Customized Role in SRM

Hi ALL
I have a requirement from the client as below -
We have some PO's in R/3 4.6c with a specific document type ZDM which are basically Ariba PO's replicated into R/3 before making Ariba obsolete and switching on to SRM 5.0.
In SRM we need to do the confirmation from these ZDM PO's, ie we need to create a new role and assign it to the users who are responsible for the confirmation of these PO's (doc type ZDM) and not any other document types.
Currently we have a central goods recepient role who are able to goods receipt all PO's irrespective of the document type. To restrict some of the users to do a goods receipt of the document type ZDM we need to do some enhancements.
Any help on the approach how to solution this will be highly appreciated. Please do let me know if you need any other details or clarification.
Thanks in advance.
Sachin Rao

Hi Masa
Thank you for your reply. I had tried the transaction type, but when i try to create a new transaction type ZDM I am unable to find the number range which i need to assign as objects in the internal and external number range field.
In R/3 it is maintained as DM 690000000 to 699999999.
Can you please advise.
Thanks and Regards
Sachin

Similar Messages

Error while assigning portal custom role

Hi All,
We have a custom role which we use to assign to the users. till now we are able to assign it without any problem. But now as i need to assign it to someone, i got an error stating that "An error occured while adding user assignments; to see the correct status, perform a new assigned user search".
Can anybody help us in finding out the reason of the error and in rectifying the error.
Thanks & Regards,
Ravi

Hi Raghu,
Thanks for your reply..
This role is existing in the PCD, and this error is coming, while assinging this role any users... it is working fine with the existing users, who are having this role before. This is happening only when we are assigning this role to some new user.
I dont think this has some relation with the backend, as the role assignment is part of the Portal itself.
And also here we dont have seperate UME, and we are using r3 users only with single sign on.....
Hi Jithendar,
Thanks fo your reply.....I will do that backend roles check also for those users and see whether any backend role variations happened for these users.
Thanks & Regards,
Ravi

Create a new role in SRM 7.0 and Portal

Dear All,
We are using SRM 7.0 with Portal. We created a maintenance table in SRM. This table must be maintained from time to time by the key users. But they want to maintain in from Portal, not from SRM.
When i was using SRM 4.0, it was simple, i was creating a new role from PFCG and assigning the table to the role. Then i was be able to see and maintain it from web. But it is not that simple now in Portal side. Because i created a new role and assigned the table to that role in SRM, but nothing happened in Portal side.
Can anyone advise me the steps ? How am i going to show and maintain this table in portal ?
Thanks in advance,
Best regards,

Hi,can you share your solution with me. I have the same question but not smart as you.
Thanks in advance.
WuLin
SRM

How to create a custom task in SRM for the standard task

Hi Gurus,
How to create a custom task in SRM for the standard task eg: TS10407929
regards,
George.

from PFTC itself. Same.

Error Importing a Transport in portal - Using custom role

Hello Everyone,
I have a custom role XYZ which has a few worksets copied (as delta links) from the standard System Administration Role. These worksets include Transport, Portal Display and Monitoring.
Now, I have assigned a user ABC the following roles:
1.Role XYZ
2.Content Admin Role
When the User ABC with the above mentioned roles, tries to import a transport package into the system he gets and authorization error. (This error does not occur if I assign the user Super Admin Role).
Error Details :
com.sapportals.portal.transport.RepositoryAccessControlException
Import data Access denied. (Object(s): pcd:..
Object ID:
Transport File: ..
Original Exception:
com.sapportals.portal.pcd.gl.PermissionControlException: Import data Access denied. (Object(s): pcd:..
at com.sapportals.portal.pcd.gl.transport.PcdGlTransportAdapter.checkPermission
at com.sapportals.portal.pcd.gl.transport.PcdGlTransportAdapter.startElement
at   com.sapportals.portal.pcd.gl.xml.ContentHandlerManager.startElement
<b>Questions:
1.     Is it really possible to have this functionality (ability to Import and Export without Assigning System admin or super admin roles) achieved?
(I went through a thread Portal role for transporting objects on SDN which discusses this scenario)
2.     How should I check for additional authorizations required for Importing / Exporting Transport packages into portal. (without having assigned the super admin role or system admin role).</b>Thanks To all of you
Joan Thomas

Thanks for the inputs.
I have fixed the problem.
To assign content objects to a package, you need at least read permission for the objects to be assigned.
You can only import objects into the Portal Content Directory if you have read/write permission for each folder in the Portal Catalog where the imported objects will be stored.
To create a transport package in a certain folder of the Portal Catalog, you need read/write permission for this folder.
These 3 points helped me do the required.
Raj

Problem in assigning custom role to a user

Hi everyone,
Can anyone tell me how to assign a custom role to a user?
I have created a set of IViews which are assigned to a workset and the workset is assigned to a new role.
I assign this new role to my user account.
But, I am not getting the role which I have assigned to my user account.
What am I missing???

Hi Daya,
Check the below links:
[Setting up Portal Roles|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/e0ba66fd-3c4e-2a10-1090-e1217a92c147?QuickLink=index&overridelayout=true]
Step by step guide to create roles and worksets. [Wiki blog|http://wiki.sdn.sap.com/wiki/display/EP/Makeiview,workset,pageandassignrole]
Check the [help.sap|http://help.sap.com/saphelp_nw70/helpdata/en/1e/89570091620b428807f5bce4b45e7f/frameset.htm] document to get idea about Portal Content Objects.
Regards,
Anand G

How to Call Standardapplication in Custom Applications in SRM-ABAP ?

Hi,
I want to Create a Custom Apllication in SRM 5.0 & i have to call a Standard Application.
I am new to SRM ABAP , can anyone help me how to Create Applications in SRM ABAP & How to Call Standard Application in SRM ABAP.

thank u

How to use the custom role which is created by user

Hi,
Can any one suggest how to use custom role created by developer in webcenter portal.
Thanks in Advance
Regards,
Ankur Bhatia

Hi Daniel,
Thanks for ur Reply,
But i am not able to understand where to write the above code.
Also Suppose if a role "GeneralAdmin" is activated for a user then how it behaves like a "GeneralAdmin".
Means where is the code was written so that it behave like GeneralAdmin after activation.
Thanks & Regards,
Ankur Bhatia
Edited by: 986921 on Mar 5, 2013 3:49 AM
Edited by: 986921 on Mar 5, 2013 3:49 AM

Wlconfig with custom role mapper always fails FIRST time only

WLS 8.1 sp2.
I have a very strange problem, where I'm "coldstarting" a server and
configuring it, much like the ant build script for medrec. Only I have a
custom role mapper (medrec has a custom authentication provider). Anyway,
the first time I execute this task (after a clean), it consistently fails
like so:
[wlconfig] OK
[wlconfig] OK
BUILD FAILED
file:P:/dgs/build.xml:186: Unable to create mbean:
weblogic.management.MBeanCreationException: - with nested exception:
[java.lang.ClassNotFoundException:
weblogic.management.configuration.com.combinenet.security.CNRoleMapperProvid
erMBean]
(that class looks bogus to me, BTW, as my provider class is
com.combinenet.security.CNRoleMapperProvider)
Now, the SECOND time I execute "coldstart", which runs wlconfig, the server
starts up fine, and my custom role mapper is loaded successfully. So,
obviously I figured something was left around the first time which somehow
helped matters, but the strange thing is that I delete the entire domain
directory before "coldstarting" the server, and I also re-copy the role
mapper provider jar into the mbeantypes directory, so I'm very puzzled. I'm
copying the coldstart task below (and the clean).
Can anyone tell me what's wrong with this task that would make it fail the
first time through after a clean? Is this a bug? And why would it succeed on
all subsequent attempts (without a clean)? I just don't see anything wrong
with what I'm doing.
TIA,
Miles
<target name="coldstart"
description="Start a new DGS Server with an empty config"
depends="configServerEnv,startPointBase,configPointBase,dist" >
<delete dir="${dgs.root}" quiet="true"/>
<mkdir dir="${dgs.root}"/>
<wlserver
beahome="${bea.home}"
dir="${dgs.root}"
domainname="${dgs.domain}"
host="${dgs.host}"
port="${dgs.port}"
servername="${dgs.serverName}"
username="${wl.username}"
password="${wl.password}"
productionmodeenabled="false"
generateconfig="true"
action="start">
</wlserver>
<wlconfig url="t3://${dgs.host}:${dgs.port}"
username="${wl.username}"
password="${wl.password}">
<query domain="${dgs.domain}" type="Server"
name="${dgs.serverName}"
property="dgs.server"/>
<create type="JDBCConnectionPool"
name="DgsPool"
property="dgs.pool">
<set attribute="CapacityIncrement" value="1"/>
<set attribute="DriverName"
value="com.pointbase.jdbc.jdbcUniversalDriver"/>
<set attribute="InitialCapacity" value="1"/>
<set attribute="MaxCapacity" value="10"/>
<set attribute="Password" value="${pointbase.password}"/>
<set attribute="Properties" value="user=${pointbase.username}"/>
<set attribute="RefreshMinutes" value="0"/>
<set attribute="ShrinkPeriodMinutes" value="15"/>
<set attribute="ShrinkingEnabled" value="true"/>
<set attribute="TestConnectionsOnRelease" value="false"/>
<set attribute="TestConnectionsOnReserve" value="false"/>
<set attribute="URL" value="jdbc:pointbase:server://localhost/demo"/>
<set attribute="Targets" value="${dgs.server}"/>
</create>
<create type="JDBCTxDataSource" name="DGS Tx DataSource">
<set attribute="JNDIName" value="DgsTxDataSource"/>
<set attribute="PoolName" value="DgsPool"/>
<set attribute="Targets" value="${dgs.server}"/>
</create>
<create type="JMSConnectionFactory" name="Queue">
<set attribute="JNDIName" value="jms/QueueConnectionFactory"/>
<set attribute="XAServerEnabled" value="true"/>
<set attribute="Targets" value="${dgs.server}"/>
</create>
<create type="JMSJDBCStore" name="DgsJDBCStore"
property="dgs.jdbcstore">
<set attribute="ConnectionPool" value="${dgs.pool}"/>
<set attribute="PrefixName" value="Dgs"/>
</create>
<create type="JMSServer" name="DgsJMSServer">
<set attribute="Store" value="${dgs.jdbcstore}"/>
<set attribute="Targets" value="${dgs.server}"/>
<create type="JMSQueue" name="Registration Queue">
<set attribute="JNDIName" value="jms/REGISTRATION_MDB_QUEUE"/>
</create>
</create>
<create type="MailSession" name="Dgs Mail Session">
<set attribute="JNDIName" value="mail/DgsMailSession"/>
<set attribute="Properties"
value="mail.user=joe;mail.host=mail.mycompany.com"/>
<set attribute="Targets" value="${dgs.server}"/>
</create>
<create type="StartupClass" name="StartBrowser">
<set attribute="Arguments" value="port=${dgs.port}"/>
<set attribute="ClassName" value="com.combinenet.test.StartBrowser"/>
<set attribute="FailureIsFatal" value="false"/>
<set attribute="Notes" value="Automatically starts a browser on
server boot."/>
<set attribute="Targets" value="${dgs.server}"/>
</create>
<set mbean="Security:Name=myrealmDefaultAuthenticator"
attribute="ControlFlag" value="SUFFICIENT"/>
<set mbean="Security:Name=myrealmDefaultAuthenticator"
attribute="MinimumPasswordLength" value="10"/>
<set mbean="Security:Name=myrealm"
attribute="DeployPolicyIgnored" value="false"/>
<set mbean="Security:Name=myrealm" attribute="DeployRoleIgnored"
value="false"/>
<set mbean="Security:Name=myrealm"
attribute="FullyDelegateAuthorization" value="true"/>
<set mbean="Security:Name=myrealm"
attribute="AuthenticationProviders"
value="Security:Name=myrealmDefaultAuthenticator|Security:Name=myrealmDefaul
tIdentityAsserter"/>
<set mbean="Security:Name=myrealm" attribute="RoleMappers"
value="Security:Name=myrealmDefaultRoleMapper|Security:Name=myrealmCNRoleMap
perProvider"/>
<create type="com.combinenet.security.CNRoleMapperProvider"
domain="Security" name="myrealmCNRoleMapperProvider"/>
<set mbean="Security:Name=myrealmCNRoleMapperProvider"
attribute="Realm" value="Security:Name=myrealm"/>
<query domain="${dgs.domain}" type="Server" name="DgsServer">
<set attribute="StdoutEnabled" value="true"/>
<set attribute="StdoutSeverityLevel" value="64"/>
<set attribute="ListenAddress" value=""/>
<set attribute="ListenPort" value="${dgs.port}"/>
</query>
<query domain="${dgs.domain}" type="WebServer" name="DgsServer">
<set attribute="LogFileName" value="logs/access.log"/>
</query>
</wlconfig>
<copy file="${dist}/lib/dgs.ear" todir="${dgs.root}"/>
<wldeploy action="deploy"
source="${dgs.root}/dgs.ear"
name="dgsapp"
user="${wl.username}"
password="${wl.password}"
verbose="true"
adminurl="t3://localhost:7001"
debug="true"
targets="${dgs.serverName}"/>

<sleep hours="10"/>
</target>
<target name="clean"
description="Clean the build tree(s)"
depends="init">
<delete dir="${build}" verbose="true"/>
<delete dir="${dist}" verbose="true"/> (dist is where the ear file is
created)
</target>

g_wolfman wrote:
Are you using Parallels?
Wolfman, thats a good hint!
Additional info at --> http://reviews.cnet.com/8301-13727_7-20106682-263/macbook-airs-double-booting-wi th-parallels-and-filevault-enabled/
Thanks for the input.
Lupunus

Adding Custom fields to SRM Item Data tab & Account Assignment Tab

Hi Everyone,
We have got a small requirement to add 2 custom fields in SRM Shopping cart.
Need to add a input field, which should act just like Requisitioner in ECC. ( F4 help ).This will allow to create shopping cart on behalf of some one.
Need to add input field, which resembles Goods Recipient in ECC ( Free text)
After adding custom fields, how do i ensure that, it's mapped to right field in ECC.I spent much browsing SRM forum, but couldn't gather much information. I understood that, this involves configuration in SPRO.
Any information or help in any kind would be really helpful.
Thanks in advance.
Vishnu

Hi Vishnu,
Take look at this link.
Add custom field to SC and POWL
Thanks
Senthil

Addition of CUSTOM button in SRM SUS PO page - SRM702

Hi All,
Scenario Used : MM - SRM SUS.
Requirements : Need to add a custom field in SRM SUS PO ,click on which will communicate to ECC vai SRM and bring the DMS related information .
As am new to BSP , do we have any enhancement facility such we have in Webdynpro ? if not what will be the best approch we can follow in this case.
Thanks
Channa

HI Zoltan,
Yes you got my requirement, I have already added several customer field in the same page as per guidance by SAP Note 762984 , mentioned by Anil.
Now I want to add a custom button called "Fetch ECC DIR" and when user click on that ,need to call ECC RFC Module.
Thanks for your inputs, as am very new to BSP ,can you kindly provide some more details how can I achieve this,it would be of great help.
thanks
Channa

How to add custom field in SRM-MDM catalog

Hi Guys,
I have to add a custom field in SRM-MDM catalog. I know, it is done through MDM console, but how, it is done, This, I don't know.
Please help me.
Thanks in advance!!
Note-> we are at SRM5.0 + MDM2.0
Neelesh

Please check the online help.
[http://help.sap.com/saphelp_mdm550/helpdata/en/6c/24e342f6307176e10000000a1550b0/frameset.htm|http://help.sap.com/saphelp_mdm550/helpdata/en/6c/24e342f6307176e10000000a1550b0/frameset.htm]
Regards,
Masa

Use of default XACML with custom role mapper and authorization provider

Hi,
Is it possible to use the default XACML provider for custom role mappers and authorization providers when role information will be provided via an external application ( not an LDAP or RDBMS server )?
My custom providers will be communicating with the external application via an API that accepts user credentials and will return decisions whether the credentials were successfully authenticated as well as returning a list of roles for the authenticated user.
Once the roles and the subject are cached, will the default XACML provider be able to use them to make role mapping and authorization decisions?

I see 2 approaches. First, write a custom authenticator that stores the role information in the subject either by creating a custom java.security.Principal that is stored in the Subject or by saving it in PrivateCredentials of the Subject. Then right a custom role mapper that knows how to get the role information from the Subject and return a role Map. The default XACML Authorizer will then work with the role information in the role map.
Second approach is to write a custom role mapper that looks up the role information based on the Subject and returns a role map.
The chosen approach depends on where you're getting the role information from.

Enable change password option in masthead for the custom role

Hi Experts,
In our project we have to provide change password option to the custom roles. However we don't have to use eu_role or admin role. Could you please let me know how to go about it.
Regards,
RK

Hi
Please Refer this thread
Password Change - Personalize in EP7.0
You can use old persouserpassword screen after setting the UME property
ume.admin.wdactive to false using the configtool
Regards
Ganesan S

Enable personalization option in masthead for the custom role

enable personalization option in masthead for the custom role for end user without using eu_role or admin roles

Hi,
To do so, go to
Content Administration->Portal Content->Content provided by SAP->End User Content->Standard Portal users->Worksets->Portal Personalization
Copy this portal personalization workset to a folder and add it to the role which the user has. The user with this role will be able to see the personalization link in the masthead iview.
Regards
Srinivasan T

Customized Role in SRM

Similar Messages

Maybe you are looking for