Skip to Content
Mar 05, 2013 at 02:35 PM

Restrict UME Actions for a single Group / Role in Portal.


Dear SAP Community ,

We have a new requirement that we are not sure if its possible to achieve regarding identity management on Portal . ( This is for portal roles only )

We need to restrict for a specific user the posibility to assign / deassign just some specific roles for a single specific portal group and not be able to do any other actions regarding user management ( reset passwords , add to the group any other role than the requested ( as admin for example ) , assign the group to users ... ) .

We have tried using a copy of the standard role User Mangement Role and modifying the properties for the object , but as long as we give Manage Roles or Manage Groups actions , this user can do more than needed for that roles / specific group .

We also tried using the Import / export actions but we get the same results .

Can anyone provide a hint on this topic ?