Synchronize the roles in SAP ECC with SAP EP

[Former Member]

Hi,

I would like to know what can be the approaches to synchronize the roles in SAP ECC with SAP EP.

I can think of alternatives such as

1) Creating same roles in EP that exist in ECC

2) User Mapping.

Please provide your views and and also approaches to work when the roles in ECC and EP are different.

Thanks.

[Former Member · Accepted solution]

Whenever this comes up, I ask "what are you really trying to do"? There is really no point in replicating an ABAP role as a portal role - it adds no business value and is a pain to maintain. Every time you change an ABAP role do you want to upload that role to the portal? Probably not.

As mentioned, I suggest using role assignment in ABAP to work out group assignment in the portal. This does make sense. It is best done by having your portal UME as ABAP, but you can also create LDAP groups based on ABAP role assignments.

[Former Member]

Hi Veena,

Follow the link below to check the process of synchronizing the ECC roles with that of the portal.

Link: [https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/f1cbe7ee-0901-0010-12b9-e6c74d94e132]

Hope it helps.

Regards,

Gourav.

[hofmann]

Hi,

to synchronize the roles you can use CUA. In CUA, you define 1 system as a central store for user administration and then distribute the users + roles + groups to the systems. You configure your EP and ECC to receive the user data from that system, therefor, you user information is in sync.

SAP Help: http://help.sap.com/saphelp_nw70/helpdata/EN/07/622441cd87a12be10000000a1550b0/frameset.htm

For more information, there is an SAP product: Identity Management.

SDN: https://www.sdn.sap.com/irj/sdn/nw-identitymanagement

To upload ECC roles to EP:

SDN Article: https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/06a0e690-0201-0010-4b9f-e529c345...

User Mapping is for logging in to a backend, when the userid in the backend is different from the userid in the portal

SAP Help: http://help.sap.com/saphelp_nw04s/helpdata/en/f8/3b514ca29011d5bdeb006094191908/frameset.htm

br,

Tobias

[former_member206159]

Hi,

you can import the ECC roles in portal. They appear in portal as groups.

You have to assign this group to a role in portal. After that assing this role to portal user.

Portal role holds iviews/pages/worksets that are defined.

Raghu