Roles in SAP BI

Hi,
I had a few single roles assigned to various composite roles.
Question:
As per my requirement I modified/updated few single roles to include new analysis authorization objects, There is not change in the Composite role assignment only change I made is to single roles to include new analysis auth objects.
Both the Single & Composite roles are currently used in Production systems, To make the changes I made in to effect will it be OK if I transport only single roles or do I need to transport Composite roles as well
Thanks

Hi
Thanks for the update
What is the impact if i don't transport Composite role.......
Reason because the single roles i worked is used in 20 different composite roles....the composite roles consists of other single roles (reporting roles) that are maintained in Production.....

Similar Messages

BP Role in SAP CRM 7.0

Hi Gurus,
As i am new to SAP CRM, not able to understand from where to start the config can anybody help in this regards.
Which are the steps to follow for BP-LEAD-OPPORTUNITY-QUOTATION
and also give your ideas regarding How to create BP Role in SAP CRM 7.0
Thanks in advance....
Regards,
Dinesh Deshpande.

Well, first of all you should do a business blueprint so that you know what business process you need to support. And then you can consider the actual implementation.
And then you can use SAP's best practice guides as a starting point when doing the actual setup. Here are some links:
http://help.sap.com/bp_htel603/BBLibrary/Content_Library_HTE_EN_US.HTM
http://help.sap.com/bp_crmv12007/CRM_DE/BBLibrary/html/BBlibrary.htm
/Anders

Setting the Roles in SAP

Hi,
I am integrating SAP with IDM. I have developed a code to create the user in SAP and at the same time trying to set the roles and timezone to the user. There is no problem in creating the user object. But, Roles and timezones are not set in the user object.
I need your help in setting up the values in SAP...
Thanks
Ilayarajan

Nikhil,
As you suggested, I have created an object to set the roles in SAP.
<Object name='SAP'>
<Attribute name='activityGroups' value='ROLE1'/>
<Attribute name='fromDate' value='07/15/2007'/>
<Attribute name='toDate' value='12/31/9999'/>
</Object>
* 'activityGroups' is the resource mapping variable. I am using this code snippet in my provisioning WF. But, the vaue is not setting in the SAP.
Could you Pls, tell me what changes I have to make to set the Roles in SAP.
Thanks
Ilayarajan P

SAP_AUDITOR* roles on SAP ECC 6.0

Dear all,
I am trying to check some roles existing in the Note 451960, which refer to some audit roles.
Looking for those role in my system (PCFG role name SAP*AUDITOR) I did not get the list of SAP standard roles .
Do you have some idea why? and what I should do in order I can have those standard roles in my system?
I will appreciate any help in this regard.
Thanks in advance.
FedeX

>
FedeX wrote:
> Dear all,
>
> I am trying to check some roles existing in the Note 451960, which refer to some audit roles.
>
> Looking for those role in my system (PCFG role name SAP*AUDITOR) I did not get the list of SAP standard roles .
>
> Do you have some idea why? and what I should do in order I can have those standard roles in my system?
>
> I will appreciate any help in this regard.
>
> Thanks in advance.
> FedeX
Put one more * and you'll find them. PFCG->SAPAUDITOR

Creating Roles in SAP ECC for autority in BO

Hi Guru's,
Can anyone point me to additional information about how provisioning works in SAP ECC for BO?
I am also looking for information on how to create some general roles in SAP ECC to transport into BO to control authority.
I have already read through the "Business Objects Enterprise Admin Guide".
Thank you in advance,
Steven

Hi,
to synchronize the roles you can use CUA. In CUA, you define 1 system as a central store for user administration and then distribute the users + roles + groups to the systems. You configure your EP and ECC to receive the user data from that system, therefor, you user information is in sync.
SAP Help: http://help.sap.com/saphelp_nw70/helpdata/EN/07/622441cd87a12be10000000a1550b0/frameset.htm
For more information, there is an SAP product: Identity Management.
SDN: https://www.sdn.sap.com/irj/sdn/nw-identitymanagement
To upload ECC roles to EP:
SDN Article: https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/06a0e690-0201-0010-4b9f-e529c345a831
User Mapping is for logging in to a backend, when the userid in the backend is different from the userid in the portal
SAP Help: http://help.sap.com/saphelp_nw04s/helpdata/en/f8/3b514ca29011d5bdeb006094191908/frameset.htm
br,
Tobias

Role of SAP vendors in Cloud Computing

Hi all,
I have come across several articles mentioning how SAP is adapting itself to enable its integration with Cloud Comouting.
I would just like to know that in case SAP moves to cloud computing, what will be the role of the the existing SAP vendors?
Will there still be scope for customer specific implementations?
Pls answer my querries.
Thanks in advance.
Regards,
Sattam

Hi Tushar,
The role of SAP BW Consultant in a Implementation varies from project to project and also on the requirements specifications.
Check the below thread for your understanding.
BI consultant role
Search the forums first and you will find lots of threads relating to the same.
Hope it helps.
Regards,
Raghu

Implications of uploading roles from SAP 4.7 to SAP ECC 6.0 EHP 5?

HI Gurus,
Please tell what would be the cons for uploading the roles from SAP 4.7 to ECC6.0 EHP5.
Would there be issues in doing the same?
Regards,
Sonu

Hi Sonu,
There me be changes in authorization object assignment for the roles. Some objects may be deleted and new objects may be addedd to the transactions.
Instead of uploading you can better get the list of transactions for every role and create them newly in ECC 6 EHP 5 system and maintain them according to the old roles.
Thanks,
Kranthi

Role of SAP Business Analyst

Hello Friends ,
I have orked various phases of a project , I do have interaction with technical team , functional team in SAP . but it will e greatful if anyone can come back to me on general duties of SAP Business Analyst resource. What are there usual tasks , if you can give me an idea for someone from FI area it would be great .
thank you so much to all,

Hi,
This link will explain the role of SAP Business Analyst
Business Analyst SAP
Re: Difference between Business Analyst SAP SD and SAP SD consultant
Please let me know if you need more information.
Regards
Sridhar M

How to maintain cluisterview for new business roles in SAP CRM2007

How to maintain cluisterview for new business roles in SAP CRM2007.
Table - CRMV_UI_NB
Regards,
Biplab

I also look forward to a 'solved' answer to your question.
In the meantime, I'm curious to know if there are any organizations today running SAP B1 HANA for their production system. Would you know of any?

Standard AC Roles in SAP GRC AC 5.3

Hello,
Can anyone list the STANDARD AC ROLES in SAP GRC AC 5.3 Suite for
1- RAR,
2- SPM,
3- CUP,
4- RT,
5- ERM,
6- GRC PC 2.5
7- GTS,
8- GRC Repository.
I know that the Standard AC Roles that are delivered for CUP are
1- AEADMIN,
2- AESecurity &
3-AEApprover.
Each role comes with different actions in them.
I need similar type of standard AC roles for the above listed modules.
Thanks!!!

Hello Varun,
Below are answers to your statements.
1- There are no portal roles for AC5.3 as such. There is portal role for RM which you have already found.
**ANSWER 1: *There are portal roles for AC 5.3. Kindly see the link http://help.sap.com/saphelp_grcpc30/helpdata/en/27/c67fe32e684e4c85125645dc5918ee/frameset.htm.***
*The role I found in from the above link.*
2- To access AC5.3 applications from portal you would have to create IViews etc.
ANSWER 2 Since SAP provides the predelivered roles, as seen in HELP.SAP.COM in above link, we need not create iViews. The custom IViews are required for custom roles, not the standard roles**
Thanks!!!
Edited by: abdul haleem on Jul 21, 2009 9:44 AM

Disabled standard role com.sap.pct.pdk.JavaDeveloper

Hi - I've logged an OSS but if anyone can help me quicker it ould be most appreciated;
the role com.sap.pct.pdk.JavaDeveloper can be found in the portal
content location
pcd:portal_content/com.sap.pct/platform_add_ons/com.sap.pct.pdk/Roles/com.sap.pct.pdk.JavaDeveloper
when i double click on that role it shows only one Workset called
Examples and within it a workset called OBN Examples
I searched the SDN and found this post:
/community [original link is broken]
forumID=53&threadID=19464&messageID=162992
which sounded exactly right. sure enough the role was assigned to the
administrator.once i removed it, the role is now not working for any of
my logons - test users or Administrator.
in addition we do not have the object com.sap.pdk.JavaDeveloper in our
system.
help
andy

sorry, probably haven't explained it well enough.
it used to have lots of entry points, yes. but none of them were visible in the portal catalogue, except one "Examples"
the linked post describes exactly the same problems. when i followed the recommended steps "remove the role from the Administrator account" in that post, the role stopped working, apart from the "Examples" workset. Apparently we are not using NWDI and apparently this has some relevance, in that we can't create the system alias for the webDynpro as the post also recommends.
to recap - the standard role, since unassigning it from the administrator account, now does not function for any user. only the workset "Examples" is visible in the role. this was the case before. trying to view the other objects in the role is the reason I was working on it., since we have a requirement to add the Portal Logviewer in to the content developer role, without giving them the whole of the PDK/PRT maintenance applications. it now transpires that they were not displaying and were hidden becasue they are not Iviews, but are components accessed directly.
Does it need to be rebuilt? if so , how?
thanks ,
andy

Import SAP BW roles to SAP BO withour prefix

Hello,
we are re-using our SAP BW authorizations roles for folder authorizations in SAP BO.
Therefore we import roles from SAP BW source system and add these roles to different BO-Groups. Folder authorizations are maintained for these BO Groups.
Import of roles works - but all imported roles / Groups start with a prefix "<SYS-ID>~<CLNT>@"
So if we promote groups/authorizations to qa and prod system we have to add BW roles in each system.
E.g.
     DEV-System:
          DEV~001@BW_ROLE --> added to BO Group "BW"
     Promotion to QA-System:
          BO Group contains Role DEV~001@BW_ROLE and QA~002@BW_ROLE has to be added.
How to avoid this?
There is a similar issue with user which has been resolved by maintaing registry setting.
HKLM\SOFTWARE\SAP BusinessObjects\Suite XI 4.0\Enterprise\Auth Plugins\secSAPR3\SimpleUsernameFormat
Thanks and best regards,
Christian
P.S. we are using BI 4.1

Hello Ingo,
A small clarification w.r.to security maintenance in BO w.r.to SAP report execution...
If I have roles created/maintained in SAP to restrict the access in terms of what data is available for an end user, and if these roles have been imported into BO and have been assigned to different groups as per the user grouping roles in SAP.
And later, if additional access in terms of data has been assigned to the SAP role....does the group on BO has to be changed as the data access provided is only on SAP side.
As my understanding is the groups on the BO side are only to dictate what level of access does the user have for BO tools in terms of changing/creating/deleting BO reports and not what kind of data is accessed in SAP.
Can you please confirm the same.
Thanks
Dharma.

What is the Role of SAP PI in SAP SRM?

Hello Gurus
I'm from SAP-XI background.
In my project I need to create a scenario from SRM ---> PI/XI ---> MDM.
I'm having the below queries regarding this scenario.
1) Do I need to download the "XI CONTENT for SRM SERVER and import it into PI server.
2) If so what is the exact location in the service market place from which I can download
3) What are the steps that need to be done between SRM and PI and also in SLD so that data will be sent from SRM to PI.
Can anyone answer my queries.
Thanks and Regards,
Pruthvi

Hi Pruthvi,
Mentioned below are the list of output medium for SAP SRM.
1. Email.
2. Fax.
3. Print.
4. XML.
Whenever SRM want to send data to another system in XML format and if you are not using SOA then PI is very much required to transfer the XML data to the target system. When you integrate SRM with ECC 6 EHP 4 or higher version then many documents are transmitted in XML format only and XML document is sent out of SRM using ABAP Proxy.
Since the XML data is sent out via ABAP proxy you have to import the integration objects for SAP SRM into SAP NetWeaver PI. you can find the same in the below location.
https://websmp103.sap-ag.de/~form/handler?_APP=00200682500000001943&_EVENT=DISPHIER&HEADER=N&FUNCTIONBAR=Y&EVENT=TREE&TM…
Steps involved :
1. Deploy the integration objects of SAP SRM into SAP NetWeaver PI.
2. Update the SLD with new business system data.
3. Check Active Process Integration in the transaction SPRO in SRM .
4. Go through the below steps :
     1) One RFC of type H to point to PI with all the details.
     2) Define the role of the business system in the server that you want to see(Sxmb_Adm)
     3)Connection between Business System and System Landscape Directory.
     3a)RFC destination LCRSAPRFC of type T for SLD connection.
     3b)RFC destination SAPSLDAPI of type T for SLD connection.
     4)Maintain the SAP J2EE Connection parameters for LCRSAPRFC and SAPSLDAPI in SAP J2EE      Engine
     5)Maintain SLD access details in Transaction SLDAPICUST.
     Please refer the section 1.3.1, 1.3.2, 1.3.3 and 1.3.4 in the document(as linked provided below)
SLDAPICUST should point to the SLD host server. If you have a central SLD installed on the Dev server, then it is ok that it is using the host and port of the Dev server.
PIAPPLUSER is the normal user that is used in trx SLDAPICUST (the user must have the role SAP_XI_APPL_SERV_USER).
'Lastly, will the gateway Server of SAPSLDAPI and LCRSAPRFC will be the same for both DEV and QAs systems in XI?'
5. Make the necessary confirmation in Integration directory for the relevant interfaces.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/70066f78-7794-2c10-2e8c-cb967cef407b?quicklink=index&…
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/e0ac1a33-debf-2c10-45bf-fb19f6e15649?QuickLink=index&…
Checking XI Settings - mySAP SRM: Basic Settings - SAP Library
Regards,
Suresh

How to create content bearing role in SAP BW/BI

We are configuring the Integration Kit for SAP and are at a place where we can now save a Crystal Report into a SAP BI role. How do you make a role a content bearing role so you can save a report into the role?

Hi Mike
Please have a look at the Installation Manual for the Integrated SAP Solutions. It lists the permissions you need for the content bearing role
Roland

Save Workbook in a role in SAP BI

Hi All,
I'm facing an issue in SAP BI 7.0 Security . I have created a Workbook role for a user which she is not able to view when she goes to RRMX>Save Workbook> . The user has all the required authorizations and she can see all the other workbook roles but there is just one role which she can't get in the list when she tries to save workbooks in it.
She can see the role otheriwse in the tab roles.
Any help is much appreciated.
Thanks and Regards
Manisha Nadir

Hi,
If you have no authorizations for update a role, you will not see it when trying to save a workbook(s_user_agr with activity 01,02,06 and the name of the role or * is needed). I made a special role for saving workbooks and also had the name of it in s_user_agr, you will find this when save the workbook in save workbook as and if there is already an other workbook in the role you will also see this in the option add a workbook to a role.
It is also possible that the workbook is called from history or favorites and if you then will save it you need a role as described before.
It is advisable to try this out with the trace on in st01. I noticed that depending of queries and workbooks saving, it uses s_rfc, s_cts_admi(tabl), s_rs_tools (themes for workbooks and webpublish is also an option) and the object in previous answers from this thread.
I noticed that if you start a query from roles, that only the roles with queries are shown, the same for workbooks.
Have fun
Bye
Jan van Roest

How to synchronize Identity System Roles with SAP Roles?

Hello, experts!
Could you give me an advice?
I'm trying to perform role syncronization between SAP R/3 and Identity Manager, but the default task definition (Resource Role Synchronizer) can't find a
SAP resource (for example method getResourcesSupportingObjectTypes can't find resource with attribute type activityGroups (SAP Roles)).
Do you have an experience with syncronization SAP and IDM Roles ?
How it is possible?
Thank you!

May be somebody knows what odjectType attributes like Roles (activityGroups) or Profiles has?

Roles in SAP BI

Similar Messages

Maybe you are looking for