System 9 BI+ roles

Hi,
my question is about Workspace roles. Normally we give users "Viewer" role to Hyperion System 9 BI+ that they can run reports in Workspace. What role we have to give if a end user wants to export Workspace reports to Excel? What is a "minimum role" that this would work?

Hi
I mean Workspace reports. I don´t know are they system reports or what but it is separate from Hyperion Financial Management System (9.2.). We grant Access rights to Workspace in User management of Hyperion Financial Management. There we select the roles for Hyperion System 9 BI+. The roles are for example Viewer, Dynamic viewer, content manager , data editor etc...

Similar Messages

CUA with HR-Org - How to assign systems for role

Dear all,
we are planning to use CUA with HR-Org assignment. Can please anyone explain to me how or where the system for the role comes from.
I mean, normaly in SU01 -> Role Assignment I have in the first colum the system and in the second colum the role. It the role assigment come from HR-ORG there is always the local logical system in the system colum. This is not what we want.
CUA is on Solution Manager, HR-ORG is replicated from R/3 HR Systeme and the user needs the roles in ECC production systeme.
So how can we manage the system/role combination assignment?
Thanks for any hints.
Best regards
Roman

Hi,
If I understand your problem you want to do role assignment from the HR-Org structure on a system that is using CUA.
I have only managed this successfully when the CUA master is also the system with the HR-Org structure on it. Otherwise you have lots of issues with replicating data between systems. I did this for a UK council's SAP solution where we allocated all the roles from the HR system, including roles on ECC, SRM(EBP), CRM and BI - so it does work.
PO13 on the system with the org. structure will only allow you to allocate a role that exists on that system, but if the roles that you are allocating are composite roles that include single roles on other systems, you can achieve this sort of business role allocation without having to go the IdM route.
Darren Hague (no relation) gave a presentation at SAP Tech Ed 07 on such a scenario, that explains how the composites would be set up far better than I can, but in essence you use the CUA connectivity and the rights of the CUA master system (which includes the org. structure) to allocate roles on other systems / clients in your CUA landscape.
Have a search through SAP Tech Ed 07 presentations and you should find what you are looking for.

Business Role to System/Technical Role Mapping in CUP

All,
In our design of CUP we are having end-users logon and choose their "business role" and having CUP select the system/tecnhical roles. For example, we want an AP Clerk to be able to logon and choose "AP Clerk" and have role A, B & C from ECC selected and role D from BI.
Is this type of design possible in CUP 5.3 or are we extending into IDM functionality (which we do not have). Has anyone had experience in type of design? What are your recommendations?
Thank you,
Grace Rae

Grace,
I assume you are looking for Job/Position roles roles but for SAP systems. Fortunately, CUP provides the flexibility to implement RBAC concept for both SAP & Non SAP systems.
In this case, catch would be your blueprinting which depends on various parameters like u2013 How sound your authorization concept is placed in all the managed systems (R3, BI, non sap etc), Approval criteria, organizational operational view etc. Concern is that we may run into other issues of violations, risk analysis, approvals etc if we donu2019t plan diligently
Alpeshu2019s hint would be really helpful in terms of implementing this requirement.
Thanks
Qalid

System Administrator role OIM 11gR2

Hi experts,
I am trying to figure out which table in OIM 11gR2 stores the information for roles assigned to the user.
I am specifically looking for users who have system administrator role assigned. The way to assign is through organizations, but not sure which table stores it.
Thanks
Kunal Jain

Below is table names and description used to obtain admin role and user information:
ADMIN_ROLE - stores information about admin roles available in system
USR - user infromation
ADMIN_ROLE_MEMBERSHIP - USer and admin role mappings
regards,
GP

Assigning System Administrator role to a new user in OIM 11gR2

I am trying to assign full access as xelsysadm to a newly created user but not able to. Unable to identify option to add System Administrator role. System Administrator admin role is available to TOP organization and we can not create a new user in TOP. any suggestion will be helpful.

goto-> organization-> search and select Top organization-> open detail page-> click on Admin Role-> select Adminrole(System Administrator) -> click on Assign button-> select user and add it-> finally click on okay.

Do we have to have system admin role for pdk???!!!

Hi ,
Pdk Is meant for Java developers.and we have a requirement where developers will not be given system admin role, but just java developer role, that comes with PDK(to deploy, download, par applications)
i was going through the weblog
and in that it is mentioned ·
"To ensure that you have the correct permissions to run all the applications in the business package, you must be assigned to the following portal roles:
Role ID     Description
pcd:portal_content/administrator/super_admin/super_admin_role     Super Administration
pcd:portal_content/com.sap.pct/administrator/super_admin/com.sap.portal.super_admin_role     Super Administration "
if the pdk has to have system admin role, then there is no meaning that it comes with java developer role .
can anyone tell me if i understood it a wrong way .
please help
Thanks,
Lakshmi.

Hi Lakshmi,
The Java developer role only comes with Component manager and Component Inspector and some plugins for IDE.
To work just with PDK a Java Developer role is fine, but once the PAR is deployed, a developer has to login and create the iview from that par.For this he needs a Content Admin Role.
I have gone through the link mentioned by you and it says u need to have superadmin role,every user,conent admin role for all the iviews to work correctly which is true this way.
If your iview is talking to the backend system u need access to the backend and to create a System object u need a System Admin role.
So, along with the Java developer role, a developer has to have ContentAdmin and SystemAdmin roles.
Hope this helps.

Identify system defained roles and user defained roles

Hi,
I have an issue.
Oracle Version : 9.2.0.1.0
Operating system: Windows 2000 server
How can we identify system defained roles and user defained roles?
Please help me to solve this.
Regards,
Mat.

Check yourself these views
DBA_ROLES
DBA_ROLE_PRIVS
USER_ROLE_PRIVS
ROLE_ROLE_PRIVS
ROLE_SYS_PRIVS
ROLE_TAB_PRIVS
SESSION_ROLES
For default predefined roles in the database, take a look at the below url.
http://youngcow.net/doc/oracle10g/network.102/b14266/admusers.htm#i1008784
Regards,
Sabdar Syed.

Logical System for Role Integration Server

Dear all,
I need your help to clear my confuse.From ID I had assign business system as defined by Role Integration Server but when I check Adapter-Specific Identifiers, nothing show in Logical System. I already define Logical system in SLD. but I'm not sure incase of Role Integration Server will show logical system same with role Application System or not. becasue the other one as role Application System it's fine.
Thanks and Regards
Park

Hi Park,
I could not clearly understand your question .But i think you want to know the roles of the Integration server and Application system.I would like to share some thing on their difference .Hope this will clearify you.
A business system can be configured as an Integration server or Application system:
Integration Server
The Integration server executes only integration logic available Integration Builder. They can also be identified as Pipe Line Steps. It receives XML message, determines the receiver, executes the mappings, and routes the XML message to the corresponding receiver systems. Thus configured Integration Engine is identified to be Central Configured Integration engine.
Note: Only one client of SAP system can be configured as Integration Server.
Application system
The Application system will not execute the integration logic. It in turn calls the integration server to execute the integration logic if required. It acts as sender or receiver of XML messages. So, the Application system with a local Integration Engine requires the Integration server to execute the integration logic
Thanks,
Ram.

Unable to create Business System with role Integration Server

hi Experts,
we are unable to create a BS with role of integration server, its throwing error with internal server 500.
please advise. we do not have any issues while creating TS with role of WEBASABAP.
thanks and regards,
Kesava
Edited by: Prateek Raj Srivastava on Jan 23, 2012 12:13 AM

Hi Kesava,
what is the purpose of creating a business system of type IS? This is automatically done in the post installation by CTC templates. So if the post installation is successfully executed, this should already be there. And if not you should check if the post installation was properly executed and if there where problems analyse why they occured.
The creation of the BS is just one part of the game, so I would highly recommend to execute the hole post configuration via template or follow the help.sap.com and execute it step by step manually in the described order. Otherwise i guess this will not work.
If there where just problems with SLD - please also have a look at SA Note 1117249 - Incomplete Registration of PI components in SLD
best regards,
Markus

Provisioning of roles to ABAP system deletes role assignments in backend

Hi all,
following scenario:
user has role A in an ABAP system which is connected to IDM. Assignment of role A to the user is not in the identity store.
Now you assign role B via workflow to the user and IDM provisions this new assignment to the ABAP system.
What will happen is that the user will get role B but assignment of role A will be deleted.
This happens because in the job "SetABAPRole&ProfileForUser" the connector attribute "roles" will only consist the role assignments which are in the identity store. All assignments in the ABAP system which are not yet in the IDS will be overwritten.
This behaviour can be very critical. If you still allow role assignments directly in the backend system and you read these assignments e.g. once a day to the IDS - but in the meantime assignments have been done via workflow - you will lose data.
My customer wants to assign roles both directly in the system and also by workflow. Every night an ABAP update job runs which writes new assignments to the IDS.
Do you have any idea how I could solve this? Is there a way NOT to overwrite assignments with the ABAP connector field "roles"? I tried to use multivalue operator but this didn't do the trick.
I hope I was able to describe my problem properly and you have answers...
Best regards
Jörn Kaplan

No, there is not a way to avoid that IdM replaces the role assignment in ABAP with the current assignments as know by IdM. IdM is the master!
This is not directly an issue of IdM: The standard BAPIs in ABAP (up to release 7.0) offer "replace all role assignments" but not "add role assignment" or "remove role role assignment".
However, there exist an exception: Role assignments in ABAP which are created indirectly by an HR-ORG assignment are not touched by IdM. (There role assignment are viewed in blue in transaction SU01.)
See http://help.sap.com/saphelp_nw70/helpdata/EN/50/e9683c5de8676fe10000000a114084/frameset.htm for details.
Kind regards
Frank Buchholz

Setting Quality Assurance System Client role to Production

Good evening all.
I have had my customer ask if it would be possible to set the client role for our QA system to "Production". The reason for this is that a number of transactions that they perform within production require that the QA system be opened when they wish to try them first in QA.
Examples of the transactions are: KSC1, KSC2, KSU1, KSU2, OB52, OB08.
I know that changing the setting is possible, but what are the issues with doing this to the QA system? Is this something that shouldn't be done except when necessary, and if so why?
Thanks for your help!
Joe Johnson

Thanks for the answer, but I understand the process. I am looking to see what the implications for setting a QA environment to a production role would be, and what are the negatives of doing so.
The processes mentioned don't require that the production environment be opened, and the users would like to see the same for QA....
Thanks!

Revoking permissions for Few of the worksets in System Administration role.

Hi Experts,
I would like to revoke the permissions for some of the worksets in the role of System Administration. How can i remove the permissions like that ? Is it posible like that ?
Thanks
Suresh.

Hi Priyanshu,
"Object manager is not activated" simply means, that the SLD server is not started. So, please, first of all navigate to the SLD URL http://<host>:<httpport>/sld, login with an administrative SLD user -> Admininstration and push the star button.
Regards,
Blanca

System Analyst role - Every day responsibilities

Please explain in detail what would be the role and responsibilities of a SAP BW System Analyst.

Hi,
BW Information analyst's Job Overview:
Participate as a lead analyst in the analysis, development, support and communication of SAP Business Warehouse (BW) projects for the company and its subsidiaries' data warehouse primarily in the Professional Services subject area. Accountable for full project life cycle, with emphasis on translation of user requirements into specifications for complex logical data models, source data capture, dictionary design, data integrity and overall warehouse design.
Consult with users/functional teams to gather and interpret their documented reporting requirements for various data warehouse projects. Develop logical data models using best practices for data capture, data dictionary design, maintenance and overall data integrity. Develop supporting business process procedures that allow for an automated data load and promulgation of data to the warehouse.
Provides support and consulting services to users and FIS Business Process Service teams in mining, analysis and interpretation of warehoused data
High level contributor, expected to provide guidance and direction to others on medium to large complex projects. Perform lead role in all levels and aspects of BW development life cycle. Provide detailed functional knowledge throughout the entire development process.
Provide status reports, isolate and resolve problems, initiate system enhancements as required.
Work with other BW staff to increase expertise in data modeling, project scoping and planning.
Analyze SAP Business Content components when delivered for relevance to the company**s projects including initiation of new projects.
Regards
CSM Reddy

System Administrator Roles

We are running Unity Connection 7.1.5. Pub and Sub. On the Subscriber I go to Roles > System Administrator and I see myself in the list as well as all my co workers.
But when i go to the Pub, i don't see anyone in the list. It's as if the System Administrators are not sync'd to the Pub. But show up in the Sub.
I need to know why this is happening. And More Importantly how to fix this??
thanks in advanced.
Shir

hi Shir,
What's the status of DB replication between the Unity Connection pub and sub?
From CLI of the pub: "utils dbreplication runtimestate"
Ryan

How to properly reboot Exch2010 system w/ roles on different servers?

I have a 300 user Exch2010/Win2008r2 network. It has 1 server with CAS and HUB and one server with MBX roles. I have a Blackberry BES on a different box. The Mailbox Server looks like it is runnning low on RAM - it only has 10% free at
the moment. There haven't been any performance issues, but I can reboot it this afternoon due to a holiday party if I want. It is the first time since it was in production that we have had to reboot it ourselves. A vendor did it before.
COming from a Groupwise background, I would think I should stop the BES, then stop the CAS/HUB and then stop/reboot the MBX server. Finally reboot the CAS/HUB and finally reboot the BES.
1. Is this correct?
2. I would normally go to the services spot under Server manager and stop each service and once that is done, reboot. Is there an order I should close the services on a given server - ie exch ad topology, then info store, then ...?
I only have about 2 hours to find the answer, so any help would be appreciated!

On Fri, 16 Dec 2011 17:00:24 +0000, OTS Tech wrote:
>I have a 300 user Exch2010/Win2008r2 network. It has 1 server with CAS and HUB and one server with MBX roles. I have a Blackberry BES on a different box. The Mailbox Server looks like it is runnning low on RAM - it only has 10% free at the moment.
That's not a problem. Leave it alone. Exchange will suck up all the
memory it can.
>There haven't been any performance issues, but I can reboot it this afternoon due to a holiday party if I want.
Don't do it. It isn't broken. It isn't even sick. It's working just
the way it should be.
>It is the first time since it was in production that we have had to reboot it ourselves. A vendor did it before. COming from a Groupwise background, I would think I should stop the BES, then stop the CAS/HUB and then stop/reboot the MBX server. Finally
reboot the CAS/HUB and finally reboot the BES.
>
>1. Is this correct?
No. If you feel the urgent need to unnecessarily reboot the mailbox
server, just reboot it.
>2. I would normally go to the services spot under Server manager and stop each service and once that is done, reboot. Is there an order I should close the services on a given server - ie exch ad topology, then info store, then ...?
No need for manual intervention.
>I only have about 2 hours to find the answer, so any help would be appreciated!
Go enjoy the party and leave the server alone. :-)
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP

System Designer Role in Jdeveloper (ADF)

Hi,
I would like to know how Oracle recommends on doing a detailed design of an ADF application. Let's say you have the requirements and use cases of the application, and you are asked to do the detail design knowing that you are going to use JSF and ADF BC (notice I am saying BC: Toplink in our case is not an option).
First thing that comes into my mind is to do UML class diagrams, sequence diagrams, etc and then give that to the developers as the starting point for implementation. But will these diagrams be of use, given the fact that ADF is mostly declarative / wizard based how are these diagrams later on synchronized with what you develop in Jdeveloper ?
I think that Oracle should already have resolved this issue since next generation of Oracle Applications is being built over ADF BC (http://www.oracle.com/technology/products/jdev/tips/muench/guidesandstacks/index.html).
I can't imagine a project of that size being built without design (and backing methodology).
However I didn't find any tutorial showing this approach - all tutorials just show RAD development techniques based on Wizards.
What are your thoughts / experiences ?
Thanks,
Claudio.

Hi,
I would like to know how Oracle recommends on doing a detailed design of an ADF application. Let's say you have the requirements and use cases of the application, and you are asked to do the detail design knowing that you are going to use JSF and ADF BC (notice I am saying BC: Toplink in our case is not an option).
First thing that comes into my mind is to do UML class diagrams, sequence diagrams, etc and then give that to the developers as the starting point for implementation. But will these diagrams be of use, given the fact that ADF is mostly declarative / wizard based how are these diagrams later on synchronized with what you develop in Jdeveloper ?
I think that Oracle should already have resolved this issue since next generation of Oracle Applications is being built over ADF BC (http://www.oracle.com/technology/products/jdev/tips/muench/guidesandstacks/index.html).
I can't imagine a project of that size being built without design (and backing methodology).
However I didn't find any tutorial showing this approach - all tutorials just show RAD development techniques based on Wizards.
What are your thoughts / experiences ?
Thanks,
Claudio.

System 9 BI+ roles

Similar Messages

Maybe you are looking for