Transporting anonymous MIME service user

Hi
I was having a problem with saved BW excel reports prompting for username and password logon to view saved excel report sheets, I found implementing note 650399 & 487456 fixed this problem by setting a user in SICF path /default_host/sap/bw/mime for anonymous logon in DEV.
The problem is, when I transport this, the anonymous user settings are lost in /default_host/sap/bw/mime, how do I transport this public user setting? as I do not want to open up the QA and Production clients to enter the anonymous data directly, as this would make the object a repaired object wouldn't it?
Also, the note I followed, 487456, says to maintain the anonymous logon with the public user, normally in the ICF i have created aliases to services, not changed the original, the note says you should enter the anonymous user into /default_host/sap/bw/mime as this is a SAP standard path, couldn't this cause problems with future Support Packs and upgradeds?
Thanks for any help.

Hi Ruchit
Yes, the user exists with correct password and user setup in QA.
When I look at the anonymous logon details, when i do a technical help, the table is ICFSERVICE and the fieldname for the username is ICF_USER.
When I look in the transport I created when i entered the anonymous the logon details in DEV, the ICFSERVICE table is there, but the not the field for ICF_USER, the only fields in the transport from table ICFSERVICE are ICF_NAME
and ICFPARGUID.
So, looks like user ID has not been recorded in the transport, even though the transport was created when I entered the logon details.
Regards,
Paul.

Similar Messages

Transporting anonymous MIME service user logon details

Hi
I was having a problem with saved BW excel reports prompting for username and password logon to view saved excel report sheets, I found implementing note 650399 & 487456 fixed this problem by setting a user in SICF path /default_host/sap/bw/mime for anonymous logon in DEV.
The problem is, when I transport this, the anonymous user settings are lost in /default_host/sap/bw/mime, how do I transport this public user setting? as I do not want to open up the QA and Production clients to enter the anonymous data directly, as this would make the object a repaired object wouldn't it?
Also, the note I followed, 487456, says to maintain the anonymous logon with the public user, normally in the ICF i have created aliases to services, not changed the original, the note says you should enter the anonymous user into /default_host/sap/bw/mime as this is a SAP standard path, couldn't this cause problems with future Support Packs and upgradeds?
Thanks for any help.

Hi Ruchit
Yes, the user exists with correct password and user setup in QA.
When I look at the anonymous logon details, when i do a technical help, the table is ICFSERVICE and the fieldname for the username is ICF_USER.
When I look in the transport I created when i entered the anonymous the logon details in DEV, the ICFSERVICE table is there, but the not the field for ICF_USER, the only fields in the transport from table ICFSERVICE are ICF_NAME
and ICFPARGUID.
So, looks like user ID has not been recorded in the transport, even though the transport was created when I entered the logon details.
Regards,
Paul.

Use ZBEX Anonymous Login Service in BIApplicationFrame in ABAP Web Dynpro

Hello,
We created a ZBEX Service as an alias of the BEX Service as per SAP OSS Note 516884 to allow users to anonymously access BW reports.
Now we want to embed the BI Web Application in an ABAP Webdynpro as a BIApplicationFrame.
Note that the ABAP Web Dynpro is on the SAP R/3 ERP side while BI is a separate BW instance.
The problem we are facing is the standard BIApplicationFrame element uses the SAP standard BEX service when it forms the URL and we do not seem to have a way to make it use the ZBEX Anonymous login service. Hence it always asks for the logon screen defeating our purpose.
Has anybody done been able to make the BIApplicationFrame use ZBEX service and if yes, what is the solution to this problem?
Thanks and regards,
Atul Kulkarni

Hi Ankur,
Someone will somewhere call the EJB (not: "Java Bean"!). As an EJB isn't part of a request/response cycle but mainly thought for business logic, it is of course the task of the calling component to deliver the user (his logonID for example) to the EJB. There is not other way!
Hope it helps
Detlev

Do XI service users have to exist in the SLD with the same password?

Hi All,
Do XI service users have to exist in the SLD with the same password?
We have a 3 system(development, QA and production) XI landscape with a single SLD. All systems are NW04s with support stack 9.
We are required to change XI service user passwords. I have found OSS note 936093 for changing these passwords. What I am not sure of is if I can change XI service user passwords one system at a time. I am under the impression that XI service users must exist in the SLD with the same password as the XI system. If this is correct, I have to change service user passwords in all three systems at the same time which is not very feasible.
Thanks,
Hamid Lashgari

Creation and Maintain Users
For the transport of Integration Server content, it is a good idea to install CMS on an
existing Integration Server. In this double-stack scenario, where an ABAP and J2EE
stack is used, user management is different from a J2EE only installation.
Note: For more information about using CMS on a J2EE only installation, see the
CMS documentation.
The following section describes the double-stack user management settings required
when CMS is running on the Integration Server in the development environment. See
Figure 2. The description we provide starts with ABAP user management and is followed
by the maintenance in J2EE User Management Engine (UME). You proceed as follows:
Create the service user LSADMIN using transaction SU01.
Assign the ABAP roles SAP_XI_CMS_SERV_USER and
SAP_SLD_ORGANIZER to the LSADMIN service user.
Create the ABAP role SAP_CMS_ADMINISTRATOR and assign this role to the
ABAP dialog user(s) responsible for CMS administration.
In UME, create the role CMSDeveloper with the actions CMS.Display and
CMS.Export.
In UME, create the role CMSAdministrator with the action CMS.Administrate.
In UME, assign the users representing xirepuser and xidiruser to the role
CMSDeveloper.
In UME, assign the group SAP_CMS_ ADMINISTRATOR to the role
CMSAdministrator.
Log on to CMS with the ABAP dialog user responsible for CMS administration.
Maintain the CMS service user (LSADMIN) for the domain.
Task XI Dev
With CMS XI Test XI Prod
Create the service user LSADMIN in TA using transaction
SU01. Yes Yes Yes
Assign the ABAP roles SAP_XI_CMS_SERV_USER and
SAP_SLD_ORGANIZER to the LSADMIN service user. Yes Yes Yes
Create the ABAP role SAP_CMS_ADMINISTRATOR and
assign this role to the ABAP dialog user(s) responsible for
CMS administration.
Yes No No
In UME, create the role CMSDeveloper with the action
CMS.Display and CMS.Export.
Yes No No
In UME, create the role CMSAdministrator with the action
CMS.Administrate.
Yes No No
In UME, assign the group SAP_CMS_ ADMINISTRATOR to
the role CMSAdministrator
Yes No No
Log on to CMS with the ABAP dialog user responsible for
CMS administration.
Yes No No
Maintain the CMS service user (LSADMIN) for the domain. Yes No No
Figure 4: Overview of User Management Tasks in Different Systems

Problem in maintaining service user for CCM srm_cse

Hello all,
We are implementing SRM 4.0 (EBP 5.5) SSP scenario.
To support shopping of EBP we are also implementing CCM 2.0 as an add on.
Please note CCM and EBP are on same client and CAT & CSE are also on the same client.
No XI is involved as the catalog will be only uploaded in CSV format.
I am doing intial configurations for CAT and CSE.
Now we know that we need to configure a service user in the service of srm_cse.
I am adding the same in SRM client-> trans SICF -> default host -> sap -> bc -> bsp -> ccm -> srm_cse ->change service -> log on procedure- log on data reqd. -> Anonymous log on data - details of client, user, password, language.
since my SRM and CCM are in same client I have put the same client no. and given the user with role "/CCM/CATALOG_SEARCH"
But when I am saving this change in service I am getting an error messaeg that " Changes to Repository or cross-client Customizing are not permitted ".
I am in a same client hence there is no question of cross client customizing .
The other cause left is CHANGES TO REPOSITORY .
Can anybody tell me where I should do config so that this "changes to repository" error message will be be corrected?
Thanks for yr attention and apologies for lengthy matter.
Kind Regards,
Dinesh

Hello Yann,
Thanks a lot for your attention.
But my question was regarding particular error I am getting while maintaining service user in the service "srm_cse" as given in my first message.
Can you throw some light on that pl.?
My client configration as per yr path is present.
Regards,
Dinesh

Reference and service users

what exactly this reference and service users do and for what kind of activities these user types has to be assigned?

Hello Veera ,
Hope you looking for this ....
Characterization of user types
Dialog user 'A'
Individual system access (personalized)
Logon with SAPGUI is possible. The user is therefore interaction-capable with the SAPGUI.
Expired or initial passwords are checked.
Users have the option of changing their own passwords.
Multiple logon is checked.
Usage: For individual human users (also Internet users)
System user 'B'
System-dependent and system-internal operations
Logon with SAPGUI is not possible. The user is therefore not interaction-capable with the SAPGUI.
The passwords are not subject to to the password change requirement, that is, they cannot be initial or expired.
Only an administrator user can change the password.
Multiple logon is permitted.
Usage: Internal RFC, background processing, external RFC (for example, ALE, workflow, TMS, CUA)
Communication user 'C'
Individual system access (personalized)
Logon with SAPGUI is not possible. The user is therefore not interaction-capable with the SAPGUI.
Expired or initial passwords are checked but the conversion of the password change requirement that applies in principle to all users depends on the caller (interactive/not interactive). (*)
Users have the option of changing their own passwords.
Usage: external RFC (individual human users)
Service user 'S'
Shared system access (anonymous)
Logon with SAPGUI is possible. The user is therefore interaction-capable with the SAPGUI.
The passwords are not subject to the password change requirement, that is, they cannot be initial or expired.
Only a user administrator can change the password.
Multiple logon is permitted.
Usage: Anonymous system access (for example, public Web services)
Reference user 'L'
Authorization enhancement
No logon possible.
Reference users are used for authorization assignment to other users.
Usage: Internet users with identical authorizations
Regards ,
Santosh

KM Scheduler Task - Service user

Dear all,
I created a scheduled task in the NWDS and deployed the par and configured the time table for it. The task is running every minute, so it's all working. Now i'm wondering, is it possible to set the user that executes the task somewhere? like in a service user or so.
I played around a bit in the portalapp.xml and it now looks like:
<?xml version="1.0" encoding="utf-8"?>
<application>
<application-config>
    <property name="SharingReference" value="usermanagement, knowledgemanagement, landscape, htmlb, exportalJCOclient, exportal,SAPJ2EE::sap.com/ear~test"/>
    <property name="SecurityArea" value="Netweaver.portal"/>
    <property name="Vendor" value="sap.com"/>
</application-config>
<components/>
<services>
    <service name="RFServiceWrapper">
      <service-config>
        <property name="className" value="com.sap.netweaver.rf.wrapper.RFServiceWrapper"/>
        <property name="startup" value="true"/>
        <property name="SafetyLevel" value="low_safety"/>
      </service-config>
    </service>
</services>
</application>
In the run(..) method, i call an ejb, and in the ejb i print the username that's executing it. Sometimes it says it's executed by Guest (most of the times), and sometimes it says it's executed by Administrator...
What user is used for running the scheduled task? can it be a fixed user, as in "serviceUserX" for example? How do i configure that?
Kind regards.
J.
Message was edited by:
        Joren Crauwels
Message was edited by:
        Joren Crauwels

Hi
Did you find a solution fo this problem?
Florin

BOE XI R2 - Configuring RAS with Service user, RAS Fails to start...

Colleagues:
Where would kbase article c2018785 be found?
I am configuring my BOE XI R2 to use End-to-End SSO via IIS using this document from Business Objects:
Link: [https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/403cdf46-c63e-2b10-2997-978cb8ba59f0]
In this document, you create a service user under which certain applications run, including the Report Application Server.
There is a specific note on page 6 in the doc which states:
The RAS server may fail to start under this new service account. If you experience this issue, follow the steps outlined in the following kbase:
Link: [http://support.businessobjects.com/library/kbase/articles/c2018785.asp]
Unfortunately, the link is out of date, and I have not found the article using the existing search tools.
I did use the -trace argument to the command line to start up the RAS service, and the output is follows:
Timestamp     ProcessID     ThreadID     Message
[Thu May 07 13:21:39 2009]     4448     4228     (.ashwin32service.cpp:165): trace message: RAS starting
[Thu May 07 13:21:39 2009]     4448     4228     (.dtsdts.cpp:1794): trace message:
TraceLog 2009 5 7 8:21:39.936 4448 4228 (.dtsdts.cpp:2039): CDTSApp::InitInstance(): In CDTSParameters::RUN
[Thu May 07 13:21:39 2009]     4448     4228     (.dtsdts.cpp:1794): trace message:
TraceLog 2009 5 7 8:21:39.936 4448 4228 (.dtsdts.cpp:2055): CDTSApp::InitInstance(): Starting server. Process Id=4448
[Thu May 07 13:21:39 2009]     4448     4228     (.dtsdts.cpp:1794): trace message:
TraceLog 2009 5 7 8:21:39.936 4448 4228 (.dtsdts.cpp:2062): CDTSApp::InitInstance(): setServerParameters() done
[Thu May 07 13:21:39 2009]     4448     4228     (.dtsdts.cpp:1794): trace message:
TraceLog 2009 5 7 8:21:39.936 4448 4228 (.dtsdts.cpp:2130): CDTSApp::InitInstance(): initLicenseLimit() returns 1
[Thu May 07 13:21:39 2009]     4448     4228     (.dtsdts.cpp:1794): trace message:
TraceLog 2009 5 7 8:21:39.936 4448 4228 (.dtsdts.cpp:3895): CDTSApp::loadServerOptions(): about to SaveToRegistryAsDefault
[Thu May 07 13:21:39 2009]     4448     4228     (.dtsdts.cpp:1794): trace message:
TraceLog 2009 5 7 8:21:39.936 4448 4228 (.dtsdts.cpp:3897): CDTSApp::loadServerOptions(): done SaveToRegistryAsDefault hr=-2147024891
[Thu May 07 13:21:39 2009]     4448     4228     (.dtsdts.cpp:1794): trace message:
TraceLog 2009 5 7 8:21:39.936 4448 4228 (.dtsdts.cpp:3916): CDTSApp::loadServerOptions(): error Access is denied.
[Thu May 07 13:21:39 2009]     4448     4228     (.dtsdts.cpp:1794): trace message:
TraceLog 2009 5 7 8:21:39.936 4448 4228 (.dtsdts.cpp:2134): CDTSApp::InitInstance(): loadServerOptions() returns 0
[Thu May 07 13:21:39 2009]     4448     4228     (.dtsdts.cpp:1794): trace message:
TraceLog 2009 5 7 8:21:39.936 4448 4228 (.dtsdts.cpp:2194): CDTSApp::InitInstance(): getDataEngineName() returns C:TrouxBusiness Objectscommon3.5 incrpe32.dll
[Thu May 07 13:21:39 2009]     4448     4228     (.dtsdts.cpp:1794): trace message:
TraceLog 2009 5 7 8:21:39.936 4448 4228 (.dtsdts.cpp:2197): CDTSApp::InitInstance(): openEngine() returns 0
[Thu May 07 13:21:39 2009]     4448     4228     (.dtsdts.cpp:1794): trace message:
TraceLog 2009 5 7 8:21:39.936 4448 4228 (.dtsdts.cpp:2292): CDTSApp::InitInstance(): preloadMSXML() done
[Thu May 07 13:21:39 2009]     4448     4228     trace message: EnCOMSessionMgr::EnCOMSessionMgr begins...
[Thu May 07 13:21:39 2009]     4448     4228     trace message: EnCOMSessionMgr::EnCOMSessionMgr trying to get Singleton SessionManager.
[Thu May 07 13:21:39 2009]     4448     4228     trace message: CInfoSessionManager::Initialize start
[Thu May 07 13:21:39 2009]     4448     4228     trace message: CInfoSessionManager::Initialize, start the cluster refresh thread
[Thu May 07 13:21:40 2009]     4448     4228     (.dtsdts.cpp:1794): trace message:
TraceLog 2009 5 7 8:21:40.217 4448 4228 (.dtsdts.cpp:2445): CDTSApp::InitInstance(): caught UNKNOWN EXCEPTION!!!
[Thu May 07 13:21:40 2009]     4448     4228     (.dtsdts.cpp:1794): trace message:
TraceLog 2009 5 7 8:21:40.217 4448 4228 (.dtsdts.cpp:2461): CDTSApp::InitInstance() returns 0
[Thu May 07 13:21:40 2009]     4448     4228     (.dtsdts.cpp:1794): trace message:
TraceLog 2009 5 7 8:21:40.217 4448 4228 (.dtsdts.cpp:1039): CAgentMapMT::ShutDown - outstanding agents:
[Thu May 07 13:21:40 2009]     4448     4228     (.ashwin32service.cpp:329): trace message: RAS Exiting: return code = 0
In the Windows event viewer, this error is echoed:
Failed to load Report Application Server settings from the system registry.
Detailed Message: Access is denied.
It seems my service account needs a certain permission to be able to load and read the registry for this application, and I'm sure this permission is discussed in the missing kbase article.
Could you please let me know what permission is required for this user on the OS? This is Win2003 x64 SP2.
Thanks, and have a good day

Hi,
if this a permissions problem then just start +regedit*, go to
My Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Business Objects
select it, press the right mouse button and choose Permissions. Press the advanced button and assign your service account with full control at this point of the registry. Do not forget to select the +Replace Permissions Entries on all child objects ... + option.
You can also take a look at Notes 1199630 and 1201489 (this one is for CR 10 but it may be worth it to follow the instructions there) ( [https://service.sap.com/notes])
Regards,
Stratos

To install Remote Desktop Services User CAL on Windows Server 2008 R2 Enterprise Edition with SP1

Dear Sir,
Presently we have installed Windows Server 2008 R2 Enterprise Edition with SP 1. And now i would like to install Remote Desktop Services User CAL on this server. I have 25 digit product key of Windows Server
2008 R2 Remote Desktop Services User CAL (20). Downloaded this product key from our MSDN Subscriptions.
Kindly suggest me how to install (CAL server with product key that i have) and configure remote desktop services on my above existing server also how to point other server with my CAL server.
Thanks

Hi,
1. Install Remote Desktop Session Host and Remote Desktop Licensing Role Services using Server Manager.
2. Open RD Licensing Manager (licmgr.exe), Activate your server, then install your license
3. In RD Session Host Configuration (tsconfig.msc), set the Licensing mode to Per User and Specify your RD Licensing server name (itself). If you want you may configure these two settings via group policy setting instead. The path of the
group policy settings is Computer Configuration\ Administrative Templates\ Windows Components\ Remote Desktop Services\ Remote Desktop Session Host\ Licensing
4. You may point other RDSH servers to your RD Licensing server using RD Session Host Configuration or via group policy as mentioned above.
5. Optionally you may consider installing other Remote Desktop Role Services such as RD Gateway, RD Web Access, RD Connection Broker, etc.
-TP

User Profile Service - User Profile Incremental Synchronization Timer job stuck at 33% Status: Pausing

User Profile Service - User Profile Incremental Synchronization Progress: 33% Status: Pausing
It has been almost 15 days.
Both User Profile Service and User Profile Synchronization Service are in Started state and FIM service also starting
I tried clearing sharePoint config cache.
I also restarted the sharepoint timer service.
I tried almost everything that is on Internet but nothing helped me.
Is there any other way to solve the issue as I was struck on production server (ASAP)
In synchronization serivce manager status of MOSS_DeltaImport is Inprogress from past 2 days
Best Regards.

Hi,
Please follow the steps in the link below to clear the configuration cache.
http://blogs.msdn.com/b/jamesway/archive/2011/05/23/sharepoint-2010-clearing-the-configuration-cache.aspx
Here is a similar thread for your reference:
https://social.technet.microsoft.com/Forums/en-US/beaa852c-6f40-428a-b97c-20722864e045/user-profile-service-user-profile-incremental-synchronization-timer-job-stuck-at-88-status?forum=sharepointadminprevious
Or try to clear the file system cache on all servers in the server farm on which the Windows SharePoint Services Timer service is running. Microsoft has provided a step by step procedure on clearing file system cache from the SharePoint front-end servers
in this kb article.
You can also see the ULS logs and check error messages.
http://sharepointlogviewer.codeplex.com/
Best Regards
Dennis Guo
TechNet Community Support

Creating a Service User

I'm trying to create a Service User in the portal. I've come across this link:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/cfdc9e90-0201-0010-6780-cc30206dd319
On page 7, it says that "Service Users reside only in the database. This can be achieved by settings in the configuration file."
It then goes on to say that several service users such as cmadmin_service are added by KM. My question is, how do I add my own service users? My portal is not using LDAP as a user repository, just the portal DB.
Thanks,
Matt

First, thanks for the reponse -
Yes - I believe the namespace is $serviceUser$. Since our portal is not integrated with a user repository like AD, how would I create a service user with appropriate namespace? Creating users via the User Administration role, I cannot assign the new users to the $serviceUser$ namespace. Do I have to write some SQL to insert into the user database table?
Thanks again.

Error - The registration of the service "User Profile Service" has failed. The user profile can not be loaded

I am running an environment with an Active Directory and Terminal Servers.
I have searched high and low for resolutions to this error but I cannot find anything related to my situation, let me explain further.
The fixes I found are related to local users only.
When I create a new user in the Active Directory I provide the paths to the profile folder in the "Remote Desktop Profile" and "Profile tab" lets say for example \\ad001\home\%username% and \\ad001\profil\%username% .
I give rights to the user to read/write the "home" folder which is mapped for folder redirection. An I know that when the user first logs on it should create a "v2.%username%" folder upon successful logon. This is when I am
presented with the error message below:
"The registration of the service "User Profile Service" has failed.
The user profile can not be loaded"
Does anyone have any experience with this or know a suitable fix. Again this is for the "Roaming" profile creation no local.
Many thanks in advance.

Hi,
Thank you for posting in Windows Server Forum.
Did you receive for any one user or for all users?
Have you tried to solve the issue by fixing the user account profile?
For that you can adjust the registry setting “ProfileImagePath” with
particular SID of that user under below mention path.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
Also if this can’t resolve the issue you can try to delete the SID of that user or renaming the old and and then check the result again by creating new profile for that users.
More information.
You receive a "The User Profile Service failed the logon” error message
http://support.microsoft.com/kb/947215
Hope it helps!
Thanks.
Dharmesh Solanki

ABAP Service Users not working - important

Hi,
I installed finally BPC 75 NW, and I cannto get ito the application for the 1° time because I have several issues.... I get the error "The user ID, password cannot be authenticated. Make sure you entered valid credentials".
On Server Mgr. i get 2 errors " Sap server connection : database connection" and "ms message queue: queue name: .private$BPCstatusmessagequeue".
I have done eveything in order to solve this... but... after a lot of research I found a note where it is suggested to uninstall, however I still want to change some parameters as described in the installation guide, I hope you can please help me to clear this:
Manual, page 43, installation for NW.
- ABAP service users can be locked as a result of the install.
- Check and unlock users, use SU01, press Ctrl + F5 (done, not a problem)
- Check that COM + Components exist (done)
- Check interfaces (this means changes in Pooling & Recycling?)
- Check that librfc32.dll is set up appropiately (I had the problem during install where i needed to reassign this dll, now is not an issue unless there is something else to check that i am not aware of)
- IIS Port (80 by default right?)
- ServerConfiguration.config for the correct username and system info (cant find this file)
- Registry Entries on 32 and 64 bits (how can I do this)
- Check C:windowssytem32driversetchosts file to ensure that a fully qualified domain and IP resolution exists (what exactly do i need to check)
On server mgr also I have for COM+ components " domain system administrator with which i installed & password" is this right?
Thanx in advance, it is really important.
Velázquez

Hi,
Thanx for the feedback !! really appreciate it. Here is the response:
The COM components are ok, as well as the MSMQ and every other component you mentioned (also reinstalled it). I reactivated all "dictionary" to the 3 users created in ABAP, changed role to communication, and give SAP_ALL permission.
In the machine, changed the Default web site to port 81 (to let BPC website take port 80)
Reinstalled NET 2.0, set all components for BPC website to Net 2.0
Created the 3 abap users in domain and gave in both systems the same password.
Entered in the machine as the administrator user (also administrator in Netweaver) and started the installation without trouble.
After that, tried to run the server diagnostic but this user was lacking permits, so I added the 3 users (abap) in the local machine as administrators, in a new group called BPC (only giving the administrator role). Entered now in the machine as BPC_SYSADMIN and ran the Server Diagnostic without trouble.
After doing this, I now am facing an issue trying to add users to the 1° appset... choosing the domain users... however someone mentioned that this is related to the NET tier, is it better to reinstall this tier completely or at least try with NET 1.1, but im just about to find out.
Thanx again for the response.
Velázquez

IOP 11.1.2.0 integration with Shared Services (User Provisioning)

In the IOP 11.1.2.0 install guide, the Admin and Admin provisioning roles are provisioned through Shared Services.
"Provision Integrated Operational Planning Administrator and Integrated Operational Planning
Provisioning Manager roles for the Integrated Operational Planning instance to the Admin user through
Oracle's Hyperion® Shared Services Console
a. Connect to the Oracle's Hyperion® Shared Services Console; for example, http://
hss_server:hssserver_port/interop.
b. Log in as the administrator.
c. Expand User Directories and Native Directory.
d. Select Users and click Search.
e. Right-click the Admin user and select Provision.
f. Expand Default Application Group.
g. Expand the Integrated Operational Planning instance created.
h. Highlight IOP Administrator and Provisioning Manager.
i. Click the right arrow in the middle of the two windows to select the roles.
j. Click Save, and then click OK."
The users and groups are defined in Shared Services, per the IOP 11.1.2.0 admin guide (p. 144).
Is there an IOP user provisioning example in the shared services user's guide, and which version of the guide would I find that in?
Access priveledges are controlled from the Admin workbench for IOP users, per p.145 of the IOP 11.1.2.00 user's guide.
Thank you.

IOP Roles are listed in the 11.1.2 Shared Services User and Role Security Guide, on page 158:
Integrated Operational Planning Roles
Table 39 Integrated Operational Planning Roles
Roles Tasks per Role
Provisioning Manager Provisions users and groups with Disclosure Management roles
IOP Administrator Administers Oracle Integrated Operational Planning, Fusion Edition. IOP Administrators can modify models, access
ACL pages, and perform all Integrated Operational Planning tasks
IOP User P erforms Oracle Integrated Operational Planning, Fusion Edition actions as a normal user

SAP Business Connector MIME Services to SAP XI Transition

Today we are using the built in MIME services in Business Connector (pub.mime) to format a MIME message, and are then using https to post it to an external business partner by placing the data into the "mimeStream".
Is there a way to perform this same functionality in SAP XI?
Thanks
Peter

Hello Prateek,
Thank you very much for your answer. The AdapterGuide was really helpfull.
Now the routing rule is associated to the correct Service (that was a the problem). So the rule started to process the XML files from the folder (the XML files disappeared immediately after I corrected the rule).
But now my problem is that on the SAP side there is no inbound IDOCs so it seems the trasmission may failed.
Moreover under "Routing"-->"Transactions" I don't see these entries with the the current date.
Our routing rule is simple: "wildcard" "wildcard" "wildcard" "ALE (R/3 IDOC)"--><OUR SAP SYSTEM>
The SAP connection is working as I can test under "SAP..." menu.
Is there any other way to monitor what had happened with these XML files? I'm sure the BC processed as the files are gone, but there is no IDOC in the destination SAP...
Thanks a lot!

Transporting anonymous MIME service user

Similar Messages

Maybe you are looking for