Importing roles from R3

Hi all,
I am trying to import roles from R3 system.
I've gone through the document in service.sap.com - how to guides.
Is it mandatory that v should have the S_RFC authorization for function group PWP2, in order to import the roles?
I don't have that authorization in R3; still tried to import the role. The role gets created in the role folder but the transaction iviews are not created? When I open the role, instead of getting the transactions listed down, I get <b>'Linked object not available'</b>. Is it because of that authorization? Can someone help me out?
Thanks & regards,
M.Subathra

Hi,
Now, I've the authorization S_RFC.
Still, I get the error. Should I do some configuration in the portal side?
The stack trace says:
com.sap.portal.pcd.rolemigration.RoleMigrationConnectionException: com.sap.portal.pcd.rolemigration.util.Connector.callFunction(DR812,en_US,<username>,TWPN_GET_TRANSACTION,SERVICE_TABLE,{ENABLE_LOGGING= , TCODE=AJAB}): Connection not available for system 'DR812' Failed to get system null at com.sap.portal.pcd.rolemigration.util.Connector.callFunction(Connector.java:143) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:977) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.doDependentObjects(RoleMigrationObject.java:5046) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.save(RoleMigrationObject.java:4759) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.save(RoleMigrationObject.java:4245) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:1733) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:769) at com.sap.portal.pcd.rolemigration.RoleMigrationThread.run(RoleMigrationThread.java:488) Original exception: com.sapportals.portal.ivs.cg.SystemNotFoundException: Failed to get system null at com.sap.portal.ivs.internalconnector.ConnectionProvider.getSystemObject(ConnectionProvider.java:412) at com.sap.portal.ivs.internalconnector.ConnectionProvider.getConnection(ConnectionProvider.java:513) at com.sap.portal.ivs.internalconnector.ConnectionProvider.getConnection(ConnectionProvider.java:258) at com.sapportals.portal.ivs.cg.ConnectorService.getConnection(ConnectorService.java:478) at com.sapportals.portal.ivs.cg.ConnectorService.getConnection(ConnectorService.java:85) at com.sap.portal.pcd.rolemigration.util.Connector.callFunction(Connector.java:79) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:977) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.doDependentObjects(RoleMigrationObject.java:5046) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.save(RoleMigrationObject.java:4759) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.save(RoleMigrationObject.java:4245) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:1733) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:769) at com.sap.portal.pcd.rolemigration.RoleMigrationThread.run(RoleMigrationThread.java:488)
Any help in this regard is appreciated.
Thanks & regards,
M.Subathra

Similar Messages

Import Roles from an External Database

Is it possible to import Roles from an external database via an ActiveSynch import?

Hi lozlow,
We use a cvs for holding our roles.
The main issue we have with this method is that we must check to ensure role approvers and ObjectGroups exist in IDM before we do the import. IDM does not check the validity of these references as part of the import.
If we fail to check and the role approver or a ObjectGroup does not exist then the IDM will error when editing a user or listing roles.

Integrate GRC 10.1 with CUA and how to import roles from CUA & Child systems into GRC for provisioning

Hello,
I am trying to integrate CUA into our GRC 10.1 system through the below steps and so far I have completed the below steps following SAP Notes 1680108 and 1616121:
1. Connected CUABOX to GRCBOX like a plug-in system.
2. Updated CUA Global System and CUA Model Distribution in Maintain CUA settings under User Provisioning.
3. Next I am trying to import the roles from CUA(CUABOX) into GRC(GRCBOX) to be able to provision roles in CUA Child Systems(ECCBOX).
After reading few discussions in SCN, I have figured that we have to download a template in Role Import and populate it accordingly to upload the CUA child system roles into GRC system for provisioning in CUA Child Systems.
Unfortunately, this template has multiple fields and I am unable to determine the fields that should be populated as CUA Global System and CUA Child System to import into GRC. Also, when we upload CUA Child System Roles template what selections should be made in Role Import window.
Any help in this regard is very helpful.
Thank you,
Pawan

Hi Alessandro,
I have "Create user if does not exist" setting checked for both change action and assign role action and also have CUA enabled. Here is the list of steps that I am performing:
1. Create an access request for new account, T-CUA_CHILD and select a role from a child system ECC Z_ECC_ROLE_IN_CHILD_SYSTEM.
2. Approvals provided to assign the ECC role.
3. I see the following in GRFNMW_DBGMONITOR_WD.
           Auto provisioning activity at end of request at Path GRAC_DEFAULT_PATH and Stage              GRAC_SECURITY
               New User:T-CUA_CHILD created in System(s): ECC (created without role assignments)
               T-CUA_CHILD User does not exist in target system CUA
GRC created an account without role assignment in ECC but also throwed me an error that the user does not exist in CUA.
However, if I select roles from both CUA and ECC it creates the account in both systems with the selected role assignments.
So I am wondering if there is way to provide CUA access to users by default for new account requests types. I have tried setting up default roles for CUA but it does not assign the roles by default until I select the CUA system.
Thank you for your help!
Pawan

Importing roles from a dump file question..

Hi All,
Is there a way of importing (using imp) ONLY roles from a dump file?
I have a dump file of a database from an oracle 9i - version 9.2.0.3 that I'm trying to import into oracle 11g. The import complains about roles not existing and the grants fails due to that.
Is there a way to import the roles 1st from the dmp file so that when I import the grants (grants=Y) I won't be getting these sort of errors:
IMP-00003: ORACLE error 1917 encountered
ORA-01917: user or role 'RppT_ALL_ROLE' does not exist
IMP-00017: following statement failed with ORACLE error 1917:
"GRANT UPDATE ON "LOCATION_CONTACT" TO "RppT_ALL_ROLE""
IMP-00003: ORACLE error 1917 encountered
ORA-01917: user or role 'RppT_ALL_ROLE' does not exist
...Thanks

I'm guessing that you're referring to run this on the 9i database and then copy the output to the 11g DB if I'm not mistaken!?
Not possible as I don't have access to the 9i database. The DB is on the client side and they've given us a dump file. I'm trying to import the dump and then validate objects counts.
Is there a way to directly import the roles from the dmp file?
Thanks

Exception in JSP during import roles from BO to SAP

Good day,
I have installed SAP Integration Kit but during Import Role action at Authentification - SAP I have error:
Exception in JSP: /jsp/auth/sapsec_import_role.jsp:16 13: <%@ taglib prefix="b" uri="com.businessobjects.webutil.jsf.controls_1.0"%> 14: 15: 16: <jsp:useBean id="secSAPR3ImportRoleBean" 17: class="com.businessobjects.clientaction.sap.auth.importrole.SAPR3AuthImportRoleBean" 18: scope="session" /> 19: Stacktrace:
OS - AIX 5.3 64 bit
Java Connector 2.1.8 32 bit
Best regards, Iurii Tiunov.

Hi,
BOBJ 12.0.1
BOBJ INTGR. FOR SAP XI 3.1
I Try to install FixPack 1.3 for BOBJ INTGR. FOR SAP XI 3.1 but error is the same:
Exception in JSP: /jsp/auth/sapsec_import_role.jsp:16 13: <%@ taglib prefix="b" uri="com.businessobjects.webutil.jsf.controls_1.0"%> 14: 15: 16: <jsp:useBean id="secSAPR3ImportRoleBean" 17: class="com.businessobjects.clientaction.sap.auth.importrole.SAPR3AuthImportRoleBean" 18: scope="session" /> 19: Stacktrace:
Best regards, Iurii Tiunov.

Trouble importing roles from CRM

Can someone please tell me what version of the CRM business package to apply so I can import the business roles into the portal? We tried applying the latest version: SP08 Patch 1 for the BP CRM Application Content 7.0 and BP CRM Foundation Content 7.0 and got the following errors.
Application component not found: par:/applications/com.sap.crm.fnd.dnac/components/DNAC
Validation failed on handler 'com.sap.portal.ivs.genericcreator.handlers.fpn.FpnPortaliViewHandler'
Based on information on another forum posting from last spring, we need to apply an earlier version of the CRM business package to the portal, but I don't know which version.
THanks
Angie.

The CRM package that needs to be applied is the latest version. However, we needed to download the package as binary to avoid some file name issue that presented itself. After we did this we were able to succesfully install all components of the package.
Thanks
Angie.

CUP SP12: Can no longer import roles to CUP from ERM

Hello All,
I can no longer import roles from ERM to CUP on SP12. What is going on with SP12? Error message: "Action failed."
Log info:
2010-06-14 14:13:52,933 [SAPEngine_Application_Thread[impl:3]_20] ERROR
com.virsa.ae.dao.NoRecordsFoundException: No Records Found ..
com.virsa.ae.dao.NoRecordsFoundException: No Records Found ..
at com.virsa.ae.dao.dto.LocaleFieldContainerDTO.getRecordsList(LocaleFieldContainerDTO.java:127)
2010-06-14 14:13:52,935 [SAPEngine_Application_Thread[impl:3]_20] ERROR com.virsa.ae.configuration.ConfigurationException: No Records Found ..
com.virsa.ae.configuration.ConfigurationException: No Records Found ..
at com.virsa.ae.configuration.bo.ImportRolesBO.upsert(ImportRolesBO.java:979)
Is anyone else running SP12 with CUP & ERM?
Best Regards, Dylan

SAP came back and mentioned that I had some role descriptions missing (empty value) and this was causing the issue.
The results vary by role type:
1. SINGLE roles CAN be imported successfully to CUP from ERM with missing role descriptions.
2. DERIVED roles CANNOT be import to CUP from ERM if the role description is missing.
The solution is to update the DERIVED roles with role descriptions. It's always good practice to have role descriptions for all roles, but many customers have different views on the importance/usefulness of role descriptions.
This didn't appear to be an issue before SP11, but oh well... Also, since the Role Description field in ERM is mandatory, the mass role import should not allow roles to be imported with missing role descriptions, but it does. I've mentioned that to SAP as well.
I'm going to close this thread as solved, with workarounds.
-Dylan

Access Enforcer Import Role Automation

We would like to automatically import roles from SAP.
We do know that you can use Role Expert which in itself can be used to automate the import. However, we still have to manually import into AE - even if RE is used as the role source.
Is there a way to periodically automate the import from either SAP or RE because it does not make sense to have to manuall import roles every time a new role is created in SAP.
Thanks

Actually, it does make sense.
One of the prime features of Access Enforcer is that you don't import all the roles, but just the ones you want users to be able to request.
For each of the roles, it's useful to put them into some kind of category (functional area, business process, sub-process), which makes handling for users a lot easier, and you have to assign approvers.
One way to do that is to use an Excel spreadsheet and manage the data there. Easy to use and update, and quick to upload into AE.
Kind regards,
Frank.

ERM SP13: New methodology for import roles

Hi all,
We have created and set as active a new process for the methodology, with only 3 steps (Definition, Testing and Approval).The problem is that when we import roles from R3, the roles are import to the system within the SAP default methodology which is inactive, with 7 steps (Definition, Authorization, Derivation, Risk Analysis, Approval, Generation and Testing).
I have two questions:
- How can i import the roles to the new and active methodology (3 steps)?
- How can i select that the roles imported go to the last stage of the methodology? I mean, all the steps will be in "green option"?
Thanks in advance. Best regards,
Sergio

Hi R M,
Thanks for your quickly response,
- About the apply to existing roles option, yes, i try that. But ERM continues apply the standard process for methodology. You think wil be resolved if i delete it?
- About the column Set Role Methodology, youre right, now i can put all the import roles in the last stage of the methodology in "green option".
Many thanks for your help,
Sergio

Authentication: Import Role problem - Jasper Exception

Hi All,
I'm trying to import roles from SAP BW 7.0 to BO Enterprise XI 3.1, but when I click on "import roles" on CMC, I get the following error:
org.apache.jasper.JasperException
I've followed all the steps on "Business Integration Kit for SAP - Installation and Configuration" PDF. The file sapjco.jar is in tomcat/shared/lib, the Tomcat classpath is configured, and the librfc32.dll and sapjcorfc.dll are on Windowssystem32 directory. I also applied login/accept_sso2_ticket and login/create_sso2_ticket profiles on BW app server. I still get the same error.
For information: I'm using Windows server 2008 64bit.
Any suggestion?
Regards
André

Hi Everyone,
I am also getting the same error while importing roles from SAP BW 7.0 to BO Enterprise XI 3.1. The error text is "org.apache.jasper.JasperException".
I too followed all the steps mentioned in "BusinessObjects Integration Kit for SAP - Installation and Configuration" PDF.
The profile parameters login/create_sso2_ticket' and 'login/accept_sso2_ticket' on the SAP BW application server were already set to 2 & 1 resp.
As discussed in this thread, I copied the librfc32.dll and sapjcorfc.dll files into C:\Windows\SYSWOW64 from Windows\system32 directory.
I have used 32bit version of the sapjco.jar file and it is in tomcat/shared/lib.
The SAP-BO server is installed on Windows Server 2003 R2 Standard x64 Edition SP2
Can anyone help to resolve this issue?
Thanks & Regards,
Tushar

Error trying to Import Role

Hi Guys!
I want to know if some of you have this problem and what you do. .. when I want to mass import role in ERM, I complet all fields and when I press " Import" the system show "The page cannot displayed" if I were trying to work off line ....and there`s no log system for this.
Any ideas ???
Thanks!
Regards

Guys! I really need your help .... Anybody can help me with this?? This happen when I try to import from DEC.
I could import role from QA ( I import in background in GRC), but when I try to find the role (by search) any role appears... Any ideas????
Thanks!!

Import roles into RE

Hi all,
I am importing roles from R/3Backend to RE, executed TCode /virsa/re_dnldroles,while importing following error message is showing,Bulk download file has an invalid format.
I have downloaded the file on to the desk top.Shall i Made any changes to that file.
Please Guide Me
Thanks & Regards
Karunakar

You have to name the file with a .txt extension...
Ankur
GRC Consultant

Importing Roles-User Groups Mapping from one Environment to Another

Hi,
I have this situation. I am using WLP8.1 SP4
I have two environments (E1 and E2)and I have 2 MS Active Directory server (MS1 and MS2). The LDAP authenticator in E1 is configured to use MS1 and the LDAP authenticator in E2 is configured to use MS2. The user groups are stored in the Active Directory servers and the role-user groups mappings are done within the Weblogic.
I imported the role-user groups mappings from E1 to E2 and it works. After that, if I map another user group to an existing role and do an import again from E1 to E2, it does not take any effect. Why is it so? Any kind soul can help me? I am very lost now.?:|

Hello! :)
Unfortunately, I'm already using Catalog Manager in transferring files. I'd really like to find out if there is a particular file that defines the permissions of the objects that I should also transfer, or if I should really do that manually for each of the objects?
Thanks for the reply! :)

Importing master role from ECC into portal throws derived role exception

Hello,
While uploading master and derived role from backend system into the portal I am getting the following exception.
com.sap.portal.pcd.rolemigration.RoleMigrationException: Nested Exception. Failure to execute native function. Nested Exception. ROLE_IS_DERIVED
Does it imply that the derived role is already imported with the import of master role and there is no need to explicitly import the derived role?
The landscape uses role upload tool of portal for UME.
Regards
Pooja

Hi Pooja,
There is a limitation with the role upload tool that the derived roles cannot be uploaded.
The migration is only able to upload roles which have their own menus. Derived R/3 roles does not have menus themselves as they derive them from other roles. The purpose of the migration is to bring the R/3 navigation structures into the portal. Therefore you can only migrate the role from which your role is derived.
Regards
Anja

Upload of BW Roles from BW (2004s)

Hi
I am in the process of uploading my roles from BW into the portal.
I was wondering if we can pre configure the properties that the reports (iviews) inherit as part of the upload.
For example after the role has been uploaded the property "Launch in New Window" is set as " Display in Portal Content Area".
We would like this to always default to "Display in Separate Window".
Can this be be setting be configured to apply to all reports uploaded as part of the role upload procedure. This removes the need to change each iviews properties after the upload.
Thanks in advance.
Ian
Message was edited by:
        Ian Carbonel

Hi
I have made changes to the BEx Web Application Iview however the changes did not appear to transport into my test environment.
I have found the following documentation relating to the protection of objects during transport.
http://help.sap.com/saphelp_nw04s/helpdata/en/70/ccc572a094fb4c9b15af909767b924/content.htm
·        At export: System objects and content objects with the namespace prefixes com.sap.portals* or com.sap.km* are automatically excluded from the export package and therefore not exported. PAR archives are not usually included in the export.
·        At import: If there are content objects with the namespace prefix com.sap.portals* or com.sap.km* in a package, they are automatically excluded from the import.
Is this the reason? Is it not possible to change the properties of objects in the namespace com.sap.portals*?
Thanks in advance

Importing roles from R3

Similar Messages

Maybe you are looking for