Control Access in Message Monitoring

Can I control access to payload within PI-Message-Monitoring? The topic has been discussed already: How to Control Access To Payload
By using the "S_XMB_MONI-authorization-object" I can protect access to payload for certain messages, regardless of viewing it with Transcation "SXMB_MONI" or with "RuntimeWorkbench";
For me it is not clear, whether the "S_XMB_MONI-authorization-object" does only affect messages within the Integration-Server, or does it also work for messages in adapter-engine-message-monitoring? I mean, when using "Runtime-Workbench --> Message-Monitoring --> AdapterEngine..."?
Regards, Josef

Hi,
It works only for SXMB_MONI (ABAP stack), user on adapter engine can still see payload.
One hint I can give you to explore further, authorization on RWB are controlled by Visual Admin, you can explore something there to block user to view payload on RWB.
I am exploring it and will update you.
Regards,
Gourav
reward points if it helps you

Similar Messages

Security for Message Monitor

What is the best practice for implementing dialogue security for the XI message monitor (SXI_MONITOR or the like and in the RWB) by which you only allow users access to specific integration scenarios? For example, I have 2 different business units with both their integration scenarios defined in the same XI instance. However, I want to ensure one business unit can not view or manipulate another business units messages.

HI,
Have a look into Michal's blog-To control the access to Messages
/people/michal.krawczyk2/blog/2006/01/02/xi-sxmbmoni--controlling-access-to-message-display
Hope this helps,
Regards,
Moorthy

Want to access Status in Message Monitoring

Dear All,
I want to get access to the Status Parameter in Message Monitoring so that depending on the Status(Waiting or Syste Error),I can set my logic and send a mail to the developer.
I need help.
<b>1. Where can I find out the Parameter for status in RWB Message Monitoring?
2.Is there any method so that I can set some parameters and it will directly send mail to the developer or I have to use Mail Adapter and write my own scenario?
3.If I am to develop my own scenario,then how to automate the whole process for each of the New messages?</b>
Thank you in Advance.
Sugata

Hi Suresh,
Thank you for your reply.But this is not what I wanted.In my RWB,there are different Message monitoring Status parameters and I want to get hold of that,to be more open,I want that status to come as Subject of my mail.For that reason I need the Status Parameter,and I need to put that in my mail.How to do that?
Cheers..
Sugata

Message Monitor - Access rights

Hello,
we want to give some user access rights to look into Message Monitor to track the transfer of IDOCs.
Basically we have the role Role_SAPMEINT which lets us take look into the queue monitor but not the message monitor.
By which UME roles or UME actions is this part is accssible for the user.
I don't want to give the user SAP_XMII_Admin role.
Regards,
Kai

It looks like there are some Actions for the Message Listener Monitor listed in the MII help.
Actions for Permissions - SAP Manufacturing Integration and Intelligence - SAP Library

Is following message due to 'Java' setting left unchecked? Mac OSX supportsUser Authentication Mechanism (UAM) plug - ins from other manufacturers to control access to servers.To use a UAM, copy the plug - in to: Library/ Filesystems/ AppleShare/ Authenti

Is following message due to 'Java' setting left unchecked?
Mac OSX supportsUser Authentication Mechanism (UAM) plug - ins from other manufacturers to control access to servers.To use a UAM, copy the plug - in to: Library/ Filesystems/ AppleShare/ Authenti

Man that is an ancient message.
The last time I saw that was using Mac clients connected to a Microsoft (Windows) Server running 'Services for Macintosh' which included the ability to act as an AppleShare compatible file server. Because Microsoft have a different security system for defining accounts which includes the 'domain' as well as username, the standard Mac AFP client did not know how to send that information.
Therefore Apple made it possible to installed a plugin in the form of a UAM or User Authentication Mechanism which added the ability to send this information to login to the fileserver.
See http://support.microsoft.com/kb/101747
However Microsoft have long discontinued 'Services for Macintosh' and now the only way for a Mac to connect to a standard Windows Server is via SMB not AFP. I don't believe this plugin is available to download anymore.

Seeburger Workbench access - restrict users to Message Monitor only

Hi All
Does anyone know if it's possible to restrict users to Message Monitor only access in the Seeburger Workbench?

Hi Andy,
if by "restrict" you mean if you can change the links available in the workbench, then sadly no - this is currently not possible. If you're ok with getting a HTTP Forbidden when clicking on other links than the Message Monitor, then yes - this can be configured within the SAP NetWeaver Administrator -> Identity Management. Check for example to documentation of the Message Monitor
Extracted from there:
    Log on to the NetWeaver Administrator (NWA).
    Open Operation Management | Users and Access | Identity Managemet (UME).
    Create a role and assign the manage action for com.seeburger.xi.frontend.messageidmonitor to that role.
    Now you can assign the newly created role to any user you want to grant access to the SEEBURGER Message ID Monitor.
This is for explicitly granting some user the access to the Message Monitor. The manage action is per default set to "Everyone". You need to remove Everyone on the corresponding frontends (search for actions with name com.seeburger.xi.frontend*)
Hope that helps
Greetings
-Sascha-

My mac seems to be frozen on an internet page. I cant force quit. I can't control+options+command+esc. I can't access my activity monitor. I can see my mouse moving but when I click on anything, it doesn't seem to engage or recognize it. Fix?

My mac seems to be frozen on an internet page. I can't force quit. I can't control+options+command+esc. I can't access my activity monitor. I CAN see my mouse moving but when I click on anything, it doesn't seem to engage or recognize it. Fix?

Thank you. There is a bigger issue. It is not the web page that is the problem. It is that I can see my mouse moving and can move it along the bottom toolbar and the options will highlight but I can't click on anything. I can see the apple icon to get to force quit but cant click on it.
I used your suggestion and force quit came up but I can't select the option to force quit... not even with my arrows and enter/return key. Any other thoughts?
Thank you.

Setting Access Limits in RWB Message Monitoring

Hi All,
In RWB Monitoring -> Message Monitoring -
normally we can monitor all the messages and systems.
Here is it possible to restict a particular 'user' in such a way
that he can monitor only a few messages which is only relevant to him.
Any help will be appreciated.
Thanks in Advance
Regards,
Chemmanz

Hi All,
Thanks for the quick reply.
This feature is available for SXMB_MONI.
So RuntimeWorkbenchMonitoring ->Message Monitoring is also likely to have this feature.
Does anybody have any idea / any docs available ??
Thx n Rgds,
Chemmanz

"Sorry, you don't have access to this page" when creating a sub site. I am in the owners group with full control access

cannot provisioning a SharePoint 2013 site with full control access, I get the page with the "Sorry, you don’t have access to this page”. Any help will be greatly appreciated.

Hi,
Which template did you use for the parent site?
Please check whether the site collection administrator could create a subsite.
Please grant permissions on the Device Channels list
http://sitecollection_URL/DeviceChannels/AllItems.aspx -> List -> List Settings -> Permissions for this list -> granted Read rights for the Everyone group, compare the result as
it.
Please navigated to the hidden list "TaxonomyHiddenList" on the site collection i.e.
http://somdnetsp/lists/TaxonomyHiddenList/AllItems.aspx and check permissions on this list. Check whether the list has unique permissions and there were no users added to the list. If yes,
add "authenticated users" in the list permissions.
Then, try to create sub site, compare the result.
If this issue still exists, please check the log file to find whether there are some message about this issue.
Best Regards,
Wendy
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback
for TechNet Subscriber Support, contact [email protected]
Wendy Li
TechNet Community Support

Message Monitor Missing Messages in Adapter Engine

All,
I had over 200 messages in my adapter engine but recently I only see 115 for the same period.
Additionally, all of the 850 (PO) inbound messages are gone.   I see them in the Integration Engine but not in the Adapter Engine anymore.
I need to repeat processing for a particular 850 message and so I am wondering:
(1)   Any suggestions on why these messages are missing ?
(2)   Is this a retention period issue ? If so, how do I control the period ?
(3)   How can I retrieve these messages ?
(4)   Is there another place where I can re-process the 850 messages I need.   Where and how ?
Thanks everyone in advance for your help.
Regards,
Andy

Hi,
>>>(1) Any suggestions on why these messages are missing ?(2) Is this a retention period issue ? If so, how do I control the period ?
It may be caused coz of some adapter failure which you are using for that particular scenario. Also for rention period you can check it in the particular communication channel, but i don't think it will be the issue. try finding it in moni, if it is not there go to RWB and then find it for you particular interface. If it is not there try to find the status.
>>>(3) How can I retrieve these messages ?(4) Is there another place where I can re-process the 850 messages I need. Where and how ?
In RWB -> message monitoring you will find all the message, Try searching it for your interface and the you can select all messages and you can reprocess it.
For error message , in RWB go to particular adapter, and check if it is running or not. It must be in running status. so check and let us know about it.
Regards
Aashish Sinha

Message Monitoring - Shows Number of Messages but no Messages or Data

Hello All,
We are facing an issue in Message Monitoring. When we see the Message Monitoring (Database Overview) for the Adapter Engine. It shows the number of Messages that were Successful,
but if we click the Successful messages it shows "0 Messages Found"
This was just happening for only Messages which are older than 3 days. Are there any jobs that delete these messages?
We are running on SAP PI 7.31 Dual Installation.
Thanks,
Harsh

Hi Harsh -
it shows "Persist Until" - Next Day same time the message was sent. Does this mean, I can't see the message after the persisted time??
>>>in a way Yes. but AFAIK - you would still be able to access until the next execution of your delete job.
i.e. If your message has "persists until" value as tomorrow afternoon and your delete job is scheduled to run tomorrow evening then i think you should be able to access those messages until the job finishes..
where can I change the persistence duration? Should I change the Default Delete Job time
>>> changing the default job schedule will not be helpful.
You might have to adjust the property " xiadapter.inbound.persistDuration.default " under the XPI Adapter: XI service
( NWA -> configuration->infrastcrture-> java system properties ->services ->XPI Adapter: XI)
But in case you want to keep it for longer duration may be setup archiving..
AAE Archiving in SAP PI 7.11 with XMLDAS

All messages on hold in message monitoring

Hi,
If all of sudden (SOAP to idoc) ..for all the messages in message monitoring is on HOLDING status for all the interfaces.
These interfaces were working fine earlier.
In adapter monitoring , adapters are fine.
i could not see anything SMq transaction also.
what are the possiblities to cause this kind of error?
Thanks

Hi Bhavesh,
It is exactly once in Order.
This is really useful info which u send.
I could not find conversion id and sequential number as stefan mentioned in that blog in my message monitoring in config. table columns(in extended filter criteria)
But already i tried to cancel the those messages as well as resend but i could not do.
I guess my user do not have access to that.
Any other inputs/useful blogs?
Thanks
Edited by: Raja on Aug 14, 2008 5:47 PM
Edited by: Raja on Aug 14, 2008 5:52 PM

Unable to find OLD messages in RWB Adapter level message monitoring

Hi Experts,
I have peculiar issue regarding the messages at the adapter level.
I see some messages in SXMB_MONI. I take the message ID from MONI and go to the Adapter Level Message Monitoring in RWB, but i do not see any message for that message id.
This is not happening for recent messages, but some old messages (2 months or so), we are unable to find the message at the adapter level.
I also tried chosingthe option, display from archive, but no use.
Can someone help me out??
Thanks and REgards,
Ravi

>
Amit Gupta wrote:
> directly executing a query in your db.
>
> Thanks
> Amit
How do we do this?
How do we access the backend database?
Are the tools(SQL Client or Toad) freely available?
Regards,
Ravi

Is there a way to control access by IP Address?

I'd like to follow up on this question using WLS 6.0/6.1.
What I need to do is block access to a set of directories to public IP
addresses. My usual approach would be to tweak the webserver
configuration to deny the requests, but I can't seem to find
documentation on how to accomplish this.
So, if approach this with a ConnectionFilter, I can look at the
ConnectionEvent's getRemoteAddress() method to determine whether the
requestor is public or trusted, but can I get enough information from
getProtocol() method to determine which directory they're requesting?
Thanks,
Matt Kleiderman
Alvin wrote:
Hi,Michael,
Is there any way to control access to a particular application by ip address?
For instance, there are multiple applications reside on the same WLS, some can
be accessed publically, some only can be accessed by users from a certain ip address?
The example you mentioned only applys to the whole WLS.
Thanks.
"Michael Girdley" <[email protected]> wrote:
Yes:
http://www.weblogic.com/docs51/classdocs/javadocs/weblogic/security/net/Conn
ectionFilterImpl.html
Thanks,
Michael
Michael Girdley
Product Manager, WebLogic Server & Express
BEA Systems Inc
Mitchel Lang <[email protected]> wrote in message
news:[email protected]..
I was wondering if there is anyway to restrict access to WLS 5.1 by
IP
Address?
I have a NES Server with SSL running communicating with a WLS server
through
the NASPI proxy. In order to maintain SSL we do not want anybody going
directly against the WLS.
Any Ideas would be helpful.
Mitchel Lang
Mgr. Application Architecture
Time Inc.
212.522.0748
[email protected]

Clean Seeburger Message Monitor

Hi all,
I have a lot of old message in Seeburger Message monitor. For instance many "Error on send, will be retried" that have been there since 2012. Can I clean this log?

Hi,
Seeburger Workbench is an additional layer to monitor message transmission using AS2.
This can be accessed at:
http://server:port/seeburger/index.html
Scenario: From partner ->XI->R/3
In this case,message has to be checked at these levels:
Seeburger Monitor->RWB Message Monitor->SXI_MONITOR->R/3
Scenario: R/3 ->XI->To partner
In this case,message has to be checked at these levels:
R/3 -> SXI_MONITOR -> RWB Message Monitor -> Seeburger Monitor
Hence,in order to have a successful message transmission,a message has to be successful at all these levels.
Kindly let me know if this is fine.
Thanks.
Regards,
Shweta

Control Access in Message Monitoring

Similar Messages

Maybe you are looking for