User roles for XI production

Hi All,
W ehave the production environment ready for go live..
Can any one pls let me know what roles I should be giving for monitoring (sxmb_moni, rwb etc)
There will be only one super user so pisuper has been assigned... for the rest its just monitoring...
can ne one pls le tme know

hi,
These roles should be sufficient for monitoring:
SAP_XI_DISPLAY_USER_ABAP
SAP_XI_DISPLAY_USER_J2EE
SAP_XI_SUPPORT_ABAP
SAP_XI_SUPPORT_J2EE
SAP_XI_BPE_MONITOR_ABAP
SAP_XI_MONITOR_ABAP
SAP_XI_MONITOR_J2EE
Thanks,
Mayank

Similar Messages

Roles for each Product in Oracle Apps 11i

Hi,
I have one requirement to create role for each product...
For example:
Inventory (INV)... I need to create a role, which will have select privileges on all tables of Inventory...like that for each production, I need to create...
I have one procedure:
(a) create role inv_read_role;
(b) spool the following statement
sql> spool inv_read.lst
sql> select 'grant select on INV.'||object_name||' '||'to INV_READ_ROLE;' from dba_objects where owner='INV' and object_type='TABLE';
sql> spool off
(c) Run the above spool file
Here we are done...
But, If I want to do this for all products in oracle apps 11.5.10.2..
is there any smarter way to do this????? any stored procedure???

I want to give readonly access to AP Tables to one database user or more no of database users.....how can we give...for that , we are going to create seperate role for each module in database..assign that role to database user...then he will be able to select only on that module tables......

Assigning the End User Role for E learning management in Solution Manager

Hello Team,
In the E Learning Management in Solution Manager, I have to a assign the End User Role for each Bussiness Process. While assigning the role, I couldn't able to assign the role of type " JOB ". What have I do to get the type as JOB instead of "Organizational Unit" and "User"?
Regards,
Shyjith.K

Hi,
Have you maintained your Organizational data? Did you assign any job to any user in the organizational hierarchy. You need to maintain you PPOMA_CRM first in order to assign any roles there.
Hope this helps
Rajeev

How to create Users/Roles for ldap in weblogic without using admin console

Is it possible to create Users/Roles for ldap in weblogic without using admin console? if possible what are the files i need to modify in DefaultDomain?
or is there any ant script for creating USers/Roles?
Regards,
Raghu.
Edited by: user9942600 on Jul 2, 2009 1:00 AM
Edited by: user9942600 on Jul 2, 2009 1:58 AM

Hi..
You can use wlst or jmx to perform all security config etc.. same as if it were perfomred from the admin console..
.e.g. wlst create user
..after connecting to admin server
serverConfig()
cd("/SecurityConfiguration/your_domain_name/Realms/myrealm/AuthenticationProviders/DefaultAuthenticator")
cmo.createUser("userName","Password","UserDesc")
..for adding/configuring a role
cd("/SecurityConfiguration/your_domain_name/Realms/myrealm/RoleMappers/XACMLRoleMapper")
cmo.createRole('','roleName', 'userName')
...see the mbean docs for all the different attributes, operations etc..
..Mark.

User role for service requests from the SSP

Does the End User role have enough permissions for users to create service requests from the SSP? I know for incidents it is but I am not sure about service requests. If you go through the Service Catalog Checklist, step 5 to create the User
Role brings up a new role based on the Author role and not on the end user.

here step by step procedure with user access.
http://www.concurrency.com/blog/scsmportalpermisions/
Cheers
Antoine AL Ibry

Internet user role for BP category type "Organisation"

Dear All,
We have some BPs which is created under the BP category of "Organization" with role sold-to-party. Now the client wants to extend this BPs to Internet user role. Where as in Standard internet user role will be assigned to only person category.
Please advise me on the same.
Regards
Ashwini

Hi Ashwini,
you need to modify the logon routine and then in the user management (isauseradmin application) to do this. Then there are likely changes to the catalog identification, and very likely to most processes in the shop. I really wouldn't advise doing so. As accounts usually have contact persons: Why does your client insist in providing a login for the organization and not for a person?
To achieve something that looks almost like the desired solution you, e.g., could model a dummy contact person for each account that shall get a logon, that then does the job. The contact person could be named like the company and then you are back to plain standard.
Rgds
Thomas

User Roles for changing tables?

Which user roles are there in the environment for changing tables?
Any help is appreciated.
Regards,
Neetu

Search for roles which have SE11 in their menu as a tcode and take you best pick or create your own.
The advice from the other is also good in my opinion (he who changes table fields should also change the program.... )....
Cheers,
Julius

User role for vendor block/unblock

Hi Guys,
We want to give a role to only one user so that he can only block or unblock any vendor.
Is it possible to create a role and assign it to only one user .
He should be able to block/u

Ouch.
Its not a simple process. I will give you the basics, you will need to read some and do some to get a clear hang of it.
The role creation transaction is PFCG.
If you want to create a role, say for FK05.
Enter a name and description of the role, say Z:LOCK_UNLOCK_VENDORS, Desc: role for locking and unlocking vendors.
Click on the create single role button.
Save the role. Go into the Menu tab. Click on the button which says Transaction and a plus sign. In the popup that comes up enter the T-code FK05 and the others that are relevant. Click on Assign transaction.
Now move to the Authorisation tab.and click on the button change Authorisation data, you may need to save the role.
Enter the organisational values, company code in this case, click on save.
Now you will be in the authorisation page, where you decide what activity and area you need to assign.
If you expand the Cross-application Authorization Objects, you will see the t-codes which you entered in the menu here. You can add more t-codes here if you need.
In the next node for financial accounting. Expand the node to see the authorisation objects. from the menu, click on utilities and Technical names on, to see the technical names of the objects.
If you see the activities, the acivity "lock" will get automatically assiged. If you click the pencil in front of the activity, you will see a pop-up where you can select additional activities.
Once you are done, save and generate the authorisation. This will also generate a profile.
In the main PFCG screen, you can assign the user you want to carry out this role. Remember to carry out complete user compare so the role becomes activated in the user master.
You are now done.
If the user gets an authorisation error. He can execute the transaction SU53 and the system will display what authorisation is missing. You can then add this to the role or create a new one.
Cheers...

How to create SR Queue and Custom User Role for technician only see which SR assigned Him/Her and Resolve

Hi
I have created workitem SR advance and Criteria with ID [Assigned To ME] and created user role in Advance operators.
But in technician Console showing which SR he/she created not service desk assigned to him/her.
Please suggest...
Regards
Sheetla Maurya

I have find out Solution .......Create Queue with Service Request Advance and we not need to create any criteria option, After that create custom User role on Advance
operators with View "Assigned To ME"
Regards
Sheetla Maurya

Restrict some user roles for tocde VA02

Hi All,
Please can any one help on this?
i have to restrict some user roles while rejecting the item in va02 tcode. how to do this.
Thanks,
Ramu

Hi,
There are two ways to do this:
- Make a transaction variant through SHD0 and assign it to your sales doc. While creating the variant you can place non-changeability ticks on specific fields. Next allow those users only to work with your transaction variant but not with the original transaction.
- You could make use of user-exit FORM USEREXIT_FIELD_MODIFICATION in include MV45AFZZ (via authorization objects, which you can assign in role customizing).
Check this link:
http://www.sap-img.com/sap-sd/short-sap-sd-questions-3.htm
Regards
Adil

End User Role for Service Desk in Solution Manager

Hey,
I am launching the Service Desk functionality for my End Users. One thing that i want to know of is the role that I should assign my user in Solution Manager to access his message. E.g.
I have a user 'A' who creates a message from any system in my landscape:Test, QA, Dev or Production. Now this message reaches in Solution Manager and is assigned to a certain Support Team according to the rules I defined. Now the personnel of Support Team needs some feedback from the end user who created the message. For that the user 'A' has to log into Solution Manager, access his message and enter the details which the Support Team requested.
I want to know that what Role should i give to this user 'A' so that he is able to access ONLY the messages that he created i.e. "Reported by" field showing user 'A'; and is able to view and edit them.
If I give him the role SAP_SUPPDESK_CREATE and SAP_SUPPDESK_DISPLAY, he is just able to see the messages, all of them, but is not authorized to edit any. Please help me out in this matter as i need a solution asap.
Regards,
Bilal Nazir

Hi Nazir,
Create a role and add this t-code manually.
CRM_DNO_MONITOR - Transaction Monitor
This is will definitely solve your problem.
Feel free to revert back.
Thanks and Regards,
Ragu
ERP,
Suzlon Energy Limted, Pune
Extn: 2638
+919370675797
I have no limits for others sky is only a reason

User role for user authentication in a SOAP receiver channel

Hi,
What is the role required for a user in a SOAP receiver channel. This user is specified in the User Authentication while configuring the channel.

Hi,
User Authentication is not mandatory but If your Web service requires logon data, select the Configure User Authentication checkbox and fill in the corresponding fields.
If the Web service is outside your system landscape and you need to address a proxy
server, select the Configure Proxy checkbox.
The sender SOAP adapter does not require a SOAP action, but you always have
to apply logon data when using the SOAP adapter. In the central adapter engine
you can use a service user such as xiappluser; in a non-central adapter
engine or a PCK you must use one of the user names assigned to security role
xi_adapter_soap_message for component XISOAPAdapter.
Regards,
Divya

Which user role for external system?

Hi everybody,
In my scenario there is an external system which posts XML data to a HTTP adapter in XI. Of course, the external system has to be authenticated with a username/password. I want to create an appropriate user account in our XI system (user type SYSTEM) and assign the minimal user rights to this account.
Is there a predefined role I can use?
Regards, Joerg

Hi,
there is one predefined role:
SAP_XI_APPL_SERV_USER
read more about predefined roles:
http://help.sap.com/saphelp_nw04s/helpdata/en/56/361041ebf0f06fe10000000a1550b0/content.htm
Regards,
michal
<a href="/people/michal.krawczyk2/blog/2005/06/28/xipi-faq-frequently-asked-questions"><b>XI / PI FAQ - Frequently Asked Questions</b></a>

User status for production order

From which table i can get the USER STATUS for a production order?

Hi
Use the TableS:
JEST - Pass OBJNR of the Production ORDER (AUFK, AFKO tables)
or from
TJ02
TJ02T
reard if useful
regards,
Anji

Which objects to add for user role

Hello guys.
Have SCOM 2012 R2
Need to create user role for CRM admins, so they can view and edit alerts for their servers.
I choose Advanced Operators, but i'm stucked at creating group scope.
Let's say i want this user role to create rules\override for all objects, which contains in my CRM server. What object type will i choose? Windows Computer? Or i need to add specifically all objects, connected to this server (but they are hundreds).

This is where you would want to use a group. Create a group called CRM Servers. Add the servers to this group using the computer object. Then you would scope to that Group, so they could only see those servers that are in that group. Because you selected
the Computer Object, you will see all classes that fall under the computer object that are associated with those servers.
See the best paper ever on this topic (written by Cameron Fuller MVP) at veeams web site. http://www.veeam.com/wp-manage-scom-using-groups.html
Consider learning how to create a dynamic populated group so you will not have to be constantly change group membership by hand.
hope this helps!
Scott Moss
Scott Moss MVP (Operations Manager) President - System Center Virtual Users Group |Vice President - Atlanta Southeast Management Users Group (ATL SMUG)
Please remember to click “Mark as Answer” on the post that helps you!
my new blog om2012.wordpress.com

User roles for XI production

Similar Messages

Maybe you are looking for