User roles in Integration Repository

[Former Member]

Hi everybody,

does anybody have experience with user roles in XI 3.0? We want to limit access to various namespaces in the Integration Repository with use of these roles that can be created in the IR. That way, various XI developers working on the same XI-Repository should not be able to work in the namespaces of other developers.

We created the role in the IR and assigned it to a user in the J2EE Engine. But so far, it doesn't seem to work.

Am I missing something??

Thanks a lot,

Francis Wolf

[Former Member]

Hello,

The following blog shows you how to do so :

http://www.sdn.sap.com/irj/scn/weblogs;jsessionid=(J2EE3414800)ID0052971350DB10063309765264264690End...

Best Regards,

Raju

[Former Member]

Hi Fransis

Check this link

/people/michal.krawczyk2/blog/2005/05/25/xi-how-to-add-authorizations-to-repository-objects

Regards

Ramesh

[Former Member]

Hi,

it looks like the integration to the "abap" backend (=IS-Server) is missing.

J2EE-R3 integration regards user management maps R3 roles onto J2EE user groups. Thus, if the term "role" is used in R3 context, it has to be translated to "user group" in J2EE.

Next steps:

1. Create user in "R3", with transaction SU01.

2. In "R3", create a role with transaction PFCG

3. UME Admin WebApp: assign role to user group

4. XI Exchange Profile WebApp: activate data-dependent authorization checks. Put: com.sap.aii.util.server.auth.activation" in section "IntegrationBuilder.Repository" to true

Please check the documentation on Netweaver security and Integration of UME Roles with SAP Roles

Hope that gives an idea!

Good luck

Holger

[Former Member]

Hello,

This provides the user with the assigned role to have the authorization of that role. For example, if the role has edit authorizations, the user with that role can edit objects but restriction at a namespace level can't be set this way

Regards,

Raju