Import roles into AE(urgent)

Hi all,
I want to import all the Back-end roles into AE,
Configuration->Roles->importroles
following message has shown.
Import status: 0 successfully imported out of 2 records found.
Kindly do the needful.
Thanks & Regards

The file option means that you need to populate the upload spreadsheet to load your roles.
Therefore if zero roles uploaded then you have several potential issues:
1. You did not populate the upload spreadsheet with any information
2. You did not populate the upload spreadsheet correct and it contains format errors.
I suggest you contact SUPPORT to obtain the document that describes each column of teh upload spreadsheet and what teh acceptable values for each cell are eg: special chaacters, cell max width, mandatory cells etc etc

Similar Messages

Import roles into RE

Hi all,
I am importing roles from R/3Backend to RE, executed TCode /virsa/re_dnldroles,while importing following error message is showing,Bulk download file has an invalid format.
I have downloaded the file on to the desk top.Shall i Made any changes to that file.
Please Guide Me
Thanks & Regards
Karunakar

You have to name the file with a .txt extension...
Ankur
GRC Consultant

Access Enforcer(error in approving the request) and import roles

Dear all,
error in approving the request at security stage(last)
manager and role owner are successfully approved.
and also importing roles into access enforcer was not successful.
imortstatus : 0 roles imported of 28 records found.
please find the system log:
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.messaging.MessageFormatter : parseDesc :   : INTO the method : desc :Please specify a file to import.paramNames :paramsMap :{FIELD_NAME=#_!FIELD_NAME#_!}
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:02:28,234 [Thread-47] DEBUG

In Addition to my previous response:
I meant to include the following:
Some of the fields that need to be properly defined with attributes are:
       System: must have the know SAP system defined here
       Role Approver (i presently are using most of the roles without having need for approval; I created a user called NOAPPRV in AE)
       Functional Area: need to have all the areas defined that roles will be assigned to
       Company: I only have one company so that's an easy one
Some areas I presently do not use but found they must ne coded and coded properly:
       ResponsibilityID:   N/A (coded as is)
       CommentsMandatory: NO (coded as is)
       Parent Role Owner:   NO
       Business Process: NA (I believe I originally coded N/A and it did not like that)
       Sub Process: NA (again N/A I believe error on me)
       Reaffirm Period: presently I am using 0 (zero)
       LastReaffirm: presently using 12/31/9999
Hope this helps a bit
I wanted to include an attachment with a sample of my Role Import spreadsheet but I'm not sure exactly how to do that; if I figure that out or someone can provide me the process I will include it
Jerry Synoga
Ryerson Inc.
630-758-2021

OIA Import roles NullPointerException

Hi,
I need to import roles into OIA and constantly face failed import attempts.
The roles.rbx looks like:
rolename<use=mandatory>,parentRoleName,roleDescription,policies,statusKey
The import file (filename: roles12) looks like:
"AD PROD","","Root Role for Windows","","1"
"Domain Computers","AD PROD","All workstations and servers joined to the domain","Domain Computers","1"
The installed OIA version is 11.1.1.5.1.
I previously imported users, business structures and even policies without hassles. But why does it suddenly fail to import role information?
The error message in rbacx.log is pretty much useless and doesn't help at all. You'll find it below.
Does anybody of you know this behavior? (or even better: how to fix it?:-)
Thanks in advance and regards
Nicolas
The only log information I get, is the following excerpt:
15:51:53,099 DEBUG [CacheModel] Cache 'SchedulerExecutionLogRecord.schedulerExecutionLogRecordResultCache': flushed
15:51:53,099 INFO [VaauSchedulerEventListenerImpl] Job executed: in roles12, IAM
15:51:53,099 INFO [VaauSchedulerEventListenerImpl] Job run time: 0s
15:51:53,100 INFO [VaauSchedulerEventListenerImpl] Next Run: null
15:52:01,966 ERROR [RoleFileReader] ---> Error occured file reading file:
java.lang.NullPointerException
at com.vaau.rbacx.util.NameIdMap.put(NameIdMap.java:100)
at com.vaau.rbacx.core.support.RbacxDataImporterImpl.getUserNameIdMap(RbacxDataImporterImpl.java:1791)
at com.vaau.rbacx.core.support.RbacxDataImporterImpl.importRoles(RbacxDataImporterImpl.java:1054)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy127.importRoles(Unknown Source)
at com.vaau.rbacx.iam.file.csv.RoleFileReader.importRoles(RoleFileReader.java:278)
at com.vaau.rbacx.iam.file.csv.RoleFileReader.readCSVFileInternal(RoleFileReader.java:203)
at com.vaau.rbacx.iam.file.csv.AbstractCSVFileReader.readInternal(AbstractCSVFileReader.java:84)
at com.vaau.rbacx.iam.file.support.AbstractFileReader.read(AbstractFileReader.java:160)
at com.vaau.rbacx.iam.file.support.AbstractFileReader.run(AbstractFileReader.java:82)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:619)
15:52:41,025 DEBUG [CacheModel] Cache 'IdentityAuditPolicyViolation.identityAuditPolicyViolationCache': retrieved object '0'
15:52:41,029 DEBUG [CacheModel] Cache 'IdentityAuditPolicyViolation.identityAuditPolicyViolationCache': retrieved object '0'
15:52:41,032 DEBUG [CacheModel] Cache 'IdentityAuditPolicyViolation.identityAuditPolicyViolationCache': retrieved object '0'
15:52:41,036 DEBUG [CacheModel] Cache 'IdentityAuditPolicyViolation.identityAuditPolicyViolationCache': retrieved object '0'
15:54:30,597 INFO [DefaultRemoter] Exec: dwrIAMService.getOIMIAMSolutionVersion()
15:54:31,818 INFO [DefaultRemoter] Exec: dwrIAMService.getConnectionSpecs()
15:54:45,290 INFO [DefaultRemoter] Exec: dwrSchedulerService.isValidCronExpression()
15:54:45,316 WARN [BasicObjectConverter] Missing java bean property to match javascript property: null. For causes see debug level logs:
15:54:45,316 INFO [DefaultRemoter] Exec: dwrSchedulerService.addSchedulerIAMJob()

The error message mentions NullPointerException and something about NameIdMap. So far it didn't make any sense, because assigning users to roles during an import process was AFAIK not feasible.
It turned out, that during the users import process there were some corrupt records, which caused two users to not have a username (in the table: username was NULL) and one user with a invalid username containing dash signs... So far the system never complained about it, when browsing thru the users or doing something else.
SOLUTION: Deleting the users from table GLOBALUSERS and BU_GLOBALUSERS and afterwards importing the roles again.... Hooray! It works!
Lessons learned:
1) Make sure, absolutely sure, that import files do match the structure, e.g. number of columns even when column values are empty.
2) Most importantly make plausibility checks whether the content of the columns appear correct.
3) Check rbacx.log (tail -f rbacx.log) to see what the system does.
3) Use a SQL Browser to analyze the content of the tables afterwards. The column structured view allows you to quickly find rows which do not match with the general visual impression. (e.g. username having a certain length but there are some which have much longer strings -> Suspicious!)
4) Do not bang your head on the table... it's just not worth it ;-)
Regards
Nicolas

Import roles to Bobj Server

Hi ,
When we say import roles into BI system to Bobj server, what are these roles? Are we talking about the roles to which some reports are attached at the backend or these are specific roles?
What roles we need to import in Bobj server and how do we know that/
Thanks
Portal

Hi,
sure you can assign rights to users in the BOE server to users and user groups to be able to view the content that you published but it looks to me you starting on the wrong angle.
lets assume you have setup a BI DW system with users, usergroups and data level security. So now on the BOE server side you can leverage all that and there is no need to create additional users or user groups in BOE - you import the SAP users and roles and you can automatically leverage the structure that you created originally in SAP BI.
the roles from SAP that you import become user groups in BOE and you can also use the roles to provide the structure for the content that you publish from SAP to BOE
ingo

Integrate GRC 10.1 with CUA and how to import roles from CUA & Child systems into GRC for provisioning

Hello,
I am trying to integrate CUA into our GRC 10.1 system through the below steps and so far I have completed the below steps following SAP Notes 1680108 and 1616121:
1. Connected CUABOX to GRCBOX like a plug-in system.
2. Updated CUA Global System and CUA Model Distribution in Maintain CUA settings under User Provisioning.
3. Next I am trying to import the roles from CUA(CUABOX) into GRC(GRCBOX) to be able to provision roles in CUA Child Systems(ECCBOX).
After reading few discussions in SCN, I have figured that we have to download a template in Role Import and populate it accordingly to upload the CUA child system roles into GRC system for provisioning in CUA Child Systems.
Unfortunately, this template has multiple fields and I am unable to determine the fields that should be populated as CUA Global System and CUA Child System to import into GRC. Also, when we upload CUA Child System Roles template what selections should be made in Role Import window.
Any help in this regard is very helpful.
Thank you,
Pawan

Hi Alessandro,
I have "Create user if does not exist" setting checked for both change action and assign role action and also have CUA enabled. Here is the list of steps that I am performing:
1. Create an access request for new account, T-CUA_CHILD and select a role from a child system ECC Z_ECC_ROLE_IN_CHILD_SYSTEM.
2. Approvals provided to assign the ECC role.
3. I see the following in GRFNMW_DBGMONITOR_WD.
           Auto provisioning activity at end of request at Path GRAC_DEFAULT_PATH and Stage              GRAC_SECURITY
               New User:T-CUA_CHILD created in System(s): ECC (created without role assignments)
               T-CUA_CHILD User does not exist in target system CUA
GRC created an account without role assignment in ECC but also throwed me an error that the user does not exist in CUA.
However, if I select roles from both CUA and ECC it creates the account in both systems with the selected role assignments.
So I am wondering if there is way to provide CUA access to users by default for new account requests types. I have tried setting up default roles for CUA but it does not assign the roles by default until I select the CUA system.
Thank you for your help!
Pawan

Importing CRM roles into Portal

Hi All,
I am using CRM-5.0 as backend and ER-6.0 with it. Both of them are sharing the same datasource. But if I create a new role in CRM I can't find it from portal. Whereas the users created in CRM are visible in portal. How can I import all the roles available in CRM to portal? My System landscape is working properly.
Thanks
Indranil Datta

Hi Indranil
SAP/CRM roles are built with transaction PFCG. Portal roles are built using portal tools. They have no direct connection.
In theory you can upload SAP/CRM roles into the portal to become portal roles, but what do you gain? Every time you change the SAP/CRM role you need to upload it again..
You are better to make portal roles that are assigned to portal groups that are the same as the PFCG roles. Maintain the portal roles manually, probably with a subset of the all the functions in the CRM role and assign them to the portal group that represents the FCG role.
Cheers

Can't Figure Out How To Import XML into a Table?

HELP!
I've been using InDesign for several years now... but everything Ive ever done has been basic one off layout concepts.
I am working on a website for a musical theater actress and for her resume, Id like to make a PDF which lists in table format the show, theatre and role she had for each job.
I could do this manually... but Id really like to learn how to just reuse the same XML data that I have for her website and import it into InDesign.
I have looked at Adobe's help file, I have scoured the internet, and I still can't figure it out... I have done like the adobe support file says... and I cant seem to get the values I create in her resume xml file to show up in a table I create in InDesign.
I even tried to simplify it for the learning process and did something as basic as an XML file that has 5 colors... couldnt even get that working.
So could someone explain it to me like Im a 5 year old... how to take a XML file, import it, place it in a table and have the data actually show up in the table.
thanks,
brian

Are you sure you want to use XML with tables for this? No doubt importing XML into tables is useful for some specialized tasks, such as importing formatting information inside the XML itself, but for most of the familiar tasks that XML excels at, tables are neither necessary nor useful.
In my (limited) experience, if the XML elements are well-differentiated, by which I mean different types of data have their own distinctive tags, then the special powers of XML can be exploited more fully using the more familiar tagged text, nested tags etc. in ordinary text frames using paragraph breaks, tab characters, etc. to achieve a suitably "tabular" finished appearance.
If you must import XML into tables, I recommend Adobe's own PDF "Adobe InDesign CS3 and XML: A Technical Reference" availabe here:
http://www.adobe.com/designcenter/indesign/articles/indcs3ip_xmlrules.pdf
It sounds very daunting -- the words "technical reference" make me shudder -- but actually it's very readable and not very technical at all. Some nice pics and everything!
Jeremy

Powershell command to migrate Exchange 2007 mailbox databases with a legacy name, & import them into a new 2007 instance, with a new name.

Hi All. I am currently at the later stage of provisioning a new CCR Exchange 2007 migration (to
virtualise old Exchange 2007 hardware) for 5,000 users & have a quick question.
I have created around 15 newly named storage groups, & have named 1 new DB per group, with the same name (let's say New-DB-1), residing within them. The problem I have, is the old legacy DB's have different names (let's say Old-DB-1) & I need
to import them into the new storage groups, to match the new names. So far I can import/export between old & new OK if both old & new DB names\folders etc. names marry up perfectly, but are unable to if there not the same. Does anyone have any thoughts
on how best to tackle this, as this is one of the final hurdles stopping the migration? Many Thanks, John

Hi All
Many Thanks for the feedback.
The terminology 'migrate' was used based around the fact I will be decommissioning the old 2007 physical environment. This is after moving all DB's over to the new newly created Virtual environment that will host all roles.
The solution I ended up using yesterday, was the following:
1) Dismounted the relevant named DB (NEWDB) in the new environment.
2) I then ticked the 'This database can be overwritten by a restore option' box.
3) Copied over the old named DB (OLDDB) to the same location, & overwrote using the new name (NEWDB).
4) Re-mounted the (NEWDB).
5) Ran the following 2 PowerShell commands:
Get-mailbox –database OLDDB | move-mailbox –targetdatabase NEWDB -configurationonly:$true
Get-MailboxDatabase NEWDB | ResetSearchIndex.ps1 -force
6) Checked to make sure the clients were working ok, in the now the new (NEWDB) environment.
Rich: Many thanks for your PS script, which I will test with future DB moves & provide feedback
J
John.

Error in accessing imported roles

Hi All,
I am facing a problem while i am accessing roles which are imported from one portal to another.These roles are already assigned to iviews.I created a new user into a portal and assigned a imported role to that user.So while i am logging to the portal as the specified user then the iview related to that role should be visible to the user.But i couldnt find anything except a blank iview with portal desktop.
Is there any changes which i need to do specially for the roles which are imported from a epa file?
Please put your suggessions.
Thanks you in advance.
Chaitali

I am facing a problem while i am accessing roles which are imported from one portal to another.These roles are already assigned to iviews.
Did you tranport the iviews and roles or just the roles ? Do you already have the iviews with the same object id and object prefix on the target portal ?
Just click on the imported role on the target portal and check if you can see those iviews attached to this role ?
Hope this helps.
Cheers,
Sunil
PS: Reward points for helpful answers.

How to Import file into primavera

Hi Expert,
I am very new to Primavera,My requirement is to import th efile into Promavera. It would be great help to me if some one send document to the below mail id or give some useful link..Please help me its very urgent.
Mail ID : [email protected]
Thanks in advance
Regards
Sathish
Edited by: user13380775 on Jul 9, 2010 3:23 AM

Hello
1) Click on FILE and then IMPORT
2) When the Import window opens choose the type of file you want to import. ex. XER or MS projects file. Then click next
3) Select Import Type - usually Project, click next
4) Select the file that you want to import by navigating to it, then click next
5) Choose where to import it into your databse by selecting the appropriate place in "Import to". (You may also consider the "Import actions" if you want to have the import to create a new project or update a project) the click finish
6) Primavera will start to import the project and in a few minutes it should be done.

Access Enforcer Import Role Automation

We would like to automatically import roles from SAP.
We do know that you can use Role Expert which in itself can be used to automate the import. However, we still have to manually import into AE - even if RE is used as the role source.
Is there a way to periodically automate the import from either SAP or RE because it does not make sense to have to manuall import roles every time a new role is created in SAP.
Thanks

Actually, it does make sense.
One of the prime features of Access Enforcer is that you don't import all the roles, but just the ones you want users to be able to request.
For each of the roles, it's useful to put them into some kind of category (functional area, business process, sub-process), which makes handling for users a lot easier, and you have to assign approvers.
One way to do that is to use an Excel spreadsheet and manage the data there. Easy to use and update, and quick to upload into AE.
Kind regards,
Frank.

Synchornized automatically roles into CUP from Backend

Hi all,
We would like to synchronize the roles between backend and CUP both periodically and automatically.
We have only RAR and CUP modules in our GRC.
We can synchronize the roles between CUP and backend by executing regularly the import role job in CUP from Configuration->Roles ->Import Roles or roles could be loaded from backend.
But we are looking for a way to synchornized automatically a list of roles into CUP from backend. It is possible?
Thanks in advance
Marta

Hi Marta,
nope, unfortunately there is no feature to do so.
Best,
Frank

Authentication: Import Role problem - Jasper Exception

Hi All,
I'm trying to import roles from SAP BW 7.0 to BO Enterprise XI 3.1, but when I click on "import roles" on CMC, I get the following error:
org.apache.jasper.JasperException
I've followed all the steps on "Business Integration Kit for SAP - Installation and Configuration" PDF. The file sapjco.jar is in tomcat/shared/lib, the Tomcat classpath is configured, and the librfc32.dll and sapjcorfc.dll are on Windowssystem32 directory. I also applied login/accept_sso2_ticket and login/create_sso2_ticket profiles on BW app server. I still get the same error.
For information: I'm using Windows server 2008 64bit.
Any suggestion?
Regards
André

Hi Everyone,
I am also getting the same error while importing roles from SAP BW 7.0 to BO Enterprise XI 3.1. The error text is "org.apache.jasper.JasperException".
I too followed all the steps mentioned in "BusinessObjects Integration Kit for SAP - Installation and Configuration" PDF.
The profile parameters login/create_sso2_ticket' and 'login/accept_sso2_ticket' on the SAP BW application server were already set to 2 & 1 resp.
As discussed in this thread, I copied the librfc32.dll and sapjcorfc.dll files into C:\Windows\SYSWOW64 from Windows\system32 directory.
I have used 32bit version of the sapjco.jar file and it is in tomcat/shared/lib.
The SAP-BO server is installed on Windows Server 2003 R2 Standard x64 Edition SP2
Can anyone help to resolve this issue?
Thanks & Regards,
Tushar

Trouble importing roles from CRM

Can someone please tell me what version of the CRM business package to apply so I can import the business roles into the portal? We tried applying the latest version: SP08 Patch 1 for the BP CRM Application Content 7.0 and BP CRM Foundation Content 7.0 and got the following errors.
Application component not found: par:/applications/com.sap.crm.fnd.dnac/components/DNAC
Validation failed on handler 'com.sap.portal.ivs.genericcreator.handlers.fpn.FpnPortaliViewHandler'
Based on information on another forum posting from last spring, we need to apply an earlier version of the CRM business package to the portal, but I don't know which version.
THanks
Angie.

The CRM package that needs to be applied is the latest version. However, we needed to download the package as binary to avoid some file name issue that presented itself. After we did this we were able to succesfully install all components of the package.
Thanks
Angie.

Import roles into AE(urgent)

Similar Messages

Maybe you are looking for