Standard UME Actions: Read_All

Hi,
I'm trying to allow the identity managment iview in my NW04s SP10 poirtal to read (but not modify) all the users/groups/roles and their relationships. Looking at [SAP Help|http://help.sap.com/saphelp_nw70/helpdata/en/5f/670db7939b8e48999d65f8a05ad611/frameset.htm], it sounds like Read_All is what I want.
Enable a user to read user, group, and role profiles in all companies.
This is a portal for our suppliers so the companies part is very important. However looking at the description of this action in the pcd properties is says:
Read only access to users, roles and groups (belonging to one company only).
This is a direct contradiction to SAP's documentation. So is there something I'm doing wrong or another way to do this?

Yonko,
The role's assigned to my test user are all user created. There are no other assigned actions that would interfere. I have not assigned the delegated user admin role as this would give more power to the user than we want. What we are going for is a role for our support people to be able to unlock and reset people's passwords. So we just want them to be able to be able to unlock and reset the passwords of all users in all companies, which I assumed manage all user passwords would do, but I am obviously missing something.
Best Regards,
Chris

Similar Messages

UME actions and Group permissions

Hi there ,
New to portal and NWDI . How do you see what a UME action contains.
i.e. MANAGE_ALL . Do you need java skills or visual administrator to view.
Also, using NWDI.Administrators group , the group itself gives permissions
outsided of just having the NWDI.Administrator role. Where/How are the group
permissions defined ? Thank You
Dan.

Dan,
This is a good place to start: [Authorization Concept of the AS Java|http://help.sap.com/saphelp_nw04s/helpdata/en/44/7fdf2470a412d2e10000000a422035/frameset.htm]. The two roles are different. Security roles are part of the J2EE Standard. UME roles are collections of UME actions. The UME interface cannot show the J2EE roles.
Now as to the role that lets you look at system info, you are correct. As your test showed, this is not included in Manage.All. I just tried that myself. If you look in the visual admin, you see there is a security role called administrators assigned to the group Administrators. Now when the developers create a J2EE application they specify the name of the role that the user must have in order to access it. Often they use the name administrators. When the applications are deployed to the server, the AS Java consolidates all these roles into a single role with the same name, administrators, by role references. This is assigned to the Administrators group by default. This is done to make the life of the developer and the deployer easier. So System Info needs this role. Well, there are two keystore roles assigned by default as well, but I doubt these are the roles System Info is looking for. In SAP NetWeaver 7.1 you have more granular control. But that is another question.
I hope that helps.
-Michael

SAP Standard Followup Action for Material Movement at the time of UD.

Does anyone know if SAP offers a standard Followup Action that once completing the Automatic Usage Decision, it will perform a Material to Material movement at the same time.
Exampe: I have two Materials with different Inspection types and Inspection Plans that will get processed and made into CP14.
1) CP14H - Incomimg Inspection Type Z01
2) CP14.B1 - Inprocess Inspection Type Z04
Both materials get assigned to the correct plan. They are then tested for required characteristics. If all are in Spec, an auto Batch Job complete the UD. At the same time I want to do a Material to Material movement to CP14 Unrestricted Stock for both inspection lot types. Right now to do the Material to Material movement I have to complet a MIGO transaction manually.

Look at FM QM06_FM_TASK_GOODS_MOVEMENT.
It is a standard function module that is used in the action boxes in a quality notification to perform a goods movement. It is meant to be interactive with the user so it won't work as is, as a follow-up action to a UD. But you might be able to have your programmers copy this FM and use it as a basis to create your own custom code for your follow-up action. It might save you some time.
FF

List all UME actions of all Roles

HI all,
I need to list all the UME actions associated to all roles. I couldn't find any API suitable for this requirement. Can some one help me on this. ?
Thanks,

Dear P734305
Please have a look at [http://wiki.sdn.sap.com/wiki/pages/viewpage.action?pageId=16442|http://wiki.sdn.sap.com/wiki/pages/viewpage.action?pageId=16442] and search in the SDN. you can use the security api to list the UME data.
Refer to [Security API |http://help.sap.com/javadocs/NW04S/current/se/index.html]
Best Regards
Arun Jaiswal

Specific UME Actions required for Deployement in CE 7.1

Hi Experts,
I need to know how many and which UME action are required for deploying the application in CE 7.11
For deployement, we usually assign the UME Role called "Administrator" to the ID that we use for deployment.
If I remove this "Administrator" UME role, an error message is thrown as...
com.sap.ide.eclipse.deployer.api.APIException: DeployException,cause=ERROR CODE DPL.DCAPI.1023AuthorizationException
This "Administrator" UME role has some 2978 UME Actions assigned to it.
For the UME role "Administrator", inside the assigned UME actions, I have tried filtering the UME Actions based on the filter keyword "deploy", which returned some 14 UME actions.
Now, I have made following Test case and result.
Test Case:
1) Remove the Administrator Role from the ID that is used for deployement.
2) Now Assign all the above 14 UME actions that were found related to "deploy" keyword to a Custom UME role "DeployRole".
3) Deploy using the same id.
Result : Deployement fails with the same above mentioned error.
Conclusion: There can be 2 possible conclusions...
1) None of the above 14 UME actions provide the authorization for the deployment.
2) OR There are some other UME actions which might have some dependecies that are required along with the suspected UME actions.
In short my requirement here is, to find out the specific UME actions that are required for deployment, so that i can remove the "Administrator" UME role and assign the specific UME actions needed for deployment to a my Custom UME role, and assign this Custom UME role to the user ID for deployment.
Regards,
Shreyas Pandya

Hey Nghia Nguyen...!
Thanks a lot for your reply, i have rewarded you the points.
I have found out that for deployment following UME actions are required.
dc_action (Mandatory)
auth.all.all (Mandatory)
deploy_action (Not Mandatory)--> if you remove this deploy_action UME action the deployment will still work, but in developer studio, the Deploy result dialog box with OK button, that pops every time after you deploy your project by right clicking your application and choosing "Deploy new Archive and Run" will cease to appear and the application will directly run in the browser.
Regards,
Shreyas Pandya

How to Display all UME Actions

Hi
I have a requirement to display all UME actions.
and also display UME Action for Loged in User.
So please let me know the code how to overcome these two requirements.
Thanks
VB

Hi,
Check this link for a list of UME actions. You can read that XML file and get the list of actions in your application.
http://help.sap.com/saphelp_nw04s/helpdata/en/5f/670db7939b8e48999d65f8a05ad611/frameset.htm
Regarding the actions for logged in user, you may have to check with javadocs if there is any classes available for this.
http://sdn.sap.com/javadocs
Regards,
Harini S

Applying Standard Advanced Action to a Button Type

Hi. Does anyone happen to know if it's possible to apply a Standard Advanced Action to a Button Type that will be used on multiple slides. My project has Home, Back and Next Buttons that I've used on most slides. I've created a Standard Advanced Action for these buttons, but haven't figured out how to apply the advanced action without going through each slide and selecting it from the very long list of Advanced Actions I have for the project. If anyone knows of an easier way to do this it would be very helpful for me. Thanks.
Kim

Kim,
Which version do you use? In Captivate 6 this is possible if you use Shape buttons: you can put them on the Main master slide (or on individual master slides), or time for the rest of the project. Blogged about them:
http://lilybiri.posterous.com/why-i-like-shape-buttons-captivate-6
If you are on a previous version, I'm sorry but a normal button cannot be displayed for the rest of the project, nor put on a master slide. However there is a static button widget that has not as many functionalities, navigation however is possible, advanced actions not. Maybe that widget can help you, it is static which means that you can display it for the rest of the project (be sure to check the option 'Always on top') or even use it on a master slide.
Depending on the exact content of your standard actions, maybe the action can be used without editing on each slide. Then it is just copy+paste work with regular buttons.
Lilybiri

Where are all the UME actions and UME roles stored?

Hi there,
I had a look at the SAP<SID>DB.UME* tables, it seems to me that they are not stored there.
What I wanted to achieve is to build a list of all user, user to role assignment, all UME actions, and role to action assignment so that we can do some analysis of the data.
Another related question is about the SPML based java API for user management in UME. It only allows you to list all the UME roles. What about the J2EE security roles? It seems to me that by using this API, you can not get a complete picture of user authorization, which includes both UME role and J2EE security role. Any comments?
Thanks in advance
GG

Hi,
I would suggest to use [UME Java API|http://help.sap.com/javadocs/NW04S/SPS09/se/com/sap/security/api/package-summary.html] instead of reading from the DB tables. You can get all users using methods of the class IUserFactory. The class IRoleFactory has method getRolesOfUser which gives you all roles for each user. Don't forget about roles assigned to user groups. Have a look also at package com.sap.security.api.acl. You should be able to get all ACL entries using [IAclManager|http://help.sap.com/javadocs/NW04S/SPS09/se/com/sap/security/api/acl/IAclManager.html]. Especially, check the code example. I've never done this but from reading javadocs it looks like it should be possible.
Have a look also at this [document|http://help.sap.com/saphelp_nwce711core/helpdata/en/a4/d39b3e09cdf313e10000000a114084/frameset.htm]. It describes the authorization concept of the AS Java.
Cheers

Find roles by assigned ume actions

Hi
Does anybody know of a way to find out, which roles are assigned a specific UME action?
In the identity management I can find a specific role and see all the assigned ume actions, but I want to find a specific UME action and see all the roles, that has this ume action assigned.
Does anybody know how this is possible? May directly in DB?
Cheers,
Jacob Vennervald

I have now tried to make a small java portal application that handles this but I can't seem to find at method to find which ume actions are assigned to a specific role.
Does anybody have any input?
/Jacob

Standard Dynamic action set up for country USA

Hi All,
Could anybody tell me where can search standard dynamic action set up for country USA.
Regards
Sirisha

Go to table V_T588Z and then enter the infotype for which you are checking. Then click on the Selection option from the menu, and then By Contents. you will get a small popup of the table fields. Scroll to the end and select "Var. function part" and then click on the green tick. Then in the Field contents enter - T001P-MOLGA='10' then select choose.
You will then get all the D'actions for the US. Make a note of the numbers under the column FC & No. Then go back and then check the rows as per the noted number combinations. Thats all you have all the D'actions maintained for US.

Missing property category - UME Action

Does anyone know why when I edit a role, the option 'UME action' is missing from the drop down list under property category?
This is happening on EP6 SP2 patch 4 (620 j2ee engine).
Thanks

Hi Ram
Please check assigning these roles instead of super admin role
"content_admin_role" or " contentmanager" . In case if any of these enable open permissions then check out what activity is in the role and include in yours .
Regards
Rahul
Award points if help useful "

Forms - Calls to stored procedures instead of standard database actions

After discovering Reports, I'm now getting started with Forms in APEX. :)
While I like the basic functionalities offered by the different Wizards, there's one thing that bothers me. After creating your form, you basically get 3 buttons (not counting cancel) for the different actions, each corresponding with a Database Action (SQL INSERT/UPDATE/DELETE). This is nice, but it's not exactly what I want. I would like to replace the direct database actions by calls to stored procedures (in a package), one for each action. It would be nice, of course, to keep the Wizard advantages, especially considering the fact I would like to find a standard, easy way to create forms. So, basically, I would like to create my forms this way, but instead of linking the button to a predefined database action, have it call a stored procedure. Is this somehow possible and what would be the easiest way to realize this?
I'm running APEX 4.0.1.00.03 on an Oracle XE database.
Erwin

Okay, this was working nicely. But I must be missing something...
I made an (interactive) report and added two link columns, one for the update and one for the delete (the insert is handled by a non-row related create button). I also created 3 forms on a procedure, one for each action (I/U/D). Now, when I call my form page from the report, I want to pass the values of the different columns of the selected record to this form, so the user can view and adapt them. Seems quite logical to me. There's only one problem. The column link seems to be limited to 3 items? Euh... am I missing something or is this not the way to do this.
Let me illustrate this with an example.
I created an UPDATE form, linked to a procedure to modify a given city.
This procedure has the following parameters:
- ID (hidden on the form)
- PROVINCE
- ZIP CODE
- NAME
- DESCRIPTION
On the other hand, I have my report which gives an overview of the cities. This report has the following columns:
- ID
- PROVINCE
- ZIP CODE
- NAME
- DESCRIPTION
I also added 2 empty columns to contain the UPDATE and DELETE links. Basically, I just use these to place a nice icon for the different actions.
Now, when I click on one of these icons, I want to pass the field values of the selected row to my form. In this case, that means I want to pass 5 values to the 5 items of my form. BUT, under the link column, I see only 3 items? Am I missing something really stupid or am I handling this the wrong way?
Erwin

UME Actions in 12.1

Hello ,
I have a transaction where I am writing an XML file locally within the project using web://u2026. Then using FTP to put that file on a remote folder and after a success of the FTP action I delete the local file on web://u2026
This works well if I test it as an Admin or a Super Admin.
I have a custom role that needs to execute this and that is where it is failing.
Do you know if there is any particular action I can use in the UME that will solve this issue u2013 I tried FileSystem_RW but that did not work, and finally I tried Workbench_all and that worked , but obviously it is not right to assign this action to a Custom Role.
I am on 12.1.8.
Any thoughts are appreciated.
Thanks
Udayan

Hi,
Instead of XMII_Workbench_all, if XMII_Workbench_content action is assigned to custom role, one can create and delete local file on web://... without exposing workbench link on custom role users' home.
Thanks,
Sumit

UME actions

Hi All
I have a question for you!
How can I indicate the actions my application has?
This is needed to assign permissions to roles and groups in the WAS user management.
King Regards

Hi Kwang,
I would appreciate if you can please send me some more details on com.sap.security.core.admin.permissions, like its API or related.
I have created one UME Roles, assigned to EP user, able to extract/display this role using some custom code but now, I also need to extract the authorizations/actions given to this user.
If this possible? If yes, please guide me.
Awaiting Reply.
Thanks and Warm Regards,
Ritu R Hunjan

UME Actions / Permissions

Hi,
There is an Action
- <ACTION NAME="Manage_Roles">
<DESCRIPTION LOCALE="en" VALUE="Permission to view, add, modify, and delete UME roles and to assign users and groups to UME roles. Does not apply to portal roles." />
<PERMISSION CLASS="com.sap.security.core.admin.permissions.UMAdminPermissions" NAME="ROLES_VIEW" VALUE="*" />
<PERMISSION CLASS="com.sap.security.core.admin.permissions.UMAdminPermissions" NAME="ROLES_ADD" VALUE="*" />
<PERMISSION CLASS="com.sap.security.core.admin.permissions.UMAdminPermissions" NAME="ROLES_MODIFY" VALUE="*" />
<PERMISSION CLASS="com.sap.security.core.admin.permissions.UMAdminPermissions" NAME="ROLES_DELETE" VALUE="*" />
<PERMISSION CLASS="com.sap.security.core.admin.permissions.UMAdminPermissions" NAME="ROLES_ASSIGN" VALUE="*" />
</ACTION>
I am trying to restrict the extend of the Manage Roles action to only certain roles which have the names starting with "SAM_XXX". I thought I could just assign VALUE="SAM*" but apparently it didn't work. So I am wondering if anyone knows what the VALUE parameter is used for.
Thanks.

Hi Kwang,
I would appreciate if you can please send me some more details on com.sap.security.core.admin.permissions, like its API or related.
I have created one UME Roles, assigned to EP user, able to extract/display this role using some custom code but now, I also need to extract the authorizations/actions given to this user.
If this possible? If yes, please guide me.
Awaiting Reply.
Thanks and Warm Regards,
Ritu R Hunjan

Standard UME Actions: Read_All

Similar Messages

Maybe you are looking for