Super Admin and SID

I have some questions on SAP S-ID creation.
Assuming Company X is a new customer to SAP.
Company X bought 5 copies of BOE Premium from SAP through our company (VAR partner).
And let’s assumed all PO / Invoiced were settled and all payment made.
SAP will send a “Your personal key to the SAP Service Marketplace” letter/email to our company (which our company will forward to Company X).
This letter will contain a SID (lets say S000000001) + password to allow Company X to download/manage their software.
1) Since this is a new purchase, S000000001 will be the super administrator in SAP Support Portal ?
2) How does Company X tag S000000001 to a employee/email address in Company X ?
3) If for some reasons, Company X wants to change the password for S000000001, how can they do so if there is no email address tag to S000000001 yet ?
4) If Company X needs to more users at SAP SMP to manage their software, Company X’s super administrator will need to go to SAP PartnerEdge to request/register.
5) The super administrator will submit the name/email address of the user and SAP will assign a SID to this user. The super administrator will also be able to manage the authorization of this user at SAP SMP ?
6) What is the process at SAP end to allow Company X to download/manage their software?
7) Is there any documents that I can refer to ?
8) Is there any training or EGI on this at SAP University ?
If this is not the right place to ask questions, could you re-direct me to the correct contact?
Thanks.

Hi and thank you all for your replies ,
I can login to the portal with Administrator & even with my own user.
However - the folder "Portal Content" which holds all the apps & themes is not visible due to the
fact that the only owner of this folder is "super_admin".
Is there no tool that helps re-create default roles that have been deleted ?
If it was a custom made role i could understand that maybe i can't restore it.
But we're talking about a default - predefined role and the most important of them all :
The Super Administrator Role.
I read the help doc about permissions but i don't see a way it can help this situation.
There has to be a way....
Adi

Similar Messages

Difference between roles Administrator and Super admin

Dear Portal Gurus,
Pls let me know the difference between
roles Administrator and Super admin
Thanks.
Jack

Hi Jack,
The Administrator is the role that has all the rights that includes J2ee engine rights too but an superadmin is the one that has the role to the three admin roles that are
Content Admin
User Admin
System Admin
THIS IS THE BASIC DIFFERENCE BETWEEN SUPERADMIN AND ADMINISTRATOR.
PS:Reward Point Please
Regards,
Naveen Gupta

JSPM phase error : admin/user/SID does not exist

Hi ,
There is an error message while opening the JSPM
Phase error report:
"cannot read secure store properties .could not set up secure store.property admin/user/SID does not exist.msg.util.dyn.0003.com.sap.security.core.server.secstore.secstoreFS get string value
com.sap.security.core.server.secstore.secstoreFS.Not found exception could not find a record key "admin/user/SID" in the store com.sap.security.core.server.secstore.secstorefs"
checked the config tool secure store and found no entry maintained for /admin/user/SID.
How to add the new entry in config tool and what is post entry procedure
Thanks a ton

Hello Daniel,
You can maintain the Administrator user in secure storage using the config tool.
By default, the value for this config tool property is user Administrator. However, when using the ABAP Engine for persistency, this user is J2EE_ADMIN.
Following are the steps:
       1.      Start the Config Tool.
       2.      Select secure store.
                The configuration for the secure storage in the file system appears.
       3.      Select the key admin/user/<SID>.
       4.      Enter J2EE_ADMIN in the Value: field and choose Add.
       5.      Select the key admin/password/<SID>.
       6.      Enter the password for J2EE_ADMIN in the Value: field and choose Add.
       7.      Save the configuration.
The corresponding link is mentioned below:
http://help.sap.com/saphelp_nw04/helpdata/en/ae/b7ceff3e40fd42be3a6503236f9746/content.htm

In iPS 3.0SP3a, I would like to change the super-admin entry from root to a non-root user. The problem is I was able to install iPS as a pseudo-root however console will not let me in as that.

There must be a way to do this. Pls help.

Hi,
Please Check whether the said unix user is already existing under any roles of the default-domain.
If so, delete the user from that role in the default_domain and then
Goto : Manage Domain > view Domain Administrator Roles > Admin Role > users
Create the non root unix user name .
Once you create the user profile for this under the role defined for super admin,you can access as super admin.
Thanks,
Raj_indts
Developer Technical Support
Sun Microsystems
http://www.sun.com/developers/support"

Error when using super admin account to migrate from Communigate Pro to exchange 2013

Hi everyone,
We are facing issues to migrate mails from communigate pro to exchange 2013 using 'MigrateIMAP.pl' tool. Communigate pro has a super-admin account which can retrieve the mails from any mailbox but when sending to Exchange 2013, there is no such super-admin
account. I have created a user account granting it full access to all databases using the following:
Get-MailboxDatabase -identity “mailbox name” | Add-ADPermission -user <account name> -AccessRights GenericAll
Get-mailbox | Add-MailboxPermission -User <account name> -AccessRights FullAccess -InheritanceType All
The tool uses the following command: (x.x.x.x is for server IPs & mytestlist contains user accounts to be migrated)
./migrateIMAP.pl -d -I -U -s 100 -L mylog7 -e superadmin:password\<i -S x.x.x.x -f
exchangeadmin:password -D x.x.x.x -i mytestlist
The IMAP4 logs shows the following error:
2014-02-04T13:32:37.699Z,0000000000000579,1,x.x.x.x:143,x.x.x.x:47688,,1,65,34,authenticate,PLAIN cmJhbGxjaGFuZAByYmFsbGNoYW5kAEwwZ09uQDEyMw==,"R=""1 BAD Command Argument Error. 12"""
Anyone, please help me out, i've spent a whole week trying to solve this. Thanks in advance

I would suggest you go for third party tool.
One such tool is CodeTwo, it does the job and very cheap. It will get the job done is ziffy
http://www.codetwo.com/exchange-migration/
Cheers,
Gulab Prasad
Technology Consultant
Blog:
http://www.exchangeranger.com    Twitter:
  LinkedIn:
   Check out CodeTwo’s tools for Exchange admins
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Using both ARD 3.1 admin and ARD 2.2 admin - troublesome issue

I have searched and found various posts on this, but no comprehensive thread. Many who have used ARD 3 have encountered the "This Task Will Fail - Old Remote Desktop Client Software" when trying to perform tasks on clients with old (pre-3.0) software. It seems a simple task to upgrade to the latest client software, and it is quite easy.
But doesn't anybody else find it odd that if you use ARD Admin 2.2, you can perform all those tasks on computers with the 2.x client software, including copying files, etc. What logical sense does it make that the latest version 3.x admin cannot perform those tasks on a 2.2 client that its predecessor could? You can't even send a simple Unix task such as to repair permissions.
If you put those two together, you may just come to the conclusion that it doesn't matter, because you can just upgrade the client software with a click, and I thought the same thing, at first. But there is a situation I find myself in that is extremely annoying.
I have used ARD 2.2 in my own consulting business for several years with small clients, home offices, etc. But now I was issued a MBP with ARD 3.1 at my day job, so I was able to get rid of my Powerbook G4 I used in my consulting and transfer the ARD 2.2 to my iMac G5 at home. I keep all my personal files on that iMac, because with my router conifigured properly, I can access it from the MacBook Pro from almost anywhere. The iMac retrieves and stores all my personal e-mail, photos, etc.
Without even thinking, I updated the iMac to version 3 client as soon as I got the first "task will fail" error. I then, however, found out that ARD 2.2 Admin will not launch if the same computer has ARD 3 client software-- completely unusable. I had to uninstall the 3.1 client files from the iMac and reinstall 2.2 admin, which puts the 2.2 client on it. So now when I am home at night or connecting from elsewhere, I am limited to only controlling/viewing the iMac. Well, I paid good money for 2.2 admin shortly before version 3.0 came out, and I could not get any upgrade pricing. I don't need anything more than the features 2.2 offers for my side work, so another $299 would be wasted money for the 10-user version. I just think it's unbelievable that the 3.x client disables 2.x admin, and 3.x admin cannot do anything other than control the screen of 2.x clients, not even send a message or lock screen-- again, these are things that 2.2 admin can do with no trouble at all. A 3.x version unable to do things a 2.x version was able to easily do? Does that make sense other than to force an upgrade?
I like 3.1, I use some of the advanced features that 2.2 doesn't have, but this has become quite annoying. More annoying, in fact, than all the failed attempts to upgrade the client software of some of the older Macs at work - no error message, no warning it would fail because the Macs were using 10.3.8 or lower-- just a never-ending task running. I finally figured out that they were not running 10.3.9 and that was the trouble. 3.1 admin couldn't tell me that? Yes, that was pretty annoying.
OK, this has ended up kind of a rant, and I apologize. But if anyone knows a workaround to the above mentioned annoyance managing a Mac with 2.2 Admin on it, please let me know.
Thanks--

Thanks for the info--I did not realize that so much had changed.
It seems to me, then, that at a minimum, Apple could make a version 3.x client which would not interfere with an ARD 2.x admin running on the same machine. It's not reasonable to assume that their customers would need to or have the budget to upgrade all their ARD admins when Apple offers no upgrade options at all. A 2.x Admin machine will often still need to be managed on a network for updates, etc.
If I had paid upgrade pricing for 3.x, I would not feel so strongly about this, I would then feel that I got a deal so that the 2.x client should be retired. But having to buy the 3.x at full price instead makes me feel the need to use the 2.x as long as I can - 3.x is then not an upgrade, it's a separate product. I understand that the Admin app changed a lot, but it would not seem to me such a big deal to make a "universal" ARDclient which could respond properly to whichever version of the Admin was directing it. Apple has a long history of having to do such creative software development.
OK, I'm out. I mark it question answered, but I am going to keep harping on Apple to release a universal client.

BI iviews not working without super admin role in portal

Hi all,
I have published reports to the portal from BI and then created Bex iviews using the querystrings and attached iviews to roles.
They all run with my user ID which has super admin access.
But for the end users the we get a portal runtime error when he tries to view the report through iview.
Portal runtime error.
An exception occurred while processing your request. Send the exception ID to your portal administrator.
Exception ID: 06:24_31/03/11_0185_2598150
Refer to the log file for details about this exception.
If I give superadmin role to the end user the iviews run fine.
Please tell me how to access this iview without superadmin role.
Regards;
Anzar
Edited by: anzar naik on Mar 31, 2011 2:58 PM
Edited by: anzar naik on Mar 31, 2011 2:58 PM

When it works with super admin rights but not with end-user permission, it's a permission problem. Have you tried to find out where the user is missing the necessary permissions?
- iView
- PCD
- security zone
- Access to backend (BI server)
- BI query
br,
Tobias

Warning#1#com.sap.sup.admin.scheduler.JmsScheduler#Plain

hi
In our SAP portal server's default traces and application logs we are constantly seeing warning messages as follows
#1.#00144F54B441000A0000007800002B75000456B6617AB4F7#1221241226310#com.sap.sup.admin.scheduler.JmsScheduler##com.sap.sup.admin.scheduler.JmsScheduler####n/a##6db45ff07fa211ddc2a600144f54b441#SAPEngine_System_Thread[impl:5]_54##0#0#Warning#1#/Applications/AdminConsole/Scheduler#Plain#[3989] The Scheduler is inactive: the Maintenance Mode is enabled!###
could you guide on how do we get rid of this warning messages as this is filling up the filesystem
Thank you
Jonu Joy

hi
When i stop this application from NWA - tcwebadministratorsolmandiag
which is a part of LM Services Patch 15, i do not see the warning messages any more in my j2ee application logs and default traces.
Thank you
Jonu Joy

Changing Super Admin

Hi. we are currently on ep5 sp6. we would like to change the super admin password. we are using novel directory services 1.3.3. we have tried changing the super admin password at the novel directory and tried login to the portal. both the old and new password could login to the portal. we also tried changing the super admin password in the portal under system configuration->user management configuration, and the whole portal hang after changing at the 1st tab.
Have anyone tried changing the super admin password successfully? what are the steps? thank you.

1. You can use the iview provided by sap for changing the password. It should be under self registration.
2. The user changes password themselves in the ldap.
3. You create custom iviews in portal to change info in ldap.
Super User admin password is changed at System Configuration -> usermanagement configuration. General settings tab.
I don't have an entry of Super User admin in my ldap.
Jai

Super Admin rights to all the new users

Hi All,
This is a very big issue i am facing;
whenever a new user is created in the portal he/she is having all the admin privileges which cant even be removed please help how i can solve this issue.
Regards
Siddharth

Hi Siddharth,
Check if this Super Admin role is assigned to EveryOne Group!, it seems that is what is causing your problem.
If this is not the case, check which groups are the users assigned and see if these groups have this Super Admin role.
Greetings,
Praveen Gudapati
p.s. Points are always welcome for helpful answers

URL Navigation not working for non-super admin

I am trying to set up a URL navigation to Home>>Portal Information page in End-User role, so I created a URL as
http://portalserver/irj/portal?NavigationTarget=ROLES://portal_content/com.sap.pct/every_user/general/pages/com.sap.portal.portal_information
This link works fine for users in super admin role. For other users, this link bring them into EP and show a page with no content (only header and TLN). Does anyone know where to look to fix this? All users can go to Home>>Portal Information via normal navigation

Hi Ben,
this is sometimes confusing, as there are quite some "Portal Information" Pages in the PCD. Some are as objects in the Portal Content Studio Navigation (as the one you mentioned), some are copied in Roles like the End-User-Role and not linked by Delta-Link.
The best thing to do is to login with a normal user, navigate to Home -> Portal Information, and from the Page Title Bar - Context Icon you choose "Add to Browser Favorites". In your Browser Bookmarks you will then see the correct NavigationTarget.
My guess is that it will be: http://portalserver/irj/portal?NavigationTarget=ROLES://portal_content/every_user/general/eu_role/com.sap.portal.eu_ws/com.sap.portal.portal_information
Hope this helps,
Robert

Calendar Notification + Google Apps + Super Admin + Macs + Notifications

Background: I’m a Google Apps Super Admin which means that I have access to almost everything, including everyone’s calendar. They show up under “My Calendar”
Issue: I have a few users under our account. ALL of their calendar’s show up on my account (it’s a super admin thing, cant be removed because that’s the way it is). My problem is that, I get notification for EVERYONE, for every event… because as far as the system is concerned, ALL of their calendars are my calendar. This is specifically annoying because every 15/30 mins or hour I get everyone’s notifications on my iPhone, mac, etc.
No I don’t want to set up another account and set them as admin, it causes too much confusion.
Please reply if you actually know about resolutions rather than speculations. I’ve had many threads where it went on forever because everyone thought they were an expert (I say this with totally respect).

This may give you results you seek - if you mainly just want the alerts to stop on your iOS devices
http://n8henrie.com/2012/12/google-calendar-delegates-and-mountain-lion-calendar /
I'm also a gApps admin and have had similar issues. USUALLY, I could simply uncheck co-workers calendar listed in 'My Calendars' or 'Other Calendars' ( yes, they can appear in either place, don't ask, it's a Google Admin stupidity) to hide their schedule from my calendar. USUALLY, if i didn't see their schedule, I wouldn't see any alerts on my iOS hardware.
BUT. One colleague kept showing up no matter what.
I noticed most alerts I saw were invites, awaiting for me to accept (although I obviously was NOT) so I've tried the following on my iPhone (iOS 7)
Go into Settings > Mail, Contacts, Calendars
(scroll down to Calendars section at bottom)
Turn OFF New Invitation Alerts
Your mileage my vary.
I finally decided I don't typically need my co-workers schedule on my iPhone, so I went nuclear and went to my Google – iPhone/iPad calDav settings found at this Link: https://www.google.com/calendar/syncselect and turned off ALL of my co-worker calendar calDav syncing.
If you DO occasionally need to look at your co-workers schedules, use the iOS google calendar Web App:
Visit your Google Apps using Safari on your iPhone, iPad, etc.
Go to the Calendar and
Add it as a Web App to your iDevice (http://blog.blueleaf.com/how-to-save-your-favorite-website-as-an-iphone-app-vide o/)
Now when you need to check co-workers schedules – launch your new gCal webApp and scroll to the bottom, click the settings button to choose which co-worker schedule you want to view, save and voila.
Hope this helps.

Feature Request - MultiFunction Printer Separation of Super Admin to Multiple Roles

It is difficult to maintain a level of security and adopt best practices when the devices are dependent on a single Super Admin account to conduct all degrees of maintenance that typically doesn't require all the enabled features for the user logged in at that time.
An example would be secretaries needing to print Department ID usage reports don't need the ability to change the management account ID or password, nor do they need access to enable/disable other features.
I request Canon honor their claim below by accepting and implementing this feature request:
"Canon recognizes
that security
is as important as
print quality"
sourced from: http://www.usa.canon.com/app/isgrun/brochures/copier_security_whitepaper.pdf

Thank you for your interest in security on Canon technology, Sn3akyP373. Canon does offer a feature which supports 3 different levels of administration called SSO-H. This feature is standard on many past and current models. SSO-H offers 3 different levels of administrators which can be set: System Admin, Network Admin, and Device Admin. Each of these 3 levels of administrators has a specific set of admin privileges that grant appropriate access to each group. I've attached several pages from a product manual which describes the levels of security when using SSO-H. Please work with your Canon Authorized Dealer to configure your MFP from Default Authentication to SSO-H to meet your needs.
There will be a second post with an additional attachment.
Did this answer your question? Please click the Accept as Solution button so that others may find the answer as well.
Attachments:
AdministratorRoles1.pdf ‏13 KB

Sharing Itunes library between an admin and user account on one imac G5

Hello,
Please forgive the repetitive question. i have set up an admin and a user account on my iMac. I set the itunes library to users/shared/music/itunes/itunes library on both accounts. The music shows up on the admin account but not the user account.
Can anyone give a quick step by step including obscure settings that may need to be altered so that I can finally get this pesky stress monkey off my shoulder!
Thanks!
iMac G5 Mac OS X (10.4.3) Ipod video 30Gb

Hi,
Someone recently poasted a similar problem as yours.
Here's the discussion and solution:
http://discussions.apple.com/message.jspa?messageID=1192454

My parent's IPad is SUPER outdated and I'm trying to buy an app for my brother for Christmas. However, the computer that was connected to the IPAD, we no longer have. So is there any way I can update it on my mac without erasing all the photos and videos?

My parent's IPad is SUPER outdated and I'm trying to buy an app for my brother for Christmas. However, I can't buy the app because it says we need to update the software. The thing is, the computer that was connected to the IPAD, we no longer have. So is there any way I can update it on my mac without erasing all the photos and videos?

HELPPP ME BEFORE CHRISTMASS MORNING!!

Super Admin and SID

Similar Messages

Maybe you are looking for