Customizing availability of Portal Roles/TABs (ESS)

Hello Portal Knowledgeable ones,
I am running EP 6.0 SP13.
We will be implementing many of the Standard HR ESS functions. We desire to purposefully limit the hours of the day when these capabilities are available to users--EVEN THOUGH THE PORTAL IS UP. As an example, viewing paystubs is available 24x7, whereas other update-type ESS functions (update absences) will not be available from 1am to 5am each day. We want to limit this access because our payroll processing occurs during this window, and we do not want updates to occur during it.
Here is my question:
For the standard ESS web dynpro portal functions, how do we implement a time-of-day switch such that access to certain iViews is prohibited.
The end user experience needs to be as follows:
If time is between 1am - 5am and user clicks on updating ESS item in the portal, the system displays an alternative iView indicating that the system is down for maintenance.
General advice would be welcome as well. It seems that the portal displays tabs/content solely based on your pre-assigned roles. How do you turn-off assigned portal roles dynamically?
Thank you for any insights!
Kevin

Found a solution. All users are assigned to groups. Groups are then linked to roles. To change content for user, update the group to role link using UMFactory inside a portal application.

Similar Messages

Customizing Message "No portal roles are assigned for this user"?

Hello,
we would like to give the user some hint on who to speek with in case he has no portal roles assigned.
So we would like to customize the messaage "No portal roles are assigned for this user" to some customer spezific text or to redirekt to a customer specific iView.
I would appreciate any kind of hints.
Best regards,
Lutz Rottmann

Hi,
Check these threads.
Customizing message "No portal roles are assigned for this user"
No portal roles are assigned for this user
Regards,
Harini S

Web Page Composer: making iViews available in Portal Repository tab

Hello experts.
I'm trying to make some content (banners, images, iviews) for WPC (in SAP EP 7.4) and I cannot find any information how to add an iView to the Portal Repository (see the image). It says 'The contents of this repository are defined by your portal administrator', but I cannot find any documents describing the procedure. Any ideas?
Best regards,
Timur Semenchuk.

Hi,
In portal Content administration ->Portal Content ->Portal users -> WPC Authors ->Area Management role -> Content Editor , set the highlighted properties as shown in screen-shot below.
Regards,
Navya

Cusomize message "No portal roles are assigned for this user"?

Hello,
we would like to give the user some hint on who to speek with in case he has no portal roles assigned.
So we would like to customize the messaage "No portal roles are assigned for this user" to some customer specific text or to redirect to a customer specific iView.
I would appreciate any kind of hints.
Best regards,
Lutz Rottmann

Hi,
Check this thread.
Customizing message "No portal roles are assigned for this user"
No portal roles are assigned for this user
Regards,
Harini S

No Portal Roles assigned issue

Hi Experts ,
We had recently integrated CRM with portal , but some users inspite of having the portal roles assigned to their id were getting an Access Denied page (we had customized the "no portal roles assigned " error page ) . Knowing the dependency of portal on IE and browser settings , this issue is sometimes resolved by clearing cache , cookies , and changing a few browser settings etc on IE 6.0 . If this doesn't work then upgrading to IE 7.0 definetly helps . Since this is just a workaround , I would like to know if anyone has experienced such a thing before and has a solution for this . Your inputs will be highly appreciated .
Regards
Mayank

Hi Mayank,
This is an error which happens when there is No roles assigned to the user. I am not sure how your systems are designed for User Management. Say for example in some cases LDAP is used to maintain Group to User Relationships and Portal Roles are connected to Groups therfore all users in the group is assigned to the Role. In some cases UME is used.
Having said that you can disable the cache for the browser. You have to compromise with the performance however, this will ensure that everytime the user logs in, the request will always go to the server.
Regards
Avik

How do you test portal roles and/or ESS roles if testid is not in LDAP?

We have a process but it is hard to maintain and not very secure. I was wondering how other Security Admins solve this problem.
For examplle, we have users who use ESS, MSS, Adobe Forms and a few other portal roles. And, all of them are using the LDAP to authenticate users.
Our Basis guys have created test ids in the Portal but they need to be asisgned directly to a pernr (on Infotype 0105) in order to obtain the right information in the portal.
I'm curious as to how others maintain this process.
All suggestions and recommendations are welcome.
Thanks,
Penny

If the Basis team has created the test-id on the portal, assign the MSS/ESS role as per the business process
make sure to create the same userid on the backend system and assign the userid to a pernr
Assigning userid to PERNR lot of postings are available to do this please search.
Also I remember at one of my customers project the portal was configured to have "parameter setting" on the portal rather than the backend system.
summary: Userid - UME/LDAP ( Basis already created it in your case )
                              Portal roles ESS/MSS   - assigned to userid
                              ECC/HCM system roles -assigned to userid ( after PERNR is tied to userid)
                              Paremeter setting to be done on portal
Regards

How many portal roles are needed for multi-country ESS?

we are implementing ESS for multiple countries.
has anybody tried to use one portal role for all countries?
the new ESS business package comes with one ESS portal role that has content for all countries. I was wondering if we can use this role as-is (after making a copy of course) to present content for all countries, instead of creating one portal role for each country.
Regards,
Tiberiu

in Employee Self-Service > General Settings > Homepage for Self-Services > Resources> Define Resources
did you have to enter the PCD path to the country-specific iView?
In that path you associate any resource to a Portal Page. Just change the PCD Path for custom Pages only.
Only the services are "country-specific" (because they have assigned a MOLGA). Follow the path from my previous answer to add any country-specific app.
the standard installation does not have the PCD path populated, it has the name WebDynpro application component instead
This is common issue. Depending on how the installation/upgrade was performed, the resources table is populated or not. But if is not populated, the "URLof PCD Page" property is taken from client 000. In my last implementation, i expected this issue, but i not populate manually this property and everything works fine.
Kind regards

Error Message when I click on "Roles" Tab in BeX Portal New Analysis.

Hello,
When I go to the BeX Portal -> BeX Web Analyzer -> New Analysis -> Roles, I get the following error:
"Components XXX (version A) do not exist on the database
Components XXX (version D) do not exist on the database
Components XXX (version M) do not exist on the database"
When I click on the messages, the screen that comes up gives the following info:
"Diagnosis
You have attempted to open query XXX from the Query Designer. However, this query does not exist in the database in the system to which you have made a connection.
System Response
Opening the query was terminated.
Procedure
Make sure that you have connected to the correct BW system. Note: The query may have been deleted by another user."
But there have been no query deletions after the Role tab moved in.
Please suggest what could be the reason behind this. And what should be done to resolve this.
Thanks and Regards,
Labanya.

Labanya,
Try using table RSZELTDIR
This contains details on queies and all elements that make up the query such as variable, key figs etc..
In the error you should be getting a string someting like: D19UMFAK5JTYJ31B30BRGSQEU
In this table I would recomend just taking the first 8 or so cahracters of this string followed by *
ie: D19UMFAK* - in the ID selection field.
Hope this helps.
Samantha

Issue when I copy a role of ESS and MSS in the portal

Dear Experts-
I have the following issue.
We have copied the role of ESS for the users. However we are implementing ESS for several Country and for this we copied the role of ESS Standard. However when we do this whe system created this role for the user already created ie.
We have employee for a country A. For this country A we created the Role of ESS_A. And Assign this role for the employee Juan. Now for the country B we created a role with the copy of the role standard of ESS, however the new role ESS_B is displayed in the roles assign to the employee Juan.
Anyone can help me with suggestions for this issue, please.
Thank in advance for your help.
Best Regards
Carmen

Hi Mayank. I understant the use of the property"Invisible in Navigation Areas".
We have employees for country A, country B, country C, country D. Each country should display some Page of areas and other not.
With the suggestions of BALA of use the FM HRXSS_SER_GETMENUDATA, I hid the page of area for the Country B, Country C , and with the proxy dynamic class i hid service for some Page of Areas that should be show for a country and not for others.
My doubt is: How Can do the same for the Workset, ie. Worsket dynamic that depending of the country the system hide or show a worset of the same form that I can do with the Page of Area.
For example.
With the imagen following:
[Image|http://www.freeimagehosting.net/uploads/13b9cee5e2.jpg]
For the Country A, C This Page of Area Should be displayed and for the Country B, D the Page of area Horario de Trabajo not should be displayed. With the use of the FM HRXSS_SER_GETMENUDATA, I hid the page of area for the country B, D. But the Workset Horario de Trabajo not can hide. If I use an only Role and use the property "Invisible in Navigation Areas" the system hide Workset Horario de Trabajo for all the employee of the Country A, C. And this not is the requirement of the company.
Thank in adavance for your help.
Best Regards
Carmen G.

Can anyone help me understanding the links between Launchpad roles, PFCG roles, and portal roles!?!

Hi experts,
I am looking at the newer EhP5 and EhP6 functionality for ESS and MSS, specifically the WD ABAP portal applications. I've turned on all the business functions and services I think our team wants, however I'm confused on how to move forward in using them. For a little tech info, we are on EhP6 for the backend, but our portal is 7.02.
My first step was to assign the com.sap.pct.erp.ess.wda.Employee_Self_Service_WDA portal role to our test ESS user group in our sandbox environment. The ESS user got a new ESS tab in the portal and it's linked to the Launchpad role ESS, Instance MENU. I'm comfortable with ESS at this point, still need to learn more about customizing the menu for different employee groups without creating additional Launchpad or SAP roles.
Question 1: Correct me if I'm wrong, but is the Launchpad roll ESS, instance menu linked to the PFCG role SAP_EMPLOYEE_ESS_WDA_2?
Next, I was looking to see if there was a similar portal role for MSS, but it seems I can't find one. I implemented the MSS Addon 1.0 for ABAP and the portal and got a new MSS portal addon role, but it doesn't seem to be connected to any MSS Launchpad role.
Question 2: Is there a portal role to assign to users/groups that is linked to one of the MSS Launchpad roles? If yes, what business function or service is it a part of?
I'd like to use of the existing MSS Launchpad role to test some of the new portal functionality, but I'm not sure how to do it.
Question 3: How is a Launchpad role assigned to a SAP role in PFCG? Anyone have some documentation they can point me too?
Kind regards,
Garrett Meredith

Thank you Samuli, this was very helpful in connecting many of the pieces.
For now I have a very good understanding of how the new ESS is controlled and modified.
It appears that FPM_LAUNCHPAD_UIBB could be used to develop a similar component to call a custom launchpad role for MSS containing a customized list of WDA applications.
Is a MSS Launchpad a good way to pursue since we use a SAP enterprise portal?
I found a PAOC_MSS package containing other MSS embedded packages.
Could I use one of the embedded packages in there and by creating a Component configuration in the FPM_LAUNCHPAD_UIBB for one of the MSS WD applications?
Based on the documentation link above, PFCG roles are for NWBC HTML or Desktop versions.
Kind regards,
Garrett

Web/UME Services to fetch list of Portal Roles??

Hi All,
Are there any out of the box Web or UME services available which can fetch list of Portal Roles based on certain criteria.
Basically I am looking for a service that will fetch list of all Portal Roles (PCD & UME) and will take couple of input parameters, a Role Name/ID & the permission property "Role Assigner"
Thanks
Sandip

Thanks for your reply.
But I guess these forums shows how to retrieve roles & its sub-ordinates for a particular user. Where as I am trying to retrieve all PCD roles for which I have "Role Assigner" permission.
Basically I am building a delegated admin functionality on Portal using custom coding. It is the same as Portal out of box Del User Admin but I am not using it because of some other enhancements.
I will have many user admins and the roles they can assign to users are determined by the "Role Assigner" permission. So its like, User_Admin_RoleA has access to 5 Portal Roles, User_Admin_RoleB has access to some other 5 roles and so on.
So just wanted to know if there are standard Portal service (like we have for KM) available to do this.
Thanks
Sandip

IView to show Portal Role User Assignments

Is there a Standard iView which can show what users are assigned to a portal role?
Thanks.
Regards,
Mel Calucin
Bentley Systems

You can use delegated user administration to control the access
http://wiki.sdn.sap.com/wiki/display/EP/ConfiguringDelegatedUser+Administration
If you want only read-only access
1. Copy the standard User Admin role from Portal Content - Content Provided by SAP - Admin Content - User Administrators
2. Paste it in one your own custom folders
3. Adjust the name and ID and remove unwanted areas in the custom role (like Import and Activity Reports)
4. Go To User Administration and search and select the newly created role.
5. Select the Assigned Actions Tab and remove all the actions and just add the UME action - Read_All
6. Save your role and assign it to a test user (without the user admin standard role) to verify.
Thanks
Prashant

How to to add gp process as portal role workset

Hi all,
I have made a compllete process in GP
The name of thr process is - Process1.
I have a role in the portal -testrole.
I want the above process to be available to the testrole as a workset of the role
How am i to achieve this?
Please help.
Points assured for help

Hi Shobendra,
Here is the way to show your process directly under the 'Roles' Tab
1)Go to process in design time and select 'Instantiation' tab
2) Check the box 'Start Process Automatically'.
3) Click generate instantiate url and save it locally somewhere
4) Now go to content administration and create a new iview of type---->
"<b>Web Dynpro Java application - Create iViews from deployed Web Dynpro Java applications</b>"
5) Create a "single full-page iView from each application variant " and click next
6) now select <b>sap.com--->cafeugpuiinst-> com.sap.caf.eu.gp.ui.inst.AInstantiation--->AInstantiation</b>
7) Make the iview and page as it guides you.
8)Now Edit the iView which you have created.
9)Put the "instantiate url" which you got in 'step 3' in 'Application Parameter ' property of iView.
10)Save and generate preview.
That process should open in a new window.
11)Now attach this iView or Page to ypur role or make a workset, attach the iview to workset and add that workset to Role.
Hope this helps.
Regards,
Piyush

SRM Portal roles are not getting accessible

Hello SDN contributors,
I have a strange burning issue. Please help me out.
Issue:
When I assign any SRM Portal roles to users,roles are not getting accessible until I assign a custom ESS(HCM) role in the backend ECC system which is mapped with a portal ESS role.
After doing this only from Portal front-end perspective ,SRM users are getting access on SRM roles.
But I do not able to find out the possible reason behind this.
Please suggest me to get out of this issue.
Regards,
Sriram

Hello Bala,
First of all thank you for your response.
Yes , I'm sure that the back-end role is mapped to only ess role not to SRM roles.
Unable to find out the origin for this issue. Please throw some valuable suggestions on this.
Regards,
Sri ram.

Page w/3 Iviews will not display all iviews thru Portal Role?

Hello All,
I am having a problem with getting 2 of 3 iviews to display through my portal role(s). 1 of the iviews is a copy (generated thru the wizard with same properties) of the SAP Bank information iview and the other 2 I created in the KM content (1 is an image and the other is html). If I preview the page, I see all 3 of my iviews with no problem.
Just a little history, I created a new area page called payments which I tied Bank Information and w-4 to via config in the back end. I z copied all my resources and tied the correct PCD to them.
It almost seems that it is still calling the SAP delivered Bank information? But, I checked all my config and nothing that is configured is pointing to there iview/page?
Any suggestions would be greatly appreciated.
ESS 1.0 - EP7.0
Thanks,
Mike

Hello Priya,
Thank you for getting back to me so quickly on this. I did create a z copy of the bank information service and called it z_employee_bank_us_serv05. I created the iview with application name 'per_bank_us' and as for the 'Application Parameters', I did not fill anything in which leads me to my next question.
I know when I create a new area, that I need to fill in the application parameters of the path to the 'Area group pages'
(Example: sap.xss.menuarea=Z_EMPLOYEE_BENEFITPAY_ERP2005&sap.xss.menuargrp=Z_SAPDEFAULTESS_ERP2005&sap.xss.menuhdr=SAPDEFAULT),
What would the verbage that would need to be added to the application parameters for this just to point to the service?
THX

Customizing availability of Portal Roles/TABs (ESS)

Similar Messages

Maybe you are looking for