Setting Up Privileges, Roles and Groups 

Use

This is a configuration step that you have to take to manually configure SAP NetWeaver Development Infrastructure (NWDI) only if the automatic configuration fails.

Procedure

The configuration wizard uses the described roles and groups for the NWDI. Here you can find information about manually configuring these users and groups.

UME Roles

UME Roles

UME Role	UME Action
NWDI.Administrator	CBS.Administrator CMS.Administrate
NWDI.Developer	CBS.Developer CMS.Display CMS.ExportOwn

UME Groups

...

       1.      Create the User Management Engine (UME) groups NWDI.Administrators and NWDI.Developers in the user management.

       2.      Assign the roles as specified in table UME Groups:

UME Groups

Group	UME Role
NWDI.Administrators	NWDI.Administrator
NWDI.Developers	NWDI.Developer

Test User

To be able to work with the NWDI, assign the Administrator user to the NWDI.Administrators group.

For security reasons, you should not use the administrator for productive use. Set up a dedicated user in the user management instead.

CMS Administrator CMSadm

For the NWDI configuration, you must create a CMS user. This user requires the rights assigned to group NWDI.Administrators.

Assigning SLD Roles to Groups

To manually perform this step you have to assign SLD roles to the groups: use component sap.com/com.sap.lcr*sld.

Note that the settings of the SLD security roles must be made on the server where the SLD is running.

Groups and Roles

Group	Security Role
NWDI.Administrators	LcrInstanceWriterAll
NWDI.Developers	LcrInstanceWriterNR

..

       1.      To set up user privileges for the AS Java, open the isual Administrator tool and log on as an administrator.

       2.      Open the navigation tree on the left by choosing Server → Services → Security Provider.

       3.      In the right-hand side, choose the tab Runtime → Policy Configuration → Security Roles.

       4.      In the Components section, choose the application sap.com/com.sap.lcr*sld.

       5.      Under Security Roles, select the security role LcrInstanceWriterAll.

       6.      Under Mappings  → Groups field choose Add.

       7.      In the dialog that appears, select the Groups tab page. Choose Search.

A list of the available UME groups appears.

       8.      Select the group NWDI.Administrators and choose OK.

       9.      Assign the LcrInstanceWriterNR security role to the NWDI.Developers group.

CM Services

See Authorizations in Change Management Services.