FM to create new role in BI

Hi experts,
Is there any FM to create a role exactly like in t-code PFCG?
I get lost in PFCG abap so any suggestion would be helpful.
Thanks in advance
Soufiane.

Hi experts,
I ve found this:
PRGN_RFC_CREATE_AGR_MULTIPLE to create role with role description
BAPI_USER_ACTGROUPS_ASSIGN to assign user to a role
is there any FM to assign authorisation to a role?

Similar Messages

Problem : create new role

Hi,
I'm using webservices to create a new role in OCS.
It' OK to create the but I have a problem when I try to add some capabilities to this role.
I use this code.
NamedValuesList nvalues = new NamedValuesList().addValue(Attributes.NAME, "SYSDOC PROJECT MANAGER");
Item item = getConnection().getDomainManager().getDefaultDomain(null);
Item role = getConnection().getSecurityManager().createRole(item.getId(), nvalues.toValueArray(), null);
nvalues = new NamedValuesList().addValue(Attributes.ACCESS_LEVEL, FdkConstants.CAPABILITY_DISCOVER);
getConnection().getSecurityManager().updateRole(role.getId(), values.toValueArray(), null);
And the returned exception is :
oracle.ifs.fdk.FdkException: ErrorCode = ORACLE.FDK.ParameterError;
DetailedErrorCode = ORACLE.FDK.InvalidAttribute; ServerStackTraceId = ; Info[0]
= {ACCESS_LEVEL = 1}; Entries = null
Thanks.
K. HAMDOUNI

Hi,
It is not the problem because NamedValuesList is an utility class :
===========================================================
public class NamedValuesList extends ArrayList
public NamedValuesList() {
super();
public NamedValuesList addValue(String name, Object value){
add(new NamedValue(name, value));
return this;
public NamedValuesList addValue(String name, long value){
return addValue(name, new Long(value));
public NamedValuesList addValue(NamedValue namedValue){
add(namedValue);
return this;
public NamedValue[] toValueArray(){
return (NamedValue[]) toArray(new NamedValue[0]);
=======================================================
Then this code :
addValue(Attributes.ACCESS_LEVEL, FdkConstants.CAPABILITY_DISCOVER);
do the same thing as
addValue(Attributes.ACCESS_LEVEL, new Long(FdkConstants.CAPABILITY_DISCOVER));
Just one question: is this functionality(customize roles) implemented in OCS10g 10.1.2 or not?
Thanks.

What permissions require to create CASES (Service Module). Creating new role.

Hi All,
Can you please suggest me what permission require to create new case from service module. Steps is below i followed to create case and assigned to user.
1- Created new blank role.
2- Went in service module.
3- Given the Create, Read, Write, Append & Append To permission to CASE entity on organization Level.
4- Assigned this role to user.
After assigning this role login into crm online and trying to create case. Its giving message "Insufficient Permission".
Kindly suggest me the steps i am missing here. Want to assigned single custom created role.
Thanks in Advance

Hello,
Recheck following article -
http://www.powerobjects.com/blog/2015/02/13/access-denied-identify-fix-security-role-issue/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+PowerobjectsMicrosoftCrmBlog+%28PowerObjects+Microsoft+CRM+Blog%29
Dynamics CRM MVP/ Technical Evangelist at
SlickData LLC
My blog

Creation of new roles in OES using BLM API

I'm currently using policymgtapi examples for creating new roles. Its gets created but doesn't visible in OES Entitlement application console even though the entry is present in OES DB. But if you create a new User, its available immediately in OES Entitlement application. Pls let me know why Role is not available in Entitlement application after creating using policymgtapi. Thanks

Is there any org scope to the role?
There's some conversion process that happens when you load roles via policyloader, I suspect you would need to do the same with Policy Mgt API. There are some groups you need to add to have it show up in the EUI.

How to set new role for new custom entity only

I created a new custom entity, I want to create new role for it only. So I created new role and set custom entity User role. But When I login the user with created role, it show now right to access CRM.
Awen

Are you trying to grant access so that users can use this custom entity but no other data at all?
You will still have to include access to all sorts of bits of CRM just to make the user interface work - especially the things on the Business Management and Customization tabs of your security role. You also need to check these 6 settings:
Special privileges in CRM Security Roles
If this is the only security role you plan to give to your users, I would suggest you start from a standard role and remove access to other entities, rather than start from blank and work upwards.
Hope this helps.
Adam Vero, Microsoft Certified Trainer | Microsoft Community Contributor 2011
UK CRM Guru Blog

New role

Hi All,
I create new role for TCP 1433 for SQL traffice and TCP 30000 for license in firewall of W2K8 R2. I allow service manager and SAP B1 but I am still failed to connect to SBO server from PC client. If I turn off the public or private network firewalls, I can connect. Pls advice how to connect from client to server without turn off the firewall. Thanks
Regards,
John

Hi John,
Have you searched the forum?
You may start from here: Re: Windows Firewall preventing Client connecting to Server
Thanks,
Gordon

New Role creation

Hi All,
I created new Role and assigned users to that role . I added HTML page to the particular role and when I go click that link it is saying that java authentication problem. I am unable to see the applets what ever I created for the web page. Is there any thing to add in xMII for the particular role and if add the same HTML page to the Everyone role its working fine.
Thanks
Muvva

Hi Muvva ..
May be you can try the following ...
instead of providing the direct html, you can provide the user with the logon credentials which redirect the page to the desired html page, as follows...
http://Server:50000/logon/logonServlet?redirectURL=XMII/....../YourPage.html
Regards,
Ajay.

Create a new role in SRM 7.0 and Portal

Dear All,
We are using SRM 7.0 with Portal. We created a maintenance table in SRM. This table must be maintained from time to time by the key users. But they want to maintain in from Portal, not from SRM.
When i was using SRM 4.0, it was simple, i was creating a new role from PFCG and assigning the table to the role. Then i was be able to see and maintain it from web. But it is not that simple now in Portal side. Because i created a new role and assigned the table to that role in SRM, but nothing happened in Portal side.
Can anyone advise me the steps ? How am i going to show and maintain this table in portal ?
Thanks in advance,
Best regards,

Hi,can you share your solution with me. I have the same question but not smart as you.
Thanks in advance.
WuLin
SRM

How Can I Create a new Role in an PCD address?

Hello EveryBody,
I need to develop a new class that it can manage SAP Portal roles. I got how to recover all the roles of a user or how to recover all the roles in a PCD path. Now I have the problem when I try to create a new role in a PCD path.
The code that I have to do that it is this:
try {
*     IRoleFactory iRoleF = UMFactory.getRoleFactory();*
*     IRole nuevorol=iRoleF.newRole(pcdPath+nameRol);*
*     nuevorol.setDisplayName(nameRol);*
*     nuevorol.setDescription(descripcionRol);*
*     nuevorol.commit();*
*     return true;*
catch (Exception e)
*     return false;*
This code it works and it makes a new Role but I donu2019t know how to create this role in a PCD path. Could you help me with this?
This it is a urgent task that I have to develop, please I need help. Thanks in advance.

Hi,
     Now I understood your question. As of now, I think there is no api which creates workset and roles in pcd. API are available for iView, page, system and layout only.
For creation of iView, page etc, check this blog.
PCD II: Creating Portal Objects
For role and workset creation, there is another tool used. Check these blogs.
SP15: XML Content and Actions
Mass Creation of Portal Content - Generic Creator
If you want to use this tool functionality in code, then check this blog.
Using the XML upload content and actions dynamically
If you are on NW7.1, then check this article.
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/40c72897-c7e6-2a10-e98a-af81b89084f4
Hope these will help. Good luck.
Regards,
Harini S

How to create a new ROLE in BW

Hi All,
I would like to create a new ROLE in BI 7.0.
How to remove a query from a ROLE.
Thanks in advance

Roles are created in Tcode PFCG . Here you can restrict the objects ( Info areas , infoproviders , queries , etc ) and actions ( execute , change , display ) for which you want to give authorisation.
If authorisation is based on some info object eg company code , we create analysis authorisation in RSECADMIN ( restrict it to auth variable created in Bex ). This auth variable code may refer to a DSO which defines the user and company code relationship ie reads the current user and returns the company codes maintained against that user in DSO .In PFCG , we assign this analysis authorisation to authorisation object while creating role .
Role can be assigned to a user using PFCG or SU01 tcode.
Roles can be modified( removing query as in your case ) in PFCG ---> Give role name ---> Change .

Create new partner role type

Hi Guys
This one is from Traders' and Schedulers' Workbench from IS Oil and Gas Downstream.
I need to know whether we can create new partner role types (e.g. TSW011, TSW011, etc). The partner role types are maintained in table OIJRRT but I could not find a transaction to maintain this table.
Do I need to create the entries in the table directly? Will the system allow me? Has anybody tried this earlier?
Also, can anybody tell me what is the significance of Role differentiator type and how can we use it?
Many thanks in advance for all your time on this.
Kartik

TS W as a standard has some partner roles, which can be assined to the TSW location or Transport system.
e.g. Carrier
Shipper
Supplier
Supplier in pipe
Receiver
Receiver in pipe
Consignee
Tanker
Inspector
Breakout S/L locational
Your partner role can be either of the following SAP entities : Vendor, Customer, Plant , Plant + SLoc
At a physical location, you can have multiple suppliers. In SAP, they are created as Vendors, and assigned to the TSW location as the 'Supplier' partner role. Another vendor may be assigned the 'Carrier' partner role at the location. Similary, a Plant can be assigned as a 'Supplier' partner role.
The same applies to Customers or Plant which can act as a 'Receiver' partner role at a diferent TSW location.
Once you have set-up the partners for the location, this data is used as a validating and defaluting source in the TSW documents.

Create new user same as a existing roles and Privileges

Hi Team,
I am a junior DBA. New user Joined in Application team. So, Client requested me.....
Crerate new user with same privileges as like as existing user.
As of now i am creating user like "create user username identified by "password". Then grant privileges to that user. earliar I never comapare or copied users.
Please suggest any one how to create new user as like as existing user roles and privileges.
Thanks,
Venkat

For basic cloning:
select dbms_metadata.get_ddl('USER', '...') FROM DUAL;
SELECT DBMS_METADATA.GET_GRANTED_DDL('ROLE_GRANT','...') FROM DUAL;
SELECT DBMS_METADATA.GET_GRANTED_DDL('SYSTEM_GRANT','...') FROM DUAL;
SELECT DBMS_METADATA.GET_GRANTED_DDL('OBJECT_GRANT','...') FROM DUAL;
SELECT DBMS_METADATA.GET_granted_DDL(‘TABLESPACE_QUOTA’, ‘...’) FROM dual;
Then just replace the username with the new one you want to create.

Portal 7.0 and CRM 5.0 Create a new Role and enabling Quick Create.

Hi Experts,
In our Portal Scenario, we need to create a new Role and to customize it with some iviews(CRM BSP iviews).
The role was created and it works fine; in fact in the navigation it is possible to navigate in these BSP application:
1)Account
2)Products
3)Activities
My question is the following: I see that in the standard role <b>com.sap.pct.crm.salesmanager</b> (contained in the Business Package for my SAP CRM 5.0) it is possible to see in the portal desktop the functionality "Quick Create", how it is possible to enable the "Quick Create"??
Kind Regards.
Eugenio

Hi Eugenio,
Did you find how to do that? I am facing the same problem.
Regards,
Mauricio

New role created and Security zone.

When I create the new role and I need to set the properties for that role. Then after I try to add this role to user and have user test the access.
Why there are some error happen and I need to go to 'security zone' by follow path from the error, then my new role into security zone, then user can access without any problem.
Please anyone explain why do we need to add role again in security zone even though we already set the property to that role in 'content administration.' Please let me know the difference. Thank you very much.

Hi,
Security Zones are used to prevent unauthorized users from accessing iviews, Portal Components and Portal Services through a direct url used outside of the portal environment. It will be controlled by means of progressive safety levels and permissions, which are assigned by the system administrators to authorized users in the permission editor.
Regards,
Saraswathi

OIM 11g R2 - Creating a new role using API

Hi,
I am trying to create a new role in OIM 11g R2 using RoleManager API.The requirement is to provide "Role Owner" also while creating the role.May I know how to do that?.Thanks in advance.

                    HashMap <String, String> groupMap = new HashMap <String, String> ();
                    groupMap.put("Groups.Group Name", groupName);
                    groupMap.put("Groups.Role Description", "Just for testing");
                    long groupKey = -1L;
                    try {
                            groupKey = goi.createGroup(groupMap);
                            logger.info("RESULT: Group with group_key '" + groupKey
                                            + "' has been successfully created");
                    } catch (tcAPIException e) {
                            logger.info("Creating client...."+e);
                    } catch (tcDuplicateGroupException ex) {
                         return getGroupKey(goi, groupName);
                            //logger.info(""+ex.toString());
                    } catch (tcInvalidAttributeException er) {
                            logger.info(""+er.toString());
I hope this really helps you,
Thiago Leoncio.
(Blog: thiagoleoncio)

FM to create new role in BI

Similar Messages

Maybe you are looking for