Role display in RRMX

Hi Experts,
I created a new role in PFCG.When i entered a TCode- RRMX which is for BEX analyser,So i created a report there and tried to save the report in the newly created role but i can't find the role i created in PFCG in the bex.
When we type rrmx an excel will open and a pop window with left had menu options favourates,history,role & info arear how can i display newly created role in RRMX
Thnaks

Dear Tony,
Try to open a query and click on SAVE button. then you should be able to see the new 'role'. Also make sure that you come out and relogin to BEx..
Please let s know if u still can not see this..
regards,
Srini

Similar Messages

Need to get IRole object using Roles Display Name

Hi,
I need to get IRole object using Roles Display Name. I had the below code in EP 2004 SP12 and it works. But the same code dont work in EP 2004s SP13
user = request.getUser();
profile = request.getComponentContext().getProfile();
String strRoles = profile.getProperty("Roles");
String strRole[] = strRoles.split(",");
IRoleFactory roleFactory = UMFactory.getRoleFactory();
String roleUniqueId = null;
int i = 0;
boolean flagRedirect = false;
for(i = 0; i < strRole.length; i++){
     try
          com.sap.security.api.IRole role = roleFactory.getRoleByUniqueName(strRole<i>);
          roleUniqueId = role.getUniqueID();
          if(!user.isMemberOfRole(roleUniqueId, true))
               continue;
          flagRedirect = true;
          break;
     catch(UMException ex)
     catch(IOException ex)
if(!flagRedirect){
Where property Roles will have comma separated roles display names like "com.ABC.ortho_reports,com.ABC.lawns_ortho_reports,com.ABC.executive_reports"
Please advise.

Thanks Mrudula for the response. Sorry for the delay in responding.
I get UMEException with the message "Role with uniqueName com.ABC.general not found"
But it works fine if i specify Role unique role (like pcd:portal_content/com.abc.Marketing_Workbench/com.abc.Roles/com.abc.general).
We are in the process of upgrading Portal environment from EP6.0 SP12 to EP7.0 SP13. Above scenario works fine in the older environment.

Missing Role display in BI7 Analyser

Hi
We are trying to remove sap_all from all our users in BI7.
We have generally completed the admin tasks but we have an issue with Analyser Role display.
We have created workbooks and assigned them to roles and if the user has sap_all they can see the workbooks in the role menu. If they don't have sap_all they don't have any roles displayed in the 'open' window when using analyser also they don't have an infoarea icon displayed under the role icon.
I think this is probably something quite simple but I can't spot it. By the way we have created the roles manually using our BW3.x knowledge.
Thanks
Jerry

Hi Jerry,
In the role given to the user's (other than SAP_ALL). Just include the Two authorization objects:
S_RS_COMP and S_RS_COMP1.
Please provide these values for the 2 authorization objects for display and execute purpose for the users as bwloe:
ACTVT: Display, Execute (03,16)
RSINFOAREA: *
RSINFOCUBE: *
RSZCOMPID: *
RSZCOMPTP: *
Don't give any write/edit activities.
Then they can see all the queries, workbooks and infoareas.
With Regards,
Ravi Kanth
Edited by: Ravi kanth on Mar 24, 2009 9:50 AM
Edited by: Ravi kanth on Mar 24, 2009 9:53 AM

Delegated admins adding roles, displaying unexpected.

Hi all
I need to paint a picture for this one so please be patient.
I have a delegated admin that I have given access to the organization called internal using the internal tabbed user form. They have capabilities to add users, edit, update, and I have included only specific Business Roles that they can add which excludes all other roles. This works perfectly.
I have a separate admin role that allows a delegated admin to do the same as above with a different set of specific business roles to an organizations call external using external tabbed user form. this works perfectly as well.
NOTE: The business roles are only available to their respective organizations.
My dilemma:
When I add both roles to 1 delegated admin I get behavior that I think could be different.
All the correct forms work, all the fields are correct everything works as expected except the roles.
When I select add roles it actually shows up the combination of both sets of business roles that the above capabilities gives me access to..not the ones assigned to their respective organization.
Now based on
1. The roles are only available to users in their respective organizations
2. And i have excluded roles from the other organizations
3. And I am selecting or creating a user in their specific organization
Should this display this way? And if so is there anything else I can do to just display the roles that are available to the organization?
Cheers

Ecc6 SU01 - Role Display (Icon)

We've just started testing Ecc6 system (we are upgrading).
When displaying our existing roles for a user in SU01 we see some have missing icons for single role.
The display in SUIM (Roles by complex selection criteria) is fine.
Role with missing icon has profile in user ok.
Is this a new feature?

These are the entries for that table for the role....
Can you clarify which is the COLL_AGR I should be looking for?

Differences between authorization role display and display change document?

Dear All,
I want to know what are the differences between activity authorization between display and display document change?
Regards
Aishah

Dear Mr Robert,
thanks for replying me. actually, it is to prevent user from other dept to change the PO even print/message. when i check inside authorization the configuration is only for their own dept by putting dept code at pur org field of change. but still can change. it is because of the me22 layout screen?

Folders under a role displayed for all users

Hi
I had created a role called Role A and this had two folders unders that named Folder A, Folder B. I assigned this role to User A only.
I logged into the portal as User A, and saw that these two folders were visible, and as I had wanted it.
But when I logged in with the administrator's account too, I noticed that along with Content Administration, User Administration, System Administration, I also had Folder A and Folder B.
I checked the roles for Administrator and Role A has not been assigned.
I dont want this Folder A and Folder B to appear in the admin's account.
Please help.
Thanks
Manoj

Hi
Thanks for your help. Its not a permission issue for that folder, and no other groups are added in Role A.
I guess, like Venkatesh says, it could be the content admin role or super admin role. But surprises me as to what would happen if there were more than 100 folders.
There must be something else to it. I suspect this to be a cache problem, as I had added Role A to Administrator's group and then removed it from there. I will check this and confirm.
Thanks for all help
Regards,
Manoj

SPNEGO working but No portal roles display

We want to switch from X.509 to Kerberos authentication on our portal.
We have now implemented a portal with Kerberos Authentication (SPNEGO) and the ABAP system as the UME, Previously, we also use hte ABAP store to create roles which appear as groups on the portal. In other words our user>group assignment is done in ABAP system. On the portal we then only map groups to portal roles
Now however, since implementing Kerberos, the group > role mapping does not appear to be working anymore.
Does anyone have advise on where to look for the problem?
Thanks
Vicky

Hi
Can you check whether the portal roles have been mapped to the ABAP groups?
Regards
Wilhelm

Need help with Portal role display!

Hello forum.
I have a quite strange requisite from my client, and I was wondering if anyone of you ever done something like this:
Today their EP exclusively supports the Employee Self-Service BP. We are currently driving a project to deliver some reports on their EP.
These reports were built with Visual Composer.
Aditionally, we've created the whole structure to support the introduction of the reports on the Portal (role, pages, worksets). The problem is that our client doesn't want the employees to see the reporting Role when they access the ESS area, and vice-versa. The requisite is something like having two different Portals, running on the same...
We've tried many solutions to accomplish that: we've created quicklinks, portal aliases with different framework pages, etc... but we are not getting there.
Can anyone give me a useful hint?
Thanks in advance.
Regards,
Ricardo Inácio

Found a solution.

How to display name and display name of the role during request

Hi,
Is it possibe to display Role Name and Role Display Name on the "Select Roles" page during ROle Request for Others? In the "Roles Available" I can only see "Role Display Name". I was trying to look at "AssignRolesDataSet.xml" but was unable set what I need (for exmaple lookup-query...). How to achieve desired funcionality?
Best
mp

Hi,
I should implement your same funcionality, but looking for a solution I didn't find any useful suggestion.
Did you find the solution?
Thanks in advice
Daniele

Change all activity to Display in a role

Hi all,
I wanted to know if we can change all the 'ACTIVITY' in a role to display. I donot want to do it one by one for all authorization objects but in one go. Is this possible, if yes then how can we achieve it?
Thank you

Hi Zaheer,
As there is exact no way to restrict all activity to display in single action like Organization value in role. To make a display role you need to also check the other objects not having the field ACTVT for ex: in HR object (P_ORGINCON) restriction based on authorization level Values in this fields are R, W etc.
Better to check table AGR_1251 for particular role. This will provide you the all field along with values exist in role, and based on that u can decide what need to be restrict to make a role display. For this u also needed the inputs from functional team alongwith testing.

Authorization roles for display access to PD transactions

Hi all,
There is a requirement to create a new security role to allow display access to PD transactions :
> Organisational and Staffing Display PPOSE,
> Display Position PO13D,
> Display Organisational Unit P010D
With this role, display access needs to be restricted to view organisation units and positions within the line of business where the position with this security role sits, eg position is within Direct Sales and Service 55001641 therefore they can only view organisational structures that report through to this top org unit.
Any inputs regarding this would be appreciated.
Regards,
Manasee

Try with object 'S_ENQUE' and ID 'S_ENQ_ACT'...
Hope it helps!
Bye,
Roberto

SAP R/3 : Indirect Role assignments - Is position unique to every user?

Hi.
While am exploring /learning SAP R/3 roles and auth, I would appreciate if I could get clarity on the following :
This link on SDN on Indirect role assignments are very informative.
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/f03e6f6c-8c16-2a10-1581-ed8812e2effe
This link is also more explanatory : http://my.affinitext.com/public/book/5442/-1/1423831
So if my understanding is correct, it is better to assign roles - indirectly by position, so that if an employee's position changes, his role can be removed, based on position again ??? And somewhere we are linking with infotype 105.
My only doubt is : if we are going to assign roles by position and remove the roles by position, so that as the position of an employee changes, the previous roles become null and void and new roles can be assigned as per new position.
So would like to know :
as to whether this position number which we see from PA20, is unique to every user on the system ?
So that, if there is a need to remove a role based on postion, we could remove the role from PO13;
BY doing that, then will it not affect other users ?
Can somebody help me understand this.
Because if i want to see the effect immediately, if i go to PFUD and put the role name and say execute, i see that the role which was removed from PO13 is gone immediately from the user.
Many thanks
Indu
Edited by: Indumathy Narayanan on Nov 22, 2011 9:25 AM

GOT IT THANKS.
Hi Prashant.
Good morning and wishes.
Can you please help me understand this.
I understand from HR person that position is uniquely defined (from hire to retire)
and roles are generally given based on position.
However, I see a person : whose roles have been assigned as per position all these years.
He had 2 roles in project A. He now moved into a different project B.
But. when i check, i still see the roles - reflecting on SU01 & well as in the tab of user of the role X under pfcg.
BUT when i check PO13 - and put the position / relationship and say overview.
I dont see the roles at all there.
Why this is so. Why the discrepancy on different screens.
Also How can I get a confirmation that - these roles are actually removed and is not there for the user.
Rather.
How could the removal of roles based on position become completely effective on the system.
So that all screens display the same information.
Also would like to know - whether it is ok to remove the role expiry date directly from PFCG/ROLE Display/user tab/select user/
and then make the role invalid or expired / or extend the expiry.
Many thanks.
Indu
Edited by: Indumathy Narayanan on Dec 7, 2011 12:09 PM
Edited by: Indumathy Narayanan on Dec 7, 2011 1:42 PM
Edited by: Indumathy Narayanan on Dec 7, 2011 5:17 PM

Read Only Display Settings Help

Hello,
I am trying to control what some users can see in a page. Right now I have an item field (Roles) display as checkbox. Roles is a field in my table that I created with RolesA, RolesB, RolesC. Note: these are not htmldb roles.
In my Edit Page Item --> Read Only Display Settings --> Read Only Condition Type --> PL/SQL Function Body Returning a Boolean. Under Expression 1, I coded:
return not htmldb_util.current_user_in_group(p_group_name => 'APP Admin')
I want this item to read-only unless the user happens to be a member of group 'APP Admin'.
The expression is not working. It seems that no matter what user is logged in they can modify this item. Is there another way I can do this for controlling what my RolesA, RolesB, and RolesC can modify? BTW, this item is a checkbox.

Dung,
That API seems to have a bug, it returns true/false/null, so you could use 'return not nvl(htmldb_util.current_user_in_group(p_group_name => 'APP Admin'),false)' to get a false value.
Unfortunately there's another problem: using the read-only attributes for checkbox or radiogroup item makes them hidden. My suggestion would be to create another item that has disabled="disabled" in the HTML Form Element attribute in the item definition and display that item or the non-disabled item alternately, using conditions based on the current_user_in_group logic.
Scott

Workflow Notifications not sending for AdHoc Role

Hi,
I am trying to send my workflow to multiple dynamic users, using the call createAdHocRole.
Here is my code (I currently am using 2 user names for testing. This will be eventually be a variable) :
+-- create role --+
apps.wf_directory.createAdHocRole(v_role_name -- role name
+, v_role_name -- role display name+
+, null -- language+
+, null -- territory+
+, null -- role description+
+, null -- notification preference+
+, 'JEHANSEN,DCDRIGGS' -- role users+
+, null -- email addresses+
+, null -- fax+
+, 'ACTIVE' -- status+
+, trunc(sysdate) + C_PURGE);+
When I run the workflow, it runs with no errors, but I am not receiving any emails. I can view the workflow in the Status Monitor and I see the Notification being created and it shows my new role as the performer. Both usernames that I am using for the Role Users are setup as Users and Employees in the environment.
I've queried the WF_USER_ROLES_ASSIGNMENTS table and I see my new role there, and both usernames are in the table. Both users are also in WF_USERS with email addresses, and also in WF_LOCAL_USER_ROLES. When I query WF_NOTIFICATIONS, I see the notification being created there, with a status of OPEN, receipient_role being my new role, mail_Status is blank, responder is blank, original_recipient is my new role, from_user is the supplier, and to_user is my role name .
Can anyone see what I am missing? I thought if I create the role with a null email_address it then sends email to all users in that role? It probably doesn't matter, but these are being submitted upon the change of a PO in iSupplier (Oracle Apps).
Thanks,
Janel

Hi,
Once you have created the role, they can be referenced in your Workflow process in the same way as an other role. For example, create an ad-hoc role "MYTEST123" using the standard WF_DIRECTORY API. Then you can use this as the notification recipient in your process.
If you are creating the roles dynamically within a process, then once the role has been created, set an item attribute (e.g. attribute NTF_RECIPIENT) to the name of the new adhoc role, and then have the notification recipient set to the value of the item attribute.
HTH,
Matt
WorkflowFAQ.com - the ONLY independent resource for Oracle Workflow development
Alpha review chapters from my book "Developing With Oracle Workflow" are available via my website http://www.workflowfaq.com
Have you read the blog at http://www.workflowfaq.com/blog ?
WorkflowFAQ support forum: http://forum.workflowfaq.com

Role display in RRMX

Similar Messages

Maybe you are looking for