Roles for BI Developer

Hi All,
I have a 2004s system with BI 7.0 installed on it.
I provided them with a profile which was custom made from BW_Developer profile.
Now the issue that i'm facing is that my developers are not able to create a infosource. It says you are not authorised to view the infosource. I have provoded them with all the workbench related roles. moreover to ease the things i created a new role and assigned all RSA transaction but that too didn't sole the prob.
Can anyone tell what kind of role 1 can we given?
Else can anyone tell what are the roles specifically for BI Developers.

Hi,
you can use a template like the following:
S_RS_NEW_NW04S     BI: New Authorizations for NW2004s
S_RS_PL_ADMIN     BI Role: Planning Administrator
S_RS_PL_PLANMOD_D     BI Role: Planning Modeler (Development System)
S_RS_PL_PLANNER     BI Role: Planner
S_RS_RDEAD     BI Role: Administrator (Development System)
S_RS_RDEMO     BI Role: Modeler (Development System)
S_RS_ROPAD     BI Role: Administrator (Productive System)
S_RS_RREDE     BI Role: Reporting Developer (Development System)
S_RS_RREPU     BI Role: Reporting user
Don't forget 0BI_ALL in S_RS_AUTH if your Developper can see all the data auth relevant.
Don't forget S_DEVELOP for debug
Hope it helps

Similar Messages

Assigning Roles For XI Developer in SU01

Hi Experts,
After We Create a User in SU01, We have to Assign the Roles to that Created User.
What are the Roles we should Assign for the XI Developer Users...
Please Help me in this ....
Regards
Khanna

Hi Rajesh
the necessary roles to be provided for a developer in XI system are mentioned below.
SAP_SLD_DEVELOPER
SAP_XI_DEMOAPP
SAP_XI_DEVELOPER_ABAP
SAP_XI_DEVELOPER_J2EE
for further details, visit the link given below...
http://www.erpgenie.com/sap/netweaver/xi/xiauthorizations.htm
Cheers..
Vasu
** Reward Points if found useful **
Message was edited by:
Vasudeva Rao . Vonkolu

Need some tips for Database Developer Role.

Dear All,
Next week, I'm going to face an Interview for Database Developer role.
For this, I need some more & useful information on these recommended points.
1. Involve in a designing part of Data warehouse from
scratch
2. Create complex analytic queries on large data sets.
3. Analyse trends in key metrics.
4. Monitoring and optimizing the performance of the database.
Please help get the vital information on these points.
All help will be highly appreciated.
Thanks,

1. Involve in a designing part of Data warehouse from
scratch
Design Database...
This needs lot of information about business and its fonctionnalités, and so many.. Tables, relationships etc...
http://technet.microsoft.com/en-us/library/ms187099%28v=sql.105%29.aspx
Code Design...
SP's, Funcitions, Views, Sub queries, Joins, Triggers etc...
DW Design
DB size and number of reports and historical data details, reduce the normalization and etc....
http://technet.microsoft.com/en-us/library/aa902672%28v=sql.80%29.aspx
2. Create complex analytic queries on large data sets.
Its all based on your current database design, size, required output, data, performance etc..
4. Monitoring and optimizing the performance of the database.
Perfmon, Activity monitor, spotlight, custom queries, DMV's sp_whoisactive, execution plans, and many other thirdparty tools.. and may be best experience will give best view and clarity :)
Note : This is very big topic and its not easy to answer in few words or lines... :) goole it for more details...
Raju Rasagounder Sr MSSQL DBA

Initial roles for sap consultants in Development system .

HI all,
I am new in security, now I have to create one fi ,sd, mm,pp, abap users in my development server (ecc 6.0 in sql server). I need standard roles for there users.
Please give me security matrix.
Regards,
swathi-k

in tcode PFCG you can drop down the list of available roles as per your requirement and assign them to the users. you have to give the appropriate authorizations. In case you can find the role as per your requirement, then you have to create your own roles and assign them to the users.
follow for more details : http://help.sap.com/saphelp_nw2004s/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
Cheers,
-Sunil

Developer Role for CRM Functional Team

Hello,
I would like to have your inputs on creating a developer role for CRM Functional Team in Dev system.
I found a standard role SAPCRM_DEVELOPER , does it has sufficient Authorisations to carry out the config work in CRM or do we need any more additional Auth.
The team members also have IC AgentIC ManagerSrv Pro roles as well.
Thanks in advance
regards
sam

Hi,
You don't need a role to development team. You can assign the auth. in dev system and perform the tests in the specifics roles.
Best regards,
Caíque Escaler

Which tasks required for a Developer in a SAP project with SAP XI?

Dear all,
I'm a ABAPer (Developer too), i will join into a SAP development and maintenance project that use the SAP XI. In order to prepare for this project, now i should determine and study the "Specific Skills/Tasks required" for a ABAPer (Developer too) in development and maintenance project with SAP XI technology platform. I see in our forum with thread:
Roles for XI Programmer
that: A developer will take care of "Mapping Task" with "ABAP Mapping" or "JAVA Mapping".
If any person who participated in a project as same as my project (a SAP development and maintenance project with SAP XI platform), please help me to answer my question:
My question:
"Which other tasks required for a Developer in a SAP development and maintenance project with SAP XI platform (exclude Mapping Task)?"
Thanks a lot to all in advance (points will be rewarded for every valuable answers),
Vinh Vo

Hi,
You can check out the standard XI training content as well
Check the following links:
http://help.sap.com/saphelp_nw04/helpdata/en/84/e8763c997fda50e10000000a11405a/frameset.htm
TBIT40:
https://websmp109.sap-ag.de/~form/ehandler?_APP=00200682500000001337&_EVENT=DISPLAY&COURSE=TBIT40
TBIT41:
https://websmp201.sap-ag.de/~form/ehandler?_APP=00200682500000001337&_EVENT=DISPLAY&COURSE=TBIT41&LANGUAGE=
TBIT42:
https://websmp206.sap-ag.de/~form/ehandler?_APP=00200682500000001337&_EVENT=DISPLAY&COURSE=TBIT42&LANGUAGE=
TBIT43:
http://www50.sap.com/useducation/curriculum/course.asp?cid=60161651
TBIT44:
https://websmp102.sap-ag.de/~form/ehandler?_APP=00200682500000001337&_EVENT=DISPLAY&COURSE=TBIT44
Reward points if helpful...
PrasHanT

Partner Roles for Ship-To/Bill-To in BAPI SalesOrder

Hi,
I am currently developing a .NET web application that is using BO SalesOrder (e.g. BAPI Bapi_Salesorder_Simulate).
My problem is that I need to list all defined partner roles of a customer (debitor) to give an appropriate selection for the BAPIPARTNR as a SalesOrder parameter
e.g. (specify a Ship-To Address)
[BAPIPARTNR].Partn_Role = "WE"
[BAPIPARTNR].Partn_Numb = "<SAPCustomerNr>"
In the web application I want to list all pre-definied partner roles for "WE" of the given customer to be able to set it as "<SAPCustomerNr>" in the BAPI parameter.
This seemed like a standard requirement to me, but I could not find any BAPIs/RFCs to realize this. Does anybody have a suggestion ?
Thanks for a short reply,
Andreas Koschinsky

Hi again Andreas,
I get the hint, I have included the source together with the corrections you would need to make to get it working in your system (no warranty calls please!).
FUNCTION CUSTOMER_PARTNERFS_GET.
*"*"Local interface:
*" IMPORTING
*" VALUE(IV_KUNNR) LIKE KNA1-KUNNR
*" VALUE(IV_VKORG) LIKE E1KNVVM-VKORG
*" VALUE(IV_VTWEG) LIKE E1KNVVM-VTWEG
*" VALUE(IV_SPART) LIKE E1KNVVM-SPART
*" TABLES
*" ET_E1KNVPM STRUCTURE E1KNVPM
DATA LV_ACCOUNT_GROUP LIKE KNA1-KTOKD.
DATA LS_E1KNVPM LIKE E1KNVPM.
DATA LT_E1KNVPM LIKE E1KNVPM OCCURS 0.
DATA LT_KNVP LIKE KNVP OCCURS 0.
DATA LS_KNVP LIKE KNVP.
>>> BW Omit this section <<<
* Get account group of the current customer
SELECT SINGLE KTOKD FROM KNA1 INTO LV_ACCOUNT_GROUP
 WHERE KUNNR = IV_KUNNR.
IF SY-SUBRC NE 0.
* The customer is new so prepare to create roles.
 PERFORM CUSTOMER_CREATE_R3FUNCTIONS TABLES LT_E1KNVPM
 USING IV_KUNNR
 LV_ACCOUNT_GROUP.
ELSE.
>>> Up to here <<<
* The customer exists and has an account group.
* so read the knvp to get all available functions.
 SELECT * FROM KNVP INTO TABLE LT_KNVP
 WHERE KUNNR = IV_KUNNR
 AND VKORG = IV_VKORG
 AND VTWEG = IV_VTWEG
 AND SPART = IV_SPART.
 IF SY-SUBRC = 0.
* data available so read them
 LOOP AT LT_KNVP INTO LS_KNVP.
 MOVE-CORRESPONDING LS_KNVP TO LS_E1KNVPM.
 PERFORM PARTNER_NUMBER_EXTRACT(SAPLVV01) USING LS_KNVP
 CHANGING LS_E1KNVPM-KUNN2 .
 APPEND LS_E1KNVPM TO LT_E1KNVPM.
 CLEAR LS_KNVP.
 ENDLOOP.
>>> BW Omit this section <<<
 ELSE.
* create new roles according to the delivered salesarea
 PERFORM CUSTOMER_CREATE_R3FUNCTIONS TABLES LT_E1KNVPM
 USING IV_KUNNR
 LV_ACCOUNT_GROUP.
 ENDIF.
>>> Up to here <<< <<< - moved this line in change
ENDIF.
ET_E1KNVPM[] = LT_E1KNVPM[].
ENDFUNCTION.
That should get you going.
Cheers,
Brad
Oops! Just made a small change to ensure that the if statement was correctly closed.
Message was edited by: Brad Williams

Hi I need help in creating role for DEVELOPERS and HCM GUYS in ERP DEV. sys

Hi Experts
I am working as a Support Security Consultant. Now I have assigned to another implemenation Project.
My client asks to create 2 roles in DEV. system the requirement is:
1) He asks to create a role for develpoers in dev system fro devepment activities ( report creation, screen creation..etc..) and these people don't modify the HR related tables
2) He asks to create role for HCM guys in development system to work on HCM Configuration and to work on HCM areas but these people should not involve into develpometn activites
My questions is what are the tcodes we have to maintain in the roles to reach his requirement.
I asked the same thing to my Client he doesn' t provide any information
Please anyone help me on this
Thanks
Naresh

Hi,
for the first query please check auth object -Authorization Object S_TABU_DIS (Table Maintenance)
http://help.sap.com/saphelp_nw04s/helpdata/en/1e/e867408cd59b0ae10000000a155106/content.htm
No Worries
KG

Roles for Developers in XI

Hello All,
What are all the necessary roles to be provided for a developer in XI system other than those of mentioned below.
SAP_SLD_DEVELOPER
SAP_XI_DEMOAPP
SAP_XI_DEVELOPER_ABAP
SAP_XI_DEVELOPER_J2EE
And do we have to creat in user in UME for use in XI system in administrator's prospective.
Thanks in advance.
Farooq.

hi,
for roles for XI dev have a look at this page:
http://www.erpgenie.com/sap/netweaver/xi/xiauthorizations.htm
>>>>And do we have to creat in user in UME for use in XI system in administrator's prospective.
no, you don't need that
Regards,
michal
<a href="/people/michal.krawczyk2/blog/2005/06/28/xipi-faq-frequently-asked-questions">XI / PI FAQ - Frequently Asked Questions</a>

What is ESOA? What is the Scope/Role for Functional Consultants in eSOA.

Hi Experts,
1)     Does eSOA is a tool, application or module?
2)     What is the relation between eSOA and ECC6.0?
3)     What is the Scope/Role for Functional Consultants in eSOA?
4)     What I have to learn in eSOA?
5)     How it is useful for Functional Consultant?
6)     How it is useful for Customers?
7)     How much time it will take to learn eSOA?
8)     Where can get the Material?
9)     What all technologies I have to learn before I learn to eSOA?
I am working as a SAP HR Consultant. If I want to learn eSOA what are the pre-requisites.
I donu2019t know anything eSOA.
Please give me the answers.
Regards,
Ram

Hi Ram,
See the answers below
> 1)     Does eSOA is a tool, application or module?
ESOA is not any tool,application or module. Its a methodology/Architecture
> 2)     What is the relation between eSOA and ECC6.0?
ECC 6.0 provides some Enterprises Services through enhancement packages.
> 3)     What is the Scope/Role for Functional Consultants in eSOA?
FUnctional consultant should know which ENterprise Serrvices are available and which should be developed to carry out a business process.
> 4)     What I have to learn in eSOA?
.         Being a technical guy, there are things to be learnt like ESR, implementing designed serivces through ABAP or Java and consuming it. But being a functional guy, only awareness of what enterprise services are available and what they do and their input/output params and how they can fit into a business process is sufficient.
> 5)     How it is useful for Functional Consultant?
see above
> 6)     How it is useful for Customers?
Customers can move towards Service Oriented Architecture, get flexibility in changing a business process easily, maintaince cost is less
> 7)     How much time it will take to learn eSOA?
depends on your skills
> 8)     Where can get the Material?
lot of material in SDN
> 9)     What all technologies I have to learn before I learn to eSOA?
ABAP or JAVA,ESR ( being a technical consultant) , Web Services
> I am working as a SAP HR Consultant. If I want to learn eSOA what are the pre-requisites.
you should aware of basics of service oriented architecture
If you further want to clear doubts, do write up.
Regards,
Piyush

Sld roles for jdi developers

Hi,
we have the same ume (an abap system) for j2ee engines of JDI and SLD (they both are running on different machines). In the backend there is no role assigned to my user "X". In the UME, I assigned my username to JDI.Developers group (This group by default has JDI.Developer role and also LcrInstanceWriterNR).
I started my NWDS development configuration perspective and clicked on OFFLINE to login, i entered the username and password, I was able to login, but with a dialog with warning
"Name Server http://<servername>/sld/cimom is unreachable.
Landscape Directory <servername>:<serverport> HTTP response code: 403 Forbidden"
Since it was a warning, I ignored it and then clicked on import configuration now,and selected remote, a dialog popped up with the following exception.So, I think we need to assign some roles in SLD for this JDI developer. could you please let me know, what are those roles that should be assigned?
HTTP response code: 403 Forbidden
com.sap.lcr.api.cimclient.LcrException: com.sap.lcr.api.cimclient.CIMClientException: HTTP response code: 403 Forbidden
 at com.sap.lcr.api.cimclient.HttpRequestSender.newClientException(HttpRequestSender.java:516)
 at com.sap.lcr.api.cimclient.HttpRequestSender.processResponse(HttpRequestSender.java:407)
 at com.sap.lcr.api.cimclient.HttpRequestSender.send(HttpRequestSender.java:581)
 at com.sap.lcr.api.cimclient.CIMOMClient.sendImpl(CIMOMClient.java:195)
 at com.sap.lcr.api.cimclient.CIMOMClient.send(CIMOMClient.java:147)
 at com.sap.lcr.api.cimclient.CIMOMClient.enumerateInstancesImpl(CIMOMClient.java:436)
 at com.sap.lcr.api.cimclient.CIMOMClient.enumerateInstances(CIMOMClient.java:740)
 at com.sap.lcr.api.cimclient.CIMClient.enumerateInstances(CIMClient.java:983)
 at com.sap.lcr.api.sapmodel.JavaCIMObjectAccessor.enumerateInstances(JavaCIMObjectAccessor.java:211)
 at com.sap.lcr.api.sapmodel.SAP_DesignTimeConfigurationAccessor.enumerateInstances(SAP_DesignTimeConfigurationAccessor.java:168)
 at com.sap.ide.eclipse.component.devconf.DevConfManager$3.run(DevConfManager.java:596)
 at org.eclipse.swt.custom.BusyIndicator.showWhile(BusyIndicator.java:69)
 at com.sap.ide.eclipse.component.devconf.DevConfManager.listRemoteDevConfNames(DevConfManager.java:590)
 at com.sap.ide.eclipse.component.wizard.LoadDevConfPage.fillTable(LoadDevConfPage.java:225)
 at com.sap.ide.eclipse.component.wizard.LoadDevConfPage$5.widgetSelected(LoadDevConfPage.java:281)
 at org.eclipse.swt.widgets.TypedListener.handleEvent(TypedListener.java:89)
 at org.eclipse.swt.widgets.EventTable.sendEvent(EventTable.java:81)
 at org.eclipse.swt.widgets.Widget.sendEvent(Widget.java:840)
 at org.eclipse.swt.widgets.Display.runDeferredEvents(Display.java:2022)
 at org.eclipse.swt.widgets.Display.readAndDispatch(Display.java:1729)
 at org.eclipse.jface.window.Window.runEventLoop(Window.java:583)
 at org.eclipse.jface.window.Window.open(Window.java:563)
 at com.sap.ide.eclipse.component.provider.actions.DevConfNewAction.run(DevConfNewAction.java:46)
 at com.tssap.selena.model.extension.action.SelenaActionCollector$GenericElementActionWrapper.run(SelenaActionCollector.java:229)
 at com.tssap.util.ui.menu.MenuFactory$MuSiAction.saveRunAction(MenuFactory.java:1425)
 at com.tssap.util.ui.menu.MenuFactory$MuSiAction.run(MenuFactory.java:1391)
 at com.tssap.util.ui.menu.MenuFactory$DelegateAction.processInternal(MenuFactory.java:616)
 at com.tssap.util.ui.menu.MenuFactory$DelegateAction.access$100(MenuFactory.java:586)
 at com.tssap.util.ui.menu.MenuFactory$DelegateAction$BusyProcessWorker.run(MenuFactory.java:716)
 at org.eclipse.swt.custom.BusyIndicator.showWhile(BusyIndicator.java:69)
 at com.tssap.util.ui.menu.MenuFactory$DelegateAction.process(MenuFactory.java:610)
 at com.tssap.util.ui.menu.internal.MenuListenerFactory$ProcessAdapter.widgetSelected(MenuListenerFactory.java:172)
 at org.eclipse.swt.widgets.TypedListener.handleEvent(TypedListener.java:89)
 at org.eclipse.swt.widgets.EventTable.sendEvent(EventTable.java:81)
 at org.eclipse.swt.widgets.Widget.sendEvent(Widget.java:840)
 at org.eclipse.swt.widgets.Display.runDeferredEvents(Display.java:2022)
 at org.eclipse.swt.widgets.Display.readAndDispatch(Display.java:1729)
 at org.eclipse.ui.internal.Workbench.runEventLoop(Workbench.java:1402)
 at org.eclipse.ui.internal.Workbench.run(Workbench.java:1385)
 at com.tssap.util.startup.WBLauncher.run(WBLauncher.java:79)
 at org.eclipse.core.internal.boot.InternalBootLoader.run(InternalBootLoader.java:858)
 at org.eclipse.core.boot.BootLoader.run(BootLoader.java:461)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
 at java.lang.reflect.Method.invoke(Method.java:324)
 at com.sap.ide.eclipse.startup.Main.basicRun(Main.java:286)
 at com.sap.ide.eclipse.startup.Main.run(Main.java:795)
 at com.sap.ide.eclipse.startup.Main.main(Main.java:602)
Thank you

Hi Helmut & Sidharth,
Sorry for extending the thread, but I have few more questions. Please help me in this regard.
1. All the users are already in the ABAP System. I have only three users there, NWDI_DEV and NWDI_ADM. Please tell me what roles should I assign to these users in the ABAP system.
2. Where should I create the Groups "JDI.ADMINISTRATORS" AND "JDI.DEVELOPERS". It should be definetely in j2ee engine of JDI. am i right?
3. Where should I create the roles JDI.DEVELOPER AND JDI.ADMINISTRATOR. These should be created in j2ee eingine of JDI. am i right? and these roles should be assigned the actions
 JDI.DEVELOPER :
 CBS.Developer
 CMS.Display
 CMS.ExportOwn
 JDI.ADMINISTRATOR:
 CBS.Administrator
 CMS.Administrate
4. In the j2ee engine of JDI, I will assign the groups JDI.Administrator and JDI.Developer to the security roles LcrInstanceWriterAll and LcrInstanceWriterNR. Am I right?
5. In the ABAP Backend system, I will assign
 NWDI_DEV to SAP_SLD_CONFIGURATOR and
 NWDI_ADM to SAP_SLD_ORGANIZER
 as said in http://help.sap.com/saphelp_nw04/helpdata/en/4e/90a43f4aa1330ee10000000a114084/frameset.htm
are these roles enough in the ABAP backend system for these users or should I assign any other roles.
6. So, now where are the roles, SAP_XI_CMS_SERV_USER, SAP_CMS_ADMINISTRATOR that are in ABAP system being used by me? I didnt use it anywhere. Could you please let me know to which user NWDI_DEV/NWDI_ADM must these roles be assigned?
sorry for long list. would be great if you could comment on it.
Thank you
P.S: My Plan is to use this
user|abap backend role| nwdi j2ee engine| sld j2ee engine
nwdi_adm| sld_organizer| group jdi_administrators| nothing
nwdi_dev| sld_configurator| group jdi_developers| nothing
correct me If I am wrong?
Message was edited by: Reddy

Roles for XI Programmer

Hi all,
Next month I'll join to a XI Development project. Now I'm investigating the overall of SAP XI. I see it is an effective module which can help us integrate many system together.
But I see no place for an ABAP developer (programmer also) in this picture.
My question is:
"what are the roles for the ABAP developer in an XI Development project?"
can you send me some links about programing in SAP XI?
Thanks,
Chuong Hoang

Hi,
>
Chuong Hoang wrote:
> "what are the roles for the ABAP developer in an XI Development project?"
> can you send me some links about programing in SAP XI?
ABAP Developer has no specific role in XI, but his/her knowledge would help in completing the task bit faster. ABAPer might help in
1. ALE/IDoc Connections
2. ABAP Mapping
All about ABAP Mapping
https://wwwn.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/5c46ab90-0201-0010-42bd-9d0302591383
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/e3ead790-0201-0010-64bb-9e4d67a466b4
/people/sameer.shadab/blog/2005/09/29/testing-abap-mapping
https://websmp101.sap-ag.de/~sapdownload/011000358700003082332004E/HowToABAPMapping.pdf
/people/ravikumar.allampallam/blog/2005/02/10/different-types-of-mapping-in-xi
/people/r.eijpe/blog
ABAP Mapping Vs Java Mapping.
Re: Message Mapping of type ABAP Class not being shown
Regards
Ramesh P

Role for a key user in BW

Hi gurus,
I want to build a role for my BW key users - they should be able to build queries in BEx Query Designer on all available InfoProviders and display the results.
Which authorization objects should they get?
Is there any standard role good for that?
Regards,
Dorota

hi,
below are some of the roles:
S_RS_RREDE: Reporting Developer on Development System
S_RS_COMP & S_RS_COMP1: Authorizations for using different components for the query definition. This authorization object is very important for reporting
regards,
Arvind.

Office 365 API, error: The token has invalid value 'roles' for the claim type ''

Hi guys,
I am trying to develop a Daemon / Server application using the new Office 365 APIs. I have added a new application to Azure Active Directory. I am using cURL + the app ID and secret to get a JWT token, this is the exact request:
curl -X POST https://login.windows.net/TENANT_KEY/oauth2/token \
-F redirect_uri=http://spreadyDaemon \
-F grant_type=client_credentials \
-F resource=https://outlook.office365.com/ \
-F client_id=XXXX \
-F client_secret=XXXX=
I get back a JWT however it has no scopes for access set here is the decoded JWT claims:
"ver": "1.0",
"aud": "https://outlook.office365.com/",
"iss": "https://sts.windows.net/TENANT_KEY/",
"oid": "17fa33ae-a0e9-4292-96ea-24ce8f11df21",
"idp": "https://sts.windows.net/TENANT_KEY/",
"appidacr": "1",
"exp": 1415986833,
"appid": "XXXX",
"tid": "e625eb3f-ef77-4c02-8010-c591d78b6c5f",
"iat": 1415982933,
"nbf": 1415982933,
"sub": "17fa33ae-a0e9-4292-96ea-24ce8f11df21"
Therefore when I do a request to the exchange API endpoint I get the following response:
HTTP/1.1 401 Unauthorized
Cache-Control: private
Server: Microsoft-IIS/8.0
request-id: d08d01a8-7213-4a13-a598-08362b4dfa70
Set-Cookie: ClientId=WDALDNO0CAIOOZDZWTA; expires=Sat, 14-Nov-2015 16:40:59 GMT; path=/; HttpOnly
X-CalculatedBETarget: am3pr01mb0662.eurprd01.prod.exchangelabs.com
x-ms-diagnostics: 2000001;reason="The token has invalid value 'roles' for the claim type ''.";error_category="invalid_token"
X-DiagInfo: AM3PR01MB0662
X-BEServer: AM3PR01MB0662
X-AspNet-Version: 4.0.30319
Set-Cookie: exchangecookie=6bf68da033684824af21af3b0cdea6e3; expires=Sat, 14-Nov-2015 16:40:59 GMT; path=/; HttpOnly
Set-Cookie: [email protected]=[email protected]4Wbno2ajNGQkZKWnI2QjJCZi9GckJKBzc/Oy9LOzdLOy6vOycXLz8XKxoGaio2PjZvPztGPjZCb0ZqHnJeekZiak56djNGckJI=; expires=Sun, 14-Dec-2014 16:40:59 GMT; path=/EWS; secure; HttpOnly
Set-Cookie: [email protected]=[email protected]4Wbno2ajNGQkZKWnI2QjJCZi9GckJKBzc/Oy9LOzdLOy6vOycXLz8XKxg==; expires=Sun, 14-Dec-2014 16:40:59 GMT; path=/EWS; secure; HttpOnly
X-Powered-By: ASP.NET
X-FEServer: DB4PR02CA0026
WWW-Authenticate: Bearer client_id="00000002-0000-0ff1-ce00-000000000000", trusted_issuers="00000001-0000-0000-c000-000000000000@*", authorization_uri="https://login.windows.net/common/oauth2/authorize", error="invalid_token",Basic Realm="",Basic Realm=""
Date: Fri, 14 Nov 2014 16:40:59 GMT
Content-Length: 0
I have asked a stack overflow question here: http://stackoverflow.com/questions/26950838/office-365-api-error-the-token-has-invalid-value-roles-for-the-claim-type
Any help on the matter will be hugely appreciated, thanks!

Hi Manu,
To wrap this thread up; I have had an answer on stack overflow.
It appears that currently the grant type client_credentials is not supported, according to a comment on this blog post by Matthias' http://blogs.msdn.com/b/exchangedev/archive/2014/03/25/using-oauth2-to-access-calendar-contact-and-mail-api-in-exchange-online-in-office-365.aspx
"There is no way in the code flow to avoid username/password. We're working on a client credential flow for later this fall that will give you the functionality required to run background services. For this you will not need a username/password,
but the application will directly assert its identity and authenticate as itself."
Unfortunately I require client_credentials for a daemon process, Q4 is the scheduled release for support for this grant time.
Thanks for the help,
Nick

Do we have to have system admin role for pdk???!!!

Hi ,
Pdk Is meant for Java developers.and we have a requirement where developers will not be given system admin role, but just java developer role, that comes with PDK(to deploy, download, par applications)
i was going through the weblog
and in that it is mentioned ·
"To ensure that you have the correct permissions to run all the applications in the business package, you must be assigned to the following portal roles:
Role ID     Description
pcd:portal_content/administrator/super_admin/super_admin_role     Super Administration
pcd:portal_content/com.sap.pct/administrator/super_admin/com.sap.portal.super_admin_role     Super Administration "
if the pdk has to have system admin role, then there is no meaning that it comes with java developer role .
can anyone tell me if i understood it a wrong way .
please help
Thanks,
Lakshmi.

Hi Lakshmi,
The Java developer role only comes with Component manager and Component Inspector and some plugins for IDE.
To work just with PDK a Java Developer role is fine, but once the PAR is deployed, a developer has to login and create the iview from that par.For this he needs a Content Admin Role.
I have gone through the link mentioned by you and it says u need to have superadmin role,every user,conent admin role for all the iviews to work correctly which is true this way.
If your iview is talking to the backend system u need access to the backend and to create a System object u need a System Admin role.
So, along with the Java developer role, a developer has to have ContentAdmin and SystemAdmin roles.
Hope this helps.

Roles for BI Developer

Similar Messages

Maybe you are looking for