Unable to assign Group permissions to shares in 10.3.9

Hi,
I'm trying to set up afp shares on our 10.3.9 server ... users are created and assigned to groups, but I'm unable to give the group permission to the share in WGM. Owner of the share can be set to any user, but the moment I try and add anything into the Group field I get "The Group name you entered does not exist".
This is despite the fact that the Group is smiling at me from the Users & Groups tray.
The server is running 10.3.9 and is up-to-date with all patches. Any assistance would be greatly appreciated, as the system is currently showing less robustness, ease of use and sheer quality than Windows 95.

I am having this exact same dilemma, also running 10.3.9 on a G4 Server.

Similar Messages

Unable to set NTFS permissions on share using PowerShell. The user shows up with no rights checked off.

I am having a little problem here with setting NTFS permissions via PowerShell.
Basically I am able to make a new directory on the share, and assign a user NTFS permissions however it just assigns the select user without any permissions set.
$username = "test.user"
$directory = "\\testlab-sv01\Share\newfolder"
New-Item -Path $directory -ItemType Directory
$colRights = [System.Security.AccessControl.FileSystemRights]"FullControl"
$InheritanceFlag = [System.Security.AccessControl.InheritanceFlags]::ContainerInherit
$PropagationFlag = [System.Security.AccessControl.PropagationFlags]::InheritOnly
$objType =[System.Security.AccessControl.AccessControlType]::Allow
$objUser = New-Object System.Security.Principal.NTAccount("$username")
$objACE = New-Object System.Security.AccessControl.FileSystemAccessRule($objUser, $colRights, $InheritanceFlag, $PropagationFlag, $objType)
$objACL = Get-ACL $directory
$objACL.AddAccessRule($objACE)
Set-ACL $directory $objACL
A side question, why isn't this native in Powershell? Is it for security reasons? I expected there to be a cmdlet for it.
Thanks.
Kyle

When you say there are no permissions, do mean that the ACL Editor is showing 'Special permissions' and none of the other boxes are checked?
Try changing the inheritance and propagation flags to this:
$InheritanceFlag = [System.Security.AccessControl.InheritanceFlags] "ContainerInherit, ObjectInherit"
$PropagationFlag = [System.Security.AccessControl.PropagationFlags]::None
That sets the ACE to apply to the folder (InheritOnly propagation flag isn't set) , subfolders (ContainerInherit inheritance flag is set), and files (ObjectInherit inheritance flag is set), which is necessary for the ACE to not be considered 'special' in
the ACL Editor.
Awesome. Thanks. That did work.
And yes I did mean that it was showing special permissions with nothing checked.
Kyle

Group Permissions Problem

An issue has cropped up where whenever a user creates a file they are the owner with read/write permissions, but the group permissions are set to read only. I have checked the group permissions are being assigned in ACL, and it is set to read and write.
Please let me know if there is any other information needed to help me solve this and I will see if I can get it.
thnx.

I repaired all the permissions on the user account directories and this fixed my issues with share folder permissions for some reason.
Here is a script that will do it all in one go. Change /Volumes/XXXX/Users/ to where you users directory is. chmod the script to 755 and run with sudo and it will fix the user directory permissions for all accounts.
#!/bin/sh
# This shell script needs to be run as super-user
for i in /Volumes/XXXX/Users/*
do
u=`echo $i | cut -d/ -f5`
case $u in
Shared)
Temporary)
   /usr/sbin/chown -R $u:staff $i
   /bin/chmod -R 700 $i
esac
done
for i in /Volumes/XXXX/Users/*
do
u=`echo $i | cut -d/ -f5`
case $u in
Shared)
Temporary)
   /usr/sbin/chown $u:staff $i
   /bin/chmod 755 $i
esac
done
/usr/sbin/chown -R 'root':wheel '/Users/Shared'
/bin/chmod -R 777 '/Users/Shared'
for i in /Volumes/XXXX/Users/*
do
u=`echo $i | cut -d/ -f5`
case $u in
Shared)
Temporary)
   /usr/sbin/chown -R $u:staff $i/Public
   /bin/chmod -R 755 $i/Public
esac
done
for i in /Volumes/XXXX/Users/*
do
u=`echo $i | cut -d/ -f5`
case $u in
Shared)
Temporary)
   /usr/sbin/chown -R $u:staff $i/Public/Drop\ Box
   /bin/chmod -R 733 $i/Public/Drop\ Box
esac
done
for i in /Volumes/XXXX/Users/*
do
u=`echo $i | cut -d/ -f5`
case $u in
Shared)
Temporary)
   /usr/sbin/chown -R $u:staff $i/Sites
   /bin/chmod -R 755 $i/Sites
esac
done
exit 0

Issues with groups, users and shares.

I have created new users and groups and assigned them to specific shares, however when the new users, that belong to the respective groups login, they are not seeing the shares. Can anyone give me some settings to trouble shoot.
I had exisiting shares, from the snow leopard server installation, and they are working fine... new users aren't taking...
thanks for any thoughts...

Lion server runs fine, there are a lot of folks mad as some (most) gui functions were taken away and they seem to suggest the "don't use Lion server" as their answer to anything. Just ignore.
Obviously, you have file sharing turned on, so, that's not it. Within file sharing in server app, for a share that does not seem to work, are you SURE the permissions are correct? Click on the share and the pencil. Does the group have read and or write access? Is the box checked that says share with mac clients?
Are you trying to use it for a home directory for a network based account? That's another checkbox on that screen.
ALL my accounts and shares are NEW as like you, it was on a new server. They all work.

Problem Assigning file permissions on windows client

I have created some Users and Groups in the OD. I have several Windows PC's including Server 2003 installations. SMB is running and configured as "primary domain controller".
When I browse the OD from the Windows client to assign file permissions I ONLY see the USERS, not the Groups. I have Groups and Users checked in the "Locations" sub dialog.
ie. Right Click on folder to share, choose Sharing and Security, choose Permissions, choose Add, choose Advanced, choose Find. Same thing in the Security Tab. Same thing in the User manager.
This also affects the logons. I don't want to have to add each user every time I want to share or give logon permissions on the Windows client. Adding a Group is much easier.
Any suggestions?

N'<national symbols>', being part of an SQL statement, will be converted to the database character set (WE8ISO8859P1) before being parsed. Only if the client and the database are both 10.2 or higher, the client can encode the literal appropriately so that it survives this conversion.
In earlier versions, you can do the encoding yourself. Instead of the N'<national symbols>' literal use the UNISTR function: UNISTR('\xxxx\yyyy\zzzz'), where U+xxxx, U+yyyy, U+zzzz are Unicode code points of your national characters.
-- Sergiusz

FSL-04017 Unable to change group. ID: 505. Operation not permitted

while i'm installing Solution manager 4.0 with oracle 10g in linux enterprise 4,after the 23rd phase which is "install instance basics" i recived the following error
INFO 2007-06-25 12:02:25
Working directory changed to /tmp/sapinst_exe.3484.1182753067.
INFO 2007-06-25 12:02:25
Working directory changed to /tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS.
INFO 2007-06-25 12:02:25
Working directory changed to /tmp/sapinst_exe.3484.1182753067.
INFO 2007-06-25 12:02:25
Working directory changed to /tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS.
INFO 2007-06-25 12:02:26
Working directory changed to /tmp/sapinst_exe.3484.1182753067.
INFO 2007-06-25 12:02:26
Working directory changed to /tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS.
WARNING[E] 2007-06-25 12:02:26
FSL-02015 Node /proc/sys/kernel/cad_pid does not exist.
WARNING[E] 2007-06-25 12:02:26
FSL-02015 Node /proc/sys/kernel/cap-bound does not exist.
WARNING[E] 2007-06-25 12:02:26
FSL-02015 Node /proc/sys/fs/binfmt_misc/register does not exist.
INFO 2007-06-25 12:02:27
Copied file '/tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/inifile.xml' to '/tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/inifile.14.xml'.
INFO 2007-06-25 12:02:27
Copied file '/tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/inifile.xml' to '/tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/inifile.15.xml'.
INFO 2007-06-25 12:02:40
Copied file '/tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/keydb.xml' to '/tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS/keydb.8.xml'.
INFO 2007-06-25 12:02:41
Execute step createInstanceDirectories of component |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|1|0|NW_CI_Instance|ind|ind|ind|ind|11|0.
INFO 2007-06-25 12:02:55
Working directory changed to /tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS.
INFO 2007-06-25 12:02:55
Working directory changed to /tmp/sapinst_exe.3484.1182753067.
INFO 2007-06-25 12:02:55
Working directory changed to /tmp/sapinst_exe.3484.1182753067.
INFO 2007-06-25 12:02:55
Working directory changed to /tmp/sapinst_instdir/SOLMAN/SYSTEM/ORA/CENTRAL/AS.
INFO 2007-06-25 12:02:55
Creating instance directories for instance IND/DVEBMGS00...
INFO 2007-06-25 12:02:56
File system node /usr/sap/ccms/IND_00 exists already. Nothing to do.
INFO 2007-06-25 12:02:56
File system node /usr/sap/IND/put exists already. Nothing to do.
INFO 2007-06-25 12:02:56
Account indadm already exists.
INFO 2007-06-25 12:02:56
Account 507 already exists.
INFO 2007-06-25 12:02:56
Account 507 already exists.
INFO 2007-06-25 12:02:56
Account sapsys already exists.
ERROR 2007-06-25 12:02:56
MUT-03025 Caught ESyException in Modulecall: Could not set effective group. Operation not permitted.
ERROR 2007-06-25 12:02:56
FSL-04017 Unable to change group. ID: 505. Operation not permitted
ERROR 2007-06-25 12:02:56
FCO-00011 The step createInstanceDirectories with step key |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|1|0|NW_CI_Instance|ind|ind|ind|ind|11|0|createInstanceDirectories was executed with status ERROR .
thks & Rgds
George Varghese

Hi
Well, it is not advised to do it manually, the logged in user (sidadm)
should have the permissions, the reason being it is required at several points of time and with several folders..
However, for learning purpose, here is the syntax to be given in command line-
chgrp -R groupname <directoryName> (for all subdirectory - recursive)
I gave this jsut to cross verify, please assign the access rights (add to admin group) and then continue installation,
Revert for queries,
Cheers
Senthil

Fiori Launchpad Error: Failure - Unable to load groups Resolved!!!!

Hey Good Fellas,
This is a solution rather than a discussion, which i thought to do to with a kind generosity of spirit to give back to the community.
It gives me immense pleasure and happiness to write this particular post, because it is through SCN only i have been able to find the solution.
Ok, let's get down to the Business quickly, shall we?
I have been configuring Fiori App - Approve Purchase Orders. All the tasks for this have been done from SAP Help Site.
Recently I upgraded the ERP/Gateway (Its an embedded deployment) to EHP 7 and UI to SP09, post which the Fiori Launchpad started giving the below error.
If you look around the SCN, you will probably hit across these threads and so did I.
http://scn.sap.com/thread/3571448
SAP Fiori - UI Add-on SP09 update troubleshooting
With the first thread, I tried everyone's solution and suggestions which had worked for others, but it didn't for me.
With second thread (Excellently posted by Masayuki Sekihara), it started off with lots of efforts and double-checks applying all of these notes hoping that it would resolve the issue. But I had done all the steps 1-8 and still didn't get the solution.
Besides the above two mentions I did umpteen number of other ridiculous things like implementing this note, that note, De-implementing another of the notes and everything i found as possible solutions on the Web.
Now, the breakthrough here is checking the errors in /IWFND/ERROR_LOG. Well, on the browser it used to give error 'Failure - Unable to Load Groups' while at the server side, actual error was something unusual and remotely not related to what the error looked like in the browser. In the back-end, I was getting the error "Data Provider implementation 'ZINTEROP_MODEL_0001_BE' '01' 'DEFAULT' does not exist". And this is something i know how to correct.
So just keep looking for the errors in /IWFND/ERROR_LOG and shift your focus there. That's really a good place to trouble-shoot.
And for the record to take care of the error 'Data Provider implementation 'ZINTEROP_MODEL_0001_BE' '01' 'DEFAULT' does not exist' you have to assign the DPC (Data Provider Class) to DMC (Data Modelling Class) correctly by navigating to IMG - SAP Netweaver - Gateway - Former Development - Local OData Channel Development - Registration - Assign Data Provider to Data Model. There you define the Data provider with the correct Software Version and Voila you are all set! You don't have to worry about the duplicate entry with another Software version, your correct software version is the one you have defined in the System Alias which you are using inside the service, which is generally DEFAULT.
I am able to get inside the Fiori Launchpad now (I was quite at edge to really give up as all the possible solutions had been ruled out for me ) and do see the tiles of the apps configured.
I hope this is going to be a good take-away for others who are having Odata handling issues.
The floor is all yours now for your kind feedback. Be gentle with me, I am a very shy blogger.
Best Regards,
Akshay

Steve,
If you still have the error, this is what I did to resolve mines.
1) Goto SPRO - SAP Netweaver - Gateway - Former Development - Local OData Channel Development - Registration - Assign Data Provider to Data Model
2) Find out the entry for 'ZINTEROP_MODEL_0001_BE'
3) Copy that entire row in a notepad for all the fields
4) Create new Entry with all the fields, except change the Software Version to DEFAULT (As that's what missing for you'
5) Save and give that another try.
This is what I exactly wrote in my solution as well.
Akshay wrote:
And for the record to take care of the error 'Data Provider implementation 'ZINTEROP_MODEL_0001_BE' '01' 'DEFAULT' does not exist' you have to assign the DPC (Data Provider Class) to DMC (Data Modelling Class) correctly by navigating to IMG - SAP Netweaver - Gateway - Former Development - Local OData Channel Development - Registration - Assign Data Provider to Data Model. There you define the Data provider with the correct Software Version and Voila you are all set! You don't have to worry about the duplicate entry with another Software version, your correct software version is the one you have defined in the System Alias which you are using inside the service, which is generally DEFAULT.
A screen-shot perhaps helps you more.
Let the other duplicate entry with Software Version other than Default be there. Important is that the software version that you have defined in your alias must be the one over here.
Let me know how that goes?
-Akshay

Unable to assign the Ivews to Workset

Hi Everyone,
I am currently facing an issue in content admin,
I am unable to Assign the IVIEW to the workset ....
I open workset and then clicked on the iview and i find no option for assigning the iview to workset.
I tried out various options but couldn't add the iview to workset ..Please let me know whether something is missing here...
Regards,
Raj

Hi Kandara,
Please check the following posiibilities:
1. Check for Read and Write permissions for the workset you need to assign the ivew.
2.Also check your browser version if it is IE 7.
3. Also i think that you might have locked some object ,to unlock them go to system admin-monitoringunlock objects---go and select the object which is locked and after that press unlock so that the objects are unlocked now.
4. Please check whether you have opened the workset you need to asssign the ivew in property editor otherwise you will not be able to see any option .
After checking the above all possibilities try to right click on the ivew and then u will find teh option for adding to workset their you can select any one of them copy or delta link .
Hope this will help you if you face any furthe problem plz revert.
Regards
Pooja

About account assignment group in Sales Order.

Hi gurus,
I am working in SD for the first time and I am facing below problem
1. Material code was created with account assignment group (MVKE-KTGRM) as blank (Sales Org 2 view)
2. Later this material was entered in Sales Order.
3. Subsequently Sales Order BOM and Production Order were made against this material.
4. We maintained account assignment group in material master after creation of Sales order but account assignment group was not updated in Sales Order.
5. Now the field is gray out or non-editable is there any way by which we can maintain account assignment group in the sales order.
6. As the field is non editable we are unable to do Invoice by VF01.
Is there any way by which we can maintain account assignment group in Sales Order??
Edited by: Deepak Kulkarni on Mar 6, 2012 2:09 PM

Hi
As you have mentioned that you have maintained the acct assignment grp in the material master after the order was created, it will not appear in the sales order item already created and it will only reflect in new orders and changes to existing orders for that material.
Proposed solution:
If it is order related billing that you are doing, then goto VA02 and delete and re-enter the item with same material and qty.
The account assignment group will appear.
If the item is delivery related and if the delivery has already been created but PGi not done, then delete the delivery and then delete the item in the sales order and re-enter the item as told above. If PGI also done, then reverse the PGI, delete the delivery and re-enter as suggestd in above scenarios.
The account assignment group will appear in the billing document document tab in item level.
Regards
Madhu

I am unable to assign breakpoints in Flex Builder 4

I am new to Flex ( a month or so ) and have inherited a big project. This is an odd one. I am unable to assign breakpoints in a particular project. (I've redacted company specifics...)
Here is an example:
If there is a breakpoint loaded the project won't launch. It stalls after loading the first swf file...
If I uncheck the breakpoint the project will load.
If I try to insert a breakpoint after the project loads I get this:
Any help or suggestions would be much appreciated. Thanks in advance...

Hello,
1. make customizing for ledger group
make entry for a ledger group and then assign ledgers to the leger group
press New Entries then enter group name and description. as you can see below.
then mark this entry and go to ledger assignment
then enter the ledgers for you ledger group
ledger group is ready.
2. Making posting in ledger group - run TCd FB50L and enter ledger group as you can see below.
all the best erwin
Posting in ledger group

GRC 10 EAM - Unable to assign Firefighter roles to owners

Greetings SAP gurus,
I am currently on a new GRC 10 installation and having issues with the Emergency Access Management (EAM) component previously known as FireFighter or SPM. Note: We are trying to implement the Firefighter ''Role-Based" Approach.
Issue: We are unable to assign EAM roles to owners within NWBC. Click on 'Assign owners to Firefigher ID's and provision Firefighter ID's to firefighters' via the Access Management Tab within NWBC, option Superuser Assignment. Click on Assign. We are able to find the owners, but when I search for roles to assign, I get the error, 'No records found for the search criteria entered''.
We are on SP7.
Items completed:
1) All post installation tasks were completed correctly, i.e. BC sets activated, connector groups created and working.
2) EAM roles created on target system and imported via BRM.
3) EAM role properties edited for "Firefighting' usage in BRM, role owners defined, functional areas defined, business process and sub process areas defined.
4) Access control owners (i.e. role owners and controllers) defined.
5) The ID being used for configuration is currently assigned all GRC_NWBC roles available.
6) The connector groups are working fine and we are using for the Access risk Analysis component which is working fine.
7) The post EAM configuration steps has been completed.
Has anyone else experienced a similar issue? I look forward to your responses.
Rgds,
Prevlin Moodley

Hello Prevlin,
Are you using a FF role owner for the assignment. This might be helpful:
[Note 1289579 - Firefighter Owner additional authorization for Role based FF|https://service.sap.com/sap/support/notes/1289579]
Cheers,
Diego.

Unable to create Groups through API

Hi,
I have an approval workflow for creation of a new organization and it works fine.Once the last level of approval is completed, I should create a new org and three groups inside OIM. My adapter creates the new organization successfully. however, I am getting exception when I try to create the groups. Can someone please tell me what the issue is. I have assigned all the group permissions to the user group approving the request.Following is the code snippet and exception that I get:
HashMap<String,String> orgMap = new HashMap<String,String>();
               orgMap.put("Organizations.Organization Name", orgName);
               orgMap.put("Organizations.Type", "Organization");
               long orgKey = orgOper.createOrganization(orgMap);
               System.out.println("New Organization Created");
               HashMap<String,String> groupMap = new HashMap<String,String>();
               groupMap.put("Groups.Group Name", orgName+" Admin");
               long adminGroupKey = groupOper.createGroup(groupMap); - this is the line I get the following exception
Running CREATENEWORG
Target Class =security.iam.identity.adapters.tasks.CreatePartnerOrg
Initializing Class
New Organization Created
ERROR,08 Mar 2011 16:52:10,660,[XELLERATE.SERVER],Class/Method: tcDataObj/eventPreInsert Error :Insert permission is denied
ERROR,08 Mar 2011 16:52:10,661,[XELLERATE.APIS],Class/Method: tcGroupOperationsBean/createGroup encounter some problems: maoRejections:You do not have permission to insert this object.
Thor.API.Exceptions.tcAPIException: You do not have permission to insert this object.
Thanks,
Supreetha

You need to give your user insert/create permissions for groups. If it is creating it after the approval is completed, then you need to assign the permissions to the group of users who would perform the last approval because their session is passed onto the rest of the tasks. You could use private key authentication though to switch to xelsysadm and use that user to create the group.
-Kevin

Sharepoint 2013 setup group permissions

In my SharePoint 2013 test sharepoint site, I would like to know how the users should normally have access to the test sharepoint site. Would the user sign as themselves individually or would they sign on with a group id? Can you tell me and/or point me
to a url that will show how to setup group permissions and how the users should login?

There are two suggested ways to assign permissions on SharePoint sites:
    Using SharePoint Groups
    Using Active Directory Groups
Note: A site can be set up to either inherit permissions from the parent site, or to allow unique permissions to be set for the site. If the site is set up to inherit permissions from the parent site, you will have to Add Users or Active Directory Groups
to pre-existing SharePoint groups in the parent site.
Using SharePoint groups:
Click on “People and Groups”
Click on “New” from the drop-down menu
Select “New Group” Under “Choose the permission level group members get on this site:… ”
Select “Contribute” and click OK.
Click on “People and Groups”
Click “New”, from the drop-down menu
select “Add Users” Type in the netID(s) you wish to add
Click on “Check Names” (the netID(s) should now be underlined)
Under “Give permission”, select the group you just created and click OK.
Note: If site owners want their site to show up automatically in users' "My Links" in "My Site" then those users must be part of a SharePoint group and that group must be defined as the "Members of this Site" group.
Using Active Directory Groups:
Click on “Peoples and Groups”
Click on “New” from the drop-down menu
select “Add Users” Type in the name of the Active Directory group you wish to add
Click on Check Names (the group name should now be underlined)
Under Give Users permissions directly, select “Contribute” &click ok.
Note: You can specify multiple netID(s) or AD groups by separating the names with a semi-colon(;).
Below are list of permissions you can use for the site..
Permission Level
Description
Full Control
This permission level contains all permissions.      Assigned to the
Site name Owners SharePoint group, by default. This      permission level cannot be customized or deleted.
Design
Can create lists and document libraries, edit      pages and apply themes, borders, and style sheets in the Web site. Not assigned      to any SharePoint group, by default.
Contribute
Can add, edit, and delete items in existing      lists and document libraries. Assigned to the
Site name Members SharePoint      group, by default.
Read
Read-only access to the Web site. Users and      SharePoint groups with this permission level can view items and pages, open      items, and documents. Assigned to the
Site name Visitors SharePoint      group, by default.
Limited Access
The Limited Access permission level is designed      to be combined with fine-grained permissions to give users access to a specific      list, document library, item, or document,
without giving them access to      the entire site. However, to access a list or library, for example, a user      must have permission to open the parent Web site and read shared data such
as the theme and navigation bars of the Web site. The Limited Access permission      level cannot be customized or deleted.
NOTE You cannot assign this permission level to users or SharePoint      groups. Instead, Windows SharePoint Services 3.0 automatically assigns this      permission level to users and SharePoint
groups when you grant them access      to an object on your site that requires that they have access to a higher      level object on which they do not have permissions. For example, if you grant
users access to an item in a list and they do not have access to the list      itself, Windows SharePoint Services 3.0 automatically grants them Limited      Access on the list, and also the site, if needed.

Hyperion Hub 7.2.5 - Unable to retrieve groups

Please can someone help with Hub...
I have configured Hub I believe with MSAD, but when I click on the "Users and Groups" option from the website I get the message "Unable to retrieve groups" and it will not allow me any further.
Please help... using Hub 7.2.5 - No other Hyperion products installed at present.
Regards
John

Hi,
first sysc the openLDAP and then create a new group and assign the users.
thx
sri

UME actions and Group permissions

Hi there ,
New to portal and NWDI . How do you see what a UME action contains.
i.e. MANAGE_ALL . Do you need java skills or visual administrator to view.
Also, using NWDI.Administrators group , the group itself gives permissions
outsided of just having the NWDI.Administrator role. Where/How are the group
permissions defined ? Thank You
Dan.

Dan,
This is a good place to start: [Authorization Concept of the AS Java|http://help.sap.com/saphelp_nw04s/helpdata/en/44/7fdf2470a412d2e10000000a422035/frameset.htm]. The two roles are different. Security roles are part of the J2EE Standard. UME roles are collections of UME actions. The UME interface cannot show the J2EE roles.
Now as to the role that lets you look at system info, you are correct. As your test showed, this is not included in Manage.All. I just tried that myself. If you look in the visual admin, you see there is a security role called administrators assigned to the group Administrators. Now when the developers create a J2EE application they specify the name of the role that the user must have in order to access it. Often they use the name administrators. When the applications are deployed to the server, the AS Java consolidates all these roles into a single role with the same name, administrators, by role references. This is assigned to the Administrators group by default. This is done to make the life of the developer and the deployer easier. So System Info needs this role. Well, there are two keystore roles assigned by default as well, but I doubt these are the roles System Info is looking for. In SAP NetWeaver 7.1 you have more granular control. But that is another question.
I hope that helps.
-Michael

Unable to assign Group permissions to shares in 10.3.9

Similar Messages

Maybe you are looking for