Setting Up Privileges, Roles and Groups 

Use

This is a configuration steps that you have to take to manually configure SAP NetWeaver Development Infrastructure (NWDI), only in case the automatic configuration fails.

The configuration wizard uses the described roles and groups for the SAP NetWeaver Development Infrastructure (NWDI). Here you find information about manually performing this step.

Procedure

1. Create UME roles

Create the user management engine (UME) security roles SAP_DI_ADMINISTRATOR and SAP_DI_DEVELOPER.

2. Create default users and groups

Create the following NWDI default users.

●      NWDI_ADM – for administrative purposes.

●      NWDI_DEV – for developers.

●      NWDI_CMSADM – a communication user for all NWDI server components.

Create the following NWDI default groups, such as:

●      NWDI.Administrators – for administrators.

●      NWDI.Developers – for developers.

3. Manage user assignment

●      Assign the user NWDI_ADM and NWDI_CMSADM to NWDI.Administrators.

●      Assign NWDI_DEV to NWDI.Developers.

4. Manage UME roles and groups mapping

●      Map the group NWDI.Administrators to UME role SAP_DI_ADMINISTRATOR and SAP_SLD_ORGANIZER.

●      Map the group NWDI.Developers to UME SAP_DI_DEVELOPER and SAP_SLD_DEVELOPER.

5. Manage DTR Access Control List (ACL) setting

...

       1.      For the DTR root”/”, assign group NWDI.Administrators *all* privileges, and assign group NWDI.Developers *read/write/checkin* privileges.

       2.      For the DTR folder „/system-tools/administration“, assign group NWDI.Administrators *all* privileges with “ignore-inheritance”.

       3.      For the folder „/sysconfig“, assign group NWDI.Administrators *all* privileges with “ignore-inheritance”.

       4.      For the folder „/ws/system “, assign group NWDI.Administrators *all* privileges with “ignore-inheritance”.