Internet Restriction of Role or Workset in Portal

Hello SDN'ers
I have a requirement of restricting one role to the users who are accessing our company portal thru internet...
How should i go about it....
Please Help..
Thanks n Regards...

Hello Saxena,
You could have a diferrent desktop for the users accessing your portal
through internet (probably the easiest way is by configuring a portal rule
based on User or URL Alias) and within that desktop filter/restrict the role
in question.
More details on how to do this:
- Step 1 - Portal display rules for determining which portal desktop
http://help.sap.com/saphelp_nw04/helpdata/en/4b/29cf122f414721964269e1b675d62c/frameset.htm
- Step 2 - Filtering the role
http://help.sap.com/saphelp_nw70/helpdata/EN/5e/e855a35455458aa4df21a4339722c7/frameset.htm
good luck!
Rafael

Similar Messages

Portal Design - Best Practices for Role and Workset Tab Menu

We are looking to identify and promote best practices in SAP Portal Design.
First, is there a maximum number of tabs which should exist on the highest level tab menu, commonly called the role menu? Do a large number of tabs on this menu cause performance issues? Are there any other issues associated with a large number of tabs on this menu?
Second, can the workset tab menu be customized to be 2 lines of tabs? Our goal is to prevent tab scrolling.
Thanks

Debra,
Not aware of any performance issues with the number of tabs in the Level 1 or 2 menus, particularly if you have portal navigation caching enabled.
From an end user perspective I guess "best practice" would be to avoid scrolling in the top level navigation areas completely if possible.
You can do a number of things to avoid this, including:
- Keep the role/folder/workset names as short as possible.
- If necessary break the role down into multiple level 1 entry points to reduce the number of tabs in level 2.
An example of the second point would be MSS. Instead of creating a role with a single workset (i.e. level 1 tab), we usually split it into two folders called something like "My Staff" and My Finance" and define these folders as entry points. We therefore end up with two tabs in level 1 for the MSS role, and consequently a smaller number of tabs in level 2.
Hope that helps......
Regards,
John

How to restrict selected Role under a Role???

Hi Friends,
I have 3 roles, which are Role-1, Role-2, Role-3.
Role-2 & Role-3 are Under/Part of Role-1.
Now, I have assigned Role-1 to a user. By doing this, When he logs in he is able to see the Role-2 and Role-3 also eventhough we havent assigned Role-2&3.
Now My question is, How to restrict a role under a role. For example, I dont want to show Role-3.
When i checked the user roles assigned, i see only Role-1 but not 2 other roles.
Could anyone advice on how to make unwanted role in role. Assuming, no one is going to assign directly with Role-2 & Role-3. They got assigned only Role-1.
Thanks for u r time!!
Thanks,
Raghavendra.P

Hi Praveen,
Thanks for important/useful information. I really dont understand is., Inspite of giving the properties to the each of role/workset, How do we call the approprite under the role. for example :
If we have Role-2 with propery dept=sd,
and Role-3 with propert dept=xi, etc.
Now i have Role-1, within which i have Role-2 and Role-3.
Now, if i want to see only roles with dept=xi then where should i mention and what should i mention.
I understood till creating the properties, assigning the properties to roles/worksets, giving values to properties.
Only i doesnt understood is how to activate which we want in the scenario.
Thanks for your time..!!!
Thanks,
Raghavendra Pothula

Filtering role and workset content

Hi All,
We have the requirement for filtering role and workset content, for that I have followed one sample example from below sdn blogs link
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/3367e690-0201-0010-d285-c69bd884c9f3
I want to do the same for the departments also, can you guys please guide me how it can be done.

Hello,
Can you guide me on the same.
Thanks & Regards,
Pravin

Fetch PCD and UME roles and worksets

Hello,
I want to fetch PCD and UME roles and worksets of the logged in user in a web dynpro java application. Can some one help ?
Regards
Mrinalini

hi mriNalini
check this wiki links for web dynpo java
[Retrieving all iViews,pages,worksets from PCD |http://wiki.sdn.sap.com/wiki/display/WDJava/RetrievingalliViewsfromPCD]
[web dynpro java home page wiki|http://wiki.sdn.sap.com/wiki/display/WDJava/WelcometoWebDynproJava%21]
[Get Current Logged In User, using Web Dynpro for Java |http://wiki.sdn.sap.com/wiki/display/Snippets/GetCurrentLoggedInUser%2CusingWebDynprofor+Java]
and
[Fetching all the Portal Roles Assigned to the Current Logged in User, Using Web Dynpro for Java|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/80ef07f8-3e6c-2b10-9cb7-81d4ef2e294a?QuickLink=index&overridelayout=true] ( document)
hope these links solve your problem
Regards,
Maheshchandra

Automatic upload of roles from ECC to portal (UME with LDAP)

Hi experts,
This thread reopen the question asked on the following message : automatic upload of roles from BI to portal
However, it concerns this time "UME with LDAP".
Problematic :
SAP Library 04s tells us that is not yet possible to automate role replication (or role assigment replication) from ABAP Based back-end to Netweaver Portal. Only manual process for initial upload is possible.
Source = http://help.sap.com/saphelp_nw04s/helpdata/en/41/5e4d40ecf00272e10000000a155106/frameset.htm
Questions :
1 - Did anyone ever try to implement such an automatic tool ?
2 - What if I'm not able to write on the Active Directory ? I am still able, at least, to automate role assignment replication from ABAP Based back-end to Netweaver Portal (ie. UME with LDAP) ? Directly from SAP R/3 to EP through UME, without passing through Active Directory since the group field is not maintained in AD.
Many thanks for your inputs
Alexis MARTIN

Hello,
As I did not read the previous thread I don't know what exactly you are trying to achieve, but I can tell you about what we have done - as far as it is not too late yet.
We use the portal with integration to a BI system. In the ABAP stack we have lots of roles with menu items for hundreds of reports. We want the users to see these roles in the portal.
First we have used the role migration tool of the portal to upload these roles. There is a Java API for executing role uploads from code. You need to create a webservice in the java stack to call this api, and can call the webservice from ABAP.
However it is just a question of time and role size until this will not work at all. Standard role migration is more or less crap, stability is a problem. It also creates a lot of logs in the PCD and thus fills the database with trash. (After a few OSS messages there is now a program for deleting logs + you can turn of logging.) Also upload of larger roles takes up to an hour, and you alwasy have the problem that your portal roles are not up to date during the day.
When I got completely fed up, I have implemented an own navigation connector. When you log on to the portal it will connect to the ABAP stack via RFC, load the role, and generate the portal menu from it. It uses caching, but on every logon it checks whether the role has been updated in ABAP since the last time it was loaded. It is up to date, faster then PCD navigation, and you need absoluetely no periodical synching at all. I cant even understand why this is not offered by SAP per standard!
Drawback is that it will of course only work for the menu items, and only menu items with an "URL-type" are supported. I'm prettry sure however that it would be possible to implement a few other types as well.
Let me know if you are interested in the solution, I can give you a few additional details: oliverDOTsvisztATwienerbergerDOTcom
Oliver

Restriction in roles

Hello Gurus,
Iam working on a SLO project, There are 5 systems and all need to be merged.
Each and every system has their respective roles, Now i need to bring all roles in to the target system and restrict the roles with respect to their system.
Iam trying to restrict the roles with the organisational levels present.
Is their any more restriction need to be done ?
please provide some inputs.
Thanks,
Sanketh.

Hi Sanketh
If that is your remit then it looks like your project management have not scoped the activity properly and they have left you to pick up the pieces.
It sounds like you are doing the right thing for the custom developments, though you will end up with additional work with the * in the org levels.
If you need to restrict each role set to only be able to see it's own data:
1. Get the project to deliver you an organisational matrix listing all the org level elements that belong to each company. You can get the org levels from table USORG. insist that this is provided as one of their deliverables and provided ASAP.
2. ID all the org levels that are not relevant and you can keep a * in
3. Using the org level matrix you can now start to work on the roles to make sure that the roles only contain the org data for that company. If company x has a certain list of company codes then you need to maintain all those
4. Remove access to view tables & directly execute programs
5. Remove access to SQ00 or SQ01
Are you responsible for maintaining this after go-live? If so then you really need to start to assess that the roles support the functional scope of the to-be systems. Get the updated roles included in the cutover testing so that you can get validation that you have done what was asked and it tested OK before they are deployed into live.
I can't send any docs as previous work is either covered under client confidentiality arrangements or is our intellectual capital. I am more than happy to provide feedback on here though.
Good luck!

Role upload into BI portal pointing to 3.x version

Hi,
sap BI Bakend menu roles uploaded into BI Portal, But When I check iview property BWVersion its pointing to 2.x/3.x instead of Netweaver BI 7.0
And I assumed queries developed in 3.x pointing to 2.x/3.x. to avoid that I opened query in 7.x tool and saved and uploaded even though its pointing to 2.x/3.x template. Does there any bug or Are we missing any step in the part of upgrade?
Please your thoughts on this.

Hi Chirutha
Please see note 1121962
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/oss_notes/sdn_oss_ep_pi/~form/handler%7b5f4150503d3030323030363832353030303030303031393732265f4556454e543d444953504c4159265f4e4e554d3d31313231393632%7d
Regards,
Assaf Klieger
Installed Base Development
NetWeaver Portal Platform
SAP Labs Israel

Importing master role from ECC into portal throws derived role exception

Hello,
While uploading master and derived role from backend system into the portal I am getting the following exception.
com.sap.portal.pcd.rolemigration.RoleMigrationException: Nested Exception. Failure to execute native function. Nested Exception. ROLE_IS_DERIVED
Does it imply that the derived role is already imported with the import of master role and there is no need to explicitly import the derived role?
The landscape uses role upload tool of portal for UME.
Regards
Pooja

Hi Pooja,
There is a limitation with the role upload tool that the derived roles cannot be uploaded.
The migration is only able to upload roles which have their own menus. Derived R/3 roles does not have menus themselves as they derive them from other roles. The purpose of the migration is to bring the R/3 navigation structures into the portal. Therefore you can only migrate the role from which your role is derived.
Regards
Anja

How to get list of roles decleared in the portal server 8.1

Hi,
I want to retrieve list of all the user security roles decleared in a portal application
programatically.
Can anyone help me in this?
Thanx
Manish

See http://edocs.bea.com/wlp/docs81/javadoc/index.html
and com.bea.p13n.entitlements.management.RolePolicyManager.
Pass EntitlementConstants.P13N_ROLE_POLICY_POOL
for the aResourceId. (Note javadoc return value is wrong).
public static String[] listRolesForResource(String anEntAppName,
String aWebAppName,
String aResourceId)-Phil"Manish
R" <[email protected]> wrote in message
news:3f4b7336$[email protected]..
>
Hi,
I want to retrieve list of all the user security roles decleared in aportal application
programatically.
Can anyone help me in this?
Thanx
Manish

Roles and Worksets are indicated several times in Top-level-navigation.

Hallo Experts,
I dont understand why the Roles and Worksets in the Top-level-navigation are displayed several times. How can I change that?
Thank you very much
regards,
Galyna

Hi,
Which roles do you see several times?
If it is the home tab than you might have assigned yourself for example, eu_role, eu_core_role and cc_role.
If under the Home you see for example the Company, Work, Team... worksets twice than again you might have assigned yourself for example, eu_role, eu_core_role and cc_role.
If these are administrative roles than might have assigned yourself these roles through multiple groups/roles assignments.
If you will say exactly which roles/worksets you see several times we will be able to help more efficiently.
Roy

Restrict the role of User Administrator

Hello all,
I need to know that if it is possible to restrict the Role of an User Administrator to assign only a specific set of Roles to the end user.
For example : The user administrator should be able to assign only say Managers, Employees Roles to the Users and not any other roles like Super Administrators etc.
If so, how can we achieve that?
Regards
Avik

There is a authorization object (combined with a parameter) that does this restriction:
S_SPO_PAGE
Definition
Using authorization object S_SPO_PAGE, you can restrict the maximum number of pages of a request that can be printed on a particular printer.
This authorization check is only active if profile parameter rspo/auth/pagelimit is set to 1.
Defined fields
SPODEVICE Device name for which the restriction is to apply.
SPOPAGES Maximum number of pages allowed; enter a range (0 to n) here

Oim 11g r2: data access restriction using roles instead of organisations

can i implement data access restriction using roles instead of organisations in oim 11g r2?

in my use case a particular user can be member of more than one organisation. as far as i know oim does not suoport this use case using organisation, so i decide to use roles to represent my "organizations", but now i loose all the data access restrictions (scope).

Reg FPN Role assignment in consumer portal

Hi Team
We are trying to implement FPN between two portals both are EP7 SP20
i followed the basic steps like
1 establishing the trust between portals
2 regestration of producer portal in consumer portal
I am able to see the roles created in producer portal in consumer portal with the help of User administration--Identity management tool
the probelm we are facing is when i assign the role in consumer portal to a user it is not getting assigned but it is getting assigned in the producer portal
pls let what i need to do inorder for the producer role to be assigned to consumer portal user
thanks in advance

Hi,
already saw this several times. Unfortuantely, it never was a FPN error. It always was human error:
Confused by the Consumer / Producer concept the Admin created the role assignment in the producer and not in the consumer.
Just check that you are really using the consumer.
If so, consider opening up an OSS message.
br,
Tobias

Regarding roles and worksets ??

hi
is it possible ??
i have made 2 roles nd 6 worksets ..in 1 role made the entry point no and made the entry point yes for there worksets....these are shown in tabs ...
now i want to use the same worksets for a new role but want to make the role entry point 'yes'..
and doest not want to show the worksets shown in tab for 2 nd role ..want that 2nd role will be shown in tabs

Hi Arpit,
If I understand you correctly you have a role with worksets inside the role which are entry points (meaning you see them in the 1st level in the TLN).
Now you have a 2nd role which you want to see in the 1st level TLN, and want the
2nd level TLN for this role to have the same worksets you used in the other (1st) role.
In order to do that, just create delta links for the worksets, and add them to the 1st and to 2nd role.
These will actually be the same worksets. when you make changes to the original worksets, you'll see the changes in both roles.
Regards,
Tal.

Internet Restriction of Role or Workset in Portal

Similar Messages

Maybe you are looking for