Setting Authorizations in Business Rules Management

The NetWeaver Administrator has the following components :

Business Rules Access Control Management - This allows the administrator to set access permissions on a BRM DC for a given user role. These permissions determine the access level a user with a particular role has when using the rules manager.
Rules Business Logs - This logs information about the execution of rules, decision tables, and rule flows. An administrator can view these logs based on events, and date ranges.

You can do the following tasks with these components:

Log on to the NetWeaver Administrator by using the link http://<servername>:<Port>/nwa .
Choose the Operation Management tab.
The Operation Management tab page opens.
Choose Identity Management.
The Identity Management: Overview page opens.
Creating a user
1. Under the Search section, choose the Create User button.
  The Details section opens.
2. Enter the following data:
  - Username
  - Password
  - Name
3. Choose Save.
  The username appears in a table under the Search section.
Creating a Role
1. Choose Role from the drop down menu next to the Search Criteria field.
2. Choose the Create Role button.
  The Details section opens.
3. Enter a name for the role in the Unique Name field.
4. Choose Save.
  The role appears in the table under the Search section.

Locate the following pre-shipped actions :

Component	Preshipped Actions	Description
Rules Manager	SAP_BRM_DOWNLOAD_RULES	The action allows the user to have permissions to download the rules content from the repository to local NWDS. In NWDS Rules Composer perspective you can in the context menu of the Project Resources node you should see an option:Download Runtime Version. This asks for user verification. If the user does not have this action assigned to one of its roles than the process will fail.
	SAP_BRM_VIEW_RULE_CONTENT	The action allows the user to have permissions to view all the rules projects in the repository in rules manager. If you assign this action to a role you do not have to add permissions for all the projects separately from the Business Rules Access Control Management (BR ACM) tab in Identity Management NWA screen.
	SAP_BRM_APPROVE_RULE	The action allows user to have permissions to approve a particular version of a rule to be the live or production version. More Information: Setting a Role to Approve a Ruleset
Business Rules Access Control Management	NWA_SUPERADMIN_BRMS_ACM	The action allows user to have edit permissions in the BR ACM application.
Business Rules Access Control Management	NWA_READONLY_BRMS_ACM	The action allows the user to view the business rules access management application.
Rules Business Logs	NWA_SUPERADMIN_BRMS_BUSLOG	These actions allow the user to view the BRM Business Logging application in NWA.
Rules Business Logs	NWA_READONLY_BRMS_BUSLOG

Choose Role from the drop down menu next to the Search Criteria field.
Enter the name of the role you created in the text field and choose theGo button.
The role appears in the table.
Select the role.
The details section appears.
In the Details of Role <role name> section, choose the Modify button.
Choose the Assigned Actions tab.
Enter the pre-shipped action name in the Get field.
Choose Go.
The action appears in the table.
Select the action and choose the Add button.
Choose Save.

Enter any of the following pre-shipped role name in the text field and choose the Go button.

Preshipped Roles	Assigned Actions
SAP_BRM_NWA_ADMIN	NWA_SUPERADMIN_BRMS_BUSLOG, SAP_BRM_DOWNLOAD_RULES and NWA_SUPERADMIN_BRMS_ACM
SAP_BRM_NWA_READONLY	NWA_READONLY_BRMS_BUSLOG and NWA_READONLY_BRMS_ACM
SAP_BRM_READONLY	SAP_BRM_VIEW_RULE_CONTENT
SAP_BRM_ADMIN	SAP_BRM_VIEW_RULE_CONTENT, SAP_BRM_DOWNLOAD_RULES and SAP_BRM_APPROVE_RULE

Note Note

There are no pre-shipped roles for Rules Business Logs.

End of the note.

Choose Role from the drop down menu next to the Search Criteria field.
Enter a preshipped role name in the text field and choose the Go button.
Choose Save.
The role appears in the table under the Search section.
In the Details of Role <role name> section, choose the Modify button.
Choose the Assigned Users tab.
Enter the username in the Search Criteria field and choose Go.
The username appears in the table.
Select the username and choose the Add button.
Choose Save.