Where to see roles assigned to my userid

[former_member201275]

Apologies for basic question but i am new to PI and i have tried googling this but have not found exactly the answer.

How do i see the roles assigned to my userid in SAP PI 7.1

Do i go to here and click on 'administration':

then on the next screen click on 'user management engine assessment'?

[former_member184720 · Accepted solution]

7.1 is dual stack installation

Please check in SU01 transaction on the ABAP stack

You should also find @ http:// host : port /useradmin page

[former_member201275 · Accepted solution]

Where do i find this 'port/useradmin' page?

I don't have change access to SU01 and infact see this:

[former_member184720 · Accepted solution]

in the browser just type ( replace hostname and port with your system details)

http://<<PI hostname>> : <<PI Java port>>/ useradmin

>>>I don't have change access to SU01 and infact see this:

You should work with security person to assign desired roles

[former_member201275 · Accepted solution]

Sorry... another question.

I often see reference to what you said i.e. 'http:// host : port /useradmin'

but the only url links i can find where i am look as follows 'https://sapd01ssl.int.blablablacompany.uk/dir/start....'

[former_member184720 · Accepted solution]

then just add /useradmin after .uk in your URL.

replace /dir/start/index.jsp with /useradmin

i believe user management was added on Java stack from 7.1 itself. If so above URL should work.

Just to add - If you don't have authorization to edit the user through "SU01", it would be the same from java stack too.

[Former Member · Accepted solution]

Hi,

Where do i find this 'port/useradmin' page?

http://<PIsystemhostname>:5<Sysno>00/useradmin

or

go to nwa-->configuration-->security-->Identity management -->give your user ID and check for the roles.

NOTE:Usually you can only see the above page provide if you have Administrator role in UME data base.

>> don't have change access to SU01  .

Hope you have clicked on edit icon over there .Depends on what level of authorization your security team provided to you .

Regards

Venkat

[Former Member · Accepted solution]

Hi ,

Just want to correct the above.

Though we have authorization to SU01 ,you may or may not have access to IdentityManagement .For accessing this screen security team need to add relevant roles in UME d/b.

Regards

Venkat

[former_member201275 · Accepted solution]

Thank you to all who answered my question. Great help.

[former_member184720 · Accepted solution]

What is the correction??

Did i ever say that user would have edit/disaply access to that page ? All i suggested was to visit the "user admin" page to check the assigned roles.

and i believe It doesn't matter if you have authorization or not, page can still be opened/accessed which'll return the error message "if we don't have enough authorization"

[Former Member · Accepted solution]

Hi,

Cool... .Please don't take it in other way.For the below statement ,I want to say there is no direct relation ship between SU01 access and IdentityManagement  screen access.

>>Just to add - If you don't have authorization to edit the user through "SU01", it would be the same from java stack too.

>> It doesn't matter if you have authorization or not, page can still be opened/accessed which'll return the error message "if we don't have enough authorization"

Yes .If we use direct url to access.If we try to search the same using nwa and above navigations that I provided you can't see those tabs to navigate.

Regards

Venkat

[former_member184720 · Accepted solution]

Np Venkat.

>>there is no direct relation ship between SU01 access and Identity Management  screen access.

i wasn't referring to the screen access but for modifying/assigning the roles.

>>>Yes .If we use direct url to access.If we try to search the same using nwa and above navigations that I provided you can't see those tabs to navigate.

Obviously yes.

[Former Member · Accepted solution]

Hi,

>>i wasn't referring to the screen access but for modifying/assigning the roles.

I think even for modifying/assigning there is no direct relation ship .Depends on what kind of data source (ABAP/UME)

For example I want to add SAP_XI_API_DISPLAY_J2EE role to UME d/b and I don't have edit access in SU01 but I have required role in UME d/b say Administrator role.I can still go a head and add the role to UME d/b.

Correct me If I'm wrong.

Regards

Venkat

[former_member184720 · Accepted solution]

That's correct. There are certain roles specific to Java engine which can only be assigned /managed through UME.