Role and User Distribution to the SAP SystemLocate this document in the navigation structure

Use

SAP NetWeaver Portal provides you with functions for the creation and administration of roles and users.

To access connected ABAP-based back-end systems with the roles managed in the portal, you must transfer these role definitions and user assignments to the ABAP systems. For this distribution process, a component in the portal is available, which allows you to distribute the portal roles and user assignments to the ABAP system.

Data on the following services can be transferred from the portal to the ABAP system:

  • Transactions

  • Nontransactional data (for example, TADIR services or RFC-enabled function modules) in the form of authorization trace IDs

On the ABAP system side, transaction WP3R is available. This enables you to assign a corresponding role in the ABAP system to users and their assigned portal roles. The corresponding role (authorization role) contains the authorizations that are required to perform certain services, for example, transactions, from within the portal.

Prerequisites

  • Up to release SAP NetWeaver Application Server (AS) ABAP 6.20, you must import the SAP Enterprise Portal plug-in 6.

    Download the plug-in from the SAP Service Marketplace at Start of the navigation path http://service.sap.com/swdc Next navigation step (Downloads tab) Next navigation step SAP Installations & Upgrades Next navigation step  Entry by Application Group Next navigation step  Plug-Ins Next navigation step  SAP Enterprise Portal Plug-In Next navigation step  WP-PI Next navigation step  <AS ABAP release> Next navigation step  Installation End of the navigation path. See also SAP Note 723189 Information published on SAP site.

  • From release AS ABAP 6.40, the functions of the SAP Enterprise Portal plug-in are included in PI_BASIS, no import necessary.

  • For information about the necessary authorizations, see Authorizations .

Constraints

  • Release 4.0

    The portal data can only be displayed. You can neither create authorization roles nor assign roles to users.

  • Release 4.5

    You cannot assign roles to users if the central user administration is used with global role assignment and a central system of Release 4.5.

  • Release 6.20

    Support for default authorization values for services is provided through support packages. You can find out the current status in SAP Note 640759.

  • Enterprise Portal Plug-In < 6.0

    If you use an Enterprise Portal Plug-In < 6.0 and your Basis release is earlier than 6.20, the system does not support the transfer of authorization trace IDs.

The documentation on role and user distribution is divided into the following sections: