New Role creation

Hi All,
   I created new Role and assigned users to that role . I added HTML page to the particular role and when I go click that link it is saying that java authentication problem. I am unable to see the applets what ever I created for the web page. Is there any thing to add in xMII for the particular role and if add the same HTML page to the Everyone role its working fine.
Thanks
Muvva

Hi Muvva ..
May be you can try the following ...
instead of providing the direct html, you can provide the user with the logon credentials which redirect the page to the desired html page, as follows...
http://Server:50000/logon/logonServlet?redirectURL=XMII/....../YourPage.html
Regards,
Ajay.

Similar Messages

  • Need Documents on New Role Creation in SAP

    Hi All,
    i am new to SAP Security and i would like to grow in this field,
    Can any one send me the links for the documents on creation of new roles, objects, Authorizations, transactions etc.
    Thanking you in Advance,
    Savitha.

    Hi,
    I guess you should look on Google for ADM940 and ADM950,
    Its a very detailed book for what ou want.
    Indeed to help you out, Its a very very simple task. But when you read this book keep in mind that there are 3 kinds of roles, Single roles, Derived roles and composite roles.
    Just to give you a heads up :
    Single role :  Role which has Authorization and data is restricted via company code and filed level values
    Derived role : these are derived from Single roles or you can say master role. Difference between single role and derived role is that you can derive say 10 roles from single role however company code can be manage in derived roles.
    So generally how it works is one create a master role which has all the required authorization. Now you don't want people in australia sould approve orders for Texas, US.
    Now there are hundred of companies department accross the glob. you don't want to end up creating hundreds of roles. so you create one master role and then you create derive role from that master role which is most of the time master role replica (keep in mind most of the time but not always so you have to be very carefull) now in derived role all you have to maintain is company codes.
    all the authorizations for all the objects and fields come from master role.
    I hope i am making sense.
    Composite role : its a collection of single and derived roles. Keep in mind you can not put composite role into composite role.
    That was just a heads up you need to read ADM940 and ADM950.

  • Request Number is not generated for BRM "new" role creation

    Hello Gurus,
    I have configured BRM in SAP GRC AC 10, along with the workflow .
    I have selected the following methodology
    Define Role --> Maintain Auth >Analyze & Access Risk>Request Approval>Generate Roles>Maintain Test Cases
    Role name : Y_TEST_BRM_FUNCTIONALITY
    So i do the following steps and assign
    1) Role approver as Mr. ABC & Alternate approver as Mr. QRS
    2) Assign the Required transactions and do the RAR i.e i am done till step 3 of methodology
    When i click "Initiate Approval request"
    The approval triggers , and goes to the 1st stage as configured in MSMP
    1) Power User Approval .
    Here the Power User : EFG , open his workflow and see the request as
    Role approval required for role Y_TEST_BRM_FUNCTIONALITY
    The approver approves the request and then the request all together vanishes.
    Unfortunately i am not able to search the request for that role from NWBC -->Search request by
    Process Id : Role Approver Workflow
    It gives blank !!
    Hence neither i am able to find the request no able to do any debugging of it using
    GRFNMW_DBGMONITOR_WD
    Please note that the Request Id is created for any request in CUP.
    Is it that i have to create a number range for BRM request ??
    If so will you please let me know the object

    Hello All,
    I was wrong in posting the cause of problem.
    Please note no "Request number" is generated for Role creation Request.
    The problem was i was unable to search the Role Request approval status from "Search Request" via  Process Id
    It got resolved via SAP note 1643539 : UAM: Search Request not returning result for some Process Id.
    My Issues is Resolved.
    Thank You.
    Regards,
    Victor

  • New role creation for display

    Hi,
    We want to create a role such that the users can see only the pricing but not the costing, for sales quotations and orders, for a particular distribution channel?
    Regards,
    Ajit

    Hi Ajit,
    If you wish to create a new Role, Use T. Code: PFCG.
    Once created assign the same role in to User's Profile Via T. Code: SU01.
    Here itself, in Authorization you may add T. Codes (for Display) and also define/ restrict User's view/ access to Sales Area data (i.e. Distribution Channel).
    Better to take help from Basis-Administrator as its purely Basis-job.
    Best Regards,
    Amit.

  • GRC AC Request Role Creation

    Hello all,
    I noticed that by default GRC AC doesn´t have a Request Type for Role Creation. Normally how this is done? I mean, if someone realizes that a new role is necessary, how can this person report the need for a new role creation? What are my option here?
    Regards,
    SAP Legend

    Hi SAP Legend,
    You can not request a new role to be created via an Access Request workflow. You still need a business governance strategy where someone has to raise a request outside of the GRC system for the new roles through the right channels deemed fit in your company to get the new role made. Maybe you have a support ticketing system in place or some SAP security department you can raise the formal requests to.
    The BRM Role creation/maintenance workflow runs separately from the Access Request workflow. Further more, the definition and creation process of roles via GRC should only involve and be used by Business Process Owners/Role Owners and the Authorisation security team only, i.e. not general end users.
    A role build methodology will have to be set up and then the underlying approval workflows (based in MSMP technology also, like the AR workflow).
    Once the role has been built (either via back end PFCG) or via GRC using the BRM methodology and approval flows, the role will be available to the end user to request via AR.
    Hope that helps.

  • Creation of a new Role in Content 10.0.1

    Hi everyone,
    I would like to create a new standard role in my domain.
    To do this I noticed the SecurityManager and its method createRole. I tried to create a new role with it using the default domain as target. I always get the error ORACLE.FDK.AccessDenied even if I use user orcladmin.
    If I use a library as target I get error ORACLE.FDK.UnexpectedError:ORACLE.FDK.ServerError…
    Moreover in the javadoc I did not notice any attribute that associate permissions to a newly create role.
    Could anyone have an idea on these points?
    Thanks for any help.
    Emmanuel

    Hi,
    1) Is the CUST_BI database user in the right place ?Yes, though you should add the language code to the user name, e.g. CUST_BI_US. This will be the EUL owner, the schema that holds all the EUL tables. The temporary tablespace you specify in the create_eul command is only used when you connect as the EUL owner, so is not important.
    When you connect as an apps user the connection will be made using the APPS database user, and therefore the temporary tablespace used (and location of MVs) will be the temporary and default tablespaces associated with the APPS user. You can change the temporary tablespace just for the Discoverer users by issuing a ALTER SESSION SET CURRENT_SCHEMA command in a PL/SQL procedure called during the initialisation of the Discoverer sessions.
    2) As you can see, I need to separate the BI administration from EBS administration... and DISCOADMIN is a new Apps user... any checklist/recommendation for this new Apps. user? The disco administration user can be any apps user who has EUL administration privileges in the EUL. This user should then be used to create all business areas, etc.
    Rod West

  • Creation of new roles in OES using BLM API

    I'm currently using policymgtapi examples for creating new roles. Its gets created but doesn't visible in OES Entitlement application console even though the entry is present in OES DB. But if you create a new User, its available immediately in OES Entitlement application. Pls let me know why Role is not available in Entitlement application after creating using policymgtapi. Thanks

    Is there any org scope to the role?
    There's some conversion process that happens when you load roles via policyloader, I suspect you would need to do the same with Policy Mgt API. There are some groups you need to add to have it show up in the EUI.

  • Sending an email after creation of new role

    Whenever new role is created in Transaction PFCG I need to email to all the users.
    There is no User-Exit in PFCG and we can't create any new Program for this.
    So how it will be done?
    If anyone worked on it please reply to this as soon as possible.

    hi Zahid Khan,
    as said i tried the same.
    i have created a button "send" action :submit.
    and also have created a process"send mail" with the folloing code
    DECLARE
    l_body CLOB;
    BEGIN
    l_body := 'Thank you for your interest in the APEX_MAIL package.'||utl_tcp.crlf||utl_tcp.crlf;
    l_body := l_body ||' Sincerely,'||utl_tcp.crlf;
    l_body := l_body ||' The APEX Dev Team'||utl_tcp.crlf;
    apex_mail.send(
    p_to => '[email protected]',
    p_from => '[email protected]',
    p_body => l_body,
    p_subj => 'APEX_MAIL Package - Plain Text message');
    APEX_MAIL.push_queue;
    END;
    and , Process Success Message as "done" and When Button Pressed (Process After Submit When this Button is Pressed): "SEND" WITH Process Point : "ON SUBMIT AFTER COMPUTATIONS AND VALIDATION"
    The process is running.., getting the """success message""" but unable to""" get the mail""".(tried different combinations of mail ids)
    any help !!!

  • How Can I Create a new Role in an PCD address?

    Hello EveryBody,
    I need to develop a new class that it can manage SAP Portal roles. I got how to recover all the roles of a user or how to recover all the roles in a PCD path. Now I have the problem when I try to create a new role in a PCD path.
    The code that I have to do that it is this:
    try {
    *     IRoleFactory iRoleF = UMFactory.getRoleFactory();*
    *     IRole nuevorol=iRoleF.newRole(pcdPath+nameRol);*
    *     nuevorol.setDisplayName(nameRol);*
    *     nuevorol.setDescription(descripcionRol);*
    *     nuevorol.commit();*
    *     return true;*
    catch (Exception e)
    *     return false;*
    This code it works and it makes a new Role but I donu2019t know how to create this role in a PCD path. Could you help me with this?
    This it is a urgent task that I have to develop, please I need help. Thanks in advance.

    Hi,
         Now I understood your question. As of now, I think there is no api which creates workset and roles in pcd. API are available for iView, page, system and layout only.
    For creation of iView, page etc, check this blog.
    PCD II: Creating Portal Objects
    For role and workset creation, there is another tool used. Check these blogs.
    SP15: XML Content and Actions
    Mass Creation of Portal Content - Generic Creator
    If you want to use this tool functionality in code, then check this blog.
    Using the XML upload content and actions dynamically
    If you are on NW7.1, then check this article.
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/40c72897-c7e6-2a10-e98a-af81b89084f4
    Hope these will help. Good luck.
    Regards,
    Harini S

  • BRM-No Role Creation

    Hi gurus,
    I have just upgraded my GRC 10.0 to SP18 and when I access to create a new role in the NWBC, the button is in grey, I mean, I can not start the creation of it. However, I can modify the roles without problems.
    Any idea of what can be happening?
    Thanks,
    Regards,

    Hello All,
    I was wrong in posting the cause of problem.
    Please note no "Request number" is generated for Role creation Request.
    The problem was i was unable to search the Role Request approval status from "Search Request" via  Process Id
    It got resolved via SAP note 1643539 : UAM: Search Request not returning result for some Process Id.
    My Issues is Resolved.
    Thank You.
    Regards,
    Victor

  • SAP AC 10 : ERM working fails (Unable to add Actions,permission)to new role

    Hello Gurus,
    We have done configuration for Role creation via ERM in SAP GRC AC 10.
    The configuration is done via BRF+ and MSMP ,when we try to create a new role via
    NWBC > ACCESS MANAGEMENT>Role Management -->Role Maintenance.
    We see that the correct "methodology" is selected which contains following steps
    Define Role --> Maintain Authorization -->Risk Analysis -->Request Approval -->generation.
    We go past 1st stage and when we are at Maintaining authorizations , the "edit" option is disabled
    It is not possible to add any Action (Tx), Permission(Objects) to the role.
    Is there something else that we need to configure or something that is missing ??
    Please suggest.
    Regards,
    Victor

    Hello All,
    This issue was resolved , after i maintained a User as "Role content approver" and "Assignment Approver"  Under "Owners/Approver" Of define role Tab.
    Whole cycle ran w/o any problem.
    Regards,
    Victor

  • How to raise role creation/modification request in AC 10

    We are implementing AC10. I have issue more related to the process followed than technical. Please suggest from your experience.
    We found that we can raise the request for new user account, role assignment to user, etc in Acess Request(formerly CUP), but we cannot raise the request for role creation, role modification. This is directly done in Role management.  My question is, how the security admin will recieve the requests for creating or maintaining the roles. Is it necessary to use ticketing tool for users to raise the request for role creation and modification.
    Thanks everyone for your valuable solutions.

    Dear Ashish,
    Whatever you have mentioned is correct to have the common platform for every request, either for user creation or role creation.
    But what we decided earlier, that the end users can raise the request in CUP directly, rather than involving security admin. But after realizing that there is no request type for role creation, I think we have to use our ticketing tool as a common platform.
    Request will come to security admin from the ticketing tool and than he will create the request in CUP, thereafter it will follow the approval workflow.  Only problem I see in this, it goes to the manager twice, once in ticketing tool and than through CUP workflow. i think we need to take out the manager stage from the workflow.

  • Track new roles / change in existing roles

    Hi,
    I have a requirement to track the creation of new role OR changes to existing role in the system. In either case I have to send an email to the group of people.
    I tried to find the enhancements but found nothing useful.
    Basically, I need to find how can I track the even for creation / change of a role...
    Please help me out to find the solution for this...
    Thanks,
    Gagan Chodhry

    Hi Atish,
    Thanks for the reply...
    No, I tried to find the enhancements, but could not get the one I need...
    I found couple of things more like transaction PFAC_CHG / PFAC_INS for change or create role, but not sure how  exactly to use these... if these are the correct one to be used....
    Thanks,
    Gagan Chodhry

  • Role creation

    Hi all,
    I am new in SAP portal and I am trying to resolve some issues I am having on EP 7.0. I'll try to be clear as most as I can.
    I am doing an Exercise about role and workset creation. I create these object with the wizard (from Content Administration -> Portal Content ) I right clicked on a folder created by me (say name test_folder id test_f1) and then I choose New->Role. Then I follow the two step wizrad where I put id and name (say test_role for name and test_r1 for id). The role is correctly creted, and is shown as empty (I think it's correct since is a new one); at this point I should create folder in the role, but when I click on Add Folder button, nothing happens. Then I try to copy and paste an existing role in my folder; when I open the role, a folder tree is shown, but I cannot anyway add folder and I see that also if I click on the tree node they do not open/collapse.
    I am really confused about it ... I don't know if it's a problem regarding permission (I don't think because I have superadmin privileges) or configuration (should I run some configuration wizard?).
    Thanks to anyone will help me
    Gabriele

    solved ...
    it seems portal is not compatible with firefox;  i try on IE and all problem I had get solved

  • Approval of role creation

    Hi All
    I need to create a WET for role creation, this is simple But I need to incorporate approval of the creation of the new MX_ROLE entry. I can only find documentation/guides on how to implement approval of role and privilege assignment. Does anyone know if it is possible to setup approval on creation on a new entry?
    Kind regards,
    Heidi

    I have tried to implement the MX_INACTIVE solution. Now it is not possible to see the role on the "Adminstrate"-tab, and there is an approval task on the "To do"-tab. When I click this task, details on the role are displayed properly, but when I try to process the request by clicking the "Show request"-button (button name translated from Danish, it might be translated differently...) I get an error: "Access denied".
    I have set correct approver on the approval task, and I was able to process approval requests, before I set the role to inactive.
    On the approval task, I have checked the "Use inactive entries" checkbox.
    Does anyone have an idea what could be wrong?
    Kind regards,
    Heidi Kronvold

Maybe you are looking for