Integration Builder - Repository - Users - Roles

Question

Is it possible to come up with ABAP role with the help of which he can login to Integration Repository but can not change any of the objects but for the one in a specific component.
I could make it work where the user is given SAP_XI_DEVELOPER role and  I can restrict him to access some objects using another Role that I built in IR. I know about excluding him full edit access etc. This is like giving him full access with modify permissions with SAP_XI_Developer and excluding him permission on some of the objects.
I tried to give a test user SAP_XI_DIPLAY_USER and then giving him include-fulledit on a specific Software component. But this did not work.
If anybody worked on this please let me know.
Regards
Mike

Answer 1

Hi Michael,
Yes it is possible, this is what i found on help.sap.com,
To make changes to authorizations on the ABAP side, proceed as follows for each dialog user role:
       1.      Call transaction PFCG.
       2.      Copy the single role SAP_XI_<role>_ABAP into the customer namespace (replace the prefix SAP).
       3.      Create a new composite role in the customer namespace (for example, *_XI_<role>).
       4.      Assign the new single role (suffix _ABAP) to the new composite role.
       5.      Assign the new SAP single role (suffix _J2EE) to the new composite role.
       6.      Make changes to the new single role (suffix _ABAP).
       7.      Generate an authorization profile for the new single role (suffix _ABAP).
Basically what is important is that the single roles with a J2EE suffix are still assigned to the current composite role. These J2EE single roles are known to the J2EE applications and are required for automatic authorization assignments during deployment.
I hope it helps,
Thanks,
Varun