Manage all role in SAP
Hi, is there a way in netweaver 2004s to manage all the portal roles in R/3 4.6C?
Thanks
Jean Seguin
Hi Jean,
Please check if this link gives what you want:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/1beaa6e3-0601-0010-9aa2-ae7af96a8f67
Especially check Portal Role Distribution to backend system.
Regards.
Ruchit.
Similar Messages
-
Basic manager/employee role with MSS/ESS content
hey
which role should I give my manager/employee in the R/3 system so they got the right permission?
Now I have to add SAP_ALL and SAP_NEW to there profiles or I get error messages saying they don't have the right permission.
In the portal my manager has rol com.sap.pct.mss.manager
and my employee has rol com.sap.pct.ess.employee_self_service
thanks in advancehi lien
u can assign SAP_EMPLOYEE_ERP role to employee which is composite role.
which contain following role.
SAP_BC_EMPLOYEE
SAP_BC_ENDUSER
SAP_ESSUSER_ERP
SAP_HR_EMPLOYEE_DE_ERP
SAP_HR_EMPLOYEE_US_ERP
SAP_HR_PA_XF_EXPERT
mainitian the authorization for all role using tcode-pfcg, generate the profiles and completet the user comparisation.
if u don't have the full authorization for PFCG ask ur basis person to do this.
(this is usefull to RUN ESS from portal)
or if u used custom role than
make sure your user will need authorization object (S_SERVICE)
add this object in the Role that u used. (PFCG)
if u have any query revert me back.
regards,
kaushal -
Can Solution Manager manage all the security for all of our SAP Landscape?
Hello Solman gurus - We're looking at Solution Manager once again. I had installed it for incident management back several years ago during our original go-live - and it fell by the wayside after go-live. My question is related to the latest and greatest version - can it actually to the administration of security roles, profiles, etc. of all of our SAP systems from within Solution Manager?
Much thanks, Ken LittleSound like Central User Administration to me.....
-
Hi All,
Is there any general role on the portal that can give user the ability to manage all the rooms (complete access to all the rooms)? Something that can give permissions to access Member maintenance, Room maintenance etc of all the rooms.
Thanks in advance.HI
Go to
content administration -
> collaboration content -
> room adminstration -
>
there select the room in which u wanna change the owner using name tab.
u will list of rooms
in the list place a tick mark to the room u wanna change and press change owner tab.
Regards,
vijay.
note : in collaboration role>Rooms>click your room>Admin:Room>
u cannot change owner of the room where u r not the owner
but in content administration -> collaboration content -> room adminstration u can change owner of any room listed
Edited by: vijayakumar kanniah mohan on May 16, 2008 3:49 PM
Edited by: vijayakumar kanniah mohan on May 16, 2008 3:52 PM
Edited by: vijayakumar kanniah mohan on May 16, 2008 3:54 PM -
EP7.0 - Adding server nodes (processes) and managing all the logs
First, can anyone confirm whether the Template Configuration Tool is used with Portal 7.0 (NW2004s)? All of the documentation I find is for Portal 6.0. If you use the Template Configuration Tool, it will match the resources available on your server to the type of J2EE you will be running which is the route I prefer to take. Otherwise, I'll add the nodes manually with configtool.
Second, is it a best practice to just stick to one server node (server0) on your DEV system? I would think that would make analyzing all of those fun logs much easier.
Third, are there any best practices for managing all of those logs if you start adding additional nodes. I have server0 on the QA system with 2048MB of Heap. I plan to add server1, server2 and server3 ... all with 2048MB of Heap. But then the number of logs is 4 times for everything. The Portal Tuning guide suggests turning off unnecessary logging which I will do but our developers want a convenient way to do research and we don't want them overwhelmed with logs.
We are setting up Solution Manager Diagnostics now so I haven't seen it's functionality. Will it make log anaysis more streamlined and easier to find relevant data even if you have 4 server nodes?Hi Richard,
A1: NO!!! do not use the Template Configuration Tool on NW7.0 as it sets properties that are not valid or optimal anymore.
A2: I don't know if there is a best practice about it but I do know that it is best practice to have atleast 2 servernodes per instance because this helps you top optimize your resources when 1 servernode is in Full Garbage Collection the other still can use the CPU to process (Presented on SAP Insider Infra & Admin in Orlando 2008).
A3: Regarding the logging This is just how it is made... every servernode logs for itsself...
Use NetWeaver Administrator (/nwa) to auto consoldate the loggin info. It's slow but eventualy it does the job. You can give developers an NWA read-only role (shipped by default) to look at the logs.
A4: SMD makes central monitoring and diagnostic possible for your complete landscape.
You can configure a central NWA on the SMD host. The solution as proposed by A3 is already helping you to manage your issue (consolidating logs of multiple servernodes.. >2 )
Good Luck!
Benjamin Houttuin -
Hi All, In my SAP environment, i want to give access of all SAP reports to
Hi All,
In my SAP environment, i want to give access of all SAP reports to my main management and if there is any role which have all SAP reports or substitute solution for it..there are more than 500 reports in every modules (SD,MM,PM...etc).
Reports:
S_ALR_87012183
S_ALR_87012193
S_PH9_46000223
waiting ur good response???
regards,
majamilHmm...Julius, you have given ME food for thought .. ha ha
Since the business team would decide on the criticality of transactions, I am firing this bold statement keeping the gun of their shoulders Because, this is how we implemented this, based on their feedback!
An initial wind blows saying these are non-critical, however , I will definately research this more (keeping in mind, I have one difficult person to convince )
>
Julius Bussche wrote:
> PS: Your "continue only" comment a while back was interesting
>
Which one? -
UME Actions - Manage All User Passwords
Hello everyone,
I am trying to create a role for our service desk to be able to manager users and be able to unlock them and/or reset their passwords. So I created a role with the identity management iview and gave the role the assigned action "Manage_All_User_Passwords". On <a href="http://help.sap.com/saphelp_nw04s/helpdata/en/5f/670db7939b8e48999d65f8a05ad611/frameset.htm">sap help</a> it says of this action:
"Provides permissions required by a user to change the password of other users independent of company. This also enables the user to view all user profiles."
Now the problem comes in with users in different companies. Any user I assign this role to is only able to search for users in their own company. Is there some other configuration I need to do or permissions I need to change to be able to manage the passwords of users in different companies?
We are running NW04s SPS10
Thanks for any help,
Chris BahrYonko,
The role's assigned to my test user are all user created. There are no other assigned actions that would interfere. I have not assigned the delegated user admin role as this would give more power to the user than we want. What we are going for is a role for our support people to be able to unlock and reset people's passwords. So we just want them to be able to be able to unlock and reset the passwords of all users in all companies, which I assumed manage all user passwords would do, but I am obviously missing something.
Best Regards,
Chris -
Issue in creating dev plan in talent management specialist role
Hi ,
I am facing issue in creating development plan through talent management specialist role . Actually in one system I have 2 location one is india & another one is USA . its working for india but when I search india employee its show no employee found . can you please guide me
TarunHi Luke ,
According to one of your article , I run HRALXSYNC in r/3 , in that all indian employee are green but USA employee in RED . I found following error , can you please guide me that what is mean by that ?
The error occurred in program CL_HRRCF_INFOTYPE=============CM003 line 117
Qualification 90007487 does not exist
The incorrect HR object has the key 01NA90011026
The incorrect infotype record is 40601NA900110265105 1 1900010199991231
The error occurred in program CL_HRRCF_QUALIFICATION========CM001 line 69
Serious error; see log
The error occurred in program CL_HRRCF_CANDIDATE_INFOTYPE_BLCM00B line 99
Serious error; see log
The error occurred in program CL_HRRCF_INFOTYPE=============CM003 line 117
Qualification 90007487 does not exist
The incorrect HR object has the key 01NA90011026
The incorrect infotype record is 40601NA900110265105 1 1900010199991231
The error occurred in program CL_HRRCF_QUALIFICATION========CM001 line 69
Serious error; see log
The error occurred in program CL_HRRCF_CANDIDATE_INFOTYPE_BLCM00B line 99
Thanks
Tarun -
Get all roles from an organization
Hello,
i want to get all roles 'AMRoles) from an organizations. I have Portal Server 2005Q4 on a machine and Access Manager and Directory on another and i want to extract all display profiles from all roles in different files (more than 100).
I found the dpadmin command line to extract a Display Profile from a dn but, how can i get the list of roles with the amadmin command line tool ?
thanks for help.
PhilippeHello,
I take a look, found differents xml files but : no help, no "howto", no thing very interesting.
I try this command :
/opt/SUNWam/bin/amadmin -u "cn=Directory Manager" -w ******* -e "dc=isere-savoie,dc=fr" -o /export/home/jes/test.xmland with other values in the -e parameter but always the same message :
Erreur 9 : �chec de l'op�ration : Failed to export entityDescriptor to a file.Any idea ?
any link to some help on this command other than Access Manager amadmin Command Line ?
a complement : in the debug files, I have this errors :
==> /var/opt/SUNWam/debug/amFederation <==
01/30/2008 04:40:59:324 PM CET: Thread[main,5,main]
ERROR: FSAllianceManager::getEntity entityID: dc=isere-savoie,dc=fris invalid
==> /var/opt/SUNWam/debug/amMeta <==
01/30/2008 04:40:59:510 PM CET: Thread[main,5,main]
ERROR: Failed to export entityDescriptor to a file
--------------------------------------Got Federation Exception
Message: Invalid Provider ID.
at com.sun.identity.federation.alliance.FSAllianceManager.getEntity(FSAllianceManager.java:1815)
at com.sun.identity.liberty.ws.meta.LibertyMetaHandler.SMToMeta(LibertyMetaHandler.java:109)
at com.iplanet.am.admin.cli.Main.outputLibertyData(Main.java:889)
at com.iplanet.am.admin.cli.Main.runCommand(Main.java:730)
at com.iplanet.am.admin.cli.Main.main(Main.java:1124)thanks
Philippe
Edited by: beutin on Jan 30, 2008 4:43 PM -
Hi Gurus,
As i am new to SAP CRM, not able to understand from where to start the config can anybody help in this regards.
Which are the steps to follow for BP-LEAD-OPPORTUNITY-QUOTATION
and also give your ideas regarding How to create BP Role in SAP CRM 7.0
Thanks in advance....
Regards,
Dinesh Deshpande.Well, first of all you should do a business blueprint so that you know what business process you need to support. And then you can consider the actual implementation.
And then you can use SAP's best practice guides as a starting point when doing the actual setup. Here are some links:
http://help.sap.com/bp_htel603/BBLibrary/Content_Library_HTE_EN_US.HTM
http://help.sap.com/bp_crmv12007/CRM_DE/BBLibrary/html/BBlibrary.htm
/Anders -
Project Management Add-on for SAP Business One.
Dear All,
I am looking for a project management add-on for SAP Business One that can be used by any company in services sector or an NGO to manage their projects.
ThanksHi,
We have a addon for Project Management in phase of certification for SAP Store.
For further informations please send e-mail [email protected]
Regards, -
SAP_AUDITOR* roles on SAP ECC 6.0
Dear all,
I am trying to check some roles existing in the Note 451960, which refer to some audit roles.
Looking for those role in my system (PCFG role name SAP*AUDITOR) I did not get the list of SAP standard roles .
Do you have some idea why? and what I should do in order I can have those standard roles in my system?
I will appreciate any help in this regard.
Thanks in advance.
FedeX>
FedeX wrote:
> Dear all,
>
> I am trying to check some roles existing in the Note 451960, which refer to some audit roles.
>
> Looking for those role in my system (PCFG role name SAP*AUDITOR) I did not get the list of SAP standard roles .
>
> Do you have some idea why? and what I should do in order I can have those standard roles in my system?
>
> I will appreciate any help in this regard.
>
> Thanks in advance.
> FedeX
Put one more * and you'll find them. PFCG->SAPAUDITOR -
Creating Roles in SAP ECC for autority in BO
Hi Guru's,
Can anyone point me to additional information about how provisioning works in SAP ECC for BO?
I am also looking for information on how to create some general roles in SAP ECC to transport into BO to control authority.
I have already read through the "Business Objects Enterprise Admin Guide".
Thank you in advance,
StevenHi,
to synchronize the roles you can use CUA. In CUA, you define 1 system as a central store for user administration and then distribute the users + roles + groups to the systems. You configure your EP and ECC to receive the user data from that system, therefor, you user information is in sync.
SAP Help: http://help.sap.com/saphelp_nw70/helpdata/EN/07/622441cd87a12be10000000a1550b0/frameset.htm
For more information, there is an SAP product: Identity Management.
SDN: https://www.sdn.sap.com/irj/sdn/nw-identitymanagement
To upload ECC roles to EP:
SDN Article: https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/06a0e690-0201-0010-4b9f-e529c345a831
User Mapping is for logging in to a backend, when the userid in the backend is different from the userid in the portal
SAP Help: http://help.sap.com/saphelp_nw04s/helpdata/en/f8/3b514ca29011d5bdeb006094191908/frameset.htm
br,
Tobias -
Are there any standard SAP reports to filter all BP(in SAP ISU)?
Hi All,
1.Do we have any standard SAP reports to filter all BP(in SAP IU)?I am aware that we can view all the Business Partners in Change/Display mode in the selection screen, but do we have any standard SAP reports to view all the created BP?
2.Do we have any standard report to filter BP(in SAP ISU)? based on certain fields like Authorisation Group?
Look forward to any responses.
Regards
Amitav OttaHi Amitav
Every industry has its own set of information for each kind of industry.There are certain data which is common to all Business Partner through out all industry. Most of that you can find in BUT000 and using SE16 you can generate a report directly through the Table access. But if you are looking for Standard Report than SAP has not provided standard Report for All Industry. If you look to the SAP Menu->Information System->General Report Selection, you will find that industries like Real State Management have reports for their Business Partner. To my knowledge there is no standard consolidated report to list down business partner based on filter for all industry.
Regards
Mithlesh -
We have granted everyone all roles on our TfsReports site. However, all users (except for 2 who are TFS Admins) still get the following errors when attempting to manage the reports:
The permissions granted to user Domain\UserName are insufficient for performing this operation. (rsAccessDenied)
These are the roles we've granted to all "Domain Users": Browser, Content Manager, My Reports, Publisher, Report Builder, Team Foundation Content Manager.
We can't seem to figure out what else might be missing.
Please help.The issue was reported by one of the Application Support team stating that they have problems with accessing reports in Reporting Services from Team Foundation Server (TFS)
side. By default certain users are part of local domain group having LOCAL ADMINISTRATOR privileges on TFS server, which is by default no issues for those users. Somehow there was a change in the role of certain users where ADMIN access was revoked. However
the users are still part of SYSADMIN group, they were reported the error as follows:
“The
permissions granted to user ''DOMAIN\UserName'' are insufficient for performing this operation. (rsAccessDenied)”
By default the text clarifies that no permission to access the reports and further we have set of roles defined on the Reporting
Services, as follows:
http ://servername/Reports/
Root
BUILTIN\Administrators No
access
DOMAIN\TfsAdmins Content
Manager
DOMAIN\ReportAdmins
Content Manager
More
details
Ahsan Kabir Please remember to click Mark as Answer and Vote as Helpful on posts that help you. This can be beneficial to other community members reading the thread. http://www.aktechforum.blogspot.com/
Maybe you are looking for
-
Safari will not display pdf files since installing OS 10.8.2
Safari will not display pdf files uner Lion 10.8.2
-
Fps rate drops by 10-30 every second (every app and game)
Okay, so I am often playing games on my Mac. From a silly 2d game to Modern Warfare 2. And always when I play them, (Literally always), I have the fps rate up so I can see it. And then this lag comes.. (my avg fps before the lag is around 45 on this
-
Disable "This file comes from another computer"
Hi, on all my adobe forms when i click on the properties, I see the message "This file came from another computer and might be blocked to help protect this computer" ever since i started getting this message, adobe forms don't work anymore and th
-
Confused about editing RAW images on iPad
I just got a new 3rd generation iPad. I got it primarily to store, view, and edit RAW images captured by my Canon DLSR. My camera takes 12 megapixel images. I am able to download them from the camera to the iPad using the Apple Camera Connection Kit.
-
How do i reset my ipad with a forgotten icloud password
how do i reset my ipad with a forgotten icloud password