Defining Authorizations

Use

You can define and edit authorizations for access to objects in the Integration Directory. You can either define authorizations for all objects in the Integration Directory, or for objects of a particular folder.

With an authorization, you define one or more permitted actions for a selection of users. A selection of users can be defined by one single user, a group, or a role.

When accessing an object, the system first checks the authorizations for the folder in which the object is located. If no authorizations are defined, the default setting takes effect.

You can define that authorizations are inherited by underlying folders.

Prerequisites

  • When defining authorizations, you access users, roles, and groups from the assigned user management.

  • You have activated the required configuration parameter (depends on installation option):

    • Dual-Stack Installation: You have activated the following exchange profile parameter: com.sap.aii.ib.server.acl.enable.

    • Advanced Adapter Engine Extended: You have activated the following Java system property of service XPI Service: AII Config Service: com.sap.aii.ib.server.acl.enable.

  • You have the execute the following configuration steps to be able to assign enhanced actions to ACLs:

    1. Call SAP NetWeaver Administrator.

    2. On the Configurationtab page, choose Start of the navigation pathScenarios Next navigation step Configuration WizardEnd of the navigation path.

    3. Choose All Configuration Tasksand search for Configure Advanced Authorization(under Find).

    4. Execute the configuration step.

Procedure

Editing Default Settings for Authorizations

You can define a default setting for authorizations that are then applied to all objects that no explicit authorizations have been defined for.

  1. In the Integration Builder main menu choose Start of the navigation pathTools Next navigation step Default Settings for AuthorizationsEnd of the navigation path.

  2. Edit the authorizations that you want to define as the default setting. To do this, proceed as described below under Defining Authorizations.

For the default settings you can also define which user or group is to be get authorization to import and export objects.

Defining Authorizations

  1. Choose the folder view in the navigation area of the Integration Directory.

  2. Position the cursor on the folder for which you want to edit the authorizations.

  3. In the context menu, choose Edit Authorizations.

  4. To create a new authorization, add a new line to the table.

  5. In the Typecolumn, enter whether you want to specify the authorization for a user, group, or role.

  6. In the Namecolumn, select the name of the user, group, or role.

  7. In the Actionscolumn, enter the permitted actions.

    By default, you can select the following actions:

    • Write

    • Editing Authorizations

    When you have made the necessary configuration settings (see Prerequisites), you can select the following enhanced actions:

    • Create subordinate elements

      (create objects or directories subordinate to directory)

    • Edit subordinate elements

      (edit objects or directories subordinate to directory)

    • Delete subordinate elements

      (delete objects or directories subordinate to directory)

    • Edit directory

      (rename the current directory)

    • Delete directory

      (delete the current directory)

    The roles necessary to execute the action are displayed from the Standard User Management.

  8. Choose Copy.

Inherit Authorizations

You have the following options:

  • Substructures inherit all authorizations

  • Inherit Authorizations Selectively

    Here you define that selected authorizations are inherited by the current directory from superordinate directory.

Select the corresponding pushbutton to call the function that you require.