Roles and Role List

Hi all,
Please explain me about the Roles and Role List used in Projects...
Thanks
Dinesh

Hi
Roles are using in Projects for two goals -
A) a basis for project-based security. You might create roles as project roles and assign people to the role in a project. For example, project manger, project admin, project billing person, etc. You then might configure the security access to forms and functions of specific roles.
B) when implementing Proejct Resource Management, the project roles may be scheduled on a project and serve as a template for resource demand. In that case you might configure the team member role on a project, such as competencies, job information, and security.
You might want to review Oracle Projects Fundamentals and Projects Implementation Guide for more details.
Dina

Similar Messages

Automatic Creation of Roles and Role Mappings in GRC

Hi,
we are planning to use SAP Identity Management and SAP GRC Access Management.
In SAP IDM we have defined several business roles that contain privilieges in SAP systems. When a user is requesting a role, the request will first be sent to SAP GRC for approval and risk checking.
In order to get this to work, we need to load the business roles of SAP IDM into SAP GRC and we also need to configure the role mapping between the business roles and the technical SAP privileges.
From what I understood, this could be implemented by loading the required information via Excel filles into SAP IDM.However, this is a quite cumbersome and error-rpone approach an we would like to automate this.
Is there a way to use e.g. web service calls to create/delete roles and role mappings in SAP GRC?
BTW: is a documentation of all available GRC web service calls and their parameters available?
Thanks for your help in advance!
Best regards
Tom

Hi Tom,
as stated before, the web service description is in the config guide.
Unfortunately there is no web service to create roles or even mappings in CUP - this is one of many I would also like to se created
I don't think in your context you will be able to directly send Business Roles to CUP. The role mapping only happens after you send the request, so I'm not sure if that's in time for risk analysis - you will need to try that.
Are you a customer or a consultant - anyway, feel free to contact me if you need further help integrating CUP and IdM. This is an evolving interface with many possible scenarios, so it's not easy to give you good advise without seeing the full picture.
Frank.

Publish reports to a role and roles to user

Hi,
What does it mean ..
Publish reports to a role and roles to user
can anybody give a detail what exactly it mean ? In implementation which stage it comes into picture ?/
Thanks,
Debasish

Hi,
This publishing option is available to you when you open the query in Query designer as 8th button in top panel. To publish in a role , you should have that role to be assigned to you.
With rgds,
Anil Kumar Sharma .P
Message was edited by:
Anil Kumar Sharma

How to hide users' (and roles and organization) list from a user in OIM

Hi,
Admin (xelsysadm) has created a user in OIM. Now if that user is logged in to OIM Self Service (http://<url>/identity), he can see other user in his organization, along with list of roles, role categories, organizations etc. I have requirement to hide all the administration links from end user. Right now, he only has "All Users" role, and doesn't have any admin role, but can see all these administration links. What do I need to do to hide these links from end user? Do need to remove "All Users" role, or assign any other role, or do something in entitlement or in access policy ??
Thanks.

Thanks Karthik for you reply. It helped a lot.
Steps, just for reference...
1). Create SandBox
2). Activate
3). Customze and view by source
4). Select your link which you want to hide
5). Edit Visible properties and use #{oimcontext.currentUser.roles['SYSTEM ADMINISTRATORS'] != null}
6). Save
7). Publish
8). Test
Edited by: 966405 on Feb 20, 2013 3:50 PM

What are Roles and Role entry points in the context of windows azure?

I am just starting out with my journey towards understanding azure. I have a vague idea about the Web and Worker roles.
So when I am publish-deploying a website on azure from visual studio, am I doing something with respect to roles? Am I starting up a Web role?!
RoleEntryPoint: But this is actually related with the web/worker roles and services. My understanding is that the RoleEntryPoint is some code which is executed when you deploy "services" on the azure cloud. These services either have a web role or
a worker role.
What is "services" in this context? So what traditional (on-premise) app would be analogous to a service that has a web worker role? A WCF service or WebApi? Or can it be a website? So would a service having a worker role be something analogous to
a "windows service"?
And finally RoleEntryPoint. I don't get the use case. From what I've seen,
say you want to initialize some related services that support your main service, for e.g. a cache server, or a sql database, you have have the initialization logic written in these classes and make the code perform them.
There are definitely other ways to do this right? You don't need to necessarily tie the deployment of that main service with the initialization of the other services. They could be separate deployments, right?!
I am a bundle of mistakes intertwined together with good intentions

Hi deostroll,
From you post I understand you've read quite a lot about Azure, but I'm affraid there's still some misunderstanding on what all these terms mean.
Azure is a cloud computing suite of services tiered into three categories: IaaS, PaaS and SaaS. IaaS stands for Infrastructure-as-a-service and is an offering where Microsoft allows you to run your own virtual machines. You will handle everything from software
patching, network connectivity (from the application level: virtual networks etc.), software installition and configuration etc. Basically everything you would do today on your own premise except for whatever concerns hardware (bare-metal). PaaS stands for
Platform-as-a-service, and is a middle offerint, where Microsoft selects some VMs and is responsible for periodically patching this machines. You don't have to care about IIS or whatever existing applications there are on the VM either, because it's Microsoft's
job to do this. Last but not least, SaaS stands for Software-as-a-service, and is the offering where you use a piece of software without even knowing what infrastructure exists behind it: I guess you've used some sort of webmail client before, right? That's
a SaaS.
When it comes to Windows Azure, IaaS is offered as Azure VM, PaaS is offered as Azure Cloud Services (formely known as Azure Hosted Services, should you get across documentation that uses that term instead) and SaaS is offered in the form of: Azure WebSites,
Azure Mobile Services, Azure Media Services and many more.
When you talk about either web roles or worker roles, you actually talk about two forms of roles that exist in the context of an Azure Cloud Service. Basically, when you create a cloud project from Visual Studio, you end up in adding either Web projects
which might (but not necessarily) be linked as a Web Role to your Azure Cloud Service. You may also add, to the same solution, Worker Role projects. As you've probably already guessed, whenever you add a Web role, the web project it references is a web project
in the literal term: ASP.NET Web Project, whether that is WebForms, MVC, MVC WebAPI that's all completely up to you. However, what is a worker role project, you might ask? A worker role project might be though of just as a console application. You basically
get absolutely no UI, but your code runs as long as it runs inside an infinite loop at some point. If the loop stops, just like a console application, your worker role will stop which will force the Azure FabricController to refresh your role. Consider the
FabricController has the guardian of all roles, which will auto-magically 'respawn' your roles whenever something goes wrong, whether that's a software issue in your app, in the OS or a hardware failure.
Moreover, keep in mind that every role in your cloud service project ends up in being created as a separate VM. What this means is that you will have separate VMs for each roles in your cloud service, so even if you create several web projects, you still
get one machine, with one IIS instances with a single web application (yours) for each of your cloud's roles. Same goes for worker roles.
I hope this information clears up some of the questions you might have.
Alex

WLST 92 - How to Create Global Role and Role Condition?

I'm currently using WLS 9.2 and trying to use WLST to create a global role and defining a role condition. Anyone know how to do so using WLST for WLS 9.2?
Trying to:
- create Global Role, testRole
- create condition where 'username = testuser'
thanks!

Did you find out a solution for this?

Web login (JSP, Servlet) with roles and users list stored using db4o

Dear all,
I would be grateful if someone of you (the masters out there) could help me with the build of an application where the first page will be a login page.
The users will be devided in 3 categories (user, editor, administrator) and there member information will be saved in db4o database.
If the user has not been registered in the past then a registration page should come up allowing him to be registered and keep his details in a db4o database on the same site.
I am using JSEE8 and the site will be sent to a Tomcat server on the net.
Please please please HELP

I am giving some code for to redirect as the user is, But before that you have to made a extra coloumn "role" in your security table. and put admin, user as respective roles.
doPost(HttpReq...........)
String user = req.getParameter("UserName"):
String pass= req.getParameter("Password");
Then Connect the database with ur code ie class.forName etc
String sql= "Select * from security_table where Username= ' "+user+" ' and Password= ' "+pass+" ' ";
Statement stmt = conn.createStatement();
ResultSet rs= stmt.exequteQuary(sql);
if(rs.next)
String S1=rs.getString("Username");
String S2= rs.getString("Password");
String S3= rs.getString("Role");
if(S1.equals(user) && S2.equals(pass) && S3.equals.(admin)){
req.sendRedirect(http:// full path name of the page)
else if( S1.equals(user) && S2.equals(pass) && S3.equals.(user))
req.sendRedirect(http:// full path name of the page)
}else
req.sendRedirect(http:// full path name of the Error page)
}

User roles and role mapping

I've just start as an intern in Change Management team that is helping to implement SD. My two tasks are to "develop SAP user roles specific to the new business processes" and "manage the role to position mapping for provision of security roles." None of the real employees in my team has ever done this, and my manager is now on three weeks leave. I'm new to SAP and I don't really know where to start. Can anyone offer any advice, or point me to some references? Thanks.

Intern,
Its a pretty cold manager who will dump a task on a inexperienced subordinate without any guidance or mentoring, and then take three weeks off.
Anyhow, you first need to get some insights as to what the expectations of the client are: What type of users will there be? What tasks will each user be responsible for carrying out?
You also will want to collect a list of names of the actual users. Your Basis people will tell you which bits of data will have to be collected in order to create users on the system
Next, you need to talk to the SD expert on your team about the solutions that will be implemented. Quotes? Consignment? Scheduling agreements? Pricing? Customer Service? Marketing? Customer Master? Material Master? The SD expert should be able to tell you at a very minimum which transactions should be made available.
There are standard roles available delivered in the system. These are pretty much un-usable as delivered, but they make a good starting point. Review http://help.sap.com/erp2005_ehp_04/helpdata/EN/b4/3f9c41919eae5fe10000000a1550b0/frameset.htm
and
http://help.sap.com/erp2005_ehp_04/helpdata/EN/06/57683801b5c412e10000009b38f842/frameset.htm
Once you have all the info needed from the client and your SD experts, you then design the supporting roles at a high level. I usually use an Excel Spreadsheet with two tabs: One tab listing roles to be developed, with all the transactions and authorization object limitations for each one; and another tab listing Users and the supporting data needed to create a user. If you are a Basis expert, you already know the next steps. If not, then you typically hand your designs to the Basis team for creation of the actual Roles.
Good luck. Remember not to treat your interns the same way you have been treated.
DB49

Link between queries and roles

Hello,
Could someone tell me if there is a way to have an overview on the link between roles and queries?
For example a table which give us a role and the liste of queries which are linked to this role.
Thanks in advance.
Hicham

Hi,
I also had same query :
mapping between the query/report and the role with technical names - BI Sec
Its a bit tricky.
Actually there are no direct linkage between queries and roles. However, you can look up S_RS_COMP in the roles that will help you identify which all queries the role gives access to.
Regards,
Zaheer
Edited by: Zaheer on Aug 28, 2008 4:19 PM

Add Role to Role Category

Hello Experts,
my scenario:
1) AD Group Reconciliation Task
2) Auto creation Role category "AD Roles" if it doesnt exists
3) Auto creation Roles based on AD groups in "AD Roles" Role category
Ive already done auto creation role category and roles in default category, but i still cant create roles in my category.
I think it could be done like this in role creation:
mapAttrs.put(RoleManagerConstants.ROLE_CATEGORY_KEY, key)
but how can i get Role category key of my category to var "key"?
Are there more links between role and role category?
Pls help.
Thanks.

public static String getRoleCategoryKey(String categoryName)
String roleCategoryKey = null;
RoleManager rmgr2;
Set retAttrs = new HashSet();
rmgr2 = oimClient.getService(RoleManager.class);
System.out.println("Creating....");
String ctxFactory = "weblogic.jndi.WLInitialContextFactory";
String serverURL = "t3://10.111.6.101:14000";
String username = "xelsysadm";
String password = "xelsysadm";
Hashtable env = new Hashtable();
env.put(OIMClient.JAVA_NAMING_FACTORY_INITIAL,ctxFactory);
env.put(OIMClient.JAVA_NAMING_PROVIDER_URL, serverURL);
oimClient = new OIMClient(env);
System.out.println("Logging...");
try {
oimClient.login(username, password);
} catch (LoginException e) {
System.out.println("Log in");
rmgr2 = oimClient.getService(RoleManager.class);
retAttrs.add(RoleManagerConstants.ROLE_CATEGORY_KEY);
retAttrs.add(RoleManagerConstants.ROLE_CATEGORY_NAME);
SearchCriteria criteriaM = new SearchCriteria(RoleManagerConstants.ROLE_CATEGORY_NAME, categoryName, SearchCriteria.Operator.EQUAL);
try
List roleCategories = rmgr2.search(criteriaM, retAttrs, null);
System.out.println(roleCategories.size());
boolean found = false;
Iterator i$ = roleCategories.iterator();
do
if(!i$.hasNext())
break;
RoleCategory roleCat = (RoleCategory)i$.next();
roleCategoryKey = roleCat.getEntityId();
System.out.println("FOUND!!!");found = true;
} while(!found);
catch(Exception e) { }
return roleCategoryKey;
- I just find interesting code, but it doesnt work, when i use it to my map:
mapAttrs = new HashMap<String, Object>();
mapAttrs.put(RoleManagerConstants.ROLE_NAME, "testrole");
mapAttrs.put(RoleManagerConstants.ROLE_DISPLAY_NAME, "testrole");
mapAttrs.put(RoleManagerConstants.ROLE_DESCRIPTION, "desc for test");
mapAttrs.put(RoleManagerConstants.ROLE_CATEGORY_KEY, getRoleCategoryKey("testcat"));
And with .browse() I even know my category key, but when i use it:
mapAttrs = new HashMap<String, Object>();
mapAttrs.put(RoleManagerConstants.ROLE_NAME, "testrole");
mapAttrs.put(RoleManagerConstants.ROLE_DISPLAY_NAME, "testrole");
mapAttrs.put(RoleManagerConstants.ROLE_DESCRIPTION, "desc for test");
mapAttrs.put(RoleManagerConstants.ROLE_CATEGORY_KEY, "21"));
- errors.
Whats wrong?

List of roles and corresponding transactions and infotypes

Hi Friends,
I want to prepare baseline list of roles and corresponding transactions and infotypes that we have access to in Production system. Please let me know easiest way.
Thanks,
Ankitha

In [this thread|Security - HR Authorizations; you'll find a similar question and some suggestions. Once you've got your roles it should be fairly easy to determine which transactions are in them.
Jurjen

Role and User not listed

Previously I had created a role and added a user. The user
waited several weeks to try to login and now is receiving a message
that his role is no longer valid. When I login to administer the
site his role is not listed and when I re-created the role I can't
add him because his name is 'grayed' out and indicates that he is
currently assigned to the previous role.
Has anyone else had this problem? How can I fix it?

When selecting "Database", a Planning Create will create (or recreate) the Planning application in Essbase. This will erase any Planing supporting detail, account annotations, etc. It will also (IIRC) blow away the Essbase database.
A Planning database refresh updates Essbase with metadata changes (if any).
You know, I've never tried doing a Create->Security Filters.
Now if you mean Administration->Manage Security Filters->Create -- that will just update the filters with whatever the latest and greatest dimensional security is. If you selected all of the filters, it is as if you did a Administration->Manage Database->Security Filters. The idea being you might want to target it if you have many users/large filters.
I think the first time that user logs in you will see the username in the Administration->Manage Security Filters list.
Going backwards, re your first question -- provision the username in SS with access to the Planning app (however you do that, groups, individually, etc.), and give him Essbase server access. Have him log in. All should be good to go.
Regards,
Cameron Lackpour

Any way to list users' roles and teams in the advanced fine list?

Hello,
Is there any way to list user's Roles and Teams in the advanced find list?
In general, I am looking for a technique to list the related entities of the main entity in the advanced find.
Thank you,

Unfortunately not. Advanced Find can only display records of one type - i.e. you can't show an entity, along with its related entities.
Also, the underlying entities that store the team membership and role membership are not available for output in Advanced Find.
Instead, you could create a report to display this data
Microsoft CRM MVP - http://mscrmuk.blogspot.com/ http://www.excitation.co.uk

Is there User Group and Role Reporting in SAP Enterprise Portal?

I want to know if there is a way to pull users statistics our of SAP Enterprise Portal like you can out of the R3 backend systems.
I would like functionality similar to the SUIM transaction. I know through user administration you can access any user, even a list of all users, and you can do similar lists with roles and groups. You can then access any of these things individually and look at their assignments. However, I want to do this on a large scale. I want to know for example every group that has a user assigned to it. Evergroup that has roles assigned to it. Or groups that have no user or role assignments. We have approximately 1904 groups in our Production Portal system and I am trying to clean up the groups that have no user assignment, but I don't want to look through them one by one.

Hi Chris,
There is no standard report available for this purpose. However all this information is stored in table UME_STRINGS.
You can write your own SQL queries to generate such reports. However please note that this table is not normalized, and it's a master UME table. You should use it strictly for READ ONLY purpose.
For a sample code you which i wrote some time back, you might refer:
http://forums.sdn.sap.com/thread.jspa?threadID=2088099&messageID=10859334#10859334
Thanks
Prashant

SharePoint's role and its task assignment

SharePoint's role and its task assignment list below:
*Workflow
*App
*PowerShell
*SharePoint migrering
*Enterprise Content Managment
*Business Intelligence
*social business platform
*SharePoint analyst
*SharePoint Enterprise Search
*Document management
*SharePoint Cloud
*SharePoint BDC (Business Data Catalog)
What more am I missing that is important to add?
Please remember that I'm a newbie in SharePoint 2013.

I understand you have added ECM but I would also add Records Management, Machine Translation Service and Community Sites.
If you want to add features then you should also include Office Web Apps, Cross Browser Support and Responsive Web Design.
Amit

Roles and Role List

Similar Messages

Maybe you are looking for