Manage all role in SAP

Hi, is there a way in netweaver 2004s to manage all the portal roles in R/3 4.6C? 
Thanks
Jean Seguin

Hi Jean,
Please check if this link gives what you want:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/1beaa6e3-0601-0010-9aa2-ae7af96a8f67
Especially check Portal Role Distribution to backend system.
Regards.
Ruchit.

Similar Messages

  • Basic manager/employee role with MSS/ESS content

    hey
    which role should I give my manager/employee in the R/3 system so they got the right permission?
    Now I have to add SAP_ALL and SAP_NEW to there profiles or I get error messages saying they don't have the right permission.
    In the portal my manager has rol com.sap.pct.mss.manager
    and my employee has rol com.sap.pct.ess.employee_self_service
    thanks in advance

    hi lien
    u can assign SAP_EMPLOYEE_ERP role to employee which is composite role.
    which contain following role.
    SAP_BC_EMPLOYEE
    SAP_BC_ENDUSER
    SAP_ESSUSER_ERP
    SAP_HR_EMPLOYEE_DE_ERP
    SAP_HR_EMPLOYEE_US_ERP
    SAP_HR_PA_XF_EXPERT
    mainitian the authorization for all role using tcode-pfcg, generate the profiles and completet the user comparisation.
    if u don't have the full authorization for PFCG ask ur basis person to do this.
    (this is usefull to RUN ESS from portal)
    or if u used custom role than
    make sure your user will need authorization object (S_SERVICE)
    add this object in the Role that u used. (PFCG)
    if u have any query revert me back.
    regards,
    kaushal

  • Can Solution Manager manage all the security for all of our SAP Landscape?

    Hello Solman gurus - We're looking at Solution Manager once again.  I had installed it for incident management back several years ago during our original go-live - and it fell by the wayside after go-live.  My question is related to the latest and greatest version - can it actually to the administration of security roles, profiles, etc. of all of our SAP systems from within Solution Manager?
    Much thanks,   Ken Little

    Sound like Central User Administration to me.....

  • Role to manage all rooms

    Hi All,
    Is there any general role on the portal that can give user the ability to manage all the rooms (complete access to all the rooms)? Something that can give permissions to access Member maintenance, Room maintenance etc of all the rooms.
    Thanks in advance.

    HI
    Go to
    content administration -
    > collaboration content -
    > room adminstration -
    >
    there select the room in which u wanna change the owner using name tab.
    u will list of rooms
    in the list place a tick mark to the room u wanna change and press change owner tab.
    Regards,
    vijay.
    note : in  collaboration role>Rooms>click your room>Admin:Room>
    u  cannot change owner of  the room  where u r not the owner
    but in content administration -> collaboration content -> room adminstration u can change owner of any room listed
    Edited by: vijayakumar kanniah mohan on May 16, 2008 3:49 PM
    Edited by: vijayakumar kanniah mohan on May 16, 2008 3:52 PM
    Edited by: vijayakumar kanniah mohan on May 16, 2008 3:54 PM

  • EP7.0 - Adding server nodes (processes) and managing all the logs

    First, can anyone confirm whether the Template Configuration Tool is used with Portal 7.0 (NW2004s)?  All of the documentation I find is for Portal 6.0.  If you use the Template Configuration Tool, it will match the resources available on your server to the type of J2EE you will be running which is the route I prefer to take.  Otherwise, I'll add the nodes manually with configtool.
    Second, is it a best practice to just stick to one server node (server0) on your DEV system?  I would think that would make analyzing all of those fun logs much easier.
    Third, are there any best practices for managing all of those logs if you start adding additional nodes.  I have server0 on the QA system with 2048MB of Heap.  I plan to add server1, server2 and server3 ... all with 2048MB of Heap.  But then the number of logs is 4 times for everything.  The Portal Tuning guide suggests turning off unnecessary logging which I will do but our developers want a convenient way to do research and we don't want them overwhelmed with logs. 
    We are setting up Solution Manager Diagnostics now so I haven't seen it's functionality.  Will it make log anaysis more streamlined and easier to find relevant data even if you have 4 server nodes?

    Hi Richard,
    A1: NO!!! do not use the Template Configuration Tool on NW7.0 as it sets properties that are not valid or optimal anymore.
    A2: I don't know if there is a best practice about it but I do know that it is best practice to have atleast 2 servernodes per instance because this helps you top optimize your resources when 1 servernode is in Full Garbage Collection the other still can use the CPU to process (Presented on SAP Insider Infra & Admin in Orlando 2008).
    A3: Regarding the logging This is just how it is made... every servernode logs for itsself...
    Use NetWeaver Administrator (/nwa) to auto consoldate the loggin info. It's slow but eventualy it does the job. You can give developers an NWA read-only role (shipped by default) to look at the logs.
    A4: SMD makes central monitoring and diagnostic possible for your complete landscape.
    You can configure a central NWA on the SMD host. The solution as proposed by A3 is already helping you to manage your issue (consolidating logs of multiple servernodes.. >2 )
    Good Luck!
    Benjamin Houttuin

  • Hi All,  In my SAP environment, i want to give access of all SAP reports to

    Hi All,
    In my SAP environment, i want to give access of all SAP reports to my main management and if there is any role which have all SAP reports or substitute solution for it..there are more than 500 reports in every modules (SD,MM,PM...etc).
    Reports:
    S_ALR_87012183
    S_ALR_87012193
    S_PH9_46000223
    waiting ur good response???
    regards,
    majamil

    Hmm...Julius, you have given ME food for thought .. ha ha
    Since the business team would decide on the criticality of transactions, I am firing this bold statement keeping the gun of their shoulders Because, this is how we implemented this, based on their feedback!
    An initial wind blows saying these are non-critical, however , I will definately research this more (keeping in mind, I have one difficult person to convince   )
    >
    Julius Bussche wrote:
    > PS: Your "continue only" comment a while back was interesting
    >
    Which one?

  • UME Actions - Manage All User Passwords

    Hello everyone,
    I am trying to create a role for our service desk to be able to manager users and be able to unlock them and/or reset their passwords. So I created a role with the identity management iview and gave the role the assigned action "Manage_All_User_Passwords". On <a href="http://help.sap.com/saphelp_nw04s/helpdata/en/5f/670db7939b8e48999d65f8a05ad611/frameset.htm">sap help</a> it says of this action:
    "Provides permissions required by a user to change the password of other users independent of company. This also enables the user to view all user profiles."
    Now the problem comes in with users in different companies. Any user I assign this role to is only able to search for users in their own company. Is there some other configuration I need to do or permissions I need to change to be able to manage the passwords of users in different companies?
    We are running NW04s SPS10
    Thanks for any help,
    Chris Bahr

    Yonko,
    The role's assigned to my test user are all user created. There are no other assigned actions that would interfere. I have not assigned the delegated user admin role as this would give more power to the user than we want. What we are going for is a role for our support people to be able to unlock and reset people's passwords. So we just want them to be able to be able to unlock and reset the passwords of all users in all companies, which I assumed manage all user passwords would do, but I am obviously missing something.
    Best Regards,
    Chris

  • Issue in creating dev plan in talent management specialist role

    Hi ,
    I am facing issue in creating development plan through talent management specialist role . Actually in one system I have 2 location one is india & another one is USA . its working for india but when I search india employee its show no employee found . can you please guide me
    Tarun

    Hi Luke ,
    According to one of your article , I run  HRALXSYNC in r/3 , in that all indian employee are green but USA employee in RED . I found following error , can you please guide me that what is mean by that ?
    The error occurred in program CL_HRRCF_INFOTYPE=============CM003 line 117
    Qualification 90007487 does not exist
    The incorrect HR object has the key 01NA90011026
    The incorrect infotype record is 40601NA900110265105    1  1900010199991231
    The error occurred in program CL_HRRCF_QUALIFICATION========CM001 line 69
    Serious error; see log
    The error occurred in program CL_HRRCF_CANDIDATE_INFOTYPE_BLCM00B line 99
    Serious error; see log
    The error occurred in program CL_HRRCF_INFOTYPE=============CM003 line 117
    Qualification 90007487 does not exist
    The incorrect HR object has the key 01NA90011026
    The incorrect infotype record is 40601NA900110265105    1  1900010199991231
    The error occurred in program CL_HRRCF_QUALIFICATION========CM001 line 69
    Serious error; see log
    The error occurred in program CL_HRRCF_CANDIDATE_INFOTYPE_BLCM00B line 99
    Thanks
    Tarun

  • Get all roles from an organization

    Hello,
    i want to get all roles 'AMRoles) from an organizations. I have Portal Server 2005Q4 on a machine and Access Manager and Directory on another and i want to extract all display profiles from all roles in different files (more than 100).
    I found the dpadmin command line to extract a Display Profile from a dn but, how can i get the list of roles with the amadmin command line tool ?
    thanks for help.
    Philippe

    Hello,
    I take a look, found differents xml files but : no help, no "howto", no thing very interesting.
    I try this command :
    /opt/SUNWam/bin/amadmin -u "cn=Directory Manager" -w ******* -e "dc=isere-savoie,dc=fr" -o /export/home/jes/test.xmland with other values in the -e parameter but always the same message :
    Erreur 9 : �chec de l'op�ration : Failed to export entityDescriptor to a file.Any idea ?
    any link to some help on this command other than Access Manager amadmin Command Line ?
    a complement : in the debug files, I have this errors :
    ==> /var/opt/SUNWam/debug/amFederation <==
    01/30/2008 04:40:59:324 PM CET: Thread[main,5,main]
    ERROR: FSAllianceManager::getEntity entityID: dc=isere-savoie,dc=fris invalid
    ==> /var/opt/SUNWam/debug/amMeta <==
    01/30/2008 04:40:59:510 PM CET: Thread[main,5,main]
    ERROR: Failed to export entityDescriptor to a file
    --------------------------------------Got Federation Exception
    Message: Invalid Provider ID.
            at com.sun.identity.federation.alliance.FSAllianceManager.getEntity(FSAllianceManager.java:1815)
            at com.sun.identity.liberty.ws.meta.LibertyMetaHandler.SMToMeta(LibertyMetaHandler.java:109)
            at com.iplanet.am.admin.cli.Main.outputLibertyData(Main.java:889)
            at com.iplanet.am.admin.cli.Main.runCommand(Main.java:730)
            at com.iplanet.am.admin.cli.Main.main(Main.java:1124)thanks
    Philippe
    Edited by: beutin on Jan 30, 2008 4:43 PM

  • BP Role in SAP CRM 7.0

    Hi Gurus,
    As i am new to SAP CRM, not able to understand from where to start the config can anybody help in this regards.
    Which are the steps to follow for BP-LEAD-OPPORTUNITY-QUOTATION
    and also give your ideas regarding How to create BP Role in SAP CRM 7.0
    Thanks in advance....
    Regards,
    Dinesh Deshpande.

    Well, first of all you should do a business blueprint so that you know what business process you need to support. And then you can consider the actual implementation.
    And then you can use SAP's best practice guides as a starting point when doing the actual setup. Here are some links:
    http://help.sap.com/bp_htel603/BBLibrary/Content_Library_HTE_EN_US.HTM
    http://help.sap.com/bp_crmv12007/CRM_DE/BBLibrary/html/BBlibrary.htm
    /Anders

  • Project Management Add-on  for SAP Business One.

    Dear All,
    I am looking for a project management  add-on for SAP Business One that can be used  by any company in services sector or an NGO to manage their projects.
    Thanks

    Hi,
    We have a addon for Project Management in phase of certification for SAP Store.
    For further informations please send e-mail [email protected]
    Regards,

  • SAP_AUDITOR* roles on SAP ECC 6.0

    Dear all,
    I am trying to check some roles existing in the Note 451960, which refer to some audit roles.
    Looking for those role in my system (PCFG role name SAP*AUDITOR) I did not get the list of SAP standard roles .
    Do you have some idea why? and what I should do in order I can have those standard roles  in my system?
    I will appreciate any help in this regard.
    Thanks in advance.
    FedeX

    >
    FedeX wrote:
    > Dear all,
    >
    > I am trying to check some roles existing in the Note 451960, which refer to some audit roles.
    >
    > Looking for those role in my system (PCFG role name SAP*AUDITOR) I did not get the list of SAP standard roles .
    >
    > Do you have some idea why? and what I should do in order I can have those standard roles  in my system?
    >
    > I will appreciate any help in this regard.
    >
    > Thanks in advance.
    > FedeX
    Put one more * and you'll find them.  PFCG->SAPAUDITOR

  • Creating Roles in SAP ECC for autority in BO

    Hi Guru's,
    Can anyone point me to additional information about how provisioning works in SAP ECC for BO?
    I am also looking for information on how to create some general roles in SAP ECC to transport into BO to control authority.
    I have already read through the "Business Objects Enterprise Admin Guide".
    Thank you in advance,
    Steven

    Hi,
    to synchronize the roles you can use CUA. In CUA, you define 1 system as a central store for user administration and then distribute the users + roles + groups to the systems. You configure your EP and ECC to receive the user data from that system, therefor, you user information is in sync.
    SAP Help: http://help.sap.com/saphelp_nw70/helpdata/EN/07/622441cd87a12be10000000a1550b0/frameset.htm
    For more information, there is an SAP product: Identity Management.
    SDN: https://www.sdn.sap.com/irj/sdn/nw-identitymanagement
    To upload ECC roles to EP:
    SDN Article: https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/06a0e690-0201-0010-4b9f-e529c345a831
    User Mapping is for logging in to a backend, when the userid in the backend is different from the userid in the portal
    SAP Help: http://help.sap.com/saphelp_nw04s/helpdata/en/f8/3b514ca29011d5bdeb006094191908/frameset.htm
    br,
    Tobias

  • Are there any standard SAP reports to filter all BP(in SAP ISU)?

    Hi All,
    1.Do we have any standard SAP reports to filter all BP(in SAP IU)?I am aware that we can view all the Business Partners in Change/Display mode in the selection screen, but do we have any standard SAP reports to view all the created BP?
    2.Do we have any standard report to filter BP(in SAP ISU)? based on certain fields like Authorisation Group?
    Look forward to any responses.
    Regards
    Amitav Otta

    Hi Amitav
    Every industry has its own set of information for each kind of industry.There are certain data which is common to all Business Partner through out all industry. Most of that you can find in BUT000 and using SE16 you can generate a report directly through the Table access. But if you are looking for Standard Report than SAP has not provided standard Report for All Industry. If you look to the SAP Menu->Information System->General Report Selection, you will find that industries like Real State Management have reports for their Business Partner. To my knowledge there is no standard consolidated report to list down business partner based on filter for all industry.
    Regards
    Mithlesh

  • TFS 2013 TfsReports on SQL Server 2014 - rsAccessDenied Error even though all users are granted ALL Roles

    We have granted everyone all roles on our TfsReports site. However, all users (except for 2 who are TFS Admins) still get the following errors when attempting to manage the reports:
    The permissions granted to user Domain\UserName are insufficient for performing this operation. (rsAccessDenied)
    These are the roles we've granted to all "Domain Users": Browser, Content Manager, My Reports, Publisher, Report Builder, Team Foundation Content Manager.
    We can't seem to figure out what else might be missing.
    Please help.

    The issue was reported by one of the Application Support team stating that they have problems with accessing reports in Reporting Services from Team Foundation Server (TFS)
    side. By default certain users are part of local domain group having LOCAL ADMINISTRATOR privileges on TFS server, which is by default no issues for those users. Somehow there was a change in the role of certain users where ADMIN access was revoked. However
    the users are still part of SYSADMIN group, they were reported the error as follows:
    “The
    permissions granted to user ''DOMAIN\UserName'' are insufficient for performing this operation. (rsAccessDenied)”
    By default the text clarifies that no permission to access the reports and further we have set of roles defined on the Reporting
    Services, as follows: 
    http ://servername/Reports/
    Root
    BUILTIN\Administrators                  No
    access
    DOMAIN\TfsAdmins                        Content
    Manager
    DOMAIN\ReportAdmins
         Content Manager
    More
    details
    Ahsan Kabir Please remember to click Mark as Answer and Vote as Helpful on posts that help you. This can be beneficial to other community members reading the thread. http://www.aktechforum.blogspot.com/

Maybe you are looking for