Roles needed for AXL Serviceability access on CCM5+

So far, unless I add my application user to the superuser group, I'm unable to make any risport queries.
Has anybody figured out what role controls access to the AXL Serviceability interface?

Hi Stephan
Do you have any update to this problem? I am trying to run an application without the superuser rights, but I was not successful. The error message is: Server returned HTTP response code: 403 for URL: https:///realtimeservice/services/RisPort
Regards
RenÃ©

Similar Messages

AppUser configuration for AXL Serviceability

Since there's no role for AXL Serviceability and the AXL role doesn't seem to cut it, I tried defining my own role based on the Serviceability Admin role and I assigned read and update for the following services:
SOAP Backup and Restore APIs
SOAP CDR on Demand APIs
SOAP Control Center APIs
SOAP Log Collection APIs
SOAP Performance Informations APIs
SOAP Realtime Informations and Control Center APIs
SOAP SNMP Config API
However, that doesn't seem to cut it - does anyone know what other properties are required to access the various axl serviceability services?

Hi Stephan
Do you have any update to this problem? I am trying to run an application without the superuser rights, but I was not successful. The error message is: Server returned HTTP response code: 403 for URL: https:///realtimeservice/services/RisPort
Regards
RenÃ©

Backend roles neeed for user to access ESS related services

Dear Experts-
Can any one of you please point me to a document or let me know what exact role need to be assigned for a user on backend for him to access all ESS related services in Standard deployment.

read the note 857431
1129412   ESS: Authorizations and roles for WD services in ERP EHP3
844639    MSS: Authorizations and roles for WD services in ERP 2005
785345    Copying authorization default values for services
612585    New: Authorization default values for ext. services
The following roles were delivered for ESS with ERP 2005:
SAP_ESSUSER_ERP05: Single role, containing all non-country-specific
                    functions.
SAP_EMPLOYEE_ERP05_xx:   Single role with the country-specific
                          functions. Each country version has its own
                          role (with xx = country ID). The corresponding
                          composite role is SAP_EMPLOYEE_ERP05.

Roles Needed for Backend User

Dear All,
We want to know what are all the roles need to be assigned to the user in the backend to access the RFC's in VC.
Thanks..

Hi Krishnaveni,
As per m,y knowledge to access the data from the backend in VC you do not require any role assigning in VC perspective but all those things have to be done in portal.
Just go through the link:
Connecting To R/3 From Portal
This will give the steps.
After creation of the system you have to do some steps in VC
1.> open the model and choose data service
2.> there you can find the drop down of all the system aliases.Select the system alias name which you have created and then you can find all the data services.
3.> just drag in your board and complete the task.
And I hope it will be helpful for you.
Regards,
Nutan

Is a NID needed for DSL service?

I just signed up for "High Speed Internet" (aka DSL since FiOS is not yet available in Baltimore city). I am doubtful I will get the promised speeds of Downloads up to 3 Mbps / Uploads up to 768 Kbps because the wiring is so old from the telephone pole to the house that I do not even have a Network Interface Device (NID) on the outside of the house. I should add that I am about to install fresh wire on the inside of the house from where the phone line comes in to the point where the phone line will hook into the modem, so my inside wiring will be fine. Do I have anything to worry about? Will they definitely install a NID for me and redo the wiring from the poll to the house since it is 30+ years old? I should add that I do not have home phone service and do not need it either.
I just called Verizon to try and schedule the DSL technician and the one lady told me they turn on the DSL from a central location and there is no need for the technician to even come to my house so they will not install a NID while another lady told me that the technician will come out to my house and test the signal. I was just trying to be proactive today in calling to set up an appointment when I would actually be home since if they do install an NID they will possibly need access to the interior of my house to hook up my interior wiring to the NID. They wouldn't even let me push back the appt to a few days past the due date and none of my questions were answered.
I have a feeling that no matter what happens, it will be a fight to get them to replace the 30+ year old wiring that comes from the poll to my house. I am just assuming that this wiring is likely not new enough to get me the promised speeds (Downloads up to 3 Mbps / Uploads up to 768 Kbps). Anyone have any insight or advice for me?
Message Edited by RalphPa on 08-19-2009 06:33 AM

No NID needed. I had DSL (moved to FiOS), and my copper pair ends with a porcelain block. My guess is the copper pair is upwards of 70 years old (the house dates from 1926).I had DSL service for about 15 months with Verizon before moving to FiOS. The service to this house long predates NID's.
That's the good news. The bad news was that if I could hear thunder, my DSL service was down, and it also degraded substantially in bad weather. While on good days I could just about get to the 3mbps downlink, 650kbs was about the best I could ever do on the uplink. The modem reported horrendous losses (60+db) on the link, which mean fairly high transmit power on both ends which ultimately may impact modem life.
Anyway once you are installed, you can connect to the router/modem and see what the modem has been able to negotiate with the CO. It will be in the log everytime the DSL connection is initiated.
Ultimately the DSL performance depends upon how good or how bad the copper pair is between your premises and the CO. Even ancient copper can work quite well if the distances are short.

System processes needed for web service call

Hi experts,
one theoretical question: how about the system processes needed for a web service call? If have created a test service that does nothing except to wait for 10 seconds. When I call it from outside, no extra process is busy (as seen in trx SM50). Is it possible that one web service call (from outside -> SAP machine) does not need a DIA or BTC process on SAP machine?
Thanks in advance for your help!
Kind regards, Matthias

Hi,
Of course a web service needs a dialog workprocess to run.
But if you used the "wait" abap instruction, it may be that this instruction frees the work process ?
Regards,
Olivier

AXL: How to find fields needed for AXL command?

Hey guys,
i want to configure my CUCM via AXL and did a tutorial for add Translation Patterns. There are all the fields like blockEnable, networkLocation, routeFilterName, newPattern and so on.
But how can i find ou which field i need for other operations like addRoutePattern or addRoutePartition ?
Best Regards
Daniel

Hello again Daniel
You need two things:
1) Grab a copy of the AXL schema from your CUCM - go to http://developer.cisco.com/, then select AXL in the drop down on the right hand column. Once there, hit 'documentation'. Grab the AXL schema download, and while you are at it grab the database schema and XML admin guide.
2) If you arent' clear on the fields/values, then instead of trying an 'add' first, create a route pattern normally in the GUI. Then do a 'getRoutePattern', and look at the XMl that is returned to see what fields are and what values can be entered.
Regards
Aaron

SVI needed for WiSM service-port?

I currently have a vlan/SVI on my 6506 for the WiSM service-port. The WiSM has an address on the same subnet. To manage the WiSM, I either https to the Management interface address or use 'session slot X proc Y' from the the 6506. Since I am essentially only using two addresses from a subnet for this service-port I would like to free up the subnet. Can I keep my current functionality by having a vlan only (with the wism service-vlan XX command) with no SVI? Thanks.

Yes, correct. You dont have to have this as a SVI. You can just drop them into the vlan with no SVI. So long as the WiSMs have a service port and IP and they are on the same subnet in the same vlan you are good.
After you set this up do a show wism status .. You should see thet are all up.
In fact I bloged about a security issue with the service port and the SVI interface. Its a good read..
http://www.my80211.com/security-labs/2010/10/7/cisco-wism-config-practice-opens-svi-vulnerability.html
I hope this helps.

Authorization Role needed for change

Hi,
What role is required for user to do change/ display for IR objects .
After role assignment is there any other configuration to be done.
Currenlty we can only see objects in IR, dont have authorization for change.
What needs to be done.
Thanks.

Hi John,
Role: SAP_XI_Developer
SAP_XI_DEVELOPER (Composite)
SAP_SLD_DEVELOPER
SAP_XI_DEMOAPP
SAP_XI_DEVELOPER_ABAP
SAP_XI_DEVELOPER_J2EE
Notes:
No access to the Administration of the XI Tools URL,
ABAP
C SXI_CACHE to view the cache but not refresh it
C SXMB_MONI
C SPROXY
C SXMB_IFR
D SXMB_ADM
D SLDCHECK
D SLDAPICUST
SLD
D create/change Technical /Business System
D create Software Catalog (Product/Software Component Version)
D create/change Development (Name Reservation, Content Browser, Class Browser).
REPOSITORY
D import SWCV (Software Component Version) from SLD
D create new namespace under a SWCV
D create/change new or existing Integration Scenarios and Integration Processes because the Software Component cannot be changed
D create/change new or existing Interface Objects because the Software Component cannot be changed
D create/change new or existing Mapping Objects because the Software Component cannot be changed
D create/change new or existing Adapter Objects
DIRECTORY
D transfer integration scenario from Repository
D create/change Party
D create/change Service Without Party
D create/change Service Receiver Determination
D create/change Service Interface Determination
D create/change Service Sender Agreement
D create/change Service Receiver Agreement
RWB
C Component Monitoring
C Message Monitoring
C Performance Monitoring
C Alert Configuration
C Alert Inbox
C Cache Monitoring

Role needed for web-dynpro

Whar role/permission do i need to be able to access web Dynpro....
Ravi

Hi Ravi,
Suppose you want to access web Dynpro components in Enterprise Portal, there is no specific role for this in the portal. Whenever you creating iView, select the web Dynpro Template for this.
In NWDS, you have to deploy the web Dynpro Application before you should have to configure the J2EE Engine. Give the Server Name and Port Number for this and give the SDM Password while deploy the web Dynpro Application.
Note:You dont have SDM Password means, you ask BASIS Team for SDM Password.
I think this is helpful for you.
Regards
Prakash T

Roles needed for creating the alerts

Hi All,
I'm getting the below error in RWB when trying to open the alert configuration.
404 Not Found
The requested source doesnot exist
Is the above error due to not having roles ?
If so what are the roles that I need to have so that I can create an alert.
Thanks and Regards,
Pruthvi.

Hello,
I'm not sure if this error is in regard of roles. If it would, you'd get the 401 error (Unauthorized).
From the generic 404 error for XI/PI, check the blog "/people/krishna.moorthyp/blog/2006/07/23/http-errors-in-xi
If nothing there fits to you, check notes:
#750287 - XI 3.0 Runtime Workbench: Alert configuration does not start
#768456 - Troubleshooting Runtime Workbench XI 3.0
#813703 - XI RWB alert configuration is incompletely displayed
And last ensure you use the FQHN.
Restart the RWB service after all.
Regards,
Caio Cagnani

URGENT! BT line needed for LifeLine Service!

My parents are trying to get a phoneline installed into a new-build bungalow for my Gran who replies on a lifeline pendant. They called in the middle of March to order the phone number to be transferred to the new address only to be told the earliest that it could be done was 28th April! They eventually managed to get someone to agree to 8th April but that date was put back and they were promised 16th April, the day before my Gran was to move home, on that day aparently two engineers were supposed to turn up, because the 2nd engineer arrived before the first, he found initial work hadn't been completed and left the property. We're not sure whether engineers have even turned up as the wiring is already installed and the bungalow was locked. move date has come and gone and still no phoneline despite BT making various excuses. My Mum is at the end of her tether with the constant stream of excuses, today she's received a text message saying that the phone line is now active (the phone is dead) and when calling to report it, she's been told the order has been cancelled.
My Gran relies on lifeline and the lack of a phone means that this is putting her life at risk as well as unneccessary worry for my Mum and stress in trying to deal with the call centres who seem to have a different excuse everytime something is not done. Is there somewhere (preferably in the Uk) we can get in touch with so the phoneline activation can be managed properly as I do believe the overseas call centre staff do not understand and/or do not care about the seriousness of the situation we're in?
Solved!
Go to Solution.

Hi Stressed2015,
If you send over your Mums order details we'll chase this up. Please use the 'contact the mods' link in my forum profile to send in the details. You can find the link by clicking on my username.
Thanks
Neil
BTCare Community Mod
If we have asked you to email us with your details, please make sure you are logged in to the forum, otherwise you will not be able to see our ‘Contact Us’ link within our profiles.
We are sorry but we are unable to deal with service/account queries via the private message(PM) function so please don't PM your account info, we need to deal with this via our email account :-)
If someone answers your question correctly please let other members know by clicking on ’Mark as Accepted Solution’.

Roles needed for importing archives in IR

Hi masters,
can somebody tell me which roles we need to be able to import archives in the Integration Repository ?
Thx

hi elliot,
check this link for roles
http://www.erpgenie.com/sap/netweaver/xi/xiauthorizations.htm
regards
Ramesh P

Using SSL for Web Service Access

Hi,
I'm not sure if this the best forum, but this is technically a J2EE question.
I'm using JDeveloper and OC4J. I have a java class that I'm publishing as a stateful webservice; however, the only clients will be other java routines. (I generated a WSDL file and then stubs.) This webservice has to run on a Windows 2000 box inside of OC4J. I have this done and can call it from across the network from a Linux box. This all works fine. However, I need to add security preferably by going to SSL. I can't find out how to do this. Does anyone know? Do I manually edit the generated stub files? Any chance there is some sample code somewhere?
thanks,
Joe Gamache

Please look at Appendix A of the "Web Services Developer's Guide" from iAS v9.0.2 covers Oracle SOAP. The section, "Working With Oracle9 iAS SOAP
Transport Security", covers using SSL.
Here is a simple example with steps:
Prerequisites
1 . Suppose you have configured Apache to use SSL , that is
-     Apache has a valid server certificate
-     Apache requires the client certificate
-     Apache has a bundle of root certificates of CA with wich it can trust client certificates
-     Apache is in front of OC4J with mod_oc4j (9.0.2) or mod_proxy ( 1.0.2.2)
For more information on this please refer to Oracle9i Application Server Security Guide
2. Have a working knowledge of Oracle Wallet Manager
Steps
The following steps let you use an https web services client
1.     First you need a certificate store in order to store the private key , the client X509 certificate and some trusted authorities. This store in our case is a wallet exported by Oracle Wallet Manager.
2.     In order to generate a correct wallet you need :
a.     Start the Oracle Wallet Manager ( OWM )
b.     Create a new empty wallet
c.     Generate a Certificate Signing Request (CSR )
d.     Import the X509 certificate that the CA generated from the CSR
e.     Import the root certificate of the CA that trusts the server certificate you would like to connect to ( that of Apache )
f.     Export the wallet
3.     Let's call exported_wallet the wallet that we exported from OWM , and lets put it under c:\temp . Suppose that the wallet password is camarda.
4.     The JDK you plan to use for your client , in the extension directory ( that is $JDK_HOME/jre/lib/ext ) , must contains the following library
a.     jcert.jar
b.     jsse.jar
c.     jssl-1_1.jar
5.     Oracle SSL library use JNI in order to implement some low level encryption API , so you need a shared library usually located in $ORACLE_HOME/bin . For NT platform this library is njssl9.dll . Be sure to have this library in your path
6.     Now given a WDSL , use the Jdeveloper wizard to generate a proxy
7.     Modify the URL end-point from http to https
8.     Add to the proxy the following lines of code
System.setProperty("ssl.SocketFactory.provider","oracle.security.ssl.OracleSSLSocketFactoryImpl");
System.setProperty("ssl.ServerSocketFactory.provider","oracle.security.ssl.OracleSSLServerSocketFactoryImpl");
System.setProperty("java.protocol.handler.pkgs","HTTPClient");
System.setProperty("oracle.wallet.location","C:\\temp\\exported_wallet");
System.setProperty("oracle.wallet.password","camarda");
Example
In red : modified
In blue : added
import oracle.soap.transport.http.OracleSOAPHTTPConnection;
import java.net.URL;
import org.apache.soap.Constants;
import org.apache.soap.Fault;
import org.apache.soap.SOAPException;
import org.apache.soap.rpc.Call;
import org.apache.soap.rpc.Parameter;
import org.apache.soap.rpc.Response;
import org.w3c.dom.Element;
import java.util.Vector;
import java.util.Properties;
import oracle.xml.parser.v2.*;
* Generated by the Oracle9i JDeveloper Web Services Stub/Skeleton Generator.
* Date Created: Mon May 20 14:24:48 CEST 2002
* WSDL URL: http://26.2.197.119:8888/InterOp/Services.wsdl
public class AnagInquireServicesEJBStub {
public String endpoint = "https://26.2.197.119/InterOp/AnagInquireServices";
private OracleSOAPHTTPConnection m_httpConnection = null;
public AnagInquireServicesEJBStub() {
m_httpConnection = new OracleSOAPHTTPConnection();
public Element ricercaPF(String istat1, String istat2, String codiceFiscale) throws Exception {
System.setProperty("ssl.SocketFactory.provider","oracle.security.ssl.OracleSSLSocketFactoryImpl");
System.setProperty("ssl.ServerSocketFactory.provider","oracle.security.ssl.OracleSSLServerSocketFactoryImpl");
System.setProperty("java.protocol.handler.pkgs","HTTPClient");
System.setProperty("oracle.wallet.location","C:\\temp\\exported_wallet");
System.setProperty("oracle.wallet.password","camarda");
Element returnVal = null;
URL endpointURL = new URL(endpoint);
Call call = new Call();
call.setSOAPTransport(m_httpConnection);
call.setTargetObjectURI("AnagInquireServices");
call.setMethodName("ricercaPF");
call.setEncodingStyleURI(Constants.NS_URI_LITERAL_XML);
Vector params = new Vector();
params.addElement(new Parameter("istat1", String.class, istat1, Constants.NS_URI_SOAP_ENC));
params.addElement(new Parameter("istat2", String.class, istat2, Constants.NS_URI_SOAP_ENC));
params.addElement(new Parameter("codiceFiscale", String.class, codiceFiscale, Constants.NS_URI_SOAP_ENC));
call.setParams(params);
Response response = call.invoke(endpointURL, "");
if (!response.generatedFault()) {
Parameter result = response.getReturnValue();
returnVal = (Element)result.getValue();
else {
Fault fault = response.getFault();
throw new SOAPException(fault.getFaultCode(), fault.getFaultString());
return returnVal;
public void setMaintainSession(boolean maintainSession) {
m_httpConnection.setMaintainSession(maintainSession);
public boolean getMaintainSession() {
return m_httpConnection.getMaintainSession();
public void setTransportProperties(Properties props) {
m_httpConnection.setProperties(props);
public Properties getTransportProperties() {
return m_httpConnection.getProperties();
public static void main( String args[] ) {
AnagInquireServicesEJBStub a = new AnagInquireServicesEJBStub();
try {
XMLElement e = (XMLElement) a.ricercaPF("102030","102030","CMRGPP69M29D761K");
e.print(System.out);
} catch (Exception ex) {
ex.printStackTrace();
} finally {

What app and settings do I need for using VPN access

Will I find the app I need to install in the App Store and what are the settings for configuring a vpn

Depends. If you are downloading an app dedicated to VPN connectivity, you would need to consult the vendor. To simply connect via VPN natively:
Settings App > General > VPN > Add VPN configuration (and of course turn VPN ON).

Roles needed for AXL Serviceability access on CCM5+

Similar Messages

Maybe you are looking for