Roles Creation

Hi All,
I am trying to retrieve the roles of A User programatically.
I have used
userInfoControl.getAvailableUserRoles(req)
and also tried using the
P13nResource resource = new HierarchyRoleResource(entAppName,webAppName,EntitlementConstants.P13N_ROLE_POLICY_POOL,"");
Map m=Authorization.getRoles(resource,cxtHandler);
I have entered some roles in teh Portal Admin consoles Visitor Entitlements and also in Admin Cosoles Security Realms.
But I am not getting any roles at all when I run the weblogic workshop(9.2) except Anonymous Role.
I really require this very urgently.I have been struggling on this but am not getting any output.
I will really greatful if any one you explain me where I have gone wrong.
Basically I just want to display all the roles that are in the console.
Please give me an idea.
Thanks.
Edited by srilkrishna at 03/16/2007 8:15 AM

The below is the API to create Adhoc role 'ABC'
declare
l_role_name varchar2(50):='ABC';
l_role_display_name varchar2(50):='ABC';
begin
WF_DIRECTORY.CreateAdHocRole (
role_name => l_role_name,
role_display_name => l_role_display_name ,
language => 'AMERICAN'     ,
territory => 'AMERICA' ,
     email_address => '[email protected]',
     notification_preference => 'MAILHTML'
commit;
end;
Please note that if you want the users under a role is to receive the email notification, set 'email_address' value to null and notification preference value
to MAILHTML, MAILHTM2 ....etc
The users should be set proper email address and notification preference value to MAILHTML, MAILHTM2 ....etc
The following is the API to add users(TESTUSER1, TESTUSER2) to Ad-hoc role 'ABC'
declare
l_users varchar2(100):='TESTUSER1 TESTUSER2' ;
begin
WF_DIRECTORY.AddUsersToAdHocRole (
role_name => 'ABC',
role_users => l_users
commit;
end;
The user names should be separated with space.

Similar Messages

  • Request Number is not generated for BRM "new" role creation

    Hello Gurus,
    I have configured BRM in SAP GRC AC 10, along with the workflow .
    I have selected the following methodology
    Define Role --> Maintain Auth >Analyze & Access Risk>Request Approval>Generate Roles>Maintain Test Cases
    Role name : Y_TEST_BRM_FUNCTIONALITY
    So i do the following steps and assign
    1) Role approver as Mr. ABC & Alternate approver as Mr. QRS
    2) Assign the Required transactions and do the RAR i.e i am done till step 3 of methodology
    When i click "Initiate Approval request"
    The approval triggers , and goes to the 1st stage as configured in MSMP
    1) Power User Approval .
    Here the Power User : EFG , open his workflow and see the request as
    Role approval required for role Y_TEST_BRM_FUNCTIONALITY
    The approver approves the request and then the request all together vanishes.
    Unfortunately i am not able to search the request for that role from NWBC -->Search request by
    Process Id : Role Approver Workflow
    It gives blank !!
    Hence neither i am able to find the request no able to do any debugging of it using
    GRFNMW_DBGMONITOR_WD
    Please note that the Request Id is created for any request in CUP.
    Is it that i have to create a number range for BRM request ??
    If so will you please let me know the object

    Hello All,
    I was wrong in posting the cause of problem.
    Please note no "Request number" is generated for Role creation Request.
    The problem was i was unable to search the Role Request approval status from "Search Request" via  Process Id
    It got resolved via SAP note 1643539 : UAM: Search Request not returning result for some Process Id.
    My Issues is Resolved.
    Thank You.
    Regards,
    Victor

  • BRM-No Role Creation

    Hi gurus,
    I have just upgraded my GRC 10.0 to SP18 and when I access to create a new role in the NWBC, the button is in grey, I mean, I can not start the creation of it. However, I can modify the roles without problems.
    Any idea of what can be happening?
    Thanks,
    Regards,

    Hello All,
    I was wrong in posting the cause of problem.
    Please note no "Request number" is generated for Role creation Request.
    The problem was i was unable to search the Role Request approval status from "Search Request" via  Process Id
    It got resolved via SAP note 1643539 : UAM: Search Request not returning result for some Process Id.
    My Issues is Resolved.
    Thank You.
    Regards,
    Victor

  • Role Creation in CUP 5.3

    Hello,
    I'm trying to understand the concept of what is called "role creation" in Compliant User Provisioning.
    My understanding is that the "create role" option in CUP (configuration>Roles>Create Role) means simply adding the "attributes" such as a business process, functional area, system, or company, to the SAP roles that you imported into CUP.  
    It seems that, with CUP, once you have imported SAP roles and "adjusted" them (adding attributes), you are no longer operating PFCG and SU01 in the SAP backend system. From this point on, everything is done in CUP (provisioning) and ERM (creating additional roles).
    Please tell me if I'm wrong.
    HM

    HM,
      The create role option in CUP is mainly for legacy/non-cup supported systems. This way you can follow the standard workflow process for LDAP/Windows/legacy system. In this user provisioning and role assignment will not be done through CUP and will be manual. This is very important for some companies as they want user to go through same process if they want to get access to any system and not only ERP system.
    The below statement is wrong.
    It seems that, with CUP, once you have imported SAP roles and "adjusted" them (adding attributes), you are no longer operating PFCG and SU01 in the SAP backend system. From this point on, everything is done in CUP (provisioning) and ERM (creating additional roles).
    If you don't have ERM then you will have to use PFCG. Once you have CUP, you don't have to use SU01.
    Regards,
    Alpesh

  • How to raise role creation/modification request in AC 10

    We are implementing AC10. I have issue more related to the process followed than technical. Please suggest from your experience.
    We found that we can raise the request for new user account, role assignment to user, etc in Acess Request(formerly CUP), but we cannot raise the request for role creation, role modification. This is directly done in Role management.  My question is, how the security admin will recieve the requests for creating or maintaining the roles. Is it necessary to use ticketing tool for users to raise the request for role creation and modification.
    Thanks everyone for your valuable solutions.

    Dear Ashish,
    Whatever you have mentioned is correct to have the common platform for every request, either for user creation or role creation.
    But what we decided earlier, that the end users can raise the request in CUP directly, rather than involving security admin. But after realizing that there is no request type for role creation, I think we have to use our ticketing tool as a common platform.
    Request will come to security admin from the ticketing tool and than he will create the request in CUP, thereafter it will follow the approval workflow.  Only problem I see in this, it goes to the manager twice, once in ticketing tool and than through CUP workflow. i think we need to take out the manager stage from the workflow.

  • Idm-Vaau Rbac role creations and mapping

    Hi All,
    I'm working on the integration between Idm and Vaau's Rbacx (role based access control) tool for role creation and provisioning...I've imported the spml.xml and SPMLGetObjectsform.xml into Idm for the SPML calls between Rbacx and Idm.
    The challenge I'm facing is mapping the attributes of Rbacx roles to enable the attributes to be populated in Idm...I'm able to export roles into Idm, but they are not populating with any attributes eg. resource type, resource attribute etc. I'm uncertain as to where I have to map these properties and do any customization for this to work. I would appreciate if anyone who has worked on this or know how to do this, to pls give me some pointers/share your experience. I don't have any documentation to refer to and am doing everything on trial and error basis.
    Any help is greatly appreciated!
    Thank you.

    Hi newbie,
    Were you able to solve this issue? I am facing the same problem while assigning resource attributes for a created role using a custom workflow.
    This is where I set the resource attributes in my workflow:
    <Action id='1'>
    <expression>
         <block trace='true'>
         <set><ref>role</ref><s>assignedResources[AD].attributes[AD Groups].valueType</s><ref>ADGroupsValueType</ref></set>
         <set><ref>role</ref><s>assignedResources[AD].attributes[AD Groups].requirement</s><ref>ADGroupsRequirement</ref></set>
         <append><ref>role</ref><s>assignedResources[AD].attributes[AD Groups].value</s><ref>ADGroupsValue</ref></append>
         </block>
    </expression>
    </Action>
    where <ref>ADGroupsValue</ref> contains the attribute value.
    thanks,
    Lokesh

  • Approval of role creation

    Hi All
    I need to create a WET for role creation, this is simple But I need to incorporate approval of the creation of the new MX_ROLE entry. I can only find documentation/guides on how to implement approval of role and privilege assignment. Does anyone know if it is possible to setup approval on creation on a new entry?
    Kind regards,
    Heidi

    I have tried to implement the MX_INACTIVE solution. Now it is not possible to see the role on the "Adminstrate"-tab, and there is an approval task on the "To do"-tab. When I click this task, details on the role are displayed properly, but when I try to process the request by clicking the "Show request"-button (button name translated from Danish, it might be translated differently...) I get an error: "Access denied".
    I have set correct approver on the approval task, and I was able to process approval requests, before I set the role to inactive.
    On the approval task, I have checked the "Use inactive entries" checkbox.
    Does anyone have an idea what could be wrong?
    Kind regards,
    Heidi Kronvold

  • Role Creation using CAT Scripts

    Hi,
    Step by step procedure needed.
    I need role creation using scripts(SECATT),org values that needs to maintain
    is full authorization.
    pls help me.
    ram

    Hi Ram,
    There is a SECATT tutorial here: http://www.*********************/tutorials/secatt_user_create.html
    If you learn that & the principles associated with SECATT then you can apply that to creating and populating roles.
    In my opinion SCAT is much easier to use, though less flexible,

  • Customizing Role creation form??

    Hi,
    We have requirement to customize the Role creation form. We have to store extra information in the role object. I know that we can store extra information by using properties attrinute of the Role. But the question is how to expose this to administrators through UI?
    I don't find any form mapping for role creation in the "Forms and Process Mappings" section. Anybody knows how to achieve this requirement? What is the default form used for role creation?
    Thanks in advance.

    There's a userForm configuration object called "Role Form" that is used when you create a new Role.
    You can add a new field to this form like so;
    <Field name='properties.Department'>
    <Display class='Text'>
    <Property name='title' value='Department'/>
    <Property name='disabled'>
    <Boolean>true</Boolean>
    </Property>
    </Display>
    </Field>
    Then the Department attribute will be saved against the Role attribute.
    Is this what you're looking for?
    Cheers,
    Paul

  • Program for PFCG Role Creation

    Hi Guys,
    I have a requirement for creating a program that will automate the Role Creation (Transaction PFCG)
    I have the following Questions.
    Is it Really possible via Program.
    The expectation is in selection screen user will give the Standard and Derived Role after execution he expect the role to be created.
    If anybody have experience in the same scenario kindly share me.
    Regards,
    Vijay.

    Try with PFCG_START_PFCG
    G. Lakshmipathi

  • GRC AC Request Role Creation

    Hello all,
    I noticed that by default GRC AC doesn´t have a Request Type for Role Creation. Normally how this is done? I mean, if someone realizes that a new role is necessary, how can this person report the need for a new role creation? What are my option here?
    Regards,
    SAP Legend

    Hi SAP Legend,
    You can not request a new role to be created via an Access Request workflow. You still need a business governance strategy where someone has to raise a request outside of the GRC system for the new roles through the right channels deemed fit in your company to get the new role made. Maybe you have a support ticketing system in place or some SAP security department you can raise the formal requests to.
    The BRM Role creation/maintenance workflow runs separately from the Access Request workflow. Further more, the definition and creation process of roles via GRC should only involve and be used by Business Process Owners/Role Owners and the Authorisation security team only, i.e. not general end users.
    A role build methodology will have to be set up and then the underlying approval workflows (based in MSMP technology also, like the AR workflow).
    Once the role has been built (either via back end PFCG) or via GRC using the BRM methodology and approval flows, the role will be available to the end user to request via AR.
    Hope that helps.

  • Authorization Object for role creation for query display?

    Hi,
    Can Anybody here tell me what is the Authorization object that we use for role creation for query display?
    I want to assign a role to the newly designed query! that query does not have any role so far!
    Pls suggest me
    Thanks,
    Ravi

    Hi,
    I could make the authorization tab green by entering the authorization object!
    But user tab still remains red as it is not allowing me to enter my username in the user tab!
    in the user tab  i am unable to enter my user name?
    Any suggestions?
    Thanks,
    Ravi

  • Mass roles creation

    Hi all,
    I am supposed to create 2000 roles in our system.
    Is there any way to create roles in mass.
    If there please provide me the details to do the mass roles creation.
    Thanks in advance.
    Regards,
    Suganya

    > I am supposed to create 2000 roles in our system.
    > Is there any way to create roles in mass.
    How do you mean 'in mass'? Do you want 2000 identical copies of one role, are you talking about derived roles or do you need to create 2000 completely different roles?
    Please give us some more information. (And prepare for the fact that some tasks do not have shortcuts...)
    Jurjen

  • JmsQueueConnectionFactory error post user role creation

    Hi All,
    I installed OIM R2 Ps2 successfully. I tried to create a user , got the error javax.naming.NameNotFoundException:While trying to looup jms.QueueConnectionFactory. But the user got created when i rechecked.
    Same error popped up during role creation. But the role too got created.
    please help me to resolve this error. I dont know what kind of impact this error will create later.
    pls find the below screenshot.
    Thanks.

    Here is the solution :
    The issue was with metadata that has been imported as part of patch deployment (BP06).
    /db/ldapMetadata/EventHandlers.xml has been imported with wrong name. Just deleted meta data it start working.
    Regards,
    Krishna

  • Role creation and authorization objects in sap

    Hi
    i want to know the full relationship between  creation of roles , authorization objects ,authorizations in web as abap
    Please explain the process in detail the use of PFCG and all its options and how to create Z roles

    Although, It would be a very long document to explain the query, I have briefed you on the concept. I hope it leads you well.
    - Roles are nothing but a container for authorizations. A role represents a specific part of an employeeu2019s job.
    - The R/3 authorization concept permits the assignment of either general and/or finely detailed user authorizations. These assignments can reach down to transactions, field and field value level.
    For e.g. If a user wants to create a PO we can restrict him on:
    u2022     Activity : Create/Change/Display
    u2022     Org elements like Company Code, Plant, Purchase Organization etc
    u2022     Document type etc.
    - Authorization objects are grouped in an object class such as Materials Management: Master Data (MM_G). Each Object Class may have several authorization objects and within each object we can have several authorizations (max. up to 99).
    - Fields :The permissible values for the fields constitute the authorization. For e.g. ACTVT (Activity) is a field with permissible values of 01 (Create), 02 (Change) & (03 Display) for the object M_MATE_CHG (Material Master: Batches/Trading Units). Value * for field BEGRU signifies all possible values.
    - An authorization allows you to carry out an R/3 task based on a set of field values in an authorization object. By themselves authorizations do not exist and they only have a meaning inside a profile
    - Authorizations are contained within profiles and these profiles are assigned to users manually or automatically via role assignment. When you assign the field values for all the authorization objects and save system will auto generate a profile name.
    - Authorization check are included in the transactions source code in standard SAP R/3.A user may carry out an action if the authorization check is successful for each field in the object.
    Edited by: Subramaniam Iyer on Nov 27, 2008 12:08 PM

  • Mass role creation and addition of tcodes to role menu

    Hi Folks,
    We've a requirement of building 1000's of single roles for an implementation. Our security matrix is ready with the role names and the list of tcodes to be embedded in each of these roles. What I would like to know is if we can automate a part of the process of role building i.e the following 3 steps only.
    1. Creation of the Role
    2. Addition of the tcodes in the role menu
    3. Save
    I'm aware of Ecatt/LSMW through which we can create the roles but i'm not sure if we can add the tcodes to the menu of the roles since the number of tcodes to be populated in each role will vary.
    Could anyone of you shed some light if it is possible to automate the addition of  tcodes to the role menu taking into consideration that each role will have different number of tcodes to be added to the menu and what's the best possible way to achieve this if there exists one.
    Thanks in advance for your time and suggestions!
    Guest...

    Whilst I agree that there are probably too many roles being built here, which is more of an issue with the role design / strategy, the issue of how to easily create a role for a given list of transactions is something that SAP supports via the import menu from text file option in PFCG.
    Yes you may need to write a script to cycle through all the possible role names, but we have recently had to build some roles based on actual usage, so exported transaction usage history to excel and then formatted the transactions into text files that could be imported to build the role menu.
    You will still then need to ensure any object authorisation object have the correct values set - i.e. not just starred in - but as one of the pains in build a role is getting the menu to look reasonable, I'd suggest having a look at this approach.
    Copy Menus -> Import from File is the function in PFCG in the menu tab for the role you are building
    OSS note 389675 has details of what the text file of transactions for the menu should look like.
    That should answer the question posed, rather than criticising the role design being followed.

Maybe you are looking for

  • Autorizacao Formated Search

    Boa tarde, Preciso aplicar uma autorizacao com uma query, onde preciso passar por todas as linhas do grid do pedido de venda, para verificar se existe uma condicao em uma das linhas. Alguem sabe como fazer essa query para verificar cada linha, ou alg

  • Safari can't open a window

    Hi, I've updated iTunes, Safari and other updates, and than used the computer to set up iPad. Ever since, Safari won't open a window. I've tried removing any CT (toolbars) as indicated in other post but there aren't any. I've also tried configurating

  • Latest Java release (1.6.0_25) crashes systematically on Firefox

    The online software developed by my company uses multiple Java applets on the page. When we tested the latest Java update (1.6.0_25) last week, we realized that Java would unexpectedly stop when used with Firefox. I managed to create a test page to r

  • Query diferent output between 11gR1 and 11gR2

    We have a complex query which has been working fine in 11gR1 and after changing aplication to 11gR2 it started generating an error. This simple table and query shows the same error I am seeing. In 11gR2 this first select gives an error ORA-00979 In 1

  • How to add new "text" field in GL item fast entry?

    Hi Gurus, Is that possible to add "text" column or field in GL item fast entry. For example, if i go to Txn F-04, i enter all the details then i go to: "Goto>GL item fast entry (shift+F8). Now you will see layout (GL item fast entry). So back to my q