Uploaded BW Roles and Iviews launch

Hello Gurus,
My goal is to replace the BEx Browser with the Portal.
I am experiment different things but so far it seams that the best way would be to Upload SAP_BW Roles to the portal with the following settings:
Upload user mapping:               YES
Upload user mapping:           YES
Upload included services:           YES
Select first folder level as entry point:      YES
Convert roles to worksets:          NO
Role name only
I am facing a couple of problems though:
1) Once I added an uploaded role to a Portal User, I am accessing the portal with it:
Folders contained into the roles now are shown as tabs, which is actually fine.
Web queries, contained into the role, are shown as sub-tabs which doesnt thrills me but I dont see any problem with it.
The first web query (Iview) contained into the folder starts by itself even though I am not clicking it and this is not alright!
I was imagining something different like what we have accessing the portal with role com.sap.ip.bi.business_explorer_showcase_0
A folder which contains clickable links leading to the web queries (iViews).
Do you know a way to have the same thing with uploaded roles?
If it is not possible can you please tell me how to avoid the automatic start of the first query (Iview)?
2) I am not able to find within the KM, web queries (iviews) imported with the tool can you please tell where they have been stored?
If you believe there is a better strategy to replace the BEx Browser with the portal please let me know it !
Thank you very much!
Matteo Mariniello

Hi Matteo,
If you are using NW 2004s, i would recommend going with the BI- Java Usage type which would provide you with Business Explorer and Business Planning Roles. This contains a Bex Web Analyzer through which you can run your queries and reports through portal. This also provides acces to Bex Portfolio where you can publish Queries to KM Folders.
You can install BI as a usage type while installing NW 2004s.
Check out the following links.
BI Suite
http://help.sap.com/saphelp_nw04s/helpdata/en/5b/30d43b0527a17be10000000a1
14084/frameset.htm
Integrating BI with Portal
http://help.sap.com/saphelp_nw04s/helpdata/en/a3/7b583c2439e66fe10000000a114084/frameset.htm
Thanks,
Abhishek

Similar Messages

Transport roles (with assigned group) containing folders and iviews

Hi,
This message was in the BI forum before and I think that it suits here better.
I created a portal role which is contained in a folder X under Portal Content. This portal role is associated with a particular ABAP menu-role by means of Assigned Groups. When I transported the folder X with all dependent objects from Dev to QA, the portal role appeared but the Assigned Groups is empty. Another words, the association between portal role and the ABAP menu-role could not be transported. How can Associated Groups in a Portal Role be transported?
Then I also tried to do the following steps:
1. Export and import portal contents which include the whole structure with folders, roles and iviews under each role.
2. Export and import the same roles as user management data
The result from 1 was that the whole structure including the roles is imported; however none of the portal role contains the associated assigned group.
The result from 2 was that the UME roles with assigned group are imported as separat objects.
Now, the same role appears both as portal role without assigned group and the UME object with assigned group. But, there is no connection between 1 and 2. That means that I cannot use 2 anyway.
Therefore, I still have to manuelly modify 1 with assigned role once again after importing step 1. Is there a way to import 1 with the associated assigned group without any manuel modification?
Thank you in advance for any helpful advice.
Best regards,
Zabrina

hi,
check the following threads
http://help.sap.com/saphelp_nw04/helpdata/en/6d/7c8cfd410ea040aadf92e1f78107a4/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/6d/7c8cfd410ea040aadf92e1f78107a4/frameset.htm
Re: Transport management in BW 2004s
let me know uneed any further info
bvr

How to transport roles, pages and iViews in the PCD from DEV to QA

Hi
Please would someone telll me how I can transport/move roles, pages and iViews we have created in our own area of the Portal Content Directory from our Development to our QA portal environment.
Kind Regards
Claire

Hi,
Please check help.sap.com.
http://help.sap.com/saphelp_nw70/helpdata/en/c5/56599164d0c04cb566ba0e2d7ed55c/frameset.htm
Your Basis/NetWeaver consultants can help you.
Regards,
Masa

IView Launch Sequence

Hi SDNers,
In the Desktop InnerPage the following iViews are added and appears as below in the page layout (1 Column Full Width):
Custom Breadcrumb
Content Area
Footer
I have some custom logic in the 'Custom Breadcrumb' iView which sets some data to the browser session which will be used by other apps. Now, the Content Area iView (which displays the role containing other custom iViews) should access the data that was stored in the session.
However, when the portal screen is launched it seems that the Content Area iView is launching first and then the Custom Breadcrumb iView due to which it does not get the data stored in the session. I verified this by printing the system time in both the iViews and found that the Content Area iView is launched first followed by the Custom Breadcrumb iView after some miliseconds.
Is there a way to ensure that the Custom Breadcrumb iView is loaded completely prior to the launch of the Content Area iView ?
Any help would be appreciated.

Hi Robin,
Thanks for your prompt reply. Thought I will share some more details of my requirement.
My Custom Breadcrumb application has a HTMLB button called 'Go'. On click of this button, a function module is called which returns some data. This data is saved to the user's session. Now, the other iViews in the Content Area need to access this session data. However, since the iViews launch in no specific sequence, the other iViews retrieve the data from the session and do not get anything if they load and render prior to the Breadcrumb iView.
To ensure that the iViews get the right data, I thought of refreshing the content area after the logic (function module call) in the Go button is executed.
In the Custom Breadcrumb java code, using javascript I tried using
public onGo(Event event)
//call to function module
response.write("<ascript language="javascript">");
response.write("parent.pageSupport.ivuRefresh(path of content area iView)");
response.write("</ascipt>")
However, the above code does not seem to work. The syntax in the code is correct. I have specified it differently above as I am unbale to post the thread with the actual tags.
I am looking for a similar solution as I do not plan to modify the ContentArea code for subscribing to events.
As I do not wish to refresh the entire browser page, do you know of any method to refresh an iView from another iView ?
Regards,
Melwyn
Edited by: Melwyn Monis on May 31, 2011 6:22 PM

Roles and Action

Hi,
I need a clarification about this basic funda.
administrator user belongs to Administrator Group.
Administrator group contains 2 roles i.e.Administrator role and Superadmin role.
Administrator role contains Manage_all and JMXManage_all actions.
Superadmin role contains Manage_all and Aclsuperuser actions.
Now if I create a role that contains Manage_All,JMXmanage_All actions and Aclsuperuser actions , and If I assing this role to a user call "test", is the test user same as the administrator? As I did this but could not get the desired result. Kindly help me out in understanding this concept.
cheers
Naveen.H
P.S. Loads of points would be awarded..

Hi Naveen,
The MANAGE_LICENSE permission is part of the Manage_all action which is only assigned to the super admin role. Therefore only users who have the super admin role assigned are able to manage licenses.
The administration tools of the portal, such as the Cluster Administration Console and other components in the package com.sap.portal.runtime.system.console, cannot be used by roles which are not super administrator.
Roles defined in the UME parameter: "ume.portal_admin.role" are super
administrators.
Cluster Administration Console, administration tools, super_admin
Because these tools have a great impact on the security of the portal, only the super administrator has the rights to work with them. When launched, these tools check whether or not the user is a super administrator.
These tools can be used if the user has one of the roles defined in the
UME parameter: "ume.portal_admin.role".
The portal comes with a minimal set of permissions assigned to its initial content. These default permissions are designed to provide maximum security for a freshly installed portal.
The default permissions settings are sufficient to enable users assigned to the super administrator role to work and gain access to all initial content. They also enable the remaining standard administration roles (content, system, and user) to access tools specific to these roles, but not to initial content objects. For example, a content administrator has access to the Portal Content Studio, but is not able to gain access to any content objects, such as iViews, pages, and rolesthe Portal Catalog in the Portal Content Studio is empty.
This topic describes the default permissions assigned to the initial content of the portal.
The initial permissions are only valid for a fresh and full installation of the portal. When upgrading a portal, the initial permissions script in the portal is not executed. This prevents the permissions in an existing portal from being overwritten.
For guidelines on reconfiguring the strict initial permissions to allow the pre-configured portal roles to access initial content objects relevant to their role, read Configuring Permissions for Initial Content in SAP Enterprise Portal 6.0 (SP9 & Higher)
Permissions for Super Administration Role
The standard super administer role is assigned maximum access to the entire set of portal initial content.
The user store and data source of the User Management Engine used in your organization determines which standard administrator users are members of the standard Administrators user group after the portal is installed. The Super Administrator role is assigned by default to the Administrators group. Therefore, initially all standard administrator users have super administrator permissions in the portal.
Cheers,
Shaym

Get pictogram of PCD roles/workset/iviews from INavigationNode object

Hi,
I am trying to develop a sitemap wherein I would like to display the pictogram of the object. The information I have is just the INavigationNode object (from which the UR/short URL/Launch URL can be retrieved)
        String pictogramURLstr,pictogramLink;
     NavigationNodes rootNodes = getrootnodes();
     for(Iterator it = rootNodes.iterator(); it.hasNext();)
          INavigationNode rootNode = (INavigationNode)it.next();
          String title = rootNode.getTitle(request.getLocale());
          Tree tree = new Tree(title, "");
          tree.setRootNodeIsVisible(true);
          GridLayoutCell cell = new GridLayoutCell(rootNode.getName());
                pictogramURLstr="<img src=\""+pictogramLink+"\" style=\"BORDER:NONE; VALIGN:MIDDLE; PADDING-LEFT:3px;\"></img>";
          String text = pictogramURLstr+ "<a href=\"" + "/irj/portal?NavigationTarget=" + rootNode.getName() + "\" target=\"_blank\"; style=\"FONT-WEIGHT: normal; FONT-SIZE: 1.25em; CURSOR: hand; COLOR: #FFF; WHITE-SPACE: nowrap; TEXT-ALIGN: center; TEXT-DECORATION:none; \" >" +title + "</a>";
                TreeNode root = new TreeNode(rootNode.getName(), text);

Hi Mahesh,
I already tried that, but I need the image set in the pictogram property of the role/workset/iView and not the image corresponding to the object type. The ultimate aim would be to get the same result as in using Navigation tag library <nav:navNodePictogram>
But due to some constraint, I cannot use Navigation tag libraries and want to have the same effect using the INavigationNode object.

Navigation through a new role and persistence of user properties

Hi there,
I have a question related to roles and user-experience in the SAP Enterprise Portal.
Depending on the preference of the portal user I would like to offer a different navigation by assiging a new role to the user.
For example initially a role offers the navigation show below:
Role 1:
Toplevel navigation: Entry A Entry B Entry C
After a user request for a different navigation the order of the toplevel navigation changes.
Role 2:
Toplevel navigation: Entry B Entry C Entry A
In order to realize this, I created two worksets for Entry A. By using merge-ids and a difference in sorting I managed to move the Entry A to the end of the toplevel navigation bar after assiging role 2.
However I noticed that iView properties set by the portal users under role1 are lost after assigning the role2. Is there any way a user can keep the properties set under a previous role when getting assigned to a new role that has the same page?
Thanks in advance,
Arko

FacesContext context = FacesContext.getCurrentInstance();
context.getApplication().getNavigationHandler().handleNavigation(context,
null,
"<<NAVIGATION STRING>>");
Thanks,
Navaneeth

Mapping ABAP roles and assignments to EP UserGroups and EP Roles

Hello.
I have set up my EP7 UME to upload ABAP roles as Portal Groups . Im expecting the ABAP role to user assignment to also reflect as EP Group to User assignment.
All my roles that 'exist' in the ABAP source system are created in EP7 correctly as expected. However, only "direct" user to role assignments are uploaded. NONE of my "indirect" user to role assignments (ie: Via HR Org in ABAP system) are reflected in EP.
Qtn: Is there a way I can encorporate indirect user-role assignments into the upload into EP as well ??
Thanks
Andrew
ps: I have played with HR org active switch in vain in ABAP syst

Hi Kumar,
Have you tested the connection of your R3 system?
Do you want to connect to the ABAP UME? If so do the following:
1.     Logon to the portal as administrator
2.     Go to:
1.     System Administrator
2.     System Configuration
3.     UME Configuration
4.     Click Modify Configuration
5.     From the drop down select ABAP system
Fill in the details for your system.
Click on the User Mapping tab
Click on the reference system combo box and select the relevant system
(in this case R3)
Click on the Test Connection button. If the test has been successful you should get a Connection test successful. ~<b>It is important to test the connection before saving otherwise this could cause you lots of problems!</b>
Thanks,
Nick

Automatic upload of roles from ECC to portal (UME with LDAP)

Hi experts,
This thread reopen the question asked on the following message : automatic upload of roles from BI to portal
However, it concerns this time "UME with LDAP".
Problematic :
SAP Library 04s tells us that is not yet possible to automate role replication (or role assigment replication) from ABAP Based back-end to Netweaver Portal. Only manual process for initial upload is possible.
Source = http://help.sap.com/saphelp_nw04s/helpdata/en/41/5e4d40ecf00272e10000000a155106/frameset.htm
Questions :
1 - Did anyone ever try to implement such an automatic tool ?
2 - What if I'm not able to write on the Active Directory ? I am still able, at least, to automate role assignment replication from ABAP Based back-end to Netweaver Portal (ie. UME with LDAP) ? Directly from SAP R/3 to EP through UME, without passing through Active Directory since the group field is not maintained in AD.
Many thanks for your inputs
Alexis MARTIN

Hello,
As I did not read the previous thread I don't know what exactly you are trying to achieve, but I can tell you about what we have done - as far as it is not too late yet.
We use the portal with integration to a BI system. In the ABAP stack we have lots of roles with menu items for hundreds of reports. We want the users to see these roles in the portal.
First we have used the role migration tool of the portal to upload these roles. There is a Java API for executing role uploads from code. You need to create a webservice in the java stack to call this api, and can call the webservice from ABAP.
However it is just a question of time and role size until this will not work at all. Standard role migration is more or less crap, stability is a problem. It also creates a lot of logs in the PCD and thus fills the database with trash. (After a few OSS messages there is now a program for deleting logs + you can turn of logging.) Also upload of larger roles takes up to an hour, and you alwasy have the problem that your portal roles are not up to date during the day.
When I got completely fed up, I have implemented an own navigation connector. When you log on to the portal it will connect to the ABAP stack via RFC, load the role, and generate the portal menu from it. It uses caching, but on every logon it checks whether the role has been updated in ABAP since the last time it was loaded. It is up to date, faster then PCD navigation, and you need absoluetely no periodical synching at all. I cant even understand why this is not offered by SAP per standard!
Drawback is that it will of course only work for the menu items, and only menu items with an "URL-type" are supported. I'm prettry sure however that it would be possible to implement a few other types as well.
Let me know if you are interested in the solution, I can give you a few additional details: oliverDOTsvisztATwienerbergerDOTcom
Oliver

Transport roles and analysis authorization with user assigned

Hi expert,
I face with this problem transport roles and analysis authorization with user assigned. When I have created a transport request to move the roles and analysis authorization from development system to test system. I couldnu2019t maintain the user assigned, after transport I have to assigned manually all of user or create a program to fill AGR_USER table or there are other way.
Thanks for your time,
Luis

Hi,
In role administration, you have the following options for transporting roles:
You can download the roles from one system and upload them into another
You can import the role from a remote system using RFC
You can transport the roles with the transport function.
Role upload loads all role data, including authorization data from a file into the SAP system. The user assignments for the role and the generated profiles for the role are exceptions in this case.
Transporting Roles with the Role Transport Function
       1.      Start the role administration function by choosing Tools ® Administration ® User Maintenance ® Role Administration ® Roles (transaction PFCG).
       2.      Enter the role to be transported and choose Transport Role.
The Mass Transport of Roles screen appears. You can control the default settings for the options Also transport single roles for composite roles and Also transport generated profiles for roles using Customizing switches (see Role Administration Functions in the section Functions of the Utilities Menu).
You should not change the authorizations profiles of the role after you have included the role in a transport request. If you need to change the profiles or generate them for the first time, transport the entire role again afterwards.
For more information go thrpugh the below link
http://help.sap.com/saphelp_nw70/helpdata/EN/6d/7c8cfd410ea040aadf92e1f78107a4/content.htm
Regards,
Marasa.

Fetching iviews not assigned to a page,workset or a role(orphaned iviews)

Hi All,
I need to fetch iviews,pages ,worksets ,roles that have not been assigned and are not used.The iview is not assigned to a page,workset ,role,similarly a page need not be assigned to a page,workset,role and similarly for a workset and a role.
Any Pointers??
Thanks in Advance.
Regards
Radhika Kuthiala

Hi,
i need to code regarding the same.Can anyone provide me some pointers in regards to available api's to do the same(fetching iviews not assigned to a page,workset or a role(orphaned iviews)).I am able to fetch total iviews in pcd through coding in web dynpro java.
Regards
Radhika

Role Assignment IView

How do I enable Delegated User Admin on the role management IView. The checkACL property is not available. I am using the sneak preview installation of the portal not 6.0 sp2. I can find the property in sp2 but not in this installation.
Thanks,
Wael Aoudi

I use EP6.0 SP9 on NW4 and there is an extra role Delegated User Admin. And it's true - there is no checkACL property on Role Assignment iView. It seems that the new role replaces the property.
Beata

Upload of role in Access Enforcer 5.2.

Hi All,
I need to upload roles in Access Enforcer from SAP ECC system. Actually i have uploaded the roles in Access Enforcer, but all unwanted roles have also got uploaded.
Now i need some way, first to clean entire uploaded roles & then upload selected roles.
Please suggest.
Thanks & Regards,
Pravin

Hi Pravin,
Here are the steps:
1) Download all the roles into an excel spreadsheet:
Go to configuration -> Roles- Search roles -> Click on 'Export' button. This CUP, go to 'Search Roles'. Click on 'Search' button without providing any search criteria. This will return all the roles available in CUP. Now, click on Export button. CUP will export all the roles into Excel spreadsheet in the format which CUP understands.
2) Delete all the roles from CUP: Now, in the same screen as above, select all the roles and delete them.
3) Delete not needed roles from spreadsheet and upload it into CUP:
Now, delete all the unwanted roles from CUP and play with the spreadsheet to manipulate other parameters like role approvers, systems, business process etc and upload that spreadsheet into CUP.
Regards,
Alpesh
SAP GRC Manager (PwC)

Problem with uploading the role from backend R3 ECC 5.0 system

hi all gurus,
         i have created one role in the back end sustem and then assigned it to one user.
         Now i have created one system to connect that backend system and mapped one portal user to that backend system user then i tried fro uploading the role problem.
         Now after prosessing the role upload it will show the report with error for "PROCESSING ATTRIBUTES" as follow:
15:31:18.452 Error Click for Details   Processing attributes
Then after click8ing on it it shows following thing
Time Stamp Severity Severity Text Details Stack Trace Message Text Message Long Text
15:31:18.593 Error   Click for Stack Trace Target undefined for type '0', system 'VR1CLNT800', key '* unknown *', subKey 'null'. SEVERE: getObject(portal_content/com.sap.portal.migrated/SAPComponentSystems/com.vcerp.ZTEST_UPLOAD1), entry '[RoleMenu, 00001034, , , 00000525, * unknown *, * unknown *, * unknown *, , VR1CLNT800, 00139842, 00000234]'.
15:31:19.93 Error   Click for Stack Trace Target undefined for type '0', system 'VR1CLNT800', key '* unknown *', subKey 'null'. SEVERE: getObject(portal_content/com.sap.portal.migrated/SAPComponentSystems/com.vcerp.ZTEST_UPLOAD1), entry '[RoleMenu, 00000387, , , 00000155, * unknown *, * unknown *, * unknown *, , VR1CLNT800, 00141548, 00001073]'.
15:31:19.218 Error   Click for Stack Trace Target undefined for type '0', system 'VR1CLNT800', key '* unknown *', subKey 'null'. SEVERE: getObject(portal_content/com.sap.portal.migrated/SAPComponentSystems/com.vcerp.ZTEST_UPLOAD1), entry '[RoleMenu, 00000922, , , 00000469, * unknown *, * unknown *, * unknown *, , VR1CLNT800, 00142382, 00001486]'.
and after clicking on one of the row on "Click for stack strace" It shows the following thing in "Stack trace for exception " window.
com.sap.portal.pcd.rolemigration.RoleMigrationException: Target undefined for type '0', system 'VR1CLNT800', key '* unknown *', subKey 'null'. at com.sap.portal.pcd.rolemigration.RoleMigration.getTargetUrl(RoleMigration.java:780) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.attrsRoleMenuItem(RoleMigrationObject.java:2999) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.addRoleAttibutes(RoleMigrationObject.java:3584) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:1719) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:769) at com.sap.portal.pcd.rolemigration.RoleMigrationThread.run(RoleMigrationThread.java:484)
So please help me to sort out this problem.
for further attachments
my email id is [email protected]
thanks in advance,
regards,
Hardik.

OPEN DATASET i_dsn IN LEGACY TEXT MODE FOR INPUT
for this statement add ENCODING DEFAULT
Reward if useful
Naveen

SAP instance dies when I try to make a change to the role and save

Hello Friends
I am an ABAP and XI guy, but am working on Enterprise Portal.
I have created an IVIEW (URL) and am trying to associate it with a user and role. I have created user and then when I try to assign role by clicking on AssignROles and then select a role and try to save, it consistently kills the SAP instance (dm36939 0) and this instance turns to yellow (instead of staying green). I have to restart this again. I have installed ECC and EP on this server and ECC (ABAP programs tables etc.,) works without any problem. EP also works most of the time, but consistently fails at this point as explained above.
I am not sure if there is any specific settings I should be looking at. Any feedback will be highly appreciated.
Thanks
Ram

NOone responded and so closing here to open it again in a relevant area.

Uploaded BW Roles and Iviews launch

Similar Messages

Maybe you are looking for