SAP Authorization in XI for SLD is red in PFCG

Hi
To perform the post-installation activities in XI 3.0 on Windows and Oracle DB, I created the XISUPER user in SAP Exchange Infrastructure client:
As a Dialog User created role for XISUPER are follow..
SAP_BC_AI_LANDSCAPE_DB_RFC
SAP_SLD_ADMINISTRATOR
SAP_XI_ADMINISTRATOR
SAP_XI_CONFIGURATOR
SAP_XI_CONTENT_ORGANIZER
SAP_XI_DEVELOPER
SAP_XI_MONITOR
After saving user all the role are green except the roles are SAP_BC_AI_LANDSCAPE_DB_RFC
SAP_SLD_ADMINISTRATOR are RED.
Please help me in this regards,
Jayson.
Edited by: Julius Bussche on Aug 13, 2008 10:53 PM

Hi,
Generate the role and perform usermaster comparison.
Its should work fine!!
Rakesh

Similar Messages

  • What User authorization objects needed for connecting to SAP from xMII?

    We eneter a SAP user and password for connecting to SAP from xMII to retrieve the metadata of the incoming IDocs.
    When I specify a user with SAP_ALL user profiles, the IDocs are received properly in xMII. If I specify a user with privileges to run only certain transactions, IDocs are not received in xMII.
    What user authorization objects are needed for this user to connect to SAP from xMII?
    Thanks,
    Sara

    Sam,
    I turned on the SAP System trace for this user and figured out the following auth. objects are required for receiving IDocs in xMII:
    C_TCLA_BKA
    S_RFC
    S_CTS_ADMI
    B_ALE_MAST
    S_IDOCDEFT
    The following auth. object is required for making JCO call to SAP from xMII:
    C_AFRU_AWK
    Thanks,
    Sara

  • Authorization to disable SAP Inbox Forward function for specific Work Items

    Hi.
    I recently solved a case for a customer of mine regarding authorizations for work items. They have several workflows running, but for this specific custom developed workflow, users should not be allowed to use the SAP Inbox Forward button.
    I started by creating a new task classification (Z_FW) which I implemented on the workflow tasks where the forward functionality should be disabled. Now for test purposes I created a dummy user which I initially gave only authorization to the tcode SBWP, then I manually added the authorization object S_WF_WI.
    For this entry I allowed all activities for work item type W and F for classification 1, 2, 3 and NO_CLASS (SAP Standard classification).
    Now to my understanding this would give the test user authorization to perform all activities on Work Items and Workflows which are classified with one of the above, but also prevent me from doing anything with Workflows and Work Items with classification Z_FW.
    However, to my surprise everything seems to work perfectly with just this entry. I am able to execute and forward work items with the standard classification, while I am able to execute, but not forward, work items with classification Z_FW.
    My intention was to add another entry for authorization object S_WF_WI, for classification Z_FW with all activities except forwarding. But when I tried that, the only change was that forwarding was enabled for the work items with classification Z_FW, which I didnu2019t want.
    Now can anyone explain to me why this is working? I am not too familiar with SAP Authorization as my area is mainly ABAP and WF, but his just does not seem logical.
    Hoping someone can give me an explanation....
    Thanks

    Does the standard function not do what you want?
    Task -> Additional data -> Agent Assignemt -> Maintain -> Attributes -> Forwarding not allowed.

  • No HTTP port defined in Exchange Profile for sld

    Hi all,
    During the BI and portal connectivity, we successfully executed the template installer, however, we have not yet imported the abap and related sp from SAP note.
    After successful execution of template installer or CTC, we ran the supportdesk tool resolved errors and are left behind with two errors as below.
    ERROR 1. RED  BI Mastersystem
    Message:
    Error while connecting to BI mastersystem via RFC: Checks related to ABAP information cannot be executed because an outdated version of function module RSPOR_SETUP_CHECK is implemented. Please implement the recent version of note 937697.
    Solution:
    Check connection properties in Portal Systemlandscape for the property category 'Connector' (Systemlandscape/SAP_BW)
    Issue: Now looking at connector properties that are set by CTC are complete and set. Connection Test for both Connector and SAP Web AS Connection are successful, only ITS is neither setup by template nor by us. Please suggest how to resolve this.
    ERROR 2.  RED  Error in Check Class: com.sap.ip.bi.supportdesk.checks.impl.MultipleUserMappingCheck
    (Error during retrieval of inverse user mapping for ABAP user 'null': No backend user ID provided for inverse user mapping. com.sapportals.portal.prt.runtime.PortalRuntimeException:...)
    Looking at log file server<#>/log/defaultTrace.trc it points the following error:
    No HTTP port defined in Exchange Profile for sld.BIW.bcs AND
    Error reading from AII properties for sld.BIW.bcs
    Thrown:
    MESSAGE ID: com.sap.aii.utilxi.misc.api.rb_exception.MESS_INVALLD_PARAMETER_VALUE
    com.sap.aii.utilxi.misc.api.InvalidArgumentException: Parameter httpPort has the invalid value null
    Issue: Checking we find that ICM is running with correct dns and port 8000 (http), only smtp is holding port 0. Where do we maintain http port for sld? Kindly suggest.
    Finally the support desk tool is leaving the following checks with status UNDEFINED, would this impact the connectivity?
    1.   UNDEFINED  Deployed Components
    2.   UNDEFINED  Export check (PDF lib, ADS, ...)
    3.   UNDEFINED  Synchronized Clocks on WebAS Java and ABAP
    4.   UNDEFINED  URLs Prefixes Customized on Both J2EE and ABAP Side
    5.   UNDEFINED  WebAS ABAP Certificate and Login Modules Configuration
    6.   UNDEFINED  WebAS ABAP Settings
    Looking at support desk tool and RSPOR_SETUP I notice the errors in RSPOR_SETUP appear green in support desktool such as User mapping (step 12) appears green in support desktool but red in RSPOR_SETUP.
    Please suggest.
    Best regards.

    Hi,
    If Support desk tool is showing some of the components undefined, than there may be posisbility that your ABAP BI and BI JAVA patch may not in sync.
    ABAP BI and BI JAVA works only with specific patch set combinations. I will suggest that please refer to below note and correct the patch level, if required. Once the patch level is corrected, please run the support desk tool again, you will see new picture in support desk tool.
    "SAP Note 1013369 - SAP NetWeaver 7.0 BI - intermediate Support Packages"
    With Regards,
    Saurabh

  • Multimedia tutorials & online courses in SAP  authorization

    Hello,
    Could someone please guide me to  where I can find multimedia tutorials or online courses, or even conventional courses related to SAP authorizations.
    Thank you in advance for your cooperation.
    Best regards.
    Reda Khalifa
    IT Department - Almansour Automotive Group - Egypt

    Hi Reda,
    The "traditional" SAP auth courses are ADM940, ADM950 & ADM960
    ADM940 is your standard auth concept stuff, 950 is mainly regarding Audit & 960 is looking at system level security (the most technical of the three)
    There is loads of info on the individual courses on the SAP education site: http://www.sap.com/services/education/index.epx
    Alternatively there is some pretty good (if not 100% accurate in all cases) info here:
    http://www.*********************/
    The security section of OSS is very, very useful with a whole load of guides on there:
    https://websmp205.sap-ag.de/security
    You will need an OSS ID to access the documentation.  Your BASIS team will have one that they should let you borrow if you don't already have one.
    A few other resources are a book/pdf called Authorizations Made Easy and the R/3 Security Guide: VOLUME I, II & III
    If you enter those terms into google/another search engine you will get links to where you can buy those.

  • What is SLD .. why we go for SLD.. what is the  the uses of thisSLD

    Hi friends,
         can you give me the brief idea about SLD... first  of all WHAT is SLD.. WHY we go for SLD.. and what are the Uses of this SLD..   
    plz calrrify my doubt..
    Thanks
    Babu

    there is an excellent how to guide about handling the SLD for SAP XI - https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/9e76e511-0d01-0010-5c9d-9f768d644808
    do read thru the same, and in case you need more inputs let us know.

  • CTS+ Configuration in PI 7.4 for SLD specific data

    Hello Guys,
    I am doing CTS+ configuration for PI System SLD Vesrion 7.4 to transport J2ee as well as SLD specific data through transports. My CTS server is Solman System.
    I have created a CTS user in Solman System and in PI NWA I have defined destination to point to Solman System. But i am running into several errors.
    Could anyone please help me what user authorization are required for CTS user in Solman to transfer Non-Abap Data and SLD specific data through transports.
    Its very urgent.

    Did you happen to see this document of a CTS+ configuration for 7.3 (should be fairly the same for 7.4)?   CTS+ Configuration for PI 7.3
    Steps 1.2 and 8.2 have references to roles.

  • Where is the Content-Update for SLD?

    Hello SDN!
    where I can find the Content-Patch for SLD?
    In documentation I found: the following path Support Packages ->SAP->Technology Componennts-SAP-Masterdata for SLD.
    But there is no such a path in SMP. There is a Path:
    Support Packages and Patches -> Entry by Application Group-> SAP Technology Components-> SAP CR CONTENT-> SAP MASTER DATA FOR SLD 2.0. But under this link I found only some ZIP's from 2007 ????
    If I should take the SAP CR Content - what should I take for my NW 7.01 - SLD  from 2009 or earlier?
    Thank you for your help in advance.
    Vladimir
    Edited by: Vladimir Golovtchiner on Jul 20, 2009 8:35 AM

    Support Packages and Patches -> Entry by Application Group-> SAP Technology Components-> SAP CR CONTENT-> SAP MASTER DATA FOR SLD 2.0. But under this link I found only some ZIP's from 2007 ????
    If I should take the SAP CR Content - what should I take for my NW 7.01 - SLD from 2009 or earlier?
    Why to you want to update CR If you have latest anyway? If there is latest available at later date then just go for the delta.

  • Sap authorizations in Webdynpro

    I have a question regarding the use of authorizations from WebDynpro. We wants to use standard SAP authorizations when accessing the BAPIs through WebDynpro. For example: A sales person having a SAP logon should be allowed to see the data he would see using the transactions through SAP GUI. On the other hand persons without rights to the transactions should not be allowed to access the sales order data.
    How do you do this?

    Hi Rama,
    According to me ,Upto Now thr is no such readymade facility available.But we can implement it.
    1)Create a Bapi for Autherization Or Use standard  Bapis if any.
    2)Use those Bapis in ur Project.
    3)Before u executing ur Actual Bapi U can execute Ur Autherization Bapi.
    4)According to The Result of Autherization Bapi ,U can Execute Ur Actual Bapi.
    Regards,
    Ramganesh.

  • Authorization in WebDAV for cFolders

    Hi
    I have autorization rules set for the collaboration folder structure from none to write to read etc.
    In cFolders application for that user it all applies. But when I get the WebDAV URL in that user login, these authorizations is not applied. i.e. even folders which are set 'none' (not visible in cFolders application) are visible.
    Is this the way WebDAV behaviour is or am I missing something?
    Regadrs
    Senthil

    Hello Senthil,
    you can use WebDAV for two purposes:
    a) maintenance of cFolders settings with special URL
    b) to maintain documents in cFolders via the MS Windows Explorer using the SAP NetWeaver Portal Drive.
    You do not need the Enterprise Portal to be installed to use the WebDAV functionality together with SAP NetWeaver Portal Drive.
    The name SAP NetWeaver Portal drive is a little bit misleading.
    It is called Portal drive, since it is the WebDAV client for the Knowledge Management (KM) of the portal also.
    When using the SAP NetWeaver Portal drive with cFolders no portal is required as the SAP NetWeaver Portal drive acts also as WebDAV client for cFolders. The SAP NetWeaver Portal drive is a 3rd party WebDAV client from a company called XYTHOS (http://www.xythos.com/home/xythos/company/company.html), which can be used by SAP customers for free.
    You can download the Installer for the SAP NetWeaver Portal drive from SAP Service Marketplace under http://service.sap.com/swdc
    -> Download -> SAPSupport Packages and Patches -> Entry by Application Group
    -> SAP NetWeaver -> SAP NetWeaver -> SAP NetWeaver2004s -> Entry by Component -> Frontend -> Portal Drive 4.4
    Documentation:
    Integration of cFolders with a WebDAV Client
    http://help.sap.com/saphelp_ppm400/helpdata/en/1b/8688428b42c553e10000000a1550b0/frameset.htm
    Configuration of SAP NetWeaver Portal Drive for KM (most of the stuff is valid also for cFolders)
    http://help.sap.com/saphelp_nw04s/helpdata/en/42/e6753939033ee5e10000000a1553f7/frameset.htm
    Working with Folders in Windows (Portal Drive) for KM (most of the stuff is valid also for cFolders)
    http://help.sap.com/saphelp_nw04s/helpdata/en/42/c99b91341a6bade10000000a1553f6/frameset.htm
    Important: you must not use the Microsoft WebDAV interface for maintaining documents in cFolders collaborations. It does not fit to cFolders as there are security issues with using Microsoft WebDAV (my network places) together with cFolders
    Regards
    Peter

  • IDOC setup for SLD

    Dear XI experts,
    I woule like to ask you when I want to do the PI setup for IDOC sending and receiving in the SLD, as to what steps I have to take for this. I had done the setup and chosen ABAP as a choice in the Technical and Business system, however, I am not clear where I should define the Integration server to be able to choose this when I create a Technical and Business system and do the assignment of the Integration server.
    Perhaps I need to do step by step the SLD setup for  IDOC sending and receiving from SAP Backend and viceversa to find what I am missing.
    Thanks for your input.
    Best regards

    Hello,
    Check this blog "How To Configure IDoc Adapters" https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d19fe210-0d01-0010-4094-a6fba344e098
    It consist all setting including all steps required for SLD.
    BR,
    Dzmitry

  • I need the sap bw table names for ROLE's

    I need the sap bw table names for ROLE's .
    thanks

    Hi,
    AGR_1251 - Authorization data for the activity group
    AGR_USERS - Assignment of roles to users
    AGR_TCODES - Assignment of roles to Tcodes
    You can also try putting AGR* in ur search.
    -Vikram

  • Authorization object A_S_GSBER for Business area

    Dear group Members Warm Greetings
    Transaction code z_am_detail was added to the role from tcode pfcg .SAP proposed new values for certain organisation levels for example: the authorization object A_S_GSBER. The values proposed by the system for business area field are: 1000, 2000, 3000 & 9000. which are old, the 2 new business areas that were recently configured are not proposed which are 5000 & 6000. This could mean that there is some configuration setting with which the system suggests default values.
    Suggest me to fix this issue
    regards
    shamulheq
    Edited by: shamulheq on Mar 16, 2010 6:27 AM

    Hi Tipu,
    Have you tried creating Screen Variant  from the same Transaction SHD0.
    Try to create a screen variant for the Free Selection screen
    Program : SAPF110V
    Screen No: 0203
    Field Name  : F110V - TEXT1
    There is an option which saves the Variant "With Content"  & "Required", fill the Field Selection with "BSEG-GSBER" and check these check boxes.
    Hope this will work.
    Regards
    Andrew

  • Configuring TREX for sld

    hello to all.
    Why do i need to do the post installtion of the trex ""Configuring TREX" for sld"?
    I have to do it?
    Thanks
    Menashe

    If you are installing any component of 'NetWeaver', you should register it with Central SLD server of your landscape.
    Same case with Trex too, that's why you have that post installation step there. However, it is not a 'Mandatory' step which needs to be done immediately after installation. But in future, you might require this. So you may proceed to do it after proper understanding of what is an 'SLD' even !
    This step itself tells it's purpose as seen from below help page
    http://help.sap.com/saphelp_nwpi711/helpdata/en/42/e33ae230ba3ee2e10000000a1553f6/content.htm
    Following link will help you in understanding the SLD
    https://www.sdn.sap.com/irj/sdn/nw-sld

  • Abap user for SLD Destination

    Hello!
    I have small question.
    I'm adding system to SLD and on the system where SLD is located i have to create Destination (for RFC in abab system). In this Destination i need to set user from abap system.
    But which roles this user should have?
    I used my (sap all priveleges) account for testing and it works fine, but i whant to create service user for this porpose and need to to know roles for this user.
    Thank you in advance.

    check
    https://help.sap.com/saphelp_nw70ehp2/helpdata/en/48/b7b38fecf26745e10000000a421937/content.htm

Maybe you are looking for