Upload of BW Roles from BW (2004s)

Hi
I am in the process of uploading my roles from BW into the portal.
I was wondering if we can pre configure the properties that the reports (iviews) inherit as part of the upload.
For example after the role has been uploaded the property "Launch in New Window" is set as " Display in Portal Content Area".
We would like this to always default to "Display in Separate Window".
Can this be be setting be configured to apply to all reports uploaded as part of the role upload procedure. This removes the need to change each iviews properties after the upload.
Thanks in advance.
Ian
Message was edited by:
Ian Carbonel

Hi
I have made changes to the BEx Web Application Iview however the changes did not appear to transport into my test environment.
I have found the following documentation relating to the protection of objects during transport.
http://help.sap.com/saphelp_nw04s/helpdata/en/70/ccc572a094fb4c9b15af909767b924/content.htm
· At export: System objects and content objects with the namespace prefixes com.sap.portals* or com.sap.km* are automatically excluded from the export package and therefore not exported. PAR archives are not usually included in the export.
· At import: If there are content objects with the namespace prefix com.sap.portals* or com.sap.km* in a package, they are automatically excluded from the import.
Is this the reason? Is it not possible to change the properties of objects in the namespace com.sap.portals*?
Thanks in advance

Similar Messages

Can I upload the same role from R/3 many times?

Whenever there is a change in the R/3 role at PFCG,
we want to upload it into EP and overwrite the role with
the same name.
We dont know if this is the best way?
Thanks!

Hi Roy,
Yes you are rigth but , as I´ve said before, every user is also a R3 user, due to ESS and MSS, and with the transaction HRUSER we can give them a lot of roles in an automatic way .....
And for example, if you have implemented some BP about PS, MM or wathever R3 funcionality, the real security access and authorizations relay in the R3 side, so the user must to have an R3 role...Why not use the R3 facility to select users , assign them differents roles and upload it?
In minutes you can assign hundreds of users with portal roles in your EP environment....

Run-time reading of roles from backend system

EP5 unification provided the ability of displaying an end-user's backend system roles in the iPanel. This did not require importing the backend role to EP5. This greatly reduces the maintenance of roles in EP (especially with BW!

Hi Daniel,
You have a possibility to upload the whole Role from R/3 to EP6 Portal. You do it the following way:
Create system in Portal for your R/3.
Navigation to System Administration->Transport->Role Upload. Select system that you wish to upload Role from, search for your role.
That's it!
All objects in uploaded role become iViews.
Best Regards,
Julia

Error while uploading roles from quality to production

Dear friends,
I have to upload roles from quality to production.
I have downloaded it from qualtiy but while uploading to production it is giving me an error "File does not contain valid data".
Can anybody tell me what could be the problem and how to resolve it.
Thanks in advance
regards
Nirgun

HI matore,
the best way is to transport the roles from DEV to QA and then to production as julius suggested
are you trying for mass down load are single role
Mass download
go to PFCG >> utilities>> Mass download>> select all the roles which you want to move it to production
and execute save it on desktop
now go to production system>> go to PFCG>>in menu click on roles>>click on upload>>select the file which is saved in desktop and click ok
mass generation of roles
in the menu click on utilities>>mass generation>>give the role names with you have uploaded and click on execute select all click on genetate button
download a single role
go to PFCG>>in the menu click on role>>click on down load and save it on desktop
now go to production system>> go to PFCG>>in menu click on roles>>click on upload>>select the file and click ok
now you needs to manully generate the role
do the user comparison
hope this helps
thanks
kishore

Automatic upload of roles from ECC to portal (UME with LDAP)

Hi experts,
This thread reopen the question asked on the following message : automatic upload of roles from BI to portal
However, it concerns this time "UME with LDAP".
Problematic :
SAP Library 04s tells us that is not yet possible to automate role replication (or role assigment replication) from ABAP Based back-end to Netweaver Portal. Only manual process for initial upload is possible.
Source = http://help.sap.com/saphelp_nw04s/helpdata/en/41/5e4d40ecf00272e10000000a155106/frameset.htm
Questions :
1 - Did anyone ever try to implement such an automatic tool ?
2 - What if I'm not able to write on the Active Directory ? I am still able, at least, to automate role assignment replication from ABAP Based back-end to Netweaver Portal (ie. UME with LDAP) ? Directly from SAP R/3 to EP through UME, without passing through Active Directory since the group field is not maintained in AD.
Many thanks for your inputs
Alexis MARTIN

Hello,
As I did not read the previous thread I don't know what exactly you are trying to achieve, but I can tell you about what we have done - as far as it is not too late yet.
We use the portal with integration to a BI system. In the ABAP stack we have lots of roles with menu items for hundreds of reports. We want the users to see these roles in the portal.
First we have used the role migration tool of the portal to upload these roles. There is a Java API for executing role uploads from code. You need to create a webservice in the java stack to call this api, and can call the webservice from ABAP.
However it is just a question of time and role size until this will not work at all. Standard role migration is more or less crap, stability is a problem. It also creates a lot of logs in the PCD and thus fills the database with trash. (After a few OSS messages there is now a program for deleting logs + you can turn of logging.) Also upload of larger roles takes up to an hour, and you alwasy have the problem that your portal roles are not up to date during the day.
When I got completely fed up, I have implemented an own navigation connector. When you log on to the portal it will connect to the ABAP stack via RFC, load the role, and generate the portal menu from it. It uses caching, but on every logon it checks whether the role has been updated in ABAP since the last time it was loaded. It is up to date, faster then PCD navigation, and you need absoluetely no periodical synching at all. I cant even understand why this is not offered by SAP per standard!
Drawback is that it will of course only work for the menu items, and only menu items with an "URL-type" are supported. I'm prettry sure however that it would be possible to implement a few other types as well.
Let me know if you are interested in the solution, I can give you a few additional details: oliverDOTsvisztATwienerbergerDOTcom
Oliver

Can u upload Roles from 4.6C to ECC 6.0

Hi all,
1. Can we upload some roles from 4.6C system to an ECC 6.0 system? Will it accept and work properly?
Regards
Senthil

>
Hillary Hoffman wrote:
> Can you tell what transaction or process you use to upload?
Same as for the download, PFCG. Do mind the character set ('parameter' pulldown menu at the bottom of file save/open dialog box), they have to be the same on both sides.

Implications of uploading roles from SAP 4.7 to SAP ECC 6.0 EHP 5?

HI Gurus,
Please tell what would be the cons for uploading the roles from SAP 4.7 to ECC6.0 EHP5.
Would there be issues in doing the same?
Regards,
Sonu

Hi Sonu,
There me be changes in authorization object assignment for the roles. Some objects may be deleted and new objects may be addedd to the transactions.
Instead of uploading you can better get the list of transactions for every role and create them newly in ECC 6 EHP 5 system and maintain them according to the old roles.
Thanks,
Kranthi

Help! I could not upload roles from R/3 to EP60 -Stack13!!!

Hello!
I could not upload roles from R/3 to EP60 (NW SR01 Stack 13).
I Read "How to... Upload Roles from ABAP-based Systems"
The error I am getting is:
<b><b>Connection to SAP component system failed. Check the system settings.</b></b>
I am able to run all MSS, ESS, Best Practic iViews. Connection works between EP and R/3 for transactions!
There are in log:
#1.5
#0007E90949DE01890000000200000C580004051FA517544A#1131533378906#com.sap.portal.connectors.R3#sap.com/irj#com.sap.portal.connectors.R3#Zaitsev#54158####86548911510e11dacc260007e90949de#Thread[PRT-Async 15,5,PRT-Async]##0#0#Error#1#/System/Server#Plain###(R3/BW) Failed to get connection. Please contact your admin. #
Help!
Thanks,
Sergey.

Hi Sergey,
Good Morning, i am new to portal implementation, i request to u if u have the implementation steps of ESS and MSS packages could u please send that steps to my mail id: [email protected]
i am waiting for your reply.
Regards,
Jagadish Babu Kanikanti.

IView Template used when uploading role from R/3 to Portal

Hi all,
I was wondering what iView template is used when you upload a role from R/3 that contains Web Dynpro ABAP applications. I want to change some of the default parameters in the template, more importantly, close the Detailed Navigation panel on the left.
Hope this makes sense,
Thanks,
Kevin

Hi Kevin,
From your explanation, it seems you can see the iViews in Portal role editor under Content Administration.
Under Content Administration
Open the Role for Editing
In the Editor, select the iview and Click on OPEN button.
Now, you should be able to see the properties of the iView in the Editor.
Please check for the property "Code link", which give you the details of the class or template in use.
Hope, this will help
Cheers!!!
Biroj

How can download the roles from one system and upload them into another ??

Do anyone have the solution ..... ......it very important.

Hi,
Visit [Role Maintenance Functions|http://help.sap.com/saphelp_nw04/helpdata/en/e4/15e48efd6c11d296430000e82de14a/content.htm] in section Download/Upload.
To avoid inconsistencies, all roles from which a role is derived are also downloaded. When you download composite roles, all the roles which they contain are also downloaded.
When you upload a role, all role data, including authorization data is uploaded from a file into the SAP system. The user assignments for the role and the generated profiles for the role are exceptions in this case. You must therefore regenerate the authorization profiles after the upload.
Mass Download:
Save several roles on the PC.
You can choose on the selection screen whether you:
Also want to transport the single roles contained in the selected composite roles (Customizing switch ADD_COMPOSITE_ROLES in table SSM_CUST)
Also want to transport the generated profiles for all single roles (PROFILE_TRANSPORT in table PRGN_CUST)
You can define the default setting for both options using the value in the Customizing switch. If you explicitly set a switch to NO, the option in question on the selection screen is not active. Otherwise, it is active.
Regards,
Srilatha.

UPLOAD OF EMPLOYEE BP FROM CRM TO ECC

Hi all,
Is it possible to upload Employee Business Partners from CRM to ECC system.
as per client business process we create Employee Business Partners in CRM system and they need to upload in to ECC system.
I have worked on downloading of Employees data from ECC to CRM using ALE IDOC.
Please suggest whether it is feasible or not? If standard solution is available kindly let me know.
Your help will be highly appreciated.
Best regards,
Raghu ram

Hi ,
The common practice is to download "Employee" from ECC to CRM thru ALE IDOC ,
But you can also take another approach :
1) Create employee as business partner in role "BUP003" "employee" in SAP CRM .
you can create manually or you can use BP upload program in CRM.
2) You need to configure "internal number range " for business partner "emplyee " in CRM , and "External " in ECC Backend
3) set up middleware for replication of BP from CRM to ECC .
4) Business partners - EMPLOYEES create in CRM will be replicated to ECC as Business partner ( and not as HR employee )
hope this helps,
PD

Integrate GRC 10.1 with CUA and how to import roles from CUA & Child systems into GRC for provisioning

Hello,
I am trying to integrate CUA into our GRC 10.1 system through the below steps and so far I have completed the below steps following SAP Notes 1680108 and 1616121:
1. Connected CUABOX to GRCBOX like a plug-in system.
2. Updated CUA Global System and CUA Model Distribution in Maintain CUA settings under User Provisioning.
3. Next I am trying to import the roles from CUA(CUABOX) into GRC(GRCBOX) to be able to provision roles in CUA Child Systems(ECCBOX).
After reading few discussions in SCN, I have figured that we have to download a template in Role Import and populate it accordingly to upload the CUA child system roles into GRC system for provisioning in CUA Child Systems.
Unfortunately, this template has multiple fields and I am unable to determine the fields that should be populated as CUA Global System and CUA Child System to import into GRC. Also, when we upload CUA Child System Roles template what selections should be made in Role Import window.
Any help in this regard is very helpful.
Thank you,
Pawan

Hi Alessandro,
I have "Create user if does not exist" setting checked for both change action and assign role action and also have CUA enabled. Here is the list of steps that I am performing:
1. Create an access request for new account, T-CUA_CHILD and select a role from a child system ECC Z_ECC_ROLE_IN_CHILD_SYSTEM.
2. Approvals provided to assign the ECC role.
3. I see the following in GRFNMW_DBGMONITOR_WD.
           Auto provisioning activity at end of request at Path GRAC_DEFAULT_PATH and Stage              GRAC_SECURITY
               New User:T-CUA_CHILD created in System(s): ECC (created without role assignments)
               T-CUA_CHILD User does not exist in target system CUA
GRC created an account without role assignment in ECC but also throwed me an error that the user does not exist in CUA.
However, if I select roles from both CUA and ECC it creates the account in both systems with the selected role assignments.
So I am wondering if there is way to provide CUA access to users by default for new account requests types. I have tried setting up default roles for CUA but it does not assign the roles by default until I select the CUA system.
Thank you for your help!
Pawan

Importing master role from ECC into portal throws derived role exception

Hello,
While uploading master and derived role from backend system into the portal I am getting the following exception.
com.sap.portal.pcd.rolemigration.RoleMigrationException: Nested Exception. Failure to execute native function. Nested Exception. ROLE_IS_DERIVED
Does it imply that the derived role is already imported with the import of master role and there is no need to explicitly import the derived role?
The landscape uses role upload tool of portal for UME.
Regards
Pooja

Hi Pooja,
There is a limitation with the role upload tool that the derived roles cannot be uploaded.
The migration is only able to upload roles which have their own menus. Derived R/3 roles does not have menus themselves as they derive them from other roles. The purpose of the migration is to bring the R/3 navigation structures into the portal. Therefore you can only migrate the role from which your role is derived.
Regards
Anja

Transporting roles from sandbox to a DEV environment

Hi all,
We have some external consultants who have been developing/modifying roles in a sandbox. They have put in a lot of work into this effort and do no want to re-create these roles in the DEV environment. Does SAP best practice allow us to transport these roles from the SANDBOX to the DEV ? or do we insist that the roles be re-created in the DEV box ? Will there be maintenance issues down the road if we do the tranport ?
Thanks,
Denis Louis

Yes, you can download them to your desktop and upload them to the DEV...
PFCG -> Role -> Download and Upload
Regards
Juan

Deletion of particular roles from SU01 for specific users

Hi,
Actually I have to certain(only some) roles for users in SU01.
This is bulk data so doing it manually through SU01 is not possible.
Is there any function module/BAPI which will delete particular roles for users??
Disha.

Hi David.
David Berry wrote:
I take it this is being run in PRD? What checks are being carried out during the table entry deletions and are you 100% happy sitting at your keyboard when pressing the 'run' button?
Changes are made in PRD. The program was tested and is approved by each customer.
Is there an easy way back to the previous state should it go wrong and how do you explain it to the auditors if needed that you assigned-number of roles in PRD against your own user ID possibly with no CDHDR/CSDPOS entries to back you up.
Sorry for the 'negative vibes' but I don't like direct table maintenance in PRD for security.
Best wishes
David
The way back is uploading the old role assignment previously exported from AGR_USERS. The program takes an excel sheet. In addition this excel sheet is attached to the change requests.
From risk perspective we say (and experienced): mass changes through copy and paste lead to much more errors and faulty authorizations.
Regarding direct table maintenance: standard function modules are used (like the one mentioned above) and the changes are visible in the change documents, Therefore the auditors grant an exception for using such tools.
Cheers, Tobias

Upload of BW Roles from BW (2004s)

Similar Messages

Maybe you are looking for