Nakisa Authorizations

Hi,
I have an issue with the Organization Hierarchy, Position Hierarchy structures.
when a manager of X org unit login to the Nakisa system, he is able to view the structure from A to Z. But he belong to X org unit and he is not supposed to view the remaining org units except X.
when Z employee login to the portal he is also able to view the entire structure A to Z.
we know that HR data is very sensitive data and the users can see only the data which they are supposed to see.
I tried to control authorizations from R/3 system, but I am unsuccessful. From R/3 S_RFC authorization only it is reading to login to Nakisa system other authorizations are not considering.
Is there any other way to control authorizations from R/3?
From Nakisa side is there any configuration through which we can control the authorizations?
Thanks a ton
Chandu

Hi Luke,
When I try to open the AppResources.xml file I am getting the following error:
The XML page cannot be displayed
Cannot view XML input using style sheet. Please correct the error and then click the Refresh button, or try again later.
An invalid character was found in text content. Error processing resource 'file://192.168.215.78/Nakisa/OrgChart/XML/AppRes...
How to fix this error. could you please let me know
Thanks a lot
Chandu

Similar Messages

NAKISA Authorizations - How does it work?

Hi all,
How does NAKISA authorization works? Does it all depend on the SAP backend authorizations or is there another level of authorization in NAKISA? I am currently using structural authorization and AOR to control authorization in SAP portal but seem not to have any effect on some of the NAKISA functions such as employee and org unit search.
Please help.

Hi Eric,
@Luke: Eric is asked about STVN Succession Planning only.
@Eric: Luck is absolutely right, there is no special authorizations need to assign in STVN, all authorizations/every call from SAP backend system only.
           I think you already done the below steps, if not please do it
           1. In SAP, OOSP transaction code have you entered your ROOT orgunit ID, IF NOT PLEASE
           2. In SAP, OOSB Transaction code, have you assigned that structural Authorizations to that employee?, if not please
           3. In SAP, I think you already assigned AOR (a741) relationship to that particular position in PP01 T.Code?, if not please
           4. In SAP, after done the above steps please do delta-indexing one more time using ESH_COCKPIT and also schedule      Delta-Indexing.
           5. Now check it in STVN system, if you still facing the problem please follow the below steps:
           6. Login SAP back end using the same position(Problem facing User-Id), which is already assigned AOR relationship by YOU.
           7. In SAP, check the RFC's which are using for NAKISA. then again do it indexing.
           8. In SAP, Go to SLG1 T.code and enter "ZNAKISA_OBJECT" and execute do the troble shootig, It may help you also
if you follow the above steps, I think your problem 80% will be solve.
Best Regards,
Rajasekhar Reddy.

Restricted access in NAKISA

Hi Experts,
Weu2019re implementing structural authorization in SAP HR ECC 6.0 and it has integration to a few others applications - one of it is NAKISA. Iu2019m troubleshooting a restricted view in NAKISA Succession Planning and the trace results are pointing at P_ORGIN instead of P_ORGINCON. Appreciate if you could advice how can I move forward to identify the root caused.
Million thanks in advance.

Hi Luke,
Thanks for your feedback and for your info, authorization are granted based on the NAKISA authorization documentation. Additional to that, we've debug the function module and found that the authorization checking is only referring to P_ORGIN and there is no logic that redirect the checking to P_ORGINCON if the Structural Authorization switches are activated.
We're still doing research and looking for other alternatives - any suggestion is appreciated.
Best Regards.

Nakisa Role

I colleagues,
I have a doubt about OrgChart 4.1 sp1 Nakisa authorizations.
We are planning to use SAP struct. authizations, We will use a no dialogue SAP user for the login connection string, and them each Nakisa user will use their own SAP user for access and show orgchart data. (depending Structural Authorization).
I would like confirm if all SAP user need add the OM_COMMON role with standard authorization objects or it only neccesary add OM_COMMON role for no dialogue SAP user for the login connection string? I suppose all user need the role, it´s right?
Regards
Albano

End users will need that role (or the permissions within it!) as each user's id is being used in each RFC call taking place.
See the Admin Guide regarding roles.
Stephen

HR ABAP authorizations for Nakisa roles

Hi there,
We have just started to plan for ORG chart and Talent planning systems by naksia. Wondering if there are any
standard HR authorizations that the standard nakisa roles use and if anyone can elaborate if IT 008 (Basic Pay) really comes in to play with this as it is very sensitive. The project team has presented these user types:
Everyone, Executive,Assistant,HR(Human Resources), Manager
We are not using Structural auths but auth by PLOG, P_ORGIN
Any direction appreciated. Thanks !

Hi Dan,
For OrgChart are you using Live or Staged?
There are no special auths required for OrgChart. A SAP role needs to be mapped to an ORgChart role in order for users to see certain data. No PA0008 data is shown by default in OrgChart, although obviously if you want to show it you'll need to make configuration changes to restrict display, depending if you are using Live or Staged. The roles you mention are standard OrgChart roles that come pre-defined out of the box.
For SuccessionPlanning (assuming you are on ECC6 EhP4) you need to have the Talent Management Specialist role (SAP_TMC_TALENT_MANA_SPECIALIST) assigned to each user and an Area of Responsbility assigned in HRTMC_PPOM. This is between the Position of the user and the OrgUnit of each area they are responsible for. No configuration is required in the application because, for SuccessionPlanning, it is really just an interface between the user and ECC data and leverages ECC security etc.
I hope that helps!
Luke

NAKISA : Flexibility of authorization management

Hi Experts,
Can the authorizations in Nakisa modules be managed independently from those defined in SAP Back-End/Portal knowing that SSO is needed ? Does it depend on the Nakisa module version ?
To provide more details : hereafter are the requirements. Is it possible with standard features ?
HR user authorization :
- In Back-End/Portal (ECC6.0 EhP4) : Restricted access based on structural authorization and filter on grade (No issue for that thanks to SAP)
- In Succession Planning (V3.0 SP1) with SSO : Same restricted access as in Back-End/Portal (No issue for that since from what I understand, authorization are leverage in NAKISA from SAP)
- In OrgChart (V1.1) with SSO : No restriction, every employee must be seen => Issue ?
Manager authorization :
- In Back-End/Portal : Restricted access based on structural authorization (No issue for that thanks to SAP)
- In OrgChart (V1.1) with SSO : Same restricted access as in Back-End/Portal => Issue/conflict with previous requirement for HR user authorization ?
Thanks for your help.
Cheers.

HI Kevin,
Context :
- An HR user has authorizations defined in SAP Back-End/Portal with structural
authorization and filter on population.
If you are using OrgChart in Live mode with any authentication mode other than anonymous then these authorizations will be used for all calls by OrgChart to SAP.
Authorization requirements for Nakisa modules :
- From SAP Portal and under SSO, this HR user connects to Succession Planning (V3.0
SP1) with same restriction as in SAP
This will be the same, although if you are using EhP4 an Area of Responsibility must be set between the Position of the HR user and the OrgUnit(s) for which they are responsible for Succession Planning.
- From SAP Portal and under SSO, the same HR user connects to OrgChart (V1.1)
without any restriction (every employees must be seen)
This will only work if you use anonymous authentication or the Staged mode. The structure may be visible to everybody if you do not make any customizations for dynamic rooting, although this depends on your authorizations.
I hope that helps.
Best regards.
Luke

Dynamic rooting (User Record) setting is not working in Nakisa OrgChart SP3

Dear All
The Dynamic rooting setting is not working in the Nakisa OrgChart SP3.
It is giving an error message - "Cannot find the root of your orgchart. The orgchart box may have been deleted or incorrectly specified, or no valid org structure can be found for the selected effective date. Please change the root of the chart or select another effective date."
We followed the same steps as given in the Admin guide of SP3 (P.no. 109 - shown below)
In Orgchart --> General Settings:
* Select the Org chart root value source.
User Record: Retrieves the record specified in the next step from the employee data element.
*Do one of the following to define the org chart root:
If User Record was selected in the previous step, select the field containing the ID of the required organizational object in the employee data element from the User record field drop-down list. For example, if you wish to root the org chart at the org unit of the logged-in user, select the field containing the org unit ID. Hence, we have selected the Org unit ID.
Note:
We had enabled single sign-on with logon tickets
Retained the standard settings in Security Settings --> Employee Source
Had provided full authorization to the roles
If we use the "OrgChart Root" option available in 'Orgchart root value source', the org structure gets displayed correctly from the root object defined.
As this is an standard functionality, Kindly guide us in resolving the issue.
Regards
Ravindra

Ravindra.
You don't have to and shouldn't always include the username and password parameters for the SAP Connection string. When you omit them it will use the user's login credentials.
Remember though that:
The SAPRoleMappingConnection will need them included in order to get the details for the user in the first place.
Without the username and password specified in a connection string you can't click the option to test the connection and result in a successful connection. Remember unable to connect does not necessarily equate to wrongly configured.
I've filtered the log file for errors and the following entries were flagged up:
26 Jun 2012 10:00:06 ERROR com.nakisa.Logger - com.nakisa.framework.utility.Files : deleteFile : java.io.IOException: Unable to delete file: E:\usr\sap\D15\J00\j2ee\cluster\apps\Nakisa\OrgChart\servlet_jsp\OrgChart\root\.system\Admin_Config\__000__THY_SAP_Live_RFC_01\AppResources\attr.txt
26 Jun 2012 13:13:52 ERROR com.nakisa.Logger - com.nakisa.framework.utility.Files : deleteFile : java.io.IOException: Unable to delete file: E:\usr\sap\D15\J00\j2ee\cluster\apps\Nakisa\OrgChart\servlet_jsp\OrgChart\root\.system\Admin_Config\__000__THY_SAP_Live_RFC_01\AppResources\attr.txt
26 Jun 2012 13:43:49 ERROR com.nakisa.Logger - java.lang.reflect.InvocationTargetException
26 Jun 2012 13:55:09 ERROR com.nakisa.Logger - com.nakisa.framework.utility.Files : deleteFile : java.io.IOException: Unable to delete file: E:\usr\sap\D15\J00\j2ee\cluster\apps\Nakisa\OrgChart\servlet_jsp\OrgChart\root\.system\Admin_Config\__000__THY_SAP_Live_RFC_01\AppResources\attr.txt
26 Jun 2012 14:32:03 ERROR com.nakisa.Logger - com.nakisa.framework.utility.Files : deleteFile : java.io.IOException: Unable to delete file: E:\usr\sap\D15\J00\j2ee\cluster\apps\Nakisa\OrgChart\servlet_jsp\OrgChart\root\.system\Admin_Config\__000__THY_SAP_Live_RFC_01\AppResources\attr.txt
26 Jun 2012 15:47:44 ERROR com.nakisa.Logger - BAPI_SAP_OTFProcessor_LinkedDataElement : The dataelement ( SAPPositionVacancyDataElement ) is not defined.
26 Jun 2012 15:47:44 ERROR com.nakisa.Logger - BAPI_SAP_OTFProcessor_LinkedDataElement : while trying to invoke the method com.nakisa.framework.data.Command.getType() of an object loaded from local variable 'p_cmd'
26 Jun 2012 15:47:44 ERROR com.nakisa.Logger - com.nakisa.framework.webelement.charting.data.ChartingData : createNodesFromData : Notes Error: NullPointerException
26 Jun 2012 15:47:44 ERROR com.nakisa.Logger - BAPI_SAP_OTFProcessor_LinkedDataElement : The dataelement ( SAPPositionVacancyDataElement ) is not defined.
26 Jun 2012 15:47:44 ERROR com.nakisa.Logger - BAPI_SAP_OTFProcessor_LinkedDataElement : while trying to invoke the method com.nakisa.framework.data.Command.getType() of an object loaded from local variable 'p_cmd'
26 Jun 2012 15:47:44 ERROR com.nakisa.Logger - com.nakisa.framework.webelement.charting.data.ChartingData : createNodesFromData : Notes Error: NullPointerException
26 Jun 2012 15:47:48 ERROR com.nakisa.Logger - com.nakisa.framework.webelement.charting.data.ChartingData : createNodesFromData : Notes Error: NullPointerException
26 Jun 2012 15:47:55 ERROR com.nakisa.Logger - BAPI_SAP_OTFProcessor_LinkedDataElement : The dataelement ( SAPPositionVacancyDataElement ) is not defined.
26 Jun 2012 15:47:55 ERROR com.nakisa.Logger - BAPI_SAP_OTFProcessor_LinkedDataElement : while trying to invoke the method com.nakisa.framework.data.Command.getType() of an object loaded from local variable 'p_cmd'
26 Jun 2012 15:47:55 ERROR com.nakisa.Logger - com.nakisa.framework.webelement.charting.data.ChartingData : createNodesFromData : Notes Error: NullPointerException
At the very least it looks like SAPPositionVacancyDataElement is missing and whilst the other errors around it are unfamiliar I wonder if it might be a good first step to see if you can track down the reference to and existence of this data element? That being said it looks like your last test occurred well over an hour after this (so you may have already resolved it) and resulted in nothing but information messages. If that is the case it might be worth "rolling" your log file or manually trimming it to the right time frame when posting it? Otherwise it can be misleading as people could flag up issues you have already resolved.
So assuming you haven't tried Luke's suggestion (which should only take a couple of minutes to do) I think you should go back and do so right away .
Regards,
Stephen.

How to deal with custom object in OM for Nakisa security

Hi All,
We are implementing OrgChart 3.0 SP1 for live environment.
We have custom object in OM. Structural Authorization is based on that custom object. (The custom object is displayed as custom field in IT0001 (Org Assignment). Also we are using Org Key. The combination of custom field + org key decide the structural authorization)
Does Nakisa security work on this kind of structural authorization ?
Does this required any development efforts? OR we can make it with configuration changes? What are the changes required and where to do it?
Thanks
Dave

Hi Luke,
Thanks for the reply.
When I selected the security authentication option SSO with log on ticket, it shows the following error
Login Failed. Either you are trying to access the application outside of portal. Or the Portal issued ticket is rejected or expired
when I changed it to SSO with log in ID and Password, it shows the following error,
Error: Application error occurred during the request processing.
Troubleshooting Guide https://sdn.sap.com/irj/sdn/wiki?path=/display/jstsg/home
Details: WebApplicationException log ID is [005056943A3100EA000000000000B294].
Can you please give any inputs?
Thanks
Dave

Nakisa 4.1 - TalentHubHRExec missing masterBuild.sys does not exist

Dear Gurus,
I'm not able to do searching using employee on Nakisa TalenHubHRExec using employee listing anda position listing on data grid list.
I check from cds.log show missing masterBuild.sys does not exist, appreciate if can advise where should i get the file.Below i capture 2 error from the log, i already follow based on NakisaAdmin guide for Role Authorization Mapping using NakisaAdminConsole.
Error 1
04 Mar 2014 11:49:13 ERROR com.nakisa.Logger - Strings : readFile : java.io.FileNotFoundException: File 'NakisaPath\apps\Nakisa\TalentHubHRExec\servlet_jsp\TalentHubHRExec\root\.system\Admin_Config\__000__TalentHubHRExec_TF\masterBuild.sys' does not exist
04 Mar 2014 11:49:13 ERROR com.nakisa.Logger - java.io.FileNotFoundException: File ''NakisaPath\apps\Nakisa\TalentHubHRExec\servlet_jsp\TalentHubHRExec\root\.system\Admin_Config\__000__TalentHubHRExec_TF\masterBuild.sys' does not exist at org.apache.commons.io.FileUtils.openInputStream(FileUtils.java:137)
Error 2
04 Mar 2014 11:53:33 ERROR com.nakisa.Logger - com.nakisa.manager.ui.subucs.RoleMapping : getRolesDataSet : Error with roles DataSet. Connection String: ASHOST=NakisaHost SYSNR=00 CLIENT=100 USER=firhasa PASSWD=passwd
04 Mar 2014 12:02:24 ERROR com.nakisa.Logger - RoleMapping_SAP.MapRoles() : Message: while trying to invoke the method com.sap.mw.jco.JCO$Function.getImportParameterList() of a null object loaded from local variable 'function'
Regards
Mohamad Firhad Samuri

Hi Mohamad,
Your cds logs shows different errors however i have few questions here in terms of troubleshooting.
1. Any search listings worked earlier or it never worked ?
2. Have you properly imported the abap add-ons and transport pack ?
3. Do you have any customizations in listings ?
4. TREX is working fine, please confirm with Basis
5. Have you imported and exported the build ?
Dipak Bujjad

Nakisa SDN Wiki Page

Hello Community,
I am proud to announce that Nakisa now has an SDN Wiki page.
Please have a look on it when submitting threads, specially on the [Common Issues and Hints in Nakisa.|https://wiki.sdn.sap.com/wiki/display/ERPHCM/CommonIssuesandHintsin+Nakisa]
You can access the Wiki page on the following link:
[https://wiki.sdn.sap.com/wiki/display/ERPHCM/SAPTalentVisualizationbyNakisa|https://wiki.sdn.sap.com/wiki/display/ERPHCM/SAPTalentVisualizationbyNakisa]
Best Regards,
Mauricio Ghem.

Hi Dolores, hi Miguel,
I have just linked your pages to our "Security and Authorizations" Wiki:
ChaRM: [SAP Solution Manager - Security and Authorizations|http://wiki.sdn.sap.com/wiki/display/SMAUTH/Home] -> Change Request Management
MOPZ: [SAP Solution Manager - Security and Authorizations|http://wiki.sdn.sap.com/wiki/display/SMAUTH/Home] -> Maintenance Optimizer
Please remember that the "Security and Authorizations" Wiki is only for release 7.1 - it is not yet public ... please come to me if you need access!
Best regards,
Erik
Edited by: Erik Dietzel on May 19, 2011 2:33 PM

Trouble at step number 4 when connecting Nakisa and TREX

Hi all,
We are on step #4 of this wiki: /people/luke.marson/blog/2010/09/20/setting-up-netweaver-embedded-search-trex-for-sap-ehp4-talent-management
We ran the report ESH_ADM_ INDEX_ALL_SC and went back to the cockpit to check the status of the connections. After refreshing the cockpit to get the new status', they came back as errored out.
Here is the error report:
09/29/2011 10:33:07 Job started
09/29/2011 10:33:07 Step 001 started (program ESH_IX_CRT_INDEX_OBJECT_TYPE, variant 3AFB50705273F8, user ID Z4W4F)
09/29/2011 10:33:07 Start indexing for:
09/29/2011 10:33:07 Object type name:HRTMC_AES_DOCUMENTS
09/29/2011 10:33:07 Connection GUID:4E8398BF99420600E10080000A020E2F
09/29/2011 10:33:07 Logical system:E1DCLNT300
09/29/2011 10:33:10 Object 'nw_esh_tst_auto' not found as part of address 'sap/public/bc/nw_esh_tst_auto/ATTACHMENTS/SAP_NW_E'
09/29/2011 10:33:10 Object 'nw_esh_tst_auto' not found as part of address 'sap/public/bc/nw_esh_tst_auto/IMAGES/FrankBrown.jp'
09/29/2011 10:33:10 Object 'nw_esh_tst_auto' not found as part of address 'sap/public/bc/nw_esh_tst_auto/ATTACHMENTS/SAP_NW_E'
09/29/2011 10:33:10 Object 'nw_esh_tst_auto' not found as part of address 'sap/public/bc/nw_esh_tst_auto/IMAGES/FrankBrown.jp'
09/29/2011 10:33:40 Execute initial indexing
09/29/2011 10:33:40 Object connector E1D300HRTMC_AES_DOCUMENTS: New status: Indexing
09/29/2011 10:33:40 Data of NW authorization objects could not be indexed
09/29/2011 10:33:40 Indexing ended with error
09/29/2011 10:33:40 Remote communication failure with partner http://TREXURL:30103/asxml/multiIndexCellTable
09/29/2011 10:33:40 Indexing of complete objects from type USER_AUTHORITY has returned 0
09/29/2011 10:33:40 Indexing ended with error
09/29/2011 10:33:40 Remote communication failure with partner http://TREXURL:30103/asxml/multiIndexCellTable
09/29/2011 10:33:40 Indexing of complete objects from type USER_AUTHORITY has returned 0
09/29/2011 10:33:40 Remote communication failure with partner http://TREXURL:30103/asxml/multiIndexCellTable
09/29/2011 10:33:40 Indexing of complete objects from type USER_AUTHORITY has returned 0
09/29/2011 10:33:40 Indexing ended with error
09/29/2011 10:33:40 Job finished
It should be noted that we have tested this whole process in our Sandbox environment and got through all of the steps with no errors anywhere.
We are on Version 3.0 SP1 EhP4, and TREX Version 7.1 patch level 43.

Luke,
This problem has been resolved. After doing some preliminary research, for my next move I wanted to have our TREX admin make sure everything was connected inside TREX and it was working properly on its on with out outside Applications.
This fixed the our problem getting Nakisa connected, as there was a TREX connectivity issue to begin with. We fixed the issue with TREX and then reran the report and they were all indexed properly.
We are testing it now to make sure everything is working properly, and I will update this thread if there is any more questions or updates on our progress.
Thanks again,
Zach

Search in Nakisa doesn't work for objects JF and FN only

We have ECC 6.0 EhP4 and STVN 2.0 installation.
We can activate SEARCH for standard O, S and C objects but trying to activate search for JF and FN there are no results.
We can see while activating Nakisa with trace mode nad chech that there are no results for function: HRTMC_SEARCH_OBJ.

Hi Zeev:
The Nakisa searches for SuccessionPlanning all drive off of Enterprise Search in SAP.
Can you do me a favor and look in transaction ESH_COCKPIT and look at the following 2 search object connectors:
HRTMC Functional Area
HRTMC Job Family
Then over to the right of those, does it show the data is indexed? If so, how many records are "optimized"? If that number is 0, then indexing is your issue. If that number is greater than 0, then I'm guessing you have an authorization issue with the user accessing the data.
Anyway, we can figure it out based upon what you see. Let me know when you get time.
Thanks,
Chris

Nakisa 4.1 - Org Chart does not display

Hello gurus,
I do have an issue with our fresh implementation of SOVN 4.1 (Org Chart, Build 0911012400, SAP_live build). I did set up the authentication to Logon Screen, and configured the org chart settings (very basic). I did not set up any Role mapping. My connection strings all have the same parameters, including the RFC username and password. They all test succesful.
When I log in the frontend, I get the famous message: "Cannot find the root of your orgchart. The orgchart box may have been deleted or
incorrectly specified, or no valid org structure can be found for the selected effective date. Please change the root of the chart or select another effective date. "
I did a capture of the log, and there is an error in the RFC wizard code, it seems:
7. 24 Apr 2014 08:06:25 INFO com.nakisa.Logger - Tenant ID: 000
8. 24 Apr
2014 08:06:25 INFO com.nakisa.Logger - LoginSettingsObject Load: 19
9. 24 Apr
2014 08:06:25 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn :
Credential provider ActiveDirectory
10. 24 Apr 2014 08:06:25 INFO
com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : User to
authenticate znakisa_org
11. 24 Apr 2014 08:06:25 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : Authentication provider SapStandard
12. 24 Apr 2014 08:06:25 INFO com.nakisa.Logger -
com.nakisa.framework.login.Main : LogIn : User authenticated znakisa_org
13.
24 Apr 2014 08:06:25 INFO com.nakisa.Logger - com.nakisa.framework.login.Main :
LogIn : Authentication row is null
14. 24 Apr 2014 08:06:25 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : User population provider is Database
15. 24 Apr 2014 08:06:25
WARN com.nakisa.Logger - Configuration merge warning: : Right configuration is
null - Merge skipped!
16. 24 Apr 2014 08:06:25 INFO com.nakisa.Logger
- ApplicationConfigurationManager:mergeConfigurations 0
17. 24 Apr 2014 08:06:25 WARN com.nakisa.Logger -
Configuration merge warning: : Right configuration is null - Merge
skipped!
18. 24 Apr 2014 08:06:25 INFO com.nakisa.Logger -
ApplicationConfigurationManager:mergeConfigurations 0
19. 24 Apr 2014 08:06:25 ERROR com.nakisa.Logger -
com.nakisa.integration.sap.manager.SAPConnector_RfcWizard :
java.lang.NullPointerException: while trying to invoke the method
com.sap.mw.jco.JCO$Function.getImportParameterList() of a null object loaded
from local variable 'function'
20. 24 Apr
2014 08:06:25 ERROR com.nakisa.Logger - java.lang.NullPointerException: while
trying to invoke the method com.sap.mw.jco.JCO$Function.getImportParameterList()
of a null object loaded from local variable 'function'
21. at
com.nakisa.integration.sap.manager.RfcWizardIntegrationClassParameterSetter.setParameters(RfcWizardIntegrationClassParameterSetter.java:25)
22.
at
com.nakisa.framework.data.commandProcessor.impl.sap.BaseFunctionProcessor.call(BaseFunctionProcessor.java:104)
23.
at
com.nakisa.integration.sap.manager.SAPConnector_RfcWizard.getDataSet(SAPConnector_RfcWizard.java:50)
24.
at
com.nakisa.integration.sap.manager.RfcWizardIntegrationClass.getDataSet(RfcWizardIntegrationClass.java:106)
25.
at
com.nakisa.framework.data.commandProcessor.impl.sap.BaseFunctionProcessor.getDataSetFinal(BaseFunctionProcessor.java:120)
Would you happen to know what is the issue here?
Thank you for your help!
M.E.

Hi Matthew,
How about the directory search function ? Does it work ?
I would follow below troubleshooting steps.
1. Validate If Transport Pack and ABAP Add-on are installed properly
2. Restart the Nakisa application and check
3. Check If User ID has correct authorizations in SAP
4. Check If Data is correct
5. Do the RFC trace
Regards,
Dipak Bujjad

Roles for Nakisa

Hi,
we have created users in SAP R/3 and loging in to Nakisa with User ID and Password option (2nd Option).
What are the specific authorizations and roles we need to assign to the Manager and Employee.
Can we user ESS/MSS roles or we need any specific authorizations for Nakisa?
Thanks
Chandu

Hi Luke,
Can you be more precise as to what you mean by "You need to map the roles to roles created in Naksia" . I mean how do we do that.
Right Now, We have OrgModeler in a live connection mode. And we have connected Nakisa with SAP using Userid\Password Method. Whenever we try to login using an SAP userid in NAKISA, the entire hierarchy is visible to the user in Org Chart,right from the top-level. This is not what we want.
Tried to look for documents related to this , but couldn't find any.
Is the view to Org-Chart controlled through roles in SAP, if yes what is the simplest way to control the Org-Chart view through roles in SAP.
Also as seen in the current setup, The Auth. Obj S_RFC is sufficient for a SAP User to login into Nakisa and view the Org-Chart structure.
Any help would be appreciated in this regard.
Thanks

Security and roles in Nakisa TVN

When a Nakisa role is mapped to an SAP role, does it limit the data that the person who is running that role sees? For example, if an employee logs in and is assigned a "Employee" role, is it possible to limit the org chart that the employee sees to only his org unit and below?

Hi there,
This depends on which architecture you are using, Live or Staged. In Live OrgChart uses SAP structural authorizations and therefore the user only sees what data they can see in SAP. In the Staged version you have to build roles and map SAP roles to them. In STVN2.1 OrgChart there are 5 pre-configured security roles available out of the box, which do include a "derives and below" security role ("Derives and Below" allows a user to see information about objects in the structure below them).
It is possible through configuration to allow a logged-in user to start at their location in the structure and also to prevent them from navigating up the structure. This configuration can be very complex and requires full knowledge of configuration of authentication as well as authorisation (ie roles) in order to achieve what you want. It is also possible to limit data fields and fields in the search etc through less complex configuration and if you're really clever you can customise the application in order to do things based on particular roles (like display a pop-up message at login etc). However, that takes a thorough knowledge of how the application works to achieve and only few consultants outside of Nakisa and provide that level of customisation.
I hope that helps.
Luke

Nakisa Authorizations

Similar Messages

Maybe you are looking for