cancel
Showing results for 
Search instead for 
Did you mean: 

SAP System Landscape Directory (SLD) Privileges

Former Member
0 Kudos

Hello everyone,

I'm not really sure if this is the correct place to start this discussion, but any help and support is really appreciated.

The question is as follows: is it possible to define object privileges in SLD such as Products, Software Component Versions, Technical Systems and Business System for example, to define which user can modify a Technical System? I assume there's is a way by role and groups on the UME to define privileges to display or modify objects in whole SLD, but I don't know if on a lower level this is possible.

thanks in advance for help and support.

Regards,

Julio Cesar

Accepted Solutions (0)

Answers (1)

Answers (1)

Former Member
0 Kudos

Hello Julio,

I am not sure if you can define certain UME actions for objects within the SLD. These objects are usually maintained by a SLD administrator. There is however a way to create a new UME role and assign new SLD action to it.

In your Web browser, enter the URL of the Identity Management using the following format:http://<host>:<port>/useradmin .

Create user groups and UME roles of your choice and assign each UME role to the appropriate user group(s) as well as to the UME action(s). You can use the predefined UME roles as a template so create your own UME roles (as descibed in the table above).

If you want to create a UME role for SLD content synchronization or for SLD administration, you need to assign the Destination_Service_Write_Permission  UME action, which belongs to thetc~sec~destinations~service service, to your own UME role.

For more information about which UME actions there are available I suggest to use the following site:

Configuring SLD Security Roles - Security Guide for the SAP System Landscape Directory - SAP Library