Roles in XI

[swatantra_vijay3]

Hi

I have SAP_ALL and SAP_NEW profile in XI . Do i really need the some roles to work in IR and ID

Regards

Vijay

[Shabarish_Nair · Accepted solution]

ref: http://help.sap.com/saphelp_nw04/helpdata/en/f4/67b340be3dff5fe10000000a155106/content.htm

to know more abt the roles !!!

[former_member192343]

there are next roles in sap XI:

SAP_XI_ADMINISTRATOR_ABAP Exchange Infrastructure: Administration Tasks

SAP_XI_ADMINISTRATOR_J2EE Exchange Infrastructure: Administration Tasks

SAP_XI_APPL_SERV_USER Exchange Infrastructure: Service User for Application Systems

SAP_XI_BPE_ADMINISTRATOR_ABAP Exchange Infrastructure: BPE Administration Tasks

SAP_XI_BPE_CONFIGURATOR_ABAP Exchange Infrastructure: BPE Configuration Tasks

SAP_XI_BPE_MONITOR_ABAP Exchange Infrastructure: BPE Monitoring Tasks

SAP_XI_CMS_SERV_USER Exchange Infrastructure: Change Management Service User

SAP_XI_CONFIGURATOR_ABAP Exchange Infrastructure: Configuration Tasks

SAP_XI_CONFIGURATOR_J2EE Exchange Infrastructure: Configuration Tasks

SAP_XI_CONTENT_ORGANIZER_ABAP Exchange Infrastructure: Organizational Tasks

SAP_XI_CONTENT_ORGANIZER_J2EE Exchange Infrastructure: Organizational Tasks

SAP_XI_DEMOAPP Exchange Infrastructure: XI Demo Examples

SAP_XI_DEVELOPER_ABAP Exchange Infrastructure: Development and Design Tasks

SAP_XI_DEVELOPER_J2EE Exchange Infrastructure: Development and Design Tasks

SAP_XI_DISPLAY_USER_ABAP Exchange Infrastructure: Display

SAP_XI_DISPLAY_USER_J2EE Exchange Infrastructure: Display

SAP_XI_ID_SERV_USER Exchange Infrastructure: Integration Directory Service User

SAP_XI_IR_SERV_USER Exchange Infrastructure: Integration Repository Service User

SAP_XI_IS_SERV_USER Exchange Infrastructure: Integration Server Service User

SAP_XI_MESSAGE_MODIFY Exchange Infrastructure: Change Messages

SAP_XI_MONITOR_ABAP Exchange Infrastructure: Monitoring Tasks

SAP_XI_MONITOR_J2EE Exchange Infrastructure: Monitoring Tasks

SAP_XI_RWB_SERV_USER Exchange Infrastructure: Service User for Runtime Workbench

SAP_XI_SUPPORT_ABAP Exchange Infrastructure: Support

SAP_XI_SUPPORT_J2EE Exchange Infrastructure: Support

for IR and ID: SAP_XI_ID_SERV_USER and SAP_XI_IR_SERV_USER

or you can set sap_xi_administrator ..it depends on user tasks.

but sap_all and sap_new is not enough

[Former Member]

Hi,

See the below link

/people/michal.krawczyk2/blog/2005/05/25/xi-how-to-add-authorizations-to-repository-objects

http://help.sap.com/saphelp_nw04/helpdata/en/f4/67b340be3dff5fe10000000a155106/content.htm

Regards

Chilla

[former_member529475]

HI Vijay

for roles for XI dev have a look at this page:

http://www.erpgenie.com/sap/netweaver/xi/xiauthorizations.htm

Cheers..

Vasu

<i>** Reward Points if found useful **</i>

[former_member335553]

Hi

SAP_SLD_DEVELOPER

SAP_XI_DEMOAPP

SAP_XI_DEVELOPER_ABAP

SAP_XI_DEVELOPER_J2EE

for roles for XI dev have a look at this page:

http://www.erpgenie.com/sap/netweaver/xi/xiauthorizations.htm

from:

http://help.sap.com/saphelp_sm32/helpdata/de/c4/51104159ecef23e10000000a155106/frameset.htm

use: SAP_XI_ADMINISTRATOR to access RWB

[swatantra_vijay3]

Are these roles are not covered in profile SAP_ALL and SAP_NEW

Regards

Vijay

[former_member335553]

Hi

I think u don't need to

refer this

http://help.sap.com/saphelp_nw04/helpdata/en/78/7a553efd234644e10000000a114084/frameset.htm

>> refer this

This composite profile contains a single profile for each release that contains the authorizations that the users require to be able to continue using the functions that they have used until now, but which are protected with new authorization checks. However, you should not leave this profile active for a long period of time.

We recommend that you perform the following steps:

...

1. After the upgrade, delete the SAP_NEW_* profiles from the composite profile SAP_NEW for releases before the last revision of your authorization concept.

2. Assign the composite profile SAP_NEW to all users. This means that they can continue to use the functions that they have used until now.

3. Distribute the authorizations contained in the SAP_NEW single profiles to the roles or profiles that you use productively and maintain the authorization values.

4. Delete the profile assignment for SAP_NEW and the SAP_NEW profile.

A long list of SAP_NEW profiles (for example, after multiple upgrades) indicates that it is time to revise and redefine your authorization concept.