Transferring Role Data in SAP Enterprise Portal

Use

SAP Enterprise Portal offers you a function for distributing the portal roles defined in the enterprise portal to connected SAP systems. Usually, you transfer the roles to a particular SAP system, which is responsible for creating and maintaining the authorization roles within the SAP system landscape. For more information, see System Landscape.

Procedure

...

1. In SAP Enterprise Portal choose System Administration ® Permissions ® SAP Authorizations.

2. To distribute the portal roles in the SAP system choose tab Transfer Portal Roles.

3. On the Transfer Portal Roles tab, choose the system to which you want to distribute the roles from the dropdown list. The alias names are displayed in the dropdown list. Select the alias names you maintained for the system in which the roles are distributed. Read also Creating Systems for Role Distribution.

The following graphic shows the search mechanism based on it:

This graphic is explained in the accompanying text

The portal first uses an RFC module to access table WP3ROLESYS, where the system responsibilities for role maintenance are entered (see step 1 in the graphic). The logical system names are returned to the portal and displayed in a list (see step 2). The portal finds the corresponding portal systems using the logical system names (see step 3). The corresponding aliases are found from the portal systems (see step 4). If no portal system is found for a logical system or no alias is maintained for a portal system, there is a waring and a corresponding status message.

4. Decide which roles you want to distribute. You have the following options:

¡ Option one: Select from transferred roles

¡ Option two: Transfer all transferred roles again

¡ Option three: Select from complete set of portal roles

¡ Option four: Transfer all portal roles

If you choose options one or three, a screen appears, on which you can select the roles that you want to transfer. Select the entries and choose Next. A screen appears, on which you can check your transfer settings.

If you choose options two or four, you go directly to the screen on which you can check your transfer settings.


If you select Include SAP Authorization Trace IDs, the system automatically generates trace IDs in the SAP system for the iViews contained in the portal role. For more information about trace IDs, see Roles and User Distribution to the SAP System.

5. Check all your settings for the role transfer. A name is proposed for the report that performs the distribution. You can overwrite this proposal.

6. Choose Finish. This starts the distribution of the roles.

In this process, the portal checks which of the iViews contained in the roles contain the alias names identified in step 3. All the iViews containing the relevant alias names are selected. The transaction names entered in the iViews are transferred to the SAP system together with the portal role names.


An iView that refers to a transaction in a SAP system always contains an alias name as property.

7. A new screen displays the log messages for the role transfer report. With Stop Transfer you can interrupt the transfer at this location.

With the Display Transfer Reports tab you can display the log files for each executed transfer report again.

¡ Decide if you want to display the log files for the role transfer or for user assignments.

¡ In the list, select a transfer report and choose Display Report.

Distribution Process with Predefined Settings

You can also save your settings under a given name. To do so, choose tab Predefined Transfer Settings and enter a name for your settings. The advantage of this is that you can reuse the settings instead of having to enter all the information again for the next transfer run.

If you use predefined settings, steps 2-6 are omitted. In this case you only perform step 1, go to tab Predefined Transfer Settings and start the transfer from there by selecting the name of the predefined setting and starting the transfer. You can then view the log files, as described in step seven.

End of Content Area

No comments:

topics