Scheduled automatic upload of roles/user mapping from R/3 to EP6
EP6.0 offers a nice tool to <b>upload roles</b> together with the <b>user mapping</b> from an R/3 backend system to the portal. This works very well, but in an environment where the user mapping happens on the backend system this <b>manual</b> process has to be repeated to keep the user mapping up to date.
It would be very useful if this process could run in <b>batch mode</b> and could be <b>scheduled</b>. Does anyone has a solution for this problem?
The way the portal user administration is designed works maybe very good for small companies, but for large companies with many users a <b>batch upload tool</b> is really needed!
<b>People from SAP</b> have told me that they are thinking about such a tool, but the pressure from the customers is not high enough to put it on their project list. So maybe we can <b>unite forces</b> to increase pressure on SAP project management.
Dear Krishna,
There are a few solutions for this problem and we are investigating some of them now:
- you can use an LDAP server. Transfer users and the groups to which they belong from the R3 system to LDAP. The groups correspond to the roles the users have. The portal can use the groups on the LDAP server. The portal roles have to be attached to the groups and not to the users.
- we are also thinking about writing a JAVA program that automizes the manual role upload that SAP delivers in the portal. The KM part of the portal contains a scheduler which can be used to schedule the upload of uesr mappings from R3 to the portal.
- you can also make an ABAP web service that is called from a program on the portal to transfer the usermapping. The program makes use of the UME API.
- Or you can make an ABAP program on R3 that calls a JAVA program on the portal that makes use of the UME API to store the user mapping on the portal.
your iview question:
Maybe you can change the default setting for the preferred GUI in the master iview that is used for the creation of the iviews. When you create a new iview the portal creates a delta link based on the master iview., so when you change the master iview all new created iview based on the master iview will have the correct setting immediately.
Best regards,
Johan
Similar Messages
-
Automatic upload of roles from ECC to portal (UME with LDAP)
Hi experts,
This thread reopen the question asked on the following message : automatic upload of roles from BI to portal
However, it concerns this time "UME with LDAP".
Problematic :
SAP Library 04s tells us that is not yet possible to automate role replication (or role assigment replication) from ABAP Based back-end to Netweaver Portal. Only manual process for initial upload is possible.
Source = http://help.sap.com/saphelp_nw04s/helpdata/en/41/5e4d40ecf00272e10000000a155106/frameset.htm
Questions :
1 - Did anyone ever try to implement such an automatic tool ?
2 - What if I'm not able to write on the Active Directory ? I am still able, at least, to automate role assignment replication from ABAP Based back-end to Netweaver Portal (ie. UME with LDAP) ? Directly from SAP R/3 to EP through UME, without passing through Active Directory since the group field is not maintained in AD.
Many thanks for your inputs
Alexis MARTINHello,
As I did not read the previous thread I don't know what exactly you are trying to achieve, but I can tell you about what we have done - as far as it is not too late yet.
We use the portal with integration to a BI system. In the ABAP stack we have lots of roles with menu items for hundreds of reports. We want the users to see these roles in the portal.
First we have used the role migration tool of the portal to upload these roles. There is a Java API for executing role uploads from code. You need to create a webservice in the java stack to call this api, and can call the webservice from ABAP.
However it is just a question of time and role size until this will not work at all. Standard role migration is more or less crap, stability is a problem. It also creates a lot of logs in the PCD and thus fills the database with trash. (After a few OSS messages there is now a program for deleting logs + you can turn of logging.) Also upload of larger roles takes up to an hour, and you alwasy have the problem that your portal roles are not up to date during the day.
When I got completely fed up, I have implemented an own navigation connector. When you log on to the portal it will connect to the ABAP stack via RFC, load the role, and generate the portal menu from it. It uses caching, but on every logon it checks whether the role has been updated in ABAP since the last time it was loaded. It is up to date, faster then PCD navigation, and you need absoluetely no periodical synching at all. I cant even understand why this is not offered by SAP per standard!
Drawback is that it will of course only work for the menu items, and only menu items with an "URL-type" are supported. I'm prettry sure however that it would be possible to implement a few other types as well.
Let me know if you are interested in the solution, I can give you a few additional details: oliverDOTsvisztATwienerbergerDOTcom
Oliver -
Unable to find User,Roles,User Mapping under UserAdministra Role in Portals
Hi All,
I installed SAP Netweaver sneak preview 2004 full java edition with sp9
version successfully but am unable to find the sub role User Mapping,User,Roles under
User Administartion Role in Portals.
only Identity management, Import, Activity reports are showned.
Can any one suggest me where i have to get this options?
Thanks & Regards
PhanikumarHi All,
Hi All,
I got the solution.
In the User Administration --> Identity Management, search the user or group or role then click on the result list item then you will get the details.
There you can find the following TABs for user/group/role.
1. General Information
2. Account Information
3. Contact Information
4. Additional Information
5. Assigned Roles
6. Assigned Groups
7. User Mapping for System Access
User Mapping is one of the TAB(7th). Click on that User Mapping TAB
regds
phanikumar -
User mapping from portal to R/3
Hello everyone,
Our situation is this :
We made some visual composer iviews (charts and tables) that get data from R/3.
Instead of creating users in R/3, we want to use only one public user who can only call RFC's in R/3. So how is the user mapping implemented in this situation?
Please give me detailed explanation for it or links of documentation.
I will be appreciative and all answers will be rewarded with points.
Thanks for help.In addition and from a maintenance perspective you could do a: Portal Group to R/3 UserMapping.
This will then automatically map all Portal Users in the Portal Group to the one R/3 user in the back-end. This saves effort when new users are created on the portal you don't have to map them all.
This method is also proposed by SAP for mapping to MDM for example.
NOTE: When you choose this you cannot trace the user in the back-end because
this back-end user is shared. If this is not a problem for your scenarion then I would say go for it.
Cheers,
Benjamin Houttuin -
CRM business role - user mapping initial load
Hi,
I'm tyring to initial load the data from the CRM systems into IDM. I'm able to get all data of the users expect their business role mapping(parameter in CRM).
in the read pass of the user from the abap initial load , the attribute for the parameter is as follows,
Target Source
sap%$rep.$NAME%Parameter1:Info:VARCHAR:255| parameter1
but no data is stored in the parameter1 table though the user has some parameter mapped in the CRM system
Can anyone plz help to load this user-business role mapping details.
Thanks in Advance.
Regards,
PricyHello Pricy,
can you just give me some hints on what you are trying to do exactly?
My assumptions:
- CRM business role is stored as user parameter in ABAP SU01 user data, right?
- you want to read all the ABAP user data from your CRM system INCLUDING the user parameter data from ABAP SU01 user data, right?
If that is the case at least the loading part should work pretty fine. I just tried this on my local system and had no issues, all user parameters of my existing ABAP users where loaded into one temporary table.
-> Pass: ReadABAPUsers -> table "sap%$rep.$NAME%Parameter1:Info:VARCHAR:255|"
Did you find this temp table created on your database correctly? My table is there and is called "sapT01_001Parameter1" (where my repository is named T01_001) and it contains all the existing user parameters.
What exactly is your issue?
Regards,
René -
Is it possible to automate creation of roles,users & assign roles to users
Respected Guru's,
Is it possible to automate creation of roles according to our functional requierment with the help of SAP IDM.
Futher, i would like to know whether creation and deletion of users along with assigning created roles to the user's can be automated.
Please help me....
Thank you.Hi Dayananadan,
SAP NW IdM is compatible with your system and uses SAP Java Connector (JCo).
My colleague Steffen Baumann wrote a blog with three parts, where you get some hints and screenshots how to create similar objects to business roles and automatically assign them. Have a look at the last two parts How To synchronize data from SAP HCM to SAP NetWeaver Identity Center using SAP PI (Part II) and
https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/8868. [original link is broken] [original link is broken] [original link is broken] Especially the last topic in the last part shows how to implement dynamic groups. It's not everything covered you will need to automatically create business roles and assign them. To explain this in detail is like writing another blog... If you go through the last two parts of the blog you will know how to modify the jobs my colleage has used for importing HCM data to create business roles similar to org. units.
You can also have a look at /docs/DOC-8983#section6. There you find "Identity Management for SAP System Landscapes: Configuration Guide" and other documents. They help to get familar with the possibilites of SAP NW IdM, but don't mention how to implement your case in detail.
Best regards,
Nils -
Automatic upload of content area items from the O/S
I wish to automate the upload of content area items into the portal. Can this be done via the PDK or otherwise?
I have a number of PDF and HTML reports that get generated and placed into a physical directory on the server. I want all these files from a specific directory to be uploaded as items into the portal automatically so that users can view the reports with appropriate security. The reports can be modified so that when run they insert a record into a custom table to store their path and file names. This can be used by a custom procedure to point to the files at the point of upload.
However, can this upload actually be done?
Any ideas on how to do this would be useful.
Regards,
JohnPhysical path on the database server.
Using the api to upload is easy as long as you provide the content-area id, folder-id, display-name, item-type (PORTAL30.WWSBR_API.ITEM_TYPE_FILE), content-area type id (PORTAL30.WWSBR_API.SHARED_OBJECTS), folder-region-id (whatever it is for Regular Items, you'll find it in wwsbr_all_folder_regions) and the physical file-name. -
Automatic import of roles to BI from MDM system?
Hi,
we do have custom MDM system. Since our authorization system is complex and heavily based on master data I wonder is it possible to achieve automatisation of transfering roles from MDM system to SAP BI?
General idea is to make a templates (PFCG - download template role to file) for BI roles which will be kept in MDM and used to generate a new role (based on new master data by simple search/replace in template file). Next issues are to transfer and import newly generated role to BI form MDM. At the moment we are using services and XML to transfer master data from MDM to BI and intend to use it in case of roles.
What we are missing, at the moment, is a way to automatically import role to BI (report which would do job of manual GUI role upload in PFCG)?
We were considering puting a such report for importing roles to BI to a process chain.
Any other ideas?
Kind regards.Hi Josko.
You should definitely use the possibility to generate BI Analysis Authorization from data
rather than creating PFCG roles in BI system:
http://help.sap.com/saphelp_nw70/helpdata/EN/59/fd8b41b5b3b45fe10000000a1550b0/frameset.htm
You should define your own datasource in MDM system to extract the current authorizations there
and then create data flow to store the data in copies of the template DSOs for generating authorizations.
Finally use the program RSEC_GENERATE_AUTHORIZATIONS as described in the above link.
Regards,
Lars -
Hi peeps, how do I delete all my photos from my iPad once they have been saved to my desktop, as they are clogging up my storage?
The links below have instructions for deleting photos.
iOS and iPod: Syncing photos using iTunes
http://support.apple.com/kb/HT4236
iPad Tip: How to Delete Photos from Your iPad in the Photos App
http://ipadacademy.com/2011/08/ipad-tip-how-to-delete-photos-from-your-ipad-in-t he-photos-app
Another Way to Quickly Delete Photos from Your iPad (Mac Only)
http://ipadacademy.com/2011/09/another-way-to-quickly-delete-photos-from-your-ip ad-mac-only
How to Delete Photos from iPad
http://www.wondershare.com/apple-idevice/how-to-delete-photos-from-ipad.html
iPhoto for iOS (iPad): Delete photos from iPhoto
http://support.apple.com/kb/ph3137
How to: Batch Delete Photos on the iPad
http://www.lifeisaprayer.com/blog/2010/how-batch-delete-photos-ipad
How to Delete Photos from iCloud’s Photo Stream
http://www.cultofmac.com/124235/how-to-delete-photos-from-iclouds-photo-stream/
The Fastest Way to Remove All the Photos from the iPad Camera Roll
http://ipadinsight.com/ipad-tips-tricks/the-fastest-way-to-remove-all-the-photos -from-the-ipad-camera-roll/
Delete Pictures from Your iPad
http://www.dummies.com/how-to/content/delete-pictures-from-your-ipad.html
Cheers, Tom -
Process to automatically upload Denial List file from service provider in GTS server.
Hi Experts,
At present we manually perform the uploading of denial list file provided by service provider manually.
We first download it ,then upload it through menupath SAP Compliance Management-->SPL Screening--> Master Data-->Load Sanct. Party Lists from XML File
I heard there is a setting for automatic upload of the files.
There is a path SAP Compliance Management-->SPL Screening--> Master Data-->SPL Screening--->Control XI Inbound Processing
where we need to Manintain
Service --BP Number--Data Obj -- LR
Can the experts please throw some light on what should be the process flow ,and what further configuration or Program needs to be created .
This will help me in moving forward with this..
Thanks & Regards
AmitHi Amit,
You can automate upload of xml files received from data providers related to SPL by using the SAP PI functionality.The process is as follows
Data provider places delta SPL xml files in FTP server and they will provide login credentials specific to your client.you need to write a batch job to read the file from FTP location and place it in your clients firewall.once it's in your client firewall you need to run another batch job to upload into GTS system.
SAP has provided the following standard PI proxy /SAPSLL/II_SPL_UPDATE_IN as an RFC enabled function module /SAPSLL/CON_SPL_XML_INBOUND for this requirement.
Additionally you need to maintain the above configuration which you have mentioned.
Regards,
Hari Challa. -
How to automatic upload sms to gmail or icloud from iphone 4s
I have iphone 4s. I am looking for an app that will schedule automatic upload all my sms to my gmail account or google drive or any storage online.
Thanks in advanceThere is no such app.
-
Portal Runtime Error while performing User Mapping to SAP SRM
Please find below the error I received while User Mapping from Enterprise Portal to SAP SRM :
Portal Runtime Error
An exception occurred while processing a request for :
iView : pcd:portal_content/administrator/super_admin/super_admin_role/com.sap.portal.user_administration/com.sap.portal.user_mapping/com.sap.portal.userMappingAdmin/com.sap.portal.userMappingAdmin
Component Name : com.sap.portal.usermanagement.admin.UserMappingAdmin
User Mapping not fully available..
Exception id: 04:21_23/06/05_0073_8097650
See the details for the exception ID in the log fileHi,
yes, Karsten is correct. Just some background:
"User Mapping not fully available.." finally means that user mapping is configured to use strong encryption, but the main crypto key for user mapping is missing. Usually, that's because "SAP Java Cryptographic Toolkit" and/or "JCE policy files for unlimited strength encryption" are not installed (or the server hasn't be restarted afterwards). The note will most likely help
Best regards
Heiko -
RE: WMP and Automatic Uploading to my C:/ Drive/No!
Hello,
My name is Seth. I have noticed that when I opened "organize" and then choose the option for my "music" files, I can erase folders from which WMP automatically uploads info. (pictures and music) onto my C:/ Drive.
This is great news. I just posted a question about how to erase the automatic uploading on my hard drive from WMP.
There were great people that came through and posted under my question. I thank all of you for these answers and ideas.
I now have my C:/ Drive space back and the application is not uploading automatically.
Sincerely,
SethHi Seth,
Thank you for your update and sharing.
So we have solved the issue here?
And you mean this thread for the question created?
RE: Windows Media Player
If issue has been solved, please mark any post that helps you in that thread, this will help other community members reading the thread. Thank you for your understanding.
If you have any other questions, please feel free to ask and we will be happy to help.
Best regards
Michael Shao
TechNet Community Support -
JAVA API Personalization iview / User Mapping
I am using the following code snippet to get the
User Mapping from the "Personalization" iview
IUserMappingData iumd = iums.getMappingData (systemalias, iuser);
Is there a similiar SET method?
TIA -hshI
When you use umdata.enrich(map), soon after that, use SET property in the Hash Map and finally call umdata.storeLogonData(Map). This map should contain updated credentials.
Hope this works.
Pls reward points if useful
Murali. -
Importing Roles-User Groups Mapping from one Environment to Another
Hi,
I have this situation. I am using WLP8.1 SP4
I have two environments (E1 and E2)and I have 2 MS Active Directory server (MS1 and MS2). The LDAP authenticator in E1 is configured to use MS1 and the LDAP authenticator in E2 is configured to use MS2. The user groups are stored in the Active Directory servers and the role-user groups mappings are done within the Weblogic.
I imported the role-user groups mappings from E1 to E2 and it works. After that, if I map another user group to an existing role and do an import again from E1 to E2, it does not take any effect. Why is it so? Any kind soul can help me? I am very lost now.?:|Hello! :)
Unfortunately, I'm already using Catalog Manager in transferring files. I'd really like to find out if there is a particular file that defines the permissions of the objects that I should also transfer, or if I should really do that manually for each of the objects?
Thanks for the reply! :)
Maybe you are looking for
-
Web Service Tester - ADF_FACES 60097 error
Hi Mike / Everyone, I created a very simple process to test it through Web Service Tester, however when clicking on "Send" button in Web Service Tester, i get the following error: java.lang.nullpointerexception ADF FACES - 60097: For more informatio
-
How to get WSDL url for a webservice created in Oracle Apex
Can someone please help me in understanding the below: I want to create a web service in Apex and invoke it from OBIEE. I have created a web service in Apex but not sure what will be its WSDL url which I can provide in OBIEE action link. Can some one
-
Moving files from a Time Machine backup manually vs restoring from a Time Machine backup
I have read several articles saying that contemporary Macs and OSs are built such that they clean themselves up - defragmentation, general sweeping, etc. I was told by the Genius, however, that there are many little files that are left lying around a
-
Prgramatically set ParameterBindings for To DataFormWebparts on the Same Page.
I have an External List Called TTOrderbook. One of the Columns on the External List is called AmendedOrderID. Its the Key of another TTOrderbook, to which this Order TTOrderbook. (i'e a self referencing table) So I need to create a SitePage that Sh
-
Availability of Nokia Software Updater for Microso...
Microsoft Windows 7 has been launched since October and a month has passed, yet Nokia being the top 3 mobile phone company in the world, is yet to release a version of the Nokia Software Updater that is certified for Microsoft Windows 7. Microsoft Wi