Solution manager security setup

Hi All,
We are trying to restrict the access at Business scenario level in Blueprint within Solution Manager. Any pointers to achieving this will be highly appreciated.
Example - We have created a Project Id - ABC within which we want to segregate access by business scenarios such as FICO, SD etc.
Thanks for your invaluable inputs
Regards
Vijaya

Hi,
I would suggest for every business scenario a Solman project to be created. Please go through the below SAP Help content, which gives detailed description:
http://help.sap.com/saphelp_sm40/helpdata/EN/44/060727cdaa2ab6e10000000a1553f7/content.htm
You should then be able to restrict access at project level for usergroups.
Regards,
Nagendran
Edited by: Nagendran Govindarajan on Nov 28, 2008 11:58 AM

Similar Messages

Solution Manager Security

Hello,
I'm responsible to setup Solution Manager to provide Enterprise Support to the customer. I would like my customer to use Solution Manager by using Internet VPN connection. In the middle of preparation, I have some questions for Solution Manager Security. Because our company has very strict security policy, I need to make sure the questions below and make report to the manager.
1. To follow our companyu2019s security policy, I need to select the port. Could you please let me know which port# do we need to open? I think port# 80 and 443 are required to use Internet connection. Are there any required port #?
2. What kind of Standard User Authentication does Solution Manager have? (Basic Authentication, Digest Authentication or other?)
3. I would like to restrict any unauthorized access. What kind of access control does Solution Manager have? (Like Service Market Place, is there any authentication before entering first screen?)
4. Is it possible to access both HTTP and HTTPS? If so, is it possible to restrict to HTTP connection? I think HTTPS is much safer.
I read the Security Guide downloaded from Service Market Place, but still have questions. I really need someoneu2019s help.
Thank you in advance.
Best Regards,
Natsumi

Hi Natsumi,
Your question addresses general topics of SAP NetWeaver Web Application Server.
Please find some answers below and I would recommend to check the standard documentation.
>
Natsumi Kimura wrote:
>1. To follow our companyu2019s security policy, I need to select the port. Could you please let me know which port# do we need to open? I think port# 80 and 443 are required to use Internet connection. Are there any required port #?
>
port #80 is the default port for http, port #443 is the default port for https.
You can define your own port numbers to provide access.
>
Natsumi Kimura wrote:
> 2. What kind of Standard User Authentication does Solution Manager have? (Basic Authentication, Digest Authentication or other?)
>
SAP Solution Manager 7.0 is based on SAP NetWeaver and is using the same authentications options.
>
Natsumi Kimura wrote:
> 3. I would like to restrict any unauthorized access. What kind of access control does Solution Manager have? (Like Service Market Place, is there any authentication before entering first screen?)
>
The first screen is the logon screen. Users needs to have logon data (user, password) to access the Work Center.
The URL for the Key User is accessible in the Internet (and may be further restricted to dedicated IP address by additional network infrastructure).
See section "4.4 Internet Communication Framework" in Security Guide.
See section "4.5 Secure Socket Layer (SSL) for HTTP Connections" in Security Guide.
>
Natsumi Kimura wrote:
> 4. Is it possible to access both HTTP and HTTPS? If so, is it possible to restrict to HTTP connection? I think HTTPS is much safer.
>
Yes, it's possible to offer HTTPS connection, only.
Helpful links:
[Application Help - Additional Information on Network Security|http://help.sap.com/saphelp_nw70ehp1/helpdata/en/0a/0a2e12ef6211d3a6510000e835363f/content.htm]
[Security Guide SAP Solution Manager 7.0 EHP 1 and SP 19 |http://service.sap.com/~form/sapnet?_SHORTKEY=01100035870000718044&_OBJECT=011000358700000310012009E]
[How-To install&configure the SAP Web Dispatcher|http://service.sap.com/~form/sapnet?_SHORTKEY=01100035870000722611&_SCENARIO=01100035870000000202&_OBJECT=011000358700000121752008E]
Best regards,
Ruediger

Solution Manager Diagnostic Setup Guide

Can anyone tell me where can I find the Solution Manager Diagnostic Setup Guide? I have the Advance Guide but not the standard guide.
I CANNOT find it in:
http://service.sap.com/instguides -> SAP
Components -> SAP Solution Manager -> Release 4.0 -> Diagnostics Setup Guide as of SPxx
http://service.sap.com/diagnostics
http://service.sap.com/nw2004s
Where is it hiding??? Or has it got a new name???
Points given if helpful answer is provided.
Thanks.
Regards,
Annie

Hi Annie,
I found a SDM Guide. The name of file is "Root_Cause_Analysis_Installation_Upgrde_Guide_SP13".
Unfortunately I do not know where it is stored.
I suggest you either to find for that or I can send you per Mail.
P.S. do not forget to award the points
regards
Thom

Solution Manager Diagnostic setup SM 4.0 NW2004s questions

Hi Experts,
Am new to solution manager and was trying today to setup SMD for the portals (EP 7.0 NW2004s). Here we have SM 4.0 (NW2004s) or SM 7.0 (as called now) already installed and used for different purpose. So i hope the SMD is already installed for this version. I am able to login to smd/admin page.
1. I did the monitoring system config. Now when I go to monitored system tab I get this message
Landscape DB is empty. Please make sure Component Analyzer is ready on monitored systems, and use "Refresh" button on this page
We haven't installed the component analyzer on the monitored systems. Where can we find it on SMP?
2. If any body could provide me with the document for the same or give me just the steps in sequential order for SMD setup or the latest setup guides as am bit confused reading guides I have. The guides available are for NW2004 i.e. SMD setup guide and SMD advanced setup (Version 1.0 June 2006) from SMP. I have also followed the blogs but there is nothing much on SMD setup.

I would definitely go to the highest support package level if you plan to install support packages. Many fixes have been incorporated.
RCA (Root Cause Analysis) is a function provided by SMD. To set that up check
http://service.sap.com/diagnostics
--> Root Cause Analysis Installation and Upgrade Guide
Markus

Monitoring PI Integration Server in Solution Manager

I am trying to set up monitoring the PI Integration Server in Solution Manager. The issue I am having is assigning the auto-reaction methond in solution manager. I am unable to assign as it is not modifiable in Solution Manager. I am able to change in PI system, but do not want to do it there. Has anyone done this and can you guide me to steps/documentation ?

Hi Alexey,
everything you need to know is in the "SAP Solution Manager operations"
document under
http://service.sap.com/solutionmanager
-> Media library
-> Documentation
if you have problems with the communication between the SLD and the SolMan
check document SAP Solution Manager Landscape Setup Guide
under http://service.sap.com/diagnostics
-> Media Library
and note 1148028 - Setup SLD in the scope of Solution Manager 7.0
If you are curious about the SLD architecture in general you can also have a look at
http://service.sap.com/sld
regards, Javier

Enterprise Portal monitoring with Solution Manager

Dear guru's,
I have just installed a SAP Solution Manager 4.0
I would like to monitor a Enterprise Portal SP15.
Does someone have a walkthrough for this because very little information can be found on the sap help pages.
I'm interested in user/memory/iview statistics etc.
Hopefully someone of you has experience in this.
I would appreciate it alot.
Thank you
Kind Regards,
Bud

Hi Bud,
I've found useful docs here:
https://websmp109.sap-ag.de/~form/sapnet?_FRAME=CONTAINER&_OBJECT=011000358700001908512005E
and.
http://service.sap.com/nw04operation
-->Supportability --Solution Manager Diagnostics - Setup Guide SP Stack 16
bet regards
Wolfgang

EWA for Business Objects (XI 3.1) within SAP Solution Manager

Hello!
We use Business Objects (XI 3.1) and would like to get weekly a EWA report within our SAP Solution Manager.
Our SAP Solution Manger has only ABAP stack and it has the SPS version 25.
We also do not use Wily Introscope/Diagnostics and E2E tools within SAP Solution Manager.
Question
Is it possible to set up EWA for Business Objects with our requirements (SOLMAN with ABAP stack and without E2E/Diagnostics tools)?

Hello,
The short answer is no. You can verify this in SAP Note 1507629 - Preparing a BOE system for Service Sessions in Sol. Manager.
"...1.) Managed System Setup
Perform the Managed System Setup for SAP BusinessObjects Enterprise as
described in the "End-to-End Root Cause Analysis System Landscape Setup
Guide". This guide can be found in the SAP Service Market Place:
-> http://service.sap.com/diagnostics
-> Navigate to the "Media Library"
-> Open the document "SAP Solution Manager Landscape Setup Guide"
Please ensure that you perform all steps mentioned in the guide which
are relevant for your product and version. Please read also SAP note
1357901, which is also referred to in the above mentioned setup guide."
So this is a requirement. There are also pdf documetns attached to this note that describe how to setup the EWA in Solution Manager. EGI_SBOP_EWA_part1.pdf and EGI_SBOP_EWA_part2.pdf.
The fact you have no Java stack and have not installed Diagnostics, just means it has not been done. It can be done and then you can do a managed system setup, and the balance of tasks required to prepare the system and Solution manager to generate EWA reports for the BOE system. Its just more work, not a show stopper.
Regards,
Paul

FAQ - SAP Solution Manager for VARs

You can find further technical questions around configuration & functionalities in a comprehensive
FAQ to SAP Solution Manager for VARs.
This FAQ covers questions and answers around:
    > SAP Solution Manager, enterprise edition
    > SAP Solution Manager VAR setup: configuration of Service Desk
    > Work Center Service Desk: functions & configuration
    > Work Center System Monitoring: setup of SAP EarlyWatch Alert
You can access the FAQ directly thru the following link [FAQ - SAP Solution Manager for VARs|http://service.sap.com/~form/sapnet?_SHORTKEY=01100035870000722612&_OBJECT=011000358700000490172009E].
Navigation path: SAP Service Marketplace > SAP Support Portal > SAP Support Infrastructure > SAP Solution Manager > SAP Solution Manager for Partners > Information for Service Provider > Training and HowTo Documents > Administrator
Please notice: The FAQ will be updated from time to time.
Edited by: Susanne Schlehf on May 4, 2009 2:48 PM
Edited by: Susanne Schlehf on May 18, 2009 12:56 PM

Hello Richard,
(1) regarding network connections see document [Draft:Technical Support Network Connections for VAR Scenario|http://service.sap.com/~form/sapnet?_SHORTKEY=00200797470000089947&_OBJECT=011000358700000880802009E] as overview and with a lot of detailed information.
(2) yes, you have to setup once all your customer connections at the beginning but then only add/remove with customer contract changes
(3) the workaround by sending by email can handled a anexception. EWA has to be done for productive systems like nowadays done by SAP. Additional EWA services could meas additional business case for a VAR - that's contract between VAR and customer.
(4) whatever you think may be a business to sell - do it ! (and get a monetary bonus from your boss
Kind regards
Heinrich

Configuring Solution Manager: Alternative Role to SAP_ALL

This is a general question regarding configuring Solution Manager and note 834534. I am configuring Solution Manager 7.0 at a client site. The main components that I am configuring are on the Monitoring and Operations side; for example, System Monitoring, Service Desk, Issue Management, and Change Management for Maintenance Optimizer. CHaRM will follow later on. Additionally, the client would like to use the project side of Solution Manager.
When I took training for Solution Manager from SAP, the SAP instructor advised the class to have SAP_ALL when configuring Solution Manager The problem I am having is that the client will not issue me SAP_ALL in the Solution Manager instance, regardless of the recommendation in note 834534. I can understand the client's reluctance to issue SAP_ALL, even though Solution Manager is not a financial system in of itself, however, I have found that I am constantly having to ask for authorizations as I step through the wizards and the Scenario-specific settings. When I run into issues which require further investigation by running transactions to check certain settings that are not specifically tiedd to a wizard or scenario-specific setting transaction, I run into further delays as I ask for additional authorizations to troubleshoot issues.
We have implemented the roles and assigned them to my ID in Solution Manager as outlined by the SAP Solution Manager Security Guide to the fullest extent possible; and I have been issued "Basis Roles" that the client issues to their Basis team. Regardless of these actions, I still run into authorization issues.
My question is, apart from the SAP Solution Manager Security Guides recommendations (which does not mention SAP_ALL), is there a role being developed, or has been developed that can be assigned to the Solution Manager configurator in lieu of SAP_ALL (as per note 834534)? I would think that this issue has been raised before, particularly since many companies have implemented SOX controls and are skittish about issuing SAP_ALL.
Your feedback is most appreciated.

Thanks for the reply, Nesimi.
While I appreciate that you do not use SAP_ALL, is that the case when you are configuring a brand new, clean system? Are you using the Configuration Wizards with out SAP_ALL? I ask this because when I ran the first configuration wizard, one of the steps is to create a "configuration user", which creates a user with SAP_ALL. However, I cannot use that wizard generated user ID because it has the role SAP_ALL.
In general, I am operating on 3 sources of information that says I need SAP_ALL to configure the system (not necessarily to operate it):
1. An SAP Instructor for the Solution Manager Operations and Monitoring Class
2. The IMG Activity "Create Configuration User" documenation in SPRO
3. Note 834534
I will review the english version of the link http://help.sap.com/saphelp_smehp1/helpdata/de/40/8ac473d40943ddb23def12bdb33437/frameset.htm that you have thoughtfully provided.
With respect to note 123640, I am not sure if that solves my problem or answers the fundemental question that I have in that given the 3 sources I quoted above. It seems to me that SAP's approach in indicating clearly that they prefer that the configuration user should have SAP_ALL is flawed given today's corporate governence policies. Clearly this recommendation is only for the initial configuration, and SAP_ALL can be taken away and replaced by the roles and recommendations in the SolMan security guide; to maintain Solution Manager. But when it comes down to the question "what do you need to configure Solution Manager, because we won't give you SAP_ALL", I am hard pressed to give an answer despite literally spending hundreds of hours researching "documenation" which does not give clear cut answers. I think SAP needs to address this issue instead of taking the easy way out and saying you need "SAP_ALL" as illustrated in the 3 sources of readily available information cited above.

Solution Manager Project

When creating a project in Solution Manager (solar_project_admin) I am receiving an error when creating the IMG View for the remote system. The message states that I am not authorized to display the project even though I have SAP_ALL and SAP_NEW authorizations in both systems. When reading the extended help for the error (SPROJECT322) it states that I need the value 03 for the field ACTVT in the authorization object S_PROJECT, but I have confirmed that this is already set.
It begins the process of creating the IMG in the remote system but does not complete the link back to the Solution Manager project.
Are there any other reasons why this type of behavior might occur?

Prince Jose
Thank you for your suggestion, but let me provide you with a little more information to see if this is still the correct action to take.
I currently have SAP_ALL and SAP_NEW authorizations in Solution Manager along with many different role assignments. In the satellite systems I have the IMG_CUS_ADMIN role for managing the projects when they are published to those systems.
In my most recent work I created a project in Solution Manager using 4 different logical components (BI, ECC, SCM, and SRM) for the systems that this project would interact with. With my current Solution Manager security and authorizations I was able to create the IMG view from Solution Manager to the BI, SCM, and SRM systems, but received my error message described above for the ECC system.
Based on that do you think I would still look at my security in the Solution Manager system, or a configuration in the satellite system?

Monitoring customer's systems in Solution Manager 7.1

Hello gurus.
I have successfully added our internal system to our Solution Manager 7.1 SP4 running on Oracle 11.2.0.2.
And now I'm wondering is it possible to add customer's systems to our Solution manager? There are some unclear moments one of which SLD configuration (RZ70, SLDAPICUST).
Does anyone have such an experience or maybe can help with links to documents or SAP notes.
Thank you!

Hi Alexey,
everything you need to know is in the "SAP Solution Manager operations"
document under
http://service.sap.com/solutionmanager
-> Media library
-> Documentation
if you have problems with the communication between the SLD and the SolMan
check document SAP Solution Manager Landscape Setup Guide
under http://service.sap.com/diagnostics
-> Media Library
and note 1148028 - Setup SLD in the scope of Solution Manager 7.0
If you are curious about the SLD architecture in general you can also have a look at
http://service.sap.com/sld
regards, Javier

Mdm configuration in solution manager

hi
can anyone give me the navigation to be followed in solution manager to setup a implementation project for sap mdm 5.5 ( for any it scenario or business scenario ) in solution manager 4.0 .
thanks in advance

Heiii,
Please follow these links :
/people/evan.stoddard/blog/2006/01/03/sap-solution-manager-new-info-blog
/people/luisfelipe.lanz/blog/2006/02/07/installing-a-solution-manager-diagnostics-the-easy-way
/people/federico.babelis2/blog/2006/04/08/the-benefits-of-using-sap-solution-manager-in-your-netweaver-infrastructure
hope this help.Please reward if you find it useful.
Rgds
Deepak

Solution Manager Diagnostics - Installation

I have installed SM EHP1 and have also installed SMD. However during the Basic configuration of SM, I'm getting Diagnostics Configuration errors during the Automatic Configuration phase of the Diagnostics configuration. The errors showing up are:
1. Cannot call Diagnostics Setup web service
2. Web Service URL: http://atl-osm-01.oversightsystems.com:8100/DiagSetupServices/Di...
3. SOAP:1.007 SRT: Unsupported xstream found: ("HTTP Code 404 : Not Found")
4. Error when processing Web service call
5. Error when calling SOAP Runtime functions: SRT: Unsupported xstream found: ("HTTP Code 404 : Not Found")
What am I missing here?
Thanks for the help.

Hello Hans.
Have you solved the problem? We have a similar problem with Solution Manager 7.0 EHP1 SP27.
Errormessage (parts are in German):
Web Service URL: http://solman.company.com:8100/DiagSetupServices/DiagSetupConfig?style=document
Cannot call Diagnostics Setup web service
SOAP:1.007 SRT: Unsupported xstream found: ("HTTP Code 404 : Not found")
Beim Prozessieren eines Web Service-Aufrufs ist ein Fehler aufgetreten.
Fehler beim Aufruf von Funktionen der SOAP Runtime: SRT: Unsupported xstream found: ("HTTP Code 404 : Not found")
Note: We have changed the http and https-Ports of ICM. Solution Manager is working fine, but Solution Manager Diagnostics Setup does not work.
Thank you for a hint.
Best regards,
Tobias

BCP Microsoft Platform integration with Solution Manager

Hi
Is it possible to integrate BPC Microsoft platform 7.0 and 7.5 with Solution Manager?
If so how? Is there documentation available explaining the process?

Hi Johan,
There is some level of integration available with Solution Manager. To set up your system for Diagnostics, refer to "End-to-End Root Cause Analysis System Landscape Setup Guide", which is available on Service Marketplace at [https://service.sap.com/sapidb/011000358700000074392009E|https://service.sap.com/sapidb/011000358700000074392009E], and follow the chapters that apply to Planning and Consolidation.
You can also access this document by going to [http://service.sap.com/diagnostics|http://service.sap.com/diagnostics] and selecting the Media Library link under the "More Documentation" section. The document is labeled "SAP Solution Manager Landscape Setup Guide".
Thanks.

Wily Introscope Version for Solution Manager 7 SPS 17

Hi
We have a solution manager 4 (now 7) running on an ABAP stack only, this was recently upgraded from Solution Manager 3.2 which was installed 3 years ago as ABAP stack only, this server was never powerful enough to have the Java stack added and the project did not require it.
I am now looking to migrate this ABAP Solution Manager 7 to a new server, using ABAP & JAVA so I can make use of Solution Managaer tools like Diagnostics, RCA, WILY etc.
On a sandpit copy I have migrated the ABAP instance to a more powerful server and added the Java Instance from the Solution Manager 4 Installation Master, so I now have a dual stack SM 4, I have patched this to SP17.
I am looking to install Wily Introscope for monitoring, I have read Note 797147 - Wily Introscope Installation for SAP Customers, where it says you should always use the latest version of Wily, which is 8.0.2, but looking at the note, the downloads for Introscope Enterprise Manager and Introscope Workstation are from SAP SOLUTION MANAGER 7.0 EHP 1, but I am not running Solution Manager on EHP1, I am on SP Stack 17.
Looking in the SWDC there are downloads in SAP SOLUTION MANAGER 7.0 -> Entry by Component -> Solution Manager JAVA Stack -> WILY INTROSCOPE ENTPR MGR 8
Is this what I should be using for my SP Stack 17, or should I use the EHP1 version?
Also, setting up the Solution Manager Diagnostics, is there a setup PDF for Solution Manager 7 SP17 ? I cannot find a setup guide for this release, most are for EHP1, I would rather not have to implement EHP1 as part of this migration !
Thanks for any help.
Paul.

Hi Bhudev
Thanks for the reply, I presumed it was the Wily introscope 8 without the EHP1 I required.
As for installation guide, I have think you have misunderstood my question, I already have the wily installation guide from the note location, I wanted to know if there is any Solution Manager Diagnostics setup guides for SP17 ?
When I use transaction SOLMAN_WORKCENNTER --> System Monitoring --> Solution Manager Diagnostics --> Diagnostics System --> Diagnostics Setup --> Setup Wizard
the first 2 (of 23) setups are failing :
SSO The value of profile parameter login/accept_sso2_ticket could not be checked
BI Cannot invoke CCMSBISETUP on host localhost
Warning :
User(BI) Role SAP_BI_E2E does not exist
Then it says :
To complete the Diagnostics Setup, you should perform the following operations as documented in Diagnostics Setup Guide
I cannot find this Diagnostics Setup Guide for SP17 ?
The installation guides are mainly for EHP1, media library under sap-ag.de/diagnostics does not show this setup guide, Master Installation guide does not mention it, so was wondering if anyone could point me in the right direction for this guide ?
Thanks,
Paul.

Solution manager security setup

Similar Messages

Maybe you are looking for