Registration of Supplier Enterprise Portale Role
Hi experts
we are working on SRM 7.0 based on Enterprise Portal.
I founded SRM roles for ROS but i cannot find EP roles!
Any suggestions?
thanks
regards
andrea
solved by me
Similar Messages
-
Regarding Enterprise Portal Role issue
Hi,
The system administrator has assgined a role called "k-role" to a user. The K-role has some 3 pages inside it. When the user view the portal with his id, he can see the role called "K-role" and the pages. But when he clicks a page to access the documents with in it, it says "ACCESS DENIED". There is no restriction kept at the document level. Restriction is only at the role level.
What could the error be? How can i resolve this issue? How can the user access the document?
Regards,
DivyaHi Divya,
the portal users assigned to super admin role (usually via group Administrators) do have full permissions on every document. You HAVE to add read permissions for group Everyone in order to make the documents accessible by every portal user.
1. Open the Details dialog box for the item (for example, for the folder).
2. Choose Settings ® Permissions.
3. Enter one or more users, groups, or roles.
4. Choose Add.
5. Select one of the following permissions: Read, Write, Read/Write, Delete, Full Control
Best regards,
Martin -
Role Mapping For Portal Role Assignment and ABAP Role Assignment
Summary:
- Under the GRC configuration of Roles> Role Mapping we are trying to utilize the role mapping feature in GRC for associating a dependent role to a main role.
- We want to use this role mapping feature for the purposes of adding an Enterprise Portal role for every ABAP role that gets approved for the user in an ABAP component system (i.e. ECC, BW, CRM etc). We will have a 1:1 mapping of Enterprise Portal role to ABAP role defined in the role mapping section in GRC.
- We want to set up the workflow in such a way that the main role (ABAP role) is the only role that needs to be approved. The dependent role (Enterprise Portal role) should be added or not added based on the approval or denial of the main role (ABAP role). In other words if the role owner for the abap role approves the abap role, then both the abap and EP role will be provisioned by GRC and if the role owner rejects/denies the role, then neither the abap or EP role will be provisioned by GRC.
Problem Description:
Our Scenarios we tested:
Scenario 1:
Main Role: Attached to Initiator A & workflow A (routes to single approver based on role)
Dependent Role: Attached to Initiator B & workflow B (routes to auto approval or no approval)
*Problem with the Scenario 1setup above, the dependent role will always get approved & provisioned regardless of the approval or denial of the main role.
Scenario 2:
Main Role: Attached to Initiator A & workflow A (routes to single approver based on role)
Dependent Role: Attached to Initiator A & workflow A(routes to single approver (same as main approver) based on role)
*Problem with the Scenario 2 setup above, the dependent role will always also need to get approved by the same approver as main role and it opens the possibility that the approver may accidently approve the main role and deny the dependent role, which is not the ideal setup as we inherit the risk of human error.
Questions:
1. Does the dependent role need to be defined in an initiator at all since it will never directly be requested directly?
2. If the dependent role does need to be in the initiator file, please describe how to properly setup the initiator and workflow stage & path so that we can maintain the desired relationship with the main role approval dependency? (if the role owner for the main role approves the main role, then both the main role and dependent role will be provisioned by GRC and if the role owner rejects/denies the main role, then neither the main role or depedent role will be provisioned by GRC
Edited by: Rene Griffith on Feb 26, 2010 10:22 PMI tested this set up.
1. Defined ABAP role as Manin role
2. Defined Non-ABAP role as dependednt role
3. ABAP role is set up in initiator requiring business approval.
4. Non-ABAP role is set up in initiator with no approval required.
Results Where Business Approver approves the ABAP Role
1. Only the ABAP role is displayed in approver view which is desirable.
2. ABAP role is approved and Non-ABAP role and ABAP role is provisioned.
Results Where Business Approver rejects the ABAP Role
1. Only the ABAP role is displayed in approver view which is desirable.
2. ABAP role is rejected but Non-ABAP role is provisioned which is not what we want. We want the Non-ABAP role not to provision if the ABAP role is rejected by the business approval.
Thanks again for your help. -
Abap role in the enterprise portal?
Can anyone give me a clear picture abt the enterprise protal and abap role in that?
Hi when there is an integration between EP and R/3 and you click on the User Adinistration of the Portal you will find two types od users available there.
1. UME Database - this is nothing but the Portal Roles here you will find all the roles related to portal administration, such as eu_role, eu_corerole etc etc .
We assign portal developer roles to the user form here like Content Admin, System Admin, etc etc.
2. ABAP Role : whatever role are defined for the user in the backened will appear here ...
for instance if you implement ESS, hence the user must be able to apply for Travel so a backend r/3 travel role will be attached in SU01 for that user. This is visible on portal.
Hope this clarifies!
Cheers!
SJ. -
Is there User Group and Role Reporting in SAP Enterprise Portal?
I want to know if there is a way to pull users statistics our of SAP Enterprise Portal like you can out of the R3 backend systems.
I would like functionality similar to the SUIM transaction. I know through user administration you can access any user, even a list of all users, and you can do similar lists with roles and groups. You can then access any of these things individually and look at their assignments. However, I want to do this on a large scale. I want to know for example every group that has a user assigned to it. Evergroup that has roles assigned to it. Or groups that have no user or role assignments. We have approximately 1904 groups in our Production Portal system and I am trying to clean up the groups that have no user assignment, but I don't want to look through them one by one.Hi Chris,
There is no standard report available for this purpose. However all this information is stored in table UME_STRINGS.
You can write your own SQL queries to generate such reports. However please note that this table is not normalized, and it's a master UME table. You should use it strictly for READ ONLY purpose.
For a sample code you which i wrote some time back, you might refer:
http://forums.sdn.sap.com/thread.jspa?threadID=2088099&messageID=10859334#10859334
Thanks
Prashant -
Error Provisioning the Federated roles from CUP to enterprise portal
Hi Gurus,
Need help. I am trying to provision the roles to enterprise portal using GRC CUP. I have created the connectors and field mapping and the connection is successful. We have a enterprise portal with producer consumer relation ship. The Enterprise portal acts as consumer for the BI portal. The BI portal Roles are federated to Enterprise portal and i get an error "noSuchIdentifier" when I try to provision the federated BI Portal role on the Enterprise portal. I can successfully provision the local portal roles and UME roles on the enterprise portal. I get the error only when trying to provision the roles which are from BI portal.
Appreciate any help, in this regards.
Thanks,
PavanHi Alma,
This is one of the security issue.We had faced it sometime back.We searched some CSN's and found a solution.
Go to Service Market palce and download the latest Cryptographic Tool kit (Service Market place---->software downloads)
You will get a sca/sda something like tc/iaik./security(something like this)
Deploy this on to your instance using your SDM.
After that,Restart the Portal patching.It will go fine.
reward points if helpful................ -
SAP Enterprise Portal 7.0 Error while customizing Standard Admin roles.
Hi All,
I have a business requirement of Creating Transport role which should access only Transport Navigational Tab in Enterprise Portal 7.0.
Because we can't give Standard Administrator roles to Users.
For that, I have created a role and added Standard System admin role as role to role and i hide the Navigational tabs except Tranport Tab (by changing Properties of ''Invisible in Navigational areas of System Admin role'')
I have assigned this role to a user. and i have also given read/write permission to folders and in security zones. Export is working o.k and when i click on browse tab in import it is showing-->>
"Unexpected error. Check the log files for details."
I have checked logfiles and i didn't find any thing.
Any ideas??
Your early response would be highly appreciated.
Thanks in advance,
Khasim.Hello Khasim,
My name is Mohammed and I am talking from chicago. I am facing problem in EP 6.0 Authorization.
First of explain me what is Security Zone. why it is used
I have created one new role and added system admin role(inbuild role) into new role. Is that possible to restrict all portal content folder. I want to show only centain folder and other foldr should be invisible or not able to see.
Example
New Role
added system admin role
When user login and he should be only see his folder in portal content not others folder. So if you have solution or detail explaination please send me info to mtajamulatgmail.com or call me 7735010306
Thanks
Mohammed -
BW Workbook as an iView in the Enterprise Portal
I keeping getting a dialog box asking to select the appropriate program to open the workbook. When I select .xls it opens, and it shows the parameters I entered and not the workbook. The customer is on NW04 Stack 11.
I followed ever step on help.sap.com site as listed below.
BW workbooks are MS Excel workbooks with one or more embedded BW queries. You are able to display these workbooks in the Enterprise Portal as iViews.
Features
Workbooks are displayed in a separate MS Excel window. Opening workbooks within the Web browser window is not possible for technical reasons.
BW workbooks require the BEx Analyzer, which requires a local installation of the SAP GUI for Windows with the BW front end.
SAP recommends that you use BEx Web applications in the Enterprise Portal that run completely in the Web browser.
You can use the function Export as Excel 2000 File from the BW Web application context menu as an alternative to using a local installation of the BW front end if you require Excel functions. See Context Menu Functions and Exporting as a CSV File/Excel 2000 File.
An iView with a workbook can be generated using the Portal Content Studio or Role Upload. For more information, see Generating Content from SAP BW for the Enterprise Portal.
The iViews are of type SAP Transaction iView and have the code link com.sap.portal.appintegrator.sap.Transaction.
The most important properties are System, Transaction (TCODE) and ApplicationParameter.
·The System property contains the alias on the BW system (see Creating BW Systems in the Portal).
·The transaction code for every workbook is RRMXP.
·The value WBID= is in the ApplicationParameter property.
You can determine the workbook ID with the BEx Analyzer:
a. Open the desired workbook.
b. In the BEx toolbar, choose ® OLAP Functions for Active Cells ® Properties. The Information tab page contains the Workbook ID (Server).
Note that with BW workbooks as an iView, the AutoStart property contains the value True (process first screen) and the GuiType property contains the value WinGui.
Anyone have a solution for this to work?
Thanks,
-EliDear Rasmesh,
Please try to do this suggestion:
3. How can I use SAP Application Integrator to access SAP transactions?
There are two different ways to use the SAP Application Integrator transaction iView. In both cases please use a URL like 'irj://com.sap.portal.appintegrator.sap.Transaction' followed by your custom parameters like '?System=DEV&TCode=SE38&GuiType=WinGui &WinGui_Type=Shortcut&OkCode=SHOP'.
The parameters are:
System [mandatory]
TCode [mandatory]
GuiType (=WinGui / WebGui / JavaGui) [mandatory]
WinGui_Type (=Shortcut ..if you want to launch the GUI in a new window)
OkCode (The OkCode that you would like to be executed after the transcation is called by SAP GUI.)
ApplicationParameter (Pass these values to your screen fields which needs to be be separated by
AutoStart (true / false)
UseSPO1 (true / false)
For a complete list of parameters please consult http://help.sap.com.
Taken of:
http://www.sweetlets.com/my_favorites_faq.html
I hope this highline can help you,
Luis -
Hi,
we are using SAP Netweaver Enterprise Portal 7.0 (SP25) based on Windows 2008 R2/Oracle 11g.
When we setup the Portal, we used the UME of the ECC - ABAP.
The portal is used internally only.
Now we want to provide SSO.
User authenticate against Windows Active Directory (Windows 2003).
We thought SSO via spnego would be the best solution.
Any better alternates, we should use?
We are following the SAP documentation:
SAP-Bibliothek - Benutzerauthentifizierung und Single Sign-On
We still want to create users in ABAP and assign them the portal roles. LDAP access should only have read access, to verify the security token from Active Directory.
When we setup the portal from scratch using ABAP as its UME, in the system configuration, LDAP can't be selected/add as data source.
In case we understand the documentation correctly, we would now need to add LDAP via the configtool for read access.
What is not clear to us, when we active now LDAP via config tool, if we would now lose the ABAP connection.
Is there a tutorial for SSO Netweaver 7.0 EP, like for EP 7.3, available?
In 7.3 SSO is pretty simple to get it running, thanks to the many tutorials here and on the internet.
Thanks for your help.
Best regards
Carlos BehlauHi,
I was able to generate the key via ktab program.
But when I am enable SSO, nothing is happening when I try to log-on via SSO to the portal.
I installed WebDiag tool on the portal server and ran trace.
The users are located in domain: company.com of activate directory.
The Java AS are located in domain: sap.company.com of activate directory.
The sap.company.com domain acts as child of company.com.
When I check the WebDiag trace, I see for the SPNegoLoginModule - the entry "... no key (etype: 23) for realm sap.company.com available ..."
I would except company.com as realm key, as the keytabs have been generated on the domain controller of company.com.
Is it possible to get SSO with child domain running?
Based on the statement of the network folks, child and father domain having a trust.
Thanks for your help.
Best regards
Carlos -
Unable to see Dashboard over the internet Using Enterprise Portal
Dear All,
I have one issue here which is bit technical,
I have made an Xcelsius Dashboard (Connection Type: Excel XML Maps (BW Queries)) and uploaded SWF file on to KM Repository in Portal. I have created Document iview and a role to published the dashboard on Enterprise Portal.
Now when i am trying to access that Dashboard from Portal within local network it works fine but when i try opening the same Dashboard over the internet from home it gives an error.
ERROR DETAILS:
To access external data, add a cross-domain policy file to the external data web server.
For more information, on the Adobe website, see the article u201CCross-domain Policy File Specificationu201D.
If the problem persists, contact the file creator or your system administrator.
Error: Error #2048
Connection Type: Excel XML Maps
File URL: https://www.portal.com/irj/go/km/docs/documents/dashboards/dashboard1.swf
External Data URL: http://bwserver.domain.com:8000/sap/bc/bsp/sap/zbo_data/Data.xml?infocube=ZFIGL_FM&query=ZFIGL_FM_Q0003_BO&VAR_NAME_1=0P_FYRA&VAR_VALUE_EXT_1=2009
I have added crossdomain into WebAppl Srvr of BW Server .. Created BSP Application ---> Imported crossdomain file ---> set BSP App in Default Service.
Please provide possible solutionsWe have the same problem.
The Solution 1.
http://wiki.sdn.sap.com/wiki/display/EmTech/Addcrossdomain.xmlontherootofSAPWebapplication+server
and 2.
http://www.asabau.com/2009/04/crossdomain-policy-file-in-sap-web-application-server/
does not work.
How you have fix it?
regards
Chris -
Error while trying to apply SP20 to Enterprise Portal 6.0
I am trying to upgrade my Enterprise Portal from SP13 to SP20, I am getting the following error message on one of the last steps.
Start updating EAR file...
start-up mode is lazy
EAR file updated successfully for 3420ms.
Start updating...
EAR file uploaded to server for 10501ms.
ERROR: Not updated. Deploy Service returned ERROR:
java.rmi.RemoteException: Only Administrators have the right to perform
this operation.
at com.sap.engine.services.deploy.server.DeployServiceImpl.update
(DeployServiceImpl.java:656)
I also noticed that I cannot log on to the Visual Admin, I am getting the following error
Error while connecting
com.sap.engine.services.jmx.exception.JmxSecurityException: Caller
Guest not authorized, only role administrators is allowed to access JMX
Does anyone know what is causing this error?
Thanks,
Alma C.Hi Alma,
This is one of the security issue.We had faced it sometime back.We searched some CSN's and found a solution.
Go to Service Market palce and download the latest Cryptographic Tool kit (Service Market place---->software downloads)
You will get a sca/sda something like tc/iaik./security(something like this)
Deploy this on to your instance using your SDM.
After that,Restart the Portal patching.It will go fine.
reward points if helpful................ -
Error while publishing the query in enterprise portal
Hi EP experts,
One of the user is executing the query in enterprise portal. The user is assigned to proper roles in ABAP BI system.
But when clicking on the query the user gets the below error
Full Message Text
A message was generated:
ERROR
DP_1: Unable to load query Z_F2P_DP_ZDPM_Q0002
com.sap.ip.bi.webapplications.dataproviders.selector.impl.Localization loaderr_query
DP_1
Z_F2P_DP_ZDPM_Q0002
DP_1: Unable to load query Z_F2P_DP_ZDPM_Q0002
com.sap.ip.bi.webapplications.dataproviders.selector.impl.Localization loaderr_query
DP_1
Z_F2P_DP_ZDPM_Q0002 "
The user has S_RFC authorization in a general role but still facing the issue .
Please suggest
Thanks
Rosandeep AcharyaHave you created BI iView?
If so you need to give the TEMPLATE=<template id>
and preview the iview from portal.
Hope this helps.
Cheers-
Pramod -
Create the user master records using the Enterprise Portal
Hello gurus!!
I'm configuring SRM 7.0 with EP.
I'm configuring the organizational structure, and steps guide (pdf and Solution Manager ) are:
1. Go to transaction SU01 and create an ABAP User. (SRMADMIN)
2. Assign this user the administrator role /SAPSRM/ADMINISTRATOR
3. As the administrator, creater the organizational plan
4. Create the remaining organizational unit
5. Using the Enterprise Portal application, Business Parter:Employee, create the user master records for the departmental managers.
How I must create the user in Enterprise Portal? What user I have to use to log on in the Enterprise Portal application? Has the user to be integrated in the organzational structure??
Thanks in advance!!!!
Best regards.
Maria.Hi,
You can create users in WebDynpro application. You can also create users in USERS_GEN transaction.
Regards,
Masa -
Debugging tools in SAP Enterprise portal
Hi All.
I need to find the debugging tools which can be used on the enterprise portal..
I had heard about Log watch tool.. How to use this tool?
Is it software do i need to deploy that dc or how to move further?
What is the best debugging tool for the portal? what are the other options
Thanks
ShravanHi,
Log Watch is basically a tool which helps you to analyze the trace or logs generated for running an application. You can use the tool by running the application com.sap.tcepcommon~logWatch , but you must have the administrator role assigned to your user id. There are also three tool which helps while troubleshooting any problem in Portal. They are Navigation Reporter, Navigation Debugger, Diagnostic Tool.
Please have a look into the below URL about the tools and details of debugging in Portal.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/6035b020-73e3-2910-5496-82d900355947?quicklink=index&overridelayout=true
Thanks
Shankha -
SAP Travel & Expense Management (TRIP) in the Enterprise Portal environment
HI All
I am Viki. In our organization they are planning to implement the SAP Travel & Expense Management (TRIP) in the Enterprise Portal environment. Can any one help me how to start this process other details like
What is the business package for Travel and Expense Managment
How many Iviews are there
How to show the Travel data in portal
How to configure the UWL for TRIP
What are all roles?
Please help me in this regard
Thanks
VikiHi Viki,
SAP Travel & Expense Management comes under ESS Package,
to use these service we need to take license and all So first
you gather your requirement ,then check for license n with SAP.
Check Below links for details
[Link 1|http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/webcontent/uuid/a0b47200-9c6d-2910-afa6-810c12eb7eb3 [original link is broken]]
[Link 2|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/21eb036a-0a01-0010-25a3-b2224432640a]
[Link 3|http://www.sap-img.com/human/what-is-ess-mss.htm]
Regards,
Piyush
Maybe you are looking for
-
After using the iphone all I could think of was...."fewest dropped calls" my a--. I've never has so many dropped calls in my life since switching to the new iPhone. Here are steps I've taken: Verified that I'm in an excellent coverage area (with AT&T
-
why do I have to provide more information about the crashes? Every time it crashes and closes the message says it is sending the report to Firefox
-
File format for professional printing
(In case it's relevant I'm using CS2, but I think it probably doesn't matter.) I have some logos that I'm publishing for people to use for a variety of purposes. I want to keep the number of file formats to as few as reasonably possible in order not
-
Query ASM info in EM repository in a select statement
I have several ASM instances across the enterprise, I periodically check the diskgroups with a statement select name,free_mb/total_mb*100 perc_free,total_mb/1024 total_gb,free_mb/1024 free_gb,usable_file_mb/1024 usable_file_gb from v$asm_diskgroup
-
Failed to activate guest network airport utility maverick
Hi, I'm trying to activate the Guest network on a timecapsule, using the Airport utility available witk Max OSX Maverick 10.9. Each time I check the checkBox "Activate Gust Network", it is deseapearing from the UI. Looks like a strange bug on Airport