] Request failed and JRC Command failed to be undone
15:32:52,966 INFO [STDOUT] 15:32:52,951 ERROR [JRCCommunicationAdapter] detected an exception: Nessun risultato restituito dalla query.
     at com.crystaldecisions.reports.queryengine.Table.u7(Unknown Source)
     at com.crystaldecisions.reports.dataengine.datafoundation.AddDatabaseTableCommand.new(Unknown Source)
     at com.crystaldecisions.reports.common.CommandManager.a(Unknown Source)
     at com.crystaldecisions.reports.common.Document.a(Unknown Source)
     at com.businessobjects.reports.sdk.requesthandler.f.a(Unknown Source)
     at com.businessobjects.reports.sdk.requesthandler.DatabaseRequestHandler.byte(Unknown Source)
     at com.businessobjects.reports.sdk.JRCCommunicationAdapter.do(Unknown Source)
     at com.businessobjects.reports.sdk.JRCCommunicationAdapter.if(Unknown Source)
     at com.businessobjects.reports.sdk.JRCCommunicationAdapter.a(Unknown Source)
     at com.businessobjects.reports.sdk.JRCCommunicationAdapter$2.a(Unknown Source)
     at com.businessobjects.reports.sdk.JRCCommunicationAdapter$2.call(Unknown Source)
     at com.crystaldecisions.reports.common.ThreadGuard.syncExecute(Unknown Source)
     at com.businessobjects.reports.sdk.JRCCommunicationAdapter.for(Unknown Source)
     at com.businessobjects.reports.sdk.JRCCommunicationAdapter.int(Unknown Source)
     at com.businessobjects.reports.sdk.JRCCommunicationAdapter.request(Unknown Source)
     at com.businessobjects.sdk.erom.jrc.a.a(Unknown Source)
     at com.businessobjects.sdk.erom.jrc.a.execute(Unknown Source)
     at com.crystaldecisions.proxy.remoteagent.RemoteAgent$a.execute(Unknown Source)
     at com.crystaldecisions.proxy.remoteagent.CommunicationChannel.a(Unknown Source)
     at com.crystaldecisions.proxy.remoteagent.RemoteAgent.a(Unknown Source)
     at com.crystaldecisions.sdk.occa.report.application.ds.a(Unknown Source)
     at com.crystaldecisions.sdk.occa.report.application.an.a(Unknown Source)
     at com.crystaldecisions.sdk.occa.report.application.b0.if(Unknown Source)
     at com.crystaldecisions.sdk.occa.report.application.b0.b(Unknown Source)
     at com.crystaldecisions.sdk.occa.report.application.bb.int(Unknown Source)
     at com.crystaldecisions.proxy.remoteagent.UndoUnitBase.performDo(Unknown Source)
     at com.crystaldecisions.proxy.remoteagent.UndoUnitBase.a(Unknown Source)
     at com.crystaldecisions.sdk.occa.report.application.DatabaseController.a(Unknown Source)
     at com.crystaldecisions.sdk.occa.report.application.DatabaseController.byte(Unknown Source)
     at com.crystaldecisions.sdk.occa.report.application.DatabaseController.addTable(Unknown Source)
     at it.ServletHelper.querySetRole(ServletHelper.java:627)
It's a big problem. If anyone has any idea, I'd greatly appreciate it.
Thanks

Hi all,
running a report with two command from java (the first contains a simple "SEt ROLE role",
the second contains a simple select) is raised the error "No results returned by the query" while in
Crystal Reports 2008's preview the report works fine.
Therefore I ask: "Is it possible to run a report that contains a query without result from Java?
How can do with the SET ROLE command, which is essential for me?"
Thanks

Regarding Enterprise Portal Role issue

Hi,
The system administrator has assgined a role called "k-role" to a user. The K-role has some 3 pages inside it. When the user view the portal with his id, he can see the role called "K-role" and the pages. But when he clicks a page to access the documents with in it, it says "ACCESS DENIED". There is no restriction kept at the document level. Restriction is only at the role level.
What could the error be? How can i resolve this issue? How can the user access the document?
Regards,
Divya

Hi Divya,
the portal users assigned to super admin role (usually via group Administrators) do have full permissions on every document. You HAVE to add read permissions for group Everyone in order to make the documents accessible by every portal user.
1.      Open the Details dialog box for the item (for example, for the folder).
2.      Choose Settings ® Permissions.
3.      Enter one or more users, groups, or roles.
4.      Choose Add.
5.      Select one of the following permissions: Read, Write, Read/Write, Delete, Full Control
Best regards,
Martin

Portal Design - Best Practices for Role and Workset Tab Menu

We are looking to identify and promote best practices in SAP Portal Design.
First, is there a maximum number of tabs which should exist on the highest level tab menu, commonly called the role menu? Do a large number of tabs on this menu cause performance issues? Are there any other issues associated with a large number of tabs on this menu?
Second, can the workset tab menu be customized to be 2 lines of tabs? Our goal is to prevent tab scrolling.
Thanks

Debra,
Not aware of any performance issues with the number of tabs in the Level 1 or 2 menus, particularly if you have portal navigation caching enabled.
From an end user perspective I guess "best practice" would be to avoid scrolling in the top level navigation areas completely if possible.
You can do a number of things to avoid this, including:
- Keep the role/folder/workset names as short as possible.
- If necessary break the role down into multiple level 1 entry points to reduce the number of tabs in level 2.
An example of the second point would be MSS. Instead of creating a role with a single workset (i.e. level 1 tab), we usually split it into two folders called something like "My Staff" and My Finance" and define these folders as entry points. We therefore end up with two tabs in level 1 for the MSS role, and consequently a smaller number of tabs in level 2.
Hope that helps......
Regards,
John

Business Role - Link to PFCG role

Dear all,
When I create a new business role in CRM there is a field called PFCG role ID in which you must provide a PFCG role.
What is the functionality of this PFCG role in relation to the Business Role?
When I look into standard SAP business roles and their associated standard SAP PFCG role I see a lot of "external services"/views. Is it possible to create such a role from scratch myself.
Is there some documentation available that explain this relationship between the PFCG role and the business role.
Thank you in advance,

Dear Ivan,
To start with Business Partner Roles and PFCG roles are different. Though you have an integration that one business partner cannot view the data of other business partner because of the roles that are being maintained in PFCG.
Lets say you have two customers (BP Role Customer). One customer cannot view the data of other customer because of the role that is being assigned to his user id in SU01. You create the roles in PFCG.
CRM Business Partner Roles:
http://help.sap.com/saphelp_glossary/en/dc/926ecf5e1cd511bcbe0800060d9c68/content.htm
Rights and responsibilities that a business partner can have in various business transactions.
The assignment of a BP view determines the relevant data sets, so that only a particular part of the BP master data is displayed, depending on the business transaction in question.
http://www.crmexpertonline.com/archive/Volume_03_(2007)/Issue_04_(May)/v3i4a4.cfm?session=
Each business partner role contains a predefined set of functions based on the business partners relationship to your company. For example, you could have business partner roles such as employee or vendor. The business partner roles determine the fields you have available in the SAP CRM system for the business partner. Business partner role categories sort business partner roles into groups, such as person or company.
PFCG Roles:
http://help.sap.com/saphelp_nw2004s/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
The SAP authorization concept protects transactions, programs, and services in SAP systems from unauthorized access. On the basis of the authorization concept, the administrator assigns authorizations to the users that determine which actions a user can execute in the SAP System, after he or she has logged on to the system and authenticated himself or herself.
To access business objects or execute SAP transactions, a user requires corresponding authorizations, as business objects or transactions are protected by authorization objects. The authorizations represent instances of generic authorization objects and are defined depending on the activity and responsibilities of the employee. The authorizations are combined in an authorization profile that is associated with a role. The user administrators then assign the corresponding roles using the user master record, so that the user can use the appropriate transactions for his or her tasks.
Hope this will help.
Regards,
Naveen.

Bi Roles (Developer & Security Admin) in Development System

My requirment is to create 2 Roles in BI Development System...
1) Developer Role
Tasks that a new developer can perform (Create,delete,change Info Objects,Info Areas,Data providers,Info sources,Source systems,info sets,process chain.....queries) also
ABAP...TRANSPORTS..
2) Security Administrator
Can Create Roles (PFCG),Authorisation objects,Assign the roles to users...etc transport newly created roles..etc
Please update me with the list of Authorisation objects i can use
Thanks

Hi,
Here are the steps ...
A role is a collection of entities (such as the User Menu and a Profile) that gets allocated to a user to provide them with the necessary authorisation to do their job. Formerly referred to as an Activity Group .
Using transaction PFCG
1. Give the Role name or Activity Group name (both Role or Activity Group same in below 4.6B version it is called as Activity Group now it is called as Role).
2. Then click on Create button
Give description and Click on Save
3. Then click on Menu tab
There you will fine button like Transaction, Reports and Web address
a. Click on Transaction Button.
After clicking on transaction button you will find screen
Put all transactions you want to assign then click on button Assign Transaction
say for example transactions SU01 and PFCG to the Administrator.
b.Then click on the Authorisation tab
Give profile name related to your role name and description
c.Click on the Change authorization data button
Here you need to maintain authorizations.
Open each Object Class (means at the end you can find names like BC_A, BC_Z these are Object class)
For example when you open Object Class BC_A
you will find Authorisation Object (i.e. S_USER_AGR, )
When you open each Authorisation Object you will find Field Names and Activities
Each object have their own fields here two field names are there (Activity & Activity Group Name)
Click on the Pencil button and Maintain Activities
After maintaining all activities
There is Generate button on Application tool bar click to generate profiles
Then Press back button
There is another tab USER click on that and enter user ids
then click on User Compare button
Until the User compare button comes green user never get access for those transactions assigned.
Hope it helps.
Assign points if helpful.
Thanks & Regards
Hemant Khemani

Calling BW roles to EP

Similar Messages

Maybe you are looking for