SapRoles as groups in Portal

Hi,
I have successfully amended AD (LDAP) so that the custom sap fields, including sapRoles and sapGroups appear in AD. This works great and I am able to exchange data between ECC 5.0 and LDAP (AD) without any issues.
My question ....
It appears that the groups are currently being pulled from the OU field but I want to change that.
Can I tell the portal to use the custom field - sapRoles - as the groups instead of the default field?
Please advise.

Adam,
There is unfortunately no magic here. The portal CANNOT read the SAPROLES field, but ....
Change the Portal to use a flat hierarchy instead of deep hierarchy. DEEP reads values from the OU, FLAT reads values from group membership or specifically "memberOf".
You need to write a script on your AD server to read the saproles field and update the group membership based on the presence or absence of certain sap roles. E.g. you may find that a user was a manager yesterday and needed access to MSS, but today they are no longer a manager and therefor no longer need access to MSS. I don't have the code for this but I do know that ny client has written such a script and they have it working perfectly.
Based on the approach stated above we have everything working very well and we are pleased with the results. We even have e-mail adresses being updated in AD and being sent back up to SAP.

Similar Messages

How to change datasource of a group in portal

Hello Evryone,
I am using EP7.0
When I am creating a new group under User Administration->Identity Management ->Create new Group,
a new group gets created, but the data source of this group is "UME Datasource".
I want to change the data source of this group. The available data sources when I search the groups are "R3_ROLE_DS", "UME Datasource", "Built-in Groups Adapter".
But there is no way that I can create a group with , say R3_ROLE_DS data source. On creation of a new group it just asks for a group name and group description. It always creates a group with a default data source "UME Datasource".
Can anyone help me on this.
Thanks
Vikram

Thanks Bala,
I do not have much knowledge about UME so kindly bear with me.
The problem that I am facing is : when I search for groups in portal, then I am able to view/search groups that are of type R3_ROLE_DS( ie these groups have been created in backend) as well as groups with type :"UME DATABASE".
I just want to know, that if I want to create a group in portal with type R3_ROLE_DS, then is it possible or not?
Basically, the issue is that groups created in backend are vsible/can be used in portal, but can I create groups through portal that can be visible/used in backend?
Vikram

Dynamic groups in Portal?

Hi,
Is it possible to use the OID dynamic groups in Portal?
It seems that the users of a dynamic group can't been seen in Portal: could someone tell me more about that?
When will the dynamic groups be implemented in Portal?
Thanks,
Magali

This functionality will not be available to 10.1.2 release 3 which won't be seen until mid 2006 according to a discussion we have had with Oracle.

Assignment of users to groups in portal based on some filter criteria

Hi All,
I have some 200 users in portal and the UME is portal database. Now I want to assign 50 users who belong to a specific department to a new group in portal.
Unfortunately during the assignment of users to groups there is no advanced search option where I can search for the users based on some criteria like department,organisation unit,first name etc. We can only search for the user based on user id or name.
How can we do a mass assignment of users to groups based on filter?
Any suggestions / solutions are highly appreciated. Points are rewarded for sure.
thanks
Sreeram

Hi Sreeram,
three possibilities:
1.) Develop a small component which does a search based on the criteria you want to use and which then assigns the found users to the group in question. Not really hard, but every development takes some time to develop, some time to test. So if you really want this actione done just once, development may take too long; if the scenario may happen more often, it may make sense to have such a component ready.
2.) Search for the users based on the criteria you want to use via the portals UI. Copy the result into some wordpad, and assign all results afterwards manually, as you have described. Ugly, but (for a one-time action) faster than 1.).
3.) Start like 2.), but use the copied result within the wordpad to "import" the group definition via a text file, see http://help.sap.com/saphelp_nw04/helpdata/en/1a/cde2fb82644d98bfb6d558440d6806/frameset.htm and around. Probably the fastest and most efficient way to go!
Hope it helps
Detlev

Scritps to create new group in portal

Hi, anyone knows where can i get a script to create new groups in portal?
I found very good script on Metalink doc.id. 258751.1 for creating users. Does exist something like that but for groups?
Thanks.

Yes we have build a set of API's to create groups, add members to groups etc using wwsec_api.If you need further details post your email id and can provide additional details.

Radio Groups on Portal

I have two fields on an Oracle Portal form labelled:
2004 UG Prospectus
2005 UG Prospectus
I want the enquirer (person completing the form) to only be able to select one or other of the fields (not both). On a normal Oracle Form, this would be achieved by using a Radio Group. The Radio Group function exists but I have no idea how to use it - locating any help on Radio Groups and Portal appears to be impossible!
Any help will be appreciated.
Thanks
Julie Webber

Thanks.
I don't want to use a LOV. What I am wanting is to have two separate fields, one labelled 2004 Prospectus, the other 2005 Prospectus. If 2004 is selected, they can not select 2005 and vice versa.
On normal Oracle forms, this is achieved by using Radio buttons. I can not find out how to use the equivalent on Portal.
Julie

Parent / Child Groups in Portal with LDAP

Heya,
we are using EP 7 on SP 10 (NW 7), for User Authentication we use the UME with a configured (writable) LDAP
Server as backend with a flat hierarchie. We have a Federated Portal Landscape with
3 Portals connected to one "main" portal and using Remote Role Assignement on the main portal for
our right managenemt.
Remote Roles which are added to Groups are working fine, but as soon as we try to use
the parent/child group functionality we are facing the problem that the user who logs on
has no access to anything in this group.
According to http://help.sap.com/saphelp_nw04s/helpdata/en/af/0cfc3f09c2c442e10000000a1550b0/frameset.htm
the only restriction for the use of child / parent groups is that:
"If user management is set up with write access to an LDAP directory, the following restriction applies:
When assigning members to a group that is stored in the LDAP directory, you can only assign users or
groups that are also stored in the LDAP directory. You cannot assign users or groups from the database
to groups from the LDAP directory. "
We fullfill the above condition (everything is LDAP based) - sooo: Any Hints for me / Someone facing
the same problem.
Thanks,
Marco

Hi Murali,
User Configuration
A particular company has the following setup:
●      Two roles: External and Internal
●      The role Internal contains users who also belong to two user groups: N.America and Asia
●      User A belongs to both the role Internal and the user group N.America
●      User B belongs to both the role Internal and the user group Asia
●      User C belongs to the role External
Conditions Defined in Portal Display Rules
1. If Group = N.America
   Then Portal Desktop = Orange Flavor
2. If Role = Internal
   Then Portal Desktop = Green Flavor
3. If Group = Asia
   Then Portal Desktop = Blue Flavor
4. If Role = External
   Then Portal Desktop = Red Flavor
Note that user A matches conditions 1 and 2; (ii) user B matches conditions 2 and 3; and (iii) user C matches condition 4.
Results
According to the list of priorities, these are the results:
●      User A receives portal desktop "Orange Flavor" (according to condition 1 which has priority over rule 2)
●      User B receives portal desktop "Green Flavor" (according to condition 2 which has priority over rule 3)
●      User C receives portal desktop "Red Flavor" (according to condition 4)
still any help on portal disktop rules to can see this link http://help.sap.com/saphelp_nw70/helpdata/EN/4b/29cf122f414721964269e1b675d62c/frameset.htm
if helpful don't to give points
thanks
best regards
ep

How to create master group in Portal - Segment Builder?

Hi All,
May i know how to create master group by using existing target group in segment builder PCUI in portal?
I manage to do it in sapgui:
tc: crmd_mktseg_mgr -> create new master group -> assign existing target group -> execute button -> master group is created.
I tried in portal: click on segment builder tab -> search existing profile set -> open existing profile set -> click on target group tab -> mark one of target groups -> click on Master group button -> save changes -> go back to sapgui crmd_mktseg_mgr -> search for all the master groups -> i dun see result that i did in portal.
Can guide me on this?
Appreciated your guide. Thanks.
Regards,
wyee

Hi All,
May i know how to create master group by using existing target group in segment builder PCUI in portal?
I manage to do it in sapgui:
tc: crmd_mktseg_mgr -> create new master group -> assign existing target group -> execute button -> master group is created.
I tried in portal: click on segment builder tab -> search existing profile set -> open existing profile set -> click on target group tab -> mark one of target groups -> click on Master group button -> save changes -> go back to sapgui crmd_mktseg_mgr -> search for all the master groups -> i dun see result that i did in portal.
Can guide me on this?
Appreciated your guide. Thanks.
Regards,
wyee

How to create user groups in portal

Hi
I am new to portal..can any one explain how to create a group and add the users to that group.
Thanks
Rahul

Hi
Go to "user administration"-> Identitiy management place "Groups" in the Search Criteria then you will see the options for creating NEw Group
at the time of Group creation there is a tab for Assigned users from there you can add users.
Or you select the user name and click on modify and select Assigned groups and assign your group.
Regards,
Mahesh

FIM 2010 R2: Creating Security Groups in portal : OU

Hi,
We want to create security groups in the FIM Portal and then sync them to AD. Now the groups could belong to different OUs in AD so is there a way to assign the OU in the portal ?
Can I customise the "Create Security Group" pop-up to have an input field called "OU" which can then be appended to the account name of the group to come up with the DN ?
Or perhaps someone has tried some other ideas for this scenario ?
Thanks

Hi,
Take care that you import the DN of the OUs as a string into the portal. DisplayName is good for that for example.
Add a reference attribute to resource type "group" that will hold the reference to a OU resource type and a string attribute for the OU container.
After the above steps from @Sylvain ceate MPRs which triggers a workflow on modification of that reference attribute (create of group will also modify this attribute so only this MPR is needed).
The workflow should than set the string OU attribute ob group (//target/ouStringAttr) with the DN sting of the selected OU resource type, like that: //target/ouRefAttr/DisplayName
You can then use this ouStringAttr in your outbound symc rule.
Beside the ouStringAttr solution it is also possible to work with //WorkflowData/String variables that you can use in workflows when applying an outbound sync rule to objects (creating ERE) but I find above solution a bit more easier to implement.
Regards
Peter
Peter Stapf - ExpertCircle GmbH - My blog:
JustIDM.wordpress.com

LSO - hide course group in Portal display

Dear experts,
My client has created a extensive Course Catalog with all course groups and course types that will be necessary for the period of one year.
After creating that they found out that one particular course group has courses that will not be available for some time during this period.
We were able to hide all courses removing the flag in course type information IT, but the course group itself is still displayed in the Portal.
For the record, this course group does not have the flag Subject area in IT 1063 because it's not a group root.
Which would be the best solution to hide the course group? I'm trying to avoid to make changes in the structure of the course catalog in the back end, but I'm not sure if there is any solution for that.
Any ideas?
Thanks in advance!
Best regards

Dear Manny,
Thanks for your reply, but my problem is with a course group, object L, not a course type. The course types are already hidden the way you've mentioned. IT1029 is not allowed to objects L, only D.
My problem now is how to hide the course group to what these hidden courses are assigned. It's displayed in the Portal without any courses.
Do you know how to do it?
Thanks!
Regards

How to choose Affinity group in portal.azure?

Hello.
How do I choose an affinity group for a new storage account in the the new "portal.azure.com"? It seems that I only can choose a location at the moment.
In manage.windowsazure.com it was available in the dropdownlist when creating a new storage account.
Best regards
Martin Nordkvist
This is Me!

Hi Martin,
Resource groups enable you to manage all your resources in an application together. Resource groups are enabled by the new management functionality, Azure Resource Manager. Azure Resource Manager allows you to group multiple resources as a logical group
which serves as the lifecycle boundary for every resource contained within it. Typically a group will contain resources related to a specific application. [from above link]
We could understand "Resource group" is a logical group. It could contain our all resource in one application. And it is a Resource manager functionality. Also, if your resource is in others regions always could be add into
one resource group.
For "affinity group" , we could understand it as a "physically close group". It is in one region and physical closer.
But they are not opposite. Base on my experience, we also use the affinity group as resource group. For instance, you could create a null cloud service on the old portal . And then you could see the cloud service name as a resource name in
the new portal, and you could add some resource into it.
>>Will affinity groups be a part of Azure in the future or will it be cut out?
And now the new portal is in preview, some functionality is a work in progress.I am not sure the affinity groups whether the part of new Azue portal.
Regards,
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Access OID Groups in Portal

I've setup item access privileges on a page. I have created a new OID group and attempted to give this group access to this item. I can choose the group, but when it's added, it does not show the group name, rather a number, i.e., (D8F909F2393035B7E0340003BA2183E9).
What can I do to make the group name show up?

Hi Pramod,
To access Peoplesoft applications from Portal you have two options :
1) By using Appintegrator iView : As all the applications in peoplesoft has their own urls like for attendance regularization, leave applicaion etc., you create appintegrator iview which points to ur peoplesoft application and by doing user-mapping, users can access these applications. Refer link for [How to use appintegrator iview|http://help.sap.com/bp_epv160/documentation/How-to_Guides/25_HowToUseAppIntegrator_en.pdf]
2) By developing application in VC: You can easily create nice looking applications in VC & host them on portal. VC can pull data from peoplesoft in 3 ways :
      - By using WebService : Expose peoplesoft applications as web services and u can easily create model in VC. (Recommended)
      - Directly accessing database using JDBC drivers : Though this approach is not recommended, u can directly connect to peoplesoft database tables and fetch the desired data.
      - iWay JDBC drivers : These are 3rd party drivers available to connect to peoplesoft database.
I hope this will help u.
Thanks & Regards,
Amol Ghodekar
(Reward points for helpful answers)

Sort Loaded Groups in Portal According to Source Filename Property

Hello,
I am using a script to load 4 files in th Data portal and later graph some selected channels. The problem is that when I choose the files through a dialog box, the order gets mixed up in the data portal. I would like the files to be sorted according to the source filename. Here is the loading script:
Dim i, intLoop, Group,b
Call Data.Root.Clear()
If FileDlgShow(DataReadPath,"TDMS Files,*.tdms","DataSelection",True) = "IDOk" Then
For i = 0 to UBound(FileDlgNameList)
Call DataFileLoad(FileDlgNameList(i),"TDMS","Load") DataFilename,FileImportFilter,ImportAction
Next
End If
Is there any way I can do that?
Thank you!
Solved!
Go to Solution.

winner wrote:
Hi Saloutios,
You can sort the FileDlgNameList Array for example using the BubbleSort algorithm:
Sub BubbleSort(arr)
Dim value, numEls
Dim index
Dim firstItem
Dim indexLimit, lastSwap
' account for optional arguments
numEls = UBound(arr)
firstItem = LBound(arr)
lastSwap = numEls
Do
indexLimit = lastSwap - 1
lastSwap = 0
For index = firstItem To indexLimit
value = arr(index)
If (value > arr(index + 1)) Then
' if the items are not in order, swap them
arr(index) = arr(index + 1)
arr(index + 1) = value
lastSwap = index
End If
Next
Loop While lastSwap
End Sub
The input array is sorted after you called that procedure.
Hope this helps
Winfried
Hi Winfried,
Thank you very much for the reply. That worked just fine for me!
Cheers!

Transport User Groups in Portal

Hi
In Development Portal i assigned Portal roles to user groups
How can i transport the assignment.....i mean user groups
Thanks

Go to User Administration - Identity Management in your portal.
In the search criteria, select Group and then select the data source where you created your custom groups.
If you use a * and search, you can find all the groups.
You can then select one or multiple groups and click on the "Export" button.
In the following screen, you can see that the group information and the user to group assignment will be populated as a text file inside a text window.
Select all the text (Right click and Select All) in that export window and paste it into a notepad and save it.
Now, in your target portal system, go to User Administration - Import
Browse and select the notepad which you have saved above and click on the Upload button.
You can do a similar export function on Users, Roles along with Groups.
Thanks,
Shanti

SapRoles as groups in Portal

Similar Messages

Maybe you are looking for