Extent of abaper role in SAP Console

Hi
Please let me know the procedure that an ABAPER has to follow in the programing of SAP CONSOLE for RF devices.
Raju.

Hi,
I have a requirement to develop an application which will be used in an RF device. In case of ITS MOBILE we will develop a module pool program, an ITS and ICF. Like this what all the technical requirements going to be there while going for an SAP console.
Venkat.

Similar Messages

Abap ECC SAP Console guide

Hi,
I am looking for an abap best practice guide for SAP Console on ECC6.
Anyone know a link?
Is there a big difference from developing RF screens in 4.6?
Thanks,
Kroc.

Hi,
thanks for that. Maybe 'Best Practice' is the wrong term to use, seeing as SAP use it for their own purposes.
I am looking for a developers guide for creating SAP Console Screen's in ECC 6.0.
And RF = Radio Frequncy.
Previously SAP suggested copying SAPLLMOB and modify your screens from there. Just wondering if that i still the same.
Thanks.

Roles In SAP Web AS ABAP would not appear automatically in J2EE Engine

I have an ABAP+Java Addin Instance Installed.
When I create a user, it shows up in the Jave Engine when I goto Services->Security Provider.
But the ABAP roles would not show up in the Java Engine.
Please advise..

HI,
It depends on the UME chosen,
You need to ensure your ume config allows groups to be created. check the xml you have chosen,
also permission for sapjsf.
Cheers,
Chetan

J2EE roles vs Portal roles vs ABAP roles

(I also posted this on portal implementation, but i hope i receive more reactions here )
Dear all,
I have a question about the information on the following link:
http://help.sap.com/saphelp_nw2004s/helpdata/en/4c/6c0f40763f1e07e10000000a1550b0/content.htm
It says the following:
"These functions are intended to assign users and their assigned portal roles a corresponding role in the SAP System. This corresponding role (authorization role) contains the authorizations needed to execute certain functions from the portal."
1. These "...certain functions..." they talk about, can someome give an example of these functions?
2. Is it possible for example to create a role in the portal that gives a user authorisation for starting transaction SE80 in the backend system? Without making the role in the backend first and uploading it to the portal.
3. It's also possible to upload ABAP roles to the portal. Is the main reason for this that users can see their SAP menu (or part of it) in the portal? Or does this have other advantages too?
4. I'm very confused about the relation between J2EE roles, portal roles and ABAP roles. Is it possible to manage the roles for a user in one place, without having to do certain actions in the portal AND the backend system?
From what I've read on help.sap.com, you always need to do certain actions in both places.
A possible approach is the following (from what i know): Creation of roles in the R/3 system, without assigning to users. From a webdynpro application, a user can then be created and roles can be assigned: portal roles (via some API) and R/3 roles (via BAPIs).
I hope someone can give a bit information on this issue. I've done alot of reading on help.sap.com, but it's still an abstract issue for me.
Kind regards,
Joren

Hi Jorem
Re: point 3. I don't build portal roles through this mechanism as I don't believe in replicating the SAP easy access menu inside the portal. If there are some specific functions (transactions) that I want to run inside the portal, then I might use this mechanism to build the iViews once. I would rather start an iView that runs transaction SMEN and let the user see their regular easy access menu.
Please note that the speed of executing transactions in the portal isn't a function of the portal, but the fact that you are using ITS, for example, to web enable the transaction...
Re: point 4. Groups are a UME concept. They have nothign to do with ABAP groups. They can be created directly in UME through user administration functions, or they can be created in the LDAP and then they are visible in the portal. If the UME points to an ABAP system, then the ABAP roles are autoamtcially visible as UME groups. Groups created in the UME need to have the members assigned through user admin functions of the Java engine. Groups stored in LDAP are maintained using LDAP admin tools. There are upload utilities that allow you to maintain LDAP users and groups through text files. Google LDIF for more details.
Roles on the portal need to be built in the portal contetn directory. As Michael mentioned, this can be automated by the use of the role upload function built into the portal.

How to upload ABAP roles in Portal 6.0 N/W ABAP + Java

Hi ,
I have portal 6.0. How can i see the ABAP roles in portal. I know there is some backend system need to configured. please write step by step. I can create users in portal which is replicated in ABAP.
i have gone thru some forums but did not get the answer.
Regards
Atul-

Thanks for your reply... I am new to Portal. the document you sent me I did not understand where to configured backend system. please let me know where do I configured below information in portal
When you create a system with a connection to an ABAP-based backend system, you must maintain at least the following property categories and properties:
Property Category
Property
Connector
Group;
Logical System Name, e.g. QWACLNT100;
Message Server;
SAP Client;
Message Server;
SAP System ID
User Management
Logon method
User mapping type (if you want to take advantage of user mapping)
Internet Transaction Server (ITS)
ITS Description, e.g. qwa_its
ITS Host Name
ITS Path
ITS Protocol
Appreciate for your reply...
Regards
Atul

UME problem - ABAP roles not showing up in UME

Hello,
I'm having a problem where the ABAP roles (UME groups) for my PI system are not showing up as assigned to a user in the UME. The roles assigned to the user are not reflecting the roles (UME groups) that are in the ABAP side. But, other users are showing up fine. The user is shown to have only the standard basic roles.
This works fine on my development and AS system. Any help would be greatly appreciated. Thanks.

Hi George,
There is a 30 minute delay before these roles/groups show up in the Java system. Could that be the problem in your case?
See the [documentation|http://help.sap.com/saphelp_nw70ehp1/helpdata/en/45/af3ac012d32e78e10000000a155369/frameset.htm].
-Michael

Best Practice ECC RF SAP Console

Hi,
I am looking for an abap best practice guide for SAP Console on ECC6. Anyone know a link?
Copy all SAPLLMOB or as each screen required, screen development etc.....
Thanks,
Kroc.

closed - no replies

ABAP Reports and SAP Query

Hi Experts,
I have question regarding ABAP Reports, SAP Query, and Transaction with variant. How are we securing one the above reports that we assign them through pfcg. We can secure custom program by custom transaction or define the auth group in S_PROGRAM auth object but in this case we have to assign SA38 in production. is that correct?
Please help me understand difference between the ABAP reports and SAP query. Is the ABAP reports same as Program or they are different.
Thanks in advance
Faisal
Edited by: Faisal on Jun 30, 2009 11:06 PM

Hi,
1) End user security (role matrix coordinate with process team)
This role Matrix design is most important where we can put restrictions and use SoD.
2) Secure Table (by auth group)
Table TDDAT and use of transaction se54 for security tables to right auth Groups. Secure s_tabu_dis, s_tabu_cli.
3) Secure program (as you said ABAP reports are referred to Program)
Use of table TPGP and program RSCSAUTH for assignment of groups to Program. SA38 Running of SA38 requires a minimum SUBMIT in user Action. A user having SA38 is dangerous as he/she is now enabled to run any report. Hence protection in Auth Group is needed. Verify each and every program is having authority check statement and Auth Group or not before assigning sa38. As you mentioned its best to avoid SA38 and create CUSTOM TXN for each report.
(We should also SECURE S_DEVELOP in Production properly along with ur points. Please Note).
4) Secure some batch jobs roles for batch job
Secure by s_btch* objects and less access to se36.
5) Create support roles for cutover activity during Go-live
That is always needed. Go ahead.
6) Emergency roles & IT roles for support
This is very much needed as a role of Mitigation and Fire Fighting for Temporary access. Ensure to enable ur audit parameters in RZ10 (rsau* sm20,RSLG* for sm21). Give emergency access but enable audit via sm19 and get audit reports from sm20 and sm21 immediately after the use of emergency access.
There are also other auth objects we need to be care ful which is a long list and hope every body ensures that (s_cts,a_admi,s_trans, tables ssm_cust, prgn,t000) etc and a host of others. Besh wishes. Let us know if any issue.
Regards
Aveek.

Documentation for PI ABAP roles

Hi all,
is there a general documentation for the PI ABAP roles? I assume something like that:
- User should access J2EE Adapter Engines / SOAP Adapter (used for sending a Webservice to PI from a 3rd Party Application) --> necessary role abc
- User should be able to process Alerts in Alert Inbox --> necessary role def
- User should be able to create repository objects --> necessary role ghi
- User should be able to create scenario objects in intergration directory --> necessary role jkl
What I still don't know which ABAP role is used for which purpose. We'd like to assign minimal roles to the users.
BR
Holger

Hi,
Check in this link:
http://www.erpgenie.com/sap/netweaver/xi/xiauthorizations.htm
For alerts refer this:
The following predefined user roles are available for customizing and administration:
SAP_BC_ALM_CUST for customizing authorization.
SAP_BC_ALM_ADMIN for administration authorization. The administrator has the authorization for all activities. He or she can also read and confirm alerts for other users. In addition, the administrator can execute report RSALRTPROC to delete, escalate, and deliver alerts as well as to delete logs.
For the sending of alerts via external communication methods (e-mail, sms, fax) and for inbound processing, an RFC user has to be created on the central alert server with the role SAP_BC_ALM_ALERT_USER. The authorization objects contained in this role are S_OC_SEND and S_RFC.
Accessing alert inbox the userid has to have the role SAP_XI_MONITOR.
SAP_ALM_ADMINISTRATOR - Alert Management Administrator Give this rights
Refer the SAP_XI_ADMI topic and see the roles.
http://www.erpgenie.com/sap/netweaver/xi/xiauthorizations.htm
Refer link for user roles: http://help.sap.com/saphelp_nw2004s/helpdata/en/74/03b140ade49c2ae10000000a155106/content.htm
Roles needed for IR and ID:
Role: SAP_XI_Developer
SAP_XI_DEVELOPER (Composite)
SAP_SLD_DEVELOPER
SAP_XI_DEMOAPP
SAP_XI_DEVELOPER_ABAP
SAP_XI_DEVELOPER_J2EE
Role: SAP_XI_Configurator
SAP_XI_CONFIGURATOR (Composite)
SAP_SLD_CONFIGURATOR
SAP_XI_BPE_CONFIGURATOR_ABAP
SAP_XI_CONFIGURATOR_ABAP
SAP_XI_CONFIGURATOR_J2EE
SAP_XI_DEMOAPP
Regards,
Nithiyanandam
Edited by: Nithiyanandam A.U. on Feb 18, 2008 2:31 PM

As ABAP tasks in SAP Provisioning framework

Hi Experts,
In HR provisioning , for a new hire when a new MX_PERSON is created in Identity store , User accounts need to be created in the SAP systems from IDM .For this I noticed "AS ABAP tasks " in SAP provisioning framework with create/delete user "To custom" passes .
The Job which reads and writes HR data to identity store is not in provisioning folder . But these tasks discussed above are in provisioning folder in identity store. please advise as to how to call these tasks and create SAP accounts whenever a person is getting created in identity store.please advice .
Please let me know even if there is any alternative way to do this.
Thanks in Advance!

Just assign target system privileges via business roles to these users in the self-service UI and they're automatically created to the target systems by the framework.
This is assuming that you have connected the desired target systems, event tasks, ACCOUNT<TARGET SYSTEM> attributes etc correctly based on the documentation.
Edited by: pasikuikka on Nov 6, 2009 10:00 AM

R/3 Transaction Iviews vs Imported ABAP Roles on Portal

Hi,
In one of our requirement, Business needs to set up such that client should be able to have web based access to R/3 Transaction through Portal.
We can achieve that by creating system in portal and create Transaction iview with required T-code of R/3.
Whats wrong if we can define roles in ABAP system for a user with full hierirachy and import those ABAP roles into portals.and through portal we can give unified web based access to imported roles?
Does both the possibilities accomplish our need?what are main gaps between these two methods?
I want to go by Import method,Any suggestions please?
Cheers
Rani

Hi Michael,
I agree with you that the ABAP role has a complicated menu structure and uploading has to be done at regular basis.
Is there any mechanism through which any change in ABAP role structure in R/3 reflects in portal exactly so that there is no need of regular uploading?
If not?So in which business scenario uploading of ABAP roles into portals are helpful?whats the use?
Coming back to your second solution
It is much easier to have one transaction iView that starts transaction SMEN, which presents the user's full SAP menu in a single screen
But about about a user if he wants to navigate from this transaction SMEN to another transactions to which he is authorised to(R/3 Back-end)through this single Transaction iview.
In other words if we want to have access to 5 transaction iviews in R/3,do we need to create 5 corresponding transaction iviews in portals?How to achieve this requirement in a better way?
Waiting for you Reply
Bye and have a Nice Day
Rani

Can we rename ABAP roles in GRC Process Control to adhere to naming convntn

Hello,
We are working on a new implementation of the GRC Process Control 2.5 product. It comes with 11 standard roles. I wanted to change the names to adhere to our company's role naming conventions. Will this adversely affect any functionality. I know that in PC, there is a additional level of security that is maintained thru the NWBC. How will that be affected? And is it typical to have a non-sap security team maintain the roles/user thru the NWBC and have SAP Security maintain the ABAP users/roles?
Thanks in advance.

Hi Arvind:
We copied the standard delivered ABAP roles to our namespace, made a few additional changes and are using them no problem. We also copied the NWBC roles to our namespace. We have the default roles as reference. We did this for consistency, but also because ABAP roles and App roles can change as the App roles did in SP04. This way we compare the app roles before and after a SP to make sure we agree with any role changes introduced to default roles. This way, we don't unknowingly introduce changes to our roles based on the changes SAP introduces to their roles at any given point.
As far as the tester role goes, it is at the Process level. If you aren't sure go into the app under User Access => Roles and their tasks like you will assign it and restrict the selection to "proces". You will see it is at the Process level. As far as the rest goes, you seem pretty well versed in the security guide so I'm sure you know this, but as long as the level of the role is equal to or greater than the task you can assign it. Ex: You can assign a control level task to a Corporate level role but not a Corporate level task to a control level role.
I hope this helps.
Matt

Federation, remote role assignment based on ABAP roles on producer

Hi all,
We have implemented the federated portal solution for our ESS users. We use the ABAP stack of the producer portal as user store for consumer and have no problems in assigning portal roles on our consumer based on ABAP roles in the backend (displayed as groups in the portal).
Now we want to add some extra functionality (eg SRM and eRec) and we encounter some problems. These systems all have their own ABAP stack as user store. We have maintained the functional authorization model in the ABAP roles for instance in SRM. So an example:
System I: ABAP + JAVA --> ECC 6.0
Here we have the standard R/3 functionality and the producer portal (A) installed. Roles created on producer portal and assigned based on ABAP roles.
System II: JAVA --> NW 7.0 Portal
Our consumer portal (B) where we use roles created on the producer portal (A) on System I.
System III: ABAP + JAVA --> SRM
Our SRM system with SRM producer portal (C). In the ABAP stack of this sytem the functional SRM roles have been assigned to the users. We have created functional SRM Portal roles in order to use remote role assignment on consumer portal (B).
+PROBLEM+
We want to remotely assign portal roles created on the SRM Producer (C) to users on the consumer portal (B), based on the ABAP role assignment in the backend of system III. How can we achieve this in a fast and efficient way?
Looking forward to your ideas. Anything helpfull will be gladly awarded with SDN points.
Best regards,
Jan Laros

Jan,
Interesting question. Let me share my experience and hope that's of some use to you.
We started off federating corporate NetWeaver Portal (lets say B, parallel to your convention) as consumers to BI Portals (Lets say A).
- B's UME points to Active Directory
- A's UME points to BI ABAP user store
- User ids are identical in both systems
We ran into the problem of dual administration ((de)assigning portal role on both portals instead of just one) for a long time. The issue was because of different reasons at different times as we patched B's and A's. At one point we were on SP15 on both portals and we were told by SAP that RRA can be done on B for remote roles and the assignment propagates to A automatically if the following configuration is set up on both A and B.
- A's permissions are relaxed allowing "Everyone" group checked for "End User" access as per ([http://help.sap.com/saphelp_nw04s/helpdata/en/43/2236fc0b413fe1e10000000a11466f/content.htm|http://help.sap.com/saphelp_nw04s/helpdata/en/43/2236fc0b413fe1e10000000a11466f/content.htm]
However, we chose not to do the permission relaxation as enabling "Everyone" group with "End User" access can allow anyone to launch an iView (if the URL is known somehow) and the user would be able to see the layout of the iView, which can include text, etc. The user won't be able to access any data though, however, there is certain compromise on security which we decided that its not okay. So, we digressed in SAP's suggested practice because of security reasons.
Today we, manage security on B using Active Directory groups and on A using Java groups (ABAP roles).
In your case, I suggest investigating the option of relaxing the security on producer portal like in the above link. If you think its okay, all you have to do is, provision users on B by assigning remote roles from C and A.
Either my story is applicable or I must have got you totally wrong,
Kiran

ABAPer role in upgrade project

Hi,
Please let me know the ABAPer role with upgrade project. When Std programs updated by support packs what are the responsibility of ABAPers?
Thanks,
Praneeth

Hi,
Automatic- It means that there will be a green icon. You will have to just click it and it is done.
This is because the changes to the SAP Object have been done either via SNOTE for some note application or you have used the modification assistant. So SAP does not have any problem in determining the changes. So the adjustment is automatic.
Semi-Automatic - In this case there will be a yellow icon. This means that you have to make some manual adjustments. This is because SAP considers that the adjustments are proper but still there is some discrepancy.Probably this is because you have made some note changes and additionally inserted some comments like begin of changes by xxxx on yyyyy for note zzzzz.
So in this case SAP will give you a split screen editor in whihc your existing code and the one coming from support pack will come. So you have to adjust accordingly.
Manual Adjustment - In this case there will be a red icon. This means that you have to make the chnages manually. This is because SAP finds a lot of discrepancy in your program and the one coming via support pack. The reason can be either the earlier note was incorrectly applied or you have added your own code for some custom requirment. So again SAP gives you the split screen editor to make the adjustments.
Your assumptions about Reset to Original and Adopt Modifications are correct.
I hope it solves your queries.
Regards,
Ankur Parab

Abaper role in project

what are the roles and responsibilties of functional and technical consltant

hi,
Role in SAP Implementation:
SAP Implementation is the whole of processes that defines a complete method to
implement SAP software in an organization. It is based on best practices and case studies from various literature sources and presents a collection of processes and products that make up a complete implementation method to allow any organization to plan and execute the implementation of SAP (ERP) software. The SAP implementation process is made up out of four main phases, i.e. the project preparation where a vision of the future-state of the SAP solution is being created, a sizing and blueprinting phase where the solution stack is created and training is being performed, a functional development phase and finally a final preparation phase, when the last tests are being performed before the actual go live.
ABAP Developer Role is to prepare the Technical Specification (based on a Functional Specification given by a Functional Consultant), build the code, Review the code and finally to prepare the Unit Test Cases. Sometimes ABAPer may be asked to do a technical research for an optimal solution.
Role in SAP Support:
After a go live, the application needs a maintenance/support to resolve the issues/tickets raised by the users when using the application. Ticket is like a request for changes/bug fixing or a request for a new ABAP Developer Role includes bug fixing/change the existing code due to new requirements/build a new code etc.
Role in SAP Upgrade:
SAP Upgrade is nothing but upgrading the software with a superior version which has got more advantages when compared to the earlier version.
ABAP Developer Role is to go through transactions SPAU/SPDD to compare the old and new version of the change and finally need to activate the relevant one. Some times might need to work on SAP notes too.
Hope this helps, <REMOVED BY MODERATOR>
Edited by: Alvaro Tejada Galindo on Feb 20, 2008 4:49 PM

Extent of abaper role in SAP Console

Similar Messages

Maybe you are looking for