Profiles Setup for XI User

I want to create a user , and user should have the following access/autherization.
1) create Software component/Technical system/business system and he can not create XI SLD and modify others Technical system/business system.
2) IR/ID and RWB access
3) At clent side all XI/IDOC/RFC Related transaction authorisation
   (IDX1,IDX2,IDX5,sm59,bd64,bd54,we21 etc. IDOC/RFC related).(user cannot to do other System/R3 traansaction).
what are  profiles I need to assign to User for above access.
Thanks,

Bala,
Since you dont want the user to configure and administer SLD dont give the roles SAP_SLD_ADMINISTRATOR, SAP_SLD_CONFIGURATOR and SAP_SLD_DEVELOPER.
Also since you dont want XI administration dont give him the role SAP_TST_XI_ADMINISTRATOR and SAP_TST_XI_CONFIGURATOR. So give to him only SAP_TST_XI_DEVELOPER. Also give him SAP_XI_DEVELOPER_ABAP and SAP_XI_DEVELOPER_J2EE.
Also whenever you are creating the roles just go to SU01 and give the username and click on edit. Then click on Roles tab and  then click on in Role text tab and press F4 and then enter. There you can see all the roles. So you check them and assign to the user.
Also if you want to see which transactions you have to assign to the user. Go to PFCG and click on transactions. Then you enter the Transaction name and press enter. Then it gives all the role names under which the transaciton is used. So you check the role and can add the role in SU01 as mentioned above.
Hope this helps...
---Satish

Similar Messages

  • Team Calendar warning - No Team setup for the user in the selection period.

    Good morning,
    I am attempting to replace the older iViews (leaverequestapprover and teamcalendar) with the newer iView (approveleaverequest) which seems to combine the two functions.
    When implementing the approveleaverequest iView, I get the following mesaage "No Team setup for the user in the selection period. Contact Administrator."
    However, looking at the older Team Calendar iView, teamcalendar, I can see the team.  Both iViews are assigned to the Team page for comparison.
    Not sure what's wrong but I'm confident I have all the configuration correct else the test team members wouldn't be appearing in the older iView.  I've read some other unanswered posts that asked the same question and rechecked all the objects people had suggested.
    What's even more puzzling, if I have one of my managers submit a leave request to their manager, the approveleaverequest iView will show the entire team with the leave request for the manager waiting for approval.
    I'm stumped and could use some guidance on how to get the team calendar to work.
    Kind Regards,
    Garrett Meredith

    Re: Manager unable to approve employee leave
    chk above thread once and chk any authorisations are missing or else assign and test once for some users
    and you need to activate wdabap business function ess_wda_2 in swf5 if ur using abap functionality HCM, ESS on Web Dynpro ABAP 2 - Human Capital Management - SAP Library

  • How to create custom profile provider for fba user

    Hello Every One
      I have one SharePoint 2010 web application and on this FBA is configured. With help of code how can I get and set custom property for a user in
     “aspnet_Profile” table in Database.
    I have also try this config setting in web.config but not able to set or get profile property.
    <anonymousIdentification enabled="true" />
    <profile defaultProvider="AspNetSqlProfileProvider">
    <providers>
    <clear />
    <!--<add name="AspNetSqlProfileProvider" type="System.Web.Profile.SqlProfileProvider" connectionStringName="fbaSQL" applicationName="/"/>-->
    <add name="Demo_ProfileProvider" connectionStringName="fbaSQL" applicationName="/" type="System.Web.Profile.SqlProfileProvider,System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
    </providers>
    <properties>
    <add name="ThemeName" type="String" allowAnonymous="true" />
    <add name="NoOfVisits" type="int" allowAnonymous="true" />
    </properties>
    </profile>
    </system.web>
    thanks
    navaratan
    Navaratan Sharma

    Solution for this problem is
    do following entry in web.config
    <anonymousIdentification enabled="true" />
    <profile enabled="true" defaultProvider="AspNetSqlProfileProvider">
    <providers>
    <clear />
    <!--<add name="AspNetSqlProfileProvider" type="System.Web.Profile.SqlProfileProvider" connectionStringName="fbaSQL" applicationName="/"/>-->
    <!--<add name="Demo_ProfileProvider" connectionStringName="fbaSQL" applicationName="/" type="System.Web.Profile.SqlProfileProvider,System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />-->
    <add name="AspNetSqlProfileProvider" connectionStringName="fbaSQL" applicationName="/" type="System.Web.Profile.SqlProfileProvider,System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
    </providers>
    <properties>
    <add name="ThemeName" type="String" allowAnonymous="true" />
    <add name="NoOfVisits" type="int" allowAnonymous="true" />
    </properties>
    </profile>
    </system.web>
    code for get and set Profile property is
    protected void OnClickbtn(object sender, EventArgs e)
    try
    ProfileBase profile = System.Web.Profile.ProfileBase.Create(HttpContext.Current.User.Identity.Name);
    profile["ThemeName"] = txtTheme.Text;
    profile["NoOfVisits"] = int.Parse( txtNoOfVisits.Text);
    profile.Save();
    catch (Exception ex)
    protected void OnClickbtnGet(object sender, EventArgs e)
    try
    ProfileInfoCollection profiles = ProfileManager.GetAllProfiles(ProfileAuthenticationOption.All);
    foreach (ProfileInfo profileInfo in profiles)
    ProfileBase profile = ProfileBase.Create(profileInfo.UserName);
    // add condition for user
    txtTheme.Text = (string)profile.GetPropertyValue("ThemeName");
    txtNoOfVisits.Text = Convert.ToString((int)profile.GetPropertyValue("NoOfVisits"));
    SPUser user = SPContext.Current.Web.CurrentUser;
    catch (Exception ex)
    thanks
    navaratan
    Navaratan Sharma

  • ALE partner profile setup for diff. IDOC extension

    Hi,
    We have three extensions of IDOC type HRMD_A06 and message type HRMD_A. In one of the extensions segment IT0002 is extended.
    In the partner profile extension is not specified. Due to this when the IDOC is generated Custom segment is not getting picked up.
    I pu the extension in the partner profile then it woks fine.
    But I do not want disturb the existing profile setup. Is there any option in WE20 where we can define two profiles with one message type, basic type and different extensions.
    Also if we define the custom message type then distribution model and the partner profile needs to be generated for the new custom message type.
    Appriciate quick response.
    Regards,
    Sonali

    Hi,
    just check the FM 'BAPI_BUPA_CENTRAL_GETDETAIL'.
    Or just search for oher FMs with BAPI_BUPA*.
    Hope this helps...
    vasanth

  • Profile issue for internet user

    Hi,
    I am new to ICH. I have an issue with the internet user of the supplier.  The issue is
    "When user connects to ICH portal, he can able see all the orders and not only the orders sent to his company". He should not  see all other orders which are not relevant to him.
    I checked the roles and profiles for this user and also relation ship with the BP. He has assigned only to his company.
    Can anyone suggest/ advice the solution how to resolve. what are the other checks to  be done to restrict this user.
    Please help me out on this issue.
    Regards
    Kishore

    Hi Kishore
    Check if supplier Business partner (Org Type) has been assigned in supplier location.
    Then assign the supplier internet user to supplier BP (Org Type). Please confirm that Supplier business partner is not assigned to any other location. He should be assigned to only his location.
    Use the std roles provided by SAP for supplier users. This set up should solve your purpose.
    Best Luck
    Pravin

  • What is icloud setup for Multiple users, multiple devices in family?

    What would be the recommended setup for iCloud to allow family members with multiple devices and multiple iTune accounts to share purchases, sync there own mail account, contacts, and reminders with multiple devices, and be able to sync calenders with all family calendars? Or better yet how can family members pick and choose what to sync with a common iCloud account?

    I'd like to know this to.
    We have 1 mac mini that serves as a media station that streams audio to Zeppelin air and photos & movies to our TV.
    My wife buys music on her iPhone. And takes pictures of the family.
    I buy apps and music on my iPad. And make movies of the family.
    I have a macbook pro ( itunes with home sharing,  iphoto home sharing ).
    She has a nice macbook (  itunes with home sharing, iphoto home sharing ).
    What we would want is that the mac mini collects all music / videos / media and streams it to all our apple devices via wifi ( not via internet ). But I with my appleID and she with her appleID.
    I wonder is Apple can make an GUInterface that I can understand to solve this.
    This iCloud seems not too suited.
    For families it would be easier if iOS5 would have 'home sharing' with upload and not transfer everything to CA first.

  • How to setup for multiple users accessing same share?

    Hi!
    Recently picked up Mac Mini Server and have some configuration questions related to sharing files & information over the internet. Whenever possible, prefer to use the built-in features & tools, not 3rd party tools.
    My setup & needs are this:
    - Have folders & sub-folders with files to share.
    - Wish to give individuals access to the shared folders, each with their own account (and access logging).
    - Shared folder and files should be visible via web to authenticated users only (so no special client or setup is needed).
    Right now, have added a Website via Server.app that points to the folder with files to share, and that works somewhat, but doesn't support individual user accounts separately?
    Thought maybe to setup VPN but that seems like massive overkill for this (and is a pain in the butt for non-technical users to setup).
    Editing httpd.conf for user support is a possibility, but seems /etc/apache2/httpd.conf only applies to the default web server (on port 80) not the one i set up in Server.app?
    Can anyone recommend the best approach, given the above needs?

    I have a related question. i created 2 websites/domains then i went to users and created 2 seperate "network" users then i went to ftp and selected each website and added only user A to site A and user B to site B. what's weird is that when i try to ftp using either of the users it seems to land on the same site. i looked at shared security for the folders and it only shows user a on site a folder and user b on site b folders. am i doing somehitng wrong or is this how it works in mountain lion server? i just want to give the domain owner ftp access so they can manage their files and only thier files. i also had to turn on open directory so that it would not create a local user but a network user. do i need to turn that off and just deal with having a bunch of local users as ftp user? i want to host multiple websites on the server and NO users remote on to server besides ftp.
    edit 1: i only have 1 IP running on the server which i don't think it has any affect on this but thought i mention it :-)
    edit 2: i just noticed one more thing that may help. i used filezilla to remote in using both users, one at a time. it seems to allow both users in but then it shows same directories. i then created a file using the one that was not supposed to have acces and it never sows up. but if i remote desktop to server i can see the new file in the correct folder. so it may have something to d o with the directory listing.

  • Some links and social network features not active in user profile service for some users in sharepoint 2013

    Hi everyone,
    I installed user profile service and synchronize. When I go to my site by administrator user every things is OK.
    But when I login by another user the my site is look like this
    Please guide me to resolve this problem.
    Thanks in advance.

    Can you please check and share mysite setting details. Check for below:
    Create a site collection at the root using the My Site Host template
    Assuming you want users’ MySites to be created at
    http://mySiteHost/personal/[John_Smith], create a Managed Path for the web app. The path should be personal, and the type should be
    Wildcard Inclusion.
    In User Profile Service Application, set My Site Host location to
    http://mySiteHost, and
    Personal Site Location to personal.
    Enable Self-Service Site Creation for the web app
    Check when the timerjob was mysite last executed. Try to manually run them
    Check ULS Log for possible error and share error details with us
    If this helped you resolve your issue, please mark it Answered

  • User Profile Synchronization for FBA Users in SharePoint 2010: Any successes?

    Ok, so I've got my user profiles importing using forms authentication and my configured authentication provider (ActiveDirectoryMembershipProvider) and profiles are importing (account name is domain\username).
    However when the user logs in they don't receive this profile. Instead a second one is created in the format i:0#.f|provider|username and is not synced to their AD account (our business requirements require that we use FBA for authentication against Active
    Directory).
    Has anyone tried or had any success in syncing FBA profiles?

    I opened a support case on this issue and talked with Microsoft support (for 5 days).
    What they told me is that you can NOT have both Windows accounts and FBA LDAP accounts both synchronize with the same Active Directory. The reason they say is that the account GUIDs are the same and the UPS will see that as a duplicate so it does not add
    the LDAP account after the same Windows account has been synchronized into the profile database.
    They tell me I have to write a script to synchronize the FBA LDAP accounts. I told them this is a product defect and I shouldn't have to write a script to do what the Profile Service is suppose to do out of the box. Microsoft needs to provide a hotfix for
    this defect.
    Andy Fitch

  • E1500 - Extremely difficult setup for experienced user

    This is about the tenth wireless router I have configured, and it was by far the most difficult. In their effort to make setup easy for newbies, the wireless setup was extremely confusing for me. For example, it asks for a name and password for the router. Nowhere was I told that this was the network name and password! And nowhere was I told what kind of authentication was being used. I still don't know. It eventually took over an hour to get working, and I still don't have bi-directional wireless communication with my printer established. Bottom line, I sure wish that Cisco provided an "experienced user" setup! 

    So the concern that you said is the configuration of the Router ( E1500 ).. So could please inform us the name of the ISP( Internet Service Provider )... Because the configuration depends on your ISP( Internet Service Provider ) setup...
    If you want to configure the router with the help of the CD......so for that you need to unistall the existing Cisco Connect Software from the computer...
    Reset the Router for 30 sec...
    and power cycle the network...  ( Unplug the router and the modem for 30 sec and then plug them back in ) 
    Make the following connectivity --------  Modem ---->  ( Internet port ) Router and then from ( port 1 of the router ) to the -----> Computer... Then install the Cisco Connect Software... It will help you in configuring the Router...Secondly where it will ask for the Router name and Router password that will be your wireless network name and the authentication as well as that will be the Router username and password to get into the Web Interface....

  • "Mfr part profile" setup for various material types

    Hello All,
    I'd like to set a default value of "Mfr part profile" field ("Purchasing" screen in 01 Std industry sequence) different for various material types. Currently I have 2 entries maintained in MaterialsManagement>Purchasing>MaterialMaster>DefineManufacturerPartProfile (one with AMPL management and one without). I'd like to get the first entry set as default for HAWA material type and the 2nd for ROH.
    Thanks in advance for your help on this!
    Jacek

    Hi Troinski,
    Its not possible in SAP, you can create Z transaction for create material wth dafult values.
    Thanks
    Bala

  • List roles/profiles/authorizations for end user

    HI All
    Can anyone please give the list roles/profiles/authorizations
    that needs to be added to our end user id so as to view
    (Only Display) all the BEx Reports.
    Points assured
    Thanks
    Vijaya

    Hi Vijaya,
    Go through this link:
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a07122ae-8216-2a10-c9a5-996717a0648b
    Thanks,
    Ajay

  • Selling comp. + setup for new user

    I was wondering if it was possible to install Leopard on my machine with additional apps and then allow the user to turn ont he computer and set up their main/admin account like a NEW machine, if that is at all possible?
    i wanted to include my Leopard 10.5 + iLife 08 (they werent preinstalled with the system)
    thanks!

    As long as you follow the license agreement of the said software and distribute that software to them discs and documentation, and delete any copies you've installed on your machine that you keep, you can follow these directions*:
    http://www.macmaps.com/selling.html
    - * Links to my pages may give me compensation.

  • How the profile id has been created for anonymous user

    hi all,
    when i print the ShoppingCurrent.current the below line is displaying
    Order[type:default; id:o1030002; state:INCOMPLETE; transient:true; profileId:1310002; ]
    in that how the profile id has been created.
    thanks in advance
    shya

    User profile is created when a request is processed by the ProfileRequestServlet in the ATG servlet pipeline and is made available as session scoped Profile object for each user. Profile object has a dataSource property which points to the underlying RepositoryItem. For anonymous user, the underlying RepositoryItem created through ProfileRequestServlet remains transient by default. Therefore you won't find the item in the repository or database with that transient repository item's id. You can change this default behavior if you want by changing the persistentAnonymousProfiles property of the ProfileRequestServlet component to true which will create a new profile in the database for each anonymous visitor.

  • Setup iPad for other user when iCloud pw is unknown.

    I'm a tech director for a school district with ~450 iPads. Often, I get students or staff who move out and leave their iPads logged into iCloud as themselves. I need to get these iPads setup for other users. How can I setup an iPad if the previous user is long gone?
    Nobody is going to give me their Apple ID password and I wouldn't expect them to. Recovery mode lets me wipe it but I still need to enter the previous user's Apple ID and pw to proceed.
    I don't use Configurator; I prefer iTunes.

    Might be some help on this link, but you may need the password.
    How to Safely Delete an iCloud Account
    http://9to5mac.com/2013/07/13/how-to-safely-delete-an-icloud-account-from-your-m ac-or-ios-device/
     Cheers, Tom

Maybe you are looking for

  • Default values set  for Tax data in material master

    Hi Can anyone tell me how to set default values for  TAx dat in sales view  while creating material master. so that it automatically take  values while creating material master. Regards Vijay Shukla

  • Strange Problem In NWDS while devloping  Adobe Offline Form

    I am facing a strange problem in NWDS while devloping Offline Adobe Form, the implementation code gets erased once the project is deployed, even the source file also gets deleted.

  • How do I uninstall (& reinstall) Firefox when WinXP won't let me?

    Using Win XP. I want to uninstall and reinstall Firefox because of an unwanted search engine app. I first uninstalled Firefox maintenance. Now XP won't let me uninstall Firefox. The control panel quickly flashes a screen but won't proceed with the un

  • ISA Catalog Views B2B

    Hello Experts, I have created three catalog views & assigned a set of BP for each view. I assigned each view to a different webshop. I want to restrict these webshops to only the BPs those were assigned to that view. But users who are not included in

  • Schema level auditing

    Hi Oracle :9i OS : Solaris I have a schema in which i have around 1000 tables. and developers frequently modify tables by adding columns etc. I want to keep a log for the whole schema which table is modified(i.e what column is added) we have a view u