Reg FPN Role assignment in consumer portal

Hi Team
We are trying to implement FPN between two portals both are EP7 SP20
i followed the basic steps like
1 establishing the trust between portals
2 regestration of producer portal in consumer portal
I am able to see the roles created in producer portal in consumer portal with the help of User administration--Identity management tool
the probelm we are facing is when i assign the role in consumer portal to a user it is not getting assigned but it is getting assigned in the producer portal
pls let what i need to do inorder for the producer role to be assigned to consumer portal user
thanks in advance

Hi,
already saw this several times. Unfortuantely, it never was a FPN error. It always was human error:
Confused by the Consumer / Producer concept the Admin created the role assignment in the producer and not in the consumer.
Just check that you are really using the consumer.
If so, consider opening up an OSS message.
br,
Tobias

Similar Messages

Cannot view remote roles while in consumer portal

I have set up federated portal and tested the connection.
I cannot view remote roles, I get the following error in the default trace
SOAP Fault Exception [Actor [prmhpu46.ce.corp.com] com.sapportals.portal.prt.service.soap.exception.SoapFaultHandler] : The U
ser Authentification is not correct to access to the Portal Service com.sap.portal.prt.soap.Bridge or the service was not fou
nd.

#2#PRODUCER_BIK6R8VOZ0#com.sap.security.core.persistence.remote.CommunicationException: SOAP Fault Error (n.a) : The User
Authentification is not correct to access to the Portal Service com.sap.portal.prt.soap.Bridge or the service was not found.
        at com.sap.portal.ivs.global.roles.RemoteProducerAccessImpl.sendToRemote(RemoteProducerAccessImpl.java:438)
        at com.sap.portal.ivs.global.roles.RemoteProducerAccessImpl.checkConnectivity(RemoteProducerAccessImpl.java:210)
        at com.sap.security.core.jmx.impl.CompanyPrincipalFactory.evaluateDatasourcesToSearchFor(CompanyPrincipalFactory.java
:648)
        at com.sap.security.core.jmx.impl.CompanyPrincipalFactory.simplePrincipalSearchByDatasources(CompanyPrincipalFactory.
java:3041)
        at com.sap.security.core.jmx.impl.JmxSearchHelper.getSimpleEntitySearchResult(JmxSearchHelper.java:72)
        at com.sap.security.core.jmx.impl.JmxSearchHelper.calculateSimpleEntityTable(JmxSearchHelper.java:1025)
        at com.sap.security.core.jmx.impl.JmxServer.calculateSimpleEntityTableByDatasources(JmxServer.java:926)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:324)

Federation, remote role assignment based on ABAP roles on producer

Hi all,
We have implemented the federated portal solution for our ESS users. We use the ABAP stack of the producer portal as user store for consumer and have no problems in assigning portal roles on our consumer based on ABAP roles in the backend (displayed as groups in the portal).
Now we want to add some extra functionality (eg SRM and eRec) and we encounter some problems. These systems all have their own ABAP stack as user store. We have maintained the functional authorization model in the ABAP roles for instance in SRM. So an example:
System I: ABAP + JAVA --> ECC 6.0
Here we have the standard R/3 functionality and the producer portal (A) installed. Roles created on producer portal and assigned based on ABAP roles.
System II: JAVA --> NW 7.0 Portal
Our consumer portal (B) where we use roles created on the producer portal (A) on System I.
System III: ABAP + JAVA --> SRM
Our SRM system with SRM producer portal (C). In the ABAP stack of this sytem the functional SRM roles have been assigned to the users. We have created functional SRM Portal roles in order to use remote role assignment on consumer portal (B).
+PROBLEM+
We want to remotely assign portal roles created on the SRM Producer (C) to users on the consumer portal (B), based on the ABAP role assignment in the backend of system III. How can we achieve this in a fast and efficient way?
Looking forward to your ideas. Anything helpfull will be gladly awarded with SDN points.
Best regards,
Jan Laros

Jan,
Interesting question. Let me share my experience and hope that's of some use to you.
We started off federating corporate NetWeaver Portal (lets say B, parallel to your convention) as consumers to BI Portals (Lets say A).
- B's UME points to Active Directory
- A's UME points to BI ABAP user store
- User ids are identical in both systems
We ran into the problem of dual administration ((de)assigning portal role on both portals instead of just one) for a long time. The issue was because of different reasons at different times as we patched B's and A's. At one point we were on SP15 on both portals and we were told by SAP that RRA can be done on B for remote roles and the assignment propagates to A automatically if the following configuration is set up on both A and B.
- A's permissions are relaxed allowing "Everyone" group checked for "End User" access as per ([http://help.sap.com/saphelp_nw04s/helpdata/en/43/2236fc0b413fe1e10000000a11466f/content.htm|http://help.sap.com/saphelp_nw04s/helpdata/en/43/2236fc0b413fe1e10000000a11466f/content.htm]
However, we chose not to do the permission relaxation as enabling "Everyone" group with "End User" access can allow anyone to launch an iView (if the URL is known somehow) and the user would be able to see the layout of the iView, which can include text, etc. The user won't be able to access any data though, however, there is certain compromise on security which we decided that its not okay. So, we digressed in SAP's suggested practice because of security reasons.
Today we, manage security on B using Active Directory groups and on A using Java groups (ABAP roles).
In your case, I suggest investigating the option of relaxing the security on producer portal like in the above link. If you think its okay, all you have to do is, provision users on B by assigning remote roles from C and A.
Either my story is applicable or I must have got you totally wrong,
Kiran

How to link directly to a remotely assigned role in consumer Portal?

Hi all,
For our SRM implementation in the SAP NetWeaver Portal, we need to change the link in the emails. For example, if a user needs to approve a shopping cart, he receives an email with a link that sends him directly to the work item in the enterprise buyer.
So , we have created an iView for the Inbox of SRM. We have agreed with the customer that we change the link in the email that is being sent to a direct link to the Inbox in the Portal.
So we want the user to click on the link in the mail and to get directed to the Inbox iView in the Portal.
We use remote role assignment, so the Inbox iView is located on a producer portal. Users however, only have access to the consumer portal, where they are assigned the remote role.
My question is: How can we make a link that directs the user direclty to the remote role on the consumer Portal?
I have tried remote deltalinking, but that does not seem to work very well combined with remote role assignment. Any tip is highly appreciated and points will be awarded.
Best regards,
Jan Laros

Hi,
u need to do remote role assignment
follow this videos from elearning in sdn
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/a015fd17-c26a-2b10-e6b1-aeecb3148fa9
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/402797a4-c16a-2b10-1490-e366779500cc
Regards,
Satya.

FPN - error trying to lookup object - remote role assignment not working

Hello everyone,
We have implemented a Federated Portal Network connection in our landscape between our portals.
We use only remote role assignment functionality.
Everything was working fine, but since 2 days we encounter the following error in the Default trace.
Error trying to lookup object: alias: <role name>
It is possible to open the producer portal in the Portal Content Administration and also searching for the Producer portal roles is possible in User administration. But when we assign the remote role the tab is not displayed in the portal only the above mentioned error is shown in the default trace. Our portals run SP 12 and BI Java SP14.
Is there a solution or workaround for this issue ?
Martin

Hi,
I have the same issue as you, I cannot see role tabs in Consumer portal and I get the same error in the defaulttrace as you.
What did you do to resolve this issue?
Many thanks
Gordon

Navigation Tag Library in Consumer Portal of Federated Portal Network

In a FPN scenario, is it possible to use the Navigation Tag Library in the consumer portal for the top level navigation? I have developed a custom top level navigation based on the navigation tag library, but when navigating to the role of the producer and back again I can no longer view the roles in the consumer portal.

Hi,
I know this was posted a long time ago, but I'm currently experiencing a similar issue in the TLN between a federated CE and EP portal. Did you manage to resolve your problem? In my case it looks like when you access the CE content from EP it cannot find its way back to EP when clicking on another link on the EP side. Looking at the logs it seems as if it's looking for the content on the CE system even though it's obviously not there.
Cheers,
Dion

SAP CRM 2007 Business role assignment

Hi all,
We are using CRM 2007. and we are trying to assign Business roles to users using the PFCG ROLE ID attribute.
1- We create a PFCG role : "pfcgrole1"
2- We create a Business Role "Businessrole1" and put PFCG Role id = "pfcgrole1"
3- assign the user to the PFCG role "pfcgrole1"
We have two cases :
CASE 1:The user is assigned to a position in Org management but the position does not have any Business roles assigned.
RESULT : The user logs in to CRM, the user gets error message "Logon is not possible because you have not been assigned a business role"
CASE 2:The user is not assigned to any position in Org management.
RESULT : The user logs in to CRM, everything works fine
my interpretation : org management has precedence over business role assignment using PFCG roles and blocks Business role assignment even if the position has no Business roles assigned
Anyone has any idea how to assign business roles using PFCG ROle ID even if the user is assigned to a position without any business roles
Thanks in advance.

Please review these old threads first:
Re: Reg: Business Role
Assignment pfcg-role to user and assignment pfcg-role to business role
There is a lot of technical background on how business role to PFCG role assignment works.
Thank you,
Stephen
CRM Forum Moderator

How do assign the user of Consumer Portal to the role of Product Portal?

Hello All:
Use FPN, now I want to assignment the role of Consumber Product Portal the user of Consumer Portal to the user of Consumer Portal(RRA) .But because There are too many user that needed be configured.It is arduous work.
So Pls help me and tell me how to import the role of Product portal to the user of Consumter Portal,
Thanks In addvance.
jideliang

Thank all:
Because I want assign the Remote Role of Produce to user of Consumer with FPN.Use:
[Role]
rid=Role1
rdesc=Role description
user=MarcPeters;JackSmith;Alan_Fox;
group=HappyBuyersOf2003;HappyBuyersOf2002
Can not import.
I have find the document "How to Automate Content Creation via XML Content and Actions (NW7[1].0).pdf", it help me to use XML to import the role,the following format:
<Action id="com.sap.portal.roleassignment">
<Roles>
<Role name="pcd:portal_content/myFolder/myRole" producer.alias = "myProducer">
<Principal type="user" id="test"/>
But when I import the XML file.There is a error.
Have someone used it ?
jideliang
</Role>
</Roles>
</Action>
How

List of Users and Roles Assigned in Portal (producer & consumer)

Hi
We are running federated portal EP 7.0 EHP1 SPS07, we need to pull the list of users and their roles assigned from tables or thru report in our federated portal, so that we can have a consolidated list of users and their roles in both producer and consumer portal
Thanks
Senthil

Hi Senthil,
Use report RSUSR002 to get list of roles for the users.
Regards,
Marasa.

Another FPN Thread: Remote role assignment not working

Hi all,
We have successfully implemented FPN for use in our ESS and BW environment and we are experiencing very little problems with it. We now want to start implementing it for our eRecruitment and SRM systems (as producers). For some reason we are not able to use the Remote Role Assignement functionality.
We have set up trust for the systems and use SSO.
Connection test for the producer is successfull.
We can see the Producer content in the pcd on the consumer.
Server times are the same.
As far as I know I have correctly set permissions on producer and consumer.
Possible cause: We are in the process of upgrading our consumer Portal to NW 7.0 SPS15 and have encountered some problems. The system is partially upgraded, so some components are SP15 and some others are still SP13. This is currently under investigation by SAP. Can this be an issue as our producer portals all are still on SP13?
I hope to hear from you soon. Please ask if you need any screenshots. Thanks in advance.
Best regards,
Jan Laros

Hi Jan,
if remote role assignment not works, you can also use remote delta links. I only work with remote delta links because i have more options and a better performance.
If your connection works you can go to Content Administration ->Portal Content-> NetWeaver-Content-Producer. Hier you can see your remote system. Now you can copy the role and add it to your portal-content.
If you can not see the content make sure that you have the same user on both sides also check the premissions on the portal-content of your remote system. To test the connection it is easier to add Everyone group to the content of your remote system.
regards,
Sharam

FPN - Saving BI Links (KM Bookmarks) to the Consumer Portal Favorites

Hi, I'm posting this message again in hopes that either a mentor, SAP person, or Portal Expert can help. I have received several emails from people looking to do the same thing I am. The problem seems like a major integration gap between Portals and BI.
We use a Federated Portal Network where the Enterprise Portal (EP) is the Consumer Portal and the BI
Portal (BP) is the Producer Portal. BI Report Users access BI Reports from the Enterprise Portal through Remote Role Assignment.
BI Report "Save As" functionality allows you to save a "KM Bookmark" to the BI Portal Favorites. I am specifically looking to save a "KM Bookmark" to the Enterprise Portal(Consumer) Favorites and NOT the BI Portal(Producer). This only makes sense since our users only have access to the Enterprise Portal.
Our users are accessing their BI Reports from the Enterprise Portal and the users would like to save a link (KM Bookmark) to their Enterprise Portal Favorites. Currently, it looks like the "Save As" Functionality for saving "KM Bookmarks" is only allowing (Pointing) us to save the KM bookmarks to our BI Portal.
1. In an FPN Environment can we save a "KM Bookmark" Link to a BI Report into the Enterprise (Consumer) Portal Favorites?
2. If we are in a FPN Environment and users cannot save KM Bookmarks to Enterprise Portal Favorites and can only put "KM Bookmarks" in the BI Portal then how are users to access their links from the Enterprise Portal Environment?
3. Just a note. I think these saved links are called KM Bookmarks. You can see this from the BI Report "Save As" dialog. If you do a search through SAP Documentatiion you do not see a single reference to "KM Bookmark".
4. I have found OSS Note1149597, but I do not believe this addresses this exact issue
If anyone can provide some valuable insight into this Portal and BI Integration it would be greatly appreciated!
Thank You,
Thanks for any help you can provide.

Has anyone seen any new information on this? The described behavior makes the BI query "save" function completely useless in the context of an FPN consumer portal.
Note [1149597|https://service.sap.com/sap/support/notes/1149597] is very little help as near as I can tell. We tested the "fix" in a DEV environment, and while it technically "resolves" the problem with where the favorites get saved, we end up with all of our BI content actually being "published" to the consumer by the BEx tools. This sort of defeats the purpose of implementing an FPN in the first place, even if the requests are redirected back to the producer by the recommended BEx iView mods.
We have implemented a work-around by creating a RDL in our consumer portal to the producer portal's standard "Portal Favorites" iView. However, we're not happy with this solution as we end up with multiple "favorites" areas in our central consumer portal (one for remote BI content and another for "local" favorites). We also don't want to maintain the favorties that get saved to the producer portal.

Producer content is not visible in Consumer portal in FPN

Hi All,
we have configured FPN and the connection is successful, but we are not able to see the Producer content in Consumer portal.
and we are not able to search the producer roles from Identity Management of Consumer also.
We did,
1. we configured trust between two portals.
2. Registered Producer.
3. Remote_role with actions aslo added in Producer.
Thank you.

Check whether you have proper permissions on the pcd objects (roles/pages/iviews) in producer portal.
Also check the producer roles have entry point 'Yes'.
Also you should logon to the producer with the same role atleast once as you are assigning the producer role in conusmer portal(RRA). This is the limitation in FPN.
Raghu

Weird problem with role assignment in Portal

Hi,
In our newly installed Portal for eRecruitment Production System we encounter a weird problem with assigning roles to users.
When I open User Administration and search for roles, it displays the Portal roles perfectly.
However, when I search for a user in User Administration and click on it when found, I am unable to find any roles to assign! So I am unable to find any roles, when I want to modify the assigned roles for a particular user, while the roles do exist and can be found on its own. How is this possible? Am I missing something here?
We have installed SPS 15 and use ABAP as user store. We have used reverse proxy and web dispatchers in this case.
Thanks in advance and best regards,
Jan Laros

Found some entries in the default trace from this morning:
#1.#005056A15F78006A000004F400006D310004520B11DB3CE8#1216107404407#com.sap.security.core.jmx.impl.CompanyPrincipalFactory#sap.com/tc~wd~dispwda#com.sap.security.core.jmx.impl.CompanyPrincipalFactory.static Set evaluateDatasourcesToSearchFor(String[] requestDatasourceIds,     String privateType, Locale locale)#JALAROS#58762##nun.efteling.nl_POP_9750151#JALAROS#581700b0524011ddc029005056a15f78#SAPEngine_Application_Thread[impl:3]_36##0#0#Error##Java###Error while connecting to remote producer {0}
[EXCEPTION]
{1}#2#PRODUCER_0KTHQ3YTJV#com.sap.security.core.persistence.remote.CommunicationException: Cannot display remote roles of selected producer. The producer has removed your consumer instance from their portal.
        at com.sap.portal.ivs.global.roles.RemoteProducerAccessImpl.sendToRemote(RemoteProducerAccessImpl.java:497)
        at com.sap.portal.ivs.global.roles.RemoteProducerAccessImpl.checkConnectivity(RemoteProducerAccessImpl.java:220)
        at com.sap.security.core.jmx.impl.CompanyPrincipalFactory.evaluateDatasourcesToSearchFor(CompanyPrincipalFactory.java:656)
        at com.sap.security.core.jmx.impl.CompanyPrincipalFactory.simplePrincipalSearchByDatasources(CompanyPrincipalFactory.java:3172)
        at com.sap.security.core.jmx.impl.JmxSearchHelper.getSimpleEntitySearchResult(JmxSearchHelper.java:74)
        at com.sap.security.core.jmx.impl.JmxSearchHelper.calculateSimpleEntityTable(JmxSearchHelper.java:1182)
        at com.sap.security.core.jmx.impl.JmxServer.calculateSimpleEntityTableByDatasources(JmxServer.java:1061)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:85)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:58)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:60)
        at java.lang.reflect.Method.invoke(Method.java:391)
        at com.sap.pj.jmx.introspect.DefaultMBeanInvoker.invoke(DefaultMBeanInvoker.java:58)
        at javax.management.StandardMBean.invoke(StandardMBean.java:286)
        at com.sap.pj.jmx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:944)
        at com.sap.pj.jmx.server.interceptor.MBeanServerWrapperInterceptor.invoke(MBeanServerWrapperInterceptor.java:288)
        at com.sap.engine.services.jmx.CompletionInterceptor.invoke(CompletionInterceptor.java:409)
        at com.sap.pj.jmx.server.interceptor.BasicMBeanServerInterceptor.invoke(BasicMBeanServerInterceptor.java:277)
        at com.sap.jmx.provider.ProviderInterceptor.invoke(ProviderInterceptor.java:258)
        at com.sap.engine.services.jmx.RedirectInterceptor.invoke(RedirectInterceptor.java:340)
        at com.sap.pj.jmx.server.interceptor.MBeanServerInterceptorChain.invoke(MBeanServerInterceptorChain.java:330)
        at com.sap.engine.services.jmx.MBeanServerSecurityWrapper.invoke(MBeanServerSecurityWrapper.java:287)
        at com.sap.engine.services.jmx.ClusterInterceptor.invoke(ClusterInterceptor.java:776)
        at com.sap.pj.jmx.server.interceptor.MBeanServerInterceptorChain.invoke(MBeanServerInterceptorChain.java:330)
        at com.sap.security.core.jmx._gen.IJmxServer$Impl.calculateSimpleEntityTableByDatasources(IJmxServer.java:717)
        at com.sap.security.core.wd.jmxmodel.JmxModelCompInterface.calculateSimpleEntityTable(JmxModelCompInterface.java:396)
        at com.sap.security.core.wd.jmxmodel.wdp.InternalJmxModelCompInterface.calculateSimpleEntityTable(InternalJmxModelCompInterface.java:443)
        at com.sap.security.core.wd.jmxmodel.wdp.InternalJmxModelCompInterface$External.calculateSimpleEntityTable(InternalJmxModelCompInterface.java:746)
        at com.sap.security.core.wd.umeuifactory.UmeUiFactoryCompInterface.getSimpleEntityTable(UmeUiFactoryCompInterface.java:471)
        at com.sap.security.core.wd.umeuifactory.wdp.InternalUmeUiFactoryCompInterface.getSimpleEntityTable(InternalUmeUiFactoryCompInterface.java:517)
        at com.sap.security.core.wd.umeuifactory.wdp.InternalUmeUiFactoryCompInterface$External.getSimpleEntityTable(InternalUmeUiFactoryCompInterface.java:894)
        at com.sap.security.core.wd.relaterole.RelateRoleComp.searchNewRoles(RelateRoleComp.java:259)
        at com.sap.security.core.wd.relaterole.wdp.InternalRelateRoleComp.searchNewRoles(InternalRelateRoleComp.java:282)
        at com.sap.security.core.wd.relaterole.AssignParentRolesView.onActionSearchNewRoles(AssignParentRolesView.java:215)
        at com.sap.security.core.wd.relaterole.wdp.InternalAssignParentRolesView.wdInvokeEventHandler(InternalAssignParentRolesView.java:261)
        at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.invokeEventHandler(DelegatingView.java:87)
        at com.sap.tc.webdynpro.progmodel.controller.Action.fire(Action.java:67)
        at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doHandleActionEvent(WindowPhaseModel.java:420)
        at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:132)
        at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:335)
        at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:143)
        at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:313)
        at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingPortal(ClientSession.java:733)
        at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:668)
        at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:250)
        at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)
        at com.sap.tc.webdynpro.clientserver.session.core.ApplicationHandle.doProcessing(ApplicationHandle.java:73)
        at com.sap.tc.webdynpro.portal.pb.impl.AbstractApplicationProxy.sendDataAndProcessActionInternal(AbstractApplicationProxy.java:860)
        at com.sap.tc.webdynpro.portal.pb.impl.localwd.LocalApplicationProxy.sendDataAndProcessAction(LocalApplicationProxy.java:77)
        at com.sap.portal.pb.PageBuilder.updateApplications(PageBuilder.java:1257)
        at com.sap.portal.pb.PageBuilder.SendDataAndProcessAction(PageBuilder.java:325)
        at com.sap.portal.pb.PageBuilder$1.doPhase(PageBuilder.java:826)
        at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processPhaseListener(WindowPhaseModel.java:755)
        at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doPortalDispatch(WindowPhaseModel.java:717)
        at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:136)
        at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:335)
        at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:143)
        at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:313)
        at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:713)
        at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:666)
        at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:250)
        at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)
        at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
        at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doPost(DispatcherServlet.java:53)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:387)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:365)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:944)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:266)
        at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
        at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
        at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
        at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
        at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
        at java.security.AccessController.doPrivileged(AccessController.java:180)
        at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
        at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)
#1.#005056A15F780060000004FD00006D310004520C6A35F87C#1216113181849#com.sap.engine.services.security.roles.SecurityRoleReference##com.sap.engine.services.security.roles.SecurityRoleReference#J2EE_GUEST#0####399cb180524e11dd9849005056a15f78#SAPEngine_Application_Thread[impl:3]_37##0#0#Error#1#/System/Security/Audit/J2EE#Java###{0}: Authorization check for caller assignment to J2EE security role [{1} : {2}] referencing J2EE security role [{3} : {4}].#5#ACCESS.ERROR#service.naming#jndi_all_operations#SAP-J2EE-Engine#administrators#
#1.#005056A15F78005C00000C0500006D310004520C6A394185#1216113181992#com.sap.engine.services.jmx.connector.p4.P4ConnectorServerImpl##com.sap.engine.services.jmx.connector.p4.P4ConnectorServerImpl#J2EE_GUEST#0####39aa6d20524e11ddaee2005056a15f78#SAPEngine_Application_Thread[impl:3]_29##0#0#Error#1#/System/Server#Java###Runtime exception occurred while processing external JMX request [ JMX request (java) v1.0 len: 150 | src: 2 target-node: 9750150 req: getAttribute params-number: 2 params-bytes: 0 | ]
[EXCEPTION]
{0}#1#com.sap.engine.services.jmx.exception.JmxSecurityException: Caller J2EE_GUEST not authorized, only role administrators is allowed to access JMX
        at com.sap.engine.services.jmx.EngineAuthorization.checkMBeanPermission(EngineAuthorization.java:88)
        at com.sap.engine.services.jmx.auth.UmeAuthorization.checkMBeanPermission(UmeAuthorization.java:77)
        at com.sap.engine.services.jmx.JmxServerFrame.checkMBeanPermission(JmxServerFrame.java:98)
        at com.sap.engine.services.jmx.MessageClientSecurityWrapper.checkPermissions(MessageClientSecurityWrapper.java:76)
        at com.sap.engine.services.jmx.MessageClientSecurityWrapper.invokeMbs(MessageClientSecurityWrapper.java:38)
        at com.sap.engine.services.jmx.ClusterInterceptor.invokeMbs(ClusterInterceptor.java:196)
        at com.sap.engine.services.jmx.ClusterInterceptor.getAttribute(ClusterInterceptor.java:512)
        at com.sap.engine.services.jmx.MBeanServerInterceptorInvoker.invokeMbs(MBeanServerInterceptorInvoker.java:84)
        at com.sap.engine.services.jmx.connector.p4.P4ConnectorServerImpl.invokeMbs(P4ConnectorServerImpl.java:61)
        at com.sap.engine.services.jmx.connector.p4.P4ConnectorServerImplp4_Skel.dispatch(P4ConnectorServerImplp4_Skel.java:64)
        at com.sap.engine.services.rmi_p4.DispatchImpl._runInternal(DispatchImpl.java:313)
        at com.sap.engine.services.rmi_p4.DispatchImpl._run(DispatchImpl.java:199)
        at com.sap.engine.services.rmi_p4.server.P4SessionProcessor.request(P4SessionProcessor.java:136)
        at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
        at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
        at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
        at java.security.AccessController.doPrivileged(AccessController.java:180)
        at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
        at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)

BI query not properly displaying in Consumer Portal - Through FPN - RRA

Hi Everyone,
we have implemented FPN between EP 7.0 and BI 7.0 . A role with BI reports (iview created using Bex7.0 template) are working fine in BI Portal.
When its RRA to a users in EP-consumer portal, its not coming properly. I mean it shows some default header/Menu (like New Analysis Open, Save As, Information, Send etc..) in EP but not displaying the details of the report. Other URL iviews are working fine in RRA, just BI query is not coming properly. All pre-requisite for FPN is done properly and SSO configured.
Appreciate if some one can provide a solution
Thanks

Dear Guru,
I am also facing the same problem. What you had faced earlier. Can you explain the detailed solution to resolve this
problem. BI query not properly displaying in Consumer Portal - Through FPN - RRA.
If you can explain the solution that will be great.
With Thanks and Regards,
Anil Kumar.

Automating Portal Role Assignment

Hi Everyone,
At my project we are looking to automate the process of Portal Role assignment.
With our current design, a user initially logs into the ISA and ICSS Portal as an anonymous Portal user. To view all content the user will be required to register himself on the portal. Once the user registers himself, a user record is created on the backend CRM system. Now when he tries to log into the portal with his new username and password he gets a blank screen because he has no Portal Roles assigned to him.
We need need to create Portal Roles for each CRM user. The new Portal Role will be based on user type in the CRM system. Since we have several users logging in and creating new accounts, we need to automate this process of mapping a CRM user to an appropriate Portal Role and then actually creating the Portal Role on the Portal.
Has some one does this before or has an idea how to do this?
Any help will be really appreciated...
Thanks!
Muhammad Osman Yousuf

Hi Michael,
Thanks for the help so far. Do you think the following mappings would work with the solution you recommended?
On the CRM side we have CRM_ROLE_A, CRM_ROLE_B, and CRM_ROLE_C and on the Portal sider we have PORTAL_ROLE_A and PORTAL_ROLE_B.
All mappings given are possible...
CRM_ROLE_A = PORTAL_ROLE_A
CRM_ROLE_B = PORTAL_ROLE_A and PORTAL_ROLE_B
CRM_ROLE_C = PORTAL_ROLE_B
Thanks!
Muhammad Osman Yousuf

Reg FPN Role assignment in consumer portal

Similar Messages

Maybe you are looking for