Portal & business Role updation

Hi Gurus,
here i have created and assigned transaction launcher and logical links under navigation bar profile for "Zsalespro" role and it is working fine in webui. but myclient is using portal.
so question is "do i need to do any additional setting to let this appear in portal for this role ?if yes, then how..?
or
it will appear automatically once you assign and activate it in business role, if no additional setting is required for portal ?
please help me with this.
Thanks for your support.
Regards,
G

Thanks for the replies
i) I have already linked my user to an employee record and added it to the org model.
ii) Also I have my own backend role linked a portal role and performed the config in PCUI (Navigation (URL Generation)). The BW iViews work fine and the CRM iView Marketing Attributes works fine - it's the other iviews
I have switched in iView debugging and this is the error
Parameters to send to backend:
Test mode information (displayed if X_TestMode property is YES)
Parameters to send to backend:
{IO=DfIyqWPAva{DVuYkFF784W, X_TESTMODE=X, PROCESSOR=PDV, VKORG=O 50000005, EP_BASE_URL=http://hspd35.supplier.ukho.gov.uk:50000/irj/portal, BP=0700000107}
XML received from backend:
com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: No active nametab exists for XSTRING Parameters passed to backend: {IO=DfIyqWPAva{DVuYkFF784W, X_TESTMODE=X, PROCESSOR=PDV, VKORG=O 50000005, EP_BASE_URL=http://hspd35.supplier.ukho.gov.uk:50000/irj/portal, BP=0700000107} XML received from backend: null

Similar Messages

What is the mean of using Portal with Role Based security as entry point

Hi Experts we have requirement of integration of Portal and MDM
I am completely new to the MDM. So please give me some idea , what is the meanin for following points.
1) Using the Portal with Role Based security as entry point for capacity and Routing Maintaince(These two are some modules).
2) Additionally , Portal should have capability to enter in to the MDM for future master data maintence. Feeds of data will need to be come from SAP 4.6c
Please give me the clarity of what is the meanin of second point
Regards
Vijay

Hi
It requires the entire land scape like EP server and MDM server both should be configured in SLD.
Your requirement is maintaing and updating the MDM data with Enterprise portal.We have some Business Packages to install in Portal inorder to access the functionality of MDM.
Portal gives you a secure role based functionality of MDM through Single sign on (login into the portal access any application) to their end users.
Please go through this link
http://help.sap.com/saphelp_mdmgds55/helpdata/EN/45/c8cd92dc7f4ebbe10000000a11466f/frameset.htm
You need to develope some custom applications which should be integrated into the portal to access MDM Server master data
The estimation involves as per your requirement clearly
Its depends upon the Landscape settings, Requirement complexity,Identify how many number of custom applications need to be developed
Regards
Kalyan

Business roles in GRC AC

Hello,
Is it possible in SAP GRC AC to create so-called business roles like in SAP IdM. This roles are not assigned to any backend system but derive backend system roles. The aim is to create set of roles that consist of roles in different backend systems.
As I understand role mapping can't fully implement this functionality, because main role is assigned to backend system.
Thanks,
Yakov
Edited by: Yakov Silin on Feb 24, 2010 7:00 AM

Hi Yakhov,
I was wondering if this is your dilemma. We want to use this role mapping feature for the purposes of adding an Enterprise Portal role for every ABAP role that gets approved for the user in an ABAP component system (i.e. ECC, BW, CRM etc). We will have a 1:1 mapping of Enterprise Portal role to ABAP role defined in the role mapping section in GRC.
- We want to set up the workflow in such a way that the main role (ABAP role) is the only role that needs to be approved. The dependent role (Enterprise Portal role) should be added or not added based on the approval or denial of the main role (ABAP role). In other words if the role owner for the abap role approves the abap role, then both the abap and EP role will be provisioned by GRC and if the role owner rejects/denies the role, then neither the abap or EP role will be provisioned by GRC.
Is this similar to the challenge you ar facing?

Disable / Hide Portal PCD roles which we don't want to display in UME.

Hi Friends,
I have configured ESS/MSS setup in our Portal;
Step 1)
    a) We downloaded ESS/MSS business packages from SAP Market place
    b) Deployed into our Portal.
    c) I have checked in Portal Content Administration; ESS/MSS PCD objects i.e. Roles,Worksets,Pages and iViews were created inside the SAP Standard folder.
Step 2) As per my client recommendations u2013
   a) We donu2019t want to use PCD objects directly from SAP Standard folder and we will keep those PCD objects as backup. So,
   b) We created Client folder ex: xxABC inside Portal Content.
   c) I copied ESS/MSS PCD folder from SAP Standard Folder and Pasted inside folder xxABC; and then we customized Roles and worksets based on our requirements.
Step 3) Role assignment to Users
      When I search for ESS/MSS roles like u201CEmployee Self-Serviceu201D and u201CManage Self-Serviceu201D I am able to see each role twice u2013 one is from SAP Standard folder and another from client folder which I was copied.
So,
1) I donu2019t want to display ESS/MSS role which is inside of SAP Standard folder in UME(role search).
2) I donu2019t want to delete the role from this folder.
I got an Idea that is u2013 disable/hide Portal PCD roles which we don't want to display in UME while role search.
Please advise me, Is there any feature to disable/hide PCD roles in SAP Portal?

Hi,
You can try to set '''plugins.hide_infobar_for_outdated_plugin''' to true in [http://kb.mozillazine.org/About:config about:config].
[http://kb.mozillazine.org/About:config_entries about:config Entries]

CRM2007 How to add a Web Dynpro ABAP application to a CRM business role

I am investigating CRM2007 UI framework and I cannot seem to find a way to add a custom made Web Dynpro ABAP Application (created in CRM 4.0) to a business role, or how to add a custom transaction created in classic ABAP (transaction created via se93, progam created via se38). Whatever I do, I only see BSP components. I am using transaction BSP_WD_CMPWB.
Next to this it seems you can add/integrate Visual Composer applications to (there is an entry in spro called "integration of the visual composer in BI"). However, I presume we first have to meet the requirements for the portal integration in SAP CRM 2007 as described in spro. If somebody knows how this works, that would be great!
kind regards
Angelique Heutinck

Hello Angelique,
It should be possible to call web dynpro applications from the L-shape menu of CRM UI (check transaction CRMC_UI_NBLINKS). As for the old GUI transactions, you can embedd them also via transaction launcher using CRMC_UI_NBLINKS (search for "transaction launcher" in this forum, there is plenty of information on it).
Best Regards,
Yevgen
Edited by: Yevgen Trukhin on Jun 19, 2008 11:53 AM

Business Role change made password deactivated or reset in ABAP systems.

Hi,
We recently made changes Business role by adding technical role but this changes has deactivated or reset password for assigned users who had Productive password in connected ABAP system.
We have two type of users, one who access SAP Portal and ABAP with Single Sign on and second who login into Portal and ABAP with password.
This BR change has impacted second type of users who had Productive password.
Regards,
Manish

Hello Manish,
you have marked the thread as "Assumed answered". Could you please share with the community the outcome of your OSS ticket with SAP, so that others can benefit, too? Then you can mark the post as answered. Right now the thread isn't really helpful to anyone (neither you nor the community).
Also, if you answer Jai's questions, maybe we can help in solving your problem?
Having several irons in the fire can't be bad, right?
Regards,
Steffi.

Business Role replication from HR

Hi there,
We have recently implemented CRM 2007 and activated the interface with HR (SAP Enterprise 4.7).
In CRM the Business Role is an infotype that is maintained at the position level and that must be present in order for a user to be able to use the new CRM WebClient interface.
As the data for the CRM Org Structure is derived from HR, we are looking to maintain the Business Roles centrally in our source system (HR) for each position.
Do you know if there is any provision in the Standard SAP System for doing that?
If not, is there any guide I can follow to enhance to enhance the HR-CRM ALE Interface to transfer over a custom infotype from HR and get it assigned to infotype 1263 (Business Role) in CRM.
Thanks in advance
Manuel

Hi John,
HR replication from R/3 to SRM is carried out by following these steps:
1.) setting up the distribution model in SRM and R/3 for message type HRMD_ABA. You can set up number of filters in this message type, where you define HR infotypes, subtypes, object type and so on.
2.) Once you set up the distribution model, distribute the model.
3.) Report RHALEINI is used to replicate the distribution model from R/3 to SRM in the insert mode. (You can also use transaction code PFAL).
4.) Ongoing replication if performed in the update mode from R/3 to SRM will cause problems of users being broken in sporadic cases. It is advisable to use change pointers from BD14 to perform the ongoing replication.
There is an SAP docuemntation of EBP transports which explains in detail the replication. Hope this information helps.
Please assign points for usefull answers !!
Sundeep

Business Role changes not being provisioned

Guys (and girls),
We're having the issue that whenever we change something to a business role in IdM 7.1 SP5, like adding or removing a technical role (SAP role) the change isn't provisioned to the system authomatically resulting in users not being updated.
The workarround now is to change a business role and then remove it from a user and add it to that user again. Works ok when you're dealing with only a few users but I'm not looking forward to the day our basic role needs updating.
Same thing goes for changing users telephone number or SNC name or the likes.
I'm not sure if the two issues are related but am I missing an assignment of a task somewhere?
Cheers,
Jonathan

Jonathan,
I think so, but a pretty simple one to fix.
I would do one of two things:
1. Put a MODIFY task on MXREF_MX_ROLE or whatever attribute you're holding roles in. Have this task do a role reconcilation.
2. As a part of the workflow, have a role reconciliation execute.
On the whole, I prefer the second option. Don't like adding baggage onto the MXREF attributes. Just keeps things running more efficiently.
By role reconciliation, I mean executing the functions/tasks needed to reassert the roles on the user. I think there's a built in scripting function to do this or you can automate the add/remove functionality you described in your message, holding the role MSKEYs in a temporary attribute.
Matt

Business Roles - Risk analysis

Hi All,
We are on GRC SP13.
We are using business roles for provisioning to end users.
When role owner is performing risk analysis for business roles, results are proper according to defined ruleset only if "SYSTEM" field is empty.
If system is selected, then results shows that "NO VIOLATIONS".
Is this the standard behaviour for risk analysis of business roles or Am i missing anything?
Looking for your advise on this.
Regards,
Sai.

Hi Jaya,
Yes I remember this is possible. You can setup a customize attribute in GRC privileges. And put the business role name into this attribute.
Try this URL, but perhaps your GRC consultant should read it instead of you.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d0e2c628-2690-2e10-0d82-dbf1931db2cd?QuickLink=index&overridelayout=true&51565377381172
After creating the attribute, you need to revise the GRC framework to include this attribute (business role name) in your request.
I don't have a working IDM system (with GRC integration) with me. I could not provide you more details.
Cheers,
Chenyang Xiong

IDM GRC Business Role managment

Hi experts,
We integrated SAP IDM with GRC,
Now our requirement is creating a business in IDM/GRC, request for business role is raised for IDM and approved by role owner in GRC after risk analysis.
But SAP said business roles and portal groups are not supported between the systems.
Kindly suggest how to accomplish this.
Regards,
Jaya

Hi Jaya,
Yes I remember this is possible. You can setup a customize attribute in GRC privileges. And put the business role name into this attribute.
Try this URL, but perhaps your GRC consultant should read it instead of you.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d0e2c628-2690-2e10-0d82-dbf1931db2cd?QuickLink=index&overridelayout=true&51565377381172
After creating the attribute, you need to revise the GRC framework to include this attribute (business role name) in your request.
I don't have a working IDM system (with GRC integration) with me. I could not provide you more details.
Cheers,
Chenyang Xiong

Dynamic calculation of privileges into business role

hi,
I have a requirement to create business roles containing a dynamic list of privileges. In addition, a costcenter attributes allows to determine the right privileges, within a business role, to assign.
I thought to use dynamic groups so that each time I assign a business role, a calculation of privileges based on costcenter is achieved.
for example:
BR1;FR10;Z_technical_privileges
BR1;FR30;Z_technical_privileges2
This list is often updated that's why I need it to be dynamic.
In the filter tab of the dyn group, I set a request to retrieve the mskeys of privileges (here is mskey of PRIV:ROLE:<sys>:Z_technical privileges & PRIV:ROLE:<sys>:Z_technical_privileges2)
Then I attach the dyn groups to the role (BR1) by setting up the autoassign field in the membership tab of the role.
When I assign the BR to a user, no privilege is provisioned (user already have an account in that system).
Am I forgetting something or doing something wrong?
how can I include the "check" on costcenter attributes?
thanks
Guillaume

Hello Guillaume,
dynamic roles find you the pool of people, that can be used in a business roles. If you attach a dynamic role to a BR, those users will become members of the BR.
You are trying the same with privileges and that's why nothing happens. Because privileges can't become members of the BR.
Are the different lists of privileges, that need to be assigned to users via the costcenter-attribute really changing so much?
You could use the dynamic groups to look for the members of a costcenter and assign those to the BR specific for that costcenter with the privileges added to the BR. That means one BR per costcenter and the privileges need to be changed manually or maybe via a job.
Hmm... where do the new privileges come from? How would you find them dynamically anyway? If you have a SQL statement for that, it should be possible to create a job, that adds the new privileges to the BR and delete old ones.
I don't see a fast and easy way to do this, but I haven't come across a request like this yet, so maybe there is one and I just don't know it (yet ^^).
Regards,
Steffi.

Mass recertification of business roles

Hi community,
I was wondering if there is a possibility to perform a mass recertification of business roles in GRC frontend. Via Role Maintenance, one can re-certify each role manually, but if you have 10.000 roles, this is obviously not a solution.
I did not find any suitable way via Mass Update, or I kind of overseen the attribute. Do you know any way to perform a mass role recertification in NWBC?
Thanks in advance.
Kind regards,
EM

Hi Eric,
I guess there is no mass certification.Raise a message to SAP for confrmation and share the update.
It would be helpful..
Thanks,
Mamoon

Report alle Business Roles assigned to Position

Hello,
I'm looking for a report wich brings a coomplete Objectdescription of an incorporate position in a organizational Model. Very important is the information which business role (we use CRM 2007) is assigned to the position.
I checked already report rhstru00 but I don't know which structure parameters I have to take to get out the required information.
There must be a way to get this information.
Thanks a lot in advance!
Best Regards
Stephan Jung

Step1
U should know the Personnel number of the person u want to assign role.
Step2
PA20 to do Org assignment
Info type = get the position number
Step3
Go to PO13 for Position number
You assign the position number to Role (basically you create a relationship b/w Position number and Role here)
Define relationship B 007 Relationship type (Always select this Relationship type)
Step4
Go to SU01; create a user ID for THAT Personnel number ( If the user don't have one)
Step5
Go to PA30 you define relationship between Personnel # and User ID
Create Info Type 105, Subtype 0001
In ID/Number = User ID and save
For personnel number
Step6
Run PFUD
To update user master record i.e. to enter the role that is assigned to that position in org level. Put the Role name and select Reconcile User Master Data and execute.
Or
In SE38 Run report RHPROF0

Cloud Service roles update issues

Hi Team,
we deployed a cloud service in EMEA windows azure (North Ireland).
There are worker roles and web roles in the cloud service , it's strange that when we update the web role the worker roles are rebooted at the same time.
we thought that the worker role update should not affect other roles , please advice,
thanks in advance.

Thanks Nagamalar for
the reply,
add some comments here.
These roles, are they hosted from Azure Management portal or Visual Studio?
[comment] The roles are all hosted from Azure Management portal.
What is the update you are performing, is it a Configuration file or a Package file?
[comment] We are performing to update package.
Or when you apply the updates do you choose all instances or a particular instance for the update? (In case
of an instance created in Azure Management Portal)
[comment]We are choosing a particular role to update. we have both web role and worker role in a cloud service. but we just update the web role at that moment.
one more question:
when we update a specific role, the step are the following:
1. download the configuration file
2. choose the specific roles to update and upload package and the configuration file
3. check the two options under roles
4. click OK button to update the cloud service.
in this case, will the configuration files will be treated as a new one or old one.
Thanks in advance.

Mass Reprovisioning Business Roles

Hello,
I have a situation where we are updating 100+ existing business roles that are currently assigned to user for our next release of SAP. I am wondering, is there a way to update the business role via import template (add / remove roles) and then push the changes out to users on a mass level?
We use the role methodology “provisioning” stage to push these changes under normal circumstance but with 100+ roles that would be quite cumbersome.
I also know there is an option under Role Update > Authorization Data Sync, but that doesn’t appear to update the user assignment. Only authorization under the role.
Any suggestion would be appreciated!

Business Roles concept and usability in GRC AC10 - Governance, Risk and Compliance - SCN Wiki
the link above says that "update assignment" button will do the update and will be enabled when the business role has been provisioned at least once.
I guess this is what you have already tried, but i can see your dilemma when you may have many business roles. I wish there was an option under the mass update functionality (unless I have not found it).
maybe it's time to go to #ideaplace.

Portal & business Role updation

Similar Messages

Maybe you are looking for