Re : MSS Portal role for Non Employee to View/Edit all Employees data

Hi All,
Is there a role I can assign so that a manager who log into portal, can view all the employees and just not the directly reporting employee.
This user is outside the SAP and should be able to see and modify all employees data in the entire company under diffrent org units
Any hints on doiing this would be appreciated
I understand if I assign MSS Manager role to a manager he can just view all the employess who report to him and not all the employees.
Thanks,
Sarvan

Hi Sarvan,
it's just a question of customizing in the HCM Backend. In the portal you can use the standard MSS role coming with the Business Package (or a changed copy). But, the person in question here has to have a user in the backend and an according position in the organizational structure.
take a look at help.sap.com:
http://help.sap.com/saphelp_erp2005/helpdata/en/29/d7844205625551e10000000a1550b0/frameset.htm
see: "Object and Data Provider"
regards
Andreas

Similar Messages

Report or ways to find who removed portal roles for an user id ?

Hi Experts,
Scenario: if admin removes super admin role or any other portal role for my id. is there any possibility to see who exactly deleted the roles for my id?
Many Thanks
Sekhar

HI,
as Anja wrote, this is not possible with a default installation of the SAP Portal.
What you can do is to provide role provisioning with IIDM, GRC or ABAP user store solution instead of giving the portal admin the permission to change role <-> user attribution.
br,
Tobias

How can I create template documents for non-InDesign users to edit the text of later?

I'm looking to produce a small system for people within my company to edit and print labels as needed that comply with our internal design standards. I would like to use InDesign to produce a few templates for labels that people could then edit one or two fields later on, things like item name and ID number. I'm not averse to producing a small application in XCode that users can start up, enter their data and it saves the printer-ready label sheet to their desktop. I started out using Acrobat Pro, but I'm running into trouble embedding fonts for use in form fields, centering text, and outputting a filled-in pdf for print use, and not a form that submits info to an email or server. If InDesign is the wrong tool for the job of setting up a template like this, please feel free to suggest another route.

I would direct you to the Acrobat forums, personally. You can enable rich-text formatting of Acrobat form fields from within Acrobat Pro, and also IIRC embed fonts for use in form fields. If you can spec out what you mean by "fine detail that we'd need" then we, or someone over at the Acrobat forums, can tell you whether or not rich text in Acrobat forms will work for you. I suggest this to you because centering text for Acrobat form fields is dead easy, so I suspect you've not investigated the tools available in Acrobat after you've exported the PDF from InDesign.
Post-export PDF data merge sounds like, I dunno, variable-data printing? which doesn't sound like it would fit your case.

Role for create service and view Master Data

Hey people !
Im using CRM 4.0 and want to assign some role.
The role should be able to do all the transaction in service and masterdata.
Someone got any tip?

You can use SAP delivered Interaction Center Manager or Service Manager role.
Thanks,
Thirumala.

What are the procedures for getting Apple to remotely wipe all my data off my ipad that was stolen? I have no hope of recovering it. Please advise asap...thanks!

What are the procedures for getting Apple to wipe the data off my original ipad I bought two years ago. I had it stolen from a hotel room over the weekend and it is not password protected and no I did not download app to find it.
Any hwlp would be greting appreciated!

Apple can't do it, only you could potentially do it if you had enabled Find My iPad on it before it was stolen.
If it was stolen then you should report it to the police. As a safety precaution you should also change your iTunes account password, your email account passwords, and any passwords that you'd stored on websites/emails/notes etc.

Role Mapping For Portal Role Assignment and ABAP Role Assignment

Summary:
- Under the GRC configuration of Roles> Role Mapping we are trying to utilize the role mapping feature in GRC for associating a dependent role to a main role.
- We want to use this role mapping feature for the purposes of adding an Enterprise Portal role for every ABAP role that gets approved for the user in an ABAP component system (i.e. ECC, BW, CRM etc). We will have a 1:1 mapping of Enterprise Portal role to ABAP role defined in the role mapping section in GRC.
- We want to set up the workflow in such a way that the main role (ABAP role) is the only role that needs to be approved. The dependent role (Enterprise Portal role) should be added or not added based on the approval or denial of the main role (ABAP role). In other words if the role owner for the abap role approves the abap role, then both the abap and EP role will be provisioned by GRC and if the role owner rejects/denies the role, then neither the abap or EP role will be provisioned by GRC.
Problem Description:
Our Scenarios we tested:
Scenario 1:
Main Role: Attached to Initiator A & workflow A (routes to single approver based on role)
Dependent Role: Attached to Initiator B & workflow B (routes to auto approval or no approval)
*Problem with the Scenario 1setup above, the dependent role will always get approved & provisioned regardless of the approval or denial of the main role.
Scenario 2:
Main Role: Attached to Initiator A & workflow A (routes to single approver based on role)
Dependent Role: Attached to Initiator A & workflow A(routes to single approver (same as main approver) based on role)
*Problem with the Scenario 2 setup above, the dependent role will always also need to get approved by the same approver as main role and it opens the possibility that the approver may accidently approve the main role and deny the dependent role, which is not the ideal setup as we inherit the risk of human error.
Questions:
1. Does the dependent role need to be defined in an initiator at all since it will never directly be requested directly?
2. If the dependent role does need to be in the initiator file, please describe how to properly setup the initiator and workflow stage & path so that we can maintain the desired relationship with the main role approval dependency? (if the role owner for the main role approves the main role, then both the main role and dependent role will be provisioned by GRC and if the role owner rejects/denies the main role, then neither the main role or depedent role will be provisioned by GRC
Edited by: Rene Griffith on Feb 26, 2010 10:22 PM

I tested this set up.
1. Defined ABAP role as Manin role
2. Defined Non-ABAP role as dependednt role
3. ABAP role is set up in initiator requiring business approval.
4. Non-ABAP role is set up in initiator with no approval required.
Results Where Business Approver approves the ABAP Role
1. Only the ABAP role is displayed in approver view which is desirable.
2. ABAP role is approved and Non-ABAP role and ABAP role is provisioned.
Results Where Business Approver rejects the ABAP Role
1. Only the ABAP role is displayed in approver view which is desirable.
2. ABAP role is rejected but Non-ABAP role is provisioned which is not what we want. We want the Non-ABAP role not to provision if the ABAP role is rejected by the business approval.
Thanks again for your help.

How many portal roles are needed for multi-country ESS?

we are implementing ESS for multiple countries.
has anybody tried to use one portal role for all countries?
the new ESS business package comes with one ESS portal role that has content for all countries. I was wondering if we can use this role as-is (after making a copy of course) to present content for all countries, instead of creating one portal role for each country.
Regards,
Tiberiu

in Employee Self-Service > General Settings > Homepage for Self-Services > Resources> Define Resources
did you have to enter the PCD path to the country-specific iView?
In that path you associate any resource to a Portal Page. Just change the PCD Path for custom Pages only.
Only the services are "country-specific" (because they have assigned a MOLGA). Follow the path from my previous answer to add any country-specific app.
the standard installation does not have the PCD path populated, it has the name WebDynpro application component instead
This is common issue. Depending on how the installation/upgrade was performed, the resources table is populated or not. But if is not populated, the "URLof PCD Page" property is taken from client 000. In my last implementation, i expected this issue, but i not populate manually this property and everything works fine.
Kind regards

Can anyone help me understanding the links between Launchpad roles, PFCG roles, and portal roles!?!

Hi experts,
I am looking at the newer EhP5 and EhP6 functionality for ESS and MSS, specifically the WD ABAP portal applications. I've turned on all the business functions and services I think our team wants, however I'm confused on how to move forward in using them. For a little tech info, we are on EhP6 for the backend, but our portal is 7.02.
My first step was to assign the com.sap.pct.erp.ess.wda.Employee_Self_Service_WDA portal role to our test ESS user group in our sandbox environment. The ESS user got a new ESS tab in the portal and it's linked to the Launchpad role ESS, Instance MENU. I'm comfortable with ESS at this point, still need to learn more about customizing the menu for different employee groups without creating additional Launchpad or SAP roles.
Question 1: Correct me if I'm wrong, but is the Launchpad roll ESS, instance menu linked to the PFCG role SAP_EMPLOYEE_ESS_WDA_2?
Next, I was looking to see if there was a similar portal role for MSS, but it seems I can't find one. I implemented the MSS Addon 1.0 for ABAP and the portal and got a new MSS portal addon role, but it doesn't seem to be connected to any MSS Launchpad role.
Question 2: Is there a portal role to assign to users/groups that is linked to one of the MSS Launchpad roles? If yes, what business function or service is it a part of?
I'd like to use of the existing MSS Launchpad role to test some of the new portal functionality, but I'm not sure how to do it.
Question 3: How is a Launchpad role assigned to a SAP role in PFCG? Anyone have some documentation they can point me too?
Kind regards,
Garrett Meredith

Thank you Samuli, this was very helpful in connecting many of the pieces.
For now I have a very good understanding of how the new ESS is controlled and modified.
It appears that FPM_LAUNCHPAD_UIBB could be used to develop a similar component to call a custom launchpad role for MSS containing a customized list of WDA applications.
Is a MSS Launchpad a good way to pursue since we use a SAP enterprise portal?
I found a PAOC_MSS package containing other MSS embedded packages.
Could I use one of the embedded packages in there and by creating a Component configuration in the FPM_LAUNCHPAD_UIBB for one of the MSS WD applications?
Based on the documentation link above, PFCG roles are for NWBC HTML or Desktop versions.
Kind regards,
Garrett

Automating Portal Role Assignment

Hi Everyone,
At my project we are looking to automate the process of Portal Role assignment.
With our current design, a user initially logs into the ISA and ICSS Portal as an anonymous Portal user. To view all content the user will be required to register himself on the portal. Once the user registers himself, a user record is created on the backend CRM system. Now when he tries to log into the portal with his new username and password he gets a blank screen because he has no Portal Roles assigned to him.
We need need to create Portal Roles for each CRM user. The new Portal Role will be based on user type in the CRM system. Since we have several users logging in and creating new accounts, we need to automate this process of mapping a CRM user to an appropriate Portal Role and then actually creating the Portal Role on the Portal.
Has some one does this before or has an idea how to do this?
Any help will be really appreciated...
Thanks!
Muhammad Osman Yousuf

Hi Michael,
Thanks for the help so far. Do you think the following mappings would work with the solution you recommended?
On the CRM side we have CRM_ROLE_A, CRM_ROLE_B, and CRM_ROLE_C and on the Portal sider we have PORTAL_ROLE_A and PORTAL_ROLE_B.
All mappings given are possible...
CRM_ROLE_A = PORTAL_ROLE_A
CRM_ROLE_B = PORTAL_ROLE_A and PORTAL_ROLE_B
CRM_ROLE_C = PORTAL_ROLE_B
Thanks!
Muhammad Osman Yousuf

Portal Role Issue

Hi,
I am using two roles in my application viz Manager and Employee. When I am logged into application with Manager role the application is working properly ie All the data and the tabs are getting displayed, but when I logged in as an Employee only Employee tab is getting diaplayed and the TLN and the data is missing. Can anybody suggest me what might be the problem.
Regards,
D.NagaSurendra.

Hi Sampath,
I checked all the iviews and permissions. When I click on the Employee tab then only the data and TLN is getting displayed. But when login as Manager all the TLN and data is getting displayed when the page is loaded only. No need to click on Manager tab. I want the same for Employee aswell.
Regards,
D.NagaSurendra.

RDP using Smartcard fails with NLA for non-domain members

We have to administer Windows 2008 R2 servers which are in domains we are not members of - typically domains that support a particular application. We have DoD smartcards (CAC) and we admin from our Windows 7 desktops. If we disable NLA, we can CAC-authenticate
over RDP just fine. With NLA enabled, though, we get "The remote computer you are trying to connect to requires NLA but your Windows domain controller cannot be contacted to perform NLA".
My assumption would be that the Win7 desktops would never know where the particular ADCs are, since we're not domain members, but that they actually need to verify the DoD root cert that signed our CAC. Said root cert has been installed on our desktops and
on the servers in the domains.
What is necessary to get NLA with smart cards working for non-domain members?
Edit: With NLA enabled I *can* connect over RDP from one of the domain members to another, so this really seems specific to the non-member desktop settings and how it performs NLA

Hi,
Thank you for posting in Windows Server Forum.
If you use the credential SSP on Windows Vista or Windows 7 to log on with a smart card from a computer that is not joined to a domain, the smart card must contain the root certification of the domain controller. A public key infrastructure (PKI) secure channel
cannot be established without the root certification of the domain controller.
You can use following command for adding certificate.
certutil –addstore –enterprise NTAUTH <CertFile>
Where <CertFile> is the root certificate of the KDC certificate issuer.
More information.
Smart Card and Remote Desktop Services
http://technet.microsoft.com/en-us/library/ff404286(WS.10).aspx
Apart there is one Hotfix might resolve your case, go through beneath link once.
RDS client computer cannot connect to the RDS server by using a remote desktop connection in Windows
http://support.microsoft.com/kb/2752618
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Laptop died so now I have to use my new computer for my iPhone. Will all my data be lost if I use new computer.

My laptop died so now I will have to use my new computer for my iPhone 4. Will all my data be lost?

https://discussions.apple.com/message/10007431#10007431

Training and Event Managaement in ESS/MSS Portal for ERP2004 version

Hi SDNs,
I am working for ESS/MSS for ERP2004 system to NW2004s system.Afer importing the business packages to portal, I got only the following roles for ESS and MSS.
Employee Self-Service:
Employee Search | Working Time | Benefits and Payment | Personal Information | Career and Job | Purchasing | Work Environment | Travel and Expenses | Life and Work Events
MSS: MyStaff:
Overview | Attendance | Personnel Change Request | Recruiting | Reporting | Headcount
MyBudget:
Overview | Monitors and Reports | Equipment | Planning
According to the Worksets i got it, i couldn't find, Training and Development activity, Performance Mangement in both ESS and MSS.
How do I achieve this?
We also have a requirement of OH & S to be integrated to ESS.
Please suggest me to integrate this activities.
Your help will be appreciated.
Thanks in advance,
Sireesha.B.

Hi,
Training and Development, Performance Management are not available in the latest versions of ESS and MSS.
You may have to use the old Business Packages to incorporate this, the only difference would be that those pages would be BSPs.
Please refer to the following threads:
ESS/MSS with my SAP ERP2005
Are there Appraisal for ESS
BSPs for Performance Management - Response Appreciated.
Regards,
Sunil
PS: Reward points for helpful answers.

MSS Role for EHP5

Hi Experts,
        I'm in process of implementing ESS/MSS with EHP5. I assigned ESS portal and backend roles, however I'm not sure about MSS backend roles. Could you please advice?
Thanks
Francis.

Hi Siddharth ,
we have intalled MSS/ESS on Netweaver 7.3 backend EHP5 . In ESS we are able to see all the Iviews bit for MSS no standard iviews displying ..and the right side menu- recruitment/talent management/team etc listed .while click on that getting "the below eror"
Portal runtime error
An exception occurred while processing your request. Send the exception ID to your portal administrator.
Exception ID 05:48_09/06/12_0165_22331150
See log file for details about this exception.
Please advice is this installation of BP error or backend configuration issue. deployed components are
BP_ERP5COM    1.51
BP_ERP5ESS    1.41
BP_ERP5MSS    1.51
BPERPESSWDA   1.50
SAP_ESS       633
SAP_MSS       630
SAPPCUI_GP    633
Appreciate your advice ....
thanks
matt

Roles for ESS and MSS Enhancement Package 4 (EHp4)

Good afternoon.
I have the following doub with the role assignment for ESS .
I know that exist the following roles for ESS :
SAP_ESSUSER: Single role that comprises all non-country-specific fucntions. Only relevant for the olders ESS functionality, including all ITS component, such as PZ02(Address), PZ13(Personnel Data), PZ03(Bank Details).
SAP_ESSUSER_ERP05: Single role that comprises all non-country-specific fucntions. Relevant for the ERP2005 platform, Enhancement Package 1 and 2.
SAP_ESSUSER_ERP13: Composite role that comprises all non-country-specific functions. Relevant for the ERP2005 platform, Enhancement Package 3.
SAP_ESSUSER_ERP05_xx: Single role that comprises all non-country-specific fucntions. A separate role exist for each country version(xx = Country ID). The role corresponding composite role is SAP_ESSUSER_ERP05. Relevant for the ERP2005 platform, Enhancement Package 1 and 2.
The Question is:
I am working with Enhancement Package 4 EhP4, What is the role that I have that use????
Kind Regards.

Hi! The specific ESS Role for EHP4 is called SAP_ESSUSER_ERP_14.
Due to an error, the Role was not delivered in SAP ECC 604, but it will be available in the Support Package 05 for EHP4. You can hope to implement the SP or go for manual corrections from Note [1373177|https://service.sap.com/sap/support/notes/1373177].
1229232 and 1129412 notes are relevant for EHP3 only.
Refered to MSS you're right.
Regards!

Re : MSS Portal role for Non Employee to View/Edit all Employees data

Similar Messages

Maybe you are looking for