Supplier administration role - "SAP_EC_SUS_ADMIN_VENDOR"

SRM Experts,
I need your help.
I want to give this role "SAP_EC_SUS_ADMIN_VENDOR" to an administrator at the supplier location.
While testing this role, I came across the following issue:
This role gives authorization for the administrator to create additional users and add a role to that user. I do not want the administrator to see the list of roles.
Roles
Role Description
SAP_EC_SUS_ADMIN_VENDOR mySAP SRM SUS Administrator Supplier
ZBIDTEST mySAP SRM SUS Administrator Supplier
SAP_EC_SUS_BIDDER mySAP SRM SUS Bidder
SAP_EC_SUS_DISPATCHER mySAP SRM SUS Dispatcher
SAP_EC_SUS_INVOICER mySAP SRM SUS Invoicing Party
SAP_EC_SUS_MANAGER mySAP SRM SUS Manager
SAP_EC_SUS_ORDER_PROCESSOR mySAP SRM SUS Order Processor
SAP_EC_SUS_SAR_PROCESSOR mySAP SRM SUS Scheduling Agreement Release Processor
SAP_EC_SUS_SERVICE_AGENT mySAP SRM SUS Service Agent
Can you please tell me where to control this. I would like to remove this section all together.
I checked in the authorization section of this role, doesn't look like this list is controlled over there.
I would appreciate any information on this.

Hi,
Im sorry..You need to uncheck that option for all the Roles in PFCG which you dont want to be displayed i.e. Perform the steps mentioned in my prev reply  for all of these roles in PFCG:
SAP_EC_SUS_ADMIN_VENDOR mySAP SRM SUS Administrator Supplier
ZBIDTEST mySAP SRM SUS Administrator Supplier
SAP_EC_SUS_BIDDER mySAP SRM SUS Bidder
SAP_EC_SUS_DISPATCHER mySAP SRM SUS Dispatcher
SAP_EC_SUS_INVOICER mySAP SRM SUS Invoicing Party
SAP_EC_SUS_MANAGER mySAP SRM SUS Manager
SAP_EC_SUS_ORDER_PROCESSOR mySAP SRM SUS Order Processor
SAP_EC_SUS_SAR_PROCESSOR mySAP SRM SUS Scheduling Agreement Release Processor
SAP_EC_SUS_SERVICE_AGENT mySAP SRM SUS Service Agent
Do let me know.
BR,
Disha.
Do reward points for useful answers.

Similar Messages

  • OES MAPI problem of "Assigning Principals to an Administration Role"

    Hi,
    I meet the problem of programmatically Assigning Principals to an Administration Role using Oracle Entitlement Server Management API. I can successfully run the sample code following the <Developer Guide>, Chapter 5.4.3 Assigning Principals to an Administration Role
    My code snippet is like this:
    List<PrincipalEntry> principals = new ArrayList<PrincipalEntry>();
         principals.add(new BasicPrincipalEntry
           ("weblogic.security.principal.WLSUserImpl", "Lisa"));
         //Grant the users in the list the role
         admManager.grantAdminRole(adminRole, principals);
    And no error or exception occurs in java app side or oes_admin side. But when login to http://vmware.localdomain:7001/apm admin GUI, I could not login with Lisa.
    I also tried manually assign app1 with delegated admin role, and then Lisa can successfully login to admin GUI.
    Then I run the app program to programmatically assign app2 with delegated admin role to Lisa. Login with Lisa could not see app2.
    I have checked the system admin "weblogic" login to admin GUI and it can see that app2 already have Lisa listed on the external user of delegated admin of app2.
    I even checked the DEV_APM.JPS_CHANGELOG in the oracle database schema for oes. I can see the changelog of java app assiging operation.
    Can anyone tell me the reason why programmatically assign user to an delegated admin not work correct? Is there some mistake steps in my java app code or there is a bug in OES product?
    I use the OES 11.1.1.5 version with Oracle Database 11.2.0, Weblogic 10.3.5 on Oracle Enterprise Linux 6 32bit.
    Thanks very much.

    Thanks very much for all the reply posts. With the suggestions from yours, I tried distribute the policy and finally it works!
    The code snippet is from 4-8 Using the distributePolicy() Method  , listed below:
    //get the PolicyDistributionManager
    PolicyDistributionManager pdm =
      app.getPolicyDistributionManager();
    //distribute policies
    String distID = pdm.distributePolicy(true);
    DistributionStatusEntry status = pdm.getDistributionStatus(distID);
    System.out.println("Start distribute policy");
    while (status.getPercentComplete() != 100) {
      Thread.currentThread().sleep(200);
      System.out.print(".");
      status = pdm.getDistributionStatus(distID);
    System.out.println("Finish distribute policy");
    There is another trick that I discovered from DEV_APM.JPS_CHANGEBLOG:
    If this is the first time that user be assigned as a delegated admin, you should also grant user with applicaionRole "APMViewer" to the application "oracle.security.apm"
    You can refer to the sample code from 2-9 Assigning Principals to an Application Role  , also listed below:
    ApplicationPolicy app = ps.getApplicationPolicy("oracle.security.apm");
    AppRoleManager roleMgr = app.getAppRoleManager();
    //Construct the list of users to be granted
    List<PrincipalEntry> principals = new ArrayList<PrincipalEntry>();
    principals.add(new BasicPrincipalEntry
      ("weblogic.security.principal.WLSUserImpl", "Nick"));
    //Grant the users in the list the role
    //admManager.grantAdminRole(adminRole, principals);
    AppRoleEntry appviewerRole = roleMgr.getAppRole("APMViewer");
    roleMgr.grantAppRole(appviewerRole, principals);

  • Functional and Technical Administration Roles in Solution Manager

    Hello
    A big company has been implementing new functionality in Solution Manager during the last couple of years,  they started with System Monitoring and EWA, Maintenance Optimizar, then Project Implementation, now Service Desk and ChaRM.  This is company has a wide open structure in IT and a discussion has been raised about who is the owner of soluton manager in IT.
    In my experience I always propose two main roles one is Technical Administrator Role and the other is Functional Administrator role.  The former is more basis oriented, in charge of the installation and update of stacks in Solman, basic-initial configuration and then working mainly in setting Solutions, RFCs, System Monitoring, EWA, SAP services, OSS connections, Diagnostic, E2E Root Cause Analysis and also support in ChaRM (in setting up the transport routes, security)
    On the other hand, I support a role of SolMan Functional Administrator which deals with Implemenation side, ASAP methodologies, business process definition, integration with ARIS, setting up project standards, coaching Project Managers, ensuring good application information.  Also in Service Desk and ChaRM, setting the process, customizing, implementing and controlling that things are running smooth in SolMan productive.
    I would like to get from you your inputs and experiences regarding how to set-up those roles, whether there are clear lines to divide responsiblities or what kind of definitions should be made.
    Many thanks
    Esteban Hartzstein
    Director
    Tebyon Consulting

    As recommended by some colleagues I am also investigating Customer Center of Excelence as a reference to define roles and responsibilities, particularly in the concept of Application Lifecycle Management.  
    Any other input is welcome.
    Regards
    Esteban

  • Administrator role

    Hi,
    I have just installed Contribute CS3 a day ago, and have been
    getting to grips with it.
    I won't need any other 'writers' or 'publishers', just the
    one Administrator role, but I would like it to ask for a password
    sometime before it allows me (or anyone) to editor the website on
    starting up Contribute . . . . . but it doesn't!!
    When I set up the administrator, I did give it a password
    where it asked.
    What could be wrong?
    Cheers
    Greg

    Hello,
    I have provisioned a user with Planning admin access. And later when i provision him with Essbase admin access, he is not able to see any Essbase applications. I have refreshed security from shared services for Essbase, but that doesnot work. I am using version 11.1.1.3 and shared services, workspace services, planning and Essbase services are installed on Unix.
    In shared services, when i navigate to Application Groups-> Essbase -> Essbase Server and then right click to "Assign Access Control", I am getting 'page cannot be displayed'.
    In EAS -> Users, 'Application access type' is coming as planning.
    Can anyone please suggest on how a planning user can be given access to Essbase.
    Thanks,
    - hg

  • Administrator Role Deleted in Portal???

    Hi all,
    Accidentally administrator role deleted in UME.When i login j2ee_admin i deleted administrator role in UME what i do Now  plz tell me. How i found administrator role ???.Because sap predefined administrator role to j2ee_admin So i am not able to working in portal in UME all button is disabled.
    Help me Plz
    Thanks & Regards
    Kumar
    Message was edited by:
            Kumar

    Hello,
    May be you cud try out this:
    First of all give the user (J2ee_Admin) SAP_J2EE_Admin group.
    Now login to the usera administration of J2EE using the User with SAP_J2EE_Admin group.
    Next go to useradministration and then give the user (Self) different admin roles
    such as super admin, system admin, content admin etc.
    Hope this helps you.
    Regards,

  • Administrator Role deleted ???

    Hi all,
    Accidentally administrator role deleted in UME.When i login j2ee_admin i deleted administrator role in ume what i do Now i am login via j2ee_admin it gives error what i do plz tell me. How i found administrator role ???
    Help me Plz
    Thanks
    Kumar

    Hi Kumar:
    For all the non UME Roles content in Portal has some action. So I guess for Administrator Role should have an action pertaining to its admin responsibilities. Try to Create Role under Identity Management and assign the action equivalent to it.
    Goto:
    User Admin >  Identity Mgmt > Role > Create User > Give Name > Assign Action.
    Note: I'm currently not at EP server for few days, plz check the option said above and I hope they might work for you.
    If my guess is correct, you can get the Action for already existing Administrator Role from other EP Server in your organization.
    Tnx,
    Munna SAP

  • Business Connector - Read only - Administrator role

    Hi Community,
    We've currently got SAP 4.8 running in our environment.
    The situation is that often developers need to check the extended settings, logs, or what jobs are scheduled.
    The two main roles are Developer or administrator.
    The only way to get access to the web GUI admin page is to assign the administrator role.
    Does anyone know how to assign a "read-only" role for the web admin page?
    I would then assign this to a developer rather than give them full administrator access on business connector.
    Kind Regards,
    Chris

    To the best of my knowledge thats not an option.
    But like to hear it if otherwise.
    Regards
    Juan

  • Bind allowed if a node has a supply function or a supplying relation role

    Hello Context-exports,
    I am using NetWeaver CE 7.1 and have implemented a WebService TRCROOF with the following method:
    public void assign(List<TRPartDTO> trparts);
    The class TRPartDTO is defined as follows:
    public class TRPartDTO implements Serializable {
        BigDecimal idProject;
        BigDecimal idSynth;
        String traceIndex;
        String serialNo;
    I have imported the WebService into WebDynpro as Adaptive WS-Model.
    The wizard has built this context:
    Request_Assign
    ---Assign
    Trparts
    IdProject
    IdSynth
    TraceIndex
    SerialNo
    ---Response_Assign
    In wdDoInit I call the following sequence, which works fine:
    TRCROOF_MODEL trcRoofModel = new TRCROOF_MODEL();
    Request_Assign request_Assign = new Request_Assign(trcRoofModel);
    Assign assign = new Assign(trcRoofModel);
    request_Assign.setAssign(assign);
    wdContext.nodeRequest_Assign().bind(request_Assign);
    Now I try to call the WebService-Method and to deliver a list to it:
    ITrparts_Assign_TRPartsElement newPart;
    Vector<ITrparts_AssignElement> partList = new Vector<ITrparts_AssignElement>();
    for (int ix = 0; ix < cnt; ix++) {
       newPart = wdContext.nodeTrparts()
                  .createTrparts_Element(
                       new TrPartDTO(trcRoofModel);
       newPart.setIdProject(...);
       newPart.setIdSynth(...);
       newPart.setSerialNo(...);
       newPart.setTraceIndex(...);
       partList.add(newPart);
    wdContext.nodeTrparts_Assign_TRParts().bind(partList);
    But when calling bind() I get an exception that essentially tells me:
    "calling bind is not allowed if a node has a supply function or a supplying relation role"
    Background info:
    My EJB defining the WebService implements another DTO-class named RoofDTO, which includes a List of TRPartDTO:
    public class RoofDTO implements Serializable {
        private List<TRPartDTO> trparts;
    But this class is not used in conjunction with the method assign().
    Nevertheless the wizard that imported the WebService-Model of course has
    defined a relation betweeen these classes.
    Could anybody explain the situation or even tell me how to fix my problem?
    Thanks for each hint,
    Christoph

    Oops,
    forget this silly question. In case that anybody else has such cranky trains of thoughts as me: Do it like this:
    Vector<TrPartDTO> partList = new Vector<TrPartDTO>();
    trcRoofModel = new TRCROOF_MODEL();
    for (int ix = 0; ix < ...; ix++) {
       partList.add(new TrPartDTO(trcRoofModel));
    wdContext.currentAssignTRPartsElement().modelObject().setTrparts(partList);
    Kind regards,
    Christoph

  • ESS/MSS HR administrator role

    Hi,
    any docs to setup HR administrator role.
    Will reard point for helpful answers.
    Thanks
    Rocky

    [email protected]
    Please copy:[email protected]
    Thanks
    Will definitely reward points.

  • Portal Installation : User Administration -- Role workset error

    Dear All,
    We have installed EP NW04 SR1 . Every thing is working fine, All the menus are coming up properly except when i click on the User Administration --> Role --> Role menu, its starts for some time and then gives "Page cannot be displayed, Operation aborted" . This error only comes for the Role workset. Every thing else is working fine.
    It would be nice if i can get guidance as to how to debug this error
    Regard
    PN

    Hi,
    I am still unable to solve the problem. The same problem persists with the ROLE and User Mapping.
    I try to open it and it gives the "page cannot be displayed, operation aborted " error
    Help is appreciated
    Regards
    PN

  • Only Super Administration role can use collaboration rooms,

    The problem using portal 7.0 SP14, The users came from a SAP systems. the users with super administration role, Collaboration and CollaborationRoomCreator works perfectly, I mean, can create rooms and enter without problem, then i have an user that have standard user role, and collaboration role, and its include as member in an room, but when I try to enter to the room I get an error. and of course doesn't work... I have try with several role to enter the room, all 6 roles from collaboration, (3 specialist, 3 com.sap.pct) and nothing, Only with super admin role works.... and off course..... that not the idea...
    The exception that I get is:
    08_8368550
    I check on logs files and see this...
    Applications/WebApplications#sap.com/irj#com.sap.engine.services.servlets_jsp.server.runtime.context.ServletContextImpl#JMALDONA#71781##cetec3.cetec.es_CTC_8368550#JMALDONA#98fa7e203c7b11dd91b8001b789f30ad#SAPEngine_Application_Thread[impl:3]_33##0#0#Info#1#com.sap.engine.services.servlets_jsp.server.runtime.context.ServletContextImpl#Plain###application
    Any help, Thanks!

    Hi José,
    First, welcome on SDN!
    About your problem:
    See https://forums.sdn.sap.com/thread.jspa?threadID=696974&tstart=0 and the referred document, https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/00bfbf7c-7aa1-2910-6b9e-94f4b1d320e1 page 11 nr. 8.
    Your exception log message does not give much information, I would think there should be more, but at least from your description, this sounds like this well known issue.
    Hope it helps
    Detlev
    PS: Please consider rewarding points for helpful answers on SDN. Thanks in advance!

  • System Administrator role OIM 11gR2

    Hi experts,
    I am trying to figure out which table in OIM 11gR2 stores the information for roles assigned to the user.
    I am specifically looking for users who have system administrator role assigned. The way to assign is through organizations, but not sure which table stores it.
    Thanks
    Kunal Jain

    Below is table names and description used to obtain admin role and user information:
    ADMIN_ROLE  - stores information about admin roles available in system
    USR - user infromation
    ADMIN_ROLE_MEMBERSHIP  - USer and admin role mappings
    regards,
    GP

  • ACCESSIBLE CONTENT ADMINISTRATION Role

    Hello,
    Can anyone tell me the difference between " Content Administration " and "Accessible Content Administration" Roles.
    Thank You
    Avik

    Accessible Content Administration
    The portal provides a set of interfaces that can be used by administrators who need to create and administrate portal content within an accessible environment.
    This accessible Portal Content Studio does not duplicate all the functionality of the Application Designer, but it does provide sufficient functionality for creating and editing selected objects, and it enables the basic flows required by the administrator.
    Content Administration
    The content administrator is responsible for all tasks that are relevant to content creation and maintenance directly in the portal.
    More Details - http://help.sap.com/saphelp_nw04s/helpdata/en/a9/fe602e5a214237a0cd27111873505c/frameset.htm
    Thanks,
    GLM

  • How to add the Self-Service Administrator role...please guide

    Hello All,
    Am new in ESS/MSS. Have just uploaded the ESS/MSS business package on EP6 SP15.
    Now as per the notes given on help.sap.com site on Floor Plan Manager, I need to addin a Self-Service Administrator role to use FPM.
    Where can I find this......
    Please guide.....
    Awaiting Reply.
    Thanks & Warm Regards,
    Ritu

    Hello All,
    Am working on <b>EP 6 SP15 Sneak Preview</b>.
    I need to customise Web Dynpro components of MSS...namely PCR, using Web Dynpro for Java.
    Am in the process of reading the Floor Plan Manager concept from help.sap.com site...
    Have 2 queries now:
    1. If I use Self-Service Administrator, the business packages I need are :
    - Business Package for Self Service Administraor
    - Business Package for Common Parts....
    but these both are for NW2004s...am using NW2004. I did not find any such pacges for NW2004....
    Any inputs?
    2. link http://help.sap.com/saphelp_erp2005/helpdata/en/b4/139525380149a49c8402e22700e4ba/frameset.htm says that:
    Implicitly, by creating a configuration component that implements the interface IXSSAppConf. This is the only possibility for self-service applications in SAP ERP 2004 and above.
    Now I need to update the UI of PCR, so how can I do it...any hints....
    Please guide....
    Awaiting Reply.
    Thanks & Warm Regards,
    Ritu

  • No access to new default desktop without Super Administrator role

    I have created new desktops and rule collections. All new rule collections are linked to in the master rule collection under folder 'Super adminstrators'.
    Now when I try to log on as a normal user his new desktop is not displayed - instead an error message saying that he doesn't have access appears.
    If I assign the user the Super Administrator role, then the correct new desktop is displayed.
    What setting am I missing?
    Henning Strand

    Hi,
    To fix the problem with the Portal Desktop, make sure that all users that it is assigned to have permissions to it and to every folder in the path to it (including the "End User" checkbox checked).
    Check this:
    Error accessing default desktop for a user
    Regards,
    Praveen Gudapati

Maybe you are looking for

  • Validation of Input message

    Hello All, Here my requirement is to validate(check for mandatory fields and length limitation) the incoming message before message mapping. In PI 7.1, we can do validation of the incoming message at Sender Agreement and Receiver Agreement level by s

  • Laserjet m1217 will not print through easyprint on windows 2008 server 64Bit

    We have a client that has the LaserJet M1217 that is connecting to our Window 2008 Server SP2 64Bit via Remote Desktop.  Easyprint recognizes the printer, but will not even print a test page.  We get a FAIL message.  We either need to know how to pri

  • Displaying Context Text????

    Hi, Would really appreciate some help on this one. I'm simply trying to pass a parameter from one page to another and to display it on the banner region at the top of a page. (Similar to passing context from one canvas to another using :block.item fo

  • Diff between issession and issystem

    All, Wanted to understand ..When we need to restart he DB servers in case if we change some parameters ...? What is the diff between issession and issystem modifiable clauses ...? Thanks

  • "MATERIAL-ADDITIONAL DATA-UNIT OF MEASURE"

    There is a Business Content for "MATERIAL-ADDITIONAL DATA-UNIT OF MEASURE" tab page? Thanks Serena