Assignment of Users to Roles

Integration

Portal users must have roles in R/3 to be able to view or work with R/3 content in the portal. For the content administrator to view or manipulate business objects based on R/3 transactions, or for any user to see iViews based on R/3 transactions, they must have roles defined in the back-end system.

With an R/3 system role, the user can use the Drag&Relate navigation mechanism to click on a field in the content area and execute it with parameters simply by dragging it onto any drag-enabled iView in the navigation panel of the portal.

Activities

To assign roles in the SAP R/3 system, there are three possibilities here:

· The user roles in the portal are migrated to the SAP R/3 system. For more information, see Role and User Distribution to the SAP System.

· The user roles are created or maintained directly in the SAP R/3 system.

· The user roles in R/3 are migrated to the portal. For more information, see Unification with SAP R/3 and BW.

Creating and Maintaining User Roles in the SAP R/3 System

To create a new role:

...

1. Choose transaction PFCG.

2. Enter a name and description for the new role and choose Create.

3. Choose the Menu tab and then Transaction.

4. Enter the transaction codes and choose Assign transactions.

5. Choose the Authorizations tab and then Change authorization data.

6. Maintain the authorizations needed for the role.

7. Choose the User tab and assign a user to the role.

8. Choose User compare and then Complete compare.

The role assigned to the portal user must contain at least the following authorizations in order to have access to the SAP R/3 system from the portal and in order to be able to execute Drag&Relate operations:

Authorization object S_RFC with the following field values:
ACTVT: 16
RFC_TYPE: FUGR
RFC_NAME: RFC1, RSAN, SDIF, SDIFRUNTIME, SDWZ, SKBW, SPR4, SPRT, SRFC, SSCV, SURL, SUSO, SUSW, SU_USER, SWOR, SYST, SYSU

Authorization object S_TCODE with the following field value:
TCD: SPO1

For detailed information about the individual steps, see the SAP NetWeaver documentation underSecurity ® Identity Management ® Users and Roles (BC-SEC-USR).