User roles!despersate for help!!!

Basically we are setting up the IPC AND CRM IDES version4.0 which we have done sucessfully integerating with XML.We need to create users for ISA CRM.We are looking for the UME Configuration and steps involved in it.Your help will be highly appreciated.
Cheers
Gareth

There is a read/write permissions service in the Content Services category in workbench that will allow you to control the access to the space or th efile that you write intp CS.
Paul

Similar Messages

4016: User/Role relationship for user

Hi Guru,
I have a requirement to send email notifications to mulitple users.
I created a adhoc role and tried assigning the users to the role but I am getting this error. I am on R12.1.3
4016: User/Role relationship for user
Where do I pick the user to assign it to the role. Should I use wf_users, fnd_user.
I have the user_name in fnd_user and the name iin wf_users is the same.
v_role_name := 'XX_CUSTOM_ROLE'
v_role_display_name := 'XX Custom Display Role'
   wf_directory.createadhocrole(role_name => v_role_name
                    ,role_display_name => v_role_display_name
                    ,role_description => null
                    ,notification_preference => 'MAILHTML'
                    ,email_address => null
                    ,status => 'ACTIVE'
                    ,expiration_date => NULL);
       for i in v_asset_manger(g_project_id)
-----------v_asset_manger is a cursor which picks up all the assets managers on the project--------------
       loop
            select wfr.name into v_full_name from per_all_people_f papf, fnd_user fu, wf_local_roles wfr
        where papf.person_id = fu.employee_id
        and wfr.name = fu.user_name
        and person_id = i.person_id;
        select count(name) into v_count from per_all_people_f papf, fnd_user fu, wf_local_roles wfr
        where papf.person_id = fu.employee_id
        and wfr.name = fu.user_name
        and person_id = i.person_id;
                    if v_count > 1 then
                    v_name := v_full_name||' '||v_name;
                    v_full_name:= null;
                    else
                    v_name :=v_full_name ;
                    end if;
        end loop;
        wf_directory.adduserstoadhocrole(role_name => v_role_name,
                                            role_users =>v_name);
            wf_engine.setitemattrtext (itemtype      => p_itemtype,
                                    itemkey       => p_itemkey,
                                    aname         => 'XX_ASSET_MANAGER',
                                    avalue        => v_name


Hi Sree,
THanks for your reply. user_name in fnd_user, the role in wf_local_rules are same.
ex. KSURNAJ in wf_local_roles is same as in KSURNAJ fnd_user
Activity Type Function
Error Name WF_DUP_USER_ROLE
Error Message 4016: User/Role relationship for user 'KSURNAJ' and role 'MAIL_TO_ASSET_MANAGERS-1' already exists.
Error Stack Wf_Directory.CreateUserRole(KSURNAJ, MAIL_TO_ASSET_MANAGERS-1, PER, 2680, WF_LOCAL_ROLES,0) Wf_Directory.AddUsersToAdHocRole2(MAIL_TO_ASSET_MANAGERS-1) Wf_Directory.AddUsersToAdHocRole(MAIL_TO_ASSET_MANAGERS-1, "MINUHYE KSURNAJ") XXPA_BUDGET_APPROVAL_WF_PKG.Inside my look XXXX(PABUDWF, 120524, 258610, RUN) XXPA_BUDGET_APPROVAL_WF_PKG.xx_assign_approver(PABUDWF, 120524, 258610, RUN) Wf_Engine_Util.Function_Call(XXPA_BUDGET_APPROVAL_WF_PKG.xx_assign_approver, PABUDWF, 120524, 258610, RUN)

Solution Manager 4.0 Solution Monitoring User -Roles-Profiles for Satellite

Hi All,
I have installed Solution Manager 4.0 (OS -Linux ,Database - DB2) .
Now i need to connect solution manager to the R/3 4.6C
Satellite Systems (DEV, QAS ,PRD) for Solution Monitoring
and Service level Reporting .
I have read the configuration guide , but unable to get clear idea .
1) what users (alos type of user -Dialog , Service, Communication etc) do i need create in DEV , and Test in QAS for solution Monitoring .
2) what exact roles /profiles need to be assigned to these users in satellite systems .
3) what users/roles /profiles needs to be done in SOLMAN system
i have applied all the required plug ins and support packs
in satellite systems and solman 40 ..
Please advice . Your response will be a great help for me .
Satish

Hello Satish,
Just clarify, if u have meant connecting the satellite systems for EWA reports to be precise. Early watch Reports. If its is the case, then repond so that i can putin my inputs which may be helpful for you in this config.
Rgds,
Sri

Can we set User roles/permissions for a content that is stored in Contentspace at the end of Process

Friends,
I have a requirment where a set of approvers approve a form and at the end of the process i store the form as a pdf in the contentspace.
My requirment is that, can we set roles/permission for the file that i store in the contentspace and allow only the people who have approved the form to view/edit the content the the contentspace.
If possible what is the workbench activity should i use and how should i use it in the process?
Thanks for your support
-Ashok Deivasigamani

There is a read/write permissions service in the Content Services category in workbench that will allow you to control the access to the space or th efile that you write intp CS.
Paul

Restrict GL / Cost Centre combinations for users/roles?

Hi,
Please could someone advise if it is possible to restrict Cost Centre and GL Account combinations during PO creation for specific users/roles?
For example:
Valid Combinations:
CC A1 GL 99
CC B2 GL 88
Scenarios:
Create PO with A1, 99 -> Allowed
Create PO with B2, 77 -> Not Allowed
I've found a related post, but not exactly my requirement - any other thoughts? Or has anyone done this themselves?
Authorisations - User Profile for purchasing - restrict by cost centre

Use the user exit MM06E005 to control the CC and G/L for user dependent.
to do that - ask ABAPer to create the custom table for user, CC and GL combination and let teh user exit read the combination from the table and give a error or warning based on your requirements.

UWL Universal Worklist use User Role Negate Filter

Hi, SDN Expert.
In my UWL configuration, I am trying to exclude to display my task items to one user role.
I know that the "User Role" parameter can help me to restricts/allows who can get work items via the user role. I can also have multiple user roles separated by semi-colon to cover all the roles to receive the task.
BUT in my case, I only want few roles NOT to receive the task items, and all other roles to receive them.
My question is can I use the "NEGATE SIGN" , "!" (means Not Equal To) to exclude the particular user role to receive the task item, says I want to exclude the role name: "mydemorole", I just enter this "!mydemorole" in the "Use Role" parameter of the UWL configuration.
If NOT, what is the right way I should use to achieve this purpose?
Thanks for advise,
KC

Michael, you can do this in the UWL but only with a 6.40 backend (ex. ECC 5) with a specific patch level (can not remember that patch level).
Before this you need to set these substituion in the R/3 inbox.
This being said it is only for workflow task routing. If I read your message correctly you want a manager to assign his authorizations (roles in R/3 or the portal) to a secretary. This is not supported in any standard SAP (or portal) scenario as far as I am aware.
Cheers,
D.

Display interactive report rows based on user role.

Hello,
Can anyone please help me out with this issue. i have an interactive report and now i want to make this report as conditional based on user role. Like i want to dispaly all the report rows for an Admin user role and for a developer I want the report to display only his/her rows. Can anyone please help me how can I resolve this issue.
Do I need to have two separate reports for each role or can we make achieve this with only one report.
thanks,
Orton

Here is a possible answer.. Build your Interactive report off of a collection. And when you build the collection you can build an if statement to either build your select with or without the filtering of user_id..
See this blog entry for how to build a interactive report from a collection: http://www.oracleapplicationexpress.com/tutorials/71-oracle-apex-interactive-report-based-on-plsql-function
Thank you,
Tony Miller
Webster, TX

User Roles Problem

Hello VMM Geeks,
I am using SCVMM 2012 R2 with Update Rollup 4. I have configured User Roles for each service groups (like Exchange-Admins, SCCM-Admins, SCOM-Admins, etc.), assigned the Self-Service user rights for each User Role, and added the respective service accounts
for each user Role in the Members tab.
I have not added the User IDs, but the service accounts for each user role.
I installed the VMM Console on the desktops of users. Now, the users are logging-in on the console through ‘Use current Microsoft Windows session identity’, it opens a small window of Select User Role (Select the user role you would like to use for this
session), which shows the drop-down options for all the configured user roles. When any user chooses the Administrator (VMM default) user role, users are getting connected to VMM with all administrative privileges.
This is a crucial security threat as any user is able to easily login to VMM with all administrative privileges.
Following are the members of Administrator user role:
NT AUTHORITY\SYSTEM
CONTOSO\DomainAdmins
CONTOSO\SCVMM_Admin
CONTOSO\VMM_Node1$
CONTOSO\VMM_Node2$
CONTOSO\VMM_ServiceCluster$
CONTOSO\VMM_CNO$
When the users login using their designated service accounts, it works fine and VMM shows only their assigned VMs. But the thing is that I cannot restrict the users from logging on the VMM console with Administrator user role.
Please help and advise me ASAP.
Regards,
Hasan Bin Hasib

Thanks Madam. I will install the UR 5 today.
I have a confusion and would be thankful if you please help me.
After completing the installation of VMM 2012 R2, I directly installed the UR 4 (skipping the UR 1, UR 2, and UR 3). I though that all the features/fixes of UR1, UR2 and UR3 will also be incorporated in UR4. So I want to ask that do I need to install all
the previous Update Rollups (UR1, UR2, and UR3)?
Please advise.
Thank you.
Regards,
Hasan Bin Hasib

How to find T.Code in user Role

Dear Experts,
How to check transaction code maintained for user Role.
For Example I have one User X who have Authorization of T. Code J1ID
is it possible to find out T. Code J1ID is maintained in which role, User have No of Roles in his ID I dont want to search it by open each and every Role. is there any short way to search T. Code.
Thanks,
JA

Hi Javeed,
There are many ways to do it.
Go to SUIM>> Roles> Complex Selection Criteria>
Enter the User ID: USERX
In the Objects enter: S_TCODE (Press Enter)
Enter the Tcode as the field value of this object.
Then click on execute, you will get the list of roles assigned to this userX having above mentioned Tcode. Let me know if you need any more information on this.

Search for user role but help poppup display

Anyone ever trying to search for user role from search action bar or user admin page?
Whenever select role and clicked on the magnifying glass icon, help content displays instead of role selection.
At first I think this is a bug. But when I asked Customer Care they said its an expected behaviour which means that this is how the engineers designed it.
Dont you feel weird? because other field like status, correctly displays status info after clicking the icon.
Hope u can try it this out and give your opinion here.

Can you provide a little more detail on what you were trying to do.

Error while scheduling Background Job for User/Role Full Synchronization

Hi all,
We have installed RAR 5.3 Component and uploaded the authorization data & established the connectors to the backend system.
We have performed all the post installation activities and everything is complete.
When we have scheduled User -Full Synchronization with the Back End system as a part of Post Installation Activity we are receiving the below error message
"Error while executing the Job:Cannot assign an empty string to host variable 2."
Also the VIEW LOG/ Terminate Job buttons are disabled in this screen.
Can somebody please help us in resolving the above issue
Thanks and Best Regards,
Srihari.K

Hi,
We are copy pasting the error log (Part as it is huge) below here. We could able to do Full Synch for Roles and also for Profiles. Only for User Synch we are getting this error and none of the users are sychronized to RAR
Jan 13, 2009 12:34:27 AM com.virsa.cscext.dao.CSCDAO populateGenObjUser
INFO: Update user WILSONA of HL2-QAHR
Jan 13, 2009 12:34:27 AM com.virsa.cscext.dao.CSCDAO populateGenObjUser
INFO: Update user WINDC of HL2-QAHR
Jan 13, 2009 12:34:27 AM com.virsa.cscext.dao.CSCDAO populateGenObjUser
INFO: Update user WLADICHJ of HL2-QAHR
Jan 13, 2009 12:34:27 AM com.virsa.cscext.dao.CSCDAO populateGenObjUser
INFO: Update user WUK of HL2-QAHR
Jan 13, 2009 12:34:27 AM com.virsa.cscext.dao.CSCDAO populateGenObjUser
INFO: Update user ZENGS of HL2-QAHR
Jan 13, 2009 12:34:27 AM com.virsa.cscext.dao.CSCDAO populateGenObjUser
INFO: Update user ZHENGL of HL2-QAHR
Jan 13, 2009 12:34:27 AM com.virsa.cscext.dao.CSCDAO populateGenObjUser
INFO: All System Flag:false=====Last Batch Flag:true
Jan 13, 2009 12:34:27 AM com.virsa.cc.xsys.bg.BatchRiskAnalysis loadUserData
INFO: @@@ User sync completed for params true: Syskey List is [HL2-QAHR]
Jan 13, 2009 12:34:27 AM com.virsa.cc.xsys.bg.BgJob run
WARNING: *** Job Exception: Cannot assign an empty string to host variable 2.
com.sap.sql.log.OpenSQLException: Cannot assign an empty string to host variable 2.
     at com.sap.sql.log.Syslog.createAndLogOpenSQLException(Syslog.java:85)
     at com.sap.sql.log.Syslog.createAndLogOpenSQLException(Syslog.java:124)
     at com.sap.sql.types.VarcharResultColumn.setString(VarcharResultColumn.java:57)
     at com.sap.sql.jdbc.common.CommonPreparedStatement.setString(CommonPreparedStatement.java:511)
     at com.sap.engine.services.dbpool.wrappers.PreparedStatementWrapper.setString(PreparedStatementWrapper.java:355)
     at com.virsa.cscext.dao.CSCDAO.updateIgnoredUserData(CSCDAO.java:1388)
     at com.virsa.cscext.dao.CSCDAO.populateGenObjUser(CSCDAO.java:1169)
     at com.virsa.cc.xsys.bg.BatchRiskAnalysis.populateGenObj(BatchRiskAnalysis.java:868)
     at com.virsa.cc.xsys.bg.BatchRiskAnalysis.insertBAPIUserData(BatchRiskAnalysis.java:142)
     at com.virsa.cc.xsys.bg.BatchRiskAnalysis.loadUserData(BatchRiskAnalysis.java:390)
     at com.virsa.cc.xsys.bg.BatchRiskAnalysis.performBatchSyncAndAnalysis(BatchRiskAnalysis.java:1275)
     at com.virsa.cc.xsys.bg.BgJob.runJob(BgJob.java:402)
     at com.virsa.cc.xsys.bg.BgJob.run(BgJob.java:264)
     at com.virsa.cc.xsys.riskanalysis.AnalysisDaemonBgJob.scheduleJob(AnalysisDaemonBgJob.java:240)
     at com.virsa.cc.xsys.riskanalysis.AnalysisDaemonBgJob.start(AnalysisDaemonBgJob.java:80)
     at com.virsa.cc.comp.BgJobInvokerView.wdDoModifyView(BgJobInvokerView.java:436)
     at com.virsa.cc.comp.wdp.InternalBgJobInvokerView.wdDoModifyView(InternalBgJobInvokerView.java:1225)
     at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.doModifyView(DelegatingView.java:78)
     at com.sap.tc.webdynpro.progmodel.view.View.modifyView(View.java:337)
     at com.sap.tc.webdynpro.clientserver.cal.ClientComponent.doModifyView(ClientComponent.java:481)
     at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doModifyView(WindowPhaseModel.java:551)
     at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:148)
     at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:335)
     at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:143)
     at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:319)
     at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:713)
     at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:666)
     at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:250)
     at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)
     at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
     at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doGet(DispatcherServlet.java:46)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
Jan 13, 2009 12:34:27 AM com.virsa.cc.xsys.bg.BgJob setStatus
INFO: Job ID: 13 Status: Error
Jan 13, 2009 12:34:27 AM com.virsa.cc.xsys.bg.BgJob updateJobHistory
FINEST: --- @@@@@@@@@@@ Updating the Job History -
2@@Msg is Error while executing the Job:Cannot assign an empty string to host variable 2.
Jan 13, 2009 12:34:27 AM com.virsa.cc.xsys.bg.dao.BgJobHistoryDAO insert
INFO: -
Background Job History: job id=13, status=2, message=Error while executing the Job:Cannot assign an empty string to host variable 2.
Jan 13, 2009 12:34:27 AM com.virsa.cc.xsys.riskanalysis.AnalysisDaemonBgJob scheduleJob
INFO: -
Complted Job =>13----
Please let us know how to resolve this error
Thanks and Best Regards,
Srihari.K

Request Offerings not showing up for custom User role in SMPortal

Hello All,
I've created a custom End User role and scoped it to the domain users group.
To this role I want to show a specific set of Request Offerings on the portal
For that Purpose I created a new Service Offering and added these Request Offerings to it.
I then went on to create a Catalog Group and added the Service Offering to it.
I then created the custom user role based on the EndUser role and allowed them to see all Forms, all Queues, All CI's and on the Catalog group I select that they could only see the Catalog Group which I just created.
I then logged in into the SMPortal and was expecting that my Service Offering would be shown to them.
However, they don't see the service offering.
What could cause this?
Is there something I'm missing?
Thanks in advance!
Filip

You have to add the Service Offerings and the Request Offerings in the Catalog Group. Nesting doesn't work because Service Offerings and Request Offerings are different types of objects.
This offers the option the manage the access to Service Offerings and Request Offerings very granular if needed. For instance you can control access to a Service Offering in one Catalog Group related to one user role (A) and use two additional Catalog Groups
with different Request Offerings related to other user roles (B) and (C). Result will lead to:
User in Role A and B -> Can see Service Offerings A containing Request Offerings B
User in Role A and C -> Can see Service Offerings A containing Request Offerings C
User in Role A, B and C -> Can see Service Offerings A containing Request Offerings B and C
User in Role A only -> Don's see anything because of the missing permission on any Request Offering. So the "empty" Service Request won't show up in the portal.
Hope his helps.
Andreas Baumgarten | H&D International Group

Customize portal "Help" link based on user roles

Is there a chance to customize the Help link URL in Masthead iView based on user roles? The use case we have is that the "Help" should be different for users of the purchasing company from those of the supplying company.
Thanks.

Hello Jay.
This is a multi step process.
Step 1 : Create 2 desktops with everything as same but different mastheads.
- Copy your existing desktop and paste it in your working folder in PCD (Not select Delta link)
- Now download masthead par file.
- Modify your masthead par file where you will disable help link. Rename you masthead file (newMasthead.par) and export it from NWDS. Now import it in portal.
- open your framework page in desktop2. Just add your new masthead in it. Enable the new one and disable the existing one.
Step 2 : Create 2 groups of users. (First one belong to users who wish to see help link . i.e existing desktop) (Second of thoese users who do not have to see help link i.e. newDesktop)
- Assign users to appropriate groups.
- Assign same roles to both groups.
Step 3 : Modify main rule section in PCD.
- If group = HelpLinkUsers Then Desktop1
If group = NoHelpLinkUsers Then Desktop2.
You may find above process bit tedious and lengthy.
But if you wish to further customize your portal then this will be needed one day.
If you find problems in implementing any step then please search in google or SDN.
Please revert back on any specific question on above approach you may face while implementing.
Thanks

Assigning the End User Role for E learning management in Solution Manager

Hello Team,
In the E Learning Management in Solution Manager, I have to a assign the End User Role for each Bussiness Process. While assigning the role, I couldn't able to assign the role of type " JOB ". What have I do to get the type as JOB instead of "Organizational Unit" and "User"?
Regards,
Shyjith.K

Hi,
Have you maintained your Organizational data? Did you assign any job to any user in the organizational hierarchy. You need to maintain you PPOMA_CRM first in order to assign any roles there.
Hope this helps
Rajeev

Script for Users, Roles,Grant,Tablespace

Hi,
Please guide me on the following .
I am moving database to new Unix server .
so can I create the script which will check the existing Users, Roles, Grants, Tablespaces from current database and store that data.
And using same soared data I want to create the same " Users, Roles, Grants, Tablespaces" using the script.
Can i do this. Please guide me how to do this so I will help me to move database
Thanks,
Amol

You should run ?\rdbms\admin\utlrp (note the ?, which is shorthand for ORACLE_HOME) from the database server. to make sure you have the correct script. You can call sqlplus from Toad easily.
The script affects PL/SQL only. PL/SQL resides in the SYSTEM tablespace in the SYS schema. You don't have 400G of PL/SQL. It should take a few minutes only.
The SYSTEM schema WILL be imported. SYS will not be imported, but automagically recreated. The only thing you will miss is Grants which have been made by SYS directly to end-users or roles, outside those defined in catalog.sql
Sybrand Bakker
Senior Oracle DBA

User roles!despersate for help!!!

Similar Messages

Maybe you are looking for