SAP XI Roles and Authorizations
Hi All,
Could u pls tell which are the main roles and authorizations a SAP XI Developer should have. Also how to set them up?
Thanks,
Ashish
Hi Ashish
the necessary roles to be provided for a developer in XI system are mentioned below.
SAP_SLD_DEVELOPER
SAP_XI_DEMOAPP
SAP_XI_DEVELOPER_ABAP
SAP_XI_DEVELOPER_J2EE1) SAP_XI_Developer_ABAP
2) SAP_XI_Developer_J2EE
3) SAP_XI_MONITOR_ABAP
4) SAP_XI_MONITOR_J2EE
5) SAP_SLD_ORGANIZER
6) SAP_XI_BPE_MONITOR_ABAP
7) SAP_XI_DEMOAPP
8) SAP_XI_DISPLAY_USER_ABAP
9) SAP_XI_DISPLAY_USER_J2EE
for further details, visit the link given below...
http://www.erpgenie.com/sap/netweaver/xi/xiauthorizations.htm
http://help.sap.com/saphelp_nw70/helpdata/en/56/361041ebf0f06fe10000000a1550b0/frameset.htm
Cheers..
Vasu
Reward Points if found useful **
Similar Messages
-
SAP APO roles and authorizations
Hi,
There is a brand new APO-DP, SNP system being configured at my client for SCM 5.0. I need information on the kinds of roles we need and the security objects involved.
I have searched this forum and so far, the information I could get is the following:
Generally there would be a Developer, Super User, end user, APO-ADMIN and a test user.
The authorization in SCM is by either planning book or by selection profiles and not both.
I found some information on <a href="http://help.sap.com/saphelp_scm50/helpdata/en/21/f6253b90e48743e10000000a11402f/frameset.htm">Authorization in Supply Network and Demand Planning</a>
I would appreciate if anybody can give me more information or refer to any link/documents. My id is visu_venkat AT yahoo.com
Thanks.You will require to create roles, see more details in following link
Users and Roles : <b>http://help.sap.com/saphelp_scm50/helpdata/en/52/671126439b11d1896f0000e8322d00/frameset.htm</b>
As you have already mentioned
http://help.sap.com/saphelp_scm50/helpdata/en/21/f6253b90e48743e10000000a11402f/content.htm
http://help.sap.com/saphelp_scm50/helpdata/en/0c/515bb287fe41829556fb4227820e52/content.htm -
Deleting FICO Roles and Authorizations
Hi Guys,
i want to Delete some roles and authorizations from a user profile.I have the user id and I want to know what roles are assigned to the user.
Which tcode can be used for the same and how to delete the fico roles assigned to that sap user id.
thanks,
Srikanth.Hi,
I got the solution. It is SUIM.
Anyways thanks for the help
srikanth -
As XI developer what are the roles and authorization i shoul have in realti
Hi Experts,
As XI developer what are the roles and authorization i shoul have in realtime, as a dveloper is it possible for me to crate namespace and business system, can any one please exaplain me abt business system in real time scenario.
thanks
dhanushHi Dhanush,
your authorizations will be decided depends on your role in your team.
yes you will have authorization for creating name space ,but your bussiness system will be created by Basis pesron and assign it to your scenario.
Business System is a logical entity which represents logical view of your technical system. (eg a client in R3 system can be respresented as business system in SLD) For one technical system you can have multiple business systems.
Look in to these links for detalis of bussiness systems.
http://help.sap.com/saphelp_nw04/helpdata/de/31/f0ff69551e4f259fdad799a229363e/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/de/87/7277e8fba34421a45d97a41ec27381/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/7b/d4653fd1d3b81ae10000000a114084/content.htm
Reward points if found usefull...... -
Portal roles and Authorization in NW2004s
Hi Gurus,
In earlier Portal implementation of ESS/MSS which was ITS based we used to maintain roles in EP by doing a role upload and maintaining authorizations in the backend R/3 system and if any new changes being made in the role is being distributed to the r/3 system using system administrator -> Permissions -> sap authorization and role distributions are sent to R/3. where we can go to W3PR transaction can create authorization profile for that role there.
Now my question is in ESS/MSS implementation based on Web dynpro how are portal roles and authorization maintained?
please do tell me as to how they are maintained in the NW2004s implementations.
Regards,
Rameshplz take a break for few minutes and start.... u will get it..
-
RFC Sender - Logon User - What Roles and Authorizations?
Hi,
Scenario: RFC Sender --> XI --> JDBC
What necessary Roles and Authorizations has to be given for Logon User (in Sender RFC Communication Channel).
It has to be moved to production soon. My Client wants to give only Roles and Authorization that are necessary for the Logon User.
With Regards,
Manikandan RHi ,
U need to give ECC Authorisation
Application server : ECC Server
Sytsem no : ECC system number
Logoon User : ECC any username
password : password for above user
clientr : ECC client ( From which client u are sending to RFC adapter)
Regards,
Jayasimha jangam -
Business Explorer Roles and Authorizations
Hi,
I am using Business Explorer Query Designer and Analyzer ( Excel Work book add on) with BI 7.0.
I need to create roles and authorizations for the end users to create queries and view queries in excel by using Business Explorer Query Analyzer.
Kindly suggest me what are the standard transactions, roles and authorizations to be given to the end users.
Thanks and regards
MurugesanI dont have idea about Bi 7.0 ..
If its bw 3.X i jusz used rrmx --->>excel ->addins-->>queries --->pop up window --->here we need rfs object S_RFC
Finally rrmx tcode and general roles which has S_RFC autorisation object and the query .
Regards,
Naveen -
What Roles and Authorization Req
Hi All,
I am getting the Error in SOAP to RFC Sync secnario.
User using one URL through that URL he is trying the send the data to before sending the req user have the USER ID and Password. what are the Roles and Authorization req for that user id and password. Are they service user id ?
RegardsThis user ID have roles similar to Service user PIAPPLUSER or XIAPPLUSER. However, it is recommended not to provide this user detail directly to sender system. Instead create a new user and provide that to your partner.
Regards,
Prateek -
Roles and authorizations in BI content
Hi experts,
I'm trying to define a very simple scheme of roles and authorizations for my queries.
So, i'm trying to limit the acess by infocube and DSO, but I'm missing the authorizations objects for Cube and DSO.
I know that authorization object for queries it's S_RS_COMP.
So my roles would be something like
BI_ROLE_FI
Authorization Object Autorization Object Value
Acess query (S_RS_COMP) NA
Infoobject (whats the object???) 0FIGL_C01
DSO (whats the object???) 0FIGL_O14
BI_ROLE_PUR
Authorization Object Autorization Object Value
Acess query (S_RS_COMP) NA
Infoobject (whats the object???) 0PUR_C01
Can you help me find out whats the missing information
Thanks and regards
JoanaHi,
Iu2019ve gave authorization to the object youu2019ve mentioned, but itu2019s still not working.
Basically what I have is the following:
One role that allows me to execute queries, workbooks, etc.
A second role, dependent on the area of work, that should allow me only to have access to queries from cubes/MP/DSO that are specific to users area.
I will then give each user role 1 + the adequate role 2, depending on their work area.
For role 1 I have got:
S_RFC
Activity: 16
Name of RFC to be protected: *
Name of RFC object to be protected: *
S_TCODE
Transaction code: RRMX
S_GUI
Activity: 16
S_USER_AGR
Activity: 01, 02, 03
Role Name: ANLG_BI_01
S_USER_TCD
Transaction code: RRMX
S_RS_AUTH
BI Analysis Authorization: BI_ALL
S_RS_COMP
Activity: 03, 16
InfoArea:*
InfoCube: *
Name (ID) of a reporting component: *
Type of a reporting component: *
S_RS_COMP1
Activity: 03, 16, 22
Name (ID) of a reporting component: *
Type of a reporting component: *
Owner (Person Responsible) for a reporting Component: *
S_RS_TOOLS
Logical Command Name: THEMES
Iu2019ve tested this role, and it works u2013 they can access queries, create workbooks, create permanent model workbooks
For role 2 u2013 Finance I have
S_USER_AGR
Activity: 01, 02, 03
Role Name: ROLE2
S_RS_ADMWB
Activity: 03,66
Data warehousing workbench Object: INFOAREA
S_RS_ODSO
Activity: 03
Infoarea: 0FIGL_ERP
DataStore Object: 0FIGL_014
SubObject for ODS Object: *
S_RS_ICUBE
Activity: 03, 66
Infocube SubObject: *
Infoarea: 0FIAP
InfoCube: 0FIAP_C02
S_RS_MPRO
Activity: 03
Infoarea: 0FIN_REP_SIMPL_1_ERP
MultiProvider: 0FIAP_M20, 0FIAP_M30
MultiProvider SubObject: *
I then gave to my test user this 2 roles, and with that user I can still see every infoarea, and access all reports.
I will have more specific roles u2013 to other areas (SCM, TV, etc), but I chose this one has an example.
First question I have: can I manage my requirement in 2 different roles: one for action that can be performed (role 1) and other for areas that they can access data from (role 2)?
What objects/restrictions am I missing in role 2?
Many thanks
Joana -
About roles and authorizations
hai friends,
who will create roles and authorizations plz
thanks in advance
suitable answer will be given suitabel points
kumariRoles and authorizations have to be done with Basis team and HR team together, because they are not the usual roles that other modules use. For instance, HR authorizations have different objects for PA, PY, Clusters, BM and CM. For OM and PD, you use transaction OOSP for authorization profiles.
For my personal experience, when the consulting team ask the basis team to deal with authorizations for HR, they become paralized when they find Structural Authorizations Profiles, Period of responsibility, etc., because they don't know (and it is not their responsibility) about HR objects and concepts handled in txn OOSP.
In order to avoid this problems, take an extra time for this in your implementation project. Roles and authorizations in HR, when done correctly, takes more time than other modules. -
OAM manage roles and Authorization in WebLogic integration
Hi
Had anyone done weblogic integration where OAM manages roles and Authorization?
I could read in Oracle WebLogic integration document that,
"The Security Provider only supports authentication for portals."
I wanted to figure out if anyone has done this before or Is it possible to delegate role management and Authorization responsibility to OAM?
Thanks
Kiran ThakkarThanks for the quick response.
Thanks
Kiran Thakkar -
Roles and Authorization strategy for SAP BIBO
Hello All,
We are doing an implementation where Source is a Oracle, SAP BI warehouse and BO XI3.1 as reporting solution.
Our customer has asked for the authorization strategy that will be implemented in SAP BI. Currently the users belong to different companies or plants or countries
Current structure is like,
User 1 belongs to Plant1 of Country1
User 2 belongs to Plant2 of Country2
user 3 belongs to Plant3 of Country1 etc..
We have more than 500 users who will use the reports. The user belonging to a particular plant should only see the plant data/Country data he belongs to.
As I understand, we need to create the roles in BW and these roles to be imported into BO to use for the row and column level security.
The options we considered are,
1. Use Bex queries in BW to with ABAP code in CMOD to identify the user belongs to Plant 1, 2 or 3 and provide necessary authorizations.
2. Create user groups based on the country or company they belong to and create as many roles as required. This will however impact the maintenance of so many roles in the BI system.
We are also forced to avoid Bex queries in BW and hence, trying to connect Multiproviders directly in BO universe.
How should we go forward in designing the authorization concept? Any better ideas?
Thanks and Regards,
SrinivasThere are two ways which we can implement this kind of authorization based on my knowledge.
1. Data Security purely at BW
If the data is secured based on roles and users, there is no need of additional authorization from BO side except at report and folder level if you go for SAP Authentication.
Once you use SAP authenication and enable single sign on option in universe connection, the SAP users can access data based on their profile set at BW.
2. Data Security from BO
Let's assume that, if nothing is set at BW and every thing to be take care from BO.
Then you could create one multiple provider for each plant / country. Create one connection for each multiprovider
Create restrictions (Tools--> Manage Access Restrictions) for each plant/country. There you can change connection names.
So you would need to create many restrictions for different permutations and combinations.
I never tries this option with Multiprovider. But It worked well with NON-SAP data.
Hope this helps!
Regards
Gowtham -
Diff.between BW and R/3 roles and authorizations
Hi Experts,
Please any one let me know is there any difference for creating roles and assigning authorizations in BW and R/3 systems.
Please let me know the BW related T-codes
Regards,
Reedy V.What version of BW? Are you using BI7 analysis authorisations.
BI7 - go [here|https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/media/uuid/ac7d7c27-0a01-0010-d5a9-9cb9ddcb6bce]
If using BW 3.5 or another similar version then build your roles in PFCG and assign to users in SU01
There is more to it which you can find [here|https://service.sap.com/SECURITY] (sorry for the poor link Bernhard ) under category SAP Business Information Warehouse Security Guides
Edited by: Julius Bussche on Jul 8, 2008 12:34 PM
Formatting and link corrected
Thanks Julius!
Edited by: Alex Ayers on Jul 8, 2008 2:10 PM -
As we know in MM different user have different roles to play and they need different SAP transaction and related activies.
In SAP we define the particular user who are actually allow to access only certain transactions only?
What are the steps to do this in SAP?
Secondly in which stage of implementation we define those user roles and assign duties to them in SAP ?
bEST Regards,
Kapilu can create the user role using tcode su01 and pfcg for authorization management
-
Travel Management: Role and authorization
Dear forumers!
What standard travel management role can I copy and modify according to my requirements in order to let the user only watch t-codes TRIP, PR05, etc. without a right to edit data? Or there should be some other actions with a role to make it for watch only without editing?
Standard roles are:
SAP_FI_TV_TRAVELER - we don't need this one
SAP_FI_TV_TRAVEL_ASSISTANT
SAP_FI_TV_ADMINISTRATOR - I already use this role
SAP_FI_TV_MANAGER_GENERIC
SAP_FI_TV_ADVANCE_PAYER - we don't need this one
SAP_FI_TV_TRAVEL_MANAGER - I already use this role
Best regards,
EldarHi,
Always the best process to do is to copy the standard role and customize it for own authorization concept (Business requirement). I think there is an another thread with the same issue in SAP HCM as well.
Regards,
Dora.
Maybe you are looking for
-
jdeveloper version: 10.1.3.2.0.4066 jheadstart version: 10.1.3.1.25 I have just installed both of the above and am receiving errors on compilation in both my viewcontroller and model projects. I receive the following error on the view project as soon
-
can anyone help me. I finally got my K9n2 diamond working. and im trying to adjust the dram setting so I can set it at 1066. I am not used to the bios for an MSI board. it boots just fine if i leave everything in auto but I have 1066 ram that this bo
-
[Workaround] Weird vim bash completion behaviour
Currently running bash-completion 1.2-2. Vim does not seems to auto-complete files when I am in the root of my home directory(i.e. just '~' and no subdirectories); only sub-directories are given as possible options. Resourcing /etc/bash_completion do
-
Iphoto transfer from disc says need latest version?
Hello--it took me days to figure out how to post so I apologize if messing up protocol, but have looked for hours and can't find an answer that isn't too confusing technologically. My sister burned photo's from my LG onto a disk with her Mac laptop.
-
why do I keep receiving this messagesoftware requires Mac OS X 10.6.3 or newer.