Setting Up Privileges, Roles and Groups 

The configuration wizard uses the described roles and groups for the SAP NetWeaver Development Infrastructure (NWDI). Here you find information how to manually configure these users and groups.

UME Roles

UME Roles

UME Role	UME Action
NWDI.Administrator	CBS.Administrator CMS.Administrate
NWDI.Developer	CBS.Developer CMS.Display CMS.ExportOwn

UME Groups

...

       1.      Create the User Management Engine (UME) groups NWDI.Administrators and NWDI.Developers in the user management.

       2.      Assign the roles as specified in table UME Groups:

UME Groups

Group	UME Role
NWDI.Administrators	NWDI.Administrator
NWDI.Developers	NWDI.Developer

Test User

To be able to work with the NWDI, assign the Administrator user to the NWDI.Administrators group.

For security reasons, you should not use the administrator for productive use. Set up a dedicated user in the user management instead.

CMS Administrator CMSadm

For the NWDI configuration, you must create a CMS user. This user requires the rights assigned to group NWDI.Administrators.

Assigning SLD Roles to Groups

To manually perform this step you have to assign SLD roles to the groups: component sap.com/com.sap.lcr*sld.

Groups and Roles

Group	Security Role
NWDI.Administrators	LcrInstanceWriterAll
NWDI.Developers	LcrInstanceWriterNR

..

       1.      To set up user privileges for the AS Java, open Visual Administrator tool and log on as an administrator.

       2.      Open the navigation tree on the left at Server ® Services ® Security Provider.

       3.      In the right-hand side, choose the tab Runtime ® Policy Configuration ® Security Roles.

       4.      In the Components section, choose the application sap.com/com.sap.lcr*sld.

       5.      Under Security Roles, select the security role LcrInstanceWriterAll.

       6.      Under Mappings  ® Groups field choose Add.

       7.      In the dialog that appears select the Groups tab page. Choose Search.

A list of the available UME groups appears.

       8.      Select the group NWDI.Administrators and choose OK.

       9.      Assign the LcrInstanceWriterNR security role to the NWDI.Developers group.