Administrative Roles in SMP 3.0 SP11

[Former Member]

Hello Experts,

For a customer I have to create several local Admin users to access the Admin Console of SMP. Some of them should have access to all of the configuration - some of them should only be able to do some basic "helpdesk" duties.

I created a full admin similar to the existing "smpAdmin" I could find in the Security Profile "admin"

The roles "Administrator" and "Notification User" are similar to the existing smpAdmin

This is working fine.

But how am I creating a user with lower rights as full administrative rights? Which role I have to write in the "Roles" field.

Or am I completely wrong there and I have to create e new Security Profile and have to add the users there?

Could you please be so kind an point me to the right direction?

Thank you

Ernst

[Jitendra_Kansal · Accepted solution]

Hello,

If you are creating users+roles manually, then it has to be done in same way as you are doing

Admin->... and adding 'system login' authentication providers

Administrator: full access to SMP Admin cockpit

HELPDESK: read access to SMP Admin cockpit

My advise to you rather than creating and assigning roles manually, setup a AD/LDAP and then assign users there itself.

check this blog:

Regards,

JK

[Former Member · Accepted solution]

Thank you Jitendra,

Reading your  blog I was able to create an "helpdesk" user with readonly rights.

Unfortunately there is no directory service available - our first idea was to use SAML authentication, but according to SAP Support currently also that method is not supported.

Is there somewhere an overview which "roles" are available for the SMP admins. Currently I know "Administrator", "Helpdesk" and "Notification User". Is there something between Administrator and Helpdesk?

Thanks

Ernst

[Jitendra_Kansal · Accepted solution]

check this one SAP Mobile Platform Logical Roles - Administration Overview - SAP Library