Assigning Objects to Roles or Groups 

Use

You can assign the objects (users, roles, and groups) to roles and groups as follows:

·        Roles

¡        Users

¡        Groups

¡        Actions

·        Groups

...

¡        Users

¡        Groups

¡        Roles

Roles

Roles reflect a user’s function. By assigning a role to a user, you provide the user with the authorizations or functions that he or she needs to fulfill specific tasks. You can also indirectly assign a role to a user by assigning a group to which the user belongs to the role.

You can display the following types of roles:

·        Portal roles

These roles define how content is grouped together and how it is displayed in the SAP NetWeaver portal. By assigning a user or group to a portal role, you define which content that user or group sees in the portal. During assignment, the system checks the Role Assigner permission to see if you have the proper rights to assign the role.

·        UME roles

These roles define a set of authorizations. By assigning a user or group to a UME role, you grant the set of authorizations that the role defines to the assigned user or group.

For more information about types of roles, see UME Roles and Portal Roles.

Do not assign roles that are in the SAP namespace, for example, roles that begin with com.sap.portals. Instead, assign users to delta links of roles that are in the SAP namespace. This prevents your changes from being overwritten when you upgrade your portal. For more information, see Delta Links and SAP Content Objects.

By default, roles that contain the SAP namespace com.sap.portals are not displayed in the role assignment function.

Groups

A group is a collection of users and usually serves to create sets of users who have something in common, for example, users who work in the same department or users who have similar tasks in a company.  Groups make it easier to manage users, for example, you can assign a role to a group instead of assigning the role to each user individually.

It is also possible to create a hierarchy of groups, where groups are assigned to other groups. This can serve to represent the hierarchy in a company, for example.

If you are using AS for ABAP as a data source, ABAP roles appear as groups. For more information, see SAP Web AS ABAP User Management as Data Source.

Restrictions

Restrictions to group assignments (if any) depend on the data source where the objects reside. For more information, see the following:

·        Database Only as Data Source

·        LDAP Directory as Data Source

·        SAP Web AS ABAP User Management as Data Source

Prerequisites

To assign objects you must be assigned a role that includes the relevant actions. For example, to assign users to a role, you must have the right to manage both users and roles. Standard roles may include such actions. The UME role Administrator includes all necessary actions.

Actions Required to Assign Objects

To Work with	Action Required (Any One Action)
Users	UME Manage_All UME Manage_All_Companies UME Manage_Users
Groups	UME Manage_All UME Manage_Groups
Roles	UME Manage_All UME Manage_Roles

See also:

Standard UME Actions

Procedure

...

       1.      Search for a role or group.

       2.      In the search results list, select the role or group.

       3.      Choose Modify.

       4.      Choose Assigned Users, Assigned Groups, or Assigned Roles  as required.

       5.      Under Available Users, Available Groups, or Available Roles, search for the object you want to assign to the role or group.

       6.      Select the object from the search results list and choose Add.

The object appears in the list of assigned objects. If you make a mistake or want to remove an object, select the object and choose Remove.

       7.      Choose Save.