Scheduled automatic upload of roles/user mapping from R/3 to EP6

EP6.0 offers a nice tool to <b>upload roles</b> together with the <b>user mapping</b> from an R/3 backend system to the portal. This works very well, but in an environment where the user mapping happens on the backend system this <b>manual</b> process has to be repeated to keep the user mapping up to date.
It would be very useful if this process could run in <b>batch mode</b> and could be <b>scheduled</b>. Does anyone has a solution for this problem?
The way the portal user administration is designed works maybe very good for small companies, but for large companies with many users a <b>batch upload tool</b> is really needed!
<b>People from SAP</b> have told me that they are thinking about such a tool, but the pressure from the customers is not high enough to put it on their project list. So maybe we can <b>unite forces</b> to increase pressure on SAP project management.

Dear Krishna,
There are a few solutions for this problem and we are investigating some of them now:
- you can use an LDAP server. Transfer users and the groups to which they belong from the R3 system to LDAP. The groups correspond to the roles the users have. The portal can use the groups on the LDAP server. The portal roles have to be attached to the groups and not to the users.
- we are also thinking about writing a JAVA program that automizes the manual role upload that SAP delivers in the portal. The KM part of the portal contains a scheduler which can be used to schedule the upload of uesr mappings from R3 to the portal.
- you can also make an ABAP web service that is called from a program on the portal to transfer the usermapping. The program makes use of the UME API.
- Or you can make an ABAP program on R3 that calls a JAVA program on the portal that makes use of the UME API to store the user mapping on the portal.
your iview question:
Maybe you can change the default setting for the preferred GUI in the master iview that is used for the creation of the iviews. When you create a new iview the portal creates a delta link based on the master iview., so when you change the master iview all new created iview based on the master iview will have the correct setting immediately.
Best regards,
Johan

Similar Messages

  • Automatic upload of roles from ECC to portal (UME with LDAP)

    Hi experts,
    This thread reopen the question asked on the following message : automatic upload of roles from BI to portal
    However, it concerns this time "UME with LDAP".
    Problematic :
    SAP Library 04s tells us that is not yet possible to automate role replication (or role assigment replication) from ABAP Based back-end to Netweaver Portal. Only manual process for initial upload is possible.
    Source = http://help.sap.com/saphelp_nw04s/helpdata/en/41/5e4d40ecf00272e10000000a155106/frameset.htm
    Questions :
    1 - Did anyone ever try to implement such an automatic tool ?
    2 - What if I'm not able to write on the Active Directory ? I am still able, at least, to automate role assignment replication from ABAP Based back-end to Netweaver Portal (ie. UME with LDAP) ? Directly from SAP R/3 to EP through UME, without passing through Active Directory since the group field is not maintained in AD.
    Many thanks for your inputs
    Alexis MARTIN

    Hello,
    As I did not read the previous thread I don't know what exactly you are trying to achieve, but I can tell you about what we have done - as far as it is not too late yet.
    We use the portal with integration to a BI system. In the ABAP stack we have lots of roles with menu items for hundreds of reports. We want the users to see these roles in the portal.
    First we have used the role migration tool of the portal to upload these roles. There is a Java API for executing role uploads from code. You need to create a webservice in the java stack to call this api, and can call the webservice from ABAP.
    However it is just a question of time and role size until this will not work at all. Standard role migration is more or less crap, stability is a problem. It also creates a lot of logs in the PCD and thus fills the database with trash. (After a few OSS messages there is now a program for deleting logs + you can turn of logging.) Also upload of larger roles takes up to an hour, and you alwasy have the problem that your portal roles are not up to date during the day.
    When I got completely fed up, I have implemented an own navigation connector. When you log on to the portal it will connect to the ABAP stack via RFC, load the role, and generate the portal menu from it. It uses caching, but on every logon it checks whether the role has been updated in ABAP since the last time it was loaded. It is up to date, faster then PCD navigation, and you need absoluetely no periodical synching at all. I cant even understand why this is not offered by SAP per standard!
    Drawback is that it will of course only work for the menu items, and only menu items with an "URL-type" are supported. I'm prettry sure however that it would be possible to implement a few other types as well.
    Let me know if you are interested in the solution, I can give you a few additional details: oliverDOTsvisztATwienerbergerDOTcom
    Oliver

  • Unable to find User,Roles,User Mapping under UserAdministra Role in Portals

    Hi All,
    I installed SAP Netweaver sneak preview 2004 full java edition with sp9
    version successfully but am unable to find the sub role User Mapping,User,Roles under
    User Administartion Role in Portals.
    only Identity management, Import, Activity reports are showned.
    Can any one suggest me where i have to get this options?
    Thanks & Regards
    Phanikumar

    Hi All,
    Hi All,
    I got the solution.
    In the User Administration --> Identity Management, search the user or group or role then click on the result list item then you will get the details.
    There you can find the following TABs for user/group/role.
    1. General Information
    2. Account Information
    3. Contact Information
    4. Additional Information
    5. Assigned Roles
    6. Assigned Groups
    7. User Mapping for System Access
    User Mapping is one of the TAB(7th). Click on that User Mapping TAB
    regds
    phanikumar

  • User mapping from portal to R/3

    Hello everyone,
    Our situation is this :
    We made some visual composer iviews (charts and tables) that get data from R/3.
    Instead of creating users in R/3, we want to use only one public user who can only call RFC's in R/3. So how is the user mapping implemented in this situation?
    Please give me detailed explanation for it or links of documentation.
    I will be appreciative and all answers will be rewarded with points.
    Thanks for help.

    In addition and from a maintenance perspective you could do a: Portal Group to R/3 UserMapping.
    This will then automatically map all Portal Users in the Portal Group to the one R/3 user in the back-end. This saves effort when new users are created on the portal you don't have to map them all.
    This method is also proposed by SAP for mapping to MDM for example.
    NOTE: When you choose this you cannot trace the user in the back-end because
    this back-end user is shared. If this is not a problem for your scenarion then I would say go for it.
    Cheers,
    Benjamin Houttuin

  • CRM business role - user mapping initial load

    Hi,
    I'm tyring to initial load the data from the CRM systems into IDM. I'm able to get all data of the users expect their business role mapping(parameter in CRM).
    in the read pass of the user from the abap initial load , the attribute for the parameter is as follows,
                        Target                                                                             Source
    sap%$rep.$NAME%Parameter1:Info:VARCHAR:255|                        parameter1
    but no data is stored in the parameter1 table though the user has some parameter mapped in the CRM system                 
    Can anyone plz help to load this user-business role mapping details.
    Thanks in Advance.
    Regards,
    Pricy

    Hello Pricy,
    can you just give me some hints on what you are trying to do exactly?
    My assumptions:
    - CRM business role is stored as user parameter in ABAP SU01 user data, right?
    - you want to read all the ABAP user data from your CRM system INCLUDING the user parameter data from ABAP SU01 user data, right?
    If that is the case at least the loading part should work pretty fine. I just tried this on my local system and had no issues, all user parameters of my existing ABAP users where loaded into one temporary table.
    -> Pass: ReadABAPUsers -> table "sap%$rep.$NAME%Parameter1:Info:VARCHAR:255|"
    Did you find this temp table created on your database correctly? My table is there and is called "sapT01_001Parameter1" (where my repository is named T01_001) and it contains all the existing user parameters.
    What exactly is your issue?
    Regards,
    René

  • Is it possible to automate creation of roles,users & assign roles to users

    Respected Guru's,
    Is it possible to automate creation of roles according to our functional requierment with the help of SAP IDM.
    Futher, i would like to know whether creation and deletion of users along with assigning created roles to the user's can be automated.
    Please help me....
    Thank you.

    Hi Dayananadan,
    SAP NW IdM is compatible with your system and uses SAP Java Connector (JCo).
    My colleague Steffen Baumann wrote a blog with three parts, where you get some hints and screenshots how to create similar objects to business roles and automatically assign them. Have a look at the last two parts How To synchronize data from SAP HCM to SAP NetWeaver Identity Center using SAP PI (Part II) and
    https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/8868. [original link is broken] [original link is broken] [original link is broken] Especially the last topic in the last part shows how to implement dynamic groups. It's not everything covered you will need to automatically create business roles and assign them. To explain this in detail is like writing another blog... If you go through the last two parts of the blog you will know how to modify the jobs my colleage has used for importing HCM data to create business roles similar to org. units.
    You can also have a look at /docs/DOC-8983#section6. There you find "Identity Management for SAP System Landscapes: Configuration Guide" and other documents. They help to get familar with the possibilites of SAP NW IdM, but don't mention how to implement your case in detail.
    Best regards,
    Nils

  • Automatic upload of content area items from the O/S

    I wish to automate the upload of content area items into the portal. Can this be done via the PDK or otherwise?
    I have a number of PDF and HTML reports that get generated and placed into a physical directory on the server. I want all these files from a specific directory to be uploaded as items into the portal automatically so that users can view the reports with appropriate security. The reports can be modified so that when run they insert a record into a custom table to store their path and file names. This can be used by a custom procedure to point to the files at the point of upload.
    However, can this upload actually be done?
    Any ideas on how to do this would be useful.
    Regards,
    John

    Physical path on the database server.
    Using the api to upload is easy as long as you provide the content-area id, folder-id, display-name, item-type (PORTAL30.WWSBR_API.ITEM_TYPE_FILE), content-area type id (PORTAL30.WWSBR_API.SHARED_OBJECTS), folder-region-id (whatever it is for Regular Items, you'll find it in wwsbr_all_folder_regions) and the physical file-name.

  • Automatic import of roles to BI from MDM system?

    Hi,
    we do have custom MDM system. Since our authorization system is complex and heavily based on master data I wonder is it possible to achieve automatisation of transfering roles from MDM system to SAP BI?
    General idea is to make a templates (PFCG - download template role to file) for BI roles which will be kept in MDM and used to generate a new role (based on new master data by simple search/replace in template file). Next issues are to transfer and import newly generated role to BI form MDM. At the moment we are using services and XML to transfer master data from MDM to BI and intend to use it in case of roles.
    What we are missing, at the moment, is a way to automatically import role to BI (report which would do job of manual GUI role upload in PFCG)?
    We were considering puting a such report for importing roles to BI to a process chain.
    Any other ideas?
    Kind regards.

    Hi Josko.
    You should definitely use the possibility to generate BI Analysis Authorization from data
    rather than creating PFCG roles in BI system:
    http://help.sap.com/saphelp_nw70/helpdata/EN/59/fd8b41b5b3b45fe10000000a1550b0/frameset.htm
    You should define your own datasource in MDM system to extract the current authorizations there
    and then create data flow to store the data in copies of the template DSOs for generating authorizations.
    Finally use the program RSEC_GENERATE_AUTHORIZATIONS as described in the above link.
    Regards,
    Lars

  • Hi peeps, I recently had my iPad Air replaced and it automatically uploaded all my photos back from iCloud on to my iPad, taking up an enormous amount of storage. How can I delete them from my iPad, but keep them on my desktop?

    Hi peeps, how do I delete all my photos from my iPad once they have been saved to my desktop, as they are clogging up my storage?

    The links below have instructions for deleting photos.
    iOS and iPod: Syncing photos using iTunes
    http://support.apple.com/kb/HT4236
    iPad Tip: How to Delete Photos from Your iPad in the Photos App
    http://ipadacademy.com/2011/08/ipad-tip-how-to-delete-photos-from-your-ipad-in-t he-photos-app
    Another Way to Quickly Delete Photos from Your iPad (Mac Only)
    http://ipadacademy.com/2011/09/another-way-to-quickly-delete-photos-from-your-ip ad-mac-only
    How to Delete Photos from iPad
    http://www.wondershare.com/apple-idevice/how-to-delete-photos-from-ipad.html
    iPhoto for iOS (iPad): Delete photos from iPhoto
    http://support.apple.com/kb/ph3137
    How to: Batch Delete Photos on the iPad
    http://www.lifeisaprayer.com/blog/2010/how-batch-delete-photos-ipad
    How to Delete Photos from iCloud’s Photo Stream
    http://www.cultofmac.com/124235/how-to-delete-photos-from-iclouds-photo-stream/
    The Fastest Way to Remove All the Photos from the iPad Camera Roll
    http://ipadinsight.com/ipad-tips-tricks/the-fastest-way-to-remove-all-the-photos -from-the-ipad-camera-roll/
    Delete Pictures from Your iPad
    http://www.dummies.com/how-to/content/delete-pictures-from-your-ipad.html
     Cheers, Tom

  • Process to automatically upload Denial List file from service provider in GTS server.

    Hi Experts,
    At present we manually perform the uploading of denial list file provided by service provider manually.
    We first download it ,then upload it through menupath SAP Compliance Management-->SPL Screening--> Master Data-->Load Sanct. Party Lists from XML File
    I heard there is a setting for automatic upload of the files.
    There is a path SAP Compliance Management-->SPL Screening--> Master Data-->SPL Screening--->Control XI Inbound Processing
    where we need to Manintain
    Service --BP Number--Data Obj -- LR
    Can the experts please throw some light on what should be the process flow ,and what further configuration or Program needs to be created .
    This will help me in moving forward with this..
    Thanks & Regards
    Amit

    Hi Amit,
    You can automate upload of xml files received from data providers related to SPL by using the SAP PI functionality.The process is as follows
    Data provider places delta SPL xml files in FTP server and they will provide login credentials specific to your client.you need to write a batch job to read the file from FTP location and place it in your clients firewall.once it's in your client firewall you need to run another batch job to upload into GTS system.
    SAP has provided the following standard PI proxy  /SAPSLL/II_SPL_UPDATE_IN as an RFC enabled function module /SAPSLL/CON_SPL_XML_INBOUND for this requirement.
    Additionally you need to maintain the above configuration which you have mentioned.
    Regards,
    Hari Challa.

  • How to automatic upload sms to gmail or icloud from iphone 4s

    I have iphone 4s. I am looking for an app that will schedule automatic upload all my sms to my gmail account or google drive or any storage online.
    Thanks in advance

    There is no such app.

  • Portal Runtime Error while performing User Mapping  to SAP SRM

    Please find below the error I received while User Mapping from  Enterprise Portal to SAP SRM :
    Portal Runtime Error
    An exception occurred while processing a request for :
    iView : pcd:portal_content/administrator/super_admin/super_admin_role/com.sap.portal.user_administration/com.sap.portal.user_mapping/com.sap.portal.userMappingAdmin/com.sap.portal.userMappingAdmin
    Component Name : com.sap.portal.usermanagement.admin.UserMappingAdmin
    User Mapping not fully available..
    Exception id: 04:21_23/06/05_0073_8097650
    See the details for the exception ID in the log file

    Hi,
    yes, Karsten is correct. Just some background:
    "User Mapping not fully available.." finally means that user mapping is configured to use strong encryption, but the main crypto key for user mapping is missing. Usually, that's because "SAP Java Cryptographic Toolkit" and/or "JCE policy files for unlimited strength encryption" are not installed (or the server hasn't be restarted afterwards). The note will most likely help
    Best regards
    Heiko

  • RE: WMP and Automatic Uploading to my C:/ Drive/No!

    Hello,
    My name is Seth. I have noticed that when I opened "organize" and then choose the option for my "music" files, I can erase folders from which WMP automatically uploads info. (pictures and music) onto my C:/ Drive.
    This is great news. I just posted a question about how to erase the automatic uploading on my hard drive from WMP.
    There were great people that came through and posted under my question. I thank all of you for these answers and ideas.
    I now have my C:/ Drive space back and the application is not uploading automatically.
    Sincerely,
    Seth

    Hi Seth,
    Thank you for your update and sharing.
    So we have solved the issue here?
    And you mean this thread for the question created?
    RE: Windows Media Player
    If issue has been solved, please mark any post that helps you in that thread, this will help other community members reading the thread. Thank you for your understanding.
    If you have any other questions, please feel free to ask and we will be happy to help.
    Best regards
    Michael Shao
    TechNet Community Support

  • JAVA API Personalization iview / User Mapping

    I am using the following code snippet to get the
    User Mapping from the "Personalization" iview
    IUserMappingData iumd = iums.getMappingData (systemalias, iuser);
    Is there a similiar SET method?
    TIA -hs

    hI
    When you use umdata.enrich(map), soon after that, use SET property in the Hash Map and finally call umdata.storeLogonData(Map). This map should contain updated credentials.
    Hope this works.
    Pls reward points if useful
    Murali.

  • Importing Roles-User Groups Mapping from one Environment to Another

    Hi,
    I have this situation. I am using WLP8.1 SP4
    I have two environments (E1 and E2)and I have 2 MS Active Directory server (MS1 and MS2). The LDAP authenticator in E1 is configured to use MS1 and the LDAP authenticator in E2 is configured to use MS2. The user groups are stored in the Active Directory servers and the role-user groups mappings are done within the Weblogic.
    I imported the role-user groups mappings from E1 to E2 and it works. After that, if I map another user group to an existing role and do an import again from E1 to E2, it does not take any effect. Why is it so? Any kind soul can help me? I am very lost now.?:|

    Hello! :)
    Unfortunately, I'm already using Catalog Manager in transferring files. I'd really like to find out if there is a particular file that defines the permissions of the objects that I should also transfer, or if I should really do that manually for each of the objects?
    Thanks for the reply! :)

Maybe you are looking for