How to assign ROle to user
Hello All,
I need to programmatically assign roles to user and want to give some authorization at runtime..
please suggest me which function module to use ..
please help me asap
thanks,
jigs
helpful answers wil lbe rewarded
Hi all,
Thanks for the reply.
But i want to add one role to user not profile.
i got one bapi BAPI_USER_ACTGROUPS_ASSIGN, this bapi does work...
but actually deletes previous roles and then assign new one.
is there any fm which will add role to user without deleting existing role.
thanks,
jigs
Similar Messages
-
How To Assign Role To User Programatically?
Hi,
We Need Code to Assign Role To User In JSPDynapage.
Thanks
SubbaRao ChintaHi SubbaRao Chinta,
See http://help.sap.com/saphelp_nw70/helpdata/EN/7d/003c41325fa831e10000000a1550b0/frameset.htm and the corresponding JavaDoc: http://help.sap.com/javadocs/nw04/current/um/com/sap/security/api/IRoleFactory.html
Hope it helps
Detlev -
How to assign roles to users using WL api?
Hi,
We have a requirement to allow creation of new users through application screens and assign groups and roles to those users.
My users will exist in external LDAP server while my groups and roles will exist in embedded LDAP server. Using WL APIs i am able to create users and add them to groups using the code peices given below:
========================================
userProviderControl.createUserSimple(form.userID, form.password);
groupProviderControl.addUserToGroup(ocnGroup, form.userID);
========================================
How do i assign roles to this new user programatically?
If i add a role from console (Home > Realm Roles > Summary of Security Realms > myrealm > Realm Roles -> Global Roles) and edit role condition to add this newly created user then i it works fine. I want to achieve the same i.e. edit role condition programatically.
Any help will be greatly appreciated.
Thanks,Problem Solved !!!
The data-type conversion needs to be performed in the SPML2 Person Form. Add a Field called waveset.roles and map it to the SPML2 attribute name being used in ur client. It's best done through a rule.....
If anybody is facing similar problem and need more details....please email me @ [email protected] -
Assigning roles to users programmatically
Hi,
I want to programmatically create roles, assign roles to users etc.
I saw at this thread
ADF Security Policy Store
the folowing scriptlet by Frank Nimphius
try {
IdentityStore idstore = JpsCommonUtil.getValidIdStore("idstore.xml.provider").getIdmStore();
try {
UserManager userManager = idstore.getUserManager();
RoleManager roleManager = idstore.getRoleManager();
Role adminRole = idstore.searchRole(Role.SCOPE_APPLICATION,"admin");
// create user
//TODO check for empty username and password
User newUser = userManager.createUser(this.username,this.password.toCharArray());
roleManager.grantRole(adminRole,newUser.getPrincipal());
} catch (IMException e) {
// TODO
} catch (JpsException e) {
// TODO
return null;
this is a TP3 scriptlet, is it still working on the 11g production?
I try it and i get a JpsException
oracle.security.jps.JpsException
at oracle.security.jps.internal.common.util.JpsCommonUtil.getValidIdStore(JpsCommonUtil.java:1004)
do I have to replace "idstore.xml.provider" with something else depending on my configuration?
thanks
TilemahosHi Frank thanks for the answer,
I check this functionality at WLS embeded LDAP and I shaw your "How-to configure OID for authentication in WebLogic Server" post.
I manage to add users and assign them roles that i created at my application.
But what if I want to have a super user that can create new roles and assign them member roles?
eg.
Developer created roles (policy store):
accessPage1 ( granted all the necesery principals to access page1 )
accessPage2 ( granted all the necesery principals to access page2 )
Super user created roles
Role1 member roles :accessPage1,accessPage2
If i want my application to have that functionallity i must create roles programmatically wont I?
If there another way?
By the way I followed the advices at the following useful links
Chris Muir: http://one-size-doesnt-fit-all.blogspot.com/2008/12/configuring-wls-with-ms-active.html
Frank Nimphius's How-to configure OID for authentication in WebLogic Server
Edwin Biemond's Using OpenLDAP as security provider in WebLogic
Andrejus Baranovskis: Practical ADF Security Deployment on WebLogic Server
And I manage to add users of the Microsoft LDAP at the WLS
but I could't mekae them group members of my application groups (roles)
is this possible?
Thanks -
SECATT for assigning roles to users
Hi All,
How do we make the ECATT to work for the below scenario:
Users already have roles assigned to them. We need to add a new roles to the users which can vary in number based on the users job.
A simple ECATT script that was developed to add a single role to a new user does not work in the above case and gives an error of invalid batch input. How do I create a ECATT to assign role to user who already has a set of roles assigned (number of roles assigned to users differ, so I cannot assume to train the ECATT to assign a role on line X). Is there something I am missing while the ECATT script creation?
We are doing this from a CUA and its very difficult to assume how many roles a user could have.
Thanks,
JayThanks Alex for the insight. For some reason SU10 is slow in the CUA environment and I wanted to avoid it but yes I finally had to use SU10. Talking to one of our ABAPer I came to know that even in their BDC recordings they get the error which I receeived, but he changes his program to skip all the lines with data and then fill the empty line.
In CUA environment, how do we create ECATT to delete a role from many users?
Thanks,
Jay -
How to assign roles to portal please describe
how to assign roles to portal please describe
Hi Deba,
If you are talking about assigning roles to users .
Then follow these steps :
http://help.sap.com/saphelp_nw70/helpdata/EN/ed/845890b89711d5993900508b6b8b11/frameset.htm
Create Workset and Roles :
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/9f2df6f9-0701-0010-d08f-a95acdd86453
For creating users,
Go to user administration( You should have this role assigned to you) and create a user.
Cheers,
Sandeep Tudumu -
HI,how to find roles for user based on userid?
hi,
i need to find roles for each user based on user id.
can i know any one knows this how to get roles for user?
thanks,
jpullareddyhi,
i solve my self.
i am getting values
jpullareddy -
Dear All
Please help me assigned Role in user Group . I create user Group ( SURG ) . But i can't assigned Role ?
Regards , Thanks
LannguyenHello,
You cannot assign user groups directly to Roles, however you can do the following.
Use PFCG transaction
1. Select the role and switch to change mode.
2. Switch to user tab.
3. Put the cursor in the blank line and hit F4
4. You should get a popup window which asks you to provide search criteria for the user.
5. Switch to 2nd tab Users by Logon criteria, here you should be able to find the selection field User group.
6. Select the group you created and hit the green tick.
7. All the users in that group will be listed in the User list tab on the main screen.
8. Now to complete the user assignment hit the User comparisor button ( it should turn green once done).
Regards,
Siddhesh -
How to assign roles for each kind of users
Hello,
i am creating users for each kind of users, say abap developer or FI/MM/SD function users, in IDES ECC 6. it doesnt make me any sense how to assign which roles to which user( there are more than 2000 sap standard roles). can anyone give me some guideline how to create each kind of users.
any response will be awarded!
Thanks a lot!
SamsonI don't understand your question....
When sap is implemented usually part of the project is creating roles based on a blueprint designed to adjust to your company needs...
Basically Standard roles are there to be used as templates for your own roles.
Users as "dialog users" do not have classification... the special access attributes are given by the roles assigned to it based on the project plan desing pre-installation.
Hope that help
Juan -
Assigning Roles to Users and Groups
Hi,
We have installed EP 5.0 SP4...with Content Management...we configured the LDAP to Portal......all the users are maintained through LDAP only...the problem is assigning the Role's to user..here in portal how to assign the roles to the users...we are not getting the Role assignment option under Portal Admin TAB..is there any way to configure the roles to User's are Group's.....
it is an urgent assignment for me..help can be appreciated...
sudhirSudhir,
You can assign the roles to users and groups as below.
1. Select the System Administration in the top level navigtion
2. Select user administration
3. You can search for a specific user or a group from this iView.
4. Use the edit button to edit the profie of the user or group.
5. Search for the role in the search iView.
6. Add the role to the user of group and save. -
How to assign WSNavigatorRole to Users
Hi,
By default the role WSNavigatorRole is assigned to the group "Administrators". But our requirement is to assign this role to few individual users along with the administrators of the system. For this we tried to configure the Portal settings for the WSNavigatorRole in Visual Admin tool.
While doing so, we found that we can only provide the WSNavigatorRole to any one of the Pre-defined Security Roles and their associated groups and cannot assign specifi users for this role.
Can anyone please tell me how to assign the WSNavigatorRole to few specific users in Portal ?
Regards,
Anirban KunduGet the 'roleOccupant'or 'uniqueMember' etc. attribute of the group, via its DN. Add the member DN to the attribute. Replace the attribute in the group.e
-
How to assign roles to positions?
Hello everyone,
I am new in SAP HR field and my question could be very basic but would really appreciate your reply:
" I am configuring Indirect Role assignment model and want to use it to assign positions to users.
Now, I want to know how are these positions linked to actual roles and from where can I assign some roles to my positions? "
Thanks
HarleenHi Harleen
As you know, we have both Standard and Structural authorizations in SAP HR
1. Standard Authorization
If you want to assign Standard Authorizations to a Position, you need to create Relationship b/w Object type S and AG (You need to have authorization to PFCG T code in this case)
I am not very sure if SAP has provided any standard program to assign the Standard Authorizations which are avaialble against a position to a User.
2. If you want to assign Structural Authorizations to a Position and in turn to a User
Create Structural authorization profiles in OOSP, assign the same to position by creating Infotype 1017 for a Position and run RHPROFL0 program to update the same to the USER (T77UA) who is occupying the position (A008 Relationship b/w S & P and IT 0105 against P)
Hope this helps
Best Regards
Reddy -
Hi,
I need to assign following roles to user. How can i do that...?
H_BC_ALL_ENDUSERS
HPL_FI_AA_CAP_PROJ_REVIEWE3840
HPL_FI_AA_PROJ_ACCOUNTTANG3840
HPL_MM_S_PUD
HPL_MM_SCM_CUSTOM_RET_CLK_PUD
Thanks and regards
RajHi,
Mike was right. THis is not the right forum to address this.
anyway, to answer your question, you can simply assign these using PFCG, by adding the new user in each of these roles.
Also, you need to change the custom code,if any applicable, to pick up the new user.
To reroute the existing witems in old user's Inbox, you can use SWI5 and then SWIA.
Regards,
venu -
How to assign iView to user.
Hi All
How do we assign iView to Role or Users.
Thanks...SureshIt is not possible to assign an iView directly to a user. Only roles can be attached to users. This can be done by going to User administration on the Portal.
Select the user name using the search functionality, navigate to 'Assigned roles' and attach the same there.
Conversely, it is also possible to search for the role name and navigate to 'Assigned users' and attach the user there.
Hope this helps.
Sudha
Message was edited by: Sudha Mohan -
Problem in assigning roles to users
Hi
I created Role in EP, which i want to assign to the users. i assigned that role to user. the user i not able to access the particular iviews. i attached some R/3 transactions iviews to that role. it says unable to lookup the system or system alias. when i assign that role to me, i'm able to access that iviews(R/3).
i have superadmin role permissions.
what default roles and permissions need to assign for users.
suggest me
thx
pradeepHi Pradeep,
In SP9 apart form creating a System, we need to assign permissions for users.
Follow this path:
System Administration -> Permissions -> <select your System in Portal Content> -> Open Permissions <on right click>. This would take you to the Permission Editor.
Here you need to add the user and assign permissions.
Please check this and let me know if its working.
Awaiting Reply.
Warm Regards,
Ritu
Maybe you are looking for
-
Can no longer connect for audio or video chat : Error -8 drama
I've been video and audio chatting to Europe for quite some time with no problem. After installing a new modem (Motorola Surfboard SB5101) I'm now getting the dreaded Error -8 and can not connect for either audio or video. Text works fine. I've poked
-
Hi, I am having a problem getting my emac desktop to show up. It seems to be taking a long time to load up with a grey screen apple symbol and winding circle, then to the next screen which has the mac OS X square and loading bar -- then to the deskto
-
Would like to use iMessages internationally, sending between an iPod touch and and iPhone. Does anyone know if it will work between countries?
-
Need to download Adobe Acrobat 8 standard
when it asks for my serial number and I insert it it says "invalid serial number"
-
Trying to download OSX Mountain Lion, but just says waiting all the time? Anyone know what this could be?