ESS UI5 role import problem on Portal

Dear Gurus,
I have tried to import pfcg role for ess ui5(SAP_EMPLOYEE_ESS_UI5_1) into portal, it is not importing and not giving any errors as well.
other than ESS all are importing into Portal.
My Portal Version is NW7.4 and ECC 6.0 EHP7 HR Renewal FP 04.
could any one please suggest why this is happening. In Sandbox and development is working where as QA is getting problem.
Thanks in advance .
Regards,
cbr.

Hi,
Have you checked the gateway error log, transaction - /IWFND/ERROR_LOG as this should identify what is missing (under the menu option 'Error Log > Global Configuration you may want to change the error log level to 'Full' otherwise some detail is hidden).
Have you activated the TASKPROCESSING Odata service?
This thread may help UI5 Approval - Missing OData Service TASKPROCESSING
I am also having issues with the Approvals lane when I lauch the tasks that I have just raised a thread for.
Regards
Jon

Similar Messages

Ess/tra pachage import problem

when i try to import this pachage i read the error
" General VFS error ".
what is the problem?
enother pachage import?
please help me thanks

Hi,
Have you checked the gateway error log, transaction - /IWFND/ERROR_LOG as this should identify what is missing (under the menu option 'Error Log > Global Configuration you may want to change the error log level to 'Full' otherwise some detail is hidden).
Have you activated the TASKPROCESSING Odata service?
This thread may help UI5 Approval - Missing OData Service TASKPROCESSING
I am also having issues with the Approvals lane when I lauch the tasks that I have just raised a thread for.
Regards
Jon

Portal Export / Import Problems

I'm trying to export a Portal application from a solaris development machine running Portal 3.0.7 to a solaris production machine running 3.0.8 and I'm having problems.
As a starter I thought I'd try just the Login Server and the Security bits in that order.
Everything seems to go okay with both the export and import using ssoexp.csh/ssoimp.csh and secexp.csh/secimp.csh but when I navigate to the new production site and try to login with one of the usernames and passwords that should have been imported, I get an authentication failure.
Any ideas ?
Thanks
Garry

Folks,
Here is the output I receive after running the appropriate import scripts
Import of Login Server
Initializing Merge ...
Initialization Complete
Activity Log:
Merging import SSO data with existing data
The user PORTAL30_SSO with Login Server role FULL Exists ...
... The imported user has Login Server role = FULL
The user PORTAL30_SSO_ADMIN with Login Server role FULL Exists ...
... The imported user has Login Server role = FULL
The user PUBLIC with Login Server role USER Exists ...
... The imported user has Login Server role = USER
The user PORTAL30 with Login Server role FULL Exists ...
... The imported user has Login Server role = FULL
The user PORTAL30_ADMIN with Login Server role FULL Exists ...
... The imported user has Login Server role = FULL
Disconnected from Oracle8i Enterprise Edition Release 8.1.7.0.0 - Production
With the Partitioning option
JServer Release 8.1.7.0.0 - Production
Import of Login Server User Information Complete
Note: A imported user has to login to the Login Server with
password the same as his/her user name and reset his/her password.
Import of Security data
Initializing Merge ...
Initialization Complete
Activity Log:
Merging imported security data of Portal with existing data
The user PORTAL30 exists with ID: 0
The user PORTAL30_ADMIN exists with ID: 1
The user PUBLIC exists with ID: 2
The user PORTAL30_SSO exists with ID: 3
The group AUTHENTICATED_USERS exists with ID: 0
The group DBA exists with ID: 1
The group PORTAL_ADMINISTRATORS exists with ID: 2
The group PORTLET_PUBLISHERS exists with ID: 3
The group PORTAL_DEVELOPERS exists with ID: 4
Disconnected from Oracle8i Enterprise Edition Release 8.1.7.0.0 - Production
With the Partitioning option
JServer Release 8.1.7.0.0 - Production
Import of Security Data Complete
From the output you can see that there is data being imported for the Portal users but not OPDSTATS the user I wish to use, and have created on my development site.
However the WWUTL_SSO_TX_PERSON$ table has an entry created for OPDSTATS. I have compared the encrypted passwords for opdstats on dev and prod databases and they are the same.
The logon user OPDSTATS uses a schema called OPDUSER that is not created on the database after import of both Login Server and Security.
I can however logon as portal30 and have tried updating the table WWUTL_SSO_TX_PERSON$ with the portal30 encrypted password for the opdstats user, again this was unsuccessful.
Any idea anyone ?
Thanks
Garry
null

Importing master role from ECC into portal throws derived role exception

Hello,
While uploading master and derived role from backend system into the portal I am getting the following exception.
com.sap.portal.pcd.rolemigration.RoleMigrationException: Nested Exception. Failure to execute native function. Nested Exception. ROLE_IS_DERIVED
Does it imply that the derived role is already imported with the import of master role and there is no need to explicitly import the derived role?
The landscape uses role upload tool of portal for UME.
Regards
Pooja

Hi Pooja,
There is a limitation with the role upload tool that the derived roles cannot be uploaded.
The migration is only able to upload roles which have their own menus. Derived R/3 roles does not have menus themselves as they derive them from other roles. The purpose of the migration is to bring the R/3 navigation structures into the portal. Therefore you can only migrate the role from which your role is derived.
Regards
Anja

Work around portal's export/import problem

Hello.
Here in Spain we have tried Oracle Portal's import/export several times with no success (our last attempt ended in Metalink cases 1911182.996, 1911205.996, 2132048.22, 2132045.22, 2132043.22, 2132049.22, 1870233.995 and 2132042.22) . Maybe part of the problem is that our content areas are in Spanish. Anyway, we have given up on that import/export. Right now what we are doing is moving the control and data files whenever we HAVE to take our portal to another machine. We are looking for another way of doing it. This is what we are trying to do now:
DESTINATION DB
==============
* start with a portal installed here
* create the script that will later enable the constraints of schemas PORTAL30_DEMO, PORTAL30_SSO_PS, PORTAL30, PORTAL30_SSO
* disable the constraint of schemas PORTAL30_DEMO, PORTAL30_SSO_PS,PORTAL30,PORTAL30_SSO
* truncate all tables in these schemas (except WWSEC_ENABLER_CONFIN_INFO$ in portal30 and portal30_sso)
* drop sequences
* import these schemas' tables and sequences from the origin DB
* enable the constraints
* if necessary run the ssodatan
Has anybody done it already? With what results? How are you importing/exporting a portal right now?
If this doesn't work (we believe it will) we will look at portable (?) tablespaces.
Thank you, Mere.

Has anyone followed this migration while paper?
As far as I can tell, it takes nothing from the portal30 schema. Not sure how the applications will get set up without importing some of this data

Problem with Role import in GRC 10.0

Dear GRC Gurus,
I want to import roles from backend to GRC 10.0 system. for this I am using NWBC.
In NWBC --> Access Management --> Mass Role Maintenance --> Role Import --> in this age below OPtions are selected:
Role Selection --> Technical Role
Import Source: Role Attribute Source: User Input, Role Authorization Source: Backend System
Definition Criteria:Application Type: SAP, Landscape: nothing is shown in the dropdown, Source System: nothing is shown in the dropdown
Without Defining Landscape and Source system I cannot proceed further
Please advise why the system is not showing up the values in the dropdown.
I have maintained role status as production in SPRO.
I appreciate your help.
Thanks,
Swathi

Hi,
Sabita is correct.
Here is the link to the documentation
SAP Access Control 10.0
Simon

Automatic upload of roles from ECC to portal (UME with LDAP)

Hi experts,
This thread reopen the question asked on the following message : automatic upload of roles from BI to portal
However, it concerns this time "UME with LDAP".
Problematic :
SAP Library 04s tells us that is not yet possible to automate role replication (or role assigment replication) from ABAP Based back-end to Netweaver Portal. Only manual process for initial upload is possible.
Source = http://help.sap.com/saphelp_nw04s/helpdata/en/41/5e4d40ecf00272e10000000a155106/frameset.htm
Questions :
1 - Did anyone ever try to implement such an automatic tool ?
2 - What if I'm not able to write on the Active Directory ? I am still able, at least, to automate role assignment replication from ABAP Based back-end to Netweaver Portal (ie. UME with LDAP) ? Directly from SAP R/3 to EP through UME, without passing through Active Directory since the group field is not maintained in AD.
Many thanks for your inputs
Alexis MARTIN

Hello,
As I did not read the previous thread I don't know what exactly you are trying to achieve, but I can tell you about what we have done - as far as it is not too late yet.
We use the portal with integration to a BI system. In the ABAP stack we have lots of roles with menu items for hundreds of reports. We want the users to see these roles in the portal.
First we have used the role migration tool of the portal to upload these roles. There is a Java API for executing role uploads from code. You need to create a webservice in the java stack to call this api, and can call the webservice from ABAP.
However it is just a question of time and role size until this will not work at all. Standard role migration is more or less crap, stability is a problem. It also creates a lot of logs in the PCD and thus fills the database with trash. (After a few OSS messages there is now a program for deleting logs + you can turn of logging.) Also upload of larger roles takes up to an hour, and you alwasy have the problem that your portal roles are not up to date during the day.
When I got completely fed up, I have implemented an own navigation connector. When you log on to the portal it will connect to the ABAP stack via RFC, load the role, and generate the portal menu from it. It uses caching, but on every logon it checks whether the role has been updated in ABAP since the last time it was loaded. It is up to date, faster then PCD navigation, and you need absoluetely no periodical synching at all. I cant even understand why this is not offered by SAP per standard!
Drawback is that it will of course only work for the menu items, and only menu items with an "URL-type" are supported. I'm prettry sure however that it would be possible to implement a few other types as well.
Let me know if you are interested in the solution, I can give you a few additional details: oliverDOTsvisztATwienerbergerDOTcom
Oliver

ARQ: Role Import does not show roles in the preview

Dear All,
Recently I upgraded our system to SP#14. Now when I try to import roles from NWBC->AM->Role Mass Maintenance->Role Import, it does not show roles in preview. Also, it does not import the roles specified. (either a range or full name of the role). It does not even give any error message.
I implemented SAP note#1897975 Role import does not show roles in the preview.
Still facing the same problem. Has any one faced this problem? Please suggest.
Regards,
Faisal

HI Faisal,
This note(1897975) you have to implement in Plug-in System, try to check the same once and let me know if it resolves our issue.
Regards,
Neeraj Agarwal

Mass role Import in ERM "unable to determine matching org. level" Error

I am trying to upload the Derived Roles into the ERM. I have already uploaded all the Parents Roles. The volumes of the Derived Roles is huge in my SAP Backend system.
I am not able to understand what should be the content of Org File which we upload. Please correct if I am wrong
1>Example a role Z_TEST_D is derived from Z_TEST on the org levels EKGRP,KOART,GSBER,WERKS.
2>I have run Org Synchronization Job in the ERM
3>Downloaded Z_TEST (Parent Role) and uploaded it into ERM(It was easy because there was no org file)
4> Downloaded Z_TEST_D(Derived Role) through /VIRSA/RE_DNLDROLES Tcode in backend.
5>Downloaded the AGR_1252 information for this role which contained the Org levels and values
6>I put all those information into the Org File and then tried to upload it throws me the error Role Z_TEST_D : not imported; unable to determine matching org. level for WERKSin the system
So I again tried with the another method by changing the input sheet for the Org File
Z_TEST_D BUKRS 0* 9*
Z_TEST_D EKGRP *
Z_TEST_D KOART *
Z_TEST_D GSBER *
Z_TEST_D WERKS *
and tried to upload it again gave me the same error. I have checked the ERM all these Org Levels are fetched into the ERM. I am not sure if I am missing any basic things.
Current Support pack: SP10 Hot Fix 2.
Please share your experience and best practice to upload the roles,

Hello Rahul,
I had that same problem with SP10 also. The way I resolved itand this sounds crazywas to move that WERKS line up one or two rows.
The problem I noticed was not with all derived roles, but when there was a problem, it was always the last line of the Org file for the role that was causing the problem. And the problem was not always WERKS either.
If the next time you run it, the error occurs on the "new" last line (e.g. GSBER), move that line up also. Eventually they all make it in. I have not seen this problem repeated in SP12. Don't delete the line, just shift the order within the number of rows the role has.
P.S. I have several hundred derived roles, about 10 - 15% had this import problem.
-Dylan

Custom ESS/MSS ROLE under ADMININTRATION workset - How to approach?

HI
Dear
ESS/MSS Experts,
We have a requirement with our client for a custom development ESS/MSS ROLE under ADMININTRATION workset for the functionality.
ADMINISTRATION(workset)
This workset provides administrative information regarding an employee. The services available under this workset are:
INBOX(service)under--->This service will show the SAP inbox for an employee. The details shown on the screen are,
u2022     Inbox
u2022     Outbox private
u2022     Shared
u2022     Resubmission
u2022     Trash
how can i implement in portal...
I am New From Portal consultant so kindly please help me its very much helpful.
Regards,
Rafi Shaik

inbox you meant UWL ie universal worklist
first note that SAP provides standard roles and you can copy it to z role and modify it accordingly and remove the roles
as per required/
For ESS, the standard composite role is SAP_EMPLOYEE_ERP. You can make a Z copy of this role and customize it per your needs.
http://help.sap.com/erp2005_ehp_04/helpdata/EN/a4/93554056bd1f24e10000000a1550b0/frameset.htm
There is no standard role provided for MSS applications. You will need to build one as per your needs.
See SAP Note 844639 for more details.
http://help.sap.com/erp2005_ehp_04/helpdata/EN/a4/93554056bd1f24e10000000a1550b0/frameset.htm
https://www.sdn.sap.com/irj/scn/wiki?path=/display/bpx/uwl+faq

ESS & MSS Role

Hi Experts
How to map ESS & MSS roles to ECC 6.0 Roles in EP.
Say for example in ECC 6.0 we have a user A and User B.
User A have some addtional attributes and User B does not have it
How to map this two users in EP.
Thanks
Daya.
Edited by: daya damu on May 27, 2008 8:27 PM

Hi Daya,
You will have to do the user mapping,
It can be done in two ways,
1. Go to user administration and once you enter user A, you will have an option of "User mapping".
2. When you are logged onto the portal, click, personalize option and choose "User Mapping".
User mapping is basically done when the portal users and ECC users are different.
Let me know if you need any further clarification on the same.
Cheers,
Sandeep Tudumu

Role Import in CUP

Hi
There are two options of choosing the source system for role import in CUP
1. Back end system
2. ERM
I am facing problems in importing roles in CUP from ERM. The system shows a successful import but the number of roles imported are Zero. However if I choose the Backend system as source system, the roles get imported in CUP.
can someone help me with this issue. I want to import roles from ERM because roles imported from ERM will have all the role attributes like Business process, Sub business process, functional area etc which are not available if we import roles from backend.
Regards,
Nitin

Hi Sahad,
Did you look at CUP logs? Is ERM and CUP installed on same server? Have you configured Business process and sub process exactly same as in ERM?
There are 2 ways to upload roles into CUP using spreadsheet:
1) Cumbersome method, if you don't have roles maintained in Excel: You can get R/3 roles via SUIM or some other method and manipulate them to match the role import template of CUP
2) Easy method : Import all the necessary roles into CUP via Backend. Once you have all the roles in CUP, go to 'Search Roles'. Click on 'Search' button without providing any search criteria. This will return all the roles available in CUP. Now, click on Export button. CUP will export all the roles into Excel spreadsheet in the format which CUP understands. Now, delete all the roles from CUP and play with the spreadsheet to manipulate other parameters like role approvers, systems, business process etc and upload that spreadsheet into CUP.
Both these methods require some manual work.
Regards,
Alpesh

Role Import to ERM

Hellow Eperts,
I imported roles to the ERM from SAP ECC, SRM, CRM, BW systems.
When I searched for the roles in the ERM system, all the roles where at the "Derive roles" level instead of "approval" level (or being comleted).
Do you know why did it happen?
Thank you,
Shira Tzur

Hello Rahul,
I had that same problem with SP10 also. The way I resolved itand this sounds crazywas to move that WERKS line up one or two rows.
The problem I noticed was not with all derived roles, but when there was a problem, it was always the last line of the Org file for the role that was causing the problem. And the problem was not always WERKS either.
If the next time you run it, the error occurs on the "new" last line (e.g. GSBER), move that line up also. Eventually they all make it in. I have not seen this problem repeated in SP12. Don't delete the line, just shift the order within the number of rows the role has.
P.S. I have several hundred derived roles, about 10 - 15% had this import problem.
-Dylan

Mass Role Import -- 9000 derived roles with 9 org Levels, how to get TXT

Hello,
I hava a problem.
I want to use the (Mass Role Import) Bulk Role Import element in the ERM (SAP GRC AC 5.3 )for importing SAP roles (I only found that way to import roles from SAP).
I have 100 primary roles and more or less 9000 derived roles with 9 org Levels.
Is there a way to get this 9000 derived roles with their 9 org Levels in a TXT file?. Or do I have to do it manually this part to insert it in the "Bulk Role Import ".
Can someone help me?
Thank you in advance.
Pablo Mortera.

Hi Mike,
what kind of TA´s are in your role. Is it possible to integrate a "dummy" TA (without conflicting
your SOD)?
In my example I have CO TA´s bundled in a role:
Role: ZXXXX_O:CO_ORDERMANAGER_CRE - CO Order Manager Pflege
with
KO01 Create Internal Order ...
KO02 Change Order ...
KO04 Order Manager ...
KOK2 Collective Proc. Internal Orders ...
KOK4 Aut. Collect. Proc. Internal Orders
update this role with TA KO01 and KOKRS will be available for derivation.
Done this manually without import in ERM.
Reg,
Ulrich

Mass role import

Hi guys,
i have a problem with mass role import. When i want to do a mass role import the system warns me with the following error: Failed processing; role not imported and the log does not help.
Thanks in advance!!!
Kind regards!!!
Isaac

I attach the System Log
2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]3b0c[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!ZAP:SOL_ANT_VIAJES_COMPEN-G102 : ]
2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]6f28[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!CO:RPTE_CO-LLAD : ]
2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]b79e[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!GL:VIRL_CTAS_CONTAB-ALL-CTRL : ]
2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]608b[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!TR:ADMR_DATOS_MTRO-G103 : ]
2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]b29c[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!GL:ANAL_VALU_MONETARIA-ALL : ]
2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]55c2[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!AR_SOL_ANTICIPO-I102 : ]
2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]8e78[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!Z_FI_TX_S_ALR_87012083 : ]
2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]08f5[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!/VIRSA/Z_VFAT_ADMINISTRATOR : ]
2010-04-08 09:10:54,788 [Thread-1507] DEBUG BackgroundJobHistoryDAO before

ESS UI5 role import problem on Portal

Similar Messages

Maybe you are looking for