Roles, Worksets Users

Hi, i have the following escenario:
i have some iviews into some pages into a workset and that workset into a role called 'Home'. The field 'Entry Point' is set in the role and the workset
in the other hand i have a user called Director and this user is into a Role called Directors.
everything(iviews, pages, workset and role) have permissions for that role Directors.
the problem is that when i log into the portal(Administrator and Director users), i dont se the 'Home' role in the top navigation level.
i hope anybody can help me...
thx
regards.

Hi,
once again:
> I set up 'Entry Point' in the folder
> and in the role properties
No need for this. Period.
> In the permisions of the role
Role assignment does not work via permissions. Period.
This has been told twice now. I hope we got it cleared...
Now the question: Where does your UME role Director come from? Or is it a user, as written now: "i add the <i>user 'Director'</i>"?!
If the latter is the case, go to user administration, Roles, search for your user, edit the user, search for the role Home, assign this role to the user, save it(!). Done.
Hope it helps
Detlev
Message was edited by: Detlev Beutner
Now Yoav has been faster...

Similar Messages

Unable to open the "role" workset in User Administration

Hi,
I have installed Enterprise Portal 6.0 SP9 on Web AS 6.40. But when I goto the "role" workset of User Administration I get "page cannot be displayed".
So help required.
Regards.

Hi Pavanmeet,
I got the same problem. Try to upgrade to SP17
and it's solved. Otherwise you can use Firefox for this special site. No good solution - I must admit - but it's displayable with Firefox.
regards

Role / workset assigning depending on group / users

Hi All,
I have a role in top level navigation and two worksetsm (say workset 1 and workset 2 or say role 2 and role 3) in second level navigation.
I want to give Role A to every one, but workset 1 should be visible to some people and workset 2 should be visible to some other people.
How can I do this?
I have 2 ideas....
1) through code I can control roles / worksets and assign to groups
2) creating two roles with same name but with different ID's and assigning workset 1 to role with id 1 and workset 2 to role with ID 2. It will look like same role to end user but worksets are differnet.
Other than these 2 option, is there any more options i have????
Thanks,
PradeeP

I have 2 options is mind..
1. You create two roles with same name , different id, but you can utilize the merge property( open the role and check its properties), so that if a user has both the roles, he can see only one top level navigation role.
So even in futrer if you have requirement to show other worksets you can maintain them by this.
2. You can create two groups and assign the user to the groups depending upon the permission you have set for the roles.
Based on your requirements you can choose, I used 1st option in my project.
Regards,
Namrta Mahajan

Portal Installation : User Administration -- Role workset error

Dear All,
We have installed EP NW04 SR1 . Every thing is working fine, All the menus are coming up properly except when i click on the User Administration --> Role --> Role menu, its starts for some time and then gives "Page cannot be displayed, Operation aborted" . This error only comes for the Role workset. Every thing else is working fine.
It would be nice if i can get guidance as to how to debug this error
Regard
PN

Hi,
I am still unable to solve the problem. The same problem persists with the ROLE and User Mapping.
I try to open it and it gives the "page cannot be displayed, operation aborted " error
Help is appreciated
Regards
PN

To get the Roles, Worksets, iviews assigned to portal user using webdynpro

Hi..
I need to display the roles, worksets, pages and iviews that are assigned to a particular portal user using WebDynpro.
I tried to search in SDN and found a few blogs on this... but all are for DynPages. I could not find any inputs on how to achieve this in Webdynpro.
I am listing down the blogs for your reference :
1) /people/prakash.singh4/blog/2005/07/28/browse-roles-folders-pages-iviews-assigned-to-a-user-ep6-sp9-and-higher
2) /people/prakash.singh4/blog/2005/09/06/create-a-sitemap-for-your-portal
Please provide me your suggestions on how to display the roles, worksets, pages and iviews that are assigned to a particular portal user using WebDynpro.
Thanks and Regards,
Sayan Ghosh

Please use following code to get all roles assigned to user:
     IWDClientUser wdUser = WDClientUser.forceLoggedInClientUser();
     IUser user = wdUser.getSAPUser();
     String strRoleID = "", strRoleDesc = "";
     IRoleFactory iRoleFactory;
     iRoleFactory = UMFactory.getRoleFactory();
     // Get All the Roles of the User
     Iterator iteratorRoles = user.getRoles(true);//prtRequest.getUser().getRoles(true);
     // Loop through all the Roles
     while(iteratorRoles.hasNext())
          strRoleID = iteratorRoles.next().toString();
          try
               strRoleDesc = iRoleFactory.getRole(strRoleID).getDescription();
               wdComponentAPI.getMessageManager().reportSuccess("Role: "+strRoleDesc);
          catch(Exception e)
               wdComponentAPI.getMessageManager().reportException("Exception e: "+e, false);

Portal: Tab displayed but not assigned to any roles of user

HI Experts,
I have a problem need your great help.
When I logon portal as a specific user, there are 5 tab in home page. When I check the role list, 3 tabs doesn't assigned to any roles this user owned.
Then I try to copy current user into a new user, and logon in . There are only 2 tabs left, which belonged to assigned role.
How those 3 tab assigned into this user? Can we assign iView/Page/Workset directly to user without role?
Any suggestion appreciate. Thanks so much!
Edited by: Jalyn Liang on Nov 13, 2009 9:29 AM
Edited by: Jalyn Liang on Nov 13, 2009 9:30 AM

Jalyn Liang ,
You can find if the user id belong to a particular group with the following ways,
Log in as an admin and go to User Admin -> Users- > Seach -> Enter the user Id and serach for the user -> Select the 5th icon with the tool tip ->Assigned Groups"
or
User Admin -> Group -> Search for the group.
or
You can use UME API to find out whether the is belowng to a group though coding.
Ram

Combine Roles/Worksets

We are trying to limit the number of tabs that show up on the TLN to avoid scrolling. To do this we would like to combine a few of the Out of the Box roles/worksets (and a few custom). For instance I have a Workset called "My Work" which appears on the First Level of the TLN. I would like the Collaboration Room to show up on the Second Level when user is on this tab.
To achieve this I tried adding the "Room" workset to the "My Work" workset   So now under Collaboration Room Role I see My Work->Collaboration Room->Rooms.
However the Collaboration Room still shows up on the first level of the TLN. The "My Work" shows up on the second Level and "Rooms" shows up in the DTN. Not really what I was looking to do at all. So I was looking for helpful information (best practices, tips, ideas) on accomplishing this.
FYI... All Roles see the My Work workset (which contains three other worksets). When user clicks the My Work tab they see the three other items on the second level TLN. I am just trying to add the Collaboration Room to the second level of this existing workset for users that are also assigned to the Collaboration Room role.

I am looking to implement some custom admin roles so a Portal Administrator with System and Content Admin privledges would see one tab instead of two. It would look like this:
Portal Administration - First Level
     --Content Administration - Second Level
     --System Administration - Second Level
The role looked like this:
PortalAdminRole
   --Portal Admin Workset
Content Admin Role
System Admin Role
I created the Portal Admin role and Delta Linked the Content Admin and System Admin roles. I then assigned a user to the Portal Admin role - the Navigation was exactly what I wanted but I got all kinds of Permission errors when trying to navigation though Content Admin and System admin options (i.e., I couldn't see the Portal Content Browser).
So then I tried a different way with the role looking like this:
PortalAdminRole
    --PortalAdminWorkset
ContentAdminWorkset (mergeID matches Content Admin workset for Content Admin Role)
This option shows both Portal Admin and Content Admin worksets on Top Level and on Second Level of the Portal Admin workset I see another ContentAdminWorkset but it has nothing under it.
I could get the PortalAdminWorkset to merge with the ContentAdmin workset for Content Admin Role but this put the ContentAdmin worksets at Second Level instead of third and made my second level TLN have too many Tabs.
Hope this helps you understand what I am trying to achieve.

Unable to delete Role from User ID in SAP SOLMAN production system but able to from DEV with the same authorization, pls suggest

unable to delete Role from User ID in SAP SOLMAN production system but able to from DEV with the same authorization, pls suggest

Hi,
For SU01 role removal, you do not need S_USER_AGR with 02, and as you mentioned both authorizations available in production, if so trace should not show you the S_USER_AGR with 02 with RC=04.
I would recommend to do role comparison for the user performing the activity. and then check if you have the S_USER_AGR with 02 in user buffer SU56.
But ideally it should not ask you S_USER_AGR for 02 through SU01, so please take help of abaper to debug it.
Also put trace in non-prd to see if S_USER_AGR is getting checked with 02 for removal through SU01.
BR,
Mangesh

Error Message = 3205: '~WF_ADHOC-1446' is not a valid role or user name

Hi,
I have an Item attribute of type 'Role' ('CREDIT_COMMITTEE_MEMBERS') and I am using that attribute as performer for two notification activities.
For first notification, I create an adhoc role and assign it to the attribute and the notification goes successfully.
I want to send reminder to the people who have not responded to the first notification.
So I used the following query:
SELECT recipient_role
FROM wf_notifications
WHERE (message_name = 'MSG_TO_CREDIT_COMM_NEED_APPR' or message_name = 'MSG_REMINDER_CREDIT_COMM')
AND item_key = itemkey
AND status = 'OPEN';
The following code was used to update the Item attribute of type "Role"
FOR rec_cc_role_names IN cur_cc_role_names
LOOP
IF l_role_count = 0 THEN
l_role_users := rec_cc_role_names.recipient_role;
ELSE
l_role_users := l_role_users || ' ' || rec_cc_role_names.recipient_role;
END IF;
l_role_count := l_role_count + 1;
END LOOP;
wf_directory.createadhocrole
( role_name => l_role_name,
role_display_name => l_role_display_name,
notification_preference => 'MAILTEXT',
role_users => l_role_users,
expiration_date => NULL);
wf_engine.setitemattrtext
( itemtype => 'XXCCVOTP',
itemkey => itemkey,
aname => 'CREDIT_COMMITTEE_MEMBERS',
avalue => l_role_name);
The second notification activity is throwing the below error
Error Name = WFNTF_ROLE
Error Message = 3205: '~WF_ADHOC-1446' is not a valid role or user name.
Error Stack =
Wf_Notification.SendGroup(~WF_ADHOC-1446, XXCCVOTP,
MSG_REMINDER_CREDIT_COMM, 07-APR-10, WF_ENGINE.CB)
Wf_Engine_Util.Notification_Send(XXCCVOTP, 154009, 186344,
XXCCVOTP:MSG_REMINDER_CREDIT_COMM)
Wf_Engine_Util.Notification(XXCCVOTP, 154009, 186344, RUN)
Kindly help.
Thanks,
Amit

The users list was null for the role, which was causing the error. The query populating the user list was not returning any row.

How to add a role so user can do Export, Copy & paste Master Data?

How to add a role so user can do Export, Copy & paste Master Data? Thanks!

Add S_GUI to the user role.

How can I see which roles or users have access to a table?

How can I see which roles or users have access to a table?
For a given table, how can I see the grants, who and what?
Many thanks

dba_tab_privs.
Grantee can be a role or an user, as roles are fake users.
Sybrand Bakker
Senior Oracle DBA

Assigning roles to users programmatically

Hi,
I want to programmatically create roles, assign roles to users etc.
I saw at this thread
ADF Security Policy Store
the folowing scriptlet by Frank Nimphius
try {
IdentityStore idstore = JpsCommonUtil.getValidIdStore("idstore.xml.provider").getIdmStore();
try {
UserManager userManager = idstore.getUserManager();
RoleManager roleManager = idstore.getRoleManager();
Role adminRole = idstore.searchRole(Role.SCOPE_APPLICATION,"admin");
// create user
//TODO check for empty username and password
User newUser = userManager.createUser(this.username,this.password.toCharArray());
roleManager.grantRole(adminRole,newUser.getPrincipal());
} catch (IMException e) {
// TODO
} catch (JpsException e) {
// TODO
return null;
this is a TP3 scriptlet, is it still working on the 11g production?
I try it and i get a JpsException
oracle.security.jps.JpsException
at oracle.security.jps.internal.common.util.JpsCommonUtil.getValidIdStore(JpsCommonUtil.java:1004)
do I have to replace "idstore.xml.provider" with something else depending on my configuration?
thanks
Tilemahos

Hi Frank thanks for the answer,
I check this functionality at WLS embeded LDAP and I shaw your "How-to configure OID for authentication in WebLogic Server" post.
I manage to add users and assign them roles that i created at my application.
But what if I want to have a super user that can create new roles and assign them member roles?
eg.
Developer created roles (policy store):
accessPage1 ( granted all the necesery principals to access page1 )
accessPage2 ( granted all the necesery principals to access page2 )
Super user created roles
Role1 member roles :accessPage1,accessPage2
If i want my application to have that functionallity i must create roles programmatically wont I?
If there another way?
By the way I followed the advices at the following useful links
Chris Muir: http://one-size-doesnt-fit-all.blogspot.com/2008/12/configuring-wls-with-ms-active.html
Frank Nimphius's How-to configure OID for authentication in WebLogic Server
Edwin Biemond's Using OpenLDAP as security provider in WebLogic
Andrejus Baranovskis: Practical ADF Security Deployment on WebLogic Server
And I manage to add users of the Microsoft LDAP at the WLS
but I could't mekae them group members of my application groups (roles)
is this possible?
Thanks

Assigning Roles to Users and Groups

Hi,
We have installed EP 5.0 SP4...with Content Management...we configured the LDAP to Portal......all the users are maintained through LDAP only...the problem is assigning the Role's to user..here in portal how to assign the roles to the users...we are not getting the Role assignment option under Portal Admin TAB..is there any way to configure the roles to User's are Group's.....
it is an urgent assignment for me..help can be appreciated...
sudhir

Sudhir,
You can assign the roles to users and groups as below.
1. Select the System Administration in the top level navigtion
2. Select user administration
3. You can search for a specific user or a group from this iView.
4. Use the edit button to edit the profie of the user or group.
5. Search for the role in the search iView.
6. Add the role to the user of group and save.

Problem in assigning roles to users

Hi
I created Role in EP, which i want to assign to the users. i assigned that role to user. the user i not able to access the particular iviews. i attached some R/3 transactions iviews to that role. it says unable to lookup the system or system alias. when i assign that role to me, i'm able to access that iviews(R/3).
i have superadmin role permissions.
what default roles and permissions need to assign for users.
suggest me
thx
pradeep

Hi Pradeep,
In SP9 apart form creating a System, we need to assign permissions for users.
Follow this path:
System Administration -> Permissions -> <select your System in Portal Content> -> Open Permissions <on right click>. This would take you to the Permission Editor.
Here you need to add the user and assign permissions.
Please check this and let me know if its working.
Awaiting Reply.
Warm Regards,
Ritu

SECATT for assigning roles to users

Hi All,
How do we make the ECATT to work for the below scenario:
Users already have roles assigned to them. We need to add a new roles to the users which can vary in number based on the users job.
A simple ECATT script that was developed to add a single role to a new user does not work in the above case and gives an error of invalid batch input. How do I create a ECATT to assign role to user who already has a set of roles assigned (number of roles assigned to users differ, so I cannot assume to train the ECATT to assign a role on line X). Is there something I am missing while the ECATT script creation?
We are doing this from a CUA and its very difficult to assume how many roles a user could have.
Thanks,
Jay

Thanks Alex for the insight. For some reason SU10 is slow in the CUA environment and I wanted to avoid it but yes I finally had to use SU10. Talking to one of our ABAPer I came to know that even in their BDC recordings they get the error which I receeived, but he changes his program to skip all the lines with data and then fill the empty line.
In CUA environment, how do we create ECATT to delete a role from many users?
Thanks,
Jay

Roles, Worksets Users

Similar Messages

Maybe you are looking for