Read only access to J2EE related tools

Hello,
I would like to help our auditors access everything they need to check in the Java systems, but I am not ready to give them ADMIN accounts. That`s why I need some kind of read only access for them.
So I would like to ask you if there is a SAP Note about the read only access roles for J2EE/ Java AS?
I am afraid there is no such note available, so can anybody share any experience with granting read only access to the Java system? I know how to grant access to the whole NWA, but what about the rest?
Examples:
- is there a way how to grant read only access only to the UME?
- is there a role for read only access to the portal PCD?
- is there something similar for KM access?
Or has anybody ever tried to split the admin roles into smaller pieces? Is there a description/ document how to do such thing?
Thank you for your time and effort,
cheers Otto

Hi,
thanks for trying, but I can use help.sap.com and was on that page before.
Maybe if there were any examples there or better: if the whole thing would be more granular (I see no point in using roles starting with SUPER, containing ADMIN or ending with ALL). I am looking for roles for surgery or for auditing. I don`t want to give anybody these super/admin/all roles just like that.
If you can suggest how to use that page, that would be cool. Otherwise I see no use.
By the way: another question of mine about surgery: How to restrict access to download/ upload UME configuration file
I would like to know how to controla access to this specific feature, nothing else.
Thanks for the time and effort,
cheers Otto

Similar Messages

  • Administration tool read only access

    I was wondering if there is a read only access to the administration tool.
    What i am trying to do is to test the repository Build with best practices since this repository is live and done by a group of developers -
    Since i joined recently and wanted to know what resources i need to get to view and test the repository.
    I was wondering if there is a read only access to admin tool , not sure about this and also do i need oracle BI installed on my local machine to view the repository.
    If not ,is there a way where i can get to see the repository without having the priviledges to do any modification or save changes to the repositoryin online or offline mode
    Thanks Deva ...
    Edited by: UOOLK on 01-Jun-2012 02:48

    Hi,
    If you want to switch your RPD read only mode to online/Offline mode
    try to re start your bi server and then try to access it RPD (online/offline mode)
    Setting rpd in read only mode:
    users wants to access the RPD in online mode then do below setting in NQSConfig.ini but this will refrain u developers as well to do any change in online mode...
    Refer Section: READ_ONLY_MODE
    http://download.oracle.com/docs/cd/E12096_01/books/AnyInConfig/AnyInConfigNQSConfigFileRef11.html
    otherwise you can give it copy of RPD(he can access it via offline mode)
    if your using obiee11g,
    Read-Only issues on a new install of OBIEE 11g:(always opens it in Read-Only mode)
    Login to Oracle Enterprise Manager Goto -> Business Intelligence -> coreapplication
    Click - Capicity Managment Tab in Right side -> Performance -> Check Disable Disallow Online RPD Updates
    Thanks
    Deva
    Edited by: Devarasu on Jun 1, 2012 6:01 PM

  • Read only access for objects in application designer

    I want to apply read only access to all the objects in application designer. I would like to know how we can do this.
    Jayaprakash Tedla

    Jayaprakash,
    On 8.48 :
    1. Create a PERMISSION LIST
    1.1 leave empty the navigator homepage
    1.2 leave unchecked Can Start Application Server? and Allow Password to be Emailed?
    1.3 On Pages tab, leave it empty
    1.4 On PeopleTools tab, check Application Designer Access, then click on Definition Permissions, Tools Permissions Miscellaneous and Permissions, and put there the rights as well as you want. You can put Read Only on all component in one shot by clicking on the button, or one by one by choosing in the listbox for each type of components.
    1.5 leave all other tab blank
    2. Create a ROLE, and add the permission list created on step 1.
    3. Create the user, and give the role created on step 2.
    4. Open Application Designer, connect there with the new user, and enjoy on read-only access.
    Hope this help,
    Nicolas.

  • Read only access for bpel console in SOA Suite 10.1.3.5.1(weblogic)

    Hi
    For SOA Suite 10.1.3.5.1 on weblogic, Is there any way to restrict certain users to some pages in bpel console.. e.g. read only access to bpel console.
    I have found articles on web regarding this but they all are for SOA Suite 10.1.3.3 (and 3.4) on Oracle app server. Article provides a hack by using servlet filters.
    How to do a similar thing in SOA Suite 10.1.3.5.1 on weblogic ?
    Can somebody provide step by step instructions?
    Thanks

    Hi James,
    I have already seen this link and several refined versions of it but it wont work for weblogic. For example
    There is no j2ee/oc4j_soa/applications/orabpel/console directory (i looked into home directory as well but could not found orabpel/console dir).
    So question is where to put filter class and how to make changes in web.xml as this file is not present in j2ee/oc4j_soa/applications/orabpel/console/WEB-INF/
    I checked deployments in weblogic admin console and seems BPELConsole is deployed as a module under BPELPM ear.
    Any idea?
    Thanks.

  • Read Only Access to Storage Container

    Is it possible to give Read Only access to a particular storage container without adding someone to Subscription and providing them the access key without anonymous request without going through SAS route

    By default, a container and any blobs within it may be accessed only by the owner of the storage account. If you want to give anonymous users read permissions to a container and its blobs, you can set the container permissions to allow public access. Anonymous
    users can read blobs within a publicly accessible container without authenticating the request.
    This link gives full details
    https://msdn.microsoft.com/en-us/library/azure/dd179354.aspx
    Frank

  • Read Only access to UCCX server

      Hi,
    I would like to know if it was possible to create an account for Read Only access for server in UCCX 8.02.
    Saima

    Saima,
    Unfortunately no it is not, you have either Admin access or supervisor access. The admin access has full access and supervisor access allows configuration of the RM subsystem either foe own team or all teams.
    HTH,
    Chris

  • Read-Only Access to Specific SAP tables

    Is it possible to grant a user read-only access to a specific table or tables?
    For example, say I wanted to give someone SE16N capability for just EKKO/EKPO/EKBE and NO OTHER tables.  Is this possible?  How?
    Thanks.

    Hi,
    as it was mentioned the transaction SE16N checks for authorization object S_TABU_DIS. The problem in your case is that the tables EKKO, EKPO and EKBE are already assigned to the authorization group MA - MM Appl. table. But there are many more tables assigned to this group. Changing assignment of standard tables is not a good idea.
    Cheers

  • Read Only access to tablespace

    Hi,
    Oracle 10.2.0.4
    How can I grant read only access to a tablespace for a user.
    Thanks

    It is no ussual.... a tablespace is a box where one or more user store his data... sure you do not want to say user and not tablespace?
    Grant select to the objects of this tablespace...DBA_TABLES or ALL_TABLES...
    Select 'GRANT SELECT ON ' || OWNER || '.' || TABLE_NAME || ' TO <USERNAME> ' FROM DBA_TABLES WHERE TABLESPACE_NAME = <TABLESPACE>

  • View read allows read only access

    Hi friends,
        I have created maintainance view, I am getting this warning " View read allows read only access , Maintainance not possible". So to avoid this, what should i do now.
    Thank you

    Hi,
    In Delivery and maintence check if the field Data Browser/Table View Maint. has the value delivery and maint allowed
    or delivery and maint allowed with restrictions.
    Regards,
    Rajesh Kumar

  • Read-only access when saving metadata to file from Adobe Lightroom on a MAC OS to Windows shared drive

    We have a group of 5 people editing and indexing photos to a shared drive on a windows server, everyone has its own catalog and working on different folders to avoid any locking conflicts.
    The windows computers don't have any problems but the Mac's don't write the updated metadata to all files because they get the message "Photos have read-only access".
    The environment is the following:
    2x Macs workstations running:
    - Adobe Photoshop Lightroom 5.7.1
    - iMAC with MAC OS X Yosemite 10.10.2
    3x Windows Workstations:
    - Windows 7
    - Adobe Photoshop Lightroom 5.7.1
    Server:
    - Shared drive on a Windows Server 2012 Standard
    I have searched the internet, no one has this problem with this exact setup but I have tried all the solutions I found, namely:
    1. Connect to the network drive with cifs:// protocol
    2. Change the settings of the nsmb.conf for 'smb1_only' protocol
    3. Mount the drive manually by command line
    Nothing worked, any ideas?

    Did you ever find a solution to this problem?  I have the same issue and wonder if Lightroom 6 will resolve it.  I  tried AFP, SMB2, SMB3 and they all failed to save metadata randomly. When I use NFS from OS X then it works fine but it's a little slower than SMB and it's not as native as the mount via AFP or SMB, so it's harder to maintain.     My server is a FreeNAS 9.2 (FreeBSD) which is running Samba, Netatalk and native NFS.

  • How to configure Mailbox Read-Only access for Mailbox's owner on Exchange Server 2010?

    I have to configure the Exchange Server 2010's mailbox to only grant Read-Only Access on the mailbox's owners.  So they can only allowed to read their messages and cannot modify or remove them.  Are there any references or methods to do?

    Hi,alexchy8
    We can make use of 2 PowerShell commands to achieve this goal.
    Add-MailboxPermission and Add-MailboxFolderPermission.
    Execute the Add-MailboxPermission command to delegate the read permission at mailbox level.
    Execute the Add-MailboxFolderPermission command to delegate the required permissions on specific folders inside the mailbox.
    You can read the following article as reference:
    http://www.exchangedictionary.com/articles/assign-read-only-mailbox-permission-on-exchange-2010-2013-powershell
    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety,
    or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
    Best Regards.

  • XCM(Extended Configuration Management) Read Only Access for Webshop

    Hi,
    We dont hav e XCM admin access in our project.We need to have just the view(read only) access.This will help us immensly during any troubleshooting. Plus we will save a lot of time while troubleshooting if the view access is avaialable to us. In case of any issues in the XCM setting, we can easily pin point the issue and ask the ERP team to change it. In absence of it we can only speculate what could have gone wrong on the XCM side. Is there any role in XCM so that we can get just read only access.
    Regards

    Hi,
    The below note will help you.
    Note 1014383 - Read only user in the XCM and Administration area of ISA
    Regards,
    Shanto Aloor

  • How enable read only access for ACS server itself

    Hi,
    We would like to know whether its possible to create a read only access to the ACS server. Currenlty ACS server has a generic login with full admin rights.
    We need to create a login to couple of users to log into ACS to check the "Report and Activity" tab. Access to all other tabs should be disabled.
    We are using ACS4.0 verison. Please let me know whether its possible.
    Thanks
    Nachi

    Hi,alexchy8
    We can make use of 2 PowerShell commands to achieve this goal.
    Add-MailboxPermission and Add-MailboxFolderPermission.
    Execute the Add-MailboxPermission command to delegate the read permission at mailbox level.
    Execute the Add-MailboxFolderPermission command to delegate the required permissions on specific folders inside the mailbox.
    You can read the following article as reference:
    http://www.exchangedictionary.com/articles/assign-read-only-mailbox-permission-on-exchange-2010-2013-powershell
    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety,
    or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
    Best Regards.

  • How to create a user with read only access for ESB / BPEL Console

    I need to create a user with read only access to ESB Console & BPEL Console. I have created a user
    (esbreadonly) and assigned ascontrol_monitor role but user is still able to
    delete services from ESB systems (such as DefaultSystem). Is there any way to
    create a user that has strickly read only access to ESB Console & BPEL
    Console
    Thanks
    Dinesh Patel

    Check out this post.. I'm in the process of testing.
    http://chintanblog.blogspot.com/2007/12/i-saw-numerous-people-asking-about-bpel_290.html

  • How to create a read only access for database

    I am developer but willing to lear some of the dba tasks. I would like to know the steps that i need to take to creat a read only access database that is going to be used for the report development.
    I really appreciate if you tell me all the steps I need to create that. I have a full right to do this in the develpment database. thanks

    thank you for your reply but it does not tell me how i can set up a read only access acccount for the user. Do i need to create a role and assign the role to the users?

Maybe you are looking for

  • Query Help in Report

    Hi guys , I need to make a matrix report like the following Description Year(2002 Full),Year(2002 Till Date),Year(2002 Till Month),Year(2003 Full),Year(2003 Till Date),Year(2003 Till Month) Year its easy to get in the query as the following select it

  • Can someone help me with my phone? I downloaded the new version of itunes and updated my phone but now it's saying that my pin is blocking it. I dont know what to do

    here's what i did and what's now happening: -i downloaded the newest iTunes -i updated my phone -everything got installed (into my laptop and phone) -my phone restarted -it said to enter in my pin number -i did -says the pin number is blocking it or

  • "Edit Locally" for Repository having "Read only" rights

    hi,     I am on EP6.0 SP9. When I go to      Content Administrator --> KM Content --> Repository(having "Read Only" rights),  and click on "Context Menu" an option "Edit Locally" come there. But as the repository has "Read only" rights, I need to dis

  • Can't Turn On Genius

    I've updated to iTunes 9, and I didn't see the Genius Mix, So I turn Genius off, and when I turn it on again, in Step 2 Sending this information to Apple, it came with an error message, " We could not complete your iTunes Store Request A unknown erro

  • New ARD User

    Hello all, I have an iMac Flat Panel (with Mac OS X 10.4.2) and an iBook (same system). Now, I got ARD because I wanted to control (access) my desktop at home from the iBook at work. But, also, I am helping some relatives with theirs, too (all recent