Role assignment and FDI polling interval for participant info

Hi,
When a role is added to a participant in Portal Admin console how long it takes to take effect meaning how soon he can login and use the role. Inother words what is the FDI polling interval time to get participant info? I am getting "fuego.portal.exception.WapiOperationException: Participant 'XYZ' does not have execution permissions for role 'ABC' though the Execute permission was given to the user.
Will this role assignment applies for In Flight instances too?
Regards,
Xavier

After you have assigned a particpant to a role and if you are sure you have given execute permission to the partcipant and still if the change doesnt reflect in your application, just try restarting engine. Even if the problem persists then try restarting the weblogic server. The role assignment applies to inflight instances also. for eg : if there are two instances that belong to the role say'ABC' and you have mapped 'XYZ' for that role, then you can see the instances of that role in 'XYZ''s inbox.
Hope this helps.
Regards,
Charan

Similar Messages

How to set polling interval for database adapter in interconnect?help plz!!

Hi
i have 4 database adapters with same name subscribing to same event in 4 different interconnect instances(i.e., same business event and application event in different hubs) and pointing to same source application database , same destination application database.
source application database have one oai bridge schema.When a message has to be sent,message will be enqueued in messageobjecttable.This message can be taken by 4 databse adapters.and send to 4hubs then 4 messages will be sent to destination application instead of single message.
To avoid this,I want to set database polling interval in 4 adapters sych a way that if one adapter take message in MESSAGEOBJECT TABLE,the other three adapters don't pick same message.
this way i can avoid redundacy at destination application.Please reply soon
Thanks

You would seem to have an extremely unusual use case for interconnect. The whole purpose of Interconnect is to concentrate the message processing into one hub and distribute the message to those applications interested in it. The use of 4 hubs from one application is probably not supported for precisely the reasons you are having trouble. Can you give us more details of your use case?
I am not sure that adjusting the polling interval for the different adapters will help. Since at some point you will get a collision where 2 or more adapters poll at the same time.

Polling interval for triggering alerts

Is there a way to set the polling interval for alerts. I'm getting 2 alerts for the same message id. I do not want to supress multiple alerts, our alert config scenario is rather generic.

Aamir,
I found this SAP note 913858 that talks about something similar but we are on 7.0 SP9.
Q11: Why do I sometimes receive two alerts when an error happens in a receiver adapter?
A11: This happens because two independant components of the Adapter Framework react simultaneously on the error. The problem will fixed with SP17.
And it seems to stem from the receiver adapter.
Thanks,
Pam

Polling interval for Topology Services in Cisco Prime 4.2

Hi,
Where can I find the polling interval for Topology Services? I noticed that the devices' status is not updated on the map.

Hi Benjo,
If there are few devices which you are more concerned of then you can add them under CRITICAL poller list.
Check the below link:
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.2/user/guide/admin/datacollection.html#wp1053692
NOTE:
If the critical set of devices is more than 30, the amount of traffic generated as part of the polling cycle will use a large amount of bandwidth.
Thanks-
Afroz
[Do rate the useful post]

Poll interval for sender file adapter.

I have a 1_sender file NFS file adapter which picks a trigger file from X location in PI application server, this trigger file initiates the unix script present in the sender file adapter.
Unix script brings all the file which starts with 25588* from bank FTP and places in Y location in PI application server then script deletes the "trigger file".
another NFS File adapter 1_receiver file adapter places the trigger file in the X location of PI.
for 1_sender file poll interval given as 86400, that means it should trigger only once a day @ 1:30pm.
But today same sender file adapter had triggered 4 times, could any one let me know the reason why it had triggered 4 times instead of single time.

Vidya,
There are two things :-
1. The polling interval should be 24 hrs;
2. The polling interval should be 24 hrs and it should poll at 1:30 pm every day.
For any reason if the channel is re-started, then with your present configuration, you will never be able to achieve # 2.
So, better use ATP.
But today same sender file adapter had triggered 4 times, could any one let me know the reason why it had triggered 4 times instead of single time.
Might be the connection dropped / failed at the time of polling and the channel re-tried. If you give more details (what time and with how much interval it triggered), someone might be able to help.
Regards,
Neetesh

HT5312 I forgot the security questions and also the password for security info email of my apple id. Now I want to change the security info email with another. What Should I do?

I forgot the security questions and also the password (and even account id, sequrity questions,... becouse I didn't use for a long time) for security info email of my apple id. Now I want to change the security info email with another. What Should I do?

Even if I'm not despertate, creating a new Id is good Idia. But I think I must create another email address also since I can't use the first email adress as an apple id for the new one. That means I should check everyday the new email address also, that is making life complex. Better to try the 1st solution. Thank you very much.

Role Mapping For Portal Role Assignment and ABAP Role Assignment

Summary:
- Under the GRC configuration of Roles> Role Mapping we are trying to utilize the role mapping feature in GRC for associating a dependent role to a main role.
- We want to use this role mapping feature for the purposes of adding an Enterprise Portal role for every ABAP role that gets approved for the user in an ABAP component system (i.e. ECC, BW, CRM etc). We will have a 1:1 mapping of Enterprise Portal role to ABAP role defined in the role mapping section in GRC.
- We want to set up the workflow in such a way that the main role (ABAP role) is the only role that needs to be approved. The dependent role (Enterprise Portal role) should be added or not added based on the approval or denial of the main role (ABAP role). In other words if the role owner for the abap role approves the abap role, then both the abap and EP role will be provisioned by GRC and if the role owner rejects/denies the role, then neither the abap or EP role will be provisioned by GRC.
Problem Description:
Our Scenarios we tested:
Scenario 1:
Main Role: Attached to Initiator A & workflow A (routes to single approver based on role)
Dependent Role: Attached to Initiator B & workflow B (routes to auto approval or no approval)
*Problem with the Scenario 1setup above, the dependent role will always get approved & provisioned regardless of the approval or denial of the main role.
Scenario 2:
Main Role: Attached to Initiator A & workflow A (routes to single approver based on role)
Dependent Role: Attached to Initiator A & workflow A(routes to single approver (same as main approver) based on role)
*Problem with the Scenario 2 setup above, the dependent role will always also need to get approved by the same approver as main role and it opens the possibility that the approver may accidently approve the main role and deny the dependent role, which is not the ideal setup as we inherit the risk of human error.
Questions:
1. Does the dependent role need to be defined in an initiator at all since it will never directly be requested directly?
2. If the dependent role does need to be in the initiator file, please describe how to properly setup the initiator and workflow stage & path so that we can maintain the desired relationship with the main role approval dependency? (if the role owner for the main role approves the main role, then both the main role and dependent role will be provisioned by GRC and if the role owner rejects/denies the main role, then neither the main role or depedent role will be provisioned by GRC
Edited by: Rene Griffith on Feb 26, 2010 10:22 PM

I tested this set up.
1. Defined ABAP role as Manin role
2. Defined Non-ABAP role as dependednt role
3. ABAP role is set up in initiator requiring business approval.
4. Non-ABAP role is set up in initiator with no approval required.
Results Where Business Approver approves the ABAP Role
1. Only the ABAP role is displayed in approver view which is desirable.
2. ABAP role is approved and Non-ABAP role and ABAP role is provisioned.
Results Where Business Approver rejects the ABAP Role
1. Only the ABAP role is displayed in approver view which is desirable.
2. ABAP role is rejected but Non-ABAP role is provisioned which is not what we want. We want the Non-ABAP role not to provision if the ABAP role is rejected by the business approval.
Thanks again for your help.

Double roles assignment and performance

Dear all
Will there be any performance issues if we assign excatly the same roles (HR role with strucutral profile e.g. P_ORGINCON) twice for user in SU01?
-BT

i know this is solved and i am too late but still i want to add to the performance-issue.
if you have menues assigned in your roles, a double-assignment of the roles will also double the nodes stored in the user environment. please read note [203617|https://websmp230.sap-ag.de/sap(bD1kZSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=203617&nlang=EN&smpsrv=https%3a%2f%2fwebsmp205%2esap-ag%2ede], [203994|https://websmp230.sap-ag.de/sap(bD1kZSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=203994&nlang=EN&smpsrv=https%3a%2f%2fwebsmp205%2esap-ag%2ede] on the topic.
additionally have a look at [357693|https://websmp230.sap-ag.de/sap(bD1kZSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=357693&nlang=DE&smpsrv=https%3a%2f%2fwebsmp205%2esap-ag%2ede]

Iphoto keywords are not assigned and do not appear in the info.

Until recently I was able to very easily apply my own keywords to my photos. Now, when I go thru the same/similar proces of selecting multiple photos and start assigning keywords, the keywords list is found and finds the words as I type, when I hit enter, it flashes and does not assign a keyword to the photo.
I am using iphoto 11 9.3
Help please

Try using the Keyword pane to assign keywords to single or multiple photos. Select the photos, bring up the keyword pane open (Command+K) and click on the keywords you want to assign:
Assigned keywords to those photos will display blue.
This may only be a workaround but, IMO, it's a more efficient way to assign keywords.
OT

Background job fails for BDC profile creation and role assignment

Hi Experts,
I have created a BDC Function module for Tcode 'PFCG' for profile creation and role assignment, and called this FM in my zprogram. the problem is that when i run this program in foreground it executes succesfully, but if i schedule it in background it fails throwing error in job log 'Role 'Z...' does not contain any active authorizations'. But i have created one more program to create authorization objects which runs before this zprogram.I have also checked the authorization object in 'RSECADMIN', it reflects active. I dont understand whats happening exactly when it runs background.
Below is the process of job
   1. ZMIS_AUTH_OBJECT_CREATE
       Variant : auth-create
   2. ZMIS_AUTH_ASSIGN_TO_ROLE
       Variant : auth-assign
The problem is in second program, runs in foreground but fails in background.
Code which i have written in my second program
***BDC for Profile creation and assignment to Roles
    CALL FUNCTION 'ZROLE'
      EXPORTING
       ctu                     = 'X'
       mode                    = p_mode
       UPDATE                  = 'L'
*   GROUP                   =
*   USER                    =
*   KEEP                    =
*   HOLDDATE                =
       nodata                  = '/'
        agr_name_neu_001        = wa_role-role_name
        text_002                = wa_role-desc
        text_003                = wa_role-desc
        text_004                = wa_role-desc
       value_01_005            = 'T-ML330881'
        h_fval_low_01_006       = wa_role-auth
        profn_007               = lv_profile
        ptext_008               = lv_text1
* IMPORTING
*   SUBRC                   =
     TABLES
       messtab                 = temp_message.
***Generation of Profile created
CALL FUNCTION 'PRGN_AUTO_GENERATE_PROFILE_NEW'
     EXPORTING
       activity_group                      = wa_role-role_name
*     PROFILE_NAME                        =
*     PROFILE_TEXT                        =
      no_dialog                           = ' '
      rebuild_auth_data                   = ''
      org_levels_with_star                = ' '
      fill_empty_fields_with_star         = 'X'
      template                            = ' '
      check_profgen_tables                = 'X'
      generate_profile                    = 'X'
      authority_check_pfcg                = 'X'
   EXCEPTIONS
     activity_group_does_not_exist       = 1
     activity_group_enqueued             = 2
     profile_name_exists                 = 3
     profile_not_in_namespace            = 4
     no_auth_for_prof_creation           = 5
     no_auth_for_role_change             = 6
     no_auth_for_auth_maint              = 7
     no_auth_for_gen                     = 8
     no_auths                            = 9
     open_auths                          = 10
     too_many_auths                      = 11
     profgen_tables_not_updated          = 12
     error_when_generating_profile       = 13
     OTHERS                              = 14 .
Experts please help me out its very urgent. your help is appreciated and rewarded. Thanking you in advance.
Regards,
Chetan

Hi Praveen,
Yeah definately, my requirement is that I have to access of some BI reports to certain users, so contract data will be downlaoded from ECC on application server, need to read that file from application server and for the each contract i ahould create a authorization object, role creation and assigning of role to the user and profile generation and activation.
To achieve this i have written two programs
1) ZMIS_AUTH_OBJECT_CREATE- This program will create the Authorization Object using BDC and Role creation Using the BAPI
"" Creation of Authorization Object
CALL FUNCTION 'ZAUTHOBJ'
        EXPORTING
         ctu                    = 'X'
         mode                   = p_mode
         UPDATE                 = 'L'
*   GROUP                  =
*   USER                   =
*   KEEP                   =
*   HOLDDATE               =
         nodata                 = '/'
         g_authname_001         = 'ZDUMMY_MIS'
          g_targetauth_002       = wa_tab-auth
          g_authtxt_003          = wa_tab-short_desc
          g_authtxtmd_004        = wa_tab-med_desc
         marked_04_005          = 'X'
          g_authtxt_006          = wa_tab-short_desc
          g_authtxtmd_007        = wa_tab-med_desc
         tctiobjnm_04_008       = 'ZBUS_UNIT'
          g_authtxt_009          = wa_tab-short_desc
          g_authtxtmd_010        = wa_tab-med_desc
         marked_05_011          = ''
         opt_01_012             = 'EQ'
          low_01_013             = wa_tab-bu
          g_authtxt_014          = wa_tab-short_desc
          g_authtxtmd_015        = wa_tab-med_desc
         marked_04_016          = 'X'
          g_authtxt_017          = wa_tab-short_desc
          g_authtxtmd_018        = wa_tab-med_desc
         tctiobjnm_04_019       = 'ZCONTRCT'
          g_authtxt_020          = wa_tab-short_desc
          g_authtxtmd_021        = wa_tab-med_desc
         marked_05_022          = ''
         opt_01_023             = 'EQ'
          low_01_024             = lv_contract
          g_authtxt_025          = wa_tab-short_desc
          g_authtxtmd_026        = wa_tab-med_desc
          g_authtxt_027          = wa_tab-short_desc
          g_authtxtmd_028        = wa_tab-med_desc
          g_authname_029         = wa_tab-auth
* IMPORTING
*   SUBRC                  =
       TABLES
         messtab                = temp_message.
"" Creation of role
LOOP AT it_role INTO wa_role.
      CLEAR wa_text.
      wa_text-text = wa_role-desc.
      wa_text-langu = 'E'.
      APPEND wa_text TO it_text.
      wa_jobrole-agr_name = wa_role-role_name.
      wa_parentrole-agr_name = 'ZM_CT_DUMMY_MIS'.
      wa_method-usmethod = 'CHANGE'.
      CALL FUNCTION 'ZBAPI_JOBROLE_CLONE'
        EXPORTING
          jobrole          = wa_jobrole
         parent           = wa_parentrole
         method           = wa_method
       TABLES
*   RETURN           =
         shorttext     = it_text
*   LONGTEXT         =
*   MENU_NODES       =
*   MENU_TEXTS       =.
    ENDLOOP.
2) ZMIS_AUTH_ASSIGN_TO_ROLE - This program will generate the profile created assign it to the role.
""*BDC for Profile creation and assignment to Roles
    CALL FUNCTION 'ZROLE'
      EXPORTING
       ctu                     = 'X'
       mode                    = p_mode
       UPDATE                  = 'L'
*   GROUP                   =
*   USER                    =
*   KEEP                    =
*   HOLDDATE                =
       nodata                  = '/'
        agr_name_neu_001        = wa_role-role_name
        text_002                = wa_role-desc
        text_003                = wa_role-desc
        text_004                = wa_role-desc
       value_01_005            = 'T-ML330881'
        h_fval_low_01_006       = wa_role-auth
        profn_007               = lv_profile
        ptext_008               = lv_text1
* IMPORTING
*   SUBRC                   =
     TABLES
       messtab                 = temp_message .
   COMMIT WORK AND WAIT.
""*Generation of Profile created
LOOP AT it_role INTO wa_role.
    CALL FUNCTION 'PRGN_AUTO_GENERATE_PROFILE_NEW'
     EXPORTING
       activity_group                      = wa_role-role_name
*     PROFILE_NAME                        =
*     PROFILE_TEXT                        =
      no_dialog                           = ' '
      rebuild_auth_data                   = ''
      org_levels_with_star                = ' '
      fill_empty_fields_with_star         = 'X'
      template                            = ' '
      check_profgen_tables                = 'X'
      generate_profile                    = 'X'
      authority_check_pfcg                = 'X'
   EXCEPTIONS
     activity_group_does_not_exist       = 1
     activity_group_enqueued             = 2
     profile_name_exists                 = 3
     profile_not_in_namespace            = 4
     no_auth_for_prof_creation           = 5
     no_auth_for_role_change             = 6
     no_auth_for_auth_maint              = 7
     no_auth_for_gen                     = 8
     no_auths                            = 9
     open_auths                          = 10
     too_many_auths                      = 11
     profgen_tables_not_updated          = 12
     error_when_generating_profile       = 13
     OTHERS                              = 14
    IF sy-subrc <> 0.
      MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
              WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
    ENDIF.
ENDLOOP.
For creating authorization objects, role & profile i have created one dummy auth, dummy role & dummy profile respectively.
i have created dummy objects to copy the roles from dummy object and assign the same to new Auth obj, role & profile.
Let me know what needs to be done. because these both the programs run perfectly in foreground, but fails in background.
Regards,
Chetan

JDBC sender adapter polling data more than once within one polling interval

Hi,
Our sender communciation channel is polling data twice in one polling interval, hence triggering the corresponding BPM twice.
The polling interval for the channel is set to 30 mins.
We dont have an update query and use <test> instead. Currently there is no provision to use an update query in the source system.
Intermitently the polling happens within an interval of few milliseconds, because of which we are in doubt whether the use of Update query will solve our problem
Additionaly in the BPM, we have one channel which deletes the data from source system after the processing is complete by the BPM, but the second BPM is getting triggered before the deletion step is being executed in the first BPM.
Please Advise how we can stop the channel from polling data twice.
Thanks,
Merrilly.

Hi Merrilly,
Please ty to set an advanced mode option in the table(for sender
channel configurations) as follows:
Key name is "clusterSyncMode" and its values are either "scheduler" or
"none".(both are without quotes and case-sensitive)
Default value is "scheduler", this means it prevents 2
messages being generated regardless of 2 server nodes. This is true,
even if you do not add anything in advanced options table.
Also are more information about this parameter of file adapter, what
is the same for jdbc:
#801926 - XI 3.0 File Adapter: Additional Parameters
Regards
SK

Role info not appearing once role assignment request is submitted from UI

Hi Everyone,
We have a strange problem in our project in IDM 7.2 SP8 where IDM role concept is used which contains privileges (could be role/profile) of backend systems.
Usually when ever a role (i.e IDM role) assignment request is submitted from UI, the activity with the associated info (like user details, role details, audit ID) should be stored in MXI_LINK table from where the info will be fetched and used in next stages of the processing
Even though the information is getting available for most of the cases for all users but some times for few users once the role assignment request is initiated from UI there is no info is getting available in MXI_LINK table corresponding to this activity which is strange.
Because of this problem even though user submits role assignment request no role info getting passed to IDM, set to pending state for the user which is getting meaning of user not submitted any role assignment request at all.
Can any one suggest what are the things that gets involved between these two steps and any troubleshooting hints are highly appreciable.
Regards,
Venkata Bavirisetty

Is this a situation you recreate at will? In other words, is it always happening on the same users? If so, you could put a trace on that user's account then try to add the role and see what that trace log shows. Additionally, you could just follow the links in the chain of the various tasks that kick off when you do a role assignment and check each task / job's job log and see what that tells you. There's got to be an error somewhere along the way that's preventing this from executing properly.

HR-ORG - Indirect Role Assignment

Hello
We are designing the role & security strategy in a new implementation project. The best security strategy seems to be an indirect role assignment via SAP organizational structure. We've looked for some information about that, but we have some doubts about it (we have downloaded "HR-ORG - Indirect Role Assignment" and "User & Roles" files from SAPNet).
The organizational structure will have a lot of leaves named "explotacion". Every leaf will have a different company code, sales organization, sector and so on... On the other hand, it's a requirement that a user obtains automatically its roles when its moved through organizational structure.
Our plan consists in create several primary roles (for example, sales manager). Then we will create a lot of derivate roles which will inherit all authorizations from the parent role. However, it shouldn't inherit organization field values... Then, when this role is assigned to a position, this role should obtain all organizational field values (company code, sector, ...) from our organizational structure.
Is it possible? How can we do that?
Best regards,

As mentioned previously, the indirect role assignment may work in this case since it assigns complete roles to positions rather than inheriting the properties of that position.
Structural authorisations however, do have specific authorisation values assigned directly to the organisational positions.
I have not had much experience in implementing these but that maybe worth a look.
Simon

JDBC Sender Channel polling before polling interval is complete

Hi all,
On our Production Server, we have found that a few JDBC Sender Channels are polling multiple times within one polling interval.
Eg: Suppose for one channel, the polling interval is 7200 secs. It polls once and the polling interval starts. But it polls again 1 or 2 times more maybe just 5 secs later before its next scheduled poll in 7200 secs.
Unfortunately, our scenarios are such that when there are multiple polls within a short span of time, there are data anomolies, causing inconsistancies on Receiver side DB. Hence this is a serious uissue.
Please Help. FYI, all the affected channels run on the same schedule. I am not sure if that can be causing this abnormality.

H Varun
I have not come across this behavior earlier. But if you are polling same data base using multiple channel at same time data inconsistency can be there. We always prefer to poll the same data base tables with different timings. Setting up poll timings always consider peak loads. Try to change the polls and see if the same behavior exists.
For performance and JDBC issues
Check https://service.sap.com/sap/support/notes/831162
Specially Q 14
Thanks
Gaurav

BPM polling interval

Hi, does anybody know if there is a way to establish a polling interval for a BPM in XI ? for example, you can configure a polling interval for the file adapter and this enables you to read a certain filesystem directory every n minutes/seconds...
Is there a way to do the same for a BPM ?
This cuestion comes form the fact that there is no way to configure a´polling interval for the RFC adapter.
Does anybody know if this is posible ?

Hello Hans,
You can schedule a BPM..
Now BPM can only be scheduled by sending a dummy message to XI.
Here are some blogs to helo you:
/people/siva.maranani/blog/2005/05/22/schedule-your-bpm
/people/community.user/blog/2006/11/16/step-by-step-realize-your-bpm-scheduling-capability
THanks,
Himadri

Role assignment and FDI polling interval for participant info

Similar Messages

Maybe you are looking for