How assign role to user during portal runtime ! after logon !

Hello everybody,
I've a question. Is possible add or remove portal roles to portal user after user logon ?
how ?
thank you very much
Stefano

Hi Stefano,
yes,it is possible to remove a role from a user after log in.Go to the user admin->search the user->remove the repective role from the user.
But the role will be displayed to the user until he select the role.Once he selects the role it will not come
Regards
Indranil
Award points for useful answers

Similar Messages

How to assign ROle to user

Hello All,
I need to programmatically assign roles to user and want to give some authorization at runtime..
please suggest me which function module to use ..
please help me asap
thanks,
jigs
helpful answers wil lbe rewarded

Hi all,
Thanks for the reply.
But i want to add one role to user not profile.
i got one bapi BAPI_USER_ACTGROUPS_ASSIGN, this bapi does work...
but actually deletes previous roles and then assign new one.
is there any fm which will add role to user without deleting existing role.
thanks,
jigs

How To Assign Role To User Programatically?

Hi,
We Need Code to Assign Role To User In JSPDynapage.
Thanks
SubbaRao Chinta

Hi SubbaRao Chinta,
See http://help.sap.com/saphelp_nw70/helpdata/EN/7d/003c41325fa831e10000000a1550b0/frameset.htm and the corresponding JavaDoc: http://help.sap.com/javadocs/nw04/current/um/com/sap/security/api/IRoleFactory.html
Hope it helps
Detlev

Assigning roles to users programmatically

Hi,
I want to programmatically create roles, assign roles to users etc.
I saw at this thread
ADF Security Policy Store
the folowing scriptlet by Frank Nimphius
try {
IdentityStore idstore = JpsCommonUtil.getValidIdStore("idstore.xml.provider").getIdmStore();
try {
UserManager userManager = idstore.getUserManager();
RoleManager roleManager = idstore.getRoleManager();
Role adminRole = idstore.searchRole(Role.SCOPE_APPLICATION,"admin");
// create user
//TODO check for empty username and password
User newUser = userManager.createUser(this.username,this.password.toCharArray());
roleManager.grantRole(adminRole,newUser.getPrincipal());
} catch (IMException e) {
// TODO
} catch (JpsException e) {
// TODO
return null;
this is a TP3 scriptlet, is it still working on the 11g production?
I try it and i get a JpsException
oracle.security.jps.JpsException
at oracle.security.jps.internal.common.util.JpsCommonUtil.getValidIdStore(JpsCommonUtil.java:1004)
do I have to replace "idstore.xml.provider" with something else depending on my configuration?
thanks
Tilemahos

Hi Frank thanks for the answer,
I check this functionality at WLS embeded LDAP and I shaw your "How-to configure OID for authentication in WebLogic Server" post.
I manage to add users and assign them roles that i created at my application.
But what if I want to have a super user that can create new roles and assign them member roles?
eg.
Developer created roles (policy store):
accessPage1 ( granted all the necesery principals to access page1 )
accessPage2 ( granted all the necesery principals to access page2 )
Super user created roles
Role1 member roles :accessPage1,accessPage2
If i want my application to have that functionallity i must create roles programmatically wont I?
If there another way?
By the way I followed the advices at the following useful links
Chris Muir: http://one-size-doesnt-fit-all.blogspot.com/2008/12/configuring-wls-with-ms-active.html
Frank Nimphius's How-to configure OID for authentication in WebLogic Server
Edwin Biemond's Using OpenLDAP as security provider in WebLogic
Andrejus Baranovskis: Practical ADF Security Deployment on WebLogic Server
And I manage to add users of the Microsoft LDAP at the WLS
but I could't mekae them group members of my application groups (roles)
is this possible?
Thanks

SECATT for assigning roles to users

Hi All,
How do we make the ECATT to work for the below scenario:
Users already have roles assigned to them. We need to add a new roles to the users which can vary in number based on the users job.
A simple ECATT script that was developed to add a single role to a new user does not work in the above case and gives an error of invalid batch input. How do I create a ECATT to assign role to user who already has a set of roles assigned (number of roles assigned to users differ, so I cannot assume to train the ECATT to assign a role on line X). Is there something I am missing while the ECATT script creation?
We are doing this from a CUA and its very difficult to assume how many roles a user could have.
Thanks,
Jay

Thanks Alex for the insight. For some reason SU10 is slow in the CUA environment and I wanted to avoid it but yes I finally had to use SU10. Talking to one of our ABAPer I came to know that even in their BDC recordings they get the error which I receeived, but he changes his program to skip all the lines with data and then fill the empty line.
In CUA environment, how do we create ECATT to delete a role from many users?
Thanks,
Jay

Regarding : How to add a user to portal group with the help of webdynpro .

Hii ,
I am working on an application in which with the help of an action( Button) we r adding a user in Ztable in R/3 , as well as group in portal.
The user r successfully creating in Ztable but from portal side No user is assigned to Portal group.
I need coding solution for " How to add a user to portal group with help of webdynpro"
Any usefull link will also do.
Pls anyone have any solution ??
Thnks in advance.
Rewards r waiting for u .

Hi,
Use UME api to add user to portal group.
Using UME API:
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/40d562b7-1405-2a10-dfa3-b03148a9bd19
Regards,
Naga

Assigned Role in user Group

Dear All
Please help me assigned Role in user Group . I create user Group ( SURG ) . But i can't assigned Role ?
Regards , Thanks
Lannguyen

Hello,
You cannot assign user groups directly to Roles, however you can do the following.
Use PFCG transaction
1. Select the role and switch to change mode.
2. Switch to user tab.
3. Put the cursor in the blank line and hit F4
4. You should get a popup window which asks you to provide search criteria for the user.
5. Switch to 2nd tab Users by Logon criteria, here you should be able to find the selection field User group.
6. Select the group you created and hit the green tick.
7. All the users in that group will be listed in the User list tab on the main screen.
8. Now to complete the user assignment hit the User comparisor button ( it should turn green once done).
Regards,
Siddhesh

How to assign roles to users using WL api?

Hi,
We have a requirement to allow creation of new users through application screens and assign groups and roles to those users.
My users will exist in external LDAP server while my groups and roles will exist in embedded LDAP server. Using WL APIs i am able to create users and add them to groups using the code peices given below:
========================================
userProviderControl.createUserSimple(form.userID, form.password);
groupProviderControl.addUserToGroup(ocnGroup, form.userID);
========================================
How do i assign roles to this new user programatically?
If i add a role from console (Home > Realm Roles > Summary of Security Realms > myrealm > Realm Roles -> Global Roles) and edit role condition to add this newly created user then i it works fine. I want to achieve the same i.e. edit role condition programatically.
Any help will be greatly appreciated.
Thanks,

Problem Solved !!!
The data-type conversion needs to be performed in the SPML2 Person Form. Add a Field called waveset.roles and map it to the SPML2 attribute name being used in ur client. It's best done through a rule.....
If anybody is facing similar problem and need more details....please email me @ [email protected]

E Portal User Administran--Automatic loss of assigned roles of users

Hi All,
Some users are losing assigned roles automatically without anybody modifying User administration part.This is happening frequently.
My senior told me that
"<b>roles are based on Active Directories. When Users move from one location to another there is change in the Active Directories.
If Active directories do not get refreshed properly roles will be not come up.</b>"
Please guide me.
Thanks in advance,
Gangadharayya.

Hi Gangadharayya,
Check the Unique ID of the user(whose role has lost) in the system Administration --> support -->support Desk -->
User Management >Test component for UME objects
Enter the user ID of the user(whose role has lost)in the Get User table. And click the 'Get' .
And in the bottom of that screen you ll get the 'UME User toString' table. In that get the unique ID of the user and check this unique ID with the LDAP.
Try the same steps from the role. Give the Role ID search in the 'Get Role ' column and click get. Now compare the unique IDs of the user.
Regards,
Birla.

Assigning Roles to Users and Groups

Hi,
We have installed EP 5.0 SP4...with Content Management...we configured the LDAP to Portal......all the users are maintained through LDAP only...the problem is assigning the Role's to user..here in portal how to assign the roles to the users...we are not getting the Role assignment option under Portal Admin TAB..is there any way to configure the roles to User's are Group's.....
it is an urgent assignment for me..help can be appreciated...
sudhir

Sudhir,
You can assign the roles to users and groups as below.
1. Select the System Administration in the top level navigtion
2. Select user administration
3. You can search for a specific user or a group from this iView.
4. Use the edit button to edit the profie of the user or group.
5. Search for the role in the search iView.
6. Add the role to the user of group and save.

How to use MDM users in portal?

Hi All,
How to use MDM users in EP, my requirement is,
i have an users, if the user log's in portal, depending on the portal user login, we need to assign a perticular region for that user such as europe, south america, asia....,
before he log's in portal we need to confirm that user belongs to perticular region in MDM.
we maintain users in MDM, when an europe user log's in portal we need to assign him europe system so that he can login in to that europe system. when a asia user log's in portal we need assign him asia system, so that he can login in to that asia system.
how to do this in portal
Regards
jagadeesh

Hi Jagaeesh,
You need to configure sso between MDM and EP. You can do it with the help of UID method as there is no logon ticket method available with MDM 5.5.
And for region specification, you can create different portal desktop, framework, theme for diffreent region users inside portal and define portal's master rule as per accordingly by creating user groups inside portal and assigning different desktops to different region user's.
Then, create contents (like roles, worksets, pages, iviews, km contents) inside portal according to region and assign those contents to different groups as per requirement.
So that, deplending on region user's, when they login into portal would see different content inside it.
Regards,
Sen

Problem in assigning roles to users

Hi
I created Role in EP, which i want to assign to the users. i assigned that role to user. the user i not able to access the particular iviews. i attached some R/3 transactions iviews to that role. it says unable to lookup the system or system alias. when i assign that role to me, i'm able to access that iviews(R/3).
i have superadmin role permissions.
what default roles and permissions need to assign for users.
suggest me
thx
pradeep

Hi Pradeep,
In SP9 apart form creating a System, we need to assign permissions for users.
Follow this path:
System Administration -> Permissions -> <select your System in Portal Content> -> Open Permissions <on right click>. This would take you to the Permission Editor.
Here you need to add the user and assign permissions.
Please check this and let me know if its working.
Awaiting Reply.
Warm Regards,
Ritu

How to Unlock J2EE_GUEST user in portal

Hi
In my Portal "J2EE_GUEST' user is locked as a result i can't able to see the list of system avaliable in Visual Composer
When i tried to unlock the JE22_GUEST user in portal it is not allowing me to unlock the user
Please advise how can i unlock the J2EE_GUEST user in Portal
Thanks

Hi,
Incase if you are having the dual stack, ABAP+ JAVA , you can logon to the ABAP system using either the J2EE_ADMIN or DDIC and use the Tcode -SU01.
As soon as you log on to SU01 you would be asked to enter the user name .
Enter J2EE_GUEST and on the top right hand corner you have an option unlock.
As soon as you unlock, on the left hand side to unlcok, there is a change password option, you can also reset your password there.
Else log into the portal with a J2EE_ADMIN role and in user administration unlock the user
Hope this helps.
Cheers,
Sandeep Tudumu

How to restrain the user login portal once, in the same time??

Hi
I need to restrain the user can't repeat to login portal ....
to reduce portal loading
How can I restrain the user login portal once, in the same time???
Which attributs in Identity Manager or amconsole I can do it to restrain the user ??
tks

Does your portal support anonymous access? If so, make sure you are using the authlessanonymous mode. This mode only creates one session that is shared for all anonymous users. This is much more efficient than anonymous access, which creates a session for each anonymous user.
I have no other recommendation for limiting users to a single login. In general, web applications do not behave like this. What if a user closes their browser without logging out? Does the user have to wait until the session times out in order to log back in again?
The same thing is true for users that are mobile. If a user leaves their office without logging out and then attempts to log in with a laptop in the conference room, then access will be denied in your implementation. Users do not expect this type of limitation being built into the system.
If you are having problems scaling, then you need to look at your architecture and perhaps add some more resources. Also, make sure you are making efficient use of the authlessanonymous access mode as stated above.
- Jim

How to Know total users in Portal

Hi,
How to know the total users in Portal.I gone to User Administraion and tried to search in that with out any parameter then I got a message like "Last search Exceeded the size limit of the Server.Search result is incomplete." and "Last search returned with 1000 elements.". But I want to know the TOTAL USERS in the PORTAL.
Can u help me in this regard. Urgent.
Regards
Krishna

Hi Krishna,
the paged search is possible by using the
parameter "ume.ldap.access.extended_search_size" in your configuration XML.
Just set a value blow 1000 e.g. 900 as like in this
example and all entries above 900 will be paged:
<ume.ldap.access.extended_search_size>900</ume.ldap.access.extended_search_size>
Do not forget to restart and check the values "Max. Search" and "Warn. Search" set for the Admin-UI.
Regards
Stefan

How assign role to user during portal runtime ! after logon !

Similar Messages

Maybe you are looking for