Using named Search has constrainst on user roles

Is there a standard way to use named search as a constraint for a user role. There are constraints related to flat files and masks but I can't find any on Named search file. Anyone have an ide how to solve this?
Regards
John-Kjell

Hey John,
Why dont u save a named search in Data Manager with whatever field ie. on prices field.
And then u configure the User having that role in the Config UI ie. make all the configurations for that user like whichever fields u want to show to that user and than while passing the url for search ui in that u specify the user and the named search in the url itself.
For eg:
http://localhost:50100/SRM-MDM/SRM_MDM?sap-locale=EN&HOOK_URL=&mask=&namedSearch=&username=Admin&password=admin&catalog=SRM_MDM_Catalog_2.0&server=localhost&datalanguage=EN
In &namedsearch=<Specify the Named Search u saved>
and in &username=<Specify the user for which it is configured>
Try dis out
Regards Tejas................

Similar Messages

Restriction of inactive items using named search

Hi experts,
I am working in SAP MDM and facing following issues.
In catalog displayed in shopping carts, when i need to remove inactive items (items with inactive value in item status field) from that catalog i simply remove the mask for those items.
However for the catalog displayed in purchase orders those items still displayed because i'm using named searches.
Does anyone know how i can remove inactive items from this catalog using named searches?
Thanks

To create a named search in MDM follow below mentioned steps:
1. login to data manager and open Named searches table.
2. add a new record in this table and specify name for the named search.
3. Once you save the named search, go back to Catalog Items table. Now from the Search Parameters pane or Free form search specify filter criteria as Status = Active.
4. You can see result in the status bar of the data manager. It will display some thing like "XX records out of YY records displayed". This means filter criteria is set successfully.
5. Now go to "Search" menu in the menu bar and click on "Save as Named Search". This will display all named searches in the side pane.. Select your named search which you just created. this will save your filter criteria (status= active) in your named search.
6. now you are good to define this name search in SRM Web service.
Revert if any further questions.
Best Regards,
Shiv
2

User-Specific Configuration for different named search role

We need different user specific layout settings for each user. i have duplicated catalog user role for each user and maintained specific named search for that particular user in constraint. but when we want to configure specific layout for individual user. its not showing that catalog user in the catalog config UI for the layout configuration. please advice. if it shows that specific user then we would configure each specific user layout with individual look and feel ( like shopping lists, search fields, images, etc., ). thanks for your inputs.

Answered

Assigning a named search to existing users

Hello everyone,
I set up a named search and wanna assign this named search to an existing users. Any idea how can I set this up in MDM? Thanks in advance.
Leo

Leo,
Unfortunately I don't think there is a way to currently do this.
You can set up Local Searches. These do not need to be created first in the Named Searches table, but provide a similar functionality. In the case of Local Searches they must be created in each individual users session and they cannot be transferred to other users. They are specific to the user that creates them.
Thanks,
Tim

User Specific catalog UI configuration - Custom catalog user role

Hi all,
We need different user specific layout settings for each user. i have duplicated catalog user role for each user and maintained specific named search for that particular user in constraint. but when we want to configure specific layout for individual user. its not showing that catalog user in the catalog config UI for the layout configuration. please advice. if it shows that specific user then we would configure each specific user layout with individual look and feel ( like shopping lists, search fields, images, etc., ). thanks for your inputs.
Your help would be highly appreciated!!!!!!!!!!!!!

Hi Smartsoft General user,
I guess you are on SRM-MDM Catalog 3.0
We have the same business scenario as yours. Its working perfectly for us.
1. Donot copy Catalog User role. SRM-MDM UI Config only accepts users assigned under std Catalog User role. You dont need mutiple copies of Catalog user role, anyways it wont work.
2. Create multiple webservices for each Named search. Provide one User (like User1, User2...or your own created ones) and one Named Search as following parameters in each webservice.
          http://<your server:port>/SRM-MDM/SRM_MDM
username     User<n>
password     <password>
server     <your server>
repositoryType     M ( for Master ) S (for Slave) - Make sure you are pointing to right repo if you have master/slave
catalog     <provide Repository name- make sure you are giving right repository name, I provided it wrong first time>
port     <your port>
uilanguage     SY-LANGU
datalanguage     SY-LANGU
mask     < keep blank if you want dynamic search>
namedsearch     <Provide exact Named search name as you provided in Data Manager>
HOOK_URL
returntarget     _parent
If you are creating 5 different Named searches, create 5 different webservice definitions as above.
3. Now for each Catalog user, you can perform separate search UI layout as you wish.
Let me know if this helps or have any questions. If this worked for me, we will make it work for you.
~Pravin

VL10D - Data selection User Role

Hi,
i've used the Tcode VL10D and the "User role" tab is greyed.
How can i select the Data selection (ex. flag "with delivery")?
How can i mantain VL10CUA and VL10CUV?
Thank you.
Antonio

Hello Antonio,
Can you check in transaction VL10CU, on the second record "Purchase Orders", the field "Allow Assignment" must be checked in order to have the Role and Scenario editable.
Regarding the Scenario field, please see below which you may find useful:
    You can edit a user-specific delivery scenario with a user-specific
    list profile by choosing Outbound Delivery -> Create -> Collective
    Processing of Documents due for Delivery -> User-Specific Delivery
    Scenario. You can define user-specific values in user parameters
    LE_VL10_SZENARIO and LE_VL10_LISTPROFIL. If no default scenario has
    been specified, the sales order scenario appears. If a default
    scenario has been specified, but no default list profile was
    specified, the system uses the list profile that is assigned to the
    default scenario. If there is no such assignment, the system uses
    the "Deliver Sales Orders" (0001) list profile.
    Transactions VL10A, VL10B, VL10C, VL10D, VL10E, VL10F, VL10G,
    VL10H and VL10I refer directly to the delivery scenarios that are
    predefined by the system. You can also access these transactions via
    the shipping menu. Assignment of a list profile for these scenarios
    is identical for all users and can be set in Customizing. The list
    profile contains detailed information about processing the delivery
    list.
Maintain the user parameters LE_VL10_UPG_NOMSG, LE_VL10_SZENARIO and
LE_VL10_LISTPROFIL with the options described above (System -> User
profile -> Own data; Parameters).
Kind regards
Martin

ESS- User Roles

Hi Experts
I am using ECC 6.0 and ESS 7, for SAP Gui (R/3) also we are using Portal, means as per the user roles assigned in R/3, user is able to view different services of R/3 in portal with ESS.
For ESS I am using all the three standard roles of ESS i.e.
SAP_ESSUSER
SAP_ESSUSER_ERP05
SAP_ESSUSER_ERP
but when I had assigned all these roles to a user and accessing the ESS I am facing the following error:
com.sap.tc.webdynpro.services.exceptions.WDRuntimeException: ComponentUsage(FPMConfigurationUsage): Active component must exist when getting interface controller. (Hint: Have you forgotten to create it with createComponent()? Should the lifecycle control of the component usage be "createOnDemand"?
Plz help me in this regard
Thanks in advance
Sheetal Gupta

Hi Sheetal,
try to give....only one role..i.e SAP_EMPLOYEE_ERP or SAP_ALL and check it..
it could also may be poss thatt user is locked in backend....
u also need to assign ESSUSER group to user..
regards
Jigar Oza

Can MDM users & roles be managed by IDM

Hello,
Can IDM be used to connect to & manage MDM users & roles using provisioning mechanism or otherwise?
Regards,
Vishal

Hello,
we have implemented an adapter to connect the MDM to the IdM. The adapter handles roles and users of an MDM repository and allows the roles to be provisioned to MDM users and vice versa.
I developed the adapter originally for MDM 5.5 SP5/SP6 and IdM 7.0 last year. As there are not that much differences between IdM 7.0 and 7.1 and the Java API of MDM 5.5 and 7.1 an update to MDM 7.1 and IdM 7.1 is a smaller to mid-sized task for me.
If you want more information feel free to contact me. Just have a look in my user profile.
Sorry for the late answer, but I had some holiday since June started.
Best regards
Dominik Trui
Solution Consultant
IBSolution GmbH

Restrict users from saving own search in existing Named Searches

Hello,
I have created some Named Searches that will be used by the MDM users. These users are only allowed to use these named searches (in their search selections) but they are not allowed to 'overwrite' any of the named searches by their own search criteria.
How can I prevent the user from 'overwriting' the Named Searches?
Because even when I set the user role to "None" for all functions and "Read-Only" for all tables and fields, the user can still make their own search and Save that as Named Search (and thus 'overwriting' the existing Named Search which impacts also the other users that make use of these Named Searches).
We are using MDM 5.5 SP5 (5.5.42.106).
Or is this an autorisation bug in MDM?
Thanks for your answers!
Regards,
Marcel

All,
Just for your information:
We have upgraded to MDM 5.5 SP06 Patch 3 (build 5.5.63.57) and they have introduced new role feature to protect named searched to be overwritten (see also release notes of patch 3 - OSS Note 1234675).
So you can now change the Role (in MDM Console) and under section MDM Data Manager, you can set None or Execute for the function of Saving a Named Search.
If you set it to None, then the menu option in the MDM Data Manager of saving an search as a Named Search (and hence overwriting the named search) is greyed out. Only when you set it to Execute (which is automatically set during upgrade to thi snew version when the role has set it's Default function to Execute), then the user can overwrite the named search with his own search.
So, issue solved!
Regards,
Marcel

¿How to use user-roles in Ironport WSA (7.6) using ACS 4.1?

Hello,
I want to give a client access to a S370 WSA quarantine and I am using an ACS 4.1 for external authentication; that would be used for administrators and for the client access (non-administration access).
I have created a user-role in the WSA that has access to the quarantine I want, but I need the user to be in the ACS. I created the user in ACS but my question is, what should I configure or change in the ACS in order for the WSA to recognize the user with the specific role I created and not like an administrator role.
Thanks for your help!
Sergio

Hi,
This can be done by configuring the Radius Class attribute on the ACS and mapping it with the user roles on the WSA.
"To map RADIUS users to different Web Security appliance user role types, you assign a role type, such
as Administrator and Operator, to a RADIUS CLASS attribute. Mapping different role types lets you
specify the authorization level for each RADIUS user."
Please go to Page 26-12 of the WSA user guide http://www.cisco.com/c/dam/en/us/td/docs/security/wsa/wsa7-5/user_guide/WSA_7-5-0_UserGuide.pdf for more information under the section "Using External Authentication".
Regards,
Kush

Query Result Filtered using User Roles SCSM 2012 R2 RU2

Hi,
I have a Query Result setup in a Request Offering that shows the list of Printers using the Printer CI. We have different sites with printers that start with the site location like MTL. There are no filters in the Query Result. What i did is create a Group
for each site that has the rule "start with" MTL (other groups have other 3 letter prefix). Then i created a user role for each group and only selected the Printer group for the site and i associated the User Role with our AD Site group called MTL-User.
i did this for each site. Now when i checked the Request Offering at first, with a user that is part of MTL-User group, it showed only the list of printers that started with MTL. Now today i came to check again and the same user is seeing all the printers
and not just the ones that start with MTL.
The User Role i made was based on the Read-Only Operator. I just dont know what the problem is

Thanks for that link. I had thought of something like that but i found it came to the same thing as just using the filter field that is already available when using a Query Result. I retried using User Roles and figured out that the problem is that my test
user is only part of the MTL-USER group so when i logged in with him into the portal (cireson Portal btw) i would see the proper result. If i logged in with a actual user that is also part of other groups besides MTL-Users, they see all the printers no matter
which AD group i define in the User Role.
So what i figured was that my group is not getting applied as the filter to the query Result and that the Member section in the User role is only to say who can see the Query result list. But then i have my test user for which this setup works...so im confused
on what exactly is overriding the results.

Using the SDK to check if user security role membership

Is there any way to check if a user is in a particular security role using the SDK?
I ask because I am considering adding a web based ticket search by ID/key word look-up web service since this function is not part of the Self-Service Portal. I am looking into what it takes to maintain the system's security model or at least limit
the information given to the users. I am thinking that affected users might get some ability to modify their tickets.
I've already built a web portal hosting complex forms for several of our teams where the Self-Service Portal was too limited to collect necessary information. The forms portal already uses the SDK to submit work items directly into Service Manager.
This would be a welcome extension of the web site's capabilities.

Hi,
You may try powershell, here are two PowerShell scripts that use
SMLets to reveal interesting information about user roles in SCSM, please refer to it:
https://gallery.technet.microsoft.com/Service-Manager-SCSM-User-ebcdfcd6
Regards,
Yan Li
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Unable to authorize user using AccessControlService and user.roles and user.privileges are not set properly

Hi,
I am trying to enable/disable a feature based on user.roles.
Added a constraint for that feature as below,
    <adfmf:constraints>
      <adfmf:constraint property="user.roles" operator="contains" value="manager" id="c1"/>
    </adfmf:constraints>
In this case, Users have manager role should be able to access this feature.
My AccessControlService response is
{"userId" : "sales_mgr","roles" : [ "manager","MOO_OPPORTUNITY_SALES_MANAGER_DUTY","ZBS_ENT_SALES_MANAGER_DUTY"],"privileges" : [ "managerPriv","ZSF_DEFINE_SALES_FORECAST_PRIV","MOO_MANAGE_OPPORTUNITY_GROUP_SPACE_PRIV"]}
Repsonse has "manager" as one such role.
After adding constraint to the feature, am unable to access it.
I tried many possibilities like operator="contains" or "not" or "equal", but no use.
I don't know what is going wrong. Appreciate you help.
Thanks.

If you are on 11.5.10 or greater or standalone 2.6.4 if you pass the responder value to wf_notification.respond API it should be updated in wf_notifications.responder column. The comments is now updated in wf_comments table against the notification id and not wf_notifications.user_comment column.
Thanks, Vijay

Which user role I need to use for import WSM policies?

Hi.
I'm looking for a user role that has the grant for to import new policies in wsm via EM (soaadmin em).
There is a preconfigured user that can do that?
If no, how can I create one new give him the right permission?
Is it possible?
Obviously using the admin one I can made this operation but ADMIN has too many privileges.
Thank you
diego

Hi Colins,
Thanks for your suggestion to create a sample on the APEX. I will do that and will post the problem in the FORUM.
Normally I add my name at the end of each conversation in the forum. I forgot to add one in this thread.
Cheers,
Krishna.

How do i get a list of all Roles defubed under a particular OrganizationalUnit? How can i use LDAPConnection.search method for this?

Sorry for the typographical mistake.
Please read the question as:"How do i get a list of all Roles defined under a particular OrganizationalUnit? How can i use LDAPConnection.search method for this?"

Using named Search has constrainst on user roles

Similar Messages

Maybe you are looking for