Parent / Child Groups in Portal with LDAP

Heya,
we are using EP 7 on SP 10 (NW 7), for User Authentication we use the UME with a configured (writable) LDAP
Server as backend with a flat hierarchie. We have a Federated Portal Landscape with
3 Portals connected to one "main" portal and using Remote Role Assignement on the main portal for
our right managenemt.
Remote Roles which are added to Groups are working fine, but as soon as we try to use
the parent/child group functionality we are facing the problem that the user who logs on
has no access to anything in this group.
According to http://help.sap.com/saphelp_nw04s/helpdata/en/af/0cfc3f09c2c442e10000000a1550b0/frameset.htm
the only restriction for the use of child / parent groups is that:
"If user management is set up with write access to an LDAP directory, the following restriction applies:
When assigning members to a group that is stored in the LDAP directory, you can only assign users or
groups that are also stored in the LDAP directory. You cannot assign users or groups from the database
to groups from the LDAP directory. "
We fullfill the above condition (everything is LDAP based) - sooo: Any Hints for me / Someone facing
the same problem.
Thanks,
Marco

Hi Murali,
User Configuration
A particular company has the following setup:
●      Two roles: External and Internal
●      The role Internal contains users who also belong to two user groups: N.America and Asia
●      User A belongs to both the role Internal and the user group N.America
●      User B belongs to both the role Internal and the user group Asia
●      User C belongs to the role External
Conditions Defined in Portal Display Rules
1. If Group = N.America
   Then Portal Desktop = Orange Flavor
2. If Role = Internal
   Then Portal Desktop = Green Flavor
3. If Group = Asia
   Then Portal Desktop = Blue Flavor
4. If Role = External
   Then Portal Desktop = Red Flavor
Note that user A matches conditions 1 and 2; (ii) user B matches conditions 2 and 3; and (iii) user C matches condition 4.
Results
According to the list of priorities, these are the results:
●      User A receives portal desktop "Orange Flavor" (according to condition 1 which has priority over rule 2)
●      User B receives portal desktop "Green Flavor" (according to condition 2 which has priority over rule 3)
●      User C receives portal desktop "Red Flavor" (according to condition 4)
still any help on portal disktop rules to can see this link http://help.sap.com/saphelp_nw70/helpdata/EN/4b/29cf122f414721964269e1b675d62c/frameset.htm
if helpful don't to give points
thanks
best regards
ep

Similar Messages

  • Portal with LDAP

    Dear all,
    System details: ECC 5.0, EP 6.0 SP17, ESS
    1.I have already installed Portal with abap option. But now the requirement is to get authentication for portal ess users by LDAP, how to do it without installation or should i install it again.
    2.LDAP server is rehat open server. sap schema is created in ldap. what steps should i have to do in ldap server?
    3.Do i need to activate ldap (manually) in abap system also?
    4.How these portal users will be mapped to employee id
    if they are authenticated in portal because i think in transaction HRUSER it gives the user list which are stored in abap system, or the user id,s must be created in both abap and ldap.
    Can anyone give me the solution.
    Imran Hasware
    [email protected]

    Hi,
    The contents under "Configuring UME to Use an LDAP Server as Data Source" in the flwg link may be helpful,
    http://help.sap.com/saphelp_nw04/helpdata/en/cc/cdd93f130f9115e10000000a155106/frameset.htm
    Also go thru,
    Authenticating R/3 users using LDAP
    Regards
    Srinivasan T

  • How to force a new password in portal with LDAP user? external users

    With an external portal (used by agents that do not work for you or reside in your office), company policy is for password to be changed every qtr.
    If the users are creating as LDAP users how to force them to change their password when required?
    Is this a custom application that needs to be written so when they log into the portal if the qtr has expired the portal ask them to enter a new password that becomes valid for the next qtr.
    Versus internally deleting and emailing all the users a new password?

    Hi Glenn,
    We are getting one problem when we are creating user in LDAP and login with that user in  Portal that time we are getting Password change screen , but when we create a user in LDAP and change the password of that user in LDAP then when the user tries to  Login to portal that time we are not able to see the password change screen.
    But again if we change the password of that user through Portal we are able to see change password screen.
    can you help on this how we can force the user to change password when we are changing password in LDAP or in SAP System.
    Regards
    Trilochan

  • Problem with users in portal - login conflict with LDAP.

    Hi.
    Let me describe our problem:
    We've a EP5 portal with LDAP conected to a central LDAP server, users access with the same user and password to all the different systems.
    The problem happens to users who have theyr passwords expired. We already set to 0 the password expiration days to avoid future problems but that didn't applied to the already expired ones.
    This affected users cannot change the password due to problems with the connection rights to LDAP server.
    We're trying to find the place there it's set that the user is in some kind of "password expired" status, directly in a database table if neccesary, to change the status manually, as system does not allow os to set it by user administration in portal.
    Any suggestions would be appreciated.

    Restoring expired Portal passwords
    Solved

  • ERROR Handling in Portal with calls to the back-end!!!!

    HI all,
    We are seeing the following error message with the very very long Java dump that is intimidating to the users and looks so ugly.... Is there any way to trap this in the Portal and make the error message appear more friendly?:
    No authorization for Write trip 0005027615:
    com.sap.pcuigp.xssfpm.java.FPMRuntimeException: No authorization for Write trip 0005027615
                at com.sap.pcuigp.xssfpm.java.MessageManager.raiseException(MessageManager.java:111)
                at com.sap.pcuigp.xssfpm.java.MessageManager.raiseException(MessageManager.java:121)
                at com.sap.xss.tra.fc.utils.FcTraUtils.raiseRFCException(FcTraUtils.java:494)
                at com.sap.xss.tra.fc.utils.wdp.InternalFcTraUtils.raiseRFCException(InternalFcTraUtils.java:321)
                at com.sap.xss.tra.fc.utils.FcTraUtilsInterface.raiseRFCException(FcTraUtilsInterface.java:286)
                at
    com.sap.xss.tra.fc.utils.wdp.InternalFcTraUtilsInterface.raiseRFCException(InternalFcTraUtilsInterface.java:252)
                at com.sap.xss.tra.fc.utils.wdp.InternalFcTraUtilsInterface$External.raiseRFCException(InternalFcTraUtilsInterface.java:468)
                at com.sap.xss.tra.tre.fc.generaldata.FcTreGeneralData.rfcGeneralDataGet(FcTreGeneralData.java:508)
    and so on.......
    Thanks, Neeta

    Hi Neeta,
        Check if this helps...
    Parent and Child groups in Portal
    Regards,
    Uday.

  • How to change datasource of a group in portal

    Hello Evryone,
    I am using EP7.0
    When I am creating a new group under User Administration->Identity Management ->Create new Group,
    a new group gets created, but the data source of this group is "UME Datasource".
    I want to change the data source of this group. The available data sources when I search the groups are "R3_ROLE_DS", "UME Datasource", "Built-in Groups Adapter".
    But there is no way that I can create a group with , say R3_ROLE_DS data source. On creation of a new group it just asks for a group name and group description. It always creates a group with a default data source "UME Datasource".
    Can anyone help me on this.
    Thanks
    Vikram

    Thanks Bala,
    I do not have much knowledge about UME so kindly bear with me.
    The problem that I am facing is : when I search for groups in portal, then I am able to view/search groups that are of type R3_ROLE_DS( ie these groups have been created in backend) as well as groups with type :"UME DATABASE".
    I just want to know, that if I want to create a group in portal with type R3_ROLE_DS, then is it possible or not?
    Basically, the issue is that groups created in backend are vsible/can be used in portal, but can I create groups through portal that can be visible/used in backend?
    Vikram

  • Is Parent-Child mandatory?

    Hi everyone,
    In my model i have this dimension which it's hirarchy is an unbalanced hirarchy
    In my fact table the reference key to this dimension can be in different levels: leaf level and non-leaf levels
    Now, one solution is a parent-child hirarchy
    the triuble with this solution is that i can have only one parent-child hirarchy per dimension and i do need two hirarchies
    - the customer wants one tree of the decriptions and one of the codes - he acttually wants to show data sliced by a tree of codes. that way i have to create two dimension one for codes and one for descriptions
    in addition, i understand there are some performance issues within large cubes
    another solution is to flatten the dimension
    Level_1_Code, Level_1_Desc,Level_2_Code, Level_2_Desc,Level_3_Code, Level_4_Desc till 5 levels (maximum level of unbalanced the tree)
    is it possible to flatten the dimension or parent-child is neccacery? I remind you In fact table the reference key can be in different levels: leaf level and non-leaf levels
    TIA

    RE: The parent object is the Source. Source is mandatory. Source to child (target) cardinality is "*" - i.e. the parent may have zero to many children.
    I think by setting the Source to mandatory you are saying "The parent must have 1 to many children."
    I think the problem you are having is the limited detail and sometime confusing User's Manual.
    Here's what it says about the first checkbox:
    Relation Cardinality: Source Optional: Controls whether the source entity in a relationship must, by default, contain one or more instances. If this option is enabled, source instances are not required for all relationship types; if this option is disabled, one or more source instances are required for all relationship types.
    My interpretation of this is that the Source Optional checkbox determines whether or not the target entity is optional for the relationship when viewed from the source. If I'm correct then you are using the checkboxes backwards. (I'm new at this tool, but I've been doing data modeling for 30 years.)

  • Parent-child hierarchy and fragmentation content

    Hello,
    I've tried to build simple model with OBIEE 11 using Oracle 11r2 as a data source. BMM has fragmentation content for fact table and few dimensions with different hierarchy types. It works fine with all hierarchy types except for parent child.
    When I build an answer with parent child hierarchy it terminates with error "Target data source does not support the operation".
    Does OBIEE 11 not support parent child with fragmentation content? Or am I missing something?
    Greetings
    Marcin

    I'm seeing the same issue. I've created a parent-child hierarchy along with two normal level-based hierarchies (one "normal", one skipped-level). The two level-based hierarchies work just fine in Answers. I can include them in the criteria, and data is displayed with the correct drilldowns.
    If I include the parent-child hierarchy, I get the same results as noted in the original post: "The layout of this view combined with the data, selections, or drills, or prompt values chosen, resulted in no data." I'm trying to look at the table view, with no filters.
    Interestingly, I can explicitly include that dimension's Parent column and Member column in the criteria, and data is displayed just fine.
    Here is the XML for the set of criteria that includes the separate Parent and Member columns (the one that works):
    SELECT s_0, s_1, s_2, s_3, s_4, s_5, s_6, s_7, s_8, s_9, s_10, s_11 FROM (
    SELECT
    0 s_0,
    "Retro_Biz"."Channels"."MEMBER" s_1,
    "Retro_Biz"."Channels"."PARENT" s_2,
    "Retro_Biz"."Products"."TOTAL_PRODUCT" s_3,
    "Retro_Biz"."Times"."YEAR" s_4,
    SPACE(1) s_5,
    SPACE(1) s_6,
    SPACE(1) s_7,
    IDOF("Retro_Biz"."Products"."Product"."Total Product") s_8,
    IDOF("Retro_Biz"."Times"."Time"."Year") s_9,
    "Retro_Biz"."Facts"."SALES" s_10,
    CAST(NULL AS DOUBLE) s_11
    FROM "Retro_Biz"
    UNION ALL
    SELECT
    1 s_0,
    "Retro_Biz"."Channels"."MEMBER" s_1,
    "Retro_Biz"."Channels"."PARENT" s_2,
    SPACE(1) s_3,
    SPACE(1) s_4,
    SPACE(1) s_5,
    SPACE(1) s_6,
    SPACE(1) s_7,
    SPACE(1) s_8,
    SPACE(1) s_9,
    CAST(NULL AS DOUBLE) s_10,
    REPORT_SUM("Retro_Biz"."Facts"."SALES" BY ) s_11
    FROM "Retro_Biz"
    ) djm ORDER BY 1, 5 ASC NULLS FIRST, 4 ASC NULLS FIRST
    Here is the XML that includes the Parent-Child hierarchy (the one that fails):
    SELECT s_0, s_1, s_2, s_3, s_4, s_5, s_6, s_7, s_8, s_9, s_10, s_11, s_12 FROM (
    SELECT
    0 s_0,
    "Retro_Biz"."Channels"."MEMBER" s_1,
    "Retro_Biz"."Products"."TOTAL_PRODUCT" s_2,
    "Retro_Biz"."Times"."YEAR" s_3,
    CASE WHEN ISLEAF("Retro_Biz"."Channels"."Channel") THEN 1 ELSE 0 END s_4,
    IDOF("Retro_Biz"."Channels"."Channel") s_5,
    SPACE(1) s_6,
    SPACE(1) s_7,
    SPACE(1) s_8,
    IDOF("Retro_Biz"."Products"."Product"."Total Product") s_9,
    IDOF("Retro_Biz"."Times"."Time"."Year") s_10,
    PARENT("Retro_Biz"."Channels"."Channel") s_11,
    "Retro_Biz"."Facts"."SALES" s_12
    FROM "Retro_Biz"
    WHERE
    ISROOT("Retro_Biz"."Channels"."Channel")
    UNION ALL
    SELECT
    1 s_0,
    SPACE(1) s_1,
    SPACE(1) s_2,
    SPACE(1) s_3,
    CAST(NULL AS INTEGER) s_4,
    SPACE(1) s_5,
    SPACE(1) s_6,
    SPACE(1) s_7,
    SPACE(1) s_8,
    SPACE(1) s_9,
    SPACE(1) s_10,
    SPACE(1) s_11,
    "Retro_Biz"."Facts"."SALES" s_12
    FROM "Retro_Biz"
    WHERE
    ISROOT("Retro_Biz"."Channels"."Channel")
    ) djm ORDER BY 1, 4 ASC NULLS FIRST, 3 ASC NULLS FIRST

  • Security on Parent-Child Hierarchy

    Problem Statement: In Parent Child Hierarchy say with Manager - Employee relationship, if we apply security using Siblings function in the Dimension Data Security (Allowed Member Set) then it displays children of peers at
    same level as current employee.
    Scenario:
    Create Employee Dimension with Parent-Child hierarchy with steps below -
    1) add data
    ===============================
    (EmpKey|Name|Position| loginId| level| MgrKey)
    1|Scott King|CEO|sking|level1|null
    2|Rick Peters|VP|rpeters|level2|1
    3|Steve Parker|VP|sparker|level2|1
    4|Matt Jones|Dir|mjones|level3|2
    5|Doug Blanc|Dir|dblanc|level3|2
    6|Jay Lawson|Dir|jlawson|level3|3
    7|Lance Roberts|Dir|lroberts|level3|3
    ============================
    2) Create Parent-Child hierarchy on MgrKey with its Usage = Parent
    2a)set ValueColumn of Login_ID attribute to EmpKey.
    2b) Also set ValueColumn of MgrKey attribute to Login_ID. Rename Parent-child hierarchy to Employees
    3) Create Security Role and configure Dimension data security.
    In the allowed member set write the below MDX statement.
    { StrToMember( "[Employee].[Employees].&[" + CStr(StrToMember("[Employee].[Login ID].&[" + UserName( ) + "]").MEMBERVALUE) + "]"), StrToMember( "[Employee].[Employees].&["
    + CStr(StrToMember("[Employee].[Login ID].&[" + UserName( ) + "]").MEMBERVALUE) + "]").SIBLINGS }
    Expected Result:
    Using Siblings function - Ideally if Steve Parker connects to SSAS Cube then he should see his totals, only his subordinate totals, only his Peer's totals(not their subordinates) and his manager's totals.
    Actual Result:
    Due to above Dimension Security configuration, if Steve Parker connects to SSAS Cube then he will see his totals, his subordinate totals and his manager's totals. However due to Siblings function "Steve Parker" is also able to see
    Rick Peters's subordinate details.
    Query: Is there a way to achieve the Expected Result by restricting the children of Siblings?

    Hi Ketan,
    Thank you for your question. I am currently looking into this issue and will give you an update as soon as possible.
    Thank you for your understanding and support.
    Regards,
    Elvis Long
    TechNet Community Support

  • Graphs and parent-child with loops and duplicates

    There is a parent-child relation in the table t(prnt, chld) which allows duplicates (A->B, A->B) and opposite paths (A->B, B->A), and complicated loops. Is there a way to identify rows that form any separate "connections network" and assign a "name" to them of any kind (letter, number, wahtever)? I try to use WITH recursive clause to identify and group rows belonging to one graph but with no luck. Any help would be appreciated.
    thank you

    Frank, I posted inputs for all graphs (multiple inserts) and some allowable outputs for one graph. For all cases (ie. graphs) the rule is the same:
    1. identify all nodes belonging to a graph
    2. "name" that graph (min, max or whatever you like)
    3. print the output in the form (node_belonging_to_a_graph, name_of_the_graph) for all identified graphs
    And as you said, I am somewhat flexible. I don't want to constrain the problem with saying min, max because it's not important how you name it, but the way which is somehow natural and fits with requirements is the usage of nodes' values.
    You ask me if (1,1),(2,1),(3,1) is also OK as an output for sample graph (1,2)+(2,3). Yes it is. It is one of those I posted but with additional node which is chosen as a name for a graph. But as you can guess it doesn't matter which node you choose, and the additional information about a node named with its own name is not as important and the information that all other nodes are named with that name but it is 100% acceptable. If you changed the naming convention and started to use letters instead of node values then yes, it would be a must to have the output in the form (1,a),(2,a),(3,a).
    You also ask me about the result for 90x data inserted as 5 rows: (901,902)..(906,904) and present sample result:
    901 902
    905 902
    906 902
    And the answer is no, it is not good result. It misses the information about the nodes 904 and 903 which belong to this graph too. The correct result could be:
    901 902
    905 902
    906 902
    903 902
    904 902
    or any other "combination" which presents 5 nodes with the name of the sixth (in this case of 6-node graph). Just one have to be picked, it doesn't matter which one. The "vertical" order is also irrelevant.
    As you can see there is a lot of room that gives acceptable result. I don't want to constraint it because it can influence performance which is important when dealing with graph structures in relational databases (RDBMS are not predestined to easily cope with that sort of information). It can also influence the chosen algorithm and I'd like to pick the fastest one which gives acceptable result.
    Two numbers x and y are in the same group (graph) if (and only if) at least one of the following is true:
    (1) they appear on the same row together (it doesn't matter which number is in which of the 2 columns), or
    --(2) x appears on the same row with a third number, z, and z is in the same group as y--
    (2) there are other edges (entries) in the table that form a "path" from x to y. And because the direction of the path is not important for the problem (ie. the parent-child table structure can be forgotten for a moment), the path means "there exists connection" between x and y aka "you can walk from x to y".
    The output consists of 2 columns: id (which is unique in the result set) and grp (which identifies the group) *[correct]*
    The id column will always be one of the numbers in the group *[correct]*
    It doesn't matter what the grp column is, or even what data type, as long as it distinguishes between the different groups. *[correct, but as you noted using one, picked number from a graph is the prefferable way]*
    If there are N distinct numbers in the group, I need N rows of output for that group, with id showing all those distinct numbers. *[correct, but if you choose your naming convention as naming a graph with the value of the node belonging to it you can ommit the node which is named for itself (but it doesn't hurt is such row appear in the result)]*
    You ask me if the graph is directed. No it's not. Your example (x,y) and (y,x) is great, and it can be concluded from my first post when I say that "opposite paths" (A->B, B->A) exists. What matters is the connection between the nodes. The parent-child table somehow imposes that direction is important, but for this problem it is not.
    One of the motivations for my post is to know what other people think without affecting their minds with my approach. I don't want to skew anybody's mind into my solution which works, but it's not effective. I don't mind showing it but I kindly ask you to think about the problem before I post it. Diversity of approaches helps to distill the best one.
    As I said I did it with the usage of sys_connect_by_path. If it doesn't appear to you as possible usage then it is likely that I don't use it efficiently. Please understand, I will post it if you ask me one more time but if you can live for a while without my inefficient solution and suggest something with WITH clause I would appreciate it.
    There is no exact result I expect. There are many results which are correct and acceptable. They all must follow the rules described at the beginning.
    Thank you
    Edited by: 943276 on Jun 28, 2012 1:32 AM

  • Xcelsius Parent/Child SWF Loader with BICS Connections

    We have several Xcelsius Dashboards that use BICS connections to retrieve data from BW queries that we'd like to combine into one Parent/Child tabbed dashboard. I can't seem to find solid information on if this is possible using a SWF Loader component due to the BICS requirement of being published through BW Portal and not InfoView. Does anyone have any ideas (short of combining them into one huge dashboard due to the volume of data)? Thanks!

    Hi Chris,
    I have been working with SWF loader on the SAP portal using the BICS connection type. It was not supported last time I asked about a year ago. However, it can work if you specify the URL in the SWF loader in this way:
    http://sapwebdisp.vestas.net:8103/bicsremotebex?SWF=XXX&TIMESTMP=1318867468000
    XXX is the name you publish your child dashboard under. Data can be exchanged between the parent and child dashboard by using the custom component "Data sharer" from Inovista which can be downloaded for free:
    http://www.inovista.com
    Besides the fact that this setup is unsupported there are some limitations so from my point of view it should only be applied under the following conditions:
    1. It is not possible to build eveything into a single dashboard.
    2. A solution having several independent dashboards does not make sense.
    An alternative might be the setup described in note 1526291. The way I understand it, it binds the dashboards together in a similar way as on a BO server with flash variables.
    Regards,
    Michael

  • OBIEE11g - Hierarchy parent-child with a factable measure(poor performance)

    Hi
    I have a star model with a hierarchy parent child, joined to the fact table.
    Creating a new analysis, and adding the hierarchy column with any other field from any dimension (on selected columns or filters) all works fine, and the hierarchy displays every level very fast.
    But adding a measure from the fact table, the hierarchy performance drops dramatically and I have to wait 20-30 seconds to see each new level displayed.
    Taking a look at the SQL launched, seems to be all right:
    The measure is a COUNT(DISTINCT factable.field) and the group by is done by Parent,Child fields in the hierarchy table.
    Is there any other way to set up this hierarchy? Why the measures are reducing the performance?
    Any comment will be helpful.
    Thanks in advance.

    Try these
    Use Oracle Enterprise Manager (EM) URL to monitor end to end OBIEE real time performance: http://<server>:7001/em
    In Oracle Business Intelligence 11g, the perfmon URL is still valid to use i.e. http://<server>:9704/analytics/saw.dll?Perfmon
    Check these
    http://www.rittmanmead.com/files/biforum2012/ranka_performance.pdf
    http://docs.oracle.com/cd/E17904_01/web.1111/e13814/jvm_tuning.htm
    https://blogs.oracle.com/pa/entry/obiee_ibm_jdk_tuning_for
    Support note OBIEE 11g Infrastructure Performance Tuning Guide Doc ID 1333049.1
    If helps mark and update back :)

  • Is there a fix for a problem with animation using nested graphics (parent/child)?

    I am not sure if its because of my lack of experience with 2D programs or not, however I am having issues with nested graphics and animation. I am normally a 3D user and as such grouping and parents are very key to how things are able to move. The problem I am having (just as an example because its hapening in multiple areas) is I have an arm of a character that is grouped 3 times. The upper arm is the parent, the lower arm is grouped inside the upper arm, and the hand grouped inside that, all of which were converted to graphics. I did this so the lower arm and hand follow the upper arm, and the hand follows the lower arm. This would be a common sense thing to do in 3D however when it comes to animating the hand, usually when double clicking a graphic it takes you to the same frame for the child as is selected with the parent (if the parent is on frame 20, double clicking the parent should take you to frame 20 of the child). I should also add that all graphics have the same frame count.  The problem being when i double click, the child does not have the same frame count and throws off everything done to the child in relation to the parent's animation. I am not sure if its something i did, or a problem that exists inside flash. I have a deadline coming up and this has been a bad problem to have last minute so if anyone has advice on the matter, that would be greatly appreciated!
    I also tried using the bone tool in flash, and besides no obvious way of re-adjusting the bones that are attached to the graphics (short of deleting them and trying again), this was difficult as well. I looked up ways to adjust the position and it seems you can only adjust the graphics themselves, not the bones. Normally this wouldn't be a big deal if it didn't start skewing the graphics out of place randomly. 
    I hope this isn't too confusing and I would certainly appreciate some feedback!

    Would you mind reposting this question over on the Flash Professional forums?  This forum is primarily for end users, the Pro forums will get you in touch with a wider developer audience.
     

  • Automatic upload of roles from ECC to portal (UME with LDAP)

    Hi experts,
    This thread reopen the question asked on the following message : automatic upload of roles from BI to portal
    However, it concerns this time "UME with LDAP".
    Problematic :
    SAP Library 04s tells us that is not yet possible to automate role replication (or role assigment replication) from ABAP Based back-end to Netweaver Portal. Only manual process for initial upload is possible.
    Source = http://help.sap.com/saphelp_nw04s/helpdata/en/41/5e4d40ecf00272e10000000a155106/frameset.htm
    Questions :
    1 - Did anyone ever try to implement such an automatic tool ?
    2 - What if I'm not able to write on the Active Directory ? I am still able, at least, to automate role assignment replication from ABAP Based back-end to Netweaver Portal (ie. UME with LDAP) ? Directly from SAP R/3 to EP through UME, without passing through Active Directory since the group field is not maintained in AD.
    Many thanks for your inputs
    Alexis MARTIN

    Hello,
    As I did not read the previous thread I don't know what exactly you are trying to achieve, but I can tell you about what we have done - as far as it is not too late yet.
    We use the portal with integration to a BI system. In the ABAP stack we have lots of roles with menu items for hundreds of reports. We want the users to see these roles in the portal.
    First we have used the role migration tool of the portal to upload these roles. There is a Java API for executing role uploads from code. You need to create a webservice in the java stack to call this api, and can call the webservice from ABAP.
    However it is just a question of time and role size until this will not work at all. Standard role migration is more or less crap, stability is a problem. It also creates a lot of logs in the PCD and thus fills the database with trash. (After a few OSS messages there is now a program for deleting logs + you can turn of logging.) Also upload of larger roles takes up to an hour, and you alwasy have the problem that your portal roles are not up to date during the day.
    When I got completely fed up, I have implemented an own navigation connector. When you log on to the portal it will connect to the ABAP stack via RFC, load the role, and generate the portal menu from it. It uses caching, but on every logon it checks whether the role has been updated in ABAP since the last time it was loaded. It is up to date, faster then PCD navigation, and you need absoluetely no periodical synching at all. I cant even understand why this is not offered by SAP per standard!
    Drawback is that it will of course only work for the menu items, and only menu items with an "URL-type" are supported. I'm prettry sure however that it would be possible to implement a few other types as well.
    Let me know if you are interested in the solution, I can give you a few additional details: oliverDOTsvisztATwienerbergerDOTcom
    Oliver

  • Hide parent group if child groups are hidden

    I have SSRS 2005 report.
    Report structure - To show a particular account transactions for every company.
    So user will select account then i have to show all transactions for that account for all companies.
    Parent group - Account
    Child group - Company
    Details section is like below,
    transactions id            transaction type          debit
              credit              difference
    In the groups visibility for compnay group (chile group) i have set condition if diff is zero then hide
    so its hiding child groups. but showing account i.e. parent group. 
    My Report looks like,
    Account : Acc001 (Parent group)
    Company - ABC     (child group)
    transactions id            transaction type          debit  
            credit          
    difference    
    t1                                   type 1                        4
    t2                                   type 2                                    
            4
    total by company            4                    4                   0
    Company - XYZ            (child group)
    transactions id            transaction type          debit  
            credit           difference    
    t3                                   type 1                        100
    t4                                   type 2                                    
             100
                                       total by company           100               100      
             0
    total by account              104             104                 0       
    so i am hiding companies ABC and XYZ but report still show last row total by account. so if abc and xyz are hidden i want to hide that account group (for e.g. Acc001).
    h2007

    Hi h2007,
    According to your description, you have a report with detail rows showing transaction information, child group showing companies, and parent group showing account. Now you want to hide the detail row if the difference(debit-credit)=0, and if the detail row
    is hidden, you want to hide the company as well. Right?
    In Reporting Service, we can’t use a property of a text box as an expression when we use IIF() function to evaluate. But we can put this whole IIF() expression into a IIF() function for another textbox or group to set visibility. We tested your case in our
    local environment. It works fine and completely achieve your goal. Here are steps and screenshots for your reference:
    Create a table as described.
    Right click on any textbox of detail row. Select Properties.
    Click on Visibility tab, put this text into expression:
    =IIF(SUM(Fields!Debit.Value)-SUM(Fields!Credit.Value)=0,true,false)
    Select toggled by its parent group (Company).
    Repeat step2 and step3 for each textbox of detail row.
    Right click on textbox of Company. Select Properties.
    Click on Visibility tab, put this text into expression:
    =IIF(IIF(SUM(Fields!Debit.Value)-SUM(Fields!Credit.Value)=0,true,false),true,false)
    Select toggled by its parent group (Account).
    Right click on textbox of Account. Select Properties.
    Click on Visibility tab, put this text into expression:
    =IIF(IIF(SUM(Fields!Debit.Value)-SUM(Fields!Credit.Value)=0,true,false),true,false)
    Go to Properties window, set InitialToggleState Expanded for Company and Account textbox
    Save and preview.
    Reference:
    Expression Examples (Report Builder and SSRS)(See Properties->Visibility)
    Expression driven visibility in a report
    Best Regards,
    Simon Hou

Maybe you are looking for