Roles in NWBC 4.0

Hi all
I am new in NWBC 4 and I am having this problem about authorizations: I created a page with page builder successfully. I tried to use this page and on simple lookup object (customer for example): I get a message "XD03" is not present in user authorizations. I am a bit confused because I have profile sap_all. Anyway I created a role with XD03 (to make a try) but with no luck.
I think I'm missing some concept I cannot see. On doc I read there is a lot of pages about roles, but are all about "page builder" authorizations.
Can someone please give me an hint ?
Thanks
Gabriele

Hi Gabriele,
If you want to see XD03 in NWBC, Just follow the instruction.
Go to PFCG & Create a Single role starting with Z or Y.
Below you can see Hierarcy & Role Menu
Select Role menu & click on create node, 2nd from the top.
Then click on Transcation and give T-code XD03.
Save.
Open NWBC with same user name & password. You will get the result.
Hope this helps you.
Regards,
Namsheed.

Similar Messages

Identifying the Side Panel role from NWBC

When an authorized user execute a Tcode with Side Panel assigned, the Side Panel will appear.
Question - Is there a standard report\mechanics whereby one could identify the Side Panel role associated with that Tcode?
Currently, my only method is to a brute search for the Application Alias via table AGR_HIER.   And then using description of the node to try to deduce what the Role is. Works OK, but not exactly the most direct approach.
Cheers
Damean

This report lists all roles with a classic transaction as a triggering condition, either linked directly as APPLICATION_ALIAS or through the node ID.
report zlistroles.
types: begin of nodefields,
agr_name   type agr_name,
object_id type menu_num_8,
reporttype type reporttype,
report     type extdreport,
appl_alias type menu_details_alias,
end of nodefields.
data lt_nodes   type table of nodefields.
data ls_nodes   type          nodefields.
data ls_nodes2 type          nodefields.
data lv_objid   type menu_num_8.
data lt_results type table of string.
data ls_results type string.
data lv_alias   type menu_details_alias.
data ls_match   type match_result.
data lv_length type i.
select agr_name object_id reporttype report appl_alias
from agr_hier into corresponding fields of table lt_nodes.
loop at lt_nodes into ls_nodes where appl_alias is not initial.
if ls_nodes-appl_alias cp '{*}'.
    find first occurrence of regex `\{[0-9]{1,3}\}` in ls_nodes-appl_alias results ls_match.
    if sy-subrc eq 0.
      lv_length = ls_match-length - 1.
      lv_objid = ls_nodes-appl_alias+1(lv_length).
      read table lt_nodes into ls_nodes2 with key agr_name = ls_nodes-agr_name
                                                  object_id = lv_objid.
      if sy-subrc eq 0 and
         ls_nodes2-reporttype eq 'TR'.
        write: / ls_nodes2-agr_name,
                 ls_nodes2-report.
      endif.
    else.
      find first occurrence of regex `\{TR=(.*)\}` in ls_nodes-appl_alias results ls_match.
      if sy-subrc eq 0.
        lv_length = ls_match-length - 5.
        lv_alias = ls_nodes-appl_alias+4(lv_length).
        split lv_alias at ';' into table lt_results.
        loop at lt_results into ls_results.
          write: / ls_nodes-agr_name,
                   ls_results.
        endloop.
      endif.
    endif.
endif.
endloop.

NWBC Roles

Hi Experts,
First of all I am functional consultant and need help in identifying the roles for NWBC 3. I am planning to use the new functionality in EHP4 called Reporting Financials 2 (see link below). It uses something called "Report Launchpad', do you know which roles in NWBC would call this report lauchpad? And one of the prequisites says "You have activated the BI Content of InfoArea Reporting Financials (EHP4)", could you please provide some information or guide me on how to do this.
And also are there any places where i can find NWBC roles pertaining to FICO and FSCM?
http://help.sap.com/erp2005_ehp_04/helpdata/EN/6A/CD7DBD74694AF3AC13B3C24A10DEF4/frameset.htm
Thanks in advance
Jen

Hi,
Try this hope this will help you..
Go to the T.code RSA1 then select BI Content..
Search " InfoArea for Financial Management and Controlling "
see the InfoProviders : Reporting Financials
Collect these objects and then activate them.
Regards
Bhuban

Portal roles & NWBC

Hi,
Can someone tell the context of the portal roles (PPM_admin, RPM_admin etc.) in Netweaver Business client. Suppose I want to restrict access to a user in NWBC what should be the procedure. For example I want to give a user only Portfolio Management role in NWBC, how will I achieve that in pfcg role. Currently the pfcg role SAP_BPR_PPM is assigned to all the users and hence all the users have the privileges of Project Management, Portfolio Management, REsource Management in the NWBC. For your information, I am using Netweaver Business client for HTML.
REgards,
Swami

Hi Thorsten,
Thanks for the reply. Yes I got it. In the meanwhile I referred to the note 1405902. It talks about how to restrict certain tabs and features based on the roles. But they are all related to the portal roles. Could you please kindly let me know how to remove tabs and features when one uses Netweaver business client (for HTML) as the front end? I am opening another thread for this.

Request Number is not generated for BRM "new" role creation

Hello Gurus,
I have configured BRM in SAP GRC AC 10, along with the workflow .
I have selected the following methodology
Define Role --> Maintain Auth >Analyze & Access Risk>Request Approval>Generate Roles>Maintain Test Cases
Role name : Y_TEST_BRM_FUNCTIONALITY
So i do the following steps and assign
1) Role approver as Mr. ABC & Alternate approver as Mr. QRS
2) Assign the Required transactions and do the RAR i.e i am done till step 3 of methodology
When i click "Initiate Approval request"
The approval triggers , and goes to the 1st stage as configured in MSMP
1) Power User Approval .
Here the Power User : EFG , open his workflow and see the request as
Role approval required for role Y_TEST_BRM_FUNCTIONALITY
The approver approves the request and then the request all together vanishes.
Unfortunately i am not able to search the request for that role from NWBC -->Search request by
Process Id : Role Approver Workflow
It gives blank !!
Hence neither i am able to find the request no able to do any debugging of it using
GRFNMW_DBGMONITOR_WD
Please note that the Request Id is created for any request in CUP.
Is it that i have to create a number range for BRM request ??
If so will you please let me know the object

Hello All,
I was wrong in posting the cause of problem.
Please note no "Request number" is generated for Role creation Request.
The problem was i was unable to search the Role Request approval status from "Search Request" via Process Id
It got resolved via SAP note 1643539 : UAM: Search Request not returning result for some Process Id.
My Issues is Resolved.
Thank You.
Regards,
Victor

SAP AC 10 : ERM working fails (Unable to add Actions,permission)to new role

Hello Gurus,
We have done configuration for Role creation via ERM in SAP GRC AC 10.
The configuration is done via BRF+ and MSMP ,when we try to create a new role via
NWBC > ACCESS MANAGEMENT>Role Management -->Role Maintenance.
We see that the correct "methodology" is selected which contains following steps
Define Role --> Maintain Authorization -->Risk Analysis -->Request Approval -->generation.
We go past 1st stage and when we are at Maintaining authorizations , the "edit" option is disabled
It is not possible to add any Action (Tx), Permission(Objects) to the role.
Is there something else that we need to configure or something that is missing ??
Please suggest.
Regards,
Victor

Hello All,
This issue was resolved , after i maintained a User as "Role content approver" and "Assignment Approver" Under "Owners/Approver" Of define role Tab.
Whole cycle ran w/o any problem.
Regards,
Victor

ARQ: Role Import does not show roles in the preview

Dear All,
Recently I upgraded our system to SP#14. Now when I try to import roles from NWBC->AM->Role Mass Maintenance->Role Import, it does not show roles in preview. Also, it does not import the roles specified. (either a range or full name of the role). It does not even give any error message.
I implemented SAP note#1897975 Role import does not show roles in the preview.
Still facing the same problem. Has any one faced this problem? Please suggest.
Regards,
Faisal

HI Faisal,
This note(1897975) you have to implement in Plug-in System, try to check the same once and let me know if it resolves our issue.
Regards,
Neeraj Agarwal

NWBC : Add MS Outlook - Blank Page

Dear Friends,
I want to add MS outlook in PFCG role for NWBC user,so I have created one BSP application for it with following code
<html> <head> <meta http-equiv="Content-Language" content="en-us">
<script type="text/vbscript">

</script> <title>Outlook View Control View Issue Demo</title>
<meta name="Microsoft Border" content="none, default"> </head>
<BODY BGCOLOR="#C0D6EA" TEXT="#000000" LINK="#0000EE"
ALINK="#EE0000" VLINK="#551A8B">
<p><input id="switchbutton" type="button" value="Switch View" name="btnSwitchView"> 
<input type="button" value="Create Message" name="btnNewMessage"><p>
<OBJECT classid=CLSID:0006F063-0000-0000-C000-000000000046
id=ViewCtlFolder width="100%" height="430" border="1"
Codebase="http://activex.microsoft.com/activex/controls/office/outlctlx.CAB#ver=9,0,0,3024">>
<param name="Namespace" value="MAPI">
<param name="Folder" value=folder>
<param name="View"
value="Day/Week/Month View With AutoPreview"
<param name="Restriction" value="">
<param name="DeferUpdate" value="0"></OBJECT>
</body> </html>
and also added the BSP application in PFCG role.now when I click on the outlook node in NWBC only a BLANK page opens with no error or dump.
Kindly guide me on where am I making mistake ?
same issue was raised previously on scn .
Adding Microsoft Outlook 2010 to NWBC blank page
Chohan.

Hi Chohan,
Can you try to open the canvas in a standalone browser and see what happens? I assume that the BSP page works if you call it directly?
Another thing I would do is run a HTTP traffic trace (using Fiddler) and see what traffic comes back. Finally I would look at the NWBC verbose trace file and see if it has any clues in it.
I have noticed that the IE control that NWBC uses to render web pages does not behave exactly like standalone IE... but I don't know much more about it (yet).
Hth,
Simon

No violations after creating Roles

Hi Experts,
So I have kind of a weird situation that Im hoping I can get some help with. Around a month ago we decided to upgrade GRC from version 10.0 to 10.1 and before the upgrades all SOD simulations were working fine but now for some reason is working on some roles and in others is not working. So for example if I create a new role with access to SU01 and PFCG, import in to NWBC, run synch jobs, etc. the role show "No Violations". Now if I run the analysis on a role that was available on the system before upgrade with those same tcodes I see the violations. I try re-importing all the roles on NWBC, re-generating the Ruleset all the logical connections look ok, running a full synch and nothing so far.
If I create a new role in the backend and run a synch the role gets to NWBC so data is getting from point A to point B, the problem is that some how the ruleset is not creating violations for new roles. What else can I check?

So I have a few more updates.
So today I did some more testing and this is what I see. I created a new risk and functions with SU01 and PFCG and after the approval process (risk approval, function approval) I executed the SOD again and the new violations are reflected. Because of the result of the previous step I decided to re-Upload the rule set and then I got the message “No rule set selected”, I did several more synchs and generations and after a couple of hours it was working but still no luck, the system only shows some of the violations from the rule set.
Current status of the issue is:
1. Only some violations are visible
2. If I create a new risk and execute SOD, the new risks are reflected
3. After re-Uploading ruleset and running synch and generate still only some violations are showing.
any other ideas of wat could be the problem?

Composite role not showing in Access request screen. (BRM not used)

Dear All
I have created a composite role in backend system with 2 single roles.
a. I have imported the single roles using the NWBC screen.
b. run the auth sync job.
c. imported the composite role as a techincal role using the NWBC import screen.
the import procedure was successfully completed.
But when i try to search for the role in Access request screen for a user - i can only see the single roles & not the composite roles?
Pls advise
Raju

Hi Raju,
In addition to Alessandro's valuable inputs, you need to be sure whether or not you were able to generate the composite roles (in NWBC).
The final stage of the composite role has to be in complete status.
Regards,
Ameet

Issue while creating a custom Catalog in HR Renewal.

Hello Experts,
I have created a custom Catalog and assigned chips to it using the Suite Page Builder Admin Page. The catalog id is also assigned to a new role in the backend. I can now see the catalog id status changed from the draft to released in the SPB. However when I try to open this role using NWBC HTML I encounter the following error "The user menu tree for user XXXXXX with role XXXXXXX is empty. Please contact your system administrator.
Could you please help resolving the error or provide some hints to check if i have missed something.
Thanks and Regards,
Chetan

Hi Chetan
Take a look at 1378659 - NWBC known issues & what to check when ....
http://service.sap.com/sap/support/notes/1378659
Search for "The user menu tree for user"
Result=
"ERROR: "The user menu tree for user <user> is empty."
expected menu entries don´t show up
(partially missing or completely empty)
generally that indicates that simply
no role is assigned to the user -> PFCG
role is assigned but folder is defined as a "link collection" instead of a "service map" - see:
http://goo.gl/OEq9qa
OR check the following application specific chapters:
Work Center (top level navigation) is not shown in NWBC for HTML:
https://service.sap.com/sap/support/notes/1879939"
KR Michael

SRM user settings not populated

Hello,
We are using SAP SRM 7.02 with NWBC and we are testing this in sandbox.user id has been assigned to sap_all and new and SAPSRM/employee_ehp1 role.
NWBC Launched --> Click on SRM user settings---> not populating the details/page navigation to details page is not opening.Pls see the screen shots.
When click on the SRM user settings same page is opening.
Please provide you inputs to resolve this.
Ranjit.

You observation is correct and it is the standard design of such portal roles as SRM Administrator, SRM Strategic Purchaser, or SRM Operational Purchaser to not have "personalization", but only Employee Self Service role.

Account Change Problem in Workflow

Hi All, i have created new client in GRC development system. i have configured all workflow but now i am getting error while submitting for new role. NWBC > Access Request creation > change account > add new role > submit then i am getting error : An error occured during processing. can anyone say which workflow configuration is still pending. thanks in advance. Thanks, Arif

Hi Arif,
Check this below thread.
Access Request - An error occured during processing
Unable to Submit Access Request form - “An error occured during processing error”
Hope this might give you idea.
Thanks
KH

Portal Groups not Importing after Synchronization

Hi all,
I am currently running GRC 10 SP 15 and have completed the AC 10 EP Config guide. So far I have managed to complete all steps in the guide including the synchronization. However, when I try to import the roles the nwbc mass role import, I return 0 results. I have check the GRACLCONN table and the portal groups are definitely there. Does anyone know why the Mass Import would be failing?
Thanks,
James

Hi,
Only ABAP system based Technical roles can be imported via the Mass Import tool without the use of Import sheets. If you are using a import sheet already, just double check your entries. For EP groups, you will have to maintain and upload a sheet manually.
Ensure that the role type is set to 'GRP' in the sheet and the roles have been synced in via the Repository Object Sync job first.
Cheers.

Role Menu for ESS (WDA) in SAP NWBC

Dear experts,
I am implementing ESS&MSS using SAP NWBC. For this use the following documentation:
Configuration of the Role Menu for ESS (WDA) in SAP NWBC - SAP Documentation
SAP delivers the composite role SAP_EMPLOYEE_ESS_WDA_2.
1. Call up transaction PFCG and create or copy your customer-specific role based on the standard shipped composite role for ESS (WDA), SAP_EMPLOYEE_ESS_WDA_2 in the customer name space (Z_*.
I have copied this role with the singles roles
My first question: Should modify my composite role for add a new folder that content two applications WDA customer or this should do it in the single role ? How Can do it?
My second question:
What I dont can display the folder in top screen "Employee Self-Service"---"Employee Self-Service XX"---"Employee Self-Service2"(See Image leff)
Thanks

Hi Armin,
For NWBC you must place transactions under the second folder down (or at least this is how its works for NWBC for ERP roles). Standard NWBC roles have 'Role menu' as top folder and then (generally) one main folder under that - like 'Purchasing'. Transactions should go under this folder or under subsequent sub-folder.
There are additional parameters using right click 'Details for Net Weaver Business Client' under PFCG also - but assume your documentation has explained this to you.
Regards,
Craig

Roles in NWBC 4.0

Similar Messages

Maybe you are looking for