MSS Authorizations to the ABAP User: Note 844639

Hi Experts,
I am implementing MSS 1.0 on mySAP ERP05 and I need information on MSS Athorizations to be assigned to the backend MSS users.
I have got a note 844639 but I have the following questions:
1. Do I have to implement note 785345 as a prerequisite? I have upgraded from 4.6c to ECC6. Do I still require to implement this note?
2. There are so many WD applications based services for MSS. Do I have to get a list of each Authorization Object assigned to all the services and then consolidate it under one single ZMSS role in PFCG?
3. What about the default values of the sub objects of all Authorization Objects?
4. Similar to the ESS composite role SAP_EMPLOYEE_ERP with all the necessary authorizations, dont we have a standard MSS composite role which we can activate directly?
I would really apreciate some help on this.
Regards,
Shobhit

Hi Walter,
I am putting across my questions again regarding Note 844639:
1. There are so many WD applications based services for MSS. Do I have to get a list of each Authorization Object assigned to all the services and then consolidate it under one single ZMSS role in PFCG?
2. What about the default values of the sub objects of all Authorization Objects?
3. Similar to the ESS composite role SAP_EMPLOYEE_ERP with all the necessary authorizations, dont we have a standard MSS composite role which we can activate directly?
Appreciate any help on the matter.
Thanks,
Shobhit

Similar Messages

  • ABAP Users not reflecting on JAVA Users in portal

    Hi ,
    the users which i have created in abap is not getting reflecting in java , we are using PI 7.1 EHP1 application .
    Kindly help on step by step  process .

    Dear Suresh,
    Concerning the issue, please perform the following steps:
    1) Start the SAP NetWeaver Administrator.
    2) Choose  Operation Management  -> Users and Access  -> Identity Management .
    3) Assign the role LcrAdministrator to the groups SAP_J2EE_ADMIN and SAP_SLD_ADMINISTRATOR.
    4) Assign the role LcrUser to the groups SAP_J2EE_GUEST and SAP_SLD_GUEST.
    Please go through the link : http://help.sap.com/saphelp_nwpi711/helpdata/en/1d/bbf6c34ccc4c32bdd73bb36fee8cc0/frameset.htm -> 'Wizard-Based Basic Configuration of PI' -> 'Assigning application roles to user groups' for details.
    I hope this helps.
    Best Regards
    Nishwanth

  • Why does Firefox 4 (safe mode) fail to display a gadget with the message "User not signed in", when Firefox 3.6 (including lastest version) does so successfully?

    I attempted to access a Google Docs spreadsheet gadget (Piles of Money) in Firefox 4, both normally and in safe mode. In both cases I get a message saying "User not logged in", a link to log in, and a "throbber" that continues without end.
    I can successfully view this same gadget using Firefox 3.6 without problem (and have done so for over a year on various, latest versions of Firefox).
    I tested both with Firefox 4 and Firefox 3.6 in safe mode (to rule out extensions and other changes). In both cases, this was on Windows XP; I have also had the same behavior (albeit without testing in safe mode) on Windows 7.
    The same behavior occurs when creating a new gadget of this type, although I've not tested this as thoroughly.
    Is this a bug in Google Docs, Firefox 4, or both?
    Note the troubleshooting information is from XP, running Firefox 4 in normal mode.

    *Firefox 4 and later require at least OS X 10.5 and an Intel Mac.
    * http://www.mozilla.com/firefox/4.0/system-requirements/
    * http://www.mozilla.com/firefox/5.0/system-requirements/
    For an unofficial Firefox 4 compatible version (TenFourFox) that runs on PowerPC Macs with OS X 10.4.11 or OS X 10.5.8 you can look at:
    * http://www.floodgap.com/software/tenfourfox/
    If you have an Intel processor then you are out of luck with OS X 10.4
    Firefox 3.6.x (Mac OS X 10.4 and later) can be found here:
    * http://www.mozilla.com/en-US/firefox/all-older.html
    * http://www.mozilla.com/firefox/3.6/system-requirements/

  • GPO - Restricts the UI languages Windows should use for the selected user - not applying correctly on RDS 2012 R2

    Hi All,
    we have a Citrix XenApp 7.5 Farm with Windows Server 2012 R2 Servers and multiple (english, german, italian, spanish, french...) languages installed.
    I've created a GPO with settings 'Restricts the UI languages Windows should use for the selected user' to for example 'German'.
    Now when a user logs on to the server, the UI language is in german, but when i open Control Panel\Language: There is still English (United States) with Keyboard Layout: US, German.
    It seems that the GPO is not changing all settings correctly to german.
    Does anybody know what could be wrong?
    best regards,
    Siegmund

    Hi Siegmund,
    >>Now when a user logs on to the server, the UI language is in german, but when i open Control Panel\Language: There is still English (United States) with Keyboard Layout: US, German
    Based on the description, the policy setting should have been applied successfully. Here, did we logged onto the server via remote desktop services? If yes, what's the keyboard layout on the computer we used to RDP to the server? Before going further,
    I assume that this can be caused by Auto detect Remote Keyboard layout feature introduced since Windows Server 2008.
    Regarding this point, the following artcile can be referred to for more information.
    Windows 2008 R2 Language Bar keeps changing Keyboard Settings
    http://www.microsoftpro.nl/2011/02/24/windows-2008-r2-language-bar-keeps-changing-keyboard-settings/
    Note: For the above website is not hosted by Microsoft, the link may become invalid without notice and Microsoft doesn't guarantee the accuracy of the information.
    In addition, the following thread can also be referred to for more information.
    2008 R2 Session Host with MUI controlled via Group Policy
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/4e14955a-80f9-40aa-9741-fc8609f4ad09/2008-r2-session-host-with-mui-controlled-via-group-policy?forum=winserverGP
    Best regards,
    Frank Shen

  • HT1420 my other computer was broken and stolen...its more than 5 .. how can i authorize my new computer for the 6x?  again i can not de authorize because the computers are not with me now.

    how can i authorize my computer.. my previous 5 computers are stolen and broken. I can not authorize anymore because they re asking me to de authorize the 5 computers but its not with me now.

    Go back to the article you asked this question from and use the Deauthorize All function. If that's not an option, use the 'contact iTunes Store Support' link.
    (110559)

  • Report exection problem for one user - not able to see the data.

    Hello Friends ,
    Need some help . I have got the one ticket from bussniess side about the report execution .
    Unfortunately , I am also not having authorisation of that report due to sensible data.
    Problem - User is executing the report but some how he is not ABLE TO see the data for one company code Hierachy .
    I executed the same report through RSSMQ via his user id , and I got the  below message.
    All value were selected . Hierachy Authorisation cannot be used.
    A displayed hierachy requier a hierachy authorisation .
    But when i checked his authorisation , I am able to see that he should have authorisation to all the hireachy .
    could you please let me know , how can I check more ?
    Regards,

    after accessing the report , u go to su53 tcode and check the authorization and u can see what is problem in authorization for the that user and u can send the details to secuity team to rectify the issue ,

  • CRM Users Created on ABAP Stack not visible in Portal...........

    Hello All,
            I have WAS with ABAP + JAVA  [EP7], Hence using <b> dataSourceConfiguration_abap.xml</b>. as a datasource file in UME.
    As per my knowledge i cant create users from Portal hence I have created users in ABAP Stack but I am not able to view these users from Portal ?
    I have chaecked the entry in Configtool this file is maintained as Datasource.
    Please Guide me what may be the reson for this ??
    Is it possible to add Users from portal if Datasource is ABAP Stack ??
    Waiting for reply!
    Thanks,
    Smita.

    Hi Smita,
    Please go through these links:
    UME configured to use SAP ABAP
    For the configuration using config tool : http://help.sap.com/saphelp_nw04/helpdata/en/49/9dd53f779c4e21e10000000a1550b0/frameset.htm for general remarks using this config and see http://help.sap.com/saphelp_nw04/helpdata/en/0f/bdd93f130f9115e10000000a155106/frameset.htm for changing the config.
    Check out the section "Read-Only and Read-Write Access to the ABAP User Management.
    This link would also be useful. This link talks about <b>User Management of Application Server ABAP as Data Source</b> :  http://help.sap.com/saphelp_nw2004s/helpdata/en/49/9dd53f779c4e21e10000000a1550b0/frameset.htm
    Hope this helps.
    Regards,
    Sunil

  • PI 7.1. Setup Abap user to access Java tools

    Hi gurus!
    I need your help, I'm working with a new PI instalation, and we have 2 types of user, one Java user with their password, and other ABAP user with their password. When I try to access to repository or directory, I must to use Java user, but in the other PI system, this is not so, I only use ABAP user for all things.
    In this system, I need keep roles in abap stack and java stack, and  think this is not optimal.
    How I can synchronize the two types of users for only use the ABAP user to all things?
    Thank you in advance.

    How I can synchronize the two types of users for only use the ABAP user to all things?
    Simple....assign the *_J2EE roles to your ABAP user....more information on the roles required can be taken from
    http://www.erpgenie.com/sap/netweaver/xi/xiauthorizations.htm
    We normally create only one user and then assign ABAP and JAVA roles to it.

  • ABAP user for portal

    Dear Experts,
    We have a BI 7.0 EH1 installation on a single server with 2 separate instances for ABAP and JAVA currently. All configurations are currently okay and we are able to deploy infoproviders, load data and view them on Bex.
    Currently, we are unable to utilize ABAP users for any activity on the portal, be it administration or execution of Bex for queries. We are also unable to see the ABAP system in Java currently in the configuration settings. I would like to use the ABAP user for execution of queries. SSO is configured  and we do not have any errors while executing the support desk tool.
    Kindly provide any solutions pertaining to this issue.
    Thanks & Regards
    Suneeth

    Hi Surya ,
    When you install portal or any NW component with ABAP stack , ABAP stack hold precidence over the JAVA Stack , refer to this link to have more idea on this .
    http://help.sap.com/saphelp_nw2004s/helpdata/en/2b/306bb5bc98f24f8a85d489449af456/frameset.htm--
    http://help.sap.com/saphelp_nw04s/helpdata/en/12/7678123c96814bada2c8632d825443/frameset.htm
    Thanx
    Pankaj

  • Where do we use the three users created during BPC installation

    Hi Experts,
    I just want to know where we use the three users we create during installation. Because without  AppSet the users cannot log in.
    Though we map three different domain users in "UJA3_WRITE_SYS_USERS", except the user BPC_SYSADMIN, I think we cannot use the other users without assigning the Appset. Please correct me if I am wrong.
    Thanks in advance.
    Regards,
    Bobby

    ok I think there is some confusion here and that we are not all talking of the same thing...
    there are ABAP users, and there are Windows users (or in the case of 7.5, possibly CMS users).
    the ABAP users are used exclusively by the .Net server to connect to the ABAP server. They are never used to login from a client machine.
    The Windows (or AD or CMS) users are used to login to the clients.
    The .Net server will authenticate those logins from the clients, will then look in the tables in ABAP to check the rights of that user, and then take action based on those steps. If the user is authenticated and has the required rights to the appset, then the .Net server will perform the actions that the windows user is requesting. To perform those actions, it will connect to the ABAP server under one of the 3 ABAP accounts as described earlier
    so if the user is in Admin and for example wants to process a dimension, the .Net server will use ABAP account BPC_admin to connect to ABAP and take action.
    if the user is in BPC for Excel and wants to input data in a schedule, the .Net server will connect using BPC_user to ABAP server and take action.
    in other words, those 3 accounts are completely transparent to the client side, are never used on the client side, and can be consider as internal to the server, as they are used only between servers.
    once BPC is installed, only the windows account that was used to install the .Net componenet will have access. That account can be used to install the admin client and to login to the admin client. From there, other windows accounts can be given rights to BPC.
    I hope this helps and clarify
    best regards
    Bruno Ranchy

  • User not found error

    HI all .
              I am trying to connect and load MDM repository using MDM ABAP API's but when I executes the function module it loads the repository and gives an error
    server return code0XFFAA0201: User not found.
    can anyone provide some in puts on this.
    Thanks in Advance
    Vinay Yadav

    Hi Nikhil,
                  I have done the enrty  into the console as user with the same name I use to login into R\3 System but It still giving the same  *"user not found"*. Please give me some clue,what else can be done to resolve that error.
    Thanks,
    Vinay Yadav

  • Relation between Portal User and ABAP user

    Hi All,
    I have installed the SAP Netweaver 2004s with ABAP and JAVA environment.
    I have the portal up and running on.
    Now when i see the users form portal i can see both the UME and ABAP users.
    My questions are as follows:
    a)Are this ABAP users shown in portal same as SAP R/3 user.
    b)Which property of the ABAP users shown in portal mapped to R/3 user.
    c)What is the query to see all the users in the Portal database for ABAP +  JAVA system
    Best Regards
    Manoj

    Hi Roy,
    As you said that
    "All the properties you see in the portal are mapped to the ABAP side".
    My observation was as follows:
    A)
    I created the Portal User(ABAP + JAVA) using the  UME API's.
    I set the setTilte("Mr") and setSalutation("Dr.) property.
    The user got created .Innthe Portal we cannot notice the setTilte and setSalutation property so i used the SAP GUI to check it.
    In the SAP GUI i could see the changes are reflected for Tilte and Academic Titlt.
    B)
    Now i changed the property setSalutation to "MBA" and saved the user using the ABAP GUI.
    Now i used the UME API to query the getTilte()  and getSAlutaion()
    But unfortunately this changes  were not shown .
    Now i bit confused.
    Whether this both(portal ABAP) and R/3 are stored in differnet database.
    or it is that i have to restart the server to bring it in sync
    Best Regards
    Manoj

  • How to log into Mountain Lion if the FileVault user can't unlock the drive?

    I have a computer that has the FileVault user not able to decrypt the drive. I've read on how to get into the machine and have successfully done so a few times. This has been accomplished by creating a new Admin user, deleting the original user, recreating it as a clean new user. Each time I give the computer back to the owner and he tries to restore from a backup. The problem is, he restores and it creates the same problem.
    The most recent time he did this, I could not for the life of me figure out how to create a new user. When I try to log in as the FileVault user I get the "unable to log into filevault user account at this time" error.
    The only way I could figure out how to get another admin user created so that I could delete his user was to reinstall the OS. Is that the only way this can be done?

    I don't think Verizon will release the username and password to the camera administration to prevent people from doing what you want to do.
    Even if you have the username / password, I would imagine there is a hefty equipment charge if you don't return the camera, which will make it cheaper to just buy a camera in retail stores.

  • "User not activated"  ...I'm getting this error message repeatedly with my Nook.

    Using Adobe Digital Editions, I copied a book from ADE on my laptop to my Nook, but I keep getting the error, "User not activated."  I've tried the steps described here:
    OverDrive | What to do if there is a "User Not ...
    but I still got the same result about 5 times.  Does anyone know who to get past this to open the book?

    This has been fixed.  Answer is that I needed to go to "Apple Software Update" and repair it.  (From my Control Panel).

  • Authorization problems with oranetb user

    We have set up Apex in an oracle database, that are installed on unix operative. We have problem with the authorization
    for the oranetb user. On the unix system we have one user that can call scripts with for example unix command like ls,
    cp, etc.
    Now we want this oranetb user to run unix commands in scripts, without change the user in unix environment. We have
    been told that we can use something in the script, with PATH’s and authorization for oranetb user. Have you ever done
    something like this? And can you help us with something that you think can help us?
    We also have the same problem to run workflow (Informatica) from a script in unix, when apex is calling the script.
    If you want more information, please send a mail to me.
    Email: [[email protected]]

    hunt3r,
    iTunes Store menu -> View my account... Once you've logged in, there's a button to deauthorize all your current machines and start you back at zero machines authorized. Try that.

Maybe you are looking for