SAP Roles problem

Hej, I have a multiselect with all SAP roles looking like this:
I'm trying to store the list of roles in the variable accounts[SAP].activityGroups that represents the roles in the resource, with no success so i want to know how i must store that over the resourse.
Thanks

more info, i created an arraylist<string> with and static object just to get a trazable object to copy here.
<set name='accounts[SAP].activityGroups'>
  <invoke name='ropst' class='com.inicom.conversion.conversion'>
  </invoke> --> [<Object name='ZPAE010'> <Attribute name='activityGroupName' value='ZPAE010'/>  
<Attribute name='fromDate' value='02/26/2008'/>
<Attribute name='toDate' value='12/31/9999'/></Object>,
<Object name='ZPAS020'>
<Attribute name='activityGroupName' value='ZPAS020'/>  
<Attribute name='fromDate' value='02/26/2008'/>
<Attribute name='toDate' value='12/31/9999'/>
</Object>]
</set> --> null
<ref>accounts[SAP].activityGroups</ref> --> [<Objectname='ZPAE010'>   
<Attribute name='activityGroupName' value='ZPAE010'/>  
<Attribute name='fromDate' value='02/26/2008'/>
<Attribute name='toDate' value='12/31/9999'/>
</Object>,
<Objectname='ZPAS020'>
<Attribute name='activityGroupName' value='ZPAS020'/>
<Attribute name='fromDate' value='02/26/2008'/>
<Attribute name='toDate' value='12/31/9999'/>
</Object>]I did this because when i create a user with sapgui and i add two roles i get an structure like this in the idm accounts[SAP].activityGroups user structure.
[<Object name='ZPAE010'>
  <Attribute name='activityGroupName' value='ZPAE010'/>
  <Attribute name='fromDate' value='02/26/2008'/>
  <Attribute name='toDate' value='12/31/9999'/>
</Object>
, <Object name='ZPAS020'>
  <Attribute name='activityGroupName' value='ZPAS020'/>
  <Attribute name='fromDate' value='02/26/2008'/>
  <Attribute name='toDate' value='12/31/9999'/>
</Object>
]or the xml version if you prefer:
<List>
  <String><Object name='ZPAE010'>&#xA;  <Attribute name='activityGroupName' value='ZPAE010'/>&#xA;  <Attribute name='fromDate' value='02/26/2008'/>&#xA;  <Attribute name='toDate' value='12/31/9999'/>&#xA;</Object>&#xA;</String>
  <String><Object name='ZPAS020'>&#xA;  <Attribute name='activityGroupName' value='ZPAS020'/>&#xA;  <Attribute name='fromDate' value='02/26/2008'/>&#xA;  <Attribute name='toDate' value='12/31/9999'/>&#xA;</Object>&#xA;</String>
</List>also if you want to check up the code of the java function is this one:
public static ArrayList<String> ropst(){
        ArrayList<String> result = new ArrayList<String>();
        String temp = "<Object name='ZPAE010'>";
        temp += "\t<Attribute name='activityGroupName' value='ZPAE010'/>";
        temp += "\t<Attribute name='fromDate' value='02/26/2008'/>";
        temp += "\t<Attribute name='toDate' value='12/31/9999'/>";
        temp += "</Object>";
        String temp2 = "<Object name='ZPAS020'> ";
        temp2 += "\t<Attribute name='activityGroupName' value='ZPAS020'/>";
        temp2 += "\t<Attribute name='fromDate' value='02/26/2008'/>";
        temp2 += "\t<Attribute name='toDate' value='12/31/9999'/>";
        temp2 += "</Object>";
        result.add(temp);
        result.add(temp2);
        return result;in other words now i donno what i'm doing wrong because i'm feeding it with all he seems to want...

Similar Messages

  • User does not appear in group created from SAP role

    Hello --
    I have a user that has logged into InfoView successfully with SAP authentication and is showing in the CMC under the "User List." When I view the list of users in the group that was created from the SAP role he was a part of, he is not there.   When I go to the user account and view "Member of," the group IS shown in the list. 
    Any idea?  Any way I can "refresh" the group or anything like that?
    Thanks
    Casey

    Thanks for the replies.
    We are on XI 3.1 FP1.8 and we do have a CMS cluster.  Server reboots this weekend seem to have resolved the problem. I am curious why this question was asked, though:
    "Did you reassign the user to another SAP role after the user has already logged at least once in the InfoView?"
    Is this something that could have caused the problem or is it a possible workaround if we run into the issue again? 
    Thanks again...
    Casey

  • Erro when importing SAP roles into BO Edge XI 3.1

    Hello,
    I'm currently setting up the SAP Best Practices on a BO Edge XI 3.1 system (32 bit) and trying to link up with an SAP ECC 6 EHP 4 system (64-bit).
    When getting to the authorisation step I go to the CMC > Authentication > SAP > Role IMport.
    There I receive following error: 
    JCO.classInitialize(): Could not load middleware layer 'com.sap.mw.jco.rfc.MiddlewareRFC' JCO.nativeInit(): Could not initialize dynamic link library sapjcorfc. Found version "2.1.9 (2010-01-28)" but required version "2.1.8 (2006-12-11)".
    After closing and re-entering the same tab I receive following message: org.apache.jasper.JasperException
    I have not even the possibility to enter the roles manually. The system doesn't allow me.
    There is no specific SNC security set up for my SAP system.
    I have been able to connect to the logical system of SAP because when I updated on the tab: "Entitlement Systems" it proposed my logical system name that I created in SAP.
    As I found on another SAP forum the version 2.1.9 should also be the good version.
    Can someone help me out with this one (does anyone has still the older SAP Java connector version 2.1.8)?
    thanks in advance
    Thierry

    Hello,
    That's what i did but didn't help.
    I finally managed to find the problem. I had also to install a file named librfc32.dll in the same directory. When installing the necessary files apparently the version of this file librfc32.dll was not the correct one because it didn't match with the version that is installed together with the Sap gui (I presume). So by re-installing the former version of this file librfc32.dll it finally worked.
    thanks anyway

  • Third party background ID requires standard SAP role

    We are connecting to a 3rd party through a background ID that we have created on the ABAP side.
    However, in testing this access, we notice that this connection does not work if we assign a custom role (or even SAP_ALL) to it.  It works ONLY if we assign a specific SAP-delivered role (SAP_XI_ADMINISTRATOR_J2EE) to it.
    We have logged into the J2EE UME and assigned our custom group (which corresponds to our ABAP role - ZSAP_BATCH_XI) TO the Administrator Role in the UME.  But this still doesn't seem to fix the problem, and it is still requiring the standard SAP role.
    Can you pls. let me know if there is another step I should do, to force my background ID to use my custom role, rather than the standard SAP role.
    Thank you,
    Ashish

    Hi,
    This is standard in SAP and you would only need to assign the WBS to the Sales Order for which the Material is being Procured for and the Cost / budgets can be tracked through this WBS element.
    This activity can be seen thru PS Reports
    Best regards
    Amit Bakshi

  • How to synchronize Identity System Roles with SAP Roles?

    Hello, experts!
    Could you give me an advice?
    I'm trying to perform role syncronization between SAP R/3 and Identity Manager, but the default task definition (Resource Role Synchronizer) can't find a
    SAP resource (for example method getResourcesSupportingObjectTypes can't find resource with attribute type activityGroups (SAP Roles)).
    Do you have an experience with syncronization SAP and IDM Roles ?
    How it is possible?
    Thank you!

    May be somebody knows what odjectType attributes like Roles (activityGroups) or Profiles has?

  • GRC - SOD Conflict Management (SAP Role Substitution)

    Hi,
    I am looking to see how others handle SAP Role Substitution and SOD conflicts.
    For example, a person is going to be out on vacation for a few day and assigns their roles to another employees to continue with daily tasks....SOD risks result because of the temporary assignment and role combinations....what are you guys doing to manage, and monitor this sort of activity?
    Your help and comments greatly appreciated!

    Hi
    As already stated by Martin, one of the option for handling adtional backup access to users could be through Superuser Privilage management(If GRC has been implemented with your client). This would allow detailed reporting at transaction level for audit purposes.
    If GRC is not implemented with your client then any additional access which is resulting in SoD, there has to a proper documentation of temporary access assignment to users(For Audit purpose). Mitigation control should be documented and submitted by the supervisor of the user to the SoD team to ensure proper compliance is in place for the additional access provided to the user.
    Thanks.
    Anjan

  • Duet Enterprise 1.0 SP2 - SAP Role based authantication

    Hi All,
    We have implemented Duet Enterprise 1.0 SP2 in our landscape. Now we try to implement SAP Role based authantication.
    But don't know which role to assign for which authorisation. In my scenario i have created 2 users. For one user i want to have only read access to all lists (Contact, Employee, etc) and for another user i want to have all acess (read, write, modify, delete) on all lists available at sharepoint.
    Can someone help me to tell what roles (template) need to assign for what operation.
    Which roles i do assign to user in SAP that which ristrict users access at Sharepoint.
    Thanks & Regards
    Virender Solanki
    09818316550

    Hi Binson,
    I want to ristrict the crude operation (create, update etc) by giving roles in backend system. i am able to apply restriction at sharepoint end but i don't want that. i want SAP role based security.
    So i want, according to given roles in backend system user is able to do operations at sharepoint.
    Thanks & Regards
    Virender Solanki

  • BO authorization model with sap roles / access tot folders, functionalities

    Hi Specialists,
    As authorization cunsultant in BI, I have little knowledge of the security setup in Business Objects.
    I have to setup an authorization model were the authorizations are assigned via sap roles in the backend BI system. These roles are imported in BO were they can serv as 'user groups' and access to folders, functionalities.
    Can anyone provide me a overview, guide, training document... on how the authorizations are managed in BO and best practice when they are linked to sap backend roles.
    The goal will be to user the sap BI backend roles and user them to grant users in BO specific access to specific folders. Eg; User A can access folders 1 as "refresher only", User B is able to publish reports in folder 2, User C has only view access in folder 2...
    Any help would be great!
    Thanks very much in advance.
    rgrds
    Kristof

    Hello,
    this is the best approach you mentioned here.
    I prefer to create roles serverd as functionalities in the Backend. For Example you have a "View" role, a "Refresh" role and so on.
    On the other hand i saw some setups where there is only on role in the Backend with all the BO Users. Then you have to create you functional groups in BO and have to assign the Users there to the Groups.
    Check the Adminguide of BO XI 3.1 for more Informations.
    Regards
    -Seb.

  • SAP roles and BW

    I am new to SAP and BW.  A goal of mine, straight from my GEM form, is to "Increase my knowledge of the security in the SAP application by understanding SAP roles and how they apply to Business Warehousing".  Please point me to websites, books, white papers, etc.
    [email protected]

    Zip
    Please check these links and hope it helps
    http://help.sap.com/bp_biv235/BI_EN/documentation/Authorization_BW_Proj.pdf
    http://help.sap.com/saphelp_nw04/helpdata/en/52/671595439b11d1896f0000e8322d00/frameset.htm
    Thnaks
    Sat

  • Dynamiclly assign responsible agent based on SAP role

    Hello Experts,
    I have users set up in SAP and specific roles assigned to these users. for less maintenance purpose, I would like to know:
    Is it a way, we can use roles to find SAP users, then assign these users as workflow responsible agents?
    I do not want to maintain orgnizaion structure. just want to call sap role to assign the users.
    Is it a SAP standard way to do it? I did not find too much information on my question, can you please give me some insights on how to do it?
    I appreciate your time!
    Estell

    Hi,
    in agent definition for workflow steps you are allowed to use roles.
    So just try it out.
    Kind regards, Rob Dielemans

  • Importing SAP Roles in CMC

    HI
    when I importing SAP Roles in CMC  there is an error, following is the error information:
    CMALLC:rc=27>Connect from SAP
    gateway to RFC server failed Connect_PM GWHOST=192.168.1.66,
    GWSERV=sapgw00,SYSNR=00
    Location SAP-Gateway on host saptest/sapgw00
    Error   timeout during allocate
    Time   Tue Feb 22 15:25:58 2011
    Release  720
    Component SAP-Gateway
    Version  2
    RC      242
    Module  gwr3cpic.c
    Line     1911
    Detail    no connect of TP sapdp00 from host 192.168.1.66 after 20 sec
    Counter  2
    Thanks

    HI,
    are you using the details for an application server or for a message server ?
    Ingo

  • Mass Generation of standard SAP roles

    IS there a way to generate & Activate SAP standard roles in mass.  We want to generate and activate following standard SAP roles so that we do not have to go through them manually for authorization changes.
    SAP_PP_BD_RTG_DISPLAY
    SAP_PP_BD_RTG_MAINTAIN
    SAP_PP_BD_WKC_DISPLAY
    SAP_PP_BD_WKC_MAINTAIN
    SAP_PP_CAPA_PLAN
    SAP_PP_CAPA_PLAN_EVAL
    SAP_PP_KAB_CONTROL
    SAP_PP_KAB_REPORTING
    SAP_PP_MATERIAL_MANAGEMENT
    SAP_PP_MP_FORECAST
    SAP_PP_MP_LONG_TERM_PLANNING
    SAP_PP_MP_MPS_PLANNING
    SAP_PP_MRP_COORDINATION
    SAP_PP_MRP_EVALUATIONS
    SAP_PP_MRP_MASTER_DATA
    SAP_PP_MRP_PLANNED_ORDER
    SAP_PP_MRP_PLANNING
    SAP_PP_PI_ALERT_MGMT_STD
    SAP_PP_PI_BATCH_RECORD_EXP
    SAP_PP_PI_BATCH_RECORD_SUPER
    SAP_PP_PI_CAPA_EVAL_STD
    SAP_PP_PI_CAPACITY_EXP

    Dev,
    It is possible to generate roles using PFCG or PFUD up to a extent of choosing 8 per a time and it won't accept more than that. So please check with it before proceeding in this issue.
    It is advisable not to use SAP predefined roles, rather than using customized roles.
    Regards,
    VeerendraKumar.

  • What SAP roles can be imported?

    Hello all
    I installed SAP integration kit, JCO 2.1.9 is installed. In CMC I'm able to go to management -> authorization -> SAP and entered appropriate settings for our authorization system (SysID, client, application server, system number, user, password, ...). In the tab "role import" I see some roles... but not all the ones I would have expected.
    Can anyone tell me what makes a SAP role being visible / selectable for import? Does a SAP role in SAP system (transaction PFCG) need some special tweaking in order to make it available in CMC? Unfortunately I couldn't find any useful information on this.
    Thanks a lot
    Renaud

    Hi,
    roles which do contain assigned users.
    Ingo

  • Show more than 5 SAP Roles in UI

    Dear SAP Community,
    our IDM Demo System works fine.
    We impelmented a couple of web tasks.
    Now the customer wants to see more than 5 SAP Roles in the UI when he requests new Roles for an User.
    The URL generated by the IDM is:
    http://sapidm:50200/webdynpro/dispatcher/sap.com/tcidmwd~workflow/EditTask?TaskId=275&EntryId=29133
    Does anybody knows where to configure this?
    Kind regards,
    Karsten

    Hello,
    thanks for your posting.
    I´ve changed the value form 5 to 10 after cahnging the identity store schema attribute MX_PRIVILEGE_TYPE
    into multi value. If i check the settings after that, the setting "10" is set now.
    In my Web Task in the presentantion setting (task specific) i find the value set to "5" like before.
    I´ve waited a time checked again ....but the value is set to "5" like before.
    After rebooting my Java Stack and IDM there has nothing changed.
    The global setting MX_PRIVILEGE_TYPE is 10 in a row.....the web task setting is 5.....
    Can anybody tell me how to fix this?
    many thanks,
    Karsten

  • SAP Role to limit access to few ledger accounts

    Hi
    I have created a SAP role which has Display access to FAGLB03 using pfcg.
    I want to restrict this role only to a certain number of Ledger accounts.
    Say like XXXX5, XXXX17, XXXX23. XXXX45 etc;
    Can we restrict using any Authorization object?
    Thanks
    Hari.

    Hi Duggineni,
    I would suggest you to make a use of Authorization Group in GL Master
    F_BKPF_BES
    I have create one role ZFAGLBO3, in which T.Code FAGLBO3 is authorized, and users are assigned to this role ZFAGLBO3, now all these users can access all the GL by t.code FAGLBO3, but except for few GLs, in which I have entered Authorization Object "OTHG". So your reqirement was to restrict few GLs in roles, which can be met by using Authorization Object F_BKPF_BES.
    In above role you can see highlighted object F_BKPF_BES, have NIL value against BRGRU.
    Now I have created one test user, who have this role ZFAGLBO3.
    See the results:
    All GL master don't have authorization objects, so this user can display the balances.
    He can
    Note: These user can't display balances in FAGLB03 for few GLs, which is your requirement, that I understand. Just add the any authorization Groups in GL master in this case i have entered in one GL "OTHG", see below snapshot: 
    When these users of profile "ZFAGLBO3" try to display balances of few GLs who have Authorization Group field filled in master data, system will give below error:
    I hope this will clear your understanding, and give you an idea, how you can use this to meet your requirement.
    Regards
    Javed

Maybe you are looking for

  • Csv file processing using external table

    Dear All, Our database is oracle 10g r2 and OS is solaris We  would receive csv files to a particular directory on server each day. File Format look like: H00,SOURCE_NAME,FILE_CREATED_DATE RECORD_TYPE,EMP_ID,EMP_NAME,EMP_DOB(DDMMYYYY),EMP_HIRE_DATE(D

  • Update notification shows there are updates but when I click on the update option it shows a blank screen

    The update option on the app store shows a notification that I have 'n' numbers of updates but when I click on the update option it only shows a blank screen. Even after updating the apps individually from the purchased option, the update option stil

  • Calling web service in offline form.

    Hi, I m trying to call web service in offline form with java script. How can i pass request parameter? How can i get response? Is there a sample java script code to do it? Regards.

  • Any way to easily locate and remove duplicate photos?

    I recently went to Italy and loaded my digital photos into iPhoto. My wife loaded the same CF card so I now have hundreds of duplicates. Any ideas on how to find the duplicates other than looking at each photo individually?

  • Please , open this file for me

    i have been trying to open this file , but vainly , please open it for me , or guide me to a way to do so ? https://drive.google.com/file/d/0By6htDkhXWBiaEllNi1HV21pNFk/view?usp=sharing thanks