[NODEMGR} Adding a 'business role' to a nodemgrprocess

Hi,
when tuning my nodemgr, I can declare it as DB enabled (DBResourceMgrs),
or supporting some 3GL libraries and so on.
What can I declare on that node to force some partitions to go there ?
(I fear that declaring a 3GL Library would do a compile/link error as it's
virtual)
j-paul

Hi Spencer,
as you probably heard here and ther the SAP Solution Manager supports the whole lifecycle of a business process. Hence there are especially two logical parts
a) the project and business blueprint part which you access with your mentioned transactions SOLAR01/02
b) the operations part where you have a similar but nevertheless separate directory the so called Solution Directory that you can access via DSWP > Solution Landscape > Solution Landscape Maintenance or via the "Business Process Operations" Work Center.
In both directories you can maintain business processes from scratch or use the Business Process Repository or another Project or another Solution as source.
What you require for using Business Process Monitoring is that business processes are maintained in the Solution Directory. If so far you processes are only maintained in SOLAR01/02 then you can copy them into the Solution Directory.
You should find corresponding iTutors under http://service.sap.com/rkt-solman
You can also have a look into http://service.sap.com/bpm > Media Library > Technical Information for different technical papers explaining on how to setup BPMon.
Perhaps you also want to visit the FAQ page http://wiki.sdn.sap.com/wiki/display/SM/FAQBusinessProcess+Monitoring
Best Regards
Volker

Similar Messages

Business Role Cache

Hi
I have added and removed some Business Roles for a particular user. But when that person logs into CRM UI (CRM 7.0), old business role is being displayed.
Please help me in resolving this.
Regards
Hitsm

Hi,
have you added the business role directly to the user in SM04 with parameter CRM_UI_PROFILE?
Or have you added the business role to the org-unit where the user is assigned in PPOMA_CRM?
Please check both points.
As i know there isn´t a cache for business role assignements.
If this does not help check if your new business role has been transported correctly.
Best regards
Manfred

Restricting an administrator to only adding or removing Business Roles

Hi:
Is there an out of the box rule or form in IDM that can restrict an administrator to only adding or removing business roles from accounts?
Thanks.

Hi Dwayne,
This BU ruling is somewhat of a newer function with OIA. For mass alteration, the old-school way would be to execute a SQL script directly towards the DB.
Simply change the last line on what correlation you wish (in this situation, it's looking at the BU Name and the GU office name)
delete from BU_GLOBALUSERS where businessunitkey > 0;
insert into BU_GLOBALUSERS(BusinessUnitKey,GlobalUserKey)
select BU.BusinessUnitKey, GU.GlobalUserKey from BUSINESSUNITS BU, GLOBALUSERS GU
where BU.BusinessUnitName = GU.officename;
Regards,
Daniel Redfern
Technicalconfessions.com

Adding logical link from a different Business Role

Hi Gurus
I want to add the second-level entry(complaints search page) of the Complaints & Returns work center of the standard Servicepro business role as a Navigation Bar link to an already customized IC Agent Business role. How would I achieve this in CRM 7.0?
Thanks in advance.

Hi Amar
Thank you very much for your valuable inputs. I had some doubts and am explaining the detailed process below so that I'm clear as to how I can fix this.
I selected the SRV-PRO NavBar Profile and double-clicked on Define Work Center. On the Define Work Center Overview Screen, I found the Work Center SRV-COMPL, which has the description as Complaints & Returns and LogLinkID as SRV-CPL-WC. Then, I selected SRV_COMPL and double-clicked on Define Logical Links and looked for description as Complaints: Search. I found the LogLinkID SRV-COM-SR link with the corresponding Target ID as TBT120MISC.
Now,I copied the customized IC Agent NavBar Profile which we currently have and created a new work center by copying SRV_COMPL. On Assign Groups, I kept the SRV-CMP-SR group ID and deleted all others. Then, I assigned the newly created WorkCenter to the new copied IC Agent NavBar Profile. I'm now able to view the new work center and it launches the workcenter page, but the link to open the complaint search is not available. Is there any step that I'm missing?
Thank you again for your help.

Business roles in GRC AC

Hello,
Is it possible in SAP GRC AC to create so-called business roles like in SAP IdM. This roles are not assigned to any backend system but derive backend system roles. The aim is to create set of roles that consist of roles in different backend systems.
As I understand role mapping can't fully implement this functionality, because main role is assigned to backend system.
Thanks,
Yakov
Edited by: Yakov Silin on Feb 24, 2010 7:00 AM

Hi Yakhov,
I was wondering if this is your dilemma. We want to use this role mapping feature for the purposes of adding an Enterprise Portal role for every ABAP role that gets approved for the user in an ABAP component system (i.e. ECC, BW, CRM etc). We will have a 1:1 mapping of Enterprise Portal role to ABAP role defined in the role mapping section in GRC.
- We want to set up the workflow in such a way that the main role (ABAP role) is the only role that needs to be approved. The dependent role (Enterprise Portal role) should be added or not added based on the approval or denial of the main role (ABAP role). In other words if the role owner for the abap role approves the abap role, then both the abap and EP role will be provisioned by GRC and if the role owner rejects/denies the role, then neither the abap or EP role will be provisioned by GRC.
Is this similar to the challenge you ar facing?

SAP Technical roles and IDM Business roles mapping

Hi Guys
Just wondering if there is an easy way to export SAP Positions and create them automatically as Business Roles in IDM and the SAP technical roles that are related to that corresponding position into privledges assigned to that Business Role. Or am I going about this the wrong way? What do you normally do in terms of getting all your sap technical roles from the sap system and assigning them to business roles in IDM. Any help on this is much appreciated?
Cheers
Leo

Thanks Matt,
I think get I the picture now
One thing that I am still not sure about is how the sap abap technical roles or profiles are provisioned through workflow
Here is what Ive done so far
1. HCM data loaded into productive identity store via vds
2. Did an initial load of the abap system into the productive identity store (now the technical roles and profiles are loaded as privileges in the idstore)
3. Through workflow I select a user that already has an abap account and assign that user some additional sap technical roles, for e.g. sap_all and sap_new. The corresponding privileges for these roles are namely PRIV:PROFILE:ECX:SAP_ALL and PRIV:PROFILE:ECX:SAP_NEW .
4. For the provisioning to occur so that these new privileges are reflected in the ABAP system for this user, I have used the setABAPRole&ProfileForUser task from sap provisioning framework folder and set it as the add/mod/del event task for the MXREF_MX_PRIVILEGE attribute. That way whenever a privilege is added to a user account the setABAPRole&ProfileForUser task will run and the sap_all and sap_new profiles will be added in the backend. This way I can avoid setting a provisioning task for each abap privilege that gets loaded.
But it should be obvious now that there is a flaw with this kind of setup, because all non abap privileges that get added or removed will trigger the setABAPRole&ProfileForUser task anyway because the privileges use the same attribute i.e.MXREF_MX_PRIVILEGE. So it brings me to the question how do you provision abap technical roles or profiles through workflow without setting a provisioning task for each abap related privilege.
Thanks again for all your help!
Leo

Business Role change made password deactivated or reset in ABAP systems.

Hi,
We recently made changes Business role by adding technical role but this changes has deactivated or reset password for assigned users who had Productive password in connected ABAP system.
We have two type of users, one who access SAP Portal and ABAP with Single Sign on and second who login into Portal and ABAP with password.
This BR change has impacted second type of users who had Productive password.
Regards,
Manish

Hello Manish,
you have marked the thread as "Assumed answered". Could you please share with the community the outcome of your OSS ticket with SAP, so that others can benefit, too? Then you can mark the post as answered. Right now the thread isn't really helpful to anyone (neither you nor the community).
Also, if you answer Jai's questions, maybe we can help in solving your problem?
Having several irons in the fire can't be bad, right?
Regards,
Steffi.

Business Role: ZSOLMANPRO (missing info in NavBar)

Hi
I am using Business Role ZSOLMANPRO for CRM Web Client UI (mainly for ChaRM).
Anyway, I have tested with SAP_ALL and SAP_NEW and everything appears perfectly.
When I remove SAP_ALL and SAP_NEW there are some items missing.
The below screenshot is with SAP_ALL and SAP_NEW. The YELLOW highlighted items do NOT show when these profiles are removed:
Why are yellow items not showing???
I have double checked and they are definitely assigned to the ZSOLMANPRO Business Profile via "Direct Link Groups to Nav. Bar Profile".
So I can't for the life of me work out why they are not showing!!
Any suggestions?
Thanks
Shaun

Please see the last item on this page:
http://scn.sap.com/community/it-management/alm/solution-manager/blog/2014/01/30/add-external-url-to-navigation-bar-web-ui
I have added in auth object C_LL_TGT and put the associated parameters in place. Still does not show .

Business Role changes not being provisioned

Guys (and girls),
We're having the issue that whenever we change something to a business role in IdM 7.1 SP5, like adding or removing a technical role (SAP role) the change isn't provisioned to the system authomatically resulting in users not being updated.
The workarround now is to change a business role and then remove it from a user and add it to that user again. Works ok when you're dealing with only a few users but I'm not looking forward to the day our basic role needs updating.
Same thing goes for changing users telephone number or SNC name or the likes.
I'm not sure if the two issues are related but am I missing an assignment of a task somewhere?
Cheers,
Jonathan

Jonathan,
I think so, but a pretty simple one to fix.
I would do one of two things:
1. Put a MODIFY task on MXREF_MX_ROLE or whatever attribute you're holding roles in. Have this task do a role reconcilation.
2. As a part of the workflow, have a role reconciliation execute.
On the whole, I prefer the second option. Don't like adding baggage onto the MXREF attributes. Just keeps things running more efficiently.
By role reconciliation, I mean executing the functions/tasks needed to reassert the roles on the user. I think there's a built in scripting function to do this or you can automate the add/remove functionality you described in your message, holding the role MSKEYs in a temporary attribute.
Matt

SAP Business Roles

Hi,
Has anyone ever worked with business roles. I am new to the OCM side having worked on the security side for many years. I am working on a project developing business roles and needed more details on how business roles link to security roles?

Thanks Matt,
I think get I the picture now
One thing that I am still not sure about is how the sap abap technical roles or profiles are provisioned through workflow
Here is what Ive done so far
1. HCM data loaded into productive identity store via vds
2. Did an initial load of the abap system into the productive identity store (now the technical roles and profiles are loaded as privileges in the idstore)
3. Through workflow I select a user that already has an abap account and assign that user some additional sap technical roles, for e.g. sap_all and sap_new. The corresponding privileges for these roles are namely PRIV:PROFILE:ECX:SAP_ALL and PRIV:PROFILE:ECX:SAP_NEW .
4. For the provisioning to occur so that these new privileges are reflected in the ABAP system for this user, I have used the setABAPRole&ProfileForUser task from sap provisioning framework folder and set it as the add/mod/del event task for the MXREF_MX_PRIVILEGE attribute. That way whenever a privilege is added to a user account the setABAPRole&ProfileForUser task will run and the sap_all and sap_new profiles will be added in the backend. This way I can avoid setting a provisioning task for each abap privilege that gets loaded.
But it should be obvious now that there is a flaw with this kind of setup, because all non abap privileges that get added or removed will trigger the setABAPRole&ProfileForUser task anyway because the privileges use the same attribute i.e.MXREF_MX_PRIVILEGE. So it brings me to the question how do you provision abap technical roles or profiles through workflow without setting a provisioning task for each abap related privilege.
Thanks again for all your help!
Leo

Portal & business Role updation

Hi Gurus,
here i have created and assigned transaction launcher and logical links under navigation bar profile for "Zsalespro" role and it is working fine in webui. but myclient is using portal.
so question is "do i need to do any additional setting to let this appear in portal for this role ?if yes, then how..?
or
it will appear automatically once you assign and activate it in business role, if no additional setting is required for portal ?
please help me with this.
Thanks for your support.
Regards,
G

Thanks for the replies
i) I have already linked my user to an employee record and added it to the org model.
ii) Also I have my own backend role linked a portal role and performed the config in PCUI (Navigation (URL Generation)). The BW iViews work fine and the CRM iView Marketing Attributes works fine - it's the other iviews
I have switched in iView debugging and this is the error
Parameters to send to backend:
Test mode information (displayed if X_TestMode property is YES)
Parameters to send to backend:
{IO=DfIyqWPAva{DVuYkFF784W, X_TESTMODE=X, PROCESSOR=PDV, VKORG=O 50000005, EP_BASE_URL=http://hspd35.supplier.ukho.gov.uk:50000/irj/portal, BP=0700000107}
XML received from backend:
com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: No active nametab exists for XSTRING Parameters passed to backend: {IO=DfIyqWPAva{DVuYkFF784W, X_TESTMODE=X, PROCESSOR=PDV, VKORG=O 50000005, EP_BASE_URL=http://hspd35.supplier.ukho.gov.uk:50000/irj/portal, BP=0700000107} XML received from backend: null

Dynamic calculation of privileges into business role

hi,
I have a requirement to create business roles containing a dynamic list of privileges. In addition, a costcenter attributes allows to determine the right privileges, within a business role, to assign.
I thought to use dynamic groups so that each time I assign a business role, a calculation of privileges based on costcenter is achieved.
for example:
BR1;FR10;Z_technical_privileges
BR1;FR30;Z_technical_privileges2
This list is often updated that's why I need it to be dynamic.
In the filter tab of the dyn group, I set a request to retrieve the mskeys of privileges (here is mskey of PRIV:ROLE:<sys>:Z_technical privileges & PRIV:ROLE:<sys>:Z_technical_privileges2)
Then I attach the dyn groups to the role (BR1) by setting up the autoassign field in the membership tab of the role.
When I assign the BR to a user, no privilege is provisioned (user already have an account in that system).
Am I forgetting something or doing something wrong?
how can I include the "check" on costcenter attributes?
thanks
Guillaume

Hello Guillaume,
dynamic roles find you the pool of people, that can be used in a business roles. If you attach a dynamic role to a BR, those users will become members of the BR.
You are trying the same with privileges and that's why nothing happens. Because privileges can't become members of the BR.
Are the different lists of privileges, that need to be assigned to users via the costcenter-attribute really changing so much?
You could use the dynamic groups to look for the members of a costcenter and assign those to the BR specific for that costcenter with the privileges added to the BR. That means one BR per costcenter and the privileges need to be changed manually or maybe via a job.
Hmm... where do the new privileges come from? How would you find them dynamically anyway? If you have a SQL statement for that, it should be possible to create a job, that adds the new privileges to the BR and delete old ones.
I don't see a fast and easy way to do this, but I haven't come across a request like this yet, so maybe there is one and I just don't know it (yet ^^).
Regards,
Steffi.

"Normal" Activities in FCC_PSCD Business Role

Hi All,
I am working with CRM2007 and the R3 solution for Public Sector. Hence, I decided to use the Business Role FCC_PSCD. The point is that, besides I have tried by adding the Work Centers SLS-ACT, SRV-CASE, SRV-OPERAT, I couldnt create the Activity with the "normal" layout as in Role SALESPRO.
The error message that I have when trying to create Activities is:
Diagnosis
No transaction type is available when creating a transaction. This can be due to the following reasons:
No transaction type is available according to Customizing
The user has no authorization for the transaction type
System Response
It is not possible to create the transaction.
Procedure
Make sure that:
The transaction type is set up in Customizing
The user has authorization for the transaction type
I hope somebody knows the answer to the scenario described above or can give me a tip....
Thanks!
Mauro

I resolved the issue with note 1172066.

CRM WEBClient UI -The same screen-menu appears for different Business Roles

Hi Experts,
We are working with CRM 2007 and are facing the following problem:
After starting the CRM WEBClient , a screen with two Business Roles appears: u2018SALESPROu2019 and u2018SERVICE PROu2019 (because in my User I have added the roles: SAP_CRM_UIU_SRV_PROFESSIONAL & SAP_CRM_UIU_SLS_PROFESSIONAL).
I select the one of the two roles (e.g. SALESPRO) and then I choose u2018backu2019 and select the other Role (SERVICEPRO) but the same screen appears with the menu from SERVICEPRO .
I noticed that the menu that appears has to do with which business role I select first.
Do you have any ideas what could be the problem?
Best Regards,
Roula

Hi Roula,
In CRM 2007, the CRM Webclient doesn't have the capability to switch from one business role to another directly as you are trying to do. The only option to switch is to logoff from Webclient and login in another role.
regards
Srikantan

Error while creating Business Role

Dear Frnds,
I am working on webclient , am trying set a Business Role of my own .But it say "You Cannot Assign one PFCG role to different business roles" .As when i copy the standard business role to that role there is no PFCG role assigned. Here i tried copying IC web Manager and do .
Can anyone guide me to solve this.
Appreciate your Help and Thanks in Advance.
Cheers
Ram

Guys,
I got resolved , Follow the Note :-1077251.
Thnxs
Ram

[NODEMGR} Adding a 'business role' to a nodemgrprocess

Similar Messages

Maybe you are looking for