How to handle authorization assignment in MDM console

How can we assign authorization based on different users role? Is there a function in MDM console? Thanks!

Hi Alfred,
Here I am giving you a small pratice case study to get clear picture of user authentication in MDM
<u>Case:</u>
Table A has five fields F1,F2,F3,F4,F5
User X, User Y, User Z are three MDM user with different roles.
<u>Objective:</u>
User X should have read/write access to all the fields in Table A.
User Y should have only read access to all the fields in Table A.
User Z should have read access to F1,F2 and read/write access to F3,F4,F5 of Table A.
<u>Steps:</u>
1.     Create a role named “For User X”. Got to Tables and Fields tab, select Read/Write radio button for Table A.
2.     Create user “User X” assign the role “For User X” to the user.
3.     Create a role named “For User Y”. Got to Tables and Fields tab, select Read-Only radio button for Table A.
4.     Create user “User Y” assign the role “For User Y” to the user.
5.     Create a role named “For User Z”. Got to Tables and Fields tab, select Read-Only radio button for fields F1,F2, select Read/Write radio buttons for fields F3,F4,F5.
6.     Create user “User Z” assign the role “For User Z” to the user.
7.     Also go to Functions tab, set the permissions like create, delete to the roles.
<u>Testing:</u>
1.     Login to Data Mgr as User X, now you can
2.     Login to Data Mgr as User Y, now you can only read the data. If you try adding/updating/deleting any data it will throw warning message.
3.     Login to Data Mgr as User Z, now you can edit fields F1,F2 but when try to edit F3 or F4 or F5, system will throw warning message.
<u>Creating Masks and assigning to a role:</u>
1.     Login to Data manager as Admin.
2.     Create a mask in the mask table.
3.     Go to main table, right click on the record(s) and add them to the mask. Or do free form search based on hierarchy and add the records to the mask.
4.     Go to Console->Admin->Roles table->select a role say “For User X” -> tables and fields tab->drill down to mask table->select the mask from constraints field.
<u>Testing:</u>
1.     Login to data mgr as User X.
2.     Now you can see the masked records only.
3) Is this action of authorization assignment a little bit same with what we usually do in SAP R/3?
     No idea…
Thanks,
Arun prabhu S

Similar Messages

  • How to change XML Schema in MDM Console?

    Hi Experts,
    My scenario: SRM send products to MDM Catalog using PI.
    I need to change the XML Schema (XSD) for processing some new fields that don't exist in Catalog. So I created a copy of the XSD file in my station and made the necessary changes.
    In XML Schema (MDM Console), I changed the FileName for getting the XSD I created.
    But when I tested SRM Shopping Cart again, this couldn't access the products in Catalog anymore.
    1) After my chage the FileName shows the name with "c:\Documents and Settings\...". Does it work?? Is this the cause of the error?
    2) Do you know why my change affect the Shopping Cart access to the products in the Catalog?
    3) Now I don't know how to undo my change in FileName. I can't do it because in the FileName MDM Console it doesn't allow to write it. It allows only to choose a file in some place, my station for example.
    Could anyone help me?
    Thanks!
    Rose

    Hi Kanstantsin,
    I was analysing what you explain, but it was not exactly this problema. But what you wrote, help me to understand better the MDM and lets me know more about schemas .
    Thank you very much for your help.
    Hi Vinary,
    It was exactly this. I had edited the name. I changed it and now it is working.
    Thank you very much for your help!
    Rose

  • How to handle  authroziation levels in LSMW.

    Hi,
      How to handle authorization levels in LSMW. Please explain me step by step process.
    Thanks
    Nagendra

    Hi,
    U can try to call the LSMW object from a report program and there u can try to check the authorization for the LSMW object...
    Type pools
    TYPE-POOLS: tumls. " LSM Workbench: Type-Pool
    Data declaration
    DATA: project  TYPE  tumls_project,    " Project
          subproj  TYPE  tumls_subproj,    " Subproject
          object   TYPE  tumls_objectnew.  " Object
    START-OF-SELECTION.
    Store project
      project = 'TPISP - DC'.
    Store subproject
      subproj = 'VARIANT_MAT'.
    Store object
      object  = '6GSC022_TS3'.
    << Put ur authorization check here..
    Call the function module to display object (LSMW) maintenance screen
      CALL FUNCTION '/SAPDMC/LSM_OBJ_STARTER'
        EXPORTING
          project        = project
          subproj        = subproj
          object         = object
        EXCEPTIONS
          no_such_object = 1
          OTHERS         = 2.
    Basically from LSMWu2019s initial screen whenever you press enter or continue button it calls the FM  /SAPDMC/LSM_OBJ_STARTER and there is no authorisation check prior to do this, only LSMW checks for authorisation when you press Administration from GOTO menu using the FM  /SAPDMC/LSM_AUTHORIZATN_CHECK. That means any body can access any object and can do any unwanted change. And it is really hard to track the changes as LSMW does not have any inbuilt version management. So to avoid this before calling the FM we can do the authorisation check based on certain conditions (not necessary to do authority check, but can be achieved by maintaining parameter ID in the user profile or through maintaining custom table) and by this way we can restrict unwanted user access.
    Regards,
    Joy.

  • SAP MDM Console

    Hi,
    I'm new to MDM Console. Can anyone please tell me how can I, from SAP MDM Console restrict a particular user from <u>viewing</u> specific records in MDM Data Manager.
    Thanking you in advance.
    Hemal

    Hi,
    You can achieve this using Masks.
    Step 1:
    In the Data Manager , you filter records based on what ever condition you are looking for. Add the filtered records to a Mask.
    If you have no masks defined in the Data Manager.
    Select Masks table from the top left corner list in the Data Manager and create a Mask.
    Once you finished creating the Mask, go back to the Main table and add the Filtered records to the created mask.
    (Select all the records right click and select Add to Mask and select the Mask).
    Step 2:
    a. For New Role:
    1. In the MDM Console for that particular repository, create a new role and in the role details grid, select Table/Fields tab and look for Masks table. In the Constraints column, you select the Mask you created in the Data Manager.
    2. Assign the created role to the user.
    b. For Existing Role:
    In MDM console select the role in the repository and
    in the role details grid, select Table/Fields tab and look for Masks table. In the Constraints column, you select the Mask you created in the Data Manager.
    Hope this helps.
    Let me know if you need any additional information.
    Thanks and Regards
    Subbu

  • How to Create authorization WAD template for BW3.5?

    Hi All
    How To create Authorization for a Web template in Bw 3.5 ?
    I have a requirement to restrict a particular Web templated in bw 3.5 So that all the end users should not be able to access that template only a particular user should be allowed to view the template?
    I cant find any authorization object for the WAD template in bw 3.5 ?
    Can anyone tell me the procedure to include the WAD template authorization?
    Should i include the authorization template in the Menu - in pfcg??? . i have added the template in the Menu in the PFCG but still it didnt work.
    Thanks

    As you said, the authorizations for the WAD templates should be given in PFCG roles.
    But you have to include the access/authorization details in the authorization objects. WAD templates have been created with including info/multiprovider, info cubes right.. first you have to include these objects inside the Role in PFCG.
    S_RS_COMP,S_RS_COMP1,S_RS_MPRO,S_RS_ICUBE.
    just assigning WAD template in the menu of the roles is to display when you login with the userid.
    Please request your BASIS folks to do the same.
    Hope this would help you.

  • Please tell me how to handle list item in this concern

    please tell me how to handle list item in this concern
    My problem is:
    i have a category table with column categoryname(varchar type)
    I want to display the records of categoryname in a drop down list (i.e., list item )
    So ..please tell me how to do it
    Thanks in advance..

    This code is just a sample from the Help documentation. It won't work until you modify it for your form.
    Why do you have "steps" in your code? You are suppose to do what the steps tell you. You don't place the steps in your code. The steps must be removed from your code.
    Step 1 code goes in a program unit, not in a trigger.
    Step 2 and 3 code usually goes in a trigger.
    You will have to replace the names of the items and record group with your own names as you have defined them in your form.
    step 1: create a procedure in your application
    procedure load_list(itm in VARCHAR2, rg in VARCHAR2) is
    group_id RecordGroup := Find_Group(rg);
    list_id Item := Find_Item(itm);
    Begin
    if Populate_Group(group_id)<>0 then
    Message('Unable to populate record group');
    Raise Form_Trigger_Failure;
    end if;
    Clear_List(list_id);
    Populate_list(list_id, group_id);
    end;
    step 2: create a record group named rg_cat and assign Record Group Query to something like "select categoryname from category"
    step 3: call this procedure as
    load_list('categoryname','rg_cat');

  • How to upload a file in BPEL Console Using JSP in JDeveloper, pleae........

    I am very new to this JDeveloper & BPEl Process , please could some one help in ersolving my problem that is , how to upload a file in BPEL Console Using JSP in JDeveloper.

    Hi,
    ADF Faces provides you with the file upload component
    http://download-uk.oracle.com/docs/html/B25947_01/web_complex006.htm#CEGCEDHF
    http://download-uk.oracle.com/docs/html/B25947_01/appendixa007.htm#CHDEDCFA
    This gives you a handle to the file content. However, uploading files through a service is different and I suggest to consult teh BPEL forum for this BPEL
    Frank

  • How To Handle The Multiple Groups in OBIEE

    Hello,
    How To handle in OBIEE if the user is mapped to 2 groups. We are using External Table Authtication for authenticating

    What do you mean how to handle two groups? Are you assigning user to group relation through external table also? If yes, then you will need to set up row - wise initialization to capture multiple groups for one record.
    Hope your question is answered.
    Regards,
    -Amith.

  • How to handle the errors in transformations

    Hi
    I am using SOA, JDev 10.1.3.3.
    How to handle the exceptions in transformations.
    If any thing goes wrong in transformation then how to handle that situation.
    I am not getting any kind of instances like errored out..
    Please help me out
    Regards
    Pavankumar

    I think your issue is that your process is going into manual recovery.
    In the console click on the tab BPEL processes. There is a link on the left for manual recovery. Do you see your processes there?
    What happens if you put your transformation into a scope. The in that scope you have a catch All. In this catch All routine just do a terminate. This will error your process but you should see it appear in the console.
    cheers
    James

  • How to handle images (or let say mimes)

    Dear MDM Gurus,
    I want to start a discussion on how to handle MIMEs in MDM best.
    Szenario is MDM as a SRM Catalog System - Some million products(records) and as many mimes.
    - Import or linking?
    - What are the pros and cons of these two ways?
    - If I link images can MDM Server deliver them or do I need a seperate Webserver?
    - If I import them how will the DB Size extend?
    - If I "only" link the does it make a difference while lookup at import?
    Maybe some of you have more questions and hopefully some of you have a kind of best-practice help for us.
    Best regards
    Roman

    Hi Roman,
    Its a nice discussion you have started. According to me
    Advantage of linking
    1. You can store the millions of images in the separate machine so the disk space on which SQL Server is installed can be used to store other data.
    Disadvantage of linking
    1. It may take some time to load the repository or in accessing the MDM clients because system has to actually search the location and fetch the mimes where they are stored.
    Advantage of Storing
    1. Loading and Opening of MDM Clients time can be reduced since all the images are stored in the repository itself
    Disadvantage of Storing
    1. If there are millions of images as you have said then majority of drive space will be used by these mimes and hence we can create less MDM records
    Note: Sounds, Videos when stored in the repository cannot be played directly from the MDM Data manager they are first saved some where then only we can play them while this is not the case with linking
    Regards,
    Jitesh Talreja

  • How to Handle user Session in JSP

    Help me,
    How to handle user session in JSP.......

    Prakash_Pune wrote:
    tell me some Debugging tech. so i can overcome from my problem.....Do you use an IDE? Any IDE ships with a decent debugger where in you can just execute the code step by step, explore the current variable values and check what exactly is happening. For example Eclipse or IntelliJ. If you don´t use an IDE, then just place some System.out.println() or Logger.debug() statements at strategic locations printing the variables of relevance so that you can track in logs what exactly is happening.
    or tell any other way to find is my page is thread safe or not...Just write correct code and narrow the scope of the variables as much as possible. If you for example assigned the user object to a static variable or as a servlet´s instance variable, then exactly the same user object would be used everywhere in the application. That kind of logical things.

  • How to handle table control in BDC while uploading item details for anorder

    How to handle table control in BDC while uploading item details for an order?
    What is the use of CTU_PARAMS structure in BDC?
    In Finance I have done some changes to the layout set by coping to a zscript(duning letter) and how can assign the print program?
    What is the process to test the finance script?
    How can I see the print preview whether it is coming correctly or not?
    Thanks in advance.
    Regards.
    Abhilash.

    hi,
    for the bdc control refer the following link:
    http://www.sap-img.com/abap/bdc-example-using-table-control-in-bdc.htm
    ctu_params:
    refer to the link
    https://www.sdn.sap.com/irj/sdn/wiki?path=/display/abap/dataTransfers-LSMW%2CALE%2C+BDC
    reward if useful,
    thanks and regards

  • XML schema in MDM Console

    Hi! I have created a new XML and XSD for catalog item load. This is for batch processing of imports. I understand that I have to assign the format and XSD to the port relevant for this load. Before I can do that, I have to add the new XSD via Console > Admin > XML Schemas. The XSD is located on my C: Drive. After I have added the XSD schema, I noticed that the File Name colume is showing 'C:\product.xsd'. This is different from the other XSD that already existed in the system. For example, MDMSupplierListTransmission has filename MDMSupplierListTransmission without Namespace.xsd. My questions are:
    1. I assume that the xsd MDMSupplierListTransmission is located on the server? If so, where can I find them?
    2. For the XSD that I have added, is there a way for me to have it load onto the server (assuming 1 is correct)?
    Appreciate your enlightenment on this.
    Cheers!
    SF

    Hi SF,
    If you have generated an XSD File from your system and then uploaded from the system to your MDM console.
    It should work fine without nay problem.
    Thats the standard way to do it,if you dont have an already existing XSD and have to create one..
    Once the XSD file is loaded in console and its correct ,then your XML file must be allowed to import using it.
    Hope It Helped
    Thanks & Regards
    Simona Pinto

  • How to give authorization for create and change particular Condition Type

    Hi...
       In my requirement is , Only one user can be authorized to create and change a particular condition type 'ZABC' in vk11 and vk12 .
    For remaining condition type can be used as in normal .
    How to do this ? How to give authorization for a particular user for particular condition type ?
    Plz guide me ..
    Thanks in advance .
    Deepa .

    Hi Deepa ,
    u can check A.Object V_KOND_VEA, in user profile u can assign condition type or tables.
    have a word with ur basis guy , so he can help u in better way.
    aand also ref FM SD_COND_AUTH_CHECK
    Regards
    Prabhu

  • Issue in Posting Messages from XI to MDM Console

    Helloo Experts,
    I am trying to Post the Message from XI to SAP MDM Console. When I am trying to post a test message it appears success in XI and it is not visible in SAP MDM.
    But, the logs of MDM shows the Namespace and Interface were not registered.
    Can any one tell me how I can register my Namespaces in the SAP MDM console?
    From some of the previous topics I can understand that to register any interface I need to have the below details
    Namespace :
    Interface :
    Bean :
    Method :
    I can provide the Namespace and Interface which I am using to post the messages to SAP MDM console.
    Can any one tell me where do I can find the Bean and Method of the particular Inbound interface?
    Cheers!
      Ram

    Hello,
    I think I clearly didn't explain my problem.
    My Scenario is to post the message from SAP XI to one more External SAP system using HTTP cc (RFC destination)
    Unfortunately that External System has been built on SAP MDM.
    As per XI it is picking the message from the Source and successfully sending to the Receiver.
    But at Receiver side we donu2019t see any message. But we can see certain Logs stating that
    Error in processing the Inbound Message Exception:-Unable to Process the Message with Message ID u201C*********u201D with u201CNameSpace#Inbound InterfaceNameu201D is not Registered.
    I want to know how to register the namespace and the Interface name of XI system ( my own system ) in External SAP System.
    Cheers!
    Ram

Maybe you are looking for

  • Running OpenScript tests in OTM does not work

    Hi, I added an OpenScript functional script (for Siebel) in OTM, and when I click on "Run this test", and I see no action. In the Run History, OTM shows in the "Results" column that the test is "Running", although more than hour has passed since star

  • Get the Building in the transaction SU01

    Hi Gurus, We need to get the Building that is appearing in the transaction SU01. Suggest the table name or Function module to get the Building by passing the User ID. Regards Paul

  • Production order settle

    Hi Experts, Can anybody please tell me how to know whether production order is settled or not.

  • Photoshop-saved GIFs not playing on iOS

    Hi, I have spent quite some time looking for a solution to my extremely infuriating issue with GIF and Photoshop, and I really hope someone might help me with it on this forum. For example right now I have a file of 27 frames that is of course looped

  • Keep receiving a pop up from McAfee that states "Potentially Unwanted Program Blocked"

    I'm very new to owning and operating my own home computer.   Internet just recently installed.   While trying to find a safe "Minecraft" game for my grandson to pay, I now receive the message from McAfee that states "Portentially Unwanted Program Blo